last executing test programs: 23.666460158s ago: executing program 0 (id=2899): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005000000080001"], 0x20}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000200)="4b9ed2e9bdd3609db52e5e9468b33da1700f2c1d14a971906fe6c5544ee94bea285d2c7498a8b9e31993ae83dadbf573229c1bd272aa89bf3a8dfbd88bbd367658def5b1d39a254405e410", &(0x7f0000000340)=@tcp=r2, 0x1}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'perf_event'}, {0x2b, 'net_cls'}]}, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40005200060010"], 0x24}}, 0x0) 23.335023733s ago: executing program 0 (id=2906): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_bt_hci(r1, 0x400448e4, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040), 0x6) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x2, 0x3, 0xa, 0x0, 0x4}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x24, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 23.02071213s ago: executing program 0 (id=2913): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x54, 0x93d, 0x0, 0x0, {0x7, r2}}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r3, &(0x7f0000000300), 0x0}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r4) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r5, 0xf002135a49ffa319, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r6 = socket(0x1f, 0x3, 0xfffffffc) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) 22.936868479s ago: executing program 0 (id=2915): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9}, 0x1c, 0x0}, 0x4b12) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x2, 0x8, 0x4, 0x401, 0x76965ecb, 0x7, r5}, 0x20) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000000)) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd601e1907000c2f00fe8000000000000000000000000000bbff020000000000000000000000000001000022ebff0090780100000096f811fbeffd2247f56c37380fa650ea13613931407614"], 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x11, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0xff, 0x40, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 22.794616892s ago: executing program 0 (id=2918): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0xd, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0) 17.35602812s ago: executing program 2 (id=2965): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x4, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xfc, 0x42, 0x300, 0x70bd25, 0x25dfdbff, {0x12}, [@generic="0dc476b19a15db499661eb7185c7fb8cb145ed14896e1692714470c68f6a33d63c2ec8dfa10bacef2c7da631342fd28affb83cf647e8f69087713d0f8cc23bff3ecb69ebbf", @typed={0x4, 0xb6}, @generic="787b2a76214526a2b14c91949e7589afb93f792d983b1e92d2903131d79a9cb8423dbdfd293d91bfe6eb", @generic="5380a68b283cb933480794606efd723f787d07175ef691944d7006db0ebef81209e41cbd12f61925609eeff9f7c8025d3ed534887b853d5d89e871905d3f9595173c4f120a53a1c92f5c19afad37eaed33103617543271764bdc8a2812ad1c128119b7c89fd4df779ce736", @nested={0x8, 0xd9, 0x0, 0x1, [@nested={0x4, 0x22}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000814}, 0x81) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000200)=0x7b8d, 0x4) 17.04807654s ago: executing program 2 (id=2969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x400, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xffff, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=ANY=[@ANYBLOB="08ba06000802111000009ad0f4428095a634aa68cbfe2ad106004780"], 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r8, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x3, 0x11, 0x2}}]}, 0x4c}}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c181}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x60, r10, 0x220, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x10f385bbedc1e50a}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9401}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3ff}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) connect$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) 16.112722269s ago: executing program 2 (id=2981): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000050000000000"], 0x50) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000240)={@broadcast, @dev, 0x0}, &(0x7f00000004c0)=0xc) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x93e0, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bind$unix(r3, &(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x15, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x146, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0x5, 0x7, 0x5, 0xfffffffffffffff8}, @kfunc, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x4c, &(0x7f0000000340)=""/76, 0x40f00, 0x25, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xa, 0x1, 0x7fffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r6, r7, r1, r8, r6], &(0x7f00000006c0)=[{0x0, 0x5, 0x6, 0x7}, {0x5, 0x3, 0x7, 0x2}], 0x10, 0x3e18}, 0x94) unshare(0x6a040000) socket(0x8, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r11 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xac}}, 0x48004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r14}, 0x94) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r15, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 13.193201676s ago: executing program 1 (id=3001): syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @random='\x00 \x00\x00\x00\b', @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xa2, [@multicast2]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240), 0xc30, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) close(0x3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f0000000300)="0454e09dcf788a7bd74593082bda2d5bca751f3ea0bcd2", &(0x7f0000000540)=""/182, &(0x7f0000000340)="3c828603b9f3eb97bb92db1da168e789d78b171e3571ebc8474107d5dd31caa2b6d29f659a5a4f87d955ee59f256542241fd85aeae2d2114", &(0x7f0000000900)="61f37d41228bcb14d79a499fc2c6a40c95aa579edcaaf8e5f1363bdd9f8c972a60347f88ae1591c0b072a6e5b696278cc2661bf9107e6e71630beb38895b218dd858b794c5a9ea60636a8cb70f0fabcb474675f9c23d00c4422a6f230a940d9592a4d342bdbfca80cda6b4f50532c1d8ee6a6f7f42ff9c54f827e5b96c15a1ed35a3105df45c7f0c5eaa813e356616a289146210476e47618bc4831faee5e5b8e8d81ceeaa1f3195868907143257aa6af29c42b842419b97e11cf8c7a7957d4259e5d75c55c0b9d6c797742d24bbe9db6a05d8ab60e3b811bec963e59a8512dbb90718be3a2d012ed20c74df8587cadaf3cb5943b230", 0x3, r2}, 0x38) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0x410, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xa, 0xa}, {0xfff1, 0x10}, {0x1, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0xffff}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xfff3}}, @TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000340)=[{}], 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@multicast2, @in=@loopback, 0x4e24, 0xe, 0x4e23, 0x95, 0x2, 0x20, 0x80, 0x33, r4, r8}, {0x107, 0xa90, 0x2, 0x9, 0xc, 0x4, 0x7b, 0x7}, {0xae0, 0x401, 0x8, 0x80000001}, 0x4cc6, 0x0, 0x1, 0x1, 0x2}, {{@in=@multicast1, 0x4d6, 0x33}, 0xa, @in6=@mcast1, 0x3506, 0x2, 0x2, 0x2, 0xafe7, 0xd3c1, 0xfffff001}}, 0xe8) 12.504896837s ago: executing program 1 (id=3005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000240)="7d2371115107f171844664966c7b4091f4a0ea10dc11cde5ca83a343f041cbcc0e38bab9d8eca40f33212671f6ea152d8ab7477fd9c725a3553553f4010a0b57334934bf1d4f05dd307d859e38f3e3e9676a45a79b01", 0x56}], 0x1) getsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000440), 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001f40)={'dummy0\x00', &(0x7f0000001f00)=@ethtool_sfeatures={0x3b, 0x2, [{0xa, 0x4}, {0x0, 0x2}]}}) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0200fe00000000b57e586e79f42da3cb66000000284816af631a2c7b53f75078bc41ec2f9c6d896452cd506bd8a77096954e324b341446deeaba266f2c41118197da686f907411bbbd95eab856653388dbb692fd164b6cd97caedc1dab78ee41f7d33793e960776e5addec5366c07ad6a575f0c200f088389c4f27b7c453", @ANYBLOB="22caf854ca57cd79a2180d384ab9b74c7db584e934e82f022c65b2d99338835978640c319e6e73f09a746a71d1d7dc7ef29a3950705b89a07e13bcb2d527bca323a1a7f4d5dd0c8e979fdf6f4bd03dc5c1b5eb1035673e61d0bcd4857bc95a", @ANYRES32=0x0, @ANYBLOB="000000000000002000000000000000000000000000000000000008006c8d7b37a5dc82fb41789e8cba232298a84adc9f24cdcc52b8949c3d0f459b2fc96288fa1c5c2adae693b4e1"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="00032000ff0700008500000000000000000100000000000000000006b1c4f36b3723e7add9be9a32f2b7842cc7aac121b1b72a6ddc7a6946e6064c26bfc1ca0319da82cda17c813ce0d1b923a12feba3c6e7dbd9a18e5b6b77754aad30d3491a436bf386c8bb191c9191d296f649def34388b2fe52085e798da135fa06d59fb3cf8e426c854184f3df3bfe7577fc08401135e0903fd8297447e47e47cd8aa4a9eecc70eb751ed83a4a5be908d0aba5cc02e78b9e55a79c61da544dff178583"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x6c, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [0x7, 0x7], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0xfffffffc}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xe}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000300)) 12.206990998s ago: executing program 2 (id=3007): r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b40)={0x8, {{0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x8, [{{0xa, 0x4e24, 0x0, @local}}, {{0xa, 0x4e23, 0x7800000, @empty, 0x39}}, {{0xa, 0x4800, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4dc4}}, {{0xa, 0x4e20, 0x200, @private1={0xfc, 0x1, '\x00', 0x6}, 0xf}}, {{0xa, 0x4e24, 0x40f7, @mcast2, 0x5}}, {{0xa, 0x4e22, 0x5, @empty, 0x2}}, {{0xa, 0x4e22, 0x4, @mcast2, 0xfffffe01}}, {{0xa, 0x4e23, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffff2c3}}]}, 0x490) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x2}, 0x62) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f29f057acc54d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000000)={0x45, 0x6, 0xb, 0xc, 0x3, 0x81}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000000000000000000000000ff0018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000239bc6b7b70400000000000085000000550000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.104201579s ago: executing program 1 (id=3010): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f00000002c0), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYBLOB="38000000200001000000000000ee0000020000000000000000000000140003006c6f"], 0x38}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.853638594s ago: executing program 1 (id=3013): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1c0100d6", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25020000000500020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x1, 0x4, 0x4, 0xc7, 0x6]}, &(0x7f0000000000)=0x78) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000005140)={r1}) r5 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8=r4], &(0x7f0000000040)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) 11.733714365s ago: executing program 1 (id=3014): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x5, @remote, 0x441, 0x2}, 0x20) accept4(r0, 0x0, &(0x7f0000000040), 0x800) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0xd1cf67c1e29540df, 0x40000, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x45e02}, [@IFLA_TXQLEN={0x8, 0xd, 0x802}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008054}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0xd1cf67c1e29540df, 0x40000, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x45e02}, [@IFLA_TXQLEN={0x8, 0xd, 0x802}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008054}, 0x80) 11.600681897s ago: executing program 2 (id=3015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x40880) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x312) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="8f86e62a00000000000001000800"], 0x14}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC, @ANYRESHEX=r1], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000002a00)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x40880) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x312) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r2) (async) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="8f86e62a00000000000001000800"], 0x14}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC, @ANYRESHEX=r1], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x1}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000002a00)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) (async) 11.396885821s ago: executing program 1 (id=3018): socket$inet6(0xa, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYRES8, @ANYRES16=r1, @ANYRESDEC=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x44004) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0104000000000000000002000000600004805c0001800b00010065787468647200004c00028008000540000000e1080001400000000f080003400000005b08000440000000b605000200830000000800074000000009080001400000000108000340000000fe08000340000000540900010073797a30000000000900020073797a32"], 0xb4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="01000000e4d46f91ce1d774bea928c47ce3f662efae97eef2bf4c2fe218561f4341ad5c5140bc5d55693fad2d6d17c8ed75b5556647bf770967834a3ff5700000000000000c18200"/82, @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf253f00000050005e800800030004000000080007005501000008000200090000002000010008000000a7f30000050000000f00000001000000e10000000800000014000100060000000300000005000000000001000c005e800800030000000000"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf251500000008000300", @ANYRES32, @ANYBLOB="0c00aa9a481eecb2a36f767d46206653865803a66c59a1a4c71ef9e51f2fcde5a8e45231119aa1b566e7b72fc23cc4f13ad4f41f9a49082f780318c14b926d05dadb07846c808db7eaca4694c7"], 0x24}, 0x1, 0x0, 0x0, 0x4040840}, 0x854) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000700)=r9, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r9, 0x0, 0x0}, 0x10) unshare(0x20040600) r10 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x80088a02, &(0x7f0000000000)) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r11, 0x11, 0x1, &(0x7f00000000c0), 0x4) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r12, 0x6, 0x5, 0x0, &(0x7f0000003600)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRESHEX=r4, @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) 10.975234522s ago: executing program 32 (id=3018): socket$inet6(0xa, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYRES8, @ANYRES16=r1, @ANYRESDEC=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x44004) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0104000000000000000002000000600004805c0001800b00010065787468647200004c00028008000540000000e1080001400000000f080003400000005b08000440000000b605000200830000000800074000000009080001400000000108000340000000fe08000340000000540900010073797a30000000000900020073797a32"], 0xb4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="01000000e4d46f91ce1d774bea928c47ce3f662efae97eef2bf4c2fe218561f4341ad5c5140bc5d55693fad2d6d17c8ed75b5556647bf770967834a3ff5700000000000000c18200"/82, @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf253f00000050005e800800030004000000080007005501000008000200090000002000010008000000a7f30000050000000f00000001000000e10000000800000014000100060000000300000005000000000001000c005e800800030000000000"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf251500000008000300", @ANYRES32, @ANYBLOB="0c00aa9a481eecb2a36f767d46206653865803a66c59a1a4c71ef9e51f2fcde5a8e45231119aa1b566e7b72fc23cc4f13ad4f41f9a49082f780318c14b926d05dadb07846c808db7eaca4694c7"], 0x24}, 0x1, 0x0, 0x0, 0x4040840}, 0x854) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000700)=r9, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r9, 0x0, 0x0}, 0x10) unshare(0x20040600) r10 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x80088a02, &(0x7f0000000000)) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r11, 0x11, 0x1, &(0x7f00000000c0), 0x4) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r12, 0x6, 0x5, 0x0, &(0x7f0000003600)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRESHEX=r4, @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) 10.932773578s ago: executing program 0 (id=2921): syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="bd4e56d45303aaaaaaaaaa0008060001080006040000ffffffffffffac141400aaaaaaaaaaaae0000002b8d1f67ceab7018429be596c40d9083a3b7f4101fb5cf6deeff3a17a74a7b26b4ec406ccc2bde3a79e96678589e7d3d456658753dd0a54094cf92b1e843c50ee422ed4d13c5009c90ede263b04283ba140569851e44d63caedfd7abbdecf814e399a77eb02371ae7410ba64c6b74ff66a8f692ce4074bb0e48789bca259714ec"], 0x0) (async, rerun: 32) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x10010, r2, 0xc0f6c000) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'ip_vti0\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r0, r4, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r2, 0x4, r0}, 0x6) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmsg$can_bcm(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/240, 0xf0}, 0x0) (async) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 10.662732503s ago: executing program 33 (id=2921): syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="bd4e56d45303aaaaaaaaaa0008060001080006040000ffffffffffffac141400aaaaaaaaaaaae0000002b8d1f67ceab7018429be596c40d9083a3b7f4101fb5cf6deeff3a17a74a7b26b4ec406ccc2bde3a79e96678589e7d3d456658753dd0a54094cf92b1e843c50ee422ed4d13c5009c90ede263b04283ba140569851e44d63caedfd7abbdecf814e399a77eb02371ae7410ba64c6b74ff66a8f692ce4074bb0e48789bca259714ec"], 0x0) (async, rerun: 32) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x10010, r2, 0xc0f6c000) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'ip_vti0\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r0, r4, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r2, 0x4, r0}, 0x6) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmsg$can_bcm(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/240, 0xf0}, 0x0) (async) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 10.640626519s ago: executing program 2 (id=3021): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x1, 0x1}, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x7f, 0xe, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r6, 0x1, 0x7800, 0x8, 0x9, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @remote}}}}) 10.548451289s ago: executing program 34 (id=3021): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x1, 0x1}, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x7f, 0xe, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r6, 0x1, 0x7800, 0x8, 0x9, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @remote}}}}) 2.06563671s ago: executing program 3 (id=3062): syz_emit_ethernet(0xa2, &(0x7f0000000440)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "fb3519", 0x68, 0x3, 0x0, @loopback, @remote, {[@hopopts={0x33, 0xb, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0x2, [0x665c, 0x4c, 0x1, 0xd9, 0x6b1daa84, 0x2]}}, @pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0xfffb, [0x1]}}, @pad1]}, @dstopts={0x32}]}}}}}, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@bcast, @netrom, @rose, @remote, @null, @netrom, @default, @bcast]}, &(0x7f0000000140)=0x48, 0x800) socket$can_bcm(0x1d, 0x2, 0x2) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r1, 0xc08ba000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0xfffffffe, 0x10000}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x804) 1.924933845s ago: executing program 3 (id=3063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newneigh={0x50, 0x1c, 0x2, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, r2, 0x4, 0x80, 0x2}, [@NDA_FDB_EXT_ATTRS={0x1c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x40}]}, @NDA_NH_ID={0x8, 0xd, 0x1}, @NDA_SRC_VNI={0x8}, @NDA_LINK_NETNSID={0x8, 0xa, 0x10}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048844}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r4, 0x1, 0x470bd28, 0x4, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) 1.406264723s ago: executing program 3 (id=3067): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x400) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x4863dbfa}, 0x28) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e24, 0x6de, @local, 0x1}}, 0x8, 0x34}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000780)={0x1f, 0x2}, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0xfffffff9}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r8, r7, 0x2f}, 0x20) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r10) sendmsg$alg(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) sendmsg$nl_route_sched(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001dc0)=@newchain={0x80, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xd}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0xa}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0xffffff00, 0xffffff00]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x44000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="2f0000001400000004000000", @ANYRES32, @ANYBLOB="ca57da1ef8c03640dac4f7b58247d39e9373ddc4f71761adf889955d59d9e1ffdaae415f9429b34601169e76f28d0f536d014fd616d0e826b551489f85ee6b20726da9839d05c607eeda9a160b45b74b60daf200000000000000000000000f5a51fc196a13050344", @ANYRES64=0x0], 0x20) 1.072241531s ago: executing program 4 (id=3068): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x290, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2ef6b85a429f63aa64e426d4bddd63eafc6487e339e2c15632d9e6919130092a2ba079"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "76f436df7f36374858e3b52296999cab55f1af22aff59170473ceda7db480f0369869e372043c77de3b9d09f0b24ce25099ab63a10ae0830b09dd0801fa9889a12f23f72b33d187d85ec9c97c04333318342028b93c79035dbcf18a357d0d1f99e03eaa73946d651d34b45852619c7d5aca7e7687ce8dbaef94397d4c2e3ce229ad7246b8d5edf6bce5442172bb827766bb9392be07734c19f85cd05b7cf6ede7807629a1ffe02ccfd4b20c955c7a443720e87aa3fdf57e2e4b9b65dc19ac22bc3e43d48dec088e47e048a0a0505f1b30598"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x18, @empty, 0xc1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "224fd2cc332820c2cbfd2699d1910605d1162ba88123f0e600fde5a8694412494a826e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x10}, 0x20040080) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={r2}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.sectors\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000480)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r5, 0x0, 0x1000, 0xcc, &(0x7f00000004c0)="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", &(0x7f00000014c0)=""/204, 0x5, 0x0, 0x72, 0x41, &(0x7f00000015c0)="fbce8182636f13770a6e6cbad44169ccae8510cfa938dceb0dadcedba66c3e3c20713bc052c202d7d6d65ba4b952e20db27b0b0d7a19cc6be37e083a25af1610c64212f0120460b6d2012662ecd5c9ed131504ded7520c3ea770383cdf6c54bf61d6be372167805aefb102fa5309a97efcab", &(0x7f0000001640)="a0562dc9ba2e7e02005ad119da5f21e7c68adf14207bc1b9ec837c56281cc2ab4b80c05ff5efa612d43cfcc40f205129016e171ba9930edeb5057fdd2b750c964e", 0x0, 0x0, 0x4}, 0x50) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000001740)=0x5) connect$inet(r4, &(0x7f0000001780)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000001a00)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001800)={0x18c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35b1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9dd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x692}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x66}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c7e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20040840}, 0x4000001) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000001a40)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x1f, 0x0, "67a62d6f254ee27f68a2d43d922bd05d6b613a1e2542b042dce75454685b72d45696772c74c0e86f22a9ded6337cbcfc049e9bb8d896e86665b0e54ba672e5f468f87002c22040b203190c3fa5c28e4c"}, 0xd8) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001b80)={@multicast1, @multicast1, 0x0}, &(0x7f0000001bc0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)=@getchain={0x34, 0x66, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3, 0x8}, {0xa, 0xffff}, {0xf, 0x2}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20044) recvmsg(r5, &(0x7f0000004140)={&(0x7f0000001cc0)=@hci, 0x80, &(0x7f0000004040)=[{&(0x7f0000001d40)}, {&(0x7f0000001d80)=""/48, 0x30}, {&(0x7f0000001dc0)=""/89, 0x59}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/253, 0xfd}, {&(0x7f0000003f40)=""/2, 0x2}, {&(0x7f0000003f80)=""/151, 0x97}], 0x8, &(0x7f00000040c0)=""/78, 0x4e}, 0x100c1) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000004240)={&(0x7f0000004180), 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000090) bind$vsock_stream(r4, &(0x7f0000004280)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f00000042c0)={@dev={0xac, 0x14, 0x14, 0x40}, @empty, 0x1, "39232ef243f74af8f803ca70a609489912a836c6f856085fc6a0abfb80725de9", 0x500000, 0x7ff, 0x5, 0xffffffff}, 0x3c) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f0000004300), 0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000004340)={'icmp\x00'}, &(0x7f0000004380)=0x1e) r9 = accept4(r5, 0x0, &(0x7f00000043c0), 0x80000) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004440), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000004500)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004480)={0x1c, r10, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004540)={r7, @local, @multicast1}, 0xc) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000045c0), r9) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000004e00)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004600)={0x7ac, r11, 0x2c, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe193}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x12}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xe}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x19}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1cfd0b21}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0xab, 0x80, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0x4, 0x29}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0xd, 0xb}}, @tim={0x5, 0x6b, {0xf, 0xec, 0x8, "78c8798ce7155b77ddd0b0bd4886bdd67d467e41b6d177f54a1666d2147a0ed7edc3034882994b537ec4ed00ddf6f7a6d1bafffa2384ddaed1a0e31db2426ed77d41cea7a3f89936401a1683177b50b54bf6660e7b3d1eadd7aadd4dff4b25e80661b940e82d20a2"}}, @chsw_timing={0x68, 0x4, {0x4b5, 0xe}}, @mic={0x8c, 0x18, {0xfee, "51cde2f5a1e9", @long="8d20ee71dc4b8244985d07706118b5ad"}}, @dsss={0x3, 0x1, 0xa}]}, @NL80211_ATTR_BEACON_HEAD={0x426, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xf97}, @broadcast, @device_b, @from_mac, {0x3, 0xf77}}, 0x6, @default, 0x1049, @void, @void, @val={0x3, 0x1, 0x9d}, @void, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0xe, 0x46}}, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x72, 0x7}}, @val={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x7fffffffffffffff, 0x461, 0x0, 0xe}, 0x1, 0x33de4f85, 0x7}}, @void, @void, @val={0x76, 0x6, {0x8, 0x0, 0x13, 0x6}}, [{0xdd, 0xf8, "c3e2e6bfed678cb5788612f2c8429bb5c13907aac4f3bb0b5351a8b21d7d884bbe2f037e8c2bc7b6ecdb9f79d8b5895e55815b00986086f49f9721a49e5cac802cd45e08942281a25b15ff9bec04f9eb569a68f59389fead1badb233380f533efcf2c7e47055b1f112e04b9508750a4fac7359c59baae1f1695e31ecdbda0ff574726a32f47cd6b46b692d08e9b749caa8403142c0547e901871fd9f9ecf887b6595d6b34cdc140119de998ba691e5ef477fcca1d9b8cecdf8ed5539aca47d4a1fa90c3316474c104cd650562e463d70626ee2923df95cbc7c96f9991bf326c6e586aa1bfb553abc8d3e6d8b1a3842759eeb8db9c3baf174"}, {0xdd, 0xef, "ab8206a0877e105e35569232d014d598d489251d7e56e4853ee162ccf8afd05df576482601d6aa27fb5a83b77cd0eec2cc7c6f4b6b405f187d3b77be55d7db4c7cc45bf921bb5df2bc194e0e7dafa942094a9102b7807056a9c262ec6899c3b56530477df1fad113f5d9757be778088dcba37dd2e7769c49ea1bfc8996d8b78a4c01679d4601339430e27c571c1f5035d51eab11ebe53151d297a4f9f7e10c5151276df834434e68ccdfaad02762a13d9b0b74d9b5f97d086164ddc9d83b49408a3df2137f646ff428b74df9bad28f0eef5b80a5e37272eb899124cabe0bf6575b47edaedaee24be9a800554be2009"}, {0xdd, 0xa6, "fabbc65805ed7358ecd8ffcca01b85e4226a66cb62f595ca482d21f3ef926ae71554d29e66103eaf5263fa497d40dcca76ee3f0e6a5d919ac0e86c4b7731502019a8cffe1f04991863ce8612ddc82c674e159dc2ba08bdeb982f9ae43766ec0ed09cead21808a8a2eb16be2e7ed0aee6e1bac599673044104f1864efacb57da7cbfd3e2b027bd7e89580ce3920bbaa492cc99016791ad615e3b37671783063018ac6f2c85c34"}, {0xdd, 0x9c, "70f6b441f5d331cb2c3ebf443ae6f41846550de1a73d5621584eceac43fb56de58ecd414d476aa5fb3d5a7c16278b716cedcb986de49004842c0f3be348fd3983e6219037ceaca6a751a56dca4e00567d8352738ff411390b8561b20677feeff966c301ea9cd7a9e76215c2eb9394f6dedf1de662bc217ca12b2e59803ce4e9916260f49283e0f6560747baa992685fb63afd199d46e2308e651aef1"}, {0xdd, 0xf, "f77c640345114d4347df8e55a83bff"}, {0xdd, 0x84, "5bc47f68e265aac4b3894f73cc77dc0c62c72ae3e9f3ae571afb314d5e3ad5bc2a94c75259d3035f11a91fa512a6dd48c7354da12bc6cecdd3e852fdd55ba01150bdfbed371994970af02ff6554ed4388b51bef4f4befbab8150ba184e7ba0e6209ff64a40653482acae15edfd49e081df18c246d884d312531fe1a21d71d1c5d1f562df"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x88, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x61, 0x2, "b34fd89b96db555b4ba8af3b84fe5fba41788a26ae0bc5fca583ed4729bf27f80d6db9b54253536f9e648f1e171946293a1ff069b42a4a7721dac1ba1b4754e8b61e3984beb448d2e667342b4b50ba6ea629f51b5cd1e3d5766c8b7ea0"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x19f, 0xf, [@ht={0x2d, 0x1a, {0x2, 0x3, 0x4, 0x0, {0x4e, 0x400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3}, 0x400, 0x7, 0x2}}, @random_vendor={0xdd, 0x83, "62bb39915e149e70a5312120fa1c14df59fd4c6145708bcd40eea382123d559ab98bb2f2a0fff2b00c28a4bc0d5da38cc8c26129b71f1fc4a7d56a7790569f28b5817f7c216a9ea8230a66c219159f858ea454cb546d9be9b5e147075a93a8e97f442582acfc0ce2e46415f529fa3101dd4735e5f6ffaf1968f1b1f6eb3d3556699453"}, @preq={0x82, 0x67, {{0x0, 0x0, 0x1}, 0x4, 0x6, 0x0, @device_a, 0x8, @void, 0x67, 0x1, 0x7, [{{}, @broadcast, 0x3ff}, {{0x0, 0x0, 0x1}, @device_a, 0xe22}, {{0x0, 0x0, 0x1}, @broadcast}, {{}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x3ff}, {{0x0, 0x0, 0x1}, @device_b, 0xffffff01}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x61, 0x18, 0x7b}}, @ht={0x2d, 0x1a, {0x80, 0x0, 0x3, 0x0, {0x7, 0x89, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0xb, @device_a, 0xd, @value, 0x5, 0x3ff, @device_b, 0x8}}, @preq={0x82, 0x46, {{0x0, 0x1, 0x1}, 0xd, 0xfd, 0xe4b, @device_b, 0x7, @void, 0x10, 0x0, 0x4, [{{0x0, 0x0, 0x1}, @device_b, 0xfffffff6}, {{0x1, 0x0, 0x1}, @device_b, 0x7ff}, {{0x1}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @device_a, 0x3}]}}]}], @NL80211_ATTR_SSID={0x21, 0x34, @random="adabebfac48f242a69e15bef3d76593c48e87d67a93f52e771e223356d"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f0000004e40)={0xcc1, 0xf17, 0x1, 0x2, 0x6}) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000004e80)) 1.020814779s ago: executing program 4 (id=3069): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x34, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001380)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x18, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 744.732516ms ago: executing program 4 (id=3070): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010300"/20, @ANYRES32=0x0, @ANYBLOB="00010000009de6a8411eb7b55f09be55ef24929112cb4578b84926e49e650c2306064000000008001c03", @ANYRES32, @ANYBLOB="08001300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 540.860392ms ago: executing program 4 (id=3071): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x2000}, 0x48) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) (async) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="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"/399, 0x18f}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a008ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbf4683c026aa7aa1d65bea9ba31000000", 0x91}, {&(0x7f0000000a80)="1165b65dc1f84146f03562d6913624a2b6d8ec92d3b85d62c12f159214de3618d4dc028c1b6992dc66459f58c8b8b56fe04e31cdde47a1821cf3bddee1076115f9afb5391f0f33219347a02ffb4109374ae3528f700cf1963b704fd24e27b70dd82d3ef5fd0d6c7e9512db1aff64b84d0fe3cce36da98fcc74949374701d31a1418b3fb186b4fc5f66185717d2e4da0b381a0159a77c7470be567805e16f89688c5b75b19b2081c8026c57eb5eefe65efbb7e34c39a7651531bd31e4bcb66636f5412f2f97dd0f6eba05988d5dbfef41b1382b757f050000002e48cfb226168a09933e5851fcf209043fdb938b7d7351e7f065d41ec4faa47a000090776f19d579833473c5faaf30c40d0000000000000000", 0x112}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4732b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f4d80f000000000000a7f702c9424df1ffbd0387c5e7777aa1bf37cbffb95d0daf", 0x87}, {&(0x7f0000000d40)="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", 0x1d4}, {&(0x7f0000000f40)="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", 0x981}, {&(0x7f00000001c0)="331138efd776a2a48cb8a3c951368f3d1eb3e6588cf55aa8981e709006a06000160b388c1145c4debe57aa46e626e93fb440", 0x32}, {&(0x7f0000002a80)="5614f39e44b6b12adcfa066f3459516b6b6185f770eda23ae23142769e2ad988eb6c9de9448509f51a1a95d55f43e583651bf858dac80b55bf189e0e67bcd592f6b4c4134152ee46e4a25c4358c2fe47463d90148e7a8cf36ad1fca0f1ecf1df0996022c6c5b38aa187c170c700fc8da3044f66d9f0d90a63cb207b98c9fec608c933374027748730ed1cf7a20641bd6d6d3049fc5f841a780e4313c95c2ebabde71f073831e52a559d23b9d2b97ea0a67", 0xb1}], 0x8}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "adb6c5b29ca2b8382d00", "7e609086", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0xff1, 0x40, 0x0, 0x0) 465.570556ms ago: executing program 4 (id=3072): r0 = socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)={r1, 0x1, 0x3, "b625d6301bb325eecfc2e6b46c72fdf7"}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r5, 0x0, 0x0}, 0x20) socket$inet6_sctp(0xa, 0x4, 0x84) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 371.377992ms ago: executing program 3 (id=3073): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x27ff, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x27ff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x10}) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newtfilter={0x2b0, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0x2}, {0x6, 0xd}, {0xffff, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x1604}, @filter_kind_options=@f_basic={{0xa}, {0x268, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x4}}, @TCA_BASIC_POLICE={0x6c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x1, 0x7f, 0x4, {0x6, 0x0, 0x7ff, 0x1, 0x80}, {0xf, 0x2, 0x6, 0xb, 0xff, 0x7fffffff}, 0x716, 0x4, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}, @TCA_BASIC_EMATCHES={0x1e4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1e0, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4d, 0x8, 0x4}, {0x3, 0x2, 0x7}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0x1000}, {0x3, 0x899f, 0x1, 0x4, 0x3, 0x2, 0x5}}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x7fff}, {{0x3, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_META={0x8c, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xfffc, 0x4}, {0x1, 0x9}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x6, 0x1}, {0xfff, 0xfc, 0x1}}}, @TCA_EM_META_RVALUE={0x2a, 0x3, [@TCF_META_TYPE_VAR="aed739732a", @TCF_META_TYPE_VAR="103d84", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="d3", @TCF_META_TYPE_VAR="590e", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR='d', @TCF_META_TYPE_VAR="079d92798c", @TCF_META_TYPE_VAR="449124ba89a1f9982a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x40, 0x2}, {0xd088, 0x8}}}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR="8d73dffdcf", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="c52ddf3b82", @TCF_META_TYPE_VAR="68d4e96b97", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='F']}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0x1000, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="2b9373c302a69a78", @TCF_META_TYPE_VAR="85", @TCF_META_TYPE_VAR="ec31133788", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9}, {0xa, 0x0, 0x2}}}]}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x5}}}, @TCF_EM_META={0xb4, 0x2, 0x0, 0x0, {{0x1, 0x4, 0xcd}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="950f6342c3", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="ddcc", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="1e5acdcc", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x78, 0x1}, {0x2f, 0x6}}}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="c1988ddc5ffa08affc37", @TCF_META_TYPE_VAR="614ade1287938df07fa5", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="9345a458", @TCF_META_TYPE_VAR="70f5a36c7bf0d6"]}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="c5", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="79cc8c26f875"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3286, 0x9}, {0x9, 0x5, 0xc20ce41f0df1593}}}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x800}, {0x2, 0x6, 0x6}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xe188}]}, 0x2b0}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) (async) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) (async) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 175.103825ms ago: executing program 3 (id=3074): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r1 = socket$inet6(0x10, 0x2, 0x6) sendto$inet6(r1, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffff20, 0x200c0045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x82, &(0x7f0000001900)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}]}}}}}}}, 0x0) 757.758µs ago: executing program 3 (id=3075): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40000c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r2 = socket(0x2, 0x3, 0x6) bind$inet(r2, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r2, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) (async) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x80}}, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000080)}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/237, 0xed}], 0x7, &(0x7f00000006c0)=""/132, 0x84}, 0x10121) (async) close(r0) 0s ago: executing program 4 (id=3076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x64, r2, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}}, 0x0) kernel console output (not intermixed with test programs): r identity 4711 [ 224.995452][T10624] tipc: Enabled bearer , priority 10 [ 225.096475][T10639] tipc: Enabled bearer , priority 0 [ 225.131678][T10634] syzkaller0: entered promiscuous mode [ 225.150011][T10634] syzkaller0: entered allmulticast mode [ 225.190866][T10642] !: left allmulticast mode [ 225.225179][T10642] bridge0: port 3(0!) entered disabled state [ 225.282034][T10642] bridge_slave_0: left allmulticast mode [ 225.300492][T10642] bridge_slave_0: left promiscuous mode [ 225.315785][T10653] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1284'. [ 225.350848][T10642] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.377950][T10642] bond0: (slave bridge_slave_1): Releasing backup interface [ 225.393004][T10642] bond0: (slave 1!): Releasing backup interface [ 225.436833][T10642] bond0: (slave bond_slave_1): Releasing backup interface [ 225.480113][T10642] team0: Port device team_slave_0 removed [ 225.512807][T10642] team0: Port device team_slave_1 removed [ 225.533875][T10642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.557052][T10642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.585653][T10642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.612952][T10642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.786690][T10642] team0: Port device ip6gretap1 removed [ 225.925831][T10642] team0: Port device veth3 removed [ 225.989995][ T6747] tipc: Node number set to 4033076034 [ 226.003457][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.118085][ T24] tipc: Node number set to 4067592265 [ 226.139525][ T6730] wg1 speed is unknown, defaulting to 1000 [ 226.141147][T10656] tipc: Resetting bearer [ 226.208148][T10648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.228473][T10686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1287'. [ 226.289541][T10632] tipc: Resetting bearer [ 226.319750][T10632] tipc: Disabling bearer [ 226.327341][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'. [ 226.513201][ T6747] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.563360][T10702] netlink: 'syz.2.1291': attribute type 6 has an invalid length. [ 226.811232][T10714] netlink: 'syz.2.1297': attribute type 2 has an invalid length. [ 226.854149][T10718] netlink: 'syz.0.1295': attribute type 1 has an invalid length. [ 227.130038][T10735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1301'. [ 227.677539][T10768] netlink: 'syz.4.1313': attribute type 2 has an invalid length. [ 227.763293][T10771] netlink: 'syz.4.1313': attribute type 2 has an invalid length. [ 227.937539][T10775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.435488][T10810] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 228.457058][T10810] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 228.485009][T10811] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 228.530909][T10811] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 228.582120][T10808] tipc: Enabled bearer , priority 0 [ 228.600870][T10818] syzkaller0: entered promiscuous mode [ 228.617715][T10818] syzkaller0: entered allmulticast mode [ 228.707641][T10818] syzkaller0: mtu less than device minimum [ 228.845552][T10807] tipc: Resetting bearer [ 228.910035][T10807] tipc: Disabling bearer [ 228.995058][T10842] __nla_validate_parse: 7 callbacks suppressed [ 228.995076][T10842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1331'. [ 229.065775][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'. [ 229.172413][T10841] bond4: entered promiscuous mode [ 229.214549][T10841] bond4: entered allmulticast mode [ 229.229698][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 229.239898][T10841] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.282669][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1332'. [ 229.292739][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1334'. [ 229.301988][T10854] netlink: 'syz.0.1334': attribute type 18 has an invalid length. [ 229.510553][T10841] bond4 (unregistering): Released all slaves [ 229.578281][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1334'. [ 229.619735][T10854] netlink: 'syz.0.1334': attribute type 18 has an invalid length. [ 229.678799][ T1003] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.717195][ T1003] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.761424][ T1003] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.795231][ T1003] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.055490][T10886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1340'. [ 230.198906][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 230.366704][T10912] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1345'. [ 230.416653][T10912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1345'. [ 230.450216][T10902] IPv6: sit1: Disabled Multicast RS [ 230.476394][T10902] sit1: entered allmulticast mode [ 230.496500][T10917] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 230.933933][T10923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.033452][T10925] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.118695][T10925] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 231.166562][T10925] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 231.381815][T10963] delete_channel: no stack [ 231.635092][T10973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.945751][T10982] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 232.197367][T10993] syzkaller0: entered promiscuous mode [ 232.221836][T10993] syzkaller0: entered allmulticast mode [ 232.254740][T10993] tipc: Enabled bearer , priority 0 [ 232.295923][T10993] tipc: Resetting bearer [ 232.299202][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 232.337334][T10992] tipc: Resetting bearer [ 232.416041][T10992] tipc: Disabling bearer [ 232.645509][T11013] erspan0: entered promiscuous mode [ 232.654024][T11013] gretap0: entered promiscuous mode [ 232.660897][T11013] debugfs: 'hsr1' already exists in 'hsr' [ 232.666820][T11013] Cannot create hsr debugfs directory [ 232.703143][T11013] tipc: Enabled bearer , priority 0 [ 232.729971][T11013] syzkaller0: entered promiscuous mode [ 232.737426][T11013] syzkaller0: entered allmulticast mode [ 232.808338][T11013] tipc: Resetting bearer [ 232.847852][T11012] tipc: Resetting bearer [ 232.963550][T11012] tipc: Disabling bearer [ 233.339386][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 233.685335][T11070] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 233.975034][T11087] netlink: 'syz.4.1384': attribute type 1 has an invalid length. [ 234.054150][T11089] __nla_validate_parse: 11 callbacks suppressed [ 234.054168][T11089] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.1384'. [ 234.189450][T11098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.219391][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 234.276444][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 234.379134][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 234.809537][T11133] netlink: 'syz.2.1394': attribute type 11 has an invalid length. [ 234.930158][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 235.419217][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.642459][ T5877] Bluetooth: hci4: link tx timeout [ 235.648425][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 235.979738][T11171] syzkaller1: entered promiscuous mode [ 236.011209][T11171] syzkaller1: entered allmulticast mode [ 236.179681][T11180] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1405'. [ 236.367512][T11213] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 236.459182][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 237.023003][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 237.047010][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 237.089881][T11250] bridge0: port 3(vlan2) entered blocking state [ 237.098341][T11250] bridge0: port 3(vlan2) entered disabled state [ 237.106593][T11250] vlan2: entered allmulticast mode [ 237.112238][T11250] bridge0: entered allmulticast mode [ 237.123953][T11250] vlan2: left allmulticast mode [ 237.129213][T11250] bridge0: left allmulticast mode [ 237.288214][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 237.355290][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'. [ 237.366742][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 237.499091][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 237.739766][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 237.885056][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1438'. [ 237.974036][T11305] netlink: 'syz.1.1439': attribute type 29 has an invalid length. [ 238.539187][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 238.615398][T11339] tipc: Enabling of bearer rejected, already enabled [ 238.897873][T11362] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 238.898385][T11361] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 239.258836][T11393] netlink: 'syz.3.1459': attribute type 1 has an invalid length. [ 239.373069][T11393] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.396708][T11395] __nla_validate_parse: 2 callbacks suppressed [ 239.396732][T11395] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1458'. [ 239.405938][T11399] bond5: (slave gretap1): making interface the new active one [ 239.423796][T11399] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 239.579224][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 239.803280][T11420] tipc: New replicast peer: 255.255.255.255 [ 239.826159][T11420] tipc: Enabled bearer , priority 10 [ 239.927322][T11426] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1467'. [ 240.088910][T11432] bond4: entered promiscuous mode [ 240.094129][T11432] bond4: entered allmulticast mode [ 240.100106][T11432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.163302][T11443] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 240.173732][ T6753] IPVS: starting estimator thread 0... [ 240.198553][T11443] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 240.229019][T11443] netlink: 15894 bytes leftover after parsing attributes in process `syz.1.1474'. [ 240.289250][T11444] IPVS: using max 31 ests per chain, 74400 per kthread [ 240.619323][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.120442][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 241.170988][T11495] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1487'. [ 241.186555][T11498] openvswitch: netlink: Missing valid actions attribute. [ 241.197825][T11498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.245089][T11501] netlink: 'syz.4.1489': attribute type 1 has an invalid length. [ 241.271160][T11501] IPVS: Unknown mcast interface: vcan0 [ 241.408950][T11515] netlink: 'syz.3.1494': attribute type 1 has an invalid length. [ 241.449518][T11518] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 241.518695][T11527] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1497'. [ 241.659309][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.668935][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1499'. [ 241.784031][T11549] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 241.922181][T11550] 8021q: adding VLAN 0 to HW filter on device ` [ 242.061830][T11562] netlink: 'syz.3.1504': attribute type 10 has an invalid length. [ 242.158126][T11550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.290858][T11562] batman_adv: batadv0: Adding interface: team0 [ 242.313225][T11562] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.347826][T11562] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 242.484454][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 242.504622][T11557] syzkaller0: entered promiscuous mode [ 242.513767][T11557] syzkaller0: entered allmulticast mode [ 242.555661][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 242.574891][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 242.699089][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 242.728375][T11580] macvtap1: entered promiscuous mode [ 242.737666][T11580] vlan0: entered promiscuous mode [ 242.747175][T11580] macvtap1: entered allmulticast mode [ 242.753796][T11580] vlan0: entered allmulticast mode [ 242.758939][T11580] veth0_vlan: entered allmulticast mode [ 243.739516][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.377726][T11601] tipc: Enabling of bearer rejected, failed to enable media [ 244.710392][T11636] pim6reg1: entered promiscuous mode [ 244.715730][T11636] pim6reg1: entered allmulticast mode [ 244.779098][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.834603][T11641] netlink: 'syz.0.1523': attribute type 83 has an invalid length. [ 245.186158][T11651] __nla_validate_parse: 2 callbacks suppressed [ 245.186176][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1522'. [ 245.337803][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'. [ 245.819303][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.980407][T11695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1535'. [ 246.001507][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 246.027765][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1536'. [ 246.266061][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'. [ 246.274427][T11714] netem: change failed [ 246.855390][T11734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1550'. [ 246.864595][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 246.897822][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1551'. [ 246.938374][T11734] tipc: Enabled bearer , priority 0 [ 246.954332][T11734] syzkaller0: entered promiscuous mode [ 246.969673][T11734] syzkaller0: entered allmulticast mode [ 247.017668][T11734] tipc: Resetting bearer [ 247.198065][T11748] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1554'. [ 247.251844][T11748] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1554'. [ 247.307329][T11733] tipc: Resetting bearer [ 247.365112][T11733] tipc: Disabling bearer [ 247.623813][T11774] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 247.685350][T11774] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 247.899499][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 248.136352][T11804] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 248.658114][T11832] netlink: 'syz.3.1578': attribute type 1 has an invalid length. [ 248.738417][T11832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 248.915947][T11848] netlink: 'syz.1.1581': attribute type 21 has an invalid length. [ 248.928580][T11843] dummy0 (unregistering): left promiscuous mode [ 248.939342][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.003191][T11856] netlink: 'syz.4.1583': attribute type 10 has an invalid length. [ 249.385070][T11873] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 249.798921][T11899] netlink: 'syz.0.1597': attribute type 4 has an invalid length. [ 249.866609][T11899] netlink: 'syz.0.1597': attribute type 4 has an invalid length. [ 249.979104][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.992217][T11906] netlink: 'syz.0.1600': attribute type 4 has an invalid length. [ 250.013323][T11906] netlink: 'syz.0.1600': attribute type 4 has an invalid length. [ 250.275484][T11916] ip6gre2: entered allmulticast mode [ 250.350069][T11922] __nla_validate_parse: 17 callbacks suppressed [ 250.350086][T11922] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1606'. [ 250.393844][T11925] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1606'. [ 250.592901][T11937] netlink: 'syz.0.1612': attribute type 10 has an invalid length. [ 250.605415][T11937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1612'. [ 250.691349][T11937] team0: Port device geneve0 added [ 250.713583][T11940] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1611'. [ 251.019213][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 251.248554][T11973] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1623'. [ 251.325356][T11973] team0: Port device geneve0 added [ 251.948542][T12018] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1636'. [ 251.987783][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1636'. [ 251.999743][T12021] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1638'. [ 252.059282][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.102644][T12024] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 252.118576][T12018] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 252.405191][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1644'. [ 252.416097][T12039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1645'. [ 252.445474][T12036] 8021q: VLANs not supported on wg1 [ 252.539311][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.099138][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 253.413125][T12094] wg1 speed is unknown, defaulting to 1000 [ 253.507483][T12096] team0: Device gtp0 is up. Set it down before adding it as a team port [ 254.139179][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 254.737573][ T1169] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 255.146741][T12172] netlink: zone id is out of range [ 255.172160][T12172] netlink: zone id is out of range [ 255.179160][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 255.218455][T12172] netlink: get zone limit has 8 unknown bytes [ 255.374475][T12189] validate_nla: 2 callbacks suppressed [ 255.374492][T12189] netlink: 'syz.0.1680': attribute type 1 has an invalid length. [ 255.431463][T12190] openvswitch: netlink: Missing key (keys=40, expected=80) [ 255.493541][T12194] __nla_validate_parse: 11 callbacks suppressed [ 255.493559][T12194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1676'. [ 255.712020][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1683'. [ 255.826970][T12215] tipc: Enabling of bearer rejected, already enabled [ 256.015784][T12222] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 256.114327][T12226] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 256.129822][T12226] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 256.208470][T12222] macvlan2: entered promiscuous mode [ 256.219170][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 256.235308][T12222] macvlan2: entered allmulticast mode [ 256.251976][T12222] bond7: entered promiscuous mode [ 256.258008][T12222] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 256.279123][T12222] bond7: left promiscuous mode [ 256.345464][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 256.455638][T12246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1695'. [ 256.701829][T12255] tipc: Enabling of bearer rejected, failed to enable media [ 256.949792][T12275] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1705'. [ 257.085184][T12284] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 257.206901][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 257.259092][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 257.548675][T12303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1714'. [ 257.585553][T12306] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1712'. [ 257.602751][T12306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.698351][T12310] veth0: entered promiscuous mode [ 257.749950][T12309] veth0: left promiscuous mode [ 258.062844][T12327] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1718'. [ 258.299201][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 258.615007][T12358] bridge8: entered allmulticast mode [ 258.681218][T12364] sctp: [Deprecated]: syz.0.1729 (pid 12364) Use of int in maxseg socket option. [ 258.681218][T12364] Use struct sctp_assoc_value instead [ 259.339121][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 259.801663][T12387] netlink: 'syz.4.1737': attribute type 13 has an invalid length. [ 259.824452][T12387] netlink: 'syz.4.1737': attribute type 58 has an invalid length. [ 259.843395][T12392] netlink: 'syz.3.1738': attribute type 1 has an invalid length. [ 259.874877][T12392] netlink: 'syz.3.1738': attribute type 2 has an invalid length. [ 259.895767][T12392] netlink: 'syz.3.1738': attribute type 1 has an invalid length. [ 260.274844][T12414] tipc: Enabled bearer , priority 0 [ 260.315755][T12414] syzkaller0: entered promiscuous mode [ 260.331525][T12414] syzkaller0: entered allmulticast mode [ 260.372044][T12414] tipc: Resetting bearer [ 260.379164][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.388270][T12413] tipc: Resetting bearer [ 260.407743][T12413] tipc: Disabling bearer [ 260.503851][T12421] __nla_validate_parse: 9 callbacks suppressed [ 260.503868][T12421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1749'. [ 260.594101][T12429] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1751'. [ 260.651815][T12425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1751'. [ 260.792500][T12439] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 260.995498][T12448] pim6reg1: entered promiscuous mode [ 261.024738][T12448] pim6reg1: entered allmulticast mode [ 261.081192][T12453] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 261.248297][T12458] sch_fq: defrate 0 ignored. [ 261.402763][T12464] IPVS: ip_vs_add_dest(): server weight less than zero [ 261.419174][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 261.496676][T12470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1764'. [ 261.844963][T12487] geneve3: entered promiscuous mode [ 261.880071][T12487] geneve3: entered allmulticast mode [ 261.903973][ T3538] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 261.923629][ T3538] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 262.083778][T12493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.101323][T12493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.124080][ T3538] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 262.333458][T12510] sctp: [Deprecated]: syz.0.1776 (pid 12510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.333458][T12510] Use struct sctp_sack_info instead [ 262.333627][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1775'. [ 262.385591][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1775'. [ 262.408685][T12512] bridge0: port 1(vlan2) entered blocking state [ 262.439650][T12512] bridge0: port 1(vlan2) entered disabled state [ 262.459117][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 262.462709][T12512] vlan2: entered allmulticast mode [ 262.494675][T12512] bridge0: entered allmulticast mode [ 262.514224][T12512] vlan2: left allmulticast mode [ 262.540820][T12512] bridge0: left allmulticast mode [ 262.671552][T12523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.066991][T12547] netlink: 'syz.3.1787': attribute type 4 has an invalid length. [ 263.113321][T12547] netlink: 'syz.3.1787': attribute type 4 has an invalid length. [ 263.502894][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 264.541685][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.105983][T12594] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 265.125523][T12493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.136787][T12493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.156072][T12493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 265.157075][T12597] netlink: 'syz.3.1797': attribute type 83 has an invalid length. [ 265.236798][T12601] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 265.393394][T12493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.404718][T12493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.416284][T12493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 265.546337][T12613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1799'. [ 265.579160][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.587798][T12615] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 265.591113][T12493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.608894][T12493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.620529][T12493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 265.644177][T12611] netlink: 'syz.2.1800': attribute type 1 has an invalid length. [ 265.657860][T12611] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1800'. [ 265.667892][T12612] netlink: 'syz.2.1800': attribute type 1 has an invalid length. [ 265.681983][T12612] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1800'. [ 265.827718][ T1003] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.841608][ T1003] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 265.855273][ T1003] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 265.879725][ T1003] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.888154][ T1003] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 265.897431][ T1003] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 265.961793][ T2965] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.976789][ T2965] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 265.989787][ T2965] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.041377][ T2965] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.049861][ T2965] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 266.058124][ T2965] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.072146][T12620] syzkaller1: entered promiscuous mode [ 266.079126][T12620] syzkaller1: entered allmulticast mode [ 266.332803][T12634] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1808'. [ 266.381399][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'. [ 266.428038][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 266.619482][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.694849][T12650] macsec1: entered promiscuous mode [ 266.715510][T12650] bridge0: entered promiscuous mode [ 266.728350][T12650] bridge0: port 1(macsec1) entered blocking state [ 266.750705][T12650] bridge0: port 1(macsec1) entered disabled state [ 266.763117][T12650] macsec1: entered allmulticast mode [ 266.773149][T12636] "syz.1.1809" (12636) uses obsolete ecb(arc4) skcipher [ 266.778472][T12650] bridge0: entered allmulticast mode [ 266.791835][T12636] "syz.1.1809" (12636) uses obsolete ecb(arc4) skcipher [ 266.810889][T12650] macsec1: left allmulticast mode [ 266.819479][T12650] bridge0: left allmulticast mode [ 266.828170][T12636] "syz.1.1809" (12636) uses obsolete ecb(arc4) skcipher [ 266.839884][T12636] "syz.1.1809" (12636) uses obsolete ecb(arc4) skcipher [ 266.854475][T12650] bridge0: left promiscuous mode [ 266.859894][T12636] "syz.1.1809" (12636) uses obsolete ecb(arc4) skcipher [ 266.866962][T12636] "syz.1.1809" (12636) uses obsolete ecb(arc4) skcipher [ 266.921070][T12636] "syz.1.1809" (12636) uses obsolete ecb(arc4) skcipher [ 266.932754][T12636] "syz.1.1809" (12636) uses obsolete ecb(arc4) skcipher [ 266.959262][T12636] "syz.1.1809" (12636) uses obsolete ecb(arc4) skcipher [ 266.972643][T12636] "syz.1.1809" (12636) uses obsolete ecb(arc4) skcipher [ 267.464737][T12682] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.659084][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 268.035358][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 268.093051][T12682] tipc: Resetting bearer [ 268.115079][T12682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.146621][T12682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.167102][T12705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1827'. [ 268.342028][T12682] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 268.381390][T12682] macsec1: left promiscuous mode [ 268.400193][T12682] veth3: left promiscuous mode [ 268.424461][T12682] veth5: left promiscuous mode [ 268.487984][T12682] vlan0: left allmulticast mode [ 268.496638][T12682] veth0_vlan: left allmulticast mode [ 268.504867][T12682] vlan0: left promiscuous mode [ 268.513913][T12682] macvtap1: left promiscuous mode [ 268.543412][T12692] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1824'. [ 268.559430][ T3538] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.599423][ T3538] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.617142][ T3538] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.637083][ T3538] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.679232][ T3538] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.699101][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 268.728162][ T3538] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.788437][T12718] bond0: entered promiscuous mode [ 268.799243][T12718] bond_slave_0: entered promiscuous mode [ 268.837563][T12718] bond_slave_1: entered promiscuous mode [ 268.850457][T12718] batadv0: entered promiscuous mode [ 268.878008][T12718] batadv0: left promiscuous mode [ 268.900469][T12718] bond0: left promiscuous mode [ 268.905370][T12718] bond_slave_0: left promiscuous mode [ 268.916587][T12718] bond_slave_1: left promiscuous mode [ 268.935309][ T3538] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.952933][ T3538] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.968550][T12725] netlink: 'syz.2.1832': attribute type 1 has an invalid length. [ 268.982546][T12725] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1832'. [ 269.405431][T12762] netlink: 'syz.3.1840': attribute type 1 has an invalid length. [ 269.739248][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 270.324690][T12791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.789098][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 271.072313][T12812] netlink: 'syz.4.1857': attribute type 10 has an invalid length. [ 271.113836][T12813] __nla_validate_parse: 2 callbacks suppressed [ 271.113852][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 271.134457][T12818] netlink: 'syz.4.1857': attribute type 10 has an invalid length. [ 271.213767][T12816] unknown channel width for channel at 909000KHz? [ 271.220821][T12816] unknown channel width for channel at 909000KHz? [ 271.704848][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'. [ 271.819092][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 272.095850][ T5989] hid (null): unknown global tag 0xe [ 272.136620][ T5989] hid (null): nested delimiters [ 272.358383][T12878] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1878'. [ 272.382286][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1879'. [ 272.389882][T12878] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1878'. [ 272.686169][T12900] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 272.704959][T12893] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1884'. [ 272.726797][T12893] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1884'. [ 272.859098][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 272.910327][T12910] crypto_arc4_init: 55 callbacks suppressed [ 272.910345][T12910] "syz.0.1888" (12910) uses obsolete ecb(arc4) skcipher [ 272.936937][T12913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.172546][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1891'. [ 273.816048][T12920] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.823029][T12947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1897'. [ 273.864403][T12920] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 273.909196][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 273.923148][T12920] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 274.021513][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1898'. [ 274.043078][T12952] gre0: left promiscuous mode [ 274.082869][T12952] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 274.174936][T12920] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.203602][T12920] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 274.243284][T12920] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 274.274917][ T5989] hid-generic 0005:0D45:1012.0003: unknown global tag 0xe [ 274.328240][ T5989] hid-generic 0005:0D45:1012.0003: item 0 2 1 14 parsing failed [ 274.337276][ T5989] hid-generic 0005:0D45:1012.0003: probe with driver hid-generic failed with error -22 [ 274.366726][T12920] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.391151][T12920] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 274.424147][T12920] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 274.484210][T12970] IPv6: sit2: Disabled Multicast RS [ 274.491173][T12970] sit2: entered allmulticast mode [ 274.567995][T12920] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.589174][T12920] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 274.599586][T12920] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 274.939308][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 274.995389][T11186] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.025308][T11186] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 275.061291][T11186] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 275.121511][ T3538] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.151601][ T3538] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 275.175093][ T3538] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 275.984757][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 277.022239][ T1169] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.029179][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 277.031516][ T1169] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 277.046719][ T1169] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.088096][ T2965] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.117883][ T2965] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 277.157948][ T2965] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.249416][T13032] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 277.291931][T13034] __nla_validate_parse: 9 callbacks suppressed [ 277.291949][T13034] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1918'. [ 277.561839][T13051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1925'. [ 277.653702][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 277.667622][T13050] veth3: left allmulticast mode [ 277.682144][T13055] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1927'. [ 277.719380][T13050] gretap1: left allmulticast mode [ 277.726722][T13050] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 277.783707][T13051] chnl_net:caif_netlink_parms(): no params data found [ 277.941655][T13055] netlink: 'syz.1.1927': attribute type 16 has an invalid length. [ 277.952030][T13055] netlink: 'syz.1.1927': attribute type 17 has an invalid length. [ 277.967626][T13053] wg1 speed is unknown, defaulting to 1000 [ 278.018240][T13055] !: left promiscuous mode [ 278.062045][T13055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.077682][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.128341][T13053] hsr0 speed is unknown, defaulting to 1000 [ 278.207784][T13081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1931'. [ 278.447499][T13094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.607678][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd8 [ 278.631411][T13090] C: renamed from team_slave_0 (while UP) [ 278.646645][T13090] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 278.668829][T13090] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 278.688539][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 278.709964][T13116] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1936'. [ 278.744800][T13113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1939'. [ 278.758360][T13116] netlink: 'syz.3.1936': attribute type 4 has an invalid length. [ 278.796443][T13114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1939'. [ 279.099204][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 279.106455][T13131] batadv_slave_1: entered promiscuous mode [ 279.870003][T13130] batadv_slave_1: left promiscuous mode [ 280.139113][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 280.349399][T13185] netlink: 'syz.1.1958': attribute type 1 has an invalid length. [ 280.383321][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1960'. [ 280.560959][T13189] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 280.571507][T13189] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 280.588920][T13189] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 281.179297][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 281.484519][T13253] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.544133][T13253] netlink: 'syz.1.1977': attribute type 1 has an invalid length. [ 281.587217][T13253] netlink: 'syz.1.1977': attribute type 1 has an invalid length. [ 281.621271][T13253] netlink: 'syz.1.1977': attribute type 2 has an invalid length. [ 281.791360][T13269] veth11: entered promiscuous mode [ 281.806467][T13269] veth11: entered allmulticast mode [ 282.219194][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 282.322954][T13301] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 282.360373][T13308] __nla_validate_parse: 10 callbacks suppressed [ 282.360395][T13308] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1994'. [ 283.159566][T13362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2008'. [ 283.172639][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'. [ 283.176969][T13362] nft_compat: unsupported protocol 0 [ 283.259164][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 283.299409][T13370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2011'. [ 283.352501][T13376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2013'. [ 283.373400][T13374] netlink: 'syz.0.2012': attribute type 1 has an invalid length. [ 283.570074][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'. [ 283.738169][T13380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.879691][T13408] netlink: 'syz.3.2019': attribute type 1 has an invalid length. [ 283.897755][T13408] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2019'. [ 284.021232][T13419] netlink: 1600 bytes leftover after parsing attributes in process `syz.1.2025'. [ 284.031559][T13419] openvswitch: netlink: Flow key attr not present in new flow. [ 284.299293][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 284.449997][T13444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.527607][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2032'. [ 284.927620][T13471] netlink: 'syz.3.2037': attribute type 2 has an invalid length. [ 284.963004][T13471] netlink: 'syz.3.2037': attribute type 1 has an invalid length. [ 285.343632][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 286.364573][T13476] tun0: tun_chr_ioctl cmd 1074025675 [ 286.379195][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 286.386702][T13476] tun0: persist disabled [ 286.410983][T13478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2041'. [ 286.751090][T13494] veth0: entered promiscuous mode [ 286.756022][T13499] IPVS: length: 249 != 24 [ 286.813369][T13494] veth0: left promiscuous mode [ 287.419101][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 287.419735][T13544] netlink: 'syz.0.2061': attribute type 1 has an invalid length. [ 287.444372][T13544] netlink: 'syz.0.2061': attribute type 1 has an invalid length. [ 287.446436][T13546] __nla_validate_parse: 5 callbacks suppressed [ 287.446451][T13546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2063'. [ 287.659902][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2062'. [ 287.814897][T13571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.154795][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 288.296348][T13593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2074'. [ 288.336644][T13598] netlink: 'syz.4.2075': attribute type 7 has an invalid length. [ 288.469221][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 288.800288][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 288.860915][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 289.300541][T13633] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 289.499105][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 289.513186][T13647] syzkaller0: entered promiscuous mode [ 289.518691][T13647] syzkaller0: entered allmulticast mode [ 290.549320][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 291.591467][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 292.619182][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 293.659278][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 294.699142][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 295.739173][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 296.779198][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 297.819173][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 298.859181][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 299.899348][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 300.939210][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 301.979205][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 303.019187][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 304.059186][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 305.099173][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 306.139164][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 307.179165][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 308.219585][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 309.259170][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 310.299192][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 311.339178][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 312.379169][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 313.419172][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 314.459182][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 315.499204][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 316.539216][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 317.579160][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 318.619163][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 319.659198][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 320.699180][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 321.739169][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 322.779164][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 323.819177][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 324.859179][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 325.899193][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 326.939209][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 327.419297][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 327.979125][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 329.019171][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 330.059190][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 331.099191][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 332.139182][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 333.179186][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 334.219174][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.259215][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 336.299203][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 337.339186][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 338.379196][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 339.419190][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 340.459190][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 341.499194][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 342.539200][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 343.579220][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 344.619213][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 345.659205][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 346.699184][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 347.739206][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 348.779303][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 349.819231][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 350.859212][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 351.899177][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 352.939180][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 353.979194][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 355.019222][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 356.059169][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 357.099190][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 358.141636][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 359.179334][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 360.219326][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 360.922144][T13692] xt_limit: Overflow, try lower: 604147548/4200216962 [ 361.259181][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 361.600731][T13734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2116'. [ 361.697167][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'. [ 361.885736][T13750] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2120'. [ 362.253967][T13773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.299237][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 362.382165][ T2965] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd8 [ 362.561927][T13796] netlink: 'syz.1.2133': attribute type 1 has an invalid length. [ 362.700430][T13804] netlink: 81 bytes leftover after parsing attributes in process `syz.1.2136'. [ 363.240411][T13838] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.2144'. [ 363.278219][T13838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2144'. [ 363.328370][T13838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.339214][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 363.725291][T13858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2150'. [ 363.842563][T13871] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 363.869326][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2154'. [ 363.897605][T13864] netlink: 6012 bytes leftover after parsing attributes in process `syz.2.2154'. [ 363.912028][T13866] netlink: 6012 bytes leftover after parsing attributes in process `syz.2.2154'. [ 364.043139][T13839] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 364.359972][T13893] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 364.379315][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 365.419309][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 365.493461][T13972] netlink: 'syz.0.2186': attribute type 1 has an invalid length. [ 365.530762][T13972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.581813][T13972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.596649][T13972] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 365.608916][T13972] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 365.684475][T13978] veth15: entered promiscuous mode [ 365.745536][T13972] vlan2: entered allmulticast mode [ 365.761483][T13972] bond2: entered allmulticast mode [ 366.257688][T14018] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 366.459337][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 366.944138][T14064] __nla_validate_parse: 3 callbacks suppressed [ 366.944156][T14064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2214'. [ 366.962851][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 366.974294][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2214'. [ 366.985142][T14064] netlink: 'syz.3.2214': attribute type 11 has an invalid length. [ 367.014461][T14066] netlink: 'syz.4.2213': attribute type 12 has an invalid length. [ 367.134674][ T49] nci: nci_ntf_packet: unknown ntf opcode 0x110 [ 367.141122][T14065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.154955][T14073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.251985][T14083] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2217'. [ 367.265918][T14083] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2217'. [ 367.287552][T14083] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2217'. [ 367.417408][T14045] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 367.499178][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 367.805313][T14117] netlink: 'syz.4.2228': attribute type 10 has an invalid length. [ 367.836034][T14117] team0: Device ipvlan1 failed to register rx_handler [ 367.874565][T14129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2230'. [ 368.173518][T14143] TCP: TCP_TX_DELAY enabled [ 368.363395][T14157] netem: change failed [ 368.376648][T14155] netem: change failed [ 368.405935][T14158] syzkaller1: entered promiscuous mode [ 368.411712][T14158] syzkaller1: entered allmulticast mode [ 368.507718][T14163] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2241'. [ 368.539191][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 368.670683][T14175] veth1_to_bond: entered allmulticast mode [ 368.699211][T14180] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 368.711622][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'. [ 368.754909][T14180] bond8: entered promiscuous mode [ 368.761884][T14180] 8021q: adding VLAN 0 to HW filter on device bond8 [ 368.820845][T14189] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2248'. [ 368.868213][T14175] veth1_to_bond (unregistering): left allmulticast mode [ 368.885460][T14189] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 369.374213][T14210] wg1 speed is unknown, defaulting to 1000 [ 369.433136][T14210] hsr0 speed is unknown, defaulting to 1000 [ 369.579087][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 369.727969][T14234] netlink: 'syz.2.2261': attribute type 7 has an invalid length. [ 370.512071][T14258] wg1 speed is unknown, defaulting to 1000 [ 370.619100][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 370.663861][T14258] hsr0 speed is unknown, defaulting to 1000 [ 371.242184][T14310] netlink: 'syz.1.2280': attribute type 1 has an invalid length. [ 371.324373][T14258] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 371.333274][ T982] IPVS: starting estimator thread 0... [ 371.449811][T14317] IPVS: using max 28 ests per chain, 67200 per kthread [ 371.659212][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 371.754918][T14338] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 371.786413][T14334] netlink: 'syz.1.2284': attribute type 3 has an invalid length. [ 371.953224][T14345] __nla_validate_parse: 10 callbacks suppressed [ 371.953240][T14345] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2286'. [ 371.957634][ T2965] IPVS: stop unused estimator thread 0... [ 372.242592][T14350] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20001 [ 372.365490][T14356] macvtap1: entered allmulticast mode [ 372.385269][T14356] veth0_macvtap: entered allmulticast mode [ 372.457143][T14366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2293'. [ 372.699206][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 373.610275][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'. [ 373.640072][T14424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2302'. [ 373.642059][T14432] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2304'. [ 373.681322][T14433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2301'. [ 373.716306][T14432] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2304'. [ 373.739118][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 373.748712][T14432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2304'. [ 373.901623][T14441] geneve3: entered promiscuous mode [ 373.906867][T14441] geneve3: entered allmulticast mode [ 373.949684][ T49] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 373.989299][ T49] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 373.997748][ T49] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 374.033973][ T49] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 19999 - 0 [ 374.064608][T14452] bridge2: entered promiscuous mode [ 374.074030][T14441] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 374.086394][T14441] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 374.131012][T14441] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 374.205282][T14462] netlink: 'syz.1.2313': attribute type 10 has an invalid length. [ 374.215272][T14462] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 374.225145][T14462] bond0: (slave wlan1): Opening slave failed [ 374.251205][T14464] netlink: 'syz.3.2314': attribute type 1 has an invalid length. [ 374.265222][T14441] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 374.276572][T14441] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 374.298137][T14441] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 374.364822][T14465] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 374.376823][T14465] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 374.407097][T14464] gretap2: entered promiscuous mode [ 374.427834][T14464] bond9: (slave gretap2): making interface the new active one [ 374.437163][T14464] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 374.456325][T14441] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 374.466956][T14441] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 374.480734][T14441] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 374.506547][T14472] macvlan0: entered promiscuous mode [ 374.528171][T14472] macvlan0: entered allmulticast mode [ 374.535228][T14472] bond9: entered promiscuous mode [ 374.544323][T14472] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 374.555432][T14472] bond9: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 374.568462][T14472] bond9: left promiscuous mode [ 374.602870][T14441] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 374.613535][T14441] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 374.624142][T14441] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 374.757755][T14486] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2319'. [ 374.779258][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 374.896533][T11186] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 374.913203][T11186] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.923582][T11186] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 375.010729][T11186] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.037536][T11186] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.047228][T11186] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 375.097638][T14495] dvmrp1: entered allmulticast mode [ 375.129139][ T3538] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.137761][ T3538] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.163900][ T3538] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 375.193459][T14505] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2326'. [ 375.227718][ T3538] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.257304][ T3538] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.266612][ T3538] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 375.644274][T14515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.819188][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 376.080526][T14557] openvswitch: netlink: Message has 8 unknown bytes. [ 376.204592][T14562] sctp: [Deprecated]: syz.4.2343 (pid 14562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.204592][T14562] Use struct sctp_sack_info instead [ 376.299330][T14562] sctp: [Deprecated]: syz.4.2343 (pid 14562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.299330][T14562] Use struct sctp_sack_info instead [ 376.344084][T14566] wg1 speed is unknown, defaulting to 1000 [ 376.383974][T14566] hsr0 speed is unknown, defaulting to 1000 [ 376.486386][T14575] netlink: 'syz.0.2348': attribute type 1 has an invalid length. [ 376.859088][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 377.039064][T14605] bond3: entered promiscuous mode [ 377.044285][T14605] bond3: entered allmulticast mode [ 377.050694][T14605] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.364038][T14617] __nla_validate_parse: 3 callbacks suppressed [ 377.364056][T14617] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2358'. [ 377.388681][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2360'. [ 377.782342][T14640] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 377.790477][T14640] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 377.801216][T14641] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 377.809726][T14641] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 377.899115][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 378.135856][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2370'. [ 378.218140][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2372'. [ 378.457632][T14680] sctp: [Deprecated]: syz.4.2377 (pid 14680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.457632][T14680] Use struct sctp_sack_info instead [ 378.579393][ T982] hid-generic 0005:16C0:5505.0004: item fetching failed at offset 0/1 [ 378.632162][ T982] hid-generic 0005:16C0:5505.0004: probe with driver hid-generic failed with error -22 [ 378.949243][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 379.239801][T14712] netlink: 'syz.1.2384': attribute type 8 has an invalid length. [ 379.642017][T14715] 8021q: adding VLAN 0 to HW filter on device bond10 [ 379.750536][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'. [ 379.768139][T14739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.987294][T14737] hsr_slave_1 (unregistering): left promiscuous mode [ 379.989104][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 380.070069][T14753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 380.093829][T14753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 380.312200][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 380.325923][T14764] vlan2: entered promiscuous mode [ 380.332362][T14766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2401'. [ 380.348808][T14764] bridge0: entered promiscuous mode [ 380.366548][T14766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2401'. [ 381.019173][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 381.088701][T14761] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 382.059325][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 382.172392][T14860] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 382.191811][T14860] bond6: (slave vcan1): Error -95 calling set_mac_address [ 382.513320][T14877] x_tables: ip_tables: udp match: only valid for protocol 17 [ 382.721713][T14888] __nla_validate_parse: 12 callbacks suppressed [ 382.721731][T14888] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2434'. [ 382.767425][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2437'. [ 382.793322][T14891] netlink: 'syz.3.2437': attribute type 33 has an invalid length. [ 383.099295][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 383.322012][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2446'. [ 383.489196][T14932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2449'. [ 383.605744][T14940] lo speed is unknown, defaulting to 1000 [ 383.638099][T14940] lo speed is unknown, defaulting to 1000 [ 383.692387][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 383.708697][T14919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2442'. [ 383.746599][T14940] lo speed is unknown, defaulting to 1000 [ 383.913862][T14956] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2454'. [ 384.000456][T14956] 0{X: renamed from gretap0 (while UP) [ 384.072163][T14956] 0{X: entered allmulticast mode [ 384.102141][T14956] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 384.139088][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 384.291341][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 384.365209][T14970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.447529][T14940] infiniband syz0: set active [ 384.453900][ T5966] lo speed is unknown, defaulting to 1000 [ 384.503096][T14940] infiniband syz0: added lo [ 384.531607][T14940] syz0: rxe_create_cq: returned err = -12 [ 384.537639][T14977] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2461'. [ 384.537666][T14940] infiniband syz0: Couldn't create ib_mad CQ [ 384.623382][T14940] infiniband syz0: Couldn't open port 1 [ 384.740857][T14940] RDS/IB: syz0: added [ 384.751222][T14940] smc: adding ib device syz0 with port count 1 [ 384.757712][T14940] smc: ib device syz0 port 1 has pnetid [ 384.799957][T14996] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 384.828055][ T5989] lo speed is unknown, defaulting to 1000 [ 384.842796][T14998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2467'. [ 384.861964][T14940] lo speed is unknown, defaulting to 1000 [ 384.921699][T15000] netlink: 'syz.1.2466': attribute type 1 has an invalid length. [ 384.994756][T15002] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20000 [ 385.179084][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 385.786072][T14940] lo speed is unknown, defaulting to 1000 [ 385.941117][T15045] netlink: 'syz.4.2479': attribute type 27 has an invalid length. [ 385.952491][T15045] bridge: RTM_NEWNEIGH with invalid ether address [ 386.207931][T15053] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 386.219089][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 386.557026][T15035] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 386.591630][T14940] lo speed is unknown, defaulting to 1000 [ 386.846342][T15084] tipc: Enabling of bearer rejected, failed to enable media [ 387.259104][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 387.430869][T15107] netlink: 'syz.0.2499': attribute type 21 has an invalid length. [ 387.455976][T14940] lo speed is unknown, defaulting to 1000 [ 387.497437][T15110] block nbd4: not configured, cannot reconfigure [ 387.974959][T15131] netlink: 'syz.1.2506': attribute type 6 has an invalid length. [ 388.086484][T15135] netlink: 'syz.1.2506': attribute type 6 has an invalid length. [ 388.215557][T14940] lo speed is unknown, defaulting to 1000 [ 388.309139][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 389.339160][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 390.379179][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 391.419171][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 391.490232][T15145] dvmrp1: entered allmulticast mode [ 391.816477][T15160] bond5 (unregistering): Released all slaves [ 391.839557][T15165] __nla_validate_parse: 7 callbacks suppressed [ 391.839573][T15165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2513'. [ 391.877042][T15162] ip6tnl2: entered promiscuous mode [ 391.882997][T15162] ip6tnl2: entered allmulticast mode [ 392.275095][T15195] netlink: 'syz.2.2522': attribute type 1 has an invalid length. [ 392.300869][T15195] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2522'. [ 392.319723][T15195] netlink: 'syz.2.2522': attribute type 1 has an invalid length. [ 392.445698][T15203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2525'. [ 392.459189][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 392.528748][T15207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2525'. [ 392.589772][T15206] wg2: entered promiscuous mode [ 392.594669][T15206] wg2: entered allmulticast mode [ 392.637719][T15217] wg2: left promiscuous mode [ 392.646292][T15217] wg2: left allmulticast mode [ 392.841709][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2529'. [ 392.986690][T15237] netlink: 'syz.3.2535': attribute type 25 has an invalid length. [ 393.004739][T15241] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2534'. [ 393.015262][T15235] netlink: 'syz.2.2533': attribute type 1 has an invalid length. [ 393.042332][T15243] netlink: 'syz.0.2536': attribute type 1 has an invalid length. [ 393.070365][T15243] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2536'. [ 393.285009][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2539'. [ 393.300082][T15252] wg1 speed is unknown, defaulting to 1000 [ 393.343586][T15252] hsr0 speed is unknown, defaulting to 1000 [ 393.386715][T15252] lo speed is unknown, defaulting to 1000 [ 393.499183][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 393.510582][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2537'. [ 394.047250][T15285] netlink: 'syz.2.2546': attribute type 1 has an invalid length. [ 394.073741][T15284] netlink: 'syz.2.2546': attribute type 1 has an invalid length. [ 394.133877][T15285] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 394.134973][T15284] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 394.215807][T15297] batadv_slave_0: entered allmulticast mode [ 394.264816][T15295] batadv_slave_0: left allmulticast mode [ 394.344300][T15298] netlink: 'syz.0.2548': attribute type 21 has an invalid length. [ 394.367729][T15298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2548'. [ 394.539194][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 394.720779][T15326] netlink: 'syz.0.2555': attribute type 6 has an invalid length. [ 394.786045][T15331] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 395.100661][T15344] netlink: 'syz.1.2564': attribute type 21 has an invalid length. [ 395.392715][T15341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.542713][ T5982] lo speed is unknown, defaulting to 1000 [ 395.578213][ T5982] syz0: Port: 1 Link DOWN [ 395.579194][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 395.619445][ T10] hsr0 speed is unknown, defaulting to 1000 [ 395.625462][ T2965] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 395.636922][ T2965] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.651135][ T10] syz1: Port: 1 Link DOWN [ 395.659245][ T2965] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 256 - 0 [ 395.667661][ T2965] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 395.676424][ T2965] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.685198][ T2965] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 256 - 0 [ 395.712585][ T2965] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 395.722760][ T2965] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.749580][ T2965] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 256 - 0 [ 395.780030][ T5982] lo speed is unknown, defaulting to 1000 [ 395.813845][T15368] bond0: (slave dummy0): Releasing backup interface [ 395.865371][T15368] dummy0: left promiscuous mode [ 395.887308][T15368] team0: Port device dummy0 added [ 395.928613][T15370] bond7: entered promiscuous mode [ 395.933837][T15370] bond7: entered allmulticast mode [ 395.947515][T15370] 8021q: adding VLAN 0 to HW filter on device bond7 [ 396.153698][T15370] bond7 (unregistering): Released all slaves [ 396.172812][ T2965] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 396.181659][ T2965] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 396.190329][ T2965] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 256 - 0 [ 396.234732][T15379] bond4: entered promiscuous mode [ 396.240004][T15379] bond4: entered allmulticast mode [ 396.245625][T15379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.411477][T15400] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 396.492200][T15405] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 396.619165][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 397.048000][T15436] __nla_validate_parse: 8 callbacks suppressed [ 397.048017][T15436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2589'. [ 397.048530][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2590'. [ 397.217293][T15444] 8021q: adding VLAN 0 to HW filter on device bond3 [ 397.271024][T15444] bond3: (slave gretap1): making interface the new active one [ 397.280133][T15444] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 397.486735][T15464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.659148][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 397.833588][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2601'. [ 398.077024][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2606'. [ 398.097913][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2606'. [ 398.228290][T15512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2609'. [ 398.400482][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2612'. [ 398.699102][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 398.728098][T15542] pim6reg1: entered promiscuous mode [ 398.734198][T15542] pim6reg1: entered allmulticast mode [ 398.823641][T15547] validate_nla: 2 callbacks suppressed [ 398.823659][T15547] netlink: 'syz.2.2620': attribute type 10 has an invalid length. [ 399.412427][T15568] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2628'. [ 399.685944][T15581] netlink: 'syz.4.2630': attribute type 4 has an invalid length. [ 399.739052][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 399.751991][T15584] netlink: 'syz.4.2630': attribute type 4 has an invalid length. [ 400.121424][T15579] syzkaller1: entered promiscuous mode [ 400.127922][T15579] syzkaller1: entered allmulticast mode [ 400.343764][T15601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2637'. [ 400.359782][T15603] netlink: 'syz.1.2638': attribute type 1 has an invalid length. [ 400.397536][T15603] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2638'. [ 400.452850][T15605] sit0: entered promiscuous mode [ 400.457986][T15605] netlink: 'syz.4.2639': attribute type 1 has an invalid length. [ 400.505148][T15607] openvswitch: netlink: Multiple metadata blocks provided [ 400.578467][T15607] pim6reg527: entered allmulticast mode [ 400.604107][T15614] tipc: Enabled bearer , priority 0 [ 400.652656][T15614] syzkaller0: mtu less than device minimum [ 400.779158][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 400.950341][T15631] syz_tun: entered allmulticast mode [ 400.978156][T15630] syz_tun: left allmulticast mode [ 401.046471][T15642] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 401.247442][T15646] dvmrp1: entered allmulticast mode [ 401.368110][T15661] netlink: 'syz.2.2655': attribute type 4 has an invalid length. [ 401.719098][ T979] tipc: Node number set to 3304018997 [ 401.819197][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 401.995071][T15690] netlink: 'syz.2.2664': attribute type 1 has an invalid length. [ 402.011557][T15690] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 402.375821][T15701] tipc: Enabled bearer , priority 0 [ 402.393943][T15701] syzkaller0: entered promiscuous mode [ 402.413962][T15701] syzkaller0: entered allmulticast mode [ 402.471914][T15713] __nla_validate_parse: 2 callbacks suppressed [ 402.471932][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 402.474756][T15701] tipc: Resetting bearer [ 402.483817][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 402.503905][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 402.550630][T15698] tipc: Resetting bearer [ 402.587356][T15698] tipc: Disabling bearer [ 402.859158][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 403.106952][T15733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2674'. [ 403.201382][T15739] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 403.215841][T11186] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 403.564454][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 403.575389][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 403.899175][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 403.931918][T15734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.137620][T15774] team0: Device vti1 is of different type [ 404.181717][T15775] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 404.192923][T15777] netlink: 'syz.0.2685': attribute type 12 has an invalid length. [ 404.242998][T15777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2685'. [ 404.751898][T15812] netlink: 'syz.0.2695': attribute type 10 has an invalid length. [ 404.848074][T15812] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.939160][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 405.257153][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 405.412900][T15858] wg1 speed is unknown, defaulting to 1000 [ 405.421543][T15858] hsr0 speed is unknown, defaulting to 1000 [ 405.428763][T15858] lo speed is unknown, defaulting to 1000 [ 405.452126][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2705'. [ 405.979054][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 406.867317][T15910] netlink: 'syz.1.2718': attribute type 1 has an invalid length. [ 407.019068][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 407.080147][T15920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2723'. [ 407.395783][T15938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 407.534297][T15952] FAULT_INJECTION: forcing a failure. [ 407.534297][T15952] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 407.578141][T15952] CPU: 0 UID: 0 PID: 15952 Comm: syz.0.2727 Not tainted syzkaller #0 PREEMPT(full) [ 407.578167][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.578184][T15952] Call Trace: [ 407.578192][T15952] [ 407.578200][T15952] dump_stack_lvl+0x189/0x250 [ 407.578225][T15952] ? __pfx____ratelimit+0x10/0x10 [ 407.578247][T15952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.578266][T15952] ? __pfx__printk+0x10/0x10 [ 407.578288][T15952] ? __might_fault+0xb0/0x130 [ 407.578321][T15952] should_fail_ex+0x414/0x560 [ 407.578349][T15952] _copy_from_user+0x2d/0xb0 [ 407.578369][T15952] get_timespec64+0x8e/0x1a0 [ 407.578391][T15952] ? __pfx_get_timespec64+0x10/0x10 [ 407.578413][T15952] ? __fget_files+0x3a0/0x420 [ 407.578443][T15952] __se_sys_ppoll+0xce/0x260 [ 407.578468][T15952] ? __pfx___se_sys_ppoll+0x10/0x10 [ 407.578490][T15952] ? __pfx_ksys_write+0x10/0x10 [ 407.578516][T15952] ? do_syscall_64+0xbe/0x3b0 [ 407.578531][T15952] ? __x64_sys_ppoll+0x20/0xc0 [ 407.578554][T15952] do_syscall_64+0xfa/0x3b0 [ 407.578568][T15952] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.578589][T15952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.578605][T15952] ? clear_bhb_loop+0x60/0xb0 [ 407.578626][T15952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.578646][T15952] RIP: 0033:0x7f51a3d8ebe9 [ 407.578666][T15952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.578681][T15952] RSP: 002b:00007f51a1fb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 407.578703][T15952] RAX: ffffffffffffffda RBX: 00007f51a3fc6180 RCX: 00007f51a3d8ebe9 [ 407.578716][T15952] RDX: 00002000000005c0 RSI: 0000000000000005 RDI: 0000200000000000 [ 407.578727][T15952] RBP: 00007f51a1fb4090 R08: 0000000000000008 R09: 0000000000000000 [ 407.578738][T15952] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 407.578749][T15952] R13: 00007f51a3fc6218 R14: 00007f51a3fc6180 R15: 00007ffe73e0c6e8 [ 407.578780][T15952] [ 407.792273][T15963] tipc: Bearer : already 2 bearers with priority 10 [ 407.800002][T15963] tipc: Bearer : trying with adjusted priority [ 407.807113][T15963] tipc: Enabling of bearer rejected, failed to enable media [ 408.059070][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 408.281355][T15985] netlink: 'syz.3.2739': attribute type 1 has an invalid length. [ 408.377145][T15985] 8021q: adding VLAN 0 to HW filter on device bond12 [ 408.477712][T15998] bond12: (slave veth9): Enslaving as an active interface with a down link [ 408.561756][T15985] veth11: entered promiscuous mode [ 408.571536][T15985] bond12: (slave veth11): Enslaving as an active interface with a down link [ 408.607167][T15998] vlan0: entered allmulticast mode [ 408.612747][T15998] bond12: entered allmulticast mode [ 408.619912][T15998] bond12: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 408.820623][T16016] __nla_validate_parse: 1 callbacks suppressed [ 408.820640][T16016] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2748'. [ 408.853213][T16017] netlink: 'syz.3.2746': attribute type 1 has an invalid length. [ 408.880419][T16016] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 408.895793][T16017] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 408.928781][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'. [ 408.947123][T16021] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2748'. [ 408.964873][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2747'. [ 409.002166][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'. [ 409.029805][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2747'. [ 409.099086][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 409.152516][T16034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2750'. [ 409.337096][T16041] tipc: Enabled bearer , priority 0 [ 409.390874][T16041] syzkaller0: entered promiscuous mode [ 409.418565][T16041] syzkaller0: entered allmulticast mode [ 409.571764][T16052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2754'. [ 409.606447][T16041] tipc: Resetting bearer [ 409.613857][T16041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.622343][T16041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.700374][T16039] tipc: Resetting bearer [ 409.794790][T16039] tipc: Disabling bearer [ 409.905998][T16070] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2759'. [ 409.937096][T16070] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2759'. [ 410.139086][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 410.536284][T16111] FAULT_INJECTION: forcing a failure. [ 410.536284][T16111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.556523][T16112] netlink: 'syz.4.2772': attribute type 10 has an invalid length. [ 410.573278][T16111] CPU: 1 UID: 0 PID: 16111 Comm: syz.1.2771 Not tainted syzkaller #0 PREEMPT(full) [ 410.573303][T16111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.573314][T16111] Call Trace: [ 410.573321][T16111] [ 410.573328][T16111] dump_stack_lvl+0x189/0x250 [ 410.573353][T16111] ? __pfx____ratelimit+0x10/0x10 [ 410.573376][T16111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.573395][T16111] ? __pfx__printk+0x10/0x10 [ 410.573417][T16111] ? __might_fault+0xb0/0x130 [ 410.573451][T16111] should_fail_ex+0x414/0x560 [ 410.573478][T16111] _copy_from_user+0x2d/0xb0 [ 410.573499][T16111] do_sys_poll+0x242/0x1070 [ 410.573538][T16111] ? __pfx_do_sys_poll+0x10/0x10 [ 410.573642][T16111] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 410.573699][T16111] ? set_user_sigmask+0x15b/0x1b0 [ 410.573716][T16111] ? __pfx_set_user_sigmask+0x10/0x10 [ 410.573734][T16111] ? __fget_files+0x3a0/0x420 [ 410.573764][T16111] __se_sys_ppoll+0x1ff/0x260 [ 410.573788][T16111] ? __pfx___se_sys_ppoll+0x10/0x10 [ 410.573810][T16111] ? __pfx_ksys_write+0x10/0x10 [ 410.573836][T16111] ? do_syscall_64+0xbe/0x3b0 [ 410.573850][T16111] ? __x64_sys_ppoll+0x20/0xc0 [ 410.573874][T16111] do_syscall_64+0xfa/0x3b0 [ 410.573888][T16111] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.573909][T16111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.573926][T16111] ? clear_bhb_loop+0x60/0xb0 [ 410.573947][T16111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.573964][T16111] RIP: 0033:0x7fbc4898ebe9 [ 410.573979][T16111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.573993][T16111] RSP: 002b:00007fbc49767038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 410.574011][T16111] RAX: ffffffffffffffda RBX: 00007fbc48bc6180 RCX: 00007fbc4898ebe9 [ 410.574022][T16111] RDX: 00002000000005c0 RSI: 0000000000000005 RDI: 0000200000000000 [ 410.574031][T16111] RBP: 00007fbc49767090 R08: 0000000000000008 R09: 0000000000000000 [ 410.574040][T16111] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 410.574048][T16111] R13: 00007fbc48bc6218 R14: 00007fbc48bc6180 R15: 00007ffcc39b0378 [ 410.574074][T16111] [ 411.145106][T16129] nbd: must specify a size in bytes for the device [ 411.175724][T16129] netlink: 'syz.0.2778': attribute type 6 has an invalid length. [ 411.183856][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 411.342006][T16139] bond0: entered promiscuous mode [ 411.347562][T16139] bond0: entered allmulticast mode [ 411.355359][T16139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.034593][T16172] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.220385][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 412.986703][T16215] syzkaller1: entered promiscuous mode [ 413.003794][T16215] syzkaller1: entered allmulticast mode [ 413.259095][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 413.326329][T16242] netlink: 'syz.4.2813': attribute type 1 has an invalid length. [ 413.916943][T16251] __nla_validate_parse: 14 callbacks suppressed [ 413.916962][T16251] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2816'. [ 413.951891][T16274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2825'. [ 413.971277][T16251] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2816'. [ 413.997993][T16280] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (257) [ 414.018061][T16251] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2816'. [ 414.030207][T16251] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2816'. [ 414.041710][T16280] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 414.096988][T16251] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2816'. [ 414.130826][T16291] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 414.143727][T16251] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2816'. [ 414.213985][T16295] gtp0: entered promiscuous mode [ 414.221732][T16295] gtp0: entered allmulticast mode [ 414.234980][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2827'. [ 414.267957][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2827'. [ 414.299201][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 414.314724][T16296] netlink: 'syz.2.2827': attribute type 6 has an invalid length. [ 414.462338][T16310] netlink: 'syz.4.2831': attribute type 2 has an invalid length. [ 414.576630][T16315] syzkaller1: entered promiscuous mode [ 414.605616][T16315] syzkaller1: entered allmulticast mode [ 415.156101][T16347] netlink: 'syz.4.2841': attribute type 1 has an invalid length. [ 415.266966][T16347] 8021q: adding VLAN 0 to HW filter on device bond4 [ 415.313612][T16358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2845'. [ 415.342286][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 415.373508][T16363] netlink: 'syz.0.2847': attribute type 1 has an invalid length. [ 415.381977][T16363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.416809][T16365] veth0_to_bridge: entered promiscuous mode [ 415.798483][T16364] veth0_to_bridge: left promiscuous mode [ 416.195346][T16394] netlink: 'syz.0.2851': attribute type 2 has an invalid length. [ 416.227166][T16394] netlink: 'syz.0.2851': attribute type 8 has an invalid length. [ 416.292071][T16402] netem: incorrect ge model size [ 416.297452][T16402] netem: change failed [ 416.303720][T16406] netlink: zone id is out of range [ 416.308905][T16406] netlink: zone id is out of range [ 416.345879][T16406] netlink: zone id is out of range [ 416.356464][T16406] netlink: zone id is out of range [ 416.379105][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 416.403479][T16406] netlink: zone id is out of range [ 416.412187][T16406] netlink: zone id is out of range [ 416.425016][T16408] siw: device registration error -23 [ 416.880557][T16434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.191132][T16451] lo: entered allmulticast mode [ 417.203380][T16451] lo: left allmulticast mode [ 417.256489][ T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.307520][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.330034][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.349269][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.510626][T16467] netlink: 'syz.3.2875': attribute type 2 has an invalid length. [ 417.573286][T16474] netlink: 'syz.1.2874': attribute type 1 has an invalid length. [ 417.606295][T16478] netlink: 'syz.0.2876': attribute type 3 has an invalid length. [ 417.617384][T16479] netlink: 'syz.0.2876': attribute type 3 has an invalid length. [ 418.206362][T16511] netlink: 'syz.2.2887': attribute type 11 has an invalid length. [ 418.507692][T16525] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20001 [ 418.524882][T16526] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20001 [ 419.046861][T16562] __nla_validate_parse: 21 callbacks suppressed [ 419.046880][T16562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2903'. [ 419.191571][T16567] team0: Cannot enslave team device to itself [ 419.499175][ C0] net_ratelimit: 13 callbacks suppressed [ 419.499194][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 419.698933][T16608] netem: incorrect ge model size [ 419.704859][T16608] netem: change failed [ 419.825348][T11186] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 419.860225][T11186] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 419.876240][T16613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2919'. [ 419.876806][T11186] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 419.943970][T11186] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 420.539175][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 420.757047][ T1003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.778089][ T1003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.814044][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 420.832031][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 420.848360][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 420.858398][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 420.867105][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 420.904546][T16633] tipc: Enabling of bearer rejected, already enabled [ 420.927269][T16636] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 420.935916][T16636] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 420.982308][ T30] audit: type=1107 audit(1756665130.544:3): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='LK$H,|pbt]!m"%쩔cLkkpJ#͠q #uR&AYF [4@>9C5K LwlL6)qS\3#ٗ5y٣˟9 bc?vIɲ] |,u7^.&|KJ 5ɱz-'pf?Q)YE [ 421.120440][T16633] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1318715392) [ 421.255932][ T1003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.267344][ T1003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.376789][T16654] pim6reg1: entered promiscuous mode [ 421.390186][T16654] pim6reg1: entered allmulticast mode [ 421.411042][T16635] wg1 speed is unknown, defaulting to 1000 [ 421.520476][ T1003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.538086][ T1003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.555951][T16635] hsr0 speed is unknown, defaulting to 1000 [ 421.579149][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 421.628111][T16635] lo speed is unknown, defaulting to 1000 [ 421.776382][T16679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2938'. [ 421.952967][ T1003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.977360][ T1003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.014765][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2941'. [ 422.024999][T16688] bond3: (slave gretap1): Releasing active interface [ 422.033146][T16695] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2942'. [ 422.075243][T16684] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.193972][T16699] lo: entered promiscuous mode [ 422.215291][T16699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.620296][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 422.735021][T16725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2951'. [ 422.744413][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'. [ 422.763930][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 422.945943][ T5877] Bluetooth: hci1: command tx timeout [ 423.049890][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2956'. [ 423.477510][ T1003] dvmrp0 (unregistering): left allmulticast mode [ 423.514591][ T1003] team0: Port device geneve0 removed [ 423.659066][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 423.989411][ T1003] ` (unregistering): Released all slaves [ 424.116234][ T1003] bond0 (unregistering): Released all slaves [ 424.129365][ T1003] bond1 (unregistering): Released all slaves [ 424.246806][ T1003] bond2 (unregistering): Released all slaves [ 424.367370][ T1003] bond3 (unregistering): Released all slaves [ 424.491719][ T1003] bond4 (unregistering): Released all slaves [ 424.505290][T16744] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 424.514729][T16744] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 424.706485][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 424.754955][T16635] chnl_net:caif_netlink_parms(): no params data found [ 424.896682][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2963'. [ 424.908109][T16767] veth0_to_team: entered promiscuous mode [ 424.916737][T16767] veth0_to_team: entered allmulticast mode [ 424.986657][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2963'. [ 425.019848][ T5877] Bluetooth: hci1: command tx timeout [ 425.306545][T16635] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.325526][T16635] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.336136][T16635] bridge_slave_0: entered allmulticast mode [ 425.337549][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2968'. [ 425.344975][T16635] bridge_slave_0: entered promiscuous mode [ 425.365542][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2968'. [ 425.392871][T16635] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.406369][T16635] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.428677][T16635] bridge_slave_1: entered allmulticast mode [ 425.459641][T16635] bridge_slave_1: entered promiscuous mode [ 425.551367][T16812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2971'. [ 425.581814][T16815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2969'. [ 425.715873][T16635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.739168][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 425.756825][T16635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.891138][T16635] team0: Port device team_slave_0 added [ 425.912197][T16635] team0: Port device team_slave_1 added [ 425.933989][T16830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2975'. [ 426.052527][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'. [ 426.082030][T16635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.098358][T16635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.153189][T16635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.225655][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2979'. [ 426.335826][T16635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.343403][T16635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.403787][T16635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.423430][ T1003] tipc: Disabling bearer [ 426.446293][ T1003] tipc: Left network mode [ 426.461169][T16856] netlink: 'syz.2.2981': attribute type 2 has an invalid length. [ 426.552696][ T1003] IPVS: stopping backup sync thread 15642 ... [ 426.777753][T16862] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 426.779083][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 426.831595][T16876] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2987'. [ 426.887978][T16851] wg1 speed is unknown, defaulting to 1000 [ 426.896205][T16635] hsr_slave_0: entered promiscuous mode [ 426.906876][T16635] hsr_slave_1: entered promiscuous mode [ 426.914490][T16635] debugfs: 'hsr0' already exists in 'hsr' [ 426.922213][T16635] Cannot create hsr debugfs directory [ 426.976638][T16851] hsr0 speed is unknown, defaulting to 1000 [ 427.033843][T16851] lo speed is unknown, defaulting to 1000 [ 427.077869][T16880] netlink: 'syz.4.2989': attribute type 3 has an invalid length. [ 427.112207][ T51] Bluetooth: hci1: command tx timeout [ 427.453821][ T3538] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 427.514672][T16888] netlink: 'syz.4.2992': attribute type 13 has an invalid length. [ 427.592637][T16896] netlink: 'syz.3.2994': attribute type 12 has an invalid length. [ 427.819061][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 427.967854][ T1003] batadv_slave_1: left promiscuous mode [ 427.986111][ T1003] veth1_macvtap: left promiscuous mode [ 427.992126][ T1003] veth0_macvtap: left promiscuous mode [ 428.001084][ T1003] veth1_vlan: left promiscuous mode [ 428.006407][ T1003] veth0_vlan: left promiscuous mode [ 428.284331][T16913] netlink: 'syz.4.2997': attribute type 10 has an invalid length. [ 428.861948][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 429.125058][T16919] tap0: tun_chr_ioctl cmd 2148553947 [ 429.190027][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 429.899076][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 430.128058][T16943] veth0: entered promiscuous mode [ 430.133776][T16943] __nla_validate_parse: 4 callbacks suppressed [ 430.133793][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3006'. [ 430.157462][T16943] veth0 (unregistering): left promiscuous mode [ 430.208882][ T1003] IPVS: stop unused estimator thread 0... [ 430.237760][T16635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 430.273263][T16635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 430.310883][T16635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 430.336235][T16635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 430.376909][T16947] netlink: 'syz.3.3008': attribute type 29 has an invalid length. [ 430.407758][T16954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3009'. [ 430.418277][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3009'. [ 430.428703][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'. [ 430.449876][T16945] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3007'. [ 430.490121][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'. [ 430.549545][T16955] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 430.672146][T16967] netlink: 'syz.3.3012': attribute type 1 has an invalid length. [ 430.796418][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3011'. [ 430.894723][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3015'. [ 430.939053][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 431.113482][T16987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3017'. [ 431.128950][ T1169] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.169580][ T1169] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 431.196626][ T1169] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 431.298783][T16984] syzkaller1: entered promiscuous mode [ 431.304643][T16984] syzkaller1: entered allmulticast mode [ 431.312273][ T9] wg1 speed is unknown, defaulting to 1000 [ 431.327822][ T9] syz2: Port: 1 Link DOWN [ 431.330179][ T1169] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.359132][ T1169] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 431.395475][ T1169] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 431.588078][ T1169] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.629199][ T1169] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 431.655823][ T1169] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 431.797479][ T1169] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.822633][ T1169] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 431.839316][ T1169] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 431.979178][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 432.012146][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 432.260483][T17002] netlink: 'syz.3.3025': attribute type 12 has an invalid length. [ 432.282604][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 432.293544][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 432.299210][T17002] netlink: 'syz.3.3025': attribute type 29 has an invalid length. [ 432.308827][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 432.321717][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 432.329814][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 432.354763][T17002] netlink: 'syz.3.3025': attribute type 12 has an invalid length. [ 432.661410][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.683678][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.695665][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.696045][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.715165][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.716328][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 432.731811][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 432.732320][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 432.741406][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 432.756415][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 433.019167][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 433.804011][ T1169] erspan0 (unregistering): left promiscuous mode [ 433.829522][ T1169] gretap0 (unregistering): left promiscuous mode [ 433.943289][ T1169] dvmrp1 (unregistering): left allmulticast mode [ 434.062468][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 434.185497][ T1169] bond0 (unregistering): Released all slaves [ 434.198205][ T1169] bond1 (unregistering): Released all slaves [ 434.214579][ T1169] bond2 (unregistering): Released all slaves [ 434.323940][ T1169] bond3 (unregistering): Released all slaves [ 434.380485][ T5877] Bluetooth: hci1: command tx timeout [ 434.440420][ T1169] bond4 (unregistering): Released all slaves [ 434.454481][ T1169] bond5 (unregistering): Released all slaves [ 434.471044][ T1169] bond6 (unregistering): Released all slaves [ 434.485168][ T1169] bond7 (unregistering): Released all slaves [ 434.502729][ T1169] bond8 (unregistering): Released all slaves [ 434.600878][T17011] wg1 speed is unknown, defaulting to 1000 [ 434.636069][T17011] hsr0 speed is unknown, defaulting to 1000 [ 434.655995][T17014] wg1 speed is unknown, defaulting to 1000 [ 434.678329][T17011] lo speed is unknown, defaulting to 1000 [ 434.689845][T17014] hsr0 speed is unknown, defaulting to 1000 [ 434.692004][T17003] wg1 speed is unknown, defaulting to 1000 [ 434.732750][ T1169] tipc: Disabling bearer [ 434.759667][ T1169] tipc: Left network mode [ 434.764127][T17003] hsr0 speed is unknown, defaulting to 1000 [ 434.782386][ T5877] Bluetooth: hci3: command tx timeout [ 434.861534][ T5877] Bluetooth: hci4: command tx timeout [ 435.048807][T17027] netlink: 'syz.4.3031': attribute type 1 has an invalid length. [ 435.099079][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 435.125719][T17014] lo speed is unknown, defaulting to 1000 [ 435.408695][T17033] sit0: left promiscuous mode [ 435.433317][T17033] 8021q: adding VLAN 0 to HW filter on device ` [ 435.444601][T17033] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.468146][T17033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.488941][T17033] wg2: left promiscuous mode [ 435.542919][T17033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.553513][T17033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.567367][T17033] veth1_vlan: left promiscuous mode [ 435.580868][T17033] veth0_vlan: left promiscuous mode [ 435.587619][T17033] veth0_vlan: entered promiscuous mode [ 435.607350][T17033] veth1_vlan: entered promiscuous mode [ 435.626507][T17033] veth1_macvtap: left promiscuous mode [ 435.634066][T17033] veth0_macvtap: left promiscuous mode [ 435.641029][T17033] veth0_macvtap: entered promiscuous mode [ 435.647832][T17033] veth1_macvtap: entered promiscuous mode [ 435.658477][T17033] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 435.724164][T17003] lo speed is unknown, defaulting to 1000 [ 435.734475][ T3538] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.751623][ T3538] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.780400][T17011] chnl_net:caif_netlink_parms(): no params data found [ 435.864591][ T3538] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.926679][T17045] netlink: 'syz.3.3036': attribute type 12 has an invalid length. [ 435.978492][ T3538] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.139113][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 436.461236][ T5877] Bluetooth: hci1: command tx timeout [ 436.478594][T17011] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.493729][T17011] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.501865][T17011] bridge_slave_0: entered allmulticast mode [ 436.515843][T17011] bridge_slave_0: entered promiscuous mode [ 436.564436][T17011] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.580453][T17011] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.587813][T17011] bridge_slave_1: entered allmulticast mode [ 436.595872][T17011] bridge_slave_1: entered promiscuous mode [ 436.714096][ T1169] hsr_slave_0: left promiscuous mode [ 436.723423][ T1169] hsr_slave_1: left promiscuous mode [ 436.779640][T17073] __nla_validate_parse: 4 callbacks suppressed [ 436.779659][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3042'. [ 436.783730][ T1169] veth0_macvtap: left allmulticast mode [ 436.801774][ T1169] veth0_macvtap: left promiscuous mode [ 436.859189][ T5877] Bluetooth: hci3: command tx timeout [ 436.939441][ T5877] Bluetooth: hci4: command tx timeout [ 437.179683][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 437.659887][ T6515] IPVS: ip_vs_send_async error -101 [ 437.686223][T17011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.730556][T17011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.796207][T17079] netlink: 'syz.3.3045': attribute type 1 has an invalid length. [ 437.814643][T17079] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3045'. [ 437.829291][T17079] netlink: 'syz.3.3045': attribute type 9 has an invalid length. [ 437.962128][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.982228][T17011] team0: Port device team_slave_0 added [ 437.994818][T17014] chnl_net:caif_netlink_parms(): no params data found [ 438.017206][T17011] team0: Port device team_slave_1 added [ 438.106161][T17011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.113580][T17011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.141075][T17011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.164347][T17011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.171614][T17011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.198431][T17011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.219130][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 438.315996][T17014] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.323439][T17014] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.331177][T17014] bridge_slave_0: entered allmulticast mode [ 438.338654][T17014] bridge_slave_0: entered promiscuous mode [ 438.366365][T17014] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.374712][T17014] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.388714][T17014] bridge_slave_1: entered allmulticast mode [ 438.396797][T17014] bridge_slave_1: entered promiscuous mode [ 438.415442][T17011] hsr_slave_0: entered promiscuous mode [ 438.422433][T17011] hsr_slave_1: entered promiscuous mode [ 438.428587][T17011] debugfs: 'hsr0' already exists in 'hsr' [ 438.434733][T17011] Cannot create hsr debugfs directory [ 438.463540][T17003] chnl_net:caif_netlink_parms(): no params data found [ 438.515245][T17014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.528640][T17014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.539967][ T5877] Bluetooth: hci1: command tx timeout [ 438.698348][T17014] team0: Port device team_slave_0 added [ 438.716811][T17014] team0: Port device team_slave_1 added [ 438.813745][T17100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3047'. [ 438.913774][T17014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.929047][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.939543][ T5877] Bluetooth: hci3: command tx timeout [ 438.956872][T17014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.995695][T17003] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.016313][T17003] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.024616][ T5877] Bluetooth: hci4: command tx timeout [ 439.031428][T17003] bridge_slave_0: entered allmulticast mode [ 439.042806][T17003] bridge_slave_0: entered promiscuous mode [ 439.051562][T17003] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.058731][T17003] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.066565][T17003] bridge_slave_1: entered allmulticast mode [ 439.074454][T17003] bridge_slave_1: entered promiscuous mode [ 439.082301][T17014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.115213][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.143562][T17014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.259084][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 439.314521][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3052'. [ 439.355343][T17003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.388428][T17003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.435637][T17014] hsr_slave_0: entered promiscuous mode [ 439.462958][T17014] hsr_slave_1: entered promiscuous mode [ 439.472063][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3054'. [ 439.478128][T17014] debugfs: 'hsr0' already exists in 'hsr' [ 439.486802][T17014] Cannot create hsr debugfs directory [ 439.519240][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3054'. [ 439.607298][T17003] team0: Port device team_slave_0 added [ 439.620003][T17003] team0: Port device team_slave_1 added [ 439.712605][T17003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.720466][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.757045][T17003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.782113][T17003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.791459][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.826115][T17003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.954236][T17011] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 440.025056][T17011] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 440.045187][T17003] hsr_slave_0: entered promiscuous mode [ 440.052546][T17003] hsr_slave_1: entered promiscuous mode [ 440.058736][T17003] debugfs: 'hsr0' already exists in 'hsr' [ 440.069077][T17003] Cannot create hsr debugfs directory [ 440.082109][T17011] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 440.177399][T17011] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 440.208754][T17134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.299130][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 440.627798][ T5877] Bluetooth: hci1: command tx timeout [ 440.633448][T17014] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 440.690792][T17014] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 440.719404][T17014] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 440.781165][T17014] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 440.997370][T17011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.029092][ T5877] Bluetooth: hci3: command tx timeout [ 441.055176][T17003] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 441.102333][ T5877] Bluetooth: hci4: command tx timeout [ 441.142014][T17011] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.157182][T17003] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 441.183336][T17003] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 441.230428][T17003] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 441.253948][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.261241][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.309992][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.317192][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.339121][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 441.595073][T17014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.651466][T17014] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.704653][T17003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.737811][T11190] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.745026][T11190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.780006][T17188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3070'. [ 441.788820][T11190] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.796177][T11190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.833045][T17003] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.870068][T11185] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.878376][T11185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.951752][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.958998][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.096344][T17014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.157027][T17011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.379306][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 442.541074][T17216] ================================================================== [ 442.549183][T17216] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 442.557084][T17216] Read of size 1 at addr ffff88802e6a31f0 by task syz.3.3075/17216 [ 442.564985][T17216] [ 442.567312][T17216] CPU: 1 UID: 0 PID: 17216 Comm: syz.3.3075 Not tainted syzkaller #0 PREEMPT(full) [ 442.567334][T17216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.567345][T17216] Call Trace: [ 442.567352][T17216] [ 442.567359][T17216] dump_stack_lvl+0x189/0x250 [ 442.567381][T17216] ? __kasan_check_byte+0x12/0x40 [ 442.567405][T17216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.567423][T17216] ? lock_release+0x4b/0x3e0 [ 442.567448][T17216] ? __virt_addr_valid+0x4a5/0x5c0 [ 442.567473][T17216] print_report+0xca/0x240 [ 442.567490][T17216] ? xfrm_state_find+0x2cf2/0x5400 [ 442.567505][T17216] kasan_report+0x118/0x150 [ 442.567527][T17216] ? xfrm_state_find+0x2cf2/0x5400 [ 442.567547][T17216] xfrm_state_find+0x2cf2/0x5400 [ 442.567561][T17216] ? check_noncircular+0xe0/0x160 [ 442.567589][T17216] ? validate_chain+0x897/0x2140 [ 442.567611][T17216] ? xfrm_state_find+0x1da/0x5400 [ 442.567629][T17216] ? __pfx_xfrm_state_find+0x10/0x10 [ 442.567653][T17216] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 442.567686][T17216] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 442.567707][T17216] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 442.567728][T17216] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 442.567749][T17216] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 442.567769][T17216] ? __lock_acquire+0xab9/0xd20 [ 442.567804][T17216] ? xfrm_expand_policies+0x41f/0x6a0 [ 442.567825][T17216] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 442.567849][T17216] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 442.567867][T17216] ? __pfx_rcuref_put+0x10/0x10 [ 442.567892][T17216] xfrm_lookup_route+0x3c/0x1c0 [ 442.567912][T17216] tcp_v4_connect+0x846/0x1a00 [ 442.567932][T17216] ? __lock_acquire+0xab9/0xd20 [ 442.567961][T17216] ? __pfx_tcp_v4_connect+0x10/0x10 [ 442.567985][T17216] __inet_stream_connect+0x2ae/0xe80 [ 442.568010][T17216] ? __local_bh_enable_ip+0x12d/0x1c0 [ 442.568026][T17216] ? __pfx___inet_stream_connect+0x10/0x10 [ 442.568046][T17216] ? __local_bh_enable_ip+0x12d/0x1c0 [ 442.568061][T17216] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 442.568082][T17216] inet_stream_connect+0x66/0xa0 [ 442.568103][T17216] kernel_connect+0x116/0x180 [ 442.568124][T17216] ? __pfx_kernel_connect+0x10/0x10 [ 442.568150][T17216] ? do_raw_spin_unlock+0x122/0x240 [ 442.568170][T17216] smc_connect+0x7a5/0xd90 [ 442.568196][T17216] __sys_connect+0x313/0x440 [ 442.568218][T17216] ? __pfx___sys_connect+0x10/0x10 [ 442.568245][T17216] ? rcu_is_watching+0x15/0xb0 [ 442.568265][T17216] __x64_sys_connect+0x7a/0x90 [ 442.568287][T17216] do_syscall_64+0xfa/0x3b0 [ 442.568302][T17216] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.568322][T17216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.568337][T17216] ? clear_bhb_loop+0x60/0xb0 [ 442.568355][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.568371][T17216] RIP: 0033:0x7fa269d8ebe9 [ 442.568387][T17216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.568402][T17216] RSP: 002b:00007fa26ac57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 442.568420][T17216] RAX: ffffffffffffffda RBX: 00007fa269fc5fa0 RCX: 00007fa269d8ebe9 [ 442.568433][T17216] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 442.568444][T17216] RBP: 00007fa269e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 442.568454][T17216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.568465][T17216] R13: 00007fa269fc6038 R14: 00007fa269fc5fa0 R15: 00007ffea72e8958 [ 442.568486][T17216] [ 442.568493][T17216] [ 442.647205][T17221] netlink: 'syz.4.3077': attribute type 1 has an invalid length. [ 442.647678][T17216] Allocated by task 15530: [ 442.657310][T17221] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3077'. [ 442.657699][T17216] kasan_save_track+0x3e/0x80 [ 442.940462][T17216] __kasan_slab_alloc+0x6c/0x80 [ 442.945332][T17216] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 442.950803][T17216] xfrm_state_alloc+0x24/0x2f0 [ 442.955584][T17216] __find_acq_core+0x8a7/0x1c00 [ 442.960447][T17216] xfrm_find_acq+0x78/0xa0 [ 442.964864][T17216] xfrm_alloc_userspi+0x6b3/0xc90 [ 442.969878][T17216] xfrm_user_rcv_msg+0x7a3/0xab0 [ 442.974800][T17216] netlink_rcv_skb+0x208/0x470 [ 442.979550][T17216] xfrm_netlink_rcv+0x79/0x90 [ 442.984211][T17216] netlink_unicast+0x82f/0x9e0 [ 442.988958][T17216] netlink_sendmsg+0x805/0xb30 [ 442.993712][T17216] __sock_sendmsg+0x219/0x270 [ 442.998400][T17216] ____sys_sendmsg+0x505/0x830 [ 443.003151][T17216] ___sys_sendmsg+0x21f/0x2a0 [ 443.007906][T17216] __x64_sys_sendmsg+0x19b/0x260 [ 443.012918][T17216] do_syscall_64+0xfa/0x3b0 [ 443.017413][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.023292][T17216] [ 443.025601][T17216] Freed by task 979: [ 443.029474][T17216] kasan_save_track+0x3e/0x80 [ 443.034139][T17216] kasan_save_free_info+0x46/0x50 [ 443.039148][T17216] __kasan_slab_free+0x5b/0x80 [ 443.043898][T17216] kmem_cache_free+0x18f/0x400 [ 443.048733][T17216] xfrm_state_gc_task+0x52d/0x6b0 [ 443.053743][T17216] process_scheduled_works+0xae1/0x17b0 [ 443.059273][T17216] worker_thread+0x8a0/0xda0 [ 443.063939][T17216] kthread+0x70e/0x8a0 [ 443.068080][T17216] ret_from_fork+0x3f9/0x770 [ 443.072653][T17216] ret_from_fork_asm+0x1a/0x30 [ 443.077409][T17216] [ 443.079736][T17216] The buggy address belongs to the object at ffff88802e6a2ec0 [ 443.079736][T17216] which belongs to the cache xfrm_state of size 928 [ 443.093684][T17216] The buggy address is located 816 bytes inside of [ 443.093684][T17216] freed 928-byte region [ffff88802e6a2ec0, ffff88802e6a3260) [ 443.107474][T17216] [ 443.109788][T17216] The buggy address belongs to the physical page: [ 443.116210][T17216] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802e6a2ec0 pfn:0x2e6a0 [ 443.126271][T17216] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 443.134754][T17216] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 443.142384][T17216] page_type: f5(slab) [ 443.146438][T17216] raw: 00fff00000000040 ffff8880202c9a00 dead000000000122 0000000000000000 [ 443.155094][T17216] raw: ffff88802e6a2ec0 00000000800f000a 00000000f5000000 0000000000000000 [ 443.163666][T17216] head: 00fff00000000040 ffff8880202c9a00 dead000000000122 0000000000000000 [ 443.172332][T17216] head: ffff88802e6a2ec0 00000000800f000a 00000000f5000000 0000000000000000 [ 443.181170][T17216] head: 00fff00000000002 ffffea0000b9a801 00000000ffffffff 00000000ffffffff [ 443.189831][T17216] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 443.198609][T17216] page dumped because: kasan: bad access detected [ 443.205019][T17216] page_owner tracks the page as allocated [ 443.210893][T17216] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6283, tgid 6274 (syz.1.88), ts 85455553913, free_ts 85450740121 [ 443.229894][T17216] post_alloc_hook+0x240/0x2a0 [ 443.234656][T17216] get_page_from_freelist+0x21e4/0x22c0 [ 443.240187][T17216] __alloc_frozen_pages_noprof+0x181/0x370 [ 443.245981][T17216] alloc_pages_mpol+0x232/0x4a0 [ 443.250818][T17216] allocate_slab+0x8a/0x370 [ 443.255308][T17216] ___slab_alloc+0xbeb/0x1410 [ 443.259974][T17216] kmem_cache_alloc_noprof+0x283/0x3c0 [ 443.265424][T17216] xfrm_state_alloc+0x24/0x2f0 [ 443.270179][T17216] pfkey_add+0x6e4/0x2e00 [ 443.274496][T17216] pfkey_sendmsg+0xbfe/0x1090 [ 443.279158][T17216] __sock_sendmsg+0x219/0x270 [ 443.283826][T17216] ____sys_sendmsg+0x505/0x830 [ 443.288579][T17216] ___sys_sendmsg+0x21f/0x2a0 [ 443.293238][T17216] __x64_sys_sendmsg+0x19b/0x260 [ 443.298168][T17216] do_syscall_64+0xfa/0x3b0 [ 443.302656][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.308564][T17216] page last free pid 6274 tgid 6274 stack trace: [ 443.314902][T17216] __free_frozen_pages+0xbc4/0xd30 [ 443.320038][T17216] __slab_free+0x303/0x3c0 [ 443.324442][T17216] qlist_free_all+0x97/0x140 [ 443.329022][T17216] kasan_quarantine_reduce+0x148/0x160 [ 443.334560][T17216] __kasan_slab_alloc+0x22/0x80 [ 443.339402][T17216] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 443.344861][T17216] vm_area_dup+0x2b/0x680 [ 443.349271][T17216] __split_vma+0x1a9/0xa00 [ 443.353673][T17216] vma_modify+0x13b3/0x1970 [ 443.358160][T17216] vma_modify_flags+0x1e8/0x230 [ 443.362999][T17216] mprotect_fixup+0x407/0x9c0 [ 443.367753][T17216] do_mprotect_pkey+0x8cd/0xce0 [ 443.372588][T17216] __x64_sys_mprotect+0x80/0x90 [ 443.377425][T17216] do_syscall_64+0xfa/0x3b0 [ 443.381920][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.387799][T17216] [ 443.390175][T17216] Memory state around the buggy address: [ 443.395788][T17216] ffff88802e6a3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 443.404039][T17216] ffff88802e6a3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 443.412155][T17216] >ffff88802e6a3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 443.419216][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 443.420204][T17216] ^ [ 443.420216][T17216] ffff88802e6a3200: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 443.443052][T17216] ffff88802e6a3280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 443.451190][T17216] ================================================================== [ 443.472748][T17216] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 443.479982][T17216] CPU: 0 UID: 0 PID: 17216 Comm: syz.3.3075 Not tainted syzkaller #0 PREEMPT(full) [ 443.489657][T17216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 443.499793][T17216] Call Trace: [ 443.503064][T17216] [ 443.506085][T17216] dump_stack_lvl+0x99/0x250 [ 443.510667][T17216] ? __asan_memcpy+0x40/0x70 [ 443.515336][T17216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.520612][T17216] ? __pfx__printk+0x10/0x10 [ 443.525201][T17216] vpanic+0x281/0x750 [ 443.529175][T17216] ? preempt_schedule+0xae/0xc0 [ 443.534033][T17216] ? __pfx_vpanic+0x10/0x10 [ 443.538527][T17216] ? preempt_schedule_common+0x83/0xd0 [ 443.543977][T17216] ? preempt_schedule+0xae/0xc0 [ 443.548825][T17216] ? __pfx_preempt_schedule+0x10/0x10 [ 443.554192][T17216] panic+0xb9/0xc0 [ 443.557905][T17216] ? __pfx_panic+0x10/0x10 [ 443.562398][T17216] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 443.568322][T17216] ? xfrm_state_find+0x2cf2/0x5400 [ 443.573432][T17216] check_panic_on_warn+0x89/0xb0 [ 443.578366][T17216] ? xfrm_state_find+0x2cf2/0x5400 [ 443.583471][T17216] end_report+0x78/0x160 [ 443.587707][T17216] kasan_report+0x129/0x150 [ 443.592205][T17216] ? xfrm_state_find+0x2cf2/0x5400 [ 443.597391][T17216] xfrm_state_find+0x2cf2/0x5400 [ 443.602318][T17216] ? check_noncircular+0xe0/0x160 [ 443.607341][T17216] ? validate_chain+0x897/0x2140 [ 443.612470][T17216] ? xfrm_state_find+0x1da/0x5400 [ 443.617486][T17216] ? __pfx_xfrm_state_find+0x10/0x10 [ 443.622765][T17216] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 443.628916][T17216] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 443.634799][T17216] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 443.641382][T17216] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 443.647440][T17216] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 443.653407][T17216] ? __lock_acquire+0xab9/0xd20 [ 443.658270][T17216] ? xfrm_expand_policies+0x41f/0x6a0 [ 443.663631][T17216] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 443.668998][T17216] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 443.674789][T17216] ? __pfx_rcuref_put+0x10/0x10 [ 443.679636][T17216] xfrm_lookup_route+0x3c/0x1c0 [ 443.684479][T17216] tcp_v4_connect+0x846/0x1a00 [ 443.689589][T17216] ? __lock_acquire+0xab9/0xd20 [ 443.694453][T17216] ? __pfx_tcp_v4_connect+0x10/0x10 [ 443.699656][T17216] __inet_stream_connect+0x2ae/0xe80 [ 443.704941][T17216] ? __local_bh_enable_ip+0x12d/0x1c0 [ 443.710305][T17216] ? __pfx___inet_stream_connect+0x10/0x10 [ 443.716135][T17216] ? __local_bh_enable_ip+0x12d/0x1c0 [ 443.721515][T17216] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 443.727236][T17216] inet_stream_connect+0x66/0xa0 [ 443.732181][T17216] kernel_connect+0x116/0x180 [ 443.736853][T17216] ? __pfx_kernel_connect+0x10/0x10 [ 443.742049][T17216] ? do_raw_spin_unlock+0x122/0x240 [ 443.747253][T17216] smc_connect+0x7a5/0xd90 [ 443.751753][T17216] __sys_connect+0x313/0x440 [ 443.756426][T17216] ? __pfx___sys_connect+0x10/0x10 [ 443.761536][T17216] ? rcu_is_watching+0x15/0xb0 [ 443.766351][T17216] __x64_sys_connect+0x7a/0x90 [ 443.771114][T17216] do_syscall_64+0xfa/0x3b0 [ 443.775612][T17216] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.780800][T17216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.786887][T17216] ? clear_bhb_loop+0x60/0xb0 [ 443.791641][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.797550][T17216] RIP: 0033:0x7fa269d8ebe9 [ 443.801954][T17216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.821553][T17216] RSP: 002b:00007fa26ac57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 443.829972][T17216] RAX: ffffffffffffffda RBX: 00007fa269fc5fa0 RCX: 00007fa269d8ebe9 [ 443.837944][T17216] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 443.845910][T17216] RBP: 00007fa269e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 443.853875][T17216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.861834][T17216] R13: 00007fa269fc6038 R14: 00007fa269fc5fa0 R15: 00007ffea72e8958 [ 443.869808][T17216] [ 443.873228][T17216] Kernel Offset: disabled [ 443.877543][T17216] Rebooting in 86400 seconds..