last executing test programs: 2m29.199957606s ago: executing program 2 (id=1974): socket(0x1e, 0x4, 0x0) r0 = socket(0x2b, 0x80801, 0x1) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r1, &(0x7f00000062c0)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, &(0x7f0000000140)=[{&(0x7f0000000740)=""/4096}, {&(0x7f0000000080)=""/84}, {&(0x7f0000000200)=""/236}]}, 0x1}, {{&(0x7f0000000300)=@hci, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/25}, {&(0x7f0000000380)=""/143}, {&(0x7f0000000440)=""/73}, {&(0x7f00000004c0)=""/195}, {&(0x7f00000005c0)=""/133}], 0x0, &(0x7f0000001740)=""/217}, 0xb86}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001840)=""/231}, {&(0x7f0000001940)=""/214}, {&(0x7f0000001a40)=""/28}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)=""/176}, {&(0x7f0000002b80)=""/243}, {&(0x7f0000002c80)=""/87}], 0x0, &(0x7f0000002d80)=""/155}, 0xcd}, {{&(0x7f0000002e40)=@ieee802154={0x24, @long}, 0x0, &(0x7f0000004240)=[{&(0x7f0000002ec0)=""/135}, {&(0x7f0000002f80)=""/118}, {&(0x7f0000003000)=""/3}, {&(0x7f0000003040)=""/104}, {&(0x7f00000030c0)=""/209}, {&(0x7f00000031c0)=""/19}, {&(0x7f0000003200)=""/11}, {&(0x7f0000003240)=""/4096}], 0x0, &(0x7f00000042c0)=""/101}, 0x9}, {{&(0x7f0000004340)=@tipc, 0x0, &(0x7f0000004840)=[{&(0x7f00000043c0)=""/4}, {&(0x7f0000004400)=""/250}, {&(0x7f0000004500)}, {&(0x7f0000004540)=""/152}, {&(0x7f0000004600)=""/166}, {&(0x7f00000046c0)=""/250}, {&(0x7f00000047c0)=""/81}], 0x0, &(0x7f00000048c0)=""/4096}}, {{&(0x7f00000058c0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005940)}, {&(0x7f0000005980)=""/109}, {&(0x7f0000005a00)=""/41}, {&(0x7f0000005a40)=""/201}, {&(0x7f0000005b40)=""/77}, {&(0x7f0000005bc0)=""/194}], 0x0, &(0x7f0000005d40)=""/159}, 0x6}, {{&(0x7f0000005e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, &(0x7f0000006200)=[{&(0x7f0000005e80)=""/190}, {&(0x7f0000005f40)=""/76}, {&(0x7f0000005fc0)=""/144}, {&(0x7f0000006080)=""/184}, {&(0x7f0000006140)=""/147}], 0x0, &(0x7f0000006280)=""/34}, 0x7fff}], 0x4000306, 0x10022, 0x0) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0xd, 0x0, 0x0) (async, rerun: 64) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 2m28.92811454s ago: executing program 2 (id=1976): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xf25) shutdown(r0, 0x0) 2m28.700943991s ago: executing program 2 (id=1978): socket$kcm(0xa, 0x3, 0x87) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x7, 0x2) (async) pselect6(0x40, &(0x7f0000000040)={0x7ffc, 0x5, 0x7, 0x7fc0000000000000, 0x2, 0xc, 0x2000000000000007, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m28.432204643s ago: executing program 2 (id=1983): r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x800) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r1, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fffffff, 0x3f}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0xc1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0xb}, {0x77}, {0x18, 0x1}, {0x24}, {0x12, 0x1}, {0x18}, {0x12}, {0x36, 0x1}, {0x9, 0x1}, {0x2}, {0x16}, {0x1a}, {0x4}, {0x12}, {0x36, 0x1}, {0x1b, 0x1}, {0x6, 0x1}]}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9e}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xb}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x8, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 2m27.644279445s ago: executing program 2 (id=1990): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'vlan0\x00', {0xd6}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) socket(0x23, 0x80805, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xbc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xbc}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) unshare(0x62040200) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) write$tun(0xffffffffffffffff, 0x0, 0x3e) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) sendmmsg$inet(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)=0xe73, 0x4) shutdown(r6, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030b0000009bafef3fb93d4f3212df2bbf0007000000000000010009000000000003000600000000000200000000000000000040000000000002000100000000000000ff0d00000000030005000000000002000000"], 0x58}, 0x1, 0x7}, 0x0) 2m27.256379812s ago: executing program 1 (id=1993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x30}}, 0x40080) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x4e24, @private=0xa010101}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r6], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0xb, 0x0, 0x8200, 0x8, 0x776, 0x1, 0xfffffff8, 0x64, r6}, &(0x7f0000000100)=0x20) 2m26.94288183s ago: executing program 1 (id=1996): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x73a87a33, 0x7, 0x4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r2, 0xcfd3, 0x9, 0x100}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) 2m26.724729832s ago: executing program 1 (id=1998): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 2m26.652466053s ago: executing program 2 (id=2001): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3], 0x44}}, 0x2000800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 2m25.875680069s ago: executing program 3 (id=2006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000062000000000000000000800711074000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x24}, 0x20) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0}) 2m25.650803079s ago: executing program 3 (id=2007): socket$igmp6(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x400000000080803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xda02}) close(r2) socket$inet_udp(0x2, 0x2, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x10, 0x0, 0x40002, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0xffffffff, 0x1}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x2, 0x1}, {0x4, 0x8}, {0x3, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x94) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4004004) close(r8) socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) close(0x3) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0xae}, "ffb00afe4e70"}}}}}}}, 0x0) 2m24.734514048s ago: executing program 1 (id=2011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00001f00bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m24.626135363s ago: executing program 1 (id=2012): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x11, @rand_addr=0x64010101, 0x4e24, 0x1, 'ovf\x00', 0x20, 0xa, 0x1c}, 0x2c) (async) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @rand_addr=0x64010100, 0x4e22, 0x2000003, 'sh\x00', 0x2f, 0x4, 0x76}, 0x2c) (async) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) (async) socket$kcm(0x2d, 0x2, 0x0) (async) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000200)=0x29, 0x4) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0xa00}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m24.500572628s ago: executing program 3 (id=2013): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001a80)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x15, 0x505, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x80, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x2f, 0xf2, 0x58, 0x10001, 0x1c, @empty, @empty, 0x40, 0x8000, 0x100, 0xfffffffc}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x1, 0x7, 0x4, 0x10000, {{0x28, 0x4, 0x3, 0x8, 0xa0, 0x66, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x2, 0xc, "768f15da836b9ed9c14b"}, {0x7, 0x6, "d0d528bc"}, {0x1, 0x3, 'J'}]}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x7, 0x8, "b047113981a5"}, {0x7, 0x12, "5cbc67f9cfe025e40f866402efdc46f2"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x11, "e8f8f12b65b78eb1895612e4c4c415"}, @end, @generic={0x44, 0x3, "c8"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x54, 0x3, 0x2, [{@loopback, 0x8000}, {@rand_addr=0x64010102, 0x8000}, {@multicast1, 0x59b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast2, 0xf}, {@loopback, 0x7}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x3a, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x2000, 0x25dfdbfd, {0x7, 0x0, 0x0, r9, 0x10400, 0x1952}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="480400001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r12, @ANYBLOB="080004001107"], 0x448}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffef7}}, @TCA_STAB={0x9a83c187102aa54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x5, 0x7, 0x0, 0x9, 0x2d, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wg2\x00', 0x0}) r16 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r17, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_MASK={0x4, 0x5, 0x4}]}}]}, 0x40}}, 0x20040054) r18 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r20 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r20, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r19, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x268, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x2c048850}, 0x810) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000006909000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x41}, 0x94) 2m24.43680836s ago: executing program 1 (id=2014): socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r2, 0x107, 0x8, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x44) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9484}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x51, 0xa6, &(0x7f0000000c80)=""/166, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x5, 0x3, 0x436}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000a80)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @broadcast, @broadcast, @from_mac, {0x3, 0x8}, @value=@ver_80211n={0x0, 0x1fa, 0x3, 0x3, 0x0, 0x3, 0x1}}, 0x0, 0x0, 0x19, @val={0x10, 0x1, 0x77}, [{0xdd, 0x6, "294827d9339a"}, {0xdd, 0x96, "77792faad7d283ffe4b51fe50541499936fc255dce0fd9ff7ed0669caa9365eb835ad0c648a345013cc71648e9e1f3a8f1336d5359c9c3a9472f76ba333a5c63b457f16fd605fdaca882418e5b2a9a35b5422505510c05c4d29708c350a5656755ba80f63c88aeea365c68c601a03c7269bfa8903a1629da230b69c70b37159c8887986c194f1214a786d7ba8530239665f288eda9ec"}]}, 0xc5) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e) 2m23.835467998s ago: executing program 3 (id=2017): socket$nl_xfrm(0x10, 0x3, 0x6) 2m23.660906272s ago: executing program 3 (id=2019): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600000000000000000000000008000000000000", @ANYRES32=0x0, @ANYRES32], 0x21) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f00000008c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000140)='(^&\x00', 0x4) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40084) listen(0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000ffffff9c0000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 2m23.48909406s ago: executing program 3 (id=2021): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x28, 0x5, 0x2e8113f0, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x2008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0x7, 0x64eb3312969c2f9a}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x3000, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xd, 0x1}, {0x200, 0x25, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x5c}}, 0x0) (rerun: 32) getsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 1m57.197992747s ago: executing program 32 (id=2001): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3], 0x44}}, 0x2000800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 1m57.196817465s ago: executing program 33 (id=2014): socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r2, 0x107, 0x8, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x44) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9484}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x51, 0xa6, &(0x7f0000000c80)=""/166, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x5, 0x3, 0x436}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000a80)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @broadcast, @broadcast, @from_mac, {0x3, 0x8}, @value=@ver_80211n={0x0, 0x1fa, 0x3, 0x3, 0x0, 0x3, 0x1}}, 0x0, 0x0, 0x19, @val={0x10, 0x1, 0x77}, [{0xdd, 0x6, "294827d9339a"}, {0xdd, 0x96, "77792faad7d283ffe4b51fe50541499936fc255dce0fd9ff7ed0669caa9365eb835ad0c648a345013cc71648e9e1f3a8f1336d5359c9c3a9472f76ba333a5c63b457f16fd605fdaca882418e5b2a9a35b5422505510c05c4d29708c350a5656755ba80f63c88aeea365c68c601a03c7269bfa8903a1629da230b69c70b37159c8887986c194f1214a786d7ba8530239665f288eda9ec"}]}, 0xc5) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e) 1m57.196259936s ago: executing program 34 (id=2021): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x28, 0x5, 0x2e8113f0, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x2008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0x7, 0x64eb3312969c2f9a}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x3000, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xd, 0x1}, {0x200, 0x25, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x5c}}, 0x0) (rerun: 32) getsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 50.193521545s ago: executing program 4 (id=2045): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000021dbdf2501000000eedf6e07fd0b6b1e571bfd10b67d5bb0128ec2011abe019449e333ad951ac14f99875d8d6dda43e288940ef6863bb6f991f710688e8209215c830bdd370f95a8a1e85b93836807a8ab469cc2d011db35abb105b510811c9d3b273cee6def9f89ed255147fed4332e10d3136daa745faa963de9cd8f1a50e87aa27a"], 0x14}}, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f00000001c0)="b96f1dc2fffe73f32b2941d68056bec1c6d3536d9e6c160b01ba1719dee2b2cd66ad3e791b7707e68f9b65bfda0bb0357e2e532ea68a9c1879579990fa15884f7dcc4dd936c20f0e76dafdaddb298dc1b2f3a1387a860176d8a1325b9d842b1d52c63099c32f4417e5343b60cdf625077b0b4197d5fcf9f83b223ee29633a643fb91cc36557af8d89a81261ef35e165621b88457b55e7b919a0b9f81166cc4f0c06f22e0b594eb297e8009676be9057cd205f0fe50575326acf94b3afefc17c56653f160bf60b829e87fe594809490b7a2906645a98d6988f7cc730d6736f732fc1e"}, 0x20) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r3}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', r8, @fallback=0x2f, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="abb20e344ed80000", @ANYRES16=r10, @ANYBLOB="030726bd7000000000001f000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, r11, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x7}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x2c}}, 0x40800) r12 = socket$inet6(0xa, 0x2, 0x3a) r13 = accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f00000004c0)=@req3={0xd, 0x6, 0x859e, 0x6, 0xfff, 0x2, 0x4}, 0x1c) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @loopback, 0x9}, 0x1c) sendto$inet6(r12, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)="318d23d7479a46ded6362240d490a13030f7bb526a5a9a97034a4b43b4eaf18ed31f31e34354ece8d908b34f04d166e9c805a317149e984bf44de6be1dc39d0a0271049c4e4a43d2650cc4e57d82a68a495feab39dec78b6f905504bc161fcc1557cea9a8c2aa127bba354eff89179e640416ff9b30fd688ba7fa65b39756b3b806a49c2ba8f9d0d64ac743ce5ab224c88cdf057b141f6d23681855a3f39015933d72c484951be5a865bf0a60070b89e38f4689a1f863770", 0xb8}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r14, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000080601020000000100000000030000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r15, 0x0) 41.933867301s ago: executing program 4 (id=2047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "5f30d608eafc76fc7901e578aa591e8a"}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0xfffffe85, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004880) 35.860545497s ago: executing program 4 (id=2049): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0x3}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x8e, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc041}, 0x0) 33.118385902s ago: executing program 0 (id=2050): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x1, 0x4) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) (async) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000980)={0x1, 0xda8}, 0x8) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 30.148805391s ago: executing program 4 (id=2051): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x20000400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff1, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="e90c610faca20180c20000020800450000240000e0000011907800000020000000000000000000109078a20c0001005ee7e4028be40339000000"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r4, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48881}, 0x40) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r10, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="400000b29e29d1582b61c6002652703400"/33, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r12}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) 28.769609306s ago: executing program 0 (id=2052): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="dc9ebe30", 0x4}], 0x2}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@gettaction={0x24, 0x32, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xf2, 0xfffffffffffffffe}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, r5, 0x3, 0x5, 0x1}, 0x50) (async) r6 = openat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000180)=""/161, 0xa1}, {&(0x7f0000000240)=""/7, 0x7}], 0x2, 0x5, 0x9) 21.133276899s ago: executing program 0 (id=2053): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x1000) accept$ax25(r0, &(0x7f00000004c0)={{0x3, @bcast}, [@null, @bcast, @bcast, @null, @remote, @default, @null, @bcast]}, &(0x7f0000000540)=0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a800160008001e4009001120036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) unshare(0x8040480) unshare(0x2a020480) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffe50, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000300)=""/124, &(0x7f0000000380)=0x7c) 20.377872422s ago: executing program 4 (id=2054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000e2010000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000024a84ef3ba65c4c1000000000000e8cc809700"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000002d00090026bd70000000080204000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) unshare(0x62040200) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x106, 0x70bd25, 0x25dfdbff, {{@in=@multicast2, @in6=@private1, 0x4e23, 0x48, 0x4e20, 0x31d, 0xa, 0xc0, 0x80, 0x2c, 0x0, 0xee00}, {0x8, 0x1, 0x2, 0x8000, 0x8000000000000000, 0x2, 0x5, 0x7fff}, {0x0, 0x2, 0x400, 0x1}, 0x6, 0x6e6bb2, 0x2, 0x1}, [@lastused={0xc, 0xf, 0x80000000}]}, 0xc4}, 0x1, 0x0, 0x0, 0x240c0000}, 0x20000040) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14.474976635s ago: executing program 0 (id=2055): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 10.470395831s ago: executing program 4 (id=2056): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x1}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = epoll_create(0x8c) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="101add79000000f1000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 9.398941761s ago: executing program 0 (id=2057): socket$kcm(0x10, 0x7, 0x10) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4040004) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0xfffffffffffffe45) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x40010100) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r5, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES32=r1, @ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) close(0x4) 0s ago: executing program 0 (id=2058): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x1411, 0x1, 0x70bd29}, 0x10}}, 0x0) kernel console output (not intermixed with test programs): 0x74/0xa0 [ 208.424325][ T8678] ___sys_recvmsg+0x1b5/0x510 [ 208.424353][ T8678] ? __pfx____sys_recvmsg+0x10/0x10 [ 208.424404][ T8678] ? __fget_files+0x3a0/0x420 [ 208.424435][ T8678] __x64_sys_recvmsg+0x198/0x260 [ 208.424462][ T8678] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 208.424495][ T8678] ? __pfx_ksys_write+0x10/0x10 [ 208.424527][ T8678] ? do_syscall_64+0xbe/0xfa0 [ 208.424558][ T8678] do_syscall_64+0xfa/0xfa0 [ 208.424583][ T8678] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.424609][ T8678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.424628][ T8678] ? clear_bhb_loop+0x60/0xb0 [ 208.424652][ T8678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.424671][ T8678] RIP: 0033:0x7f79aa78f6c9 [ 208.424690][ T8678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.424707][ T8678] RSP: 002b:00007f79ab6d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 208.424730][ T8678] RAX: ffffffffffffffda RBX: 00007f79aa9e5fa0 RCX: 00007f79aa78f6c9 [ 208.424744][ T8678] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 208.424757][ T8678] RBP: 00007f79ab6d1090 R08: 0000000000000000 R09: 0000000000000000 [ 208.424770][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.424781][ T8678] R13: 00007f79aa9e6038 R14: 00007f79aa9e5fa0 R15: 00007fffc78f1798 [ 208.424818][ T8678] [ 209.019136][ T8683] delete_channel: no stack [ 209.102730][ T8687] netlink: 136 bytes leftover after parsing attributes in process `syz.3.839'. [ 209.136081][ T8687] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 209.438775][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 209.493901][ T8711] netlink: 32 bytes leftover after parsing attributes in process `syz.1.846'. [ 209.526603][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 209.665038][ T8714] netlink: 'syz.4.850': attribute type 26 has an invalid length. [ 209.741180][ T8730] netlink: 'syz.0.853': attribute type 4 has an invalid length. [ 210.113221][ T8739] delete_channel: no stack [ 210.191212][ T8742] netlink: 136 bytes leftover after parsing attributes in process `syz.3.861'. [ 210.209468][ T8742] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 210.308324][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.863'. [ 210.700455][ T8764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.738957][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 210.795064][ T8761] netlink: 'syz.0.869': attribute type 2 has an invalid length. [ 210.796093][ T8386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 210.899618][ T8765] wg1 speed is unknown, defaulting to 1000 [ 211.064306][ T8386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 211.101914][ T8386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 211.154956][ T8778] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 211.354529][ T8780] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 211.403305][ T8780] bond1 (unregistering): Released all slaves [ 211.470684][ T8386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 211.498793][ T8793] tipc: Enabled bearer , priority 0 [ 211.691984][ T8781] tipc: Disabling bearer [ 211.742896][ T8803] bridge0: entered promiscuous mode [ 211.750874][ T8803] bridge0: port 3(macvtap1) entered blocking state [ 211.758387][ T8803] bridge0: port 3(macvtap1) entered disabled state [ 211.765893][ T8803] macvtap1: entered allmulticast mode [ 211.771431][ T8803] bridge0: entered allmulticast mode [ 211.796118][ T8803] macvtap1: left allmulticast mode [ 211.809555][ T8803] bridge0: left allmulticast mode [ 211.827791][ T8803] bridge0: left promiscuous mode [ 211.875866][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 211.876464][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 211.882056][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 211.888593][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 212.435969][ T8829] wg1 speed is unknown, defaulting to 1000 [ 212.543424][ T8846] nbd: socks must be embedded in a SOCK_ITEM attr [ 212.576536][ T8846] xt_nat: multiple ranges no longer supported [ 212.612820][ T8835] wg1 speed is unknown, defaulting to 1000 [ 213.170773][ T8858] delete_channel: no stack [ 213.362563][ T8866] delete_channel: no stack [ 213.479777][ T8871] __nla_validate_parse: 15 callbacks suppressed [ 213.479802][ T8871] netlink: 48 bytes leftover after parsing attributes in process `syz.4.905'. [ 214.191289][ T8890] netlink: 'syz.4.911': attribute type 2 has an invalid length. [ 214.209157][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.916'. [ 214.249058][ T8889] wg1 speed is unknown, defaulting to 1000 [ 214.598759][ T8915] netlink: 48 bytes leftover after parsing attributes in process `syz.0.921'. [ 215.278635][ T8937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.293779][ T8932] wg1 speed is unknown, defaulting to 1000 [ 215.303777][ T8937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.370438][ T8926] wg1 speed is unknown, defaulting to 1000 [ 215.677771][ T8955] netlink: 2220 bytes leftover after parsing attributes in process `syz.2.935'. [ 215.934873][ T8958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.936'. [ 215.985930][ T8962] netem: incorrect ge model size [ 215.992758][ T8962] netem: change failed [ 216.076048][ T8964] wg1 speed is unknown, defaulting to 1000 [ 216.255200][ T8977] netlink: 'syz.2.939': attribute type 2 has an invalid length. [ 216.449260][ T8381] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 216.460806][ T8381] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 216.487674][ T8381] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 216.548166][ T8993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.949'. [ 216.580838][ T8381] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 216.595919][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.947'. [ 217.050514][ T9006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.062510][ T9006] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.079501][ T9006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.098013][ T9004] batman_adv: batadv0: Adding interface: dummy0 [ 217.113245][ T9004] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.177033][ T9004] batman_adv: batadv0: Interface activated: dummy0 [ 217.288757][ T9007] batadv0: mtu less than device minimum [ 217.312086][ T9007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.325213][ T9007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.337534][ T9007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.349891][ T9007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.362367][ T9007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.374537][ T9007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.386740][ T9007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.399082][ T9007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.440336][ T9014] delete_channel: no stack [ 217.737704][ T9033] bridge0: entered promiscuous mode [ 217.751044][ T9033] bridge0: port 3(macvtap1) entered blocking state [ 217.761502][ T9033] bridge0: port 3(macvtap1) entered disabled state [ 217.770818][ T9033] macvtap1: entered allmulticast mode [ 217.777606][ T9033] bridge0: entered allmulticast mode [ 217.794636][ T9033] macvtap1: left allmulticast mode [ 217.800158][ T9033] bridge0: left allmulticast mode [ 217.814911][ T9033] bridge0: left promiscuous mode [ 217.993736][ T9048] netlink: 'syz.0.966': attribute type 3 has an invalid length. [ 218.023139][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 218.082354][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 218.109276][ T9048] vlan2: entered allmulticast mode [ 218.117498][ T9051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.968'. [ 218.153348][ T9048] batadv_slave_1: entered allmulticast mode [ 218.192639][ T8385] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.219017][ T8385] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.243197][ T8385] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.263877][ T8385] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.446308][ T9071] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 218.457407][ T9071] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 218.766796][ T9088] bridge0: port 3(macvtap1) entered blocking state [ 218.801994][ T9088] bridge0: port 3(macvtap1) entered disabled state [ 218.815445][ T9088] macvtap1: entered allmulticast mode [ 218.841406][ T9088] bridge0: entered allmulticast mode [ 218.867685][ T9088] macvtap1: left allmulticast mode [ 218.887740][ T9088] bridge0: left allmulticast mode [ 218.887932][ T9095] __nla_validate_parse: 2 callbacks suppressed [ 218.887945][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 219.081400][ T9103] FAULT_INJECTION: forcing a failure. [ 219.081400][ T9103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.098995][ T9103] CPU: 1 UID: 0 PID: 9103 Comm: syz.0.982 Not tainted syzkaller #0 PREEMPT(full) [ 219.099026][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 219.099038][ T9103] Call Trace: [ 219.099046][ T9103] [ 219.099055][ T9103] dump_stack_lvl+0x189/0x250 [ 219.099089][ T9103] ? __pfx____ratelimit+0x10/0x10 [ 219.099116][ T9103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.099142][ T9103] ? __pfx__printk+0x10/0x10 [ 219.099162][ T9103] ? __might_fault+0xb0/0x130 [ 219.099201][ T9103] should_fail_ex+0x414/0x560 [ 219.099234][ T9103] _copy_from_user+0x2d/0xb0 [ 219.099260][ T9103] __sys_bpf+0x1e3/0x860 [ 219.099282][ T9103] ? __pfx___sys_bpf+0x10/0x10 [ 219.099318][ T9103] ? ksys_write+0x22a/0x250 [ 219.099348][ T9103] ? __pfx_ksys_write+0x10/0x10 [ 219.099383][ T9103] __x64_sys_bpf+0x7c/0x90 [ 219.099412][ T9103] do_syscall_64+0xfa/0xfa0 [ 219.099439][ T9103] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.099466][ T9103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.099486][ T9103] ? clear_bhb_loop+0x60/0xb0 [ 219.099511][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.099530][ T9103] RIP: 0033:0x7f098ab8f6c9 [ 219.099549][ T9103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.099566][ T9103] RSP: 002b:00007f098b985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.099589][ T9103] RAX: ffffffffffffffda RBX: 00007f098ade5fa0 RCX: 00007f098ab8f6c9 [ 219.099604][ T9103] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 219.099618][ T9103] RBP: 00007f098b985090 R08: 0000000000000000 R09: 0000000000000000 [ 219.099630][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.099641][ T9103] R13: 00007f098ade6038 R14: 00007f098ade5fa0 R15: 00007ffe20909ea8 [ 219.099675][ T9103] [ 219.348124][ T9106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.984'. [ 219.507989][ T9119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.539304][ T9124] netlink: 44 bytes leftover after parsing attributes in process `syz.2.984'. [ 219.547801][ T9109] wg1 speed is unknown, defaulting to 1000 [ 219.550358][ T9120] netlink: 'syz.4.981': attribute type 2 has an invalid length. [ 219.562953][ T9119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.573394][ T9121] tipc: Enabling of bearer rejected, failed to enable media [ 219.603576][ T9101] wg1 speed is unknown, defaulting to 1000 [ 219.610007][ T9107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.981'. [ 220.018053][ T9139] tipc: Enabled bearer , priority 0 [ 220.049877][ T9139] syzkaller0: entered promiscuous mode [ 220.069998][ T9139] syzkaller0: entered allmulticast mode [ 220.119241][ T9146] netlink: 'syz.2.996': attribute type 1 has an invalid length. [ 220.132081][ T9139] tipc: Resetting bearer [ 220.181119][ T9146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.189763][ T9137] tipc: Resetting bearer [ 220.207259][ T9137] tipc: Disabling bearer [ 220.536379][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 220.647839][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'. [ 220.667451][ T9160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.999'. [ 220.703315][ T9162] bridge0: entered promiscuous mode [ 220.710996][ T9162] bridge0: port 3(macvtap1) entered blocking state [ 220.719826][ T9162] bridge0: port 3(macvtap1) entered disabled state [ 220.727620][ T9162] macvtap1: entered allmulticast mode [ 220.733216][ T9162] bridge0: entered allmulticast mode [ 220.743909][ T9162] macvtap1: left allmulticast mode [ 220.750776][ T9162] bridge0: left allmulticast mode [ 220.753148][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 220.766990][ T9162] bridge0: left promiscuous mode [ 220.817994][ T9163] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 220.873612][ T9166] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 220.960416][ T9166] bond3 (unregistering): Released all slaves [ 221.601060][ T9203] netlink: 'syz.3.1009': attribute type 2 has an invalid length. [ 221.722176][ T9206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1009'. [ 222.146113][ T9189] wg1 speed is unknown, defaulting to 1000 [ 222.243660][ T9211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.270417][ T9211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.403042][ T9210] wg1 speed is unknown, defaulting to 1000 [ 222.773178][ T9226] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1015'. [ 222.940243][ T9229] bridge0: entered promiscuous mode [ 222.947386][ T9229] bridge0: port 3(macvtap1) entered blocking state [ 222.954955][ T9229] bridge0: port 3(macvtap1) entered disabled state [ 222.961853][ T9229] macvtap1: entered allmulticast mode [ 222.968200][ T9229] bridge0: entered allmulticast mode [ 222.979656][ T9229] macvtap1: left allmulticast mode [ 222.985699][ T9229] bridge0: left allmulticast mode [ 222.997911][ T9229] bridge0: left promiscuous mode [ 223.821653][ T9263] netlink: 'syz.4.1027': attribute type 2 has an invalid length. [ 223.904233][ T9267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.922469][ T9261] wg1 speed is unknown, defaulting to 1000 [ 223.943096][ T9257] __nla_validate_parse: 2 callbacks suppressed [ 223.943119][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1027'. [ 223.967877][ T9270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.121651][ T9268] wg1 speed is unknown, defaulting to 1000 [ 224.528056][ T9276] bridge0: entered promiscuous mode [ 224.553964][ T9276] bridge0: port 3(macvtap1) entered blocking state [ 224.562628][ T9276] bridge0: port 3(macvtap1) entered disabled state [ 224.576620][ T9276] macvtap1: entered allmulticast mode [ 224.582195][ T9276] bridge0: entered allmulticast mode [ 224.586463][ T9281] FAULT_INJECTION: forcing a failure. [ 224.586463][ T9281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.595980][ T9276] macvtap1: left allmulticast mode [ 224.614193][ T9276] bridge0: left allmulticast mode [ 224.615090][ T9281] CPU: 1 UID: 0 PID: 9281 Comm: syz.0.1034 Not tainted syzkaller #0 PREEMPT(full) [ 224.615128][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.615139][ T9281] Call Trace: [ 224.615148][ T9281] [ 224.615157][ T9281] dump_stack_lvl+0x189/0x250 [ 224.615187][ T9281] ? __pfx____ratelimit+0x10/0x10 [ 224.615212][ T9281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.615236][ T9281] ? __pfx__printk+0x10/0x10 [ 224.615268][ T9281] should_fail_ex+0x414/0x560 [ 224.615301][ T9281] _copy_to_user+0x31/0xb0 [ 224.615325][ T9281] bpf_test_finish+0x56f/0x700 [ 224.615353][ T9281] ? __pfx_bpf_test_finish+0x10/0x10 [ 224.615383][ T9281] bpf_prog_test_run_flow_dissector+0x44e/0x5c0 [ 224.615417][ T9281] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 224.615439][ T9281] ? __fget_files+0x2a/0x420 [ 224.615463][ T9281] ? __fget_files+0x2a/0x420 [ 224.615485][ T9281] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 224.615505][ T9281] bpf_prog_test_run+0x2c7/0x340 [ 224.615529][ T9281] __sys_bpf+0x562/0x860 [ 224.615548][ T9281] ? __pfx___sys_bpf+0x10/0x10 [ 224.615582][ T9281] ? ksys_write+0x22a/0x250 [ 224.615609][ T9281] ? __pfx_ksys_write+0x10/0x10 [ 224.615640][ T9281] __x64_sys_bpf+0x7c/0x90 [ 224.615668][ T9281] do_syscall_64+0xfa/0xfa0 [ 224.615691][ T9281] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.615721][ T9281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.615738][ T9281] ? clear_bhb_loop+0x60/0xb0 [ 224.615760][ T9281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.615778][ T9281] RIP: 0033:0x7f098ab8f6c9 [ 224.615794][ T9281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.615810][ T9281] RSP: 002b:00007f098b985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.615831][ T9281] RAX: ffffffffffffffda RBX: 00007f098ade5fa0 RCX: 00007f098ab8f6c9 [ 224.615844][ T9281] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 224.615856][ T9281] RBP: 00007f098b985090 R08: 0000000000000000 R09: 0000000000000000 [ 224.615868][ T9281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.615879][ T9281] R13: 00007f098ade6038 R14: 00007f098ade5fa0 R15: 00007ffe20909ea8 [ 224.615910][ T9281] [ 224.859377][ T9276] bridge0: left promiscuous mode [ 225.298302][ T9298] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1040'. [ 225.317858][ T9298] net_ratelimit: 11 callbacks suppressed [ 225.317880][ T9298] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 225.394980][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 225.586767][ T9309] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1045'. [ 225.668904][ T9313] wg1 speed is unknown, defaulting to 1000 [ 225.827004][ T9323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.884223][ T9323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.920457][ T9316] wg1 speed is unknown, defaulting to 1000 [ 226.081362][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 226.181625][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.191898][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.343917][ T9342] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1055'. [ 226.408311][ T9348] batadv_slave_1: entered promiscuous mode [ 226.439072][ T9348] netlink: 'syz.1.1057': attribute type 6 has an invalid length. [ 226.529444][ T9353] batadv_slave_1: left promiscuous mode [ 226.536160][ T9345] wg1 speed is unknown, defaulting to 1000 [ 226.692320][ T9359] netlink: 'syz.3.1056': attribute type 2 has an invalid length. [ 226.772031][ T9372] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1061'. [ 226.860310][ T9373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1056'. [ 226.965638][ T9381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1063'. [ 227.686203][ T9404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.710210][ T9404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.787146][ T9396] wg1 speed is unknown, defaulting to 1000 [ 227.808646][ T9405] syzkaller1: entered promiscuous mode [ 227.821723][ T9405] syzkaller1: entered allmulticast mode [ 227.877468][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 227.933533][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 227.997371][ T9398] wg1 speed is unknown, defaulting to 1000 [ 228.718435][ T9422] netlink: 'syz.4.1078': attribute type 4 has an invalid length. [ 228.906165][ T9423] wg1 speed is unknown, defaulting to 1000 [ 228.961859][ T9426] tipc: Enabled bearer , priority 0 [ 228.991662][ T9429] wg1 speed is unknown, defaulting to 1000 [ 229.003291][ T9426] syzkaller0: entered promiscuous mode [ 229.018061][ T9426] syzkaller0: entered allmulticast mode [ 229.038864][ T9427] netlink: 'syz.1.1080': attribute type 2 has an invalid length. [ 229.115518][ T9426] tipc: Resetting bearer [ 229.164907][ T9424] tipc: Resetting bearer [ 229.171105][ T9427] __nla_validate_parse: 2 callbacks suppressed [ 229.171126][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1080'. [ 229.212438][ T9424] tipc: Disabling bearer [ 229.261898][ T9418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.358567][ T9435] netlink: 'syz.0.1082': attribute type 11 has an invalid length. [ 229.387526][ T9435] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.1082'. [ 230.055090][ T9446] delete_channel: no stack [ 230.502555][ T9467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1093'. [ 230.583679][ T9458] syzkaller0: entered promiscuous mode [ 230.590448][ T9458] syzkaller0: entered allmulticast mode [ 230.698488][ T9472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.719641][ T9468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.739798][ T9471] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1090'. [ 230.746401][ T9472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.864486][ T9460] wg1 speed is unknown, defaulting to 1000 [ 231.949478][ T9490] netlink: 'syz.2.1097': attribute type 2 has an invalid length. [ 232.019404][ T9491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1097'. [ 232.699356][ T9479] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 232.709574][ T9479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.737827][ T9484] bridge0: entered promiscuous mode [ 232.745267][ T9484] bridge0: port 3(macvtap1) entered blocking state [ 232.752827][ T9484] bridge0: port 3(macvtap1) entered disabled state [ 232.761450][ T9484] macvtap1: entered allmulticast mode [ 232.767561][ T9484] bridge0: entered allmulticast mode [ 232.776424][ T9484] macvtap1: left allmulticast mode [ 232.781679][ T9484] bridge0: left allmulticast mode [ 232.797086][ T9484] bridge0: left promiscuous mode [ 232.912689][ T9486] wg1 speed is unknown, defaulting to 1000 [ 233.418019][ T9517] netlink: 'syz.1.1107': attribute type 3 has an invalid length. [ 233.437429][ T9517] batadv1: entered promiscuous mode [ 233.500195][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 233.612913][ T9525] wg1 speed is unknown, defaulting to 1000 [ 233.632678][ T9526] wg1 speed is unknown, defaulting to 1000 [ 234.206198][ T9547] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1116'. [ 234.396881][ T9554] : renamed from bond_slave_0 [ 234.451163][ T9561] netlink: 'syz.0.1123': attribute type 5 has an invalid length. [ 234.503856][ T9561] ip6erspan1: entered promiscuous mode [ 234.818948][ T9563] wg1 speed is unknown, defaulting to 1000 [ 234.916608][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 235.293116][ T9585] bridge0: entered promiscuous mode [ 235.315118][ T9585] bridge0: port 3(macvtap1) entered blocking state [ 235.321812][ T9585] bridge0: port 3(macvtap1) entered disabled state [ 235.351675][ T9585] macvtap1: entered allmulticast mode [ 235.374430][ T9585] bridge0: entered allmulticast mode [ 235.387400][ T9585] macvtap1: left allmulticast mode [ 235.404793][ T9585] bridge0: left allmulticast mode [ 235.503440][ T9585] bridge0: left promiscuous mode [ 235.651653][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1129'. [ 236.101617][ T9602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.168324][ T9600] wg1 speed is unknown, defaulting to 1000 [ 236.710909][ T9623] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1140'. [ 236.736736][ T9623] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 236.755180][ T9625] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1141'. [ 236.892060][ T9635] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 236.998872][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 237.359255][ T9651] FAULT_INJECTION: forcing a failure. [ 237.359255][ T9651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.429346][ T9651] CPU: 0 UID: 0 PID: 9651 Comm: syz.1.1151 Not tainted syzkaller #0 PREEMPT(full) [ 237.429377][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 237.429390][ T9651] Call Trace: [ 237.429398][ T9651] [ 237.429407][ T9651] dump_stack_lvl+0x189/0x250 [ 237.429441][ T9651] ? __pfx____ratelimit+0x10/0x10 [ 237.429467][ T9651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.429492][ T9651] ? __pfx__printk+0x10/0x10 [ 237.429514][ T9651] ? __might_fault+0xb0/0x130 [ 237.429554][ T9651] should_fail_ex+0x414/0x560 [ 237.429590][ T9651] _copy_from_iter+0x1de/0x1790 [ 237.429632][ T9651] ? __pfx__copy_from_iter+0x10/0x10 [ 237.429656][ T9651] ? __build_skb_around+0x262/0x3f0 [ 237.429701][ T9651] ? netlink_sendmsg+0x642/0xb30 [ 237.429720][ T9651] ? skb_put+0x11b/0x210 [ 237.429744][ T9651] netlink_sendmsg+0x6b2/0xb30 [ 237.429776][ T9651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.429799][ T9651] ? __lock_acquire+0xab9/0xd20 [ 237.429817][ T9651] ? aa_sock_msg_perm+0xf1/0x1d0 [ 237.429848][ T9651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.429867][ T9651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.429889][ T9651] __sock_sendmsg+0x21c/0x270 [ 237.429919][ T9651] sock_write_iter+0x279/0x360 [ 237.429947][ T9651] ? __pfx_sock_write_iter+0x10/0x10 [ 237.429985][ T9651] ? bpf_lsm_file_permission+0x9/0x20 [ 237.430006][ T9651] ? security_file_permission+0x75/0x290 [ 237.430039][ T9651] vfs_write+0x5c9/0xb30 [ 237.430073][ T9651] ? __pfx_sock_write_iter+0x10/0x10 [ 237.430099][ T9651] ? __pfx_vfs_write+0x10/0x10 [ 237.430138][ T9651] ? __fget_files+0x2a/0x420 [ 237.430167][ T9651] ksys_write+0x145/0x250 [ 237.430198][ T9651] ? __pfx_ksys_write+0x10/0x10 [ 237.430229][ T9651] ? do_syscall_64+0xbe/0xfa0 [ 237.430261][ T9651] do_syscall_64+0xfa/0xfa0 [ 237.430286][ T9651] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.430312][ T9651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.430332][ T9651] ? clear_bhb_loop+0x60/0xb0 [ 237.430357][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.430375][ T9651] RIP: 0033:0x7f11b5b8f6c9 [ 237.430394][ T9651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.430412][ T9651] RSP: 002b:00007f11b698d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.430435][ T9651] RAX: ffffffffffffffda RBX: 00007f11b5de5fa0 RCX: 00007f11b5b8f6c9 [ 237.430450][ T9651] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 237.430463][ T9651] RBP: 00007f11b698d090 R08: 0000000000000000 R09: 0000000000000000 [ 237.430476][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.430489][ T9651] R13: 00007f11b5de6038 R14: 00007f11b5de5fa0 R15: 00007ffcb6009cb8 [ 237.430524][ T9651] [ 237.448355][ T9653] netlink: 'syz.4.1152': attribute type 10 has an invalid length. [ 237.725988][ T9653] veth1_vlan: entered allmulticast mode [ 237.743759][ T9653] team0: Device veth1_vlan failed to register rx_handler [ 237.806991][ T9666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1152'. [ 237.875872][ T9666] erspan0: entered promiscuous mode [ 237.885725][ T9666] erspan0: left promiscuous mode [ 237.950895][ T9672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 238.042937][ T9673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1158'. [ 238.086989][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 238.102938][ T9677] netlink: 'syz.4.1159': attribute type 1 has an invalid length. [ 238.181795][ T9679] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.189944][ T9679] tipc: Enabled bearer , priority 10 [ 238.315238][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.443884][ T9684] wg1 speed is unknown, defaulting to 1000 [ 238.454999][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.503016][ T9687] netlink: 'syz.3.1161': attribute type 2 has an invalid length. [ 238.594950][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.708056][ T9687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1161'. [ 238.744876][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.884955][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.971804][ T9695] wg1 speed is unknown, defaulting to 1000 [ 239.034617][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.178408][ T1211] tipc: Node number set to 2648976652 [ 239.250128][ T9696] netlink: 'syz.1.1162': attribute type 2 has an invalid length. [ 239.314984][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.413785][ T9693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1162'. [ 239.584956][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 240.115530][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 240.245313][ T9716] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1168'. [ 240.308916][ T9716] netlink: 'syz.1.1168': attribute type 7 has an invalid length. [ 240.334953][ T9716] netlink: 'syz.1.1168': attribute type 8 has an invalid length. [ 240.353876][ T9716] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 240.367107][ T9716] Cannot find add_set index 0 as target [ 240.639056][ T9736] delete_channel: no stack [ 240.726846][ T9740] bridge0: entered promiscuous mode [ 240.743234][ T9740] bridge0: port 3(macvtap1) entered blocking state [ 240.769112][ T9740] bridge0: port 3(macvtap1) entered disabled state [ 240.791622][ T9740] macvtap1: entered allmulticast mode [ 240.797931][ T9740] bridge0: entered allmulticast mode [ 240.806955][ T9740] macvtap1: left allmulticast mode [ 240.812441][ T9740] bridge0: left allmulticast mode [ 240.820482][ T9740] bridge0: left promiscuous mode [ 240.899242][ T9744] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1177'. [ 241.146978][ T9751] netlink: 'syz.0.1180': attribute type 13 has an invalid length. [ 241.665635][ T9762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.678804][ T9762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.782347][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1188'. [ 241.867879][ T9762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.918202][ T9762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.058512][ T9762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.069852][ T9762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.092449][ T9780] 8021q: VLANs not supported on nlmon0 [ 242.113679][ T9782] netlink: 'syz.0.1191': attribute type 16 has an invalid length. [ 242.136931][ T9782] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1191'. [ 242.242916][ T9762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.308558][ T9762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.470882][ T9798] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 242.649971][ T9801] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 242.657912][ T9810] IPVS: set_ctl: invalid protocol: 22 10.1.1.0:20002 [ 242.715406][ T9801] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 242.767050][ T9813] netlink: 'syz.2.1201': attribute type 3 has an invalid length. [ 242.798674][ T8385] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.809944][ T8385] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.846794][ T9813] batadv1: entered promiscuous mode [ 242.975395][ T8385] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.983944][ T8385] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.025820][ T8358] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.045244][ T8358] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.063828][ T9816] wg1 speed is unknown, defaulting to 1000 [ 243.086355][ T8358] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.096231][ T8358] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.234576][ C0] net_ratelimit: 3 callbacks suppressed [ 243.234597][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 243.274273][ T9832] FAULT_INJECTION: forcing a failure. [ 243.274273][ T9832] name failslab, interval 1, probability 0, space 0, times 0 [ 243.285675][ T9830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1206'. [ 243.327128][ T9832] CPU: 1 UID: 0 PID: 9832 Comm: syz.0.1205 Not tainted syzkaller #0 PREEMPT(full) [ 243.327160][ T9832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.327172][ T9832] Call Trace: [ 243.327181][ T9832] [ 243.327189][ T9832] dump_stack_lvl+0x189/0x250 [ 243.327221][ T9832] ? __pfx____ratelimit+0x10/0x10 [ 243.327247][ T9832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.327273][ T9832] ? __pfx__printk+0x10/0x10 [ 243.327300][ T9832] ? __sock_sendmsg+0x21c/0x270 [ 243.327325][ T9832] ? do_syscall_64+0xfa/0xfa0 [ 243.327362][ T9832] should_fail_ex+0x414/0x560 [ 243.327397][ T9832] should_failslab+0xa8/0x100 [ 243.327418][ T9832] kmem_cache_alloc_noprof+0x74/0x6e0 [ 243.327445][ T9832] ? skb_clone+0x212/0x3a0 [ 243.327472][ T9832] skb_clone+0x212/0x3a0 [ 243.327498][ T9832] __netlink_deliver_tap+0x404/0x850 [ 243.327531][ T9832] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.327552][ T9832] netlink_deliver_tap+0x19c/0x1b0 [ 243.327573][ T9832] netlink_sendskb+0x68/0x140 [ 243.327603][ T9832] netlink_unicast+0x397/0x9e0 [ 243.327627][ T9832] ? __asan_memcpy+0x40/0x70 [ 243.327661][ T9832] ? __pfx_netlink_unicast+0x10/0x10 [ 243.327699][ T9832] netlink_rcv_skb+0x28c/0x470 [ 243.327719][ T9832] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 243.327750][ T9832] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.327782][ T9832] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.327810][ T9832] netlink_unicast+0x82f/0x9e0 [ 243.327847][ T9832] ? __pfx_netlink_unicast+0x10/0x10 [ 243.327876][ T9832] ? netlink_sendmsg+0x642/0xb30 [ 243.327892][ T9832] ? skb_put+0x11b/0x210 [ 243.327915][ T9832] netlink_sendmsg+0x805/0xb30 [ 243.327953][ T9832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.327976][ T9832] ? __lock_acquire+0xab9/0xd20 [ 243.327993][ T9832] ? aa_sock_msg_perm+0xf1/0x1d0 [ 243.328022][ T9832] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.328040][ T9832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.328066][ T9832] __sock_sendmsg+0x21c/0x270 [ 243.328095][ T9832] sock_write_iter+0x279/0x360 [ 243.328123][ T9832] ? __pfx_sock_write_iter+0x10/0x10 [ 243.328159][ T9832] ? bpf_lsm_file_permission+0x9/0x20 [ 243.328178][ T9832] ? security_file_permission+0x75/0x290 [ 243.328211][ T9832] vfs_write+0x5c9/0xb30 [ 243.328244][ T9832] ? __pfx_sock_write_iter+0x10/0x10 [ 243.328269][ T9832] ? __pfx_vfs_write+0x10/0x10 [ 243.328307][ T9832] ? __fget_files+0x2a/0x420 [ 243.328336][ T9832] ksys_write+0x145/0x250 [ 243.328366][ T9832] ? __pfx_ksys_write+0x10/0x10 [ 243.328396][ T9832] ? do_syscall_64+0xbe/0xfa0 [ 243.328427][ T9832] do_syscall_64+0xfa/0xfa0 [ 243.328451][ T9832] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.328477][ T9832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.328496][ T9832] ? clear_bhb_loop+0x60/0xb0 [ 243.328519][ T9832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.328537][ T9832] RIP: 0033:0x7f098ab8f6c9 [ 243.328555][ T9832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.328572][ T9832] RSP: 002b:00007f098b985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.328594][ T9832] RAX: ffffffffffffffda RBX: 00007f098ade5fa0 RCX: 00007f098ab8f6c9 [ 243.328609][ T9832] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 243.328621][ T9832] RBP: 00007f098b985090 R08: 0000000000000000 R09: 0000000000000000 [ 243.328634][ T9832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.328645][ T9832] R13: 00007f098ade6038 R14: 00007f098ade5fa0 R15: 00007ffe20909ea8 [ 243.328679][ T9832] [ 244.189399][ T9842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1208'. [ 244.285356][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 244.711216][ T9853] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1213'. [ 245.040259][ T9871] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1219'. [ 245.066873][ T9871] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 245.091383][ T9873] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1220'. [ 245.314721][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 245.595043][ T9883] wg1 speed is unknown, defaulting to 1000 [ 245.710815][ T9881] wg1 speed is unknown, defaulting to 1000 [ 246.179957][ T9906] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1233'. [ 246.354942][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 246.393076][ T9912] wg1 speed is unknown, defaulting to 1000 [ 246.547770][ T9924] wg1 speed is unknown, defaulting to 1000 [ 247.209159][ T9936] wg1 speed is unknown, defaulting to 1000 [ 247.370637][ T9943] netlink: 'syz.3.1242': attribute type 1 has an invalid length. [ 247.370637][ T9944] netlink: 'syz.3.1242': attribute type 1 has an invalid length. [ 247.395000][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 247.590801][ T9943] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 247.610256][ T9944] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 247.726261][ T9933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.753213][ T9956] delete_channel: no stack [ 247.934731][ T9961] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1247'. [ 247.950178][ T9963] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1248'. [ 247.960491][ T9963] netem: unknown loss type 4 [ 247.965287][ T9963] netem: change failed [ 248.221306][ T9971] tipc: Enabled bearer , priority 0 [ 248.401212][ T9971] syzkaller0: entered promiscuous mode [ 248.407166][ T9971] syzkaller0: entered allmulticast mode [ 248.413645][ T9971] tipc: Resetting bearer [ 248.435029][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 248.575874][ T9971] tipc: Resetting bearer [ 249.156417][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'. [ 249.274766][ T1995] tipc: Node number set to 3548657480 [ 249.474489][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 250.517261][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 250.943729][ T9971] tipc: Disabling bearer [ 251.079893][ T9979] wg1 speed is unknown, defaulting to 1000 [ 251.184008][T10010] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1260'. [ 251.537268][T10015] wg1 speed is unknown, defaulting to 1000 [ 251.543495][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'. [ 251.554901][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 251.565852][T10016] wg1 speed is unknown, defaulting to 1000 [ 251.622046][T10026] wg1 speed is unknown, defaulting to 1000 [ 252.020928][T10046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1272'. [ 252.066328][T10046] bond0: entered promiscuous mode [ 252.071619][T10046] bond_slave_0: entered promiscuous mode [ 252.080936][T10046] bond_slave_1: entered promiscuous mode [ 252.090856][T10049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1272'. [ 252.105514][T10046] bond0: left promiscuous mode [ 252.110553][T10046] bond_slave_0: left promiscuous mode [ 252.118190][T10051] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1274'. [ 252.120604][T10046] bond_slave_1: left promiscuous mode [ 252.193840][T10017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.207774][T10049] bond0: entered promiscuous mode [ 252.213083][T10049] bond_slave_0: entered promiscuous mode [ 252.221282][T10049] bond_slave_1: entered promiscuous mode [ 252.239149][T10049] bond0: left promiscuous mode [ 252.247508][T10049] bond_slave_0: left promiscuous mode [ 252.265353][T10049] bond_slave_1: left promiscuous mode [ 252.446087][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'. [ 252.476715][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 252.546582][T10070] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1281'. [ 252.557644][T10071] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1281'. [ 252.594786][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 252.678964][T10081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1283'. [ 253.634388][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 253.929982][T10120] wg1 speed is unknown, defaulting to 1000 [ 253.974245][T10112] netlink: 'syz.1.1294': attribute type 2 has an invalid length. [ 253.977979][T10113] netlink: 'syz.4.1295': attribute type 2 has an invalid length. [ 254.005165][T10119] wg1 speed is unknown, defaulting to 1000 [ 254.514767][T10141] wg1 speed is unknown, defaulting to 1000 [ 254.684819][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 255.714528][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 255.910576][T10196] netlink: 'syz.0.1315': attribute type 13 has an invalid length. [ 255.967153][T10185] netlink: 'syz.1.1313': attribute type 2 has an invalid length. [ 255.987251][T10193] wg1 speed is unknown, defaulting to 1000 [ 255.996657][T10196] lo: Caught tx_queue_len zero misconfig [ 256.186405][T10207] __nla_validate_parse: 10 callbacks suppressed [ 256.186427][T10207] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1318'. [ 256.754822][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 257.072190][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1327'. [ 257.190837][T10242] wg1 speed is unknown, defaulting to 1000 [ 257.333422][T10239] netlink: 'syz.0.1331': attribute type 2 has an invalid length. [ 257.455746][T10239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1331'. [ 257.471743][T10244] team0: Port device team_slave_0 removed [ 257.794406][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 257.799067][T10268] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 257.842600][T10268] bond1 (unregistering): Released all slaves [ 258.088188][T10277] wg1 speed is unknown, defaulting to 1000 [ 258.095521][T10278] netlink: 'syz.1.1338': attribute type 2 has an invalid length. [ 258.183618][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1338'. [ 258.322149][T10288] bridge0: entered promiscuous mode [ 258.344251][T10288] bridge0: port 3(macvtap1) entered blocking state [ 258.385972][T10288] bridge0: port 3(macvtap1) entered disabled state [ 258.407690][T10288] macvtap1: entered allmulticast mode [ 258.424925][T10288] bridge0: entered allmulticast mode [ 258.451577][T10288] macvtap1: left allmulticast mode [ 258.494282][T10288] bridge0: left allmulticast mode [ 258.513359][T10288] bridge0: left promiscuous mode [ 258.636382][T10297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1345'. [ 258.835725][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 259.201698][T10327] xt_l2tp: missing protocol rule (udp|l2tpip) [ 259.290843][T10332] x_tables: duplicate underflow at hook 1 [ 259.555653][T10339] wg1 speed is unknown, defaulting to 1000 [ 259.666142][T10343] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1354'. [ 259.677754][T10343] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 259.876352][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 260.030875][T10358] netlink: 'syz.4.1358': attribute type 1 has an invalid length. [ 260.235061][T10369] wg1 speed is unknown, defaulting to 1000 [ 260.492878][T10386] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1366'. [ 260.507254][T10386] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 260.548402][T10390] netlink: 'syz.0.1369': attribute type 42 has an invalid length. [ 260.636113][T10395] delete_channel: no stack [ 260.643745][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1370'. [ 260.734677][T10398] bridge0: entered promiscuous mode [ 260.742195][T10398] bridge0: port 3(macvtap1) entered blocking state [ 260.749541][T10398] bridge0: port 3(macvtap1) entered disabled state [ 260.757067][T10398] macvtap1: entered allmulticast mode [ 260.784933][T10398] bridge0: entered allmulticast mode [ 260.802610][T10398] macvtap1: left allmulticast mode [ 260.834007][T10398] bridge0: left allmulticast mode [ 260.857644][T10409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1376'. [ 260.868023][T10398] bridge0: left promiscuous mode [ 260.915169][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 260.975486][T10413] pim6reg1: entered promiscuous mode [ 260.981024][T10413] pim6reg1: entered allmulticast mode [ 261.728447][T10432] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1383'. [ 261.745029][T10432] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 261.792321][T10435] tipc: Enabled bearer , priority 0 [ 261.796239][T10429] wg1 speed is unknown, defaulting to 1000 [ 261.824155][T10430] syzkaller0: entered promiscuous mode [ 261.861112][T10430] syzkaller0: entered allmulticast mode [ 261.923601][T10437] wg1 speed is unknown, defaulting to 1000 [ 261.942651][T10430] tipc: Resetting bearer [ 261.954457][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 261.991923][T10442] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1387'. [ 262.100630][T10428] tipc: Resetting bearer [ 262.139716][T10428] tipc: Disabling bearer [ 262.957565][T10477] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1398'. [ 262.986353][T10477] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 263.003979][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 263.060561][T10480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.148651][T10480] bond0: (slave rose0): Enslaving as an active interface with an up link [ 263.452704][T10504] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 263.651669][T10510] bridge0: entered promiscuous mode [ 263.672445][T10510] bridge0: port 3(macvtap1) entered blocking state [ 263.686730][T10510] bridge0: port 3(macvtap1) entered disabled state [ 263.693718][T10510] macvtap1: entered allmulticast mode [ 263.699754][T10510] bridge0: entered allmulticast mode [ 263.738411][T10510] macvtap1: left allmulticast mode [ 263.743707][T10510] bridge0: left allmulticast mode [ 263.767975][T10510] bridge0: left promiscuous mode [ 263.956006][T10521] netlink: 'syz.0.1408': attribute type 1 has an invalid length. [ 264.029173][T10521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.044514][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 264.046839][T10522] vlan3: entered promiscuous mode [ 264.057166][T10522] bond5: entered promiscuous mode [ 264.062504][T10522] vlan3: entered allmulticast mode [ 264.067814][T10522] bond5: entered allmulticast mode [ 264.180325][T10527] wg1 speed is unknown, defaulting to 1000 [ 264.214187][T10534] netlink: 'syz.3.1412': attribute type 3 has an invalid length. [ 264.226642][T10533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.249540][T10533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.269789][T10539] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1410'. [ 264.410850][T10534] syz_tun: entered allmulticast mode [ 264.473330][T10534] siw: device registration error -23 [ 264.522711][T10534] ip6tnl0: left promiscuous mode [ 264.544840][T10534] ip6tnl0: left allmulticast mode [ 264.588929][T10534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.831068][T10528] syz_tun: left allmulticast mode [ 265.074943][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 265.516116][T10582] netlink: 'syz.0.1421': attribute type 1 has an invalid length. [ 265.608370][T10584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1421'. [ 265.730908][T10582] bond6: entered promiscuous mode [ 265.738397][T10582] 8021q: adding VLAN 0 to HW filter on device bond6 [ 266.100183][T10610] bridge0: entered promiscuous mode [ 266.115382][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 266.125035][T10610] bridge0: port 3(macvtap1) entered blocking state [ 266.131815][T10610] bridge0: port 3(macvtap1) entered disabled state [ 266.154766][T10610] macvtap1: entered allmulticast mode [ 266.168454][T10610] bridge0: entered allmulticast mode [ 266.202906][T10610] macvtap1: left allmulticast mode [ 266.219408][T10610] bridge0: left allmulticast mode [ 266.231540][T10610] bridge0: left promiscuous mode [ 266.341754][T10612] tipc: Enabled bearer , priority 0 [ 266.366655][T10622] delete_channel: no stack [ 266.397766][T10606] syzkaller0: entered promiscuous mode [ 266.414283][T10606] syzkaller0: entered allmulticast mode [ 266.463757][T10606] tipc: Resetting bearer [ 266.547528][T10605] tipc: Resetting bearer [ 266.589228][T10637] sctp: [Deprecated]: syz.0.1435 (pid 10637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.589228][T10637] Use struct sctp_sack_info instead [ 266.630592][T10639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.639460][T10605] tipc: Disabling bearer [ 266.644489][T10639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.710619][T10645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1437'. [ 266.712485][T10634] wg1 speed is unknown, defaulting to 1000 [ 266.736733][T10646] sctp: [Deprecated]: syz.0.1435 (pid 10646) Use of int in max_burst socket option. [ 266.736733][T10646] Use struct sctp_assoc_value instead [ 267.024710][T10652] nbd2: detected capacity change from 0 to 63 [ 267.038864][T10653] nbd: nbd2 already in use [ 267.119731][ T5831] block nbd2: Receive control failed (result -32) [ 267.155111][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 267.286094][T10666] delete_channel: no stack [ 267.464590][T10669] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1442'. [ 268.050277][T10682] netem: change failed [ 268.194752][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 268.358284][T10679] wg1 speed is unknown, defaulting to 1000 [ 268.740300][T10697] wg1 speed is unknown, defaulting to 1000 [ 268.853878][T10702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1453'. [ 269.186802][T10715] tunl0: Caught tx_queue_len zero misconfig [ 269.227641][T10715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1457'. [ 269.244791][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 269.291783][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 269.518103][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 269.622666][T10741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1463'. [ 269.677071][T10736] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1463'. [ 269.688464][T10742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1464'. [ 269.691750][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1462'. [ 269.719730][T10741] 8021q: VLANs not supported on wg1 [ 269.779598][T10734] bond4 (unregistering): Released all slaves [ 270.140873][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1466'. [ 270.284515][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 270.432442][T10759] netlink: 'syz.1.1468': attribute type 4 has an invalid length. [ 270.573023][T10764] netlink: 'syz.1.1468': attribute type 4 has an invalid length. [ 270.581217][T10763] netlink: 'syz.4.1470': attribute type 1 has an invalid length. [ 270.630573][T10767] delete_channel: no stack [ 270.635616][T10762] wg1 speed is unknown, defaulting to 1000 [ 270.648554][T10775] netlink: 'syz.0.1469': attribute type 8 has an invalid length. [ 270.674076][T10765] wg1 speed is unknown, defaulting to 1000 [ 270.818659][T10775] wg1 speed is unknown, defaulting to 1000 [ 271.091660][T10782] netlink: 'syz.2.1473': attribute type 2 has an invalid length. [ 271.110583][T10788] wg1 speed is unknown, defaulting to 1000 [ 271.314839][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 272.157508][T10813] vlan2: entered allmulticast mode [ 272.194961][T10813] dummy0: entered allmulticast mode [ 272.330302][T10821] tipc: Enabled bearer , priority 0 [ 272.354385][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 272.498257][T10817] ip_vti0: entered promiscuous mode [ 272.503894][T10817] ip_vti0: entered allmulticast mode [ 272.520207][T10817] __nla_validate_parse: 5 callbacks suppressed [ 272.520228][T10817] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1481'. [ 272.520880][T10822] delete_channel: no stack [ 272.543847][T10817] tipc: Resetting bearer [ 272.567617][T10815] tipc: Disabling bearer [ 273.293436][T10853] netlink: 'syz.4.1493': attribute type 10 has an invalid length. [ 273.327204][T10854] wg1 speed is unknown, defaulting to 1000 [ 273.387153][T10848] netlink: 'syz.0.1491': attribute type 2 has an invalid length. [ 273.395733][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 273.503224][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1491'. [ 273.665776][T10872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1496'. [ 273.748822][T10873] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 32 [ 273.872841][T10877] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1499'. [ 274.434502][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.451539][T10895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1505'. [ 274.511736][T10899] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1508'. [ 274.613314][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'. [ 274.736055][T10907] 8021q: adding VLAN 0 to HW filter on device bond7 [ 274.757613][T10902] syzkaller0: entered promiscuous mode [ 274.763276][T10902] syzkaller0: entered allmulticast mode [ 274.830069][T10917] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1513'. [ 275.119268][T10927] wg1 speed is unknown, defaulting to 1000 [ 275.389995][T10941] wg1 speed is unknown, defaulting to 1000 [ 275.475035][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 275.628344][T10949] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1521'. [ 275.819773][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'. [ 276.514752][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 276.723767][T10982] tap0: tun_chr_ioctl cmd 1074025677 [ 276.743020][T10982] tap0: linktype set to 825 [ 277.051842][T10994] wg1 speed is unknown, defaulting to 1000 [ 277.564759][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 277.613803][T11010] __nla_validate_parse: 2 callbacks suppressed [ 277.613826][T11010] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1537'. [ 277.893353][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1540'. [ 277.913582][T11024] bridge0: entered promiscuous mode [ 277.920858][T11024] bridge0: port 3(macvtap1) entered blocking state [ 277.930290][T11024] bridge0: port 3(macvtap1) entered disabled state [ 277.938898][T11024] macvtap1: entered allmulticast mode [ 277.947545][T11024] bridge0: entered allmulticast mode [ 277.960534][T11024] macvtap1: left allmulticast mode [ 277.966847][T11024] bridge0: left allmulticast mode [ 277.973886][T11024] bridge0: left promiscuous mode [ 278.246094][T11029] netlink: 'syz.3.1543': attribute type 33 has an invalid length. [ 278.263223][T11029] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1543'. [ 278.474275][T11036] wg1 speed is unknown, defaulting to 1000 [ 278.507294][T11038] syzkaller0: entered promiscuous mode [ 278.513038][T11038] syzkaller0: entered allmulticast mode [ 278.519081][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 278.560695][T11042] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1547'. [ 278.564941][T11045] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1546'. [ 278.596115][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 278.695527][T11042] IPVS: fo: FWM 3 0x00000003 - no destination available [ 279.164444][T11065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.258336][T11065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.286791][T11071] wlan0 speed is unknown, defaulting to 1000 [ 279.312037][T11071] wlan0 speed is unknown, defaulting to 1000 [ 279.339214][T11071] wlan0 speed is unknown, defaulting to 1000 [ 279.342927][T11073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1553'. [ 279.367695][T11064] wg1 speed is unknown, defaulting to 1000 [ 279.431330][T11071] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 279.478843][T11076] bridge0: entered promiscuous mode [ 279.486423][T11076] bridge0: port 3(macvtap1) entered blocking state [ 279.496941][T11076] bridge0: port 3(macvtap1) entered disabled state [ 279.503928][T11076] macvtap1: entered allmulticast mode [ 279.509904][T11076] bridge0: entered allmulticast mode [ 279.518783][T11076] macvtap1: left allmulticast mode [ 279.523935][T11076] bridge0: left allmulticast mode [ 279.530758][T11076] bridge0: left promiscuous mode [ 279.555996][T11071] wlan0 speed is unknown, defaulting to 1000 [ 279.565201][T11071] wlan0 speed is unknown, defaulting to 1000 [ 279.587010][T11071] wlan0 speed is unknown, defaulting to 1000 [ 279.597671][T11071] wlan0 speed is unknown, defaulting to 1000 [ 279.613493][T11071] wlan0 speed is unknown, defaulting to 1000 [ 279.622412][T11071] wlan0 speed is unknown, defaulting to 1000 [ 279.635564][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 279.759926][T11084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1556'. [ 279.793619][T11082] wg1 speed is unknown, defaulting to 1000 [ 279.823477][T11082] wlan0 speed is unknown, defaulting to 1000 [ 279.910310][T11089] netlink: 'syz.0.1557': attribute type 12 has an invalid length. [ 279.921963][T11089] netlink: 'syz.0.1557': attribute type 4 has an invalid length. [ 279.937257][T11079] can: request_module (can-proto-0) failed. [ 279.972664][T11093] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1559'. [ 280.160463][T11088] netlink: 'syz.3.1558': attribute type 2 has an invalid length. [ 280.188356][T11094] wg1 speed is unknown, defaulting to 1000 [ 280.208403][T11094] wlan0 speed is unknown, defaulting to 1000 [ 280.230598][T11104] netlink: 'syz.1.1561': attribute type 5 has an invalid length. [ 280.290491][T11095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1558'. [ 280.675250][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 281.714968][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 281.739007][T11150] netlink: 'syz.2.1572': attribute type 39 has an invalid length. [ 281.739012][T11147] netlink: 'syz.2.1572': attribute type 39 has an invalid length. [ 281.855382][T11147] hsr_slave_1 (unregistering): left promiscuous mode [ 281.903118][T11159] C: renamed from team_slave_0 (while UP) [ 281.913934][T11159] netlink: 'syz.4.1575': attribute type 3 has an invalid length. [ 281.928160][T11159] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 281.965985][T11162] delete_channel: no stack [ 282.137695][T11172] netlink: 'syz.4.1580': attribute type 4 has an invalid length. [ 282.148039][T11172] ip6t_REJECT: ECHOREPLY is not supported [ 282.156813][T11170] bridge0: entered promiscuous mode [ 282.163445][T11170] bridge0: port 3(macvtap1) entered blocking state [ 282.170931][T11170] bridge0: port 3(macvtap1) entered disabled state [ 282.179055][T11170] macvtap1: entered allmulticast mode [ 282.204589][T11170] bridge0: entered allmulticast mode [ 282.223300][T11170] macvtap1: left allmulticast mode [ 282.237265][T11170] bridge0: left allmulticast mode [ 282.245588][T11170] bridge0: left promiscuous mode [ 282.292859][T11168] syzkaller0: refused to change device tx_queue_len [ 282.304065][T11176] sctp: [Deprecated]: syz.3.1582 (pid 11176) Use of int in max_burst socket option. [ 282.304065][T11176] Use struct sctp_assoc_value instead [ 282.530832][T11189] veth0: Caught tx_queue_len zero misconfig [ 282.690840][T11195] netlink: 'syz.2.1588': attribute type 1 has an invalid length. [ 282.739945][T11195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.755066][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 282.822480][T11204] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 282.882752][T11204] bond2: (slave batadv2): making interface the new active one [ 282.902180][T11204] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 282.970939][T11205] wg1 speed is unknown, defaulting to 1000 [ 282.980766][T11205] wlan0 speed is unknown, defaulting to 1000 [ 283.338891][T11227] bridge0: entered promiscuous mode [ 283.348145][T11227] bridge0: port 3(macvtap1) entered blocking state [ 283.356063][T11227] bridge0: port 3(macvtap1) entered disabled state [ 283.363118][T11227] macvtap1: entered allmulticast mode [ 283.368894][T11227] bridge0: entered allmulticast mode [ 283.377370][T11227] macvtap1: left allmulticast mode [ 283.382623][T11227] bridge0: left allmulticast mode [ 283.391216][T11227] bridge0: left promiscuous mode [ 283.472568][T11232] __nla_validate_parse: 8 callbacks suppressed [ 283.472590][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 283.583680][T11234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.593216][T11234] bond0: (slave bond4): Enslaving as an active interface with an up link [ 283.599755][T11239] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1599'. [ 283.691015][T11239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.720595][T11239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.750190][T11239] bond0 (unregistering): (slave bond4): Releasing backup interface [ 283.765581][T11239] bond0 (unregistering): Released all slaves [ 283.794851][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 283.862314][T11245] x_tables: duplicate underflow at hook 1 [ 284.068643][T11245] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 284.092000][T11259] netlink: 'syz.2.1606': attribute type 11 has an invalid length. [ 284.108896][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'. [ 284.228157][T11245] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 284.276223][T11261] delete_channel: no stack [ 284.298458][T11267] bridge0: entered promiscuous mode [ 284.312468][T11267] bridge0: port 3(macvtap1) entered blocking state [ 284.330323][T11267] bridge0: port 3(macvtap1) entered disabled state [ 284.346325][T11267] macvtap1: entered allmulticast mode [ 284.363138][T11267] bridge0: entered allmulticast mode [ 284.367421][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1612'. [ 284.375917][T11270] netlink: 'syz.4.1611': attribute type 1 has an invalid length. [ 284.381492][T11267] macvtap1: left allmulticast mode [ 284.391002][T11267] bridge0: left allmulticast mode [ 284.400389][T11267] bridge0: left promiscuous mode [ 284.450354][T11245] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 284.541941][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 284.601957][T11245] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 284.646476][T11281] tap0: tun_chr_ioctl cmd 1074025677 [ 284.662281][T11281] tap0: linktype set to 6 [ 284.792107][ T8382] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 284.832572][ T8382] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 284.841758][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.879559][ T8358] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 284.896739][ T8358] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 284.962237][T11297] wg1 speed is unknown, defaulting to 1000 [ 284.976293][T11297] wlan0 speed is unknown, defaulting to 1000 [ 285.003328][T11300] wg1 speed is unknown, defaulting to 1000 [ 285.030866][T11300] wlan0 speed is unknown, defaulting to 1000 [ 285.874959][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 285.920623][T11317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.004851][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 286.041657][T11330] tipc: Enabled bearer , priority 0 [ 286.064954][T11330] syzkaller0: entered promiscuous mode [ 286.083334][T11330] syzkaller0: entered allmulticast mode [ 286.109897][T11330] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 286.200104][T11330] tipc: Resetting bearer [ 286.279438][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1631'. [ 286.345269][T11329] tipc: Resetting bearer [ 286.409127][T11329] tipc: Disabling bearer [ 286.665187][T11355] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 286.691923][T11354] tipc: Enabled bearer , priority 0 [ 286.701427][T11355] syzkaller0: entered promiscuous mode [ 286.713467][T11355] syzkaller0: entered allmulticast mode [ 286.754769][T11351] netlink: 'syz.2.1635': attribute type 2 has an invalid length. [ 286.765525][T11358] wg1 speed is unknown, defaulting to 1000 [ 286.775010][T11358] wlan0 speed is unknown, defaulting to 1000 [ 286.817288][T11351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1635'. [ 286.832455][T11363] netlink: 'syz.3.1638': attribute type 14 has an invalid length. [ 286.842591][T11363] netem: change failed [ 286.871485][T11355] tipc: Resetting bearer [ 286.915028][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 286.915250][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 286.937031][T11355] tipc: Disabling bearer [ 287.111300][T11364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.232267][T11382] netlink: 'syz.3.1641': attribute type 2 has an invalid length. [ 287.273240][T11381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1642'. [ 287.290790][T11372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1641'. [ 287.301381][T11381] netlink: 'syz.0.1642': attribute type 6 has an invalid length. [ 287.499822][T11375] wg1 speed is unknown, defaulting to 1000 [ 287.556771][T11387] delete_channel: no stack [ 287.809280][T11375] wlan0 speed is unknown, defaulting to 1000 [ 287.892785][T11395] batman_adv: batadv0: Interface deactivated: dummy0 [ 287.916777][T11395] batman_adv: batadv0: Removing interface: dummy0 [ 287.942109][T11395] bridge_slave_0: left allmulticast mode [ 287.955130][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 287.966564][T11395] bridge_slave_0: left promiscuous mode [ 287.972916][T11395] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.122854][T11395] bridge_slave_1: left allmulticast mode [ 288.130912][T11395] bridge_slave_1: left promiscuous mode [ 288.140133][T11395] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.169798][T11395] bond0: (slave bond_slave_0): Releasing backup interface [ 288.238479][T11395] bond0: (slave bond_slave_1): Releasing backup interface [ 288.281354][T11395] team0: Port device team_slave_0 removed [ 288.337303][T11395] team0: Port device team_slave_1 removed [ 288.375427][T11395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.382988][T11395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.409401][T11395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.416937][T11395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.432880][T11395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.566899][T11401] wg1 speed is unknown, defaulting to 1000 [ 288.659855][T11401] wlan0 speed is unknown, defaulting to 1000 [ 288.966121][T11432] delete_channel: no stack [ 288.994878][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 289.241201][T11436] netlink: 'syz.1.1658': attribute type 2 has an invalid length. [ 289.264814][T11441] wg1 speed is unknown, defaulting to 1000 [ 289.279426][T11441] wlan0 speed is unknown, defaulting to 1000 [ 289.331680][T11436] __nla_validate_parse: 9 callbacks suppressed [ 289.331700][T11436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1658'. [ 289.351964][T11455] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 289.448731][T11455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.468390][T11455] siw: device registration error -23 [ 289.575098][T11455] wg1 speed is unknown, defaulting to 1000 [ 289.582945][T11455] wlan0 speed is unknown, defaulting to 1000 [ 289.956556][T11472] wg1 speed is unknown, defaulting to 1000 [ 290.035257][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.172880][T11472] wlan0 speed is unknown, defaulting to 1000 [ 290.221837][T11485] syzkaller0: entered promiscuous mode [ 290.227638][T11485] syzkaller0: entered allmulticast mode [ 290.280764][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1674'. [ 290.314543][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1674'. [ 290.957066][T11473] wg1 speed is unknown, defaulting to 1000 [ 290.983474][T11473] wlan0 speed is unknown, defaulting to 1000 [ 291.075064][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 291.258899][T11525] wg1 speed is unknown, defaulting to 1000 [ 291.397973][T11525] wlan0 speed is unknown, defaulting to 1000 [ 291.642524][T11539] FAULT_INJECTION: forcing a failure. [ 291.642524][T11539] name failslab, interval 1, probability 0, space 0, times 0 [ 291.656824][T11539] CPU: 1 UID: 0 PID: 11539 Comm: syz.3.1688 Not tainted syzkaller #0 PREEMPT(full) [ 291.656853][T11539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.656865][T11539] Call Trace: [ 291.656873][T11539] [ 291.656882][T11539] dump_stack_lvl+0x189/0x250 [ 291.656916][T11539] ? __pfx____ratelimit+0x10/0x10 [ 291.656943][T11539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.656970][T11539] ? __pfx__printk+0x10/0x10 [ 291.656998][T11539] ? __pfx___might_resched+0x10/0x10 [ 291.657020][T11539] ? fs_reclaim_acquire+0x7d/0x100 [ 291.657056][T11539] should_fail_ex+0x414/0x560 [ 291.657092][T11539] should_failslab+0xa8/0x100 [ 291.657113][T11539] kmem_cache_alloc_node_noprof+0x77/0x710 [ 291.657140][T11539] ? __alloc_skb+0x112/0x2d0 [ 291.657164][T11539] __alloc_skb+0x112/0x2d0 [ 291.657187][T11539] netlink_sendmsg+0x5c6/0xb30 [ 291.657219][T11539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.657243][T11539] ? aa_sock_msg_perm+0xf1/0x1d0 [ 291.657274][T11539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.657293][T11539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.657315][T11539] __sock_sendmsg+0x21c/0x270 [ 291.657346][T11539] ____sys_sendmsg+0x505/0x830 [ 291.657376][T11539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.657409][T11539] ? import_iovec+0x74/0xa0 [ 291.657439][T11539] ___sys_sendmsg+0x21f/0x2a0 [ 291.657463][T11539] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.657535][T11539] ? __fget_files+0x2a/0x420 [ 291.657555][T11539] ? __fget_files+0x3a0/0x420 [ 291.657585][T11539] __x64_sys_sendmsg+0x19b/0x260 [ 291.657624][T11539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.657668][T11539] ? __pfx_ksys_write+0x10/0x10 [ 291.657700][T11539] ? do_syscall_64+0xbe/0xfa0 [ 291.657733][T11539] do_syscall_64+0xfa/0xfa0 [ 291.657758][T11539] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.657785][T11539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.657805][T11539] ? clear_bhb_loop+0x60/0xb0 [ 291.657831][T11539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.657850][T11539] RIP: 0033:0x7f964f78f6c9 [ 291.657869][T11539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.657886][T11539] RSP: 002b:00007f96506ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.657909][T11539] RAX: ffffffffffffffda RBX: 00007f964f9e6180 RCX: 00007f964f78f6c9 [ 291.657924][T11539] RDX: 00000000240488d0 RSI: 0000200000006040 RDI: 0000000000000004 [ 291.657937][T11539] RBP: 00007f96506ba090 R08: 0000000000000000 R09: 0000000000000000 [ 291.657950][T11539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.657962][T11539] R13: 00007f964f9e6218 R14: 00007f964f9e6180 R15: 00007ffdd6491ca8 [ 291.657998][T11539] [ 292.114886][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 292.615399][T11576] Bluetooth: MGMT ver 1.23 [ 292.644165][T11576] syzkaller1: entered promiscuous mode [ 292.650719][T11576] syzkaller1: entered allmulticast mode [ 292.680094][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 293.164709][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 293.180373][T11600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1701'. [ 293.190493][T11600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1701'. [ 293.199849][T11600] netlink: 'syz.0.1701': attribute type 4 has an invalid length. [ 293.225669][T11596] delete_channel: no stack [ 293.244523][T11600] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1701'. [ 293.590239][T11610] wg1 speed is unknown, defaulting to 1000 [ 293.607875][T11610] wlan0 speed is unknown, defaulting to 1000 [ 293.758135][T11617] wg1 speed is unknown, defaulting to 1000 [ 294.089791][T11619] wg1 speed is unknown, defaulting to 1000 [ 294.103761][T11617] wlan0 speed is unknown, defaulting to 1000 [ 294.194986][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 294.310252][T11619] wlan0 speed is unknown, defaulting to 1000 [ 294.365379][T11632] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1711'. [ 294.980318][T11649] wg1 speed is unknown, defaulting to 1000 [ 294.988546][T11649] wlan0 speed is unknown, defaulting to 1000 [ 295.052988][T11650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.084651][T11653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1717'. [ 295.104420][T11653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1717'. [ 295.113821][T11653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1717'. [ 295.139643][T11655] delete_channel: no stack [ 295.155987][T11649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.233413][T11660] netlink: 'syz.4.1719': attribute type 13 has an invalid length. [ 295.241708][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 295.454624][ T7788] wg1 speed is unknown, defaulting to 1000 [ 295.645985][T11676] tipc: Enabling of bearer rejected, failed to enable media [ 296.069629][T11691] delete_channel: no stack [ 296.198716][T11696] netlink: 77 bytes leftover after parsing attributes in process `syz.3.1732'. [ 296.245860][T11703] netlink: 'syz.1.1730': attribute type 13 has an invalid length. [ 296.271277][T11703] netlink: 'syz.1.1730': attribute type 17 has an invalid length. [ 296.279859][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.424050][T11703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.528185][T11722] netlink: zone id is out of range [ 296.533692][T11722] netlink: zone id is out of range [ 296.543652][T11722] netlink: zone id is out of range [ 296.565503][T11722] netlink: zone id is out of range [ 296.575977][T11722] netlink: zone id is out of range [ 296.603035][T11722] netlink: zone id is out of range [ 296.665568][T11722] netlink: zone id is out of range [ 296.795491][T11731] batman_adv: batadv0: Adding interface: vlan1 [ 296.802882][T11731] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.832619][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.845912][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.857611][T11731] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active [ 296.899272][T11734] wg1 speed is unknown, defaulting to 1000 [ 296.907883][T11734] wlan0 speed is unknown, defaulting to 1000 [ 297.636874][T11765] veth0_to_team: entered promiscuous mode [ 297.637283][T11772] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1746'. [ 297.731728][T11757] wg1 speed is unknown, defaulting to 1000 [ 297.775069][T11757] wlan0 speed is unknown, defaulting to 1000 [ 297.925520][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 298.233993][T11789] IPv6: Can't replace route, no match found [ 298.253892][T11789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1751'. [ 299.290135][T11812] wg1 speed is unknown, defaulting to 1000 [ 299.302262][T11812] wlan0 speed is unknown, defaulting to 1000 [ 299.320667][T11813] wg1 speed is unknown, defaulting to 1000 [ 299.361236][T11813] wlan0 speed is unknown, defaulting to 1000 [ 299.535063][T11831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1761'. [ 299.592391][T11831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1761'. [ 299.894434][T11845] FAULT_INJECTION: forcing a failure. [ 299.894434][T11845] name failslab, interval 1, probability 0, space 0, times 0 [ 299.924892][T11842] netlink: 'syz.2.1764': attribute type 2 has an invalid length. [ 299.936729][T11846] wg1 speed is unknown, defaulting to 1000 [ 299.973942][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1764'. [ 299.984944][T11845] CPU: 0 UID: 0 PID: 11845 Comm: syz.1.1765 Not tainted syzkaller #0 PREEMPT(full) [ 299.984981][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.984993][T11845] Call Trace: [ 299.985001][T11845] [ 299.985011][T11845] dump_stack_lvl+0x189/0x250 [ 299.985044][T11845] ? __pfx____ratelimit+0x10/0x10 [ 299.985071][T11845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.985098][T11845] ? __pfx__printk+0x10/0x10 [ 299.985126][T11845] ? __pfx___might_resched+0x10/0x10 [ 299.985147][T11845] ? fs_reclaim_acquire+0x7d/0x100 [ 299.985182][T11845] should_fail_ex+0x414/0x560 [ 299.985228][T11845] should_failslab+0xa8/0x100 [ 299.985251][T11845] kmem_cache_alloc_node_noprof+0x77/0x710 [ 299.985279][T11845] ? __alloc_skb+0x112/0x2d0 [ 299.985305][T11845] __alloc_skb+0x112/0x2d0 [ 299.985328][T11845] netlink_sendmsg+0x5c6/0xb30 [ 299.985361][T11845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.985386][T11845] ? aa_sock_msg_perm+0xf1/0x1d0 [ 299.985417][T11845] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.985437][T11845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.985457][T11845] __sock_sendmsg+0x21c/0x270 [ 299.985488][T11845] ____sys_sendmsg+0x505/0x830 [ 299.985517][T11845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.985549][T11845] ? import_iovec+0x74/0xa0 [ 299.985578][T11845] ___sys_sendmsg+0x21f/0x2a0 [ 299.985602][T11845] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.985662][T11845] ? __fget_files+0x2a/0x420 [ 299.985681][T11845] ? __fget_files+0x3a0/0x420 [ 299.985711][T11845] __x64_sys_sendmsg+0x19b/0x260 [ 299.985737][T11845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.985771][T11845] ? __pfx_ksys_write+0x10/0x10 [ 299.985803][T11845] ? do_syscall_64+0xbe/0xfa0 [ 299.985835][T11845] do_syscall_64+0xfa/0xfa0 [ 299.985860][T11845] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.985887][T11845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.985907][T11845] ? clear_bhb_loop+0x60/0xb0 [ 299.985931][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.985951][T11845] RIP: 0033:0x7f11b5b8f6c9 [ 299.985970][T11845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.985988][T11845] RSP: 002b:00007f11b698d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.986012][T11845] RAX: ffffffffffffffda RBX: 00007f11b5de5fa0 RCX: 00007f11b5b8f6c9 [ 299.986028][T11845] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 299.986041][T11845] RBP: 00007f11b698d090 R08: 0000000000000000 R09: 0000000000000000 [ 299.986054][T11845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.986066][T11845] R13: 00007f11b5de6038 R14: 00007f11b5de5fa0 R15: 00007ffcb6009cb8 [ 299.986101][T11845] [ 300.434879][ C0] net_ratelimit: 10 callbacks suppressed [ 300.434902][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 300.487402][T11846] wlan0 speed is unknown, defaulting to 1000 [ 300.498723][T11854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1767'. [ 300.748914][T11861] netlink: 'syz.3.1769': attribute type 13 has an invalid length. [ 301.474723][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 301.710438][T11861] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.718583][T11861] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.855271][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 301.875963][T11876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1773'. [ 301.915399][T11876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1773'. [ 302.038839][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'. [ 302.394854][T11861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.447079][T11861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.461300][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 302.486885][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 302.514815][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 302.820330][T11861] batman_adv: batadv0: Interface deactivated: macsec1 [ 302.982480][ T8359] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.023378][ T8359] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.041034][ T8359] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.092080][ T8359] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.314132][ T8359] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.340354][ T8359] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.375243][ T8359] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.383669][ T8359] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.471351][T11902] macvtap1: entered promiscuous mode [ 303.481127][T11902] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 303.555110][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 303.819766][T11918] wg1 speed is unknown, defaulting to 1000 [ 303.833026][T11913] netlink: 'syz.4.1785': attribute type 2 has an invalid length. [ 303.843647][T11918] wlan0 speed is unknown, defaulting to 1000 [ 303.901220][T11921] netlink: 'syz.0.1788': attribute type 10 has an invalid length. [ 304.440974][T11945] wg1 speed is unknown, defaulting to 1000 [ 304.476695][T11945] wlan0 speed is unknown, defaulting to 1000 [ 304.594703][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 304.610462][T11954] __nla_validate_parse: 38 callbacks suppressed [ 304.610487][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1796'. [ 305.030563][T11968] delete_channel: no stack [ 305.348005][T11985] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1806'. [ 305.367854][T11987] netlink: 'syz.4.1807': attribute type 13 has an invalid length. [ 305.376977][T11987] netlink: 'syz.4.1807': attribute type 17 has an invalid length. [ 305.413037][T11988] netlink: 'syz.0.1805': attribute type 8 has an invalid length. [ 305.593639][T11991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.609104][T11991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.634505][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 305.743425][T11987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.778218][T12007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1810'. [ 305.810241][T11983] wg1 speed is unknown, defaulting to 1000 [ 305.818615][T11983] wlan0 speed is unknown, defaulting to 1000 [ 305.903112][T11990] wg1 speed is unknown, defaulting to 1000 [ 305.911935][T11990] wlan0 speed is unknown, defaulting to 1000 [ 306.049872][T11989] wg1 speed is unknown, defaulting to 1000 [ 306.058841][T11989] wlan0 speed is unknown, defaulting to 1000 [ 306.363087][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 306.447828][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1813'. [ 306.488215][ T30] audit: type=1107 audit(1762460315.745:2): pid=12024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='%^DQ [ 306.488215][ T30] 4N G' [ 306.578601][T12022] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 306.590986][T12022] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 306.646398][T12026] macvlan2: entered promiscuous mode [ 306.653023][T12026] macvlan2: entered allmulticast mode [ 306.663874][T12026] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 306.691373][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 306.711138][T12025] syz_tun: entered promiscuous mode [ 306.750904][T12025] syz_tun: left promiscuous mode [ 307.010049][T12038] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1820'. [ 307.165042][T12049] netlink: 'syz.1.1823': attribute type 13 has an invalid length. [ 307.183281][T12049] netlink: 'syz.1.1823': attribute type 17 has an invalid length. [ 307.312540][T12053] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 307.423850][T12064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1824'. [ 307.616379][T12053] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.675166][T12057] bond5: (slave ip6gretap1): making interface the new active one [ 307.689844][T12057] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 307.704057][T12063] erspan0: entered allmulticast mode [ 307.714994][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 307.718057][T12063] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 307.740404][T12051] wg1 speed is unknown, defaulting to 1000 [ 307.786538][T12051] wlan0 speed is unknown, defaulting to 1000 [ 307.790363][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1829'. [ 307.803338][T12041] wg1 speed is unknown, defaulting to 1000 [ 307.829805][T12041] wlan0 speed is unknown, defaulting to 1000 [ 308.001403][ T8385] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.027281][ T8385] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.072571][ T8385] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.202492][ T8385] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.393082][T12125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.439473][T12125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.754574][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 308.840982][T12145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1840'. [ 308.978845][T12150] bridge0: entered promiscuous mode [ 308.986821][T12150] bridge0: port 3(macvtap1) entered blocking state [ 308.993938][T12150] bridge0: port 3(macvtap1) entered disabled state [ 309.001356][T12150] macvtap1: entered allmulticast mode [ 309.009742][T12150] bridge0: entered allmulticast mode [ 309.032209][T12150] macvtap1: left allmulticast mode [ 309.038173][T12150] bridge0: left allmulticast mode [ 309.066423][T12150] bridge0: left promiscuous mode [ 309.123148][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1843'. [ 309.141549][T12147] wg1 speed is unknown, defaulting to 1000 [ 309.150479][T12147] wlan0 speed is unknown, defaulting to 1000 [ 309.606998][T12168] delete_channel: no stack [ 309.794487][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 310.627948][T12186] __nla_validate_parse: 7 callbacks suppressed [ 310.627968][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1854'. [ 310.638617][T12187] bridge0: port 3(macvtap1) entered blocking state [ 310.661629][T12187] bridge0: port 3(macvtap1) entered disabled state [ 310.669102][T12187] macvtap1: entered allmulticast mode [ 310.675425][T12187] bridge0: entered allmulticast mode [ 310.690003][T12187] macvtap1: left allmulticast mode [ 310.696076][T12187] bridge0: left allmulticast mode [ 310.738452][T12189] netlink: 'syz.0.1854': attribute type 1 has an invalid length. [ 310.760056][T12186] bridge_slave_1: left allmulticast mode [ 310.774741][T12186] bridge_slave_1: left promiscuous mode [ 310.786847][T12186] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.817506][T12186] bridge_slave_0: left allmulticast mode [ 310.834550][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 310.867446][T12186] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.012123][T12189] 8021q: adding VLAN 0 to HW filter on device bond8 [ 311.074228][T12191] bond8: (slave veth7): Enslaving as an active interface with a down link [ 311.092025][T12193] bond8: (slave dummy0): making interface the new active one [ 311.104264][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 311.116842][T12193] dummy0: entered promiscuous mode [ 311.122705][T12193] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 311.627578][T12219] netlink: 'syz.2.1863': attribute type 3 has an invalid length. [ 311.743527][T12226] IPv6: addrconf: prefix option has invalid lifetime [ 311.884500][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 312.021985][T12239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.074105][T12239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.108098][T12240] tipc: Enabled bearer , priority 0 [ 312.142783][T12236] wg1 speed is unknown, defaulting to 1000 [ 312.154257][T12236] wlan0 speed is unknown, defaulting to 1000 [ 312.225157][T12242] syzkaller0: entered promiscuous mode [ 312.231160][T12242] syzkaller0: entered allmulticast mode [ 312.388720][T12240] tipc: Resetting bearer [ 312.428435][T12238] tipc: Resetting bearer [ 312.505785][T12238] tipc: Disabling bearer [ 312.519610][T12249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1869'. [ 312.549864][T12249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1869'. [ 312.676613][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 312.697404][T12255] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1870'. [ 312.709600][T12256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.729081][T12256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.749074][T12256] batman_adv: batadv0: Removing interface: macsec1 [ 312.768716][T12259] can: request_module (can-proto-0) failed. [ 312.780609][T12267] netlink: 'syz.1.1873': attribute type 3 has an invalid length. [ 312.822164][T12261] IPVS: Scheduler module ip_vs_ not found [ 312.876504][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 312.914665][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 313.223709][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1879'. [ 313.453617][T12308] sctp: [Deprecated]: syz.0.1886 (pid 12308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.453617][T12308] Use struct sctp_sack_info instead [ 313.509516][T12305] bridge0: port 3(macvtap1) entered blocking state [ 313.524708][T12305] bridge0: port 3(macvtap1) entered disabled state [ 313.532562][T12305] macvtap1: entered allmulticast mode [ 313.547456][T12305] bridge0: entered allmulticast mode [ 313.557519][T12314] netlink: 'syz.1.1885': attribute type 10 has an invalid length. [ 313.571586][T12305] macvtap1: left allmulticast mode [ 313.586179][T12315] netlink: 'syz.4.1883': attribute type 50 has an invalid length. [ 313.604892][T12305] bridge0: left allmulticast mode [ 313.954487][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 314.213888][T12314] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 314.322879][T12324] wg1 speed is unknown, defaulting to 1000 [ 314.364080][T12324] wlan0 speed is unknown, defaulting to 1000 [ 314.370415][T12323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.398404][T12323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.586893][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 314.780894][T12347] vlan2: entered promiscuous mode [ 314.786858][T12347] bond0: entered promiscuous mode [ 314.792087][T12347] bond_slave_0: entered promiscuous mode [ 314.798218][T12347] bond_slave_1: entered promiscuous mode [ 314.804248][T12347] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 314.994931][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 315.016058][T12362] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 315.024559][T12362] netlink: 'syz.1.1899': attribute type 4 has an invalid length. [ 315.033824][T12362] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1899'. [ 315.903951][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'. [ 316.002490][ T30] audit: type=1107 audit(1762460325.255:3): pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 316.044610][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 316.151629][T12413] wg1 speed is unknown, defaulting to 1000 [ 316.160994][T12413] wlan0 speed is unknown, defaulting to 1000 [ 316.734891][T12435] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1923'. [ 316.851638][T12435] wg1 speed is unknown, defaulting to 1000 [ 316.870748][T12435] wlan0 speed is unknown, defaulting to 1000 [ 317.074547][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 317.247564][T12454] macsec2: entered promiscuous mode [ 317.260427][T12456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1930'. [ 317.827728][T12467] tipc: Enabled bearer , priority 0 [ 317.865550][T12467] syzkaller0: entered promiscuous mode [ 317.871173][T12467] syzkaller0: entered allmulticast mode [ 317.911694][T12466] tipc: Resetting bearer [ 317.998595][T12466] tipc: Disabling bearer [ 318.005353][T12483] netlink: 'syz.2.1939': attribute type 10 has an invalid length. [ 318.021227][T12485] FAULT_INJECTION: forcing a failure. [ 318.021227][T12485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.067142][T12485] CPU: 1 UID: 0 PID: 12485 Comm: syz.1.1940 Not tainted syzkaller #0 PREEMPT(full) [ 318.067173][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 318.067185][T12485] Call Trace: [ 318.067194][T12485] [ 318.067202][T12485] dump_stack_lvl+0x189/0x250 [ 318.067236][T12485] ? __pfx____ratelimit+0x10/0x10 [ 318.067262][T12485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.067288][T12485] ? __pfx__printk+0x10/0x10 [ 318.067323][T12485] should_fail_ex+0x414/0x560 [ 318.067359][T12485] _copy_to_user+0x31/0xb0 [ 318.067387][T12485] simple_read_from_buffer+0xe1/0x170 [ 318.067422][T12485] proc_fail_nth_read+0x1b3/0x220 [ 318.067453][T12485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.067482][T12485] ? rw_verify_area+0x2a6/0x4d0 [ 318.067508][T12485] ? __lock_acquire+0xab9/0xd20 [ 318.067526][T12485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.067552][T12485] vfs_read+0x200/0xa30 [ 318.067578][T12485] ? fdget_pos+0x247/0x320 [ 318.067602][T12485] ? __pfx___mutex_lock+0x10/0x10 [ 318.067631][T12485] ? __pfx_vfs_read+0x10/0x10 [ 318.067661][T12485] ? __fget_files+0x2a/0x420 [ 318.067685][T12485] ? __fget_files+0x3a0/0x420 [ 318.067703][T12485] ? __fget_files+0x2a/0x420 [ 318.067732][T12485] ksys_read+0x145/0x250 [ 318.067763][T12485] ? __pfx_ksys_read+0x10/0x10 [ 318.067795][T12485] ? do_syscall_64+0xbe/0xfa0 [ 318.067826][T12485] do_syscall_64+0xfa/0xfa0 [ 318.067851][T12485] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.067877][T12485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.067896][T12485] ? clear_bhb_loop+0x60/0xb0 [ 318.067921][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.067940][T12485] RIP: 0033:0x7f11b5b8e0dc [ 318.067959][T12485] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 318.067976][T12485] RSP: 002b:00007f11b698d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.068000][T12485] RAX: ffffffffffffffda RBX: 00007f11b5de5fa0 RCX: 00007f11b5b8e0dc [ 318.068015][T12485] RDX: 000000000000000f RSI: 00007f11b698d0a0 RDI: 0000000000000007 [ 318.068027][T12485] RBP: 00007f11b698d090 R08: 0000000000000000 R09: 0000000000000000 [ 318.068039][T12485] R10: 000000000000004c R11: 0000000000000246 R12: 0000000000000001 [ 318.068062][T12485] R13: 00007f11b5de6038 R14: 00007f11b5de5fa0 R15: 00007ffcb6009cb8 [ 318.068104][T12485] [ 318.077175][T12477] wg1 speed is unknown, defaulting to 1000 [ 318.116379][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 318.352857][T12477] wlan0 speed is unknown, defaulting to 1000 [ 318.561176][T12496] wg1 speed is unknown, defaulting to 1000 [ 318.598667][T12496] wlan0 speed is unknown, defaulting to 1000 [ 318.958681][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1949'. [ 319.089423][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 319.146315][T12524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.155869][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 319.328210][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1956'. [ 319.374970][T12547] netlink: 'syz.3.1959': attribute type 8 has an invalid length. [ 319.408679][T12547] sch_fq: defrate 0 ignored. [ 319.518999][T12553] netlink: 'syz.1.1961': attribute type 39 has an invalid length. [ 319.637213][T12553] hsr_slave_1 (unregistering): left promiscuous mode [ 319.761852][T12558] IPVS: fo: FWM 3 0x00000003 - no destination available [ 320.077110][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 320.194587][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 320.534599][T12576] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1969'. [ 320.565826][T12576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1969'. [ 320.710308][ T30] audit: type=1800 audit(1762460329.965:4): pid=12578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1966" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2006 res=0 errno=0 [ 320.765924][T12604] syz_tun: entered allmulticast mode [ 320.803179][T12604] syz_tun: left allmulticast mode [ 320.822755][T12578] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1966'. [ 321.037561][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 321.077109][T12615] openvswitch: netlink: Flow actions attr not present in new flow. [ 321.107474][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 321.131531][T12615] openvswitch: netlink: Flow actions attr not present in new flow. [ 321.234363][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 321.279623][T12626] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1980'. [ 321.872807][T12626] batadv1: entered promiscuous mode [ 321.893741][T12626] batadv1: entered allmulticast mode [ 321.916716][T12633] wg1: entered promiscuous mode [ 321.921656][T12633] wg1: entered allmulticast mode [ 321.950244][T12641] bridge0: entered promiscuous mode [ 321.965905][T12641] bridge0: port 1(macvtap2) entered blocking state [ 321.974018][T12641] bridge0: port 1(macvtap2) entered disabled state [ 321.994609][T12641] macvtap2: entered allmulticast mode [ 322.004413][T12641] bridge0: entered allmulticast mode [ 322.012759][T12641] macvtap2: left allmulticast mode [ 322.035358][T12641] bridge0: left allmulticast mode [ 322.075035][T12641] bridge0: left promiscuous mode [ 322.120767][T12651] netlink: 'syz.2.1990': attribute type 1 has an invalid length. [ 322.239756][T12650] wg1 speed is unknown, defaulting to 1000 [ 322.248675][T12650] wlan0 speed is unknown, defaulting to 1000 [ 322.274560][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 322.447392][ T8385] dummy0: left promiscuous mode [ 322.462590][T12656] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1991'. [ 322.595545][T12664] netlink: 'syz.0.1994': attribute type 27 has an invalid length. [ 322.807374][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'. [ 322.827773][T12672] netlink: 3288 bytes leftover after parsing attributes in process `syz.0.1997'. [ 323.118517][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 323.280833][T12696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2000'. [ 323.314365][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 323.383567][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 323.406499][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 323.413830][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 324.354611][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 324.562223][T12694] infiniband syz2: set down [ 324.571092][T12094] vxcan1 speed is unknown, defaulting to 1000 [ 324.571115][T12721] wg1 speed is unknown, defaulting to 1000 [ 324.573088][T12721] wlan0 speed is unknown, defaulting to 1000 [ 324.590079][T12694] infiniband syz2: added vxcan1 [ 324.612183][T12694] syz2: rxe_create_cq: returned err = -12 [ 324.623486][T12721] vxcan1 speed is unknown, defaulting to 1000 [ 324.626637][T12694] infiniband syz2: Couldn't create ib_mad CQ [ 324.642324][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2009'. [ 324.685765][T12694] infiniband syz2: Couldn't open port 1 [ 324.748629][T12694] RDS/IB: syz2: added [ 324.753337][T12694] smc: adding ib device syz2 with port count 1 [ 324.778164][T12694] smc: ib device syz2 port 1 has no pnetid [ 324.796697][T12094] vxcan1 speed is unknown, defaulting to 1000 [ 325.040429][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 325.096417][T12732] netlink: 'syz.1.2012': attribute type 21 has an invalid length. [ 325.128975][T12732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2012'. [ 325.394446][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.460404][T12748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.591380][T12748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.784420][T12745] wg1 speed is unknown, defaulting to 1000 [ 325.792372][T12745] wlan0 speed is unknown, defaulting to 1000 [ 325.951088][T12745] vxcan1 speed is unknown, defaulting to 1000 [ 326.205995][T12773] __nla_validate_parse: 2 callbacks suppressed [ 326.206016][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 326.326239][T12773] bond1: option ad_actor_sys_prio: invalid value (0) [ 326.332991][T12773] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 326.441141][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 326.552592][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 327.491503][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 327.801117][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'. [ 328.271734][T12780] netlink: 'syz.4.2020': attribute type 5 has an invalid length. [ 328.518235][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 328.551656][T12773] bond1 (unregistering): Released all slaves [ 328.712207][T12780] netlink: 'syz.4.2020': attribute type 6 has an invalid length. [ 329.559812][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 330.601213][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.639204][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 332.688259][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 333.720885][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 334.759365][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 335.800766][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 336.839651][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 337.878414][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 338.918932][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 338.982980][T12788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2023'. [ 339.959998][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 340.998672][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 342.038983][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 343.021721][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 343.076656][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 344.118399][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 345.158934][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 346.196614][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 347.240859][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 348.279526][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 349.318056][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 350.368123][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 351.398062][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 352.448506][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 353.478855][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 354.518832][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 355.568653][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 356.611430][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 357.639647][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 358.681444][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 359.641543][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.731114][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 359.751255][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.850740][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.221551][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.563909][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.758510][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 361.143091][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.263370][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.411920][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.492626][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.673355][ T5827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.798530][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 361.824217][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.362181][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.403270][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.811743][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.847774][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 362.922932][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.642333][ T52] Bluetooth: hci5: command tx timeout [ 363.877053][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 364.920697][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 365.481798][ T5835] Bluetooth: hci7: command tx timeout [ 365.684047][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 365.731409][ T5835] Bluetooth: hci5: command tx timeout [ 365.958365][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 365.972288][ T5835] Bluetooth: hci6: command tx timeout [ 366.999150][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 367.564043][ T5835] Bluetooth: hci7: command tx timeout [ 367.801933][ T5835] Bluetooth: hci5: command tx timeout [ 368.040958][ T5835] Bluetooth: hci6: command tx timeout [ 368.049875][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 369.081807][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 369.652806][ T5835] Bluetooth: hci7: command tx timeout [ 369.882124][ T5835] Bluetooth: hci5: command tx timeout [ 370.130418][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 370.143854][ T5835] Bluetooth: hci6: command tx timeout [ 371.158541][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 371.742159][ T5835] Bluetooth: hci7: command tx timeout [ 372.197677][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 372.222104][ T5835] Bluetooth: hci6: command tx timeout [ 373.249169][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 374.280531][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 375.317612][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 376.360930][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 376.483594][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 377.400641][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 378.447176][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 379.477243][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 380.183118][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 380.520705][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 381.569336][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 382.609985][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 383.638702][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 384.677824][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 385.729807][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 386.761354][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 387.808554][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 388.847927][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 389.888563][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 390.928663][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 391.959960][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 393.000946][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 393.712764][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 394.038607][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 395.080358][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 396.119994][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 397.158835][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 398.209960][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 399.238763][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 400.287884][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 401.318982][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 402.367187][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 403.399958][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 404.440912][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 405.487695][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 406.531026][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 407.568220][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 408.361669][T12862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2042'. [ 408.598744][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 408.994139][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 409.639598][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 410.679970][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 411.718017][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 412.758012][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 413.801208][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 414.840665][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 415.878608][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 416.919284][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 417.967607][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 418.997801][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 420.038076][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 421.079184][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 421.093635][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 421.193713][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 421.322792][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 421.784008][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 422.092806][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 422.118775][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 423.160933][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 424.209645][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 424.463177][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 424.682108][ T52] Bluetooth: hci8: command tx timeout [ 424.862542][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 425.063016][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 425.248358][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 425.444193][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 425.641230][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 426.202854][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 426.271665][ T5831] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 426.287101][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 426.382815][ T5831] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 426.643182][ T5831] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 426.760604][ T5831] Bluetooth: hci8: command tx timeout [ 427.193255][ T5831] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 427.318464][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 427.393261][ T5831] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 428.283071][ T5831] Bluetooth: hci9: command tx timeout [ 428.370113][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 428.851989][ T5831] Bluetooth: hci8: command tx timeout [ 429.400997][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 430.221560][ T5831] Bluetooth: hci10: command tx timeout [ 430.372231][ T5831] Bluetooth: hci9: command tx timeout [ 430.439965][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 430.923497][ T5831] Bluetooth: hci8: command tx timeout [ 431.480868][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 432.292047][ T5831] Bluetooth: hci10: command tx timeout [ 432.442837][ T5831] Bluetooth: hci9: command tx timeout [ 432.518483][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 433.569121][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 434.362707][ T5831] Bluetooth: hci10: command tx timeout [ 434.541271][ T5831] Bluetooth: hci9: command tx timeout [ 434.608440][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 435.639535][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 436.461082][ T5831] Bluetooth: hci10: command tx timeout [ 436.688240][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 437.718327][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 438.760385][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 439.798014][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 440.848021][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 441.130999][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 441.879170][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 442.919185][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 443.958592][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 445.000712][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 446.038067][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 447.089193][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 448.129156][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 449.158073][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 450.208357][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 451.250613][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 452.289189][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 453.319311][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 454.368722][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 455.399288][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 455.973672][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 456.440710][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 457.479219][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 458.526845][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 459.560768][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 460.601472][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 461.640668][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 462.677677][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 463.727957][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 464.768475][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 465.801887][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 466.740968][T12921] bond1: Unable to set down delay as MII monitoring is disabled [ 466.839502][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 467.833845][T12921] bond1 (unregistering): Released all slaves [ 467.889095][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 468.918272][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 469.960492][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 470.330677][ T31] INFO: task kworker/u8:32:8381 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 470.822799][ T31] Not tainted syzkaller #0 [ 470.960577][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.000514][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 471.101089][ T31] task:kworker/u8:32 state:D stack:21704 pid:8381 tgid:8381 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 471.333673][ T31] Workqueue: netns cleanup_net [ 471.712000][ T31] Call Trace: [ 471.862008][ T31] [ 471.943470][ T31] __schedule+0x1798/0x4cc0 [ 472.047362][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 472.050463][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.272315][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.561702][ T31] ? __pfx___schedule+0x10/0x10 [ 472.771874][ T31] ? schedule+0x91/0x360 [ 473.087663][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 473.091736][ T31] schedule+0x165/0x360 [ 473.242057][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.431020][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 473.552621][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 473.741704][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 473.911171][ T31] ? __lock_acquire+0xab9/0xd20 [ 474.044140][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 474.127650][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 474.141321][ T31] down_write+0x1ab/0x1f0 [ 474.500936][ T31] ? __pfx_down_write+0x10/0x10 [ 474.582372][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 474.722358][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 474.851717][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 474.971768][ T31] rdma_dev_exit_net+0x8c/0x340 [ 475.112639][ T31] ? __pfx___might_resched+0x10/0x10 [ 475.157236][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 475.242831][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 475.342027][ T31] ? net_generic+0x1e/0x240 [ 475.413400][ T31] ? mutex_is_locked+0x17/0x50 [ 475.553802][ T31] ? rtnl_is_locked+0x15/0x20 [ 475.633469][ T31] ops_undo_list+0x49a/0x990 [ 475.792604][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 475.873110][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 475.962345][ T31] cleanup_net+0x4d8/0x820 [ 476.082566][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 476.143327][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.198735][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 476.371597][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 476.491348][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 476.602148][ T31] process_scheduled_works+0xae1/0x17b0 [ 476.721865][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 476.872729][ T31] worker_thread+0x8a0/0xda0 [ 476.993184][ T31] kthread+0x711/0x8a0 [ 477.053557][ T31] ? __pfx_worker_thread+0x10/0x10 [ 477.113218][ T31] ? __pfx_kthread+0x10/0x10 [ 477.213262][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.239093][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 477.291542][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.360649][ T31] ? __pfx_kthread+0x10/0x10 [ 477.431461][ T31] ret_from_fork+0x4bc/0x870 [ 477.552195][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 477.652347][ T31] ? __switch_to_asm+0x39/0x70 [ 477.841827][ T31] ? __switch_to_asm+0x33/0x70 [ 477.983712][ T31] ? __pfx_kthread+0x10/0x10 [ 478.061745][ T31] ret_from_fork_asm+0x1a/0x30 [ 478.152023][ T31] [ 478.233569][ T31] [ 478.233569][ T31] Showing all locks held in the system: [ 478.280396][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 478.351407][ T31] 1 lock held by rcu_preempt/16: [ 478.460788][ T31] 1 lock held by khungtaskd/31: [ 478.641251][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 478.901581][T12694] vxcan1 speed is unknown, defaulting to 1000 [ 478.941576][ T31] 2 locks held by getty/5585: [ 479.004066][ T31] #0: ffff88814ce530a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 479.151688][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 479.322764][ T31] 1 lock held by ipvs-e:4:0/6390: [ 479.329068][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 479.452740][ T31] 4 locks held by kworker/u8:12/8354: [ 479.651757][ T31] #0: ffff8880b893a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 479.782939][ T31] #1: ffffc90003f4fba0 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 479.912900][ T31] #2: ffff8880b8925958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 480.033136][ T31] #3: ffffffff99a07548 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 480.152207][ T31] 4 locks held by kworker/u8:32/8381: [ 480.243403][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0