last executing test programs: 21m40.010091047s ago: executing program 2 (id=649): r0 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x5, @loopback, 0x6, 0x2}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 21m39.696703159s ago: executing program 2 (id=653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x2, 0xfffffffe, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x700, 0x4, 0x6}}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 21m39.441982006s ago: executing program 2 (id=657): r0 = socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e20, 0xfff, @empty, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x55c, 0x20080058) (async) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x55c, 0x20080058) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x4}, @TCA_SAMPLE_RATE, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0x6, 0x4}}}]}]}, 0x60}}, 0x0) 21m38.465654815s ago: executing program 2 (id=669): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) unshare(0x24020400) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000020280000002800000004000000000000000000000203000000000000000000000200000000020000000000000e030000000000000000006100"], 0x0, 0x44, 0x0, 0x0, 0x3}, 0x20) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000000100001002fbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d30000000000000300016802c000180280001000800000000000000000000000000000000000000000000000000000000000000000000009ff1342fbd3e8837166c45b358fe413c3312f6"], 0x64}}, 0x24040800) 21m38.157516048s ago: executing program 2 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000003c0)="58f6", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x9}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x3, 0x0, 0x3}, 0xe) (async, rerun: 64) shutdown(r2, 0x1) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) (async) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x66}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x51}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20040040) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r6, 0x0) (async, rerun: 64) close(r6) (rerun: 64) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) 21m37.882552599s ago: executing program 2 (id=679): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x64, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x40, 0x6, "578263bdf7116fd3f658919ed5b8978cddb3d34e29740afb7ef3a7ed73ca14c9c2f8786444d96e666b042e735dd50df738192ca4013bc2ca4dc00432"}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x248b12bc0886f84f, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xd8}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES16=r2, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockname$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000000c0)=0x1c) listen(r1, 0x4) 21m22.597265773s ago: executing program 32 (id=679): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x64, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x40, 0x6, "578263bdf7116fd3f658919ed5b8978cddb3d34e29740afb7ef3a7ed73ca14c9c2f8786444d96e666b042e735dd50df738192ca4013bc2ca4dc00432"}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x248b12bc0886f84f, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xd8}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES16=r2, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockname$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000000c0)=0x1c) listen(r1, 0x4) 2.228036638s ago: executing program 1 (id=12347): r0 = socket(0x2, 0x80805, 0x0) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000001"], 0x30}}], 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x7}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x30000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x1f00, 0x3ff, 0x24, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.007481951s ago: executing program 5 (id=12351): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) (async, rerun: 64) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000040), 0x4) (async) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.902065443s ago: executing program 3 (id=12352): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) accept4$inet(r1, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) (async) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f000022a000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, 0x0, 0x4040815) (async) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) 1.831508426s ago: executing program 5 (id=12353): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) (async) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000808000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000340001800c000100626974776973650024000280080003400000000208000140000000140800024000000012080006400000005a0900010073797a30"], 0x108}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) (rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0x18, &(0x7f0000000380)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000280)='GPL\x00', 0x6, 0xc0, &(0x7f0000000480)=""/192, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, r0, 0x8, &(0x7f0000000540)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r5, r7, 0x0, &(0x7f0000000580)=[r0], 0x0, 0x10, 0x2ba}, 0x94) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) write$cgroup_subtree(r8, &(0x7f0000000700)={[{0x2d, 'devices'}]}, 0x9) (async) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x14, 0x14, 0x1, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.642076199s ago: executing program 1 (id=12356): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) recvfrom(r0, &(0x7f0000000240)=""/227, 0xe3, 0x42, &(0x7f0000000340)=@hci={0x1f, 0x2}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0xf9c5fe0614bb46a1, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {}, {0x2d}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x24000091) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) (async) recvfrom(r0, &(0x7f0000000240)=""/227, 0xe3, 0x42, &(0x7f0000000340)=@hci={0x1f, 0x2}, 0x80) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0xf9c5fe0614bb46a1, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {}, {0x2d}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x24000091) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) (async) 1.535258514s ago: executing program 3 (id=12357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x400}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="08000800070303000200140000000202005d1131846429864fd168cd48a8f352411dd59da00749aeabf706422fbd9ce6f2f6ee3fe1ca5eb1683e8088033cd3a7a1e203e1e1a60431434b5269b0c7651e540566d9874c02868017f7c1171adf0d43ad89ac9a0dd3ace4311cda0dd848f8b936720c6bdf9fbd340880039e08d2464518c6a7b94d15ea4cfde165b86e5031"], 0x2a) 1.50327974s ago: executing program 4 (id=12358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback, @in6=@mcast1, 0x4e20, 0x401, 0x4e21, 0x56b0, 0xa, 0x80, 0x0, 0x1d, r3, r4}, {0x45af, 0x1, 0x8, 0xcd, 0x5, 0x1, 0x2, 0x7}, {0x91, 0x2, 0x6, 0x5}, 0x78, 0x6e6bb0, 0x1, 0x1, 0x3, 0x2}, {{@in=@local, 0x4d2, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x66, 0x0, 0x3, 0x6}}, 0xe8) (async) ioctl$SIOCRSSCAUSE(r1, 0x891d, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async) r9 = syz_open_procfs$namespace(r6, &(0x7f0000001780)='ns/ipc\x00') r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9a, 0x7, 0x800, 0x1, 0x1, 0x4, 0x5}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x6, 0x80000}}, {0x4}}]}]}, 0x7c}}, 0x0) (async) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r15 = accept4(r14, 0x0, 0x0, 0x0) sendmmsg$inet(r15, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x8000) r16 = accept$unix(r15, 0x0, 0x0) recvmmsg$unix(r16, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) (async) r17 = getpid() sendmmsg$unix(r5, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r17, r7}}}, @rights={{0x18, 0x1, 0x1, [r9, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@updsa={0x1dc, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x40, 0x0, 0xa, 0x20, 0x20, 0x5c, 0x0, r7}, {@in6=@loopback, 0x0, 0x33}, @in=@multicast2, {0x0, 0xffffffffffffffff, 0x5}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x2, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "a8841ff973ad4a7ffa45a84ae2540cfadba6d51b9b26bae4ce7c99365983d06d1ccd6bb6054247be71e404b434ebca103d267b7b4d5886028daf42a66adf39ff27"}}, @algo_auth_trunc={0x59, 0x14, {{'blake2s-256\x00'}, 0x68, 0x200, "204bfcfba5f8f47e7535fe8037"}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x8, 0x4) 1.481865202s ago: executing program 5 (id=12359): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xfffffffffffffff0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000021001f002cbd7000fddbdf2502"], 0x34}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRES8], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 1.364141267s ago: executing program 0 (id=12360): r0 = socket(0x26, 0x80000, 0xffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) 1.363040011s ago: executing program 1 (id=12361): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0x1, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRESOCT, @ANYBLOB="08000100", @ANYRESDEC=r1], 0x90}}, 0x0) 1.331644664s ago: executing program 0 (id=12362): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000700)={{0xffffffffffffffff, &(0x7f00000002c0)='X\x00', 0x8840, &(0x7f0000000300)={@align=0x8, {0xfff, 0x6e2b, 0x4, 0x9}}, 0x38, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0xffffffff}, 0x3, &(0x7f0000000680)=[{0x2, 0xb3, &(0x7f00000003c0)='[)\x15+/]~$#\x00', &(0x7f0000000400)="a3dc043dcf835b8f866a3ee3f7d803c7fe53d40f5e892aea3e7578cb750ab16f8bc5bf1c528726ce6e3c2a280c5bce886d862dfa3819b6203b220819d87aa38f7a5028d64cd3ba337b980541d927835d9abfb4b5dec9f09f495959b32c4830f8bab91d756cba2aa84e44fbb9a30f0cc5c8bb044ccbc890d16a2ea14274af48a942a47b98fc9948d0", 0x88, 0xa}, {0x1, 0x8, &(0x7f00000004c0)='[{\x00', &(0x7f0000000500)="422ce14dae70ddd54f857c1c641f5496836d7b9e60d19a56bdc79e7a216977b443e94ac7f975af80c915540c3644aa56dad833d1aca938e2dc17a3b406ec5f1eb3a2499ac635ef678c34b95a6b19a6ec026257e4fee3d1a269ecf35d613c23f49aa863836ef511dcdf19dc2a70358d50ad9208f3d43403cf08cc3dd29911f88060c0622c8188193ec8c44286956ce88ea9f32c7375136337ed333c99a1eb751454e5b9fa6ff3d577", 0xa8, 0x22}, {0x2, 0x1, &(0x7f00000005c0)=']{]\x00', &(0x7f0000000600)="619f9e8103f15e06f942a79d0a8e3fae17c0e02ca386737e8943abf3e6941b998f237e1f3ff107bf8c9ae506fd400cd2462fec5a45ffafd93eb30f946de3ecda20c69616a37068a31860cde12803155ad53b15f92461ef114942778c63b86cbb6c4f1864da5a7d8fa0", 0x69, 0x8}]}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="10002dbd7000fddbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0004000000080001007063690011000200303030303a30303a31302e300000000008000b005e7b0000080001007063690011000200303030303a30303a31302e300000000008000b0009000000080001007063690011000200303030303a30303a31302e300000000008000b0000020000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x20008004) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000003a000b0026747000ffdbdf2512"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x2, 0x0, 0x6, 0x20, r2, 0x7, '\x00', r5, r0, 0x0, 0x4, 0x3, 0xa}, 0x50) 1.249690689s ago: executing program 4 (id=12363): getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000002c0)='GPL\x00', 0x103040, &(0x7f00000003c0)={@_ha_fsid={[0x2bbf, 0x2]}, {0x5, 0x4, 0x1, 0x8}}, 0x100, &(0x7f0000000400), &(0x7f0000000440)=0xfffffffd}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r3, 0x800448d5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a000000000000000000000000000002000000004000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000fe0000850000001b000000b700000000000000850000002a00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x10, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x35}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000000f1ff1200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000100), &(0x7f0000000140)=r5}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r9, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r10 = socket$kcm(0x2, 0x922000000001, 0x106) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x25, &(0x7f00000002c0)=r11, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x51, &(0x7f0000000100)=""/81, 0x41000, 0x20, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000000240)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x4, 0x401, 0x4}, 0x10, 0x1e6f4, r2, 0xa, &(0x7f0000000500)=[r4, r7, 0x1, r8, r11], &(0x7f0000000540)=[{0x3, 0x3, 0x6, 0x1}, {0x5, 0x5, 0x9, 0x2}, {0x1, 0x4, 0x0, 0xc}, {0x1, 0x3, 0x15, 0xa}, {0x5, 0x2, 0x2, 0x6}, {0x1, 0x4, 0xd, 0xa}, {0x4, 0x3, 0x3, 0x1}, {0x4, 0x5, 0xc, 0x5}, {0x2, 0x4, 0x5, 0x9}, {0x0, 0x2, 0x7, 0x5}], 0x10, 0x6}, 0x94) 1.055383487s ago: executing program 0 (id=12364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$isdn(0x22, 0x2, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x40001) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.054022077s ago: executing program 1 (id=12365): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7}, 0x8) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f0000000180)=@generic={0x29, "06be87b9ed2e8eb8e8dfb5288b5df3ed9749209128c823ed4919171364e4bdf8ce04134290d2490a81988bd3376de49a68d4383af1d93460642affc6005221e5526999c5ccc0bd4015886f59a87775c3f43f32f99253ca2a6d86efa53df547377b8430711a4f94c439526ad79acfca659c6495eff493a478e81f954ffc2e"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="96481dd5c4258230f3cddd0635515b36b3daa789fcdfbf5f5ac5f229e0623db5409bad776bc35225ec4b85469f3c0508785540632fcccba97922d1e700f48cd1113a14ca2fd3d232630f8c2511602c774c51a9bb36c70a97f4960906e026ada7e8e424c7671d8ec51510c861091d0ca512b7550fa662f88413583f49c4dd67e881", 0x81}, {&(0x7f00000002c0)="915697b5d40a565991b05fbd3159db693ff12b94294603e6fd2bf88d1bc9488fc68015c3f115e6e732330b6c4542cefe7f253580fe4b33026cfdf1ec91fb45806658619fb05ba8d44ffe096178ccf9ccb35bbf771df048", 0x57}, {&(0x7f0000000340)="88c692f1ccb402079cdd6efb606574a3153e82f3975c4364474dc909f1c5d65614c2d998c64021c26a6472ca2e3e3dd9a70c034ff5b7d0a8fbd442340ecfcb8781c52ccd3fd87685a2e4990c94f7ed691744e03d6e092d72d81bc80e5021839d12947602e5e8e3490a8814772bd534d85bf662a89ebdeff5bc6aab9146901bca3eda8fc61f008df3f60703013ba737368f434f", 0x93}, {&(0x7f0000000400)="41d60466135ce06ba1808597447a1cdbdc8ed05e1bcbbec52a8779af31ac9a13f1313445e4da6016431e3a615d4085b734466ab2395e8772eb15fb55718473e0ec51da63c457e281", 0x48}], 0x4, &(0x7f0000000480)=[{0xd0, 0x10d, 0x7284, "bc2434f7e68e1898664ead41fc716bda0d86c24ea65bb2b59310e8037be3351b93b319ee5b14bafd1c1eb04153b8583479b658cf543ca1dedbef1b8437ee8c2eaa8e4fb4b3cc26a54cc13164c5ec1491a6736cd8c30c35cd5817547cbaaad2c30bba7a5880986a46fd7447218e54cc737199895e30d1334280ddb0b697d9b6bde733028809a65dd102df598543eba4b2605af23f7f7d63e37126af3789977ce17600f1b437501be04d5351ccf62b1b0975ebcfdefd7fbf0c94"}, {0x110, 0x110, 0x2, "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"}], 0x1e0}, 0x400485c) 1.026198952s ago: executing program 4 (id=12366): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e000000100000000000000000000000000000000000000000000000000000000000401464e2400020000000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x40) 1.012258214s ago: executing program 3 (id=12367): mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x408, 0x210, 0x0, 0x100, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4, 0x4, {0x7}}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xffffff00, 0xd, 0x1, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0xfff9, 0x7, 0x1, 0x6, 0x40, 0x5, 'caif0\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x28}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @mac=@local, @multicast1, @private=0xa010102, 0x2, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 0x3, 0x5, {@mac, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0x1fe, 0xff, 0xff, 0xff, 0xff]}}, 0x9500, 0x8, 0x1, 0xe, 0xd40, 0x8, 'lo\x00', 'macvlan1\x00', {0xff}, {}, 0x0, 0x182}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="a3a25a207b7c", @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @local, @remote, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000002740)) 847.395021ms ago: executing program 3 (id=12368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)='\x00', 0x1}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 846.998565ms ago: executing program 4 (id=12369): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc0", 0x4c}, {&(0x7f0000001400)="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", 0xf0f}], 0x2}, 0x9cdc2384056f0939) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x160, 0xb, 0x6, 0x101, 0x0, 0x0, {0x8, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="ba2c0f1b5a1a"}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffff391}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x75}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8001}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_bond\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xf1}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6gretap0\x00'}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, '\\%*}\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x16f}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'geneve0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x1}, 0x20008080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x88100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe0ef}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000000c0)=0x2c) 807.74554ms ago: executing program 0 (id=12370): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x4db2eb081029d280) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x14}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000200)="f058050000007f8f", 0x8}, {&(0x7f0000000240)="3e13722fc5ce37c54fbc6fe418f425919ff00e10acc5d2fdba68d595d9827c946436d07b78b9a33301ef05133b2faa67a51ca275bd38e09a2b5940833ffd25bd8d0779ca328532f254a3778eedd0c714365d94841372e6c1786a78b27ccb8bd0cc3f3a4ea06721851d258d09a26952e986ecfd1f6f0fdfa03419d3cfc5fa2739abd5f72a9c0516a28d", 0x89}, {&(0x7f0000000400)="41a0a7c2cefe96c528b127d30481f95233f906c9815855cb79e9c5d0544224db50fefbaad23f538dd9480e45c95e77d279fb9c33df2d40068fff767bcbefaa4834f3fa9f1b720c050395067b000852046a519a5650b6cac9215110a482cc86d478d186b9dbc60ed48da3c6ea06f6e159f7db31318694f82274b678a9f364163870eb780820f0288f0579e975fcbc95f02fe5bd46177fac195d", 0x99}], 0x4}, 0x4048001) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @private0, 0x4, 0x400, 0x4, 0xc00, 0xff, 0x800004, r4}) 656.252377ms ago: executing program 1 (id=12371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 488.08712ms ago: executing program 4 (id=12372): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x101, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x10, 0xfff3}, {0x3, 0x6}, {0x5, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000810) 486.494795ms ago: executing program 5 (id=12373): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfdef) r2 = socket(0xf, 0x3, 0x9) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x15, 0x0, 0x5c) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r2, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) 432.654688ms ago: executing program 1 (id=12374): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e22, 0x3, 'rr\x00', 0x28, 0x5, 0x72}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x6, @loopback, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x20000000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0xe, 0xd064db0e491fa98f}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x4}}]}, 0x2c}}, 0x4044080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="8100fd9d3741"}, 0x14) sendto$inet6(r6, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000001"], 0x114}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private=0xa010102, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) 346.407284ms ago: executing program 3 (id=12375): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x6}, 0x2}}, 0xb8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x1, 0x0, 0x0, "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", 0x1, "2353a2ad8f792337b3610a014feea22617c1ecea"}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e292ac39b9d3382f"}, 0xb}}]}, 0x154}}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x6, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x80, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) 295.738539ms ago: executing program 0 (id=12376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xa, 0x10}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfaba}, @alu={0x7, 0x0, 0x0, 0xa, 0x1, 0x2, 0x10}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0x8, 0x5, 0x1, 0x4, 0x4}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x7, 0x4, 0x5, 0x18}]}, &(0x7f0000000c40)='syzkaller\x00', 0x3ff, 0xcb, &(0x7f0000000c80)=""/203, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000dc0)={0x5, 0xf, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c, 0xfffffffffffffff0}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x68, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800df2500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100697036746e6c00001000028004001300050009000400000008000400ff0f0000"], 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1a, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe99}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x4, 0x1, 0x5, 0x7, 0x0, 0x50, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}, @jmp={0x5, 0x1, 0x9, 0xb, 0x9, 0xffffffffffffffc0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x59, &(0x7f0000000480)=""/89, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0x10, 0x6, 0xdb47}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x80000001, 0x2, 0xf, 0x5}, {0x2, 0x1, 0xd, 0xc}, {0x0, 0x2, 0x2, 0x8}, {0x0, 0x5, 0x8, 0xc}], 0x10, 0xffff}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@getnetconf={0x14, 0x52, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r5, 0x0, 0xf6, 0xa6, &(0x7f0000000880)="3f98674d4d937a79345f17dcc8ab79dfbb38abcfbd0b43de5e051e02a697285738564060ffc324a7854644337acba3e055292d829a72640a83508b93fd1e558120740f60c8ddbba03f5b39607cb7270470b8d77e40bc757960ee511154d3b2268e8720ca9f7854a7aaecf9471a52ce2a4feb1cc87ef87ba221985e6c30bdf971d16edbd8ce84b7f40e7f8b90827a5018f98024ac3232442b6fbf9da9eafb80a7d98524e8aae5ebce3ee6e18b8ba23390c2280bf9e409cc7122572d8c440cf69475b880a9615de71382971e0df8af1ff3636af5a9006fd546873ce481440249299db3188970fcaf405a084e695e28878a4ce81fb8d45e", &(0x7f0000000980)=""/166, 0x2, 0x0, 0x7f, 0x8f, &(0x7f0000000580)="2d932f236d2149d30da0efe05a01caf19fb250bb40f522810a75e94c9d7d5c803b4beeb4ee3ca011ed4d8bea95f3370b5427e25710e8abf84284c36a5a9d9bd9f9036edf4abfda5f9a25bd134ec29b5a9e5888d043d31264641989645b4ab1fd684c96539b4adcbb5a2be1bf5bab019896919ec70a7372cfa49fd1e3c8c4e5", &(0x7f0000000a40)="c9eb6e35ae5c52efa2e4aeb6253ee3d8f5a813fa316d8c5a2f954858cfd4f4ba7ad67667ab48bdb69d937921d2717a260a7348fbf3dfdfbf39409993cc7dccdbe013a50ae24d1fdf523b4c47d06fd5ea43baa5977841375fefa3377eb7532c2c7eab4d8faf2630515fbcb8be287932bfac131568121c25c13c9e0aae7fc90b6fdf56303e9b55d8f0c17f771cb5b8d5", 0x7, 0x0, 0x12}, 0x50) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000080)={0x6, 0x28, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000340)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x6, 0xffffffffffffffff}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0x18, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200890000003c0001800c00010062697477697365002c0002800800034000000004080001400000001408000240000000671700000000000080080001006eee7e000900010073797a30"], 0x110}}, 0x0) 295.069364ms ago: executing program 5 (id=12377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 223.950482ms ago: executing program 4 (id=12378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) (rerun: 64) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49.049657ms ago: executing program 0 (id=12379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000000ac14140800000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000002000000000000000000000000000000060000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100020000000000"], 0xb8}}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 48.236266ms ago: executing program 3 (id=12380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3], [0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x1a, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 5 (id=12381): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x53, &(0x7f0000000000)=0x2, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r8, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="2703", 0x2}], 0x1}, 0x4041) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): rse: 14 callbacks suppressed [ 1213.902373][T13488] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10825'. [ 1213.945754][T13488] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10825'. [ 1213.969744][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10825'. [ 1214.057485][T13495] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10826'. [ 1214.548930][T13527] netlink: 'syz.4.10833': attribute type 1 has an invalid length. [ 1214.602822][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1214.902154][T13545] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 1215.183557][T13510] lec:lec_atm_close: lec0: Shut down! [ 1215.263603][T13542] nftables ruleset with unbound chain [ 1215.285985][T13559] netlink: 'syz.4.10842': attribute type 2 has an invalid length. [ 1215.423893][T13565] syzkaller0: entered promiscuous mode [ 1215.429468][T13565] syzkaller0: entered allmulticast mode [ 1215.642788][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1215.694607][T13574] netlink: 'syz.5.10847': attribute type 1 has an invalid length. [ 1215.708897][T13575] netlink: 'syz.1.10846': attribute type 10 has an invalid length. [ 1215.717048][T13574] netlink: 'syz.5.10847': attribute type 1 has an invalid length. [ 1215.735007][T13575] team0: Device vxcan1 is of different type [ 1216.341996][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10861'. [ 1216.421873][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10860'. [ 1216.682764][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1216.701389][T13635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10863'. [ 1216.898875][T13624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.906630][T13624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.323732][T13624] bridge_slave_0: left allmulticast mode [ 1217.329467][T13624] bridge_slave_0: left promiscuous mode [ 1217.345912][T13624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.398460][T13624] bridge_slave_1: left allmulticast mode [ 1217.404720][T13624] bridge_slave_1: left promiscuous mode [ 1217.410757][T13624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.465729][T13624] : (slave bond_slave_0): Releasing backup interface [ 1217.497336][T13624] : (slave bond_slave_1): Releasing backup interface [ 1217.563612][T13624] team0: Port device team_slave_0 removed [ 1217.593813][T13624] team0: Port device team_slave_1 removed [ 1217.722771][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1218.193670][T13624] veth3: left allmulticast mode [ 1218.198813][T13624] veth3: left promiscuous mode [ 1218.204979][T13624] bridge2: port 1(veth3) entered disabled state [ 1218.218154][T13624] veth5: left allmulticast mode [ 1218.223727][T13624] veth5: left promiscuous mode [ 1218.228977][T13624] bridge2: port 2(veth5) entered disabled state [ 1218.249172][T13624] ip6gretap0: left allmulticast mode [ 1218.316783][T13628] bridge3: port 1(veth5) entered blocking state [ 1218.326020][T13628] bridge3: port 1(veth5) entered disabled state [ 1218.335493][T13628] veth5: entered allmulticast mode [ 1218.343890][T13628] veth5: entered promiscuous mode [ 1218.414412][T13632] bridge3: port 2(veth7) entered blocking state [ 1218.420861][T13632] bridge3: port 2(veth7) entered disabled state [ 1218.433321][T13632] veth7: entered allmulticast mode [ 1218.444147][T13632] veth7: entered promiscuous mode [ 1218.490047][T10356] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.517907][T10356] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.552835][T10356] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.561877][T10356] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.618284][T10356] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.637220][T10356] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.657618][T10356] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.676066][T10356] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.762871][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1218.949312][T13680] netlink: 'syz.4.10871': attribute type 1 has an invalid length. [ 1218.975207][T13680] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1219.372158][T13700] bond6: invalid ARP target 0.0.0.0 specified for addition [ 1219.408636][T13700] bond6: option arp_ip_target: invalid value (0) [ 1219.431510][T13700] bond6 (unregistering): Released all slaves [ 1219.489677][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10875'. [ 1219.634741][T13705] bond11: (slave 26=a): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1219.701818][T13705] bond11: (slave 26=a): Enslaving as an active interface with an up link [ 1219.719304][T13705] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1219.758137][T13705] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1219.789696][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10881'. [ 1219.802866][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1219.833641][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10881'. [ 1219.944676][T13726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1219.995523][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10885'. [ 1220.030777][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10885'. [ 1220.088416][T13732] netlink: zone id is out of range [ 1220.100589][T13732] netlink: zone id is out of range [ 1220.109097][T13732] netlink: zone id is out of range [ 1220.124032][T13732] netlink: zone id is out of range [ 1220.138293][T13732] netlink: zone id is out of range [ 1220.172441][T13744] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.10888'. [ 1220.202754][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1220.211061][ C1] lec:lec_tx_timeout: lec0 [ 1220.473415][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10894'. [ 1220.518915][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10896'. [ 1220.651710][T13774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10900'. [ 1220.663271][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10900'. [ 1222.387730][T13881] IPv6: sit1: Disabled Multicast RS [ 1222.571485][T13900] netlink: 'syz.5.10938': attribute type 1 has an invalid length. [ 1222.580316][T13900] netlink: 'syz.5.10938': attribute type 4 has an invalid length. [ 1222.922841][ C0] net_ratelimit: 141 callbacks suppressed [ 1222.922862][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1223.191470][T13937] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1223.205683][T13937] CPU: 0 UID: 0 PID: 13937 Comm: syz.4.10950 Not tainted syzkaller #0 PREEMPT(full) [ 1223.205712][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1223.205727][T13937] Call Trace: [ 1223.205736][T13937] [ 1223.205746][T13937] dump_stack_lvl+0xe8/0x150 [ 1223.205784][T13937] sysfs_warn_dup+0x8e/0xa0 [ 1223.205817][T13937] sysfs_do_create_link_sd+0xc0/0x110 [ 1223.205853][T13937] device_add_class_symlinks+0x1cf/0x240 [ 1223.205888][T13937] device_add+0x475/0xb70 [ 1223.205922][T13937] wiphy_register+0x1d73/0x2d50 [ 1223.205977][T13937] ? __pfx_wiphy_register+0x10/0x10 [ 1223.206011][T13937] ? __pfx_netdev_run_todo+0x10/0x10 [ 1223.206042][T13937] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1223.206081][T13937] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1223.206113][T13937] ieee80211_register_hw+0x3562/0x4200 [ 1223.206158][T13937] ? ieee80211_register_hw+0x1471/0x4200 [ 1223.206199][T13937] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1223.206258][T13937] ? __hrtimer_setup+0x181/0x200 [ 1223.206290][T13937] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1223.206328][T13937] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1223.206392][T13937] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1223.206419][T13937] ? kstrndup+0xbf/0x160 [ 1223.206461][T13937] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1223.206518][T13937] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1223.206559][T13937] ? rcu_is_watching+0x15/0xb0 [ 1223.206589][T13937] ? trace_kmalloc+0x2a/0x110 [ 1223.206615][T13937] ? __nla_parse+0x40/0x60 [ 1223.206638][T13937] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1223.206671][T13937] genl_family_rcv_msg_doit+0x22a/0x330 [ 1223.206701][T13937] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1223.206736][T13937] ? bpf_lsm_capable+0x9/0x20 [ 1223.206762][T13937] ? security_capable+0x7e/0x2c0 [ 1223.206794][T13937] genl_rcv_msg+0x61c/0x7a0 [ 1223.206823][T13937] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1223.206845][T13937] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1223.206869][T13937] ? __lock_acquire+0x6b5/0x2cf0 [ 1223.206904][T13937] netlink_rcv_skb+0x232/0x4b0 [ 1223.206934][T13937] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1223.206958][T13937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1223.207004][T13937] ? down_read+0x272/0x2e0 [ 1223.207027][T13937] ? genl_rcv+0xd/0x40 [ 1223.207049][T13937] genl_rcv+0x28/0x40 [ 1223.207069][T13937] netlink_unicast+0x80f/0x9b0 [ 1223.207103][T13937] ? __pfx_netlink_unicast+0x10/0x10 [ 1223.207131][T13937] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1223.207157][T13937] ? netlink_sendmsg+0x650/0xb40 [ 1223.207173][T13937] ? skb_put+0x11b/0x210 [ 1223.207196][T13937] netlink_sendmsg+0x813/0xb40 [ 1223.207223][T13937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1223.207244][T13937] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1223.207279][T13937] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1223.207303][T13937] ____sys_sendmsg+0x972/0x9f0 [ 1223.207324][T13937] ? futex_unqueue+0x211/0x240 [ 1223.207353][T13937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1223.207388][T13937] ? import_iovec+0x73/0xa0 [ 1223.207412][T13937] ___sys_sendmsg+0x2a5/0x360 [ 1223.207440][T13937] ? __pfx____sys_sendmsg+0x10/0x10 [ 1223.207468][T13937] ? futex_wait+0x29a/0x380 [ 1223.207522][T13937] ? __fget_files+0x2a/0x420 [ 1223.207549][T13937] ? __fget_files+0x3a0/0x420 [ 1223.207586][T13937] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1223.207611][T13937] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1223.207642][T13937] ? rcu_is_watching+0x15/0xb0 [ 1223.207679][T13937] do_syscall_64+0x14d/0xf80 [ 1223.207701][T13937] ? trace_irq_disable+0x3b/0x150 [ 1223.207717][T13937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.207736][T13937] ? clear_bhb_loop+0x40/0x90 [ 1223.207759][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.207777][T13937] RIP: 0033:0x7fe41b99c819 [ 1223.207795][T13937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.207811][T13937] RSP: 002b:00007fe41c856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1223.207831][T13937] RAX: ffffffffffffffda RBX: 00007fe41bc15fa0 RCX: 00007fe41b99c819 [ 1223.207845][T13937] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 1223.207857][T13937] RBP: 00007fe41ba32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1223.207869][T13937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1223.207880][T13937] R13: 00007fe41bc16038 R14: 00007fe41bc15fa0 R15: 00007fff1eb41c38 [ 1223.207910][T13937] [ 1223.877078][T13951] lo speed is unknown, defaulting to 1000 [ 1223.962897][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1224.332001][T13969] IPv6: sit1: Disabled Multicast RS [ 1224.359231][T13969] sit1: entered allmulticast mode [ 1224.594555][T13994] __nla_validate_parse: 15 callbacks suppressed [ 1224.594581][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10965'. [ 1224.657664][T13994] team1: entered promiscuous mode [ 1224.666870][T13994] team1: entered allmulticast mode [ 1224.752352][T32185] lec:lec_start_xmit: lec0:No lecd attached [ 1224.805569][T14006] vlan2: left allmulticast mode [ 1224.811371][T14006] bond1: left allmulticast mode [ 1224.830232][T14006] gretap1: left allmulticast mode [ 1224.850412][T14006] bridge2: left allmulticast mode [ 1224.882418][T14006] vlan3: left allmulticast mode [ 1224.889033][T14012] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10968'. [ 1224.900328][T14006] veth0_to_bond: left allmulticast mode [ 1224.965432][T14012] bond12 (unregistering): Released all slaves [ 1225.002995][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1225.383087][T14034] A link change request failed with some changes committed already. Interface 26=a may have been left with an inconsistent configuration, please check. [ 1225.453111][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10977'. [ 1225.473739][T14032] tcpmss_tg6_check: 23 callbacks suppressed [ 1225.473761][T14032] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1225.555032][T14042] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1225.562356][T14042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1225.624924][T14044] xt_TCPMSS: Only works on TCP SYN packets [ 1225.652528][T14042] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10978'. [ 1225.684498][T14046] syzkaller0: entered promiscuous mode [ 1225.722385][T14046] syzkaller0: entered allmulticast mode [ 1225.756609][T14046] ip6t_srh: unknown srh match flags 5F28 [ 1225.871329][T14053] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10981'. [ 1226.054273][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1226.213517][T14074] netlink: 'syz.3.10989': attribute type 1 has an invalid length. [ 1226.262328][T14074] netlink: 'syz.3.10989': attribute type 1 has an invalid length. [ 1226.401671][T14087] netlink: 'syz.4.10990': attribute type 1 has an invalid length. [ 1226.517492][T14087] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1226.536984][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10992'. [ 1226.551138][T14095] bridge: RTM_NEWNEIGH with invalid ether address [ 1226.567545][T14091] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1226.581266][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10992'. [ 1226.593465][T14095] bridge: RTM_NEWNEIGH with invalid ether address [ 1226.821294][T14103] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10993'. [ 1226.884492][T14104] syzkaller0: entered promiscuous mode [ 1226.890039][T14104] syzkaller0: entered allmulticast mode [ 1227.007033][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10997'. [ 1227.082905][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1227.207526][T14120] lo speed is unknown, defaulting to 1000 [ 1227.401450][T14125] netlink: 'syz.5.11000': attribute type 1 has an invalid length. [ 1227.493192][T14125] bond4: entered promiscuous mode [ 1227.498327][T14125] bond4: entered allmulticast mode [ 1227.505993][T14125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1227.530391][T14138] netlink: 228 bytes leftover after parsing attributes in process `syz.5.11000'. [ 1227.570565][T14133] macvlan2: entered promiscuous mode [ 1227.576889][T14133] macvlan2: entered allmulticast mode [ 1227.585058][T14133] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1227.690423][T14129] tipc: Enabled bearer , priority 0 [ 1227.782385][T14147] syzkaller0: entered promiscuous mode [ 1227.789851][T14147] syzkaller0: entered allmulticast mode [ 1227.798594][T14147] tipc: Resetting bearer [ 1227.901668][ T1991] tipc: Resetting bearer [ 1227.915895][T14127] tipc: Resetting bearer [ 1228.122815][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1229.162901][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1230.202700][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5450 ms [ 1230.203310][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1230.211062][ C1] lec:lec_tx_timeout: lec0 [ 1230.528952][T14127] tipc: Disabling bearer [ 1230.558204][T14162] tunl0: entered promiscuous mode [ 1230.573104][T14162] netlink: 'syz.1.11007': attribute type 3 has an invalid length. [ 1230.587664][T14162] __nla_validate_parse: 3 callbacks suppressed [ 1230.587685][T14162] netlink: 9 bytes leftover after parsing attributes in process `syz.1.11007'. [ 1230.652118][T14169] netlink: 'syz.4.11008': attribute type 1 has an invalid length. [ 1230.722391][T14169] bond7: entered promiscuous mode [ 1230.746530][T14169] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1230.790940][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11008'. [ 1230.824810][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11008'. [ 1231.054737][T14191] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11016'. [ 1231.074175][T14193] netlink: 'syz.5.11017': attribute type 1 has an invalid length. [ 1231.097698][T14193] netlink: 'syz.5.11017': attribute type 4 has an invalid length. [ 1231.120415][T14193] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.11017'. [ 1231.242858][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1231.430845][T14209] netlink: 'syz.4.11023': attribute type 4 has an invalid length. [ 1231.630508][T14224] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11026'. [ 1231.674243][T14224] openvswitch: netlink: IP tunnel attribute has 205 unknown bytes. [ 1231.726104][T14232] netlink: 'syz.1.11030': attribute type 1 has an invalid length. [ 1231.806698][T14232] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1232.020282][T14251] tc_dump_action: action bad kind [ 1232.153176][T14254] syzkaller0: entered promiscuous mode [ 1232.158812][T14254] syzkaller0: entered allmulticast mode [ 1232.282858][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1232.824073][T14275] netlink: 'syz.0.11044': attribute type 11 has an invalid length. [ 1233.060529][T14277] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11045'. [ 1233.332472][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1233.711603][T14285] x_tables: duplicate underflow at hook 3 [ 1234.362924][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1235.101362][T14288] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11049'. [ 1235.196522][T14297] syzkaller0: entered promiscuous mode [ 1235.202069][T14297] syzkaller0: entered allmulticast mode [ 1235.240856][T14305] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11053'. [ 1235.403037][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1236.442905][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1237.482968][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1238.238486][T14344] syzkaller0: entered promiscuous mode [ 1238.255603][T14344] syzkaller0: entered allmulticast mode [ 1238.522971][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1238.732021][T14370] tipc: Enabled bearer , priority 0 [ 1238.871088][T14375] syzkaller0: entered promiscuous mode [ 1238.876947][T14375] syzkaller0: entered allmulticast mode [ 1238.884218][T14375] tipc: Resetting bearer [ 1238.928130][T14360] tipc: Resetting bearer [ 1239.045036][T14387] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.11071'. [ 1239.094779][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1239.562837][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1239.926279][T14422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11075'. [ 1240.602915][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1241.649964][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1241.831164][T14360] tipc: Disabling bearer [ 1242.621314][T14470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11089'. [ 1242.682824][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1242.843791][T14484] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.11093'. [ 1242.956078][T14488] netlink: 808 bytes leftover after parsing attributes in process `syz.4.11096'. [ 1242.996076][T14484] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11093'. [ 1243.040313][T14492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11095'. [ 1243.234989][T14512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11100'. [ 1243.286484][T14512] netlink: 13 bytes leftover after parsing attributes in process `syz.4.11100'. [ 1243.401014][T14512] veth11: entered promiscuous mode [ 1243.469922][T14526] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1243.510989][T14517] netlink: 'syz.3.11103': attribute type 10 has an invalid length. [ 1243.523681][T14517] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1243.540386][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11106'. [ 1243.642405][T14528] team_slave_1: Caught tx_queue_len zero misconfig [ 1243.707472][T14534] xt_hashlimit: size too large, truncated to 1048576 [ 1243.722885][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1244.205526][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1244.213636][ C1] lec:lec_tx_timeout: lec0 [ 1244.271917][T14574] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1244.331413][T14577] netlink: 'syz.4.11120': attribute type 21 has an invalid length. [ 1244.360167][T14577] IPv6: NLM_F_CREATE should be specified when creating new route [ 1244.383768][T14577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1244.391116][T14577] IPv6: NLM_F_CREATE should be set when creating new route [ 1244.398488][T14577] IPv6: NLM_F_CREATE should be set when creating new route [ 1244.405894][T14577] IPv6: NLM_F_CREATE should be set when creating new route [ 1244.686055][T14594] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.11125'. [ 1244.762857][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1244.842444][T14602] "syz.5.11129" (14602) uses obsolete ecb(arc4) skcipher [ 1244.892102][T14606] netlink: 'syz.4.11130': attribute type 9 has an invalid length. [ 1244.918426][T14611] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11131'. [ 1244.930355][T14605] netlink: 'syz.4.11130': attribute type 9 has an invalid length. [ 1244.950125][T14605] netlink: 'syz.4.11130': attribute type 11 has an invalid length. [ 1244.985785][T14606] netlink: 'syz.4.11130': attribute type 11 has an invalid length. [ 1245.033308][T14605] netlink: 'syz.4.11130': attribute type 12 has an invalid length. [ 1245.063062][T14606] netlink: 'syz.4.11130': attribute type 12 has an invalid length. [ 1245.071194][T14606] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.11130'. [ 1245.111365][T14605] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.11130'. [ 1245.143888][T14622] netlink: 'syz.0.11134': attribute type 7 has an invalid length. [ 1245.152482][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11130'. [ 1245.170481][T14622] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1245.183197][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11130'. [ 1245.249006][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11136'. [ 1245.652006][T14639] tipc: Enabling of bearer rejected, failed to enable media [ 1245.675880][T14660] netlink: 'syz.1.11144': attribute type 58 has an invalid length. [ 1245.692878][T14660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11144'. [ 1245.802880][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1246.027183][T14678] netlink: 165 bytes leftover after parsing attributes in process `syz.1.11149'. [ 1246.062891][T14680] sctp: [Deprecated]: syz.4.11150 (pid 14680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1246.062891][T14680] Use struct sctp_sack_info instead [ 1246.087607][T14678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11149'. [ 1246.242380][T14688] gretap0: entered promiscuous mode [ 1246.278139][T14688] gretap0: left promiscuous mode [ 1246.390912][T14700] No such timeout policy "syz0" [ 1246.449693][T14706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1246.493919][T14704] tipc: Started in network mode [ 1246.499330][T14704] tipc: Node identity ac141441, cluster identity 4711 [ 1246.538818][T14704] tipc: Enabled bearer , priority 10 [ 1246.551894][T14709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1246.578127][T14713] xt_l2tp: v2 doesn't support IP mode [ 1246.842832][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1246.938175][T14734] openvswitch: netlink: Message has 8 unknown bytes. [ 1246.953105][T14734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1247.344224][T14758] tipc: Failed to remove unknown binding: 66,1,1/10005162:1637867809/1637867811 [ 1247.429662][T14762] syzkaller1: entered promiscuous mode [ 1247.445070][T14762] syzkaller1: entered allmulticast mode [ 1247.639242][T18974] tipc: Node number set to 2886997057 [ 1247.882826][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1247.906053][T14784] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1248.467657][ T1977] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.516153][ T1977] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.535723][ T1977] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.563378][T19672] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.844429][T14845] bond8: option min_links: invalid value (18446744073709551614) [ 1248.852327][T14845] bond8: option min_links: allowed values 0 - 2147483647 [ 1248.868012][T14845] bond8 (unregistering): Released all slaves [ 1248.922837][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1248.975621][T14856] Cannot find add_set index 2 as target [ 1249.136640][T14855] ip6tnl0: Caught tx_queue_len zero misconfig [ 1249.742271][T14908] __nla_validate_parse: 19 callbacks suppressed [ 1249.742294][T14908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11216'. [ 1249.761071][T14912] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11217'. [ 1249.783893][T14908] syzkaller1: entered promiscuous mode [ 1249.799242][T14908] syzkaller1: entered allmulticast mode [ 1249.811149][T14914] validate_nla: 7 callbacks suppressed [ 1249.811173][T14914] netlink: 'syz.0.11219': attribute type 1 has an invalid length. [ 1249.944497][T14923] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11222'. [ 1249.957899][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11222'. [ 1249.967723][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1250.042428][T14929] Cannot find add_set index 2 as target [ 1250.126910][T14936] sctp: [Deprecated]: syz.4.11227 (pid 14936) Use of int in max_burst socket option deprecated. [ 1250.126910][T14936] Use struct sctp_assoc_value instead [ 1250.548352][T14958] netlink: 'syz.4.11232': attribute type 2 has an invalid length. [ 1250.592807][T14958] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11232'. [ 1251.002861][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1251.120633][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11239'. [ 1251.368960][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11242'. [ 1251.443466][T14991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1251.581447][T14991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1251.719540][T14991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1251.772517][T15013] 8021q: VLANs not supported on lo [ 1251.822044][T15017] tipc: Invalid UDP bearer configuration [ 1251.822098][T15017] tipc: Enabling of bearer rejected, failed to enable media [ 1251.909226][T14991] batman_adv: batadv0: Removing interface: netdevsim0 [ 1252.042899][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1252.121944][ T1977] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 1252.168464][ T1979] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 1252.235638][ T1977] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 1252.277430][T15033] team0: Caught tx_queue_len zero misconfig [ 1252.359261][ T1977] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 1252.493562][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11255'. [ 1252.523006][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11256'. [ 1252.692524][T15053] 8021q: VLANs not supported on lo [ 1252.736024][T15057] netlink: 'syz.4.11259': attribute type 21 has an invalid length. [ 1252.780011][T15061] netlink: 260 bytes leftover after parsing attributes in process `syz.0.11260'. [ 1253.006843][T15078] netlink: 'syz.0.11265': attribute type 28 has an invalid length. [ 1253.017871][T15080] x_tables: duplicate underflow at hook 1 [ 1253.044945][T15078] netlink: 'syz.0.11265': attribute type 3 has an invalid length. [ 1253.082839][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1253.330398][T15103] pim6reg527: entered allmulticast mode [ 1253.575875][T15118] netlink: 'syz.1.11277': attribute type 33 has an invalid length. [ 1253.655250][T15118] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1253.676682][T15118] bond5 (unregistering): Released all slaves [ 1254.122860][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1254.222367][T15159] netlink: 'syz.0.11288': attribute type 11 has an invalid length. [ 1254.494792][T15179] macvtap0: entered promiscuous mode [ 1254.611190][T15179] macvtap0 (unregistering): left promiscuous mode [ 1255.162939][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1256.202978][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1257.242956][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1258.283088][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1259.322920][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1260.362997][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1261.402910][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1262.442936][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1263.482939][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1264.522932][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1265.562989][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1266.603116][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1267.642927][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1268.682920][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1269.722913][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1270.762932][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1271.802906][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1272.842985][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1273.883001][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1274.923257][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1275.962913][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1277.002951][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1278.042958][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1279.082913][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1280.122971][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1281.162957][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1282.202959][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1283.243056][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1284.282916][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1285.322945][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1286.362954][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1287.402921][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1288.442980][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1289.278487][T32185] lec:lec_start_xmit: lec0:No lecd attached [ 1289.482934][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1290.522935][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1291.562993][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1292.602925][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1293.642983][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1294.292698][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1294.300756][ C1] lec:lec_tx_timeout: lec0 [ 1294.682914][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1295.722963][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1296.762954][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1297.802899][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1298.842923][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1299.882889][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1300.529821][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1300.923019][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1301.962996][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1303.002904][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1303.976053][T15212] __nla_validate_parse: 12 callbacks suppressed [ 1303.976078][T15212] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11301'. [ 1304.025767][T15212] syzkaller0: entered promiscuous mode [ 1304.042896][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1304.374529][T15232] veth1_to_bond: entered allmulticast mode [ 1304.409600][T15232] veth1_to_bond: left allmulticast mode [ 1304.438371][T15235] atomic_op ffff88805553f998 conn xmit_atomic 0000000000000000 [ 1304.467185][T15235] netlink: 'syz.0.11309': attribute type 1 has an invalid length. [ 1304.486688][T15235] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11309'. [ 1304.555300][T15238] netlink: 'syz.1.11310': attribute type 16 has an invalid length. [ 1304.565224][T15238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11310'. [ 1304.586921][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11310'. [ 1304.654253][T15238] bond5: option xmit_hash_policy: invalid value (64) [ 1304.676721][T15238] bond5 (unregistering): Released all slaves [ 1305.082877][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1305.695711][T15308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11333'. [ 1305.938945][T15338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11339'. [ 1305.949211][T15338] F: renamed from gre0 [ 1305.965282][T15332] netlink: 'syz.0.11338': attribute type 2 has an invalid length. [ 1305.978423][T15338] F: entered allmulticast mode [ 1305.987010][T15338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11339'. [ 1305.996756][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11339'. [ 1306.023920][T15338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11339'. [ 1306.122865][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1306.148893][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11338'. [ 1306.212616][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 1306.220769][ C1] lec:lec_tx_timeout: lec0 [ 1306.259731][T15353] vcan0: entered allmulticast mode [ 1306.438515][T15367] lo: entered promiscuous mode [ 1306.452333][T15367] tunl0: entered promiscuous mode [ 1306.474766][T15367] gre0: entered promiscuous mode [ 1306.498213][T15367] gretap0: entered promiscuous mode [ 1306.514802][T15367] erspan0: entered promiscuous mode [ 1306.524499][T15367] ip_vti0: entered promiscuous mode [ 1306.618834][T15379] bond5: entered promiscuous mode [ 1306.626700][T15379] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1306.655943][T15379] bridge4: entered promiscuous mode [ 1306.662322][T15379] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1306.689058][T15379] macvlan2: entered promiscuous mode [ 1306.694875][T15379] macvlan2: entered allmulticast mode [ 1306.700975][T15379] bond5: (slave macvlan2): Error -98 calling set_mac_address [ 1307.066960][T15409] syz_tun: entered allmulticast mode [ 1307.162843][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1307.238048][T15419] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1307.247668][T15418] netlink: zone id is out of range [ 1307.247692][T15418] netlink: zone id is out of range [ 1307.247771][T15418] netlink: zone id is out of range [ 1307.247784][T15418] netlink: zone id is out of range [ 1307.247795][T15418] netlink: zone id is out of range [ 1307.247806][T15418] netlink: zone id is out of range [ 1307.247817][T15418] netlink: zone id is out of range [ 1307.478190][T15429] netlink: 'syz.0.11364': attribute type 1 has an invalid length. [ 1307.487795][T15429] netlink: 'syz.0.11364': attribute type 1 has an invalid length. [ 1307.511850][T15429] netlink: 'syz.0.11364': attribute type 64 has an invalid length. [ 1307.641278][T15435] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 1307.687681][T15438] netlink: 'syz.0.11368': attribute type 5 has an invalid length. [ 1308.045713][T15466] Bluetooth: MGMT ver 1.23 [ 1308.105396][T15462] : entered promiscuous mode [ 1308.579619][T18974] IPVS: starting estimator thread 0... [ 1308.674056][T15506] IPVS: using max 29 ests per chain, 69600 per kthread [ 1309.036806][T15535] __nla_validate_parse: 7 callbacks suppressed [ 1309.036832][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11392'. [ 1309.063230][T15529] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11391'. [ 1309.085823][T15529] netlink: 43 bytes leftover after parsing attributes in process `syz.0.11391'. [ 1309.119052][T15529] netlink: 'syz.0.11391': attribute type 6 has an invalid length. [ 1309.155905][T15529] netlink: 'syz.0.11391': attribute type 5 has an invalid length. [ 1309.174558][T15529] netlink: 43 bytes leftover after parsing attributes in process `syz.0.11391'. [ 1309.384909][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11397'. [ 1309.505622][T15559] geneve2: entered promiscuous mode [ 1309.518606][T15559] geneve2: entered allmulticast mode [ 1309.528724][ T1991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.590743][ T1991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.612701][ T1991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.636041][ T1991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.667872][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11401'. [ 1309.924994][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11406'. [ 1310.208603][T15609] xt_policy: too many policy elements [ 1310.308479][T15606] netlink: 'syz.4.11413': attribute type 16 has an invalid length. [ 1310.356020][T15606] netlink: 'syz.4.11413': attribute type 17 has an invalid length. [ 1310.468328][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11417'. [ 1310.550013][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11419'. [ 1310.559579][T15625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11419'. [ 1310.739493][T15628] vlan3: entered allmulticast mode [ 1310.754699][T15628] bridge4: entered allmulticast mode [ 1310.821022][T15624] bridge4: port 1(erspan0) entered blocking state [ 1310.838287][T15624] bridge4: port 1(erspan0) entered disabled state [ 1310.863805][T15624] erspan0: entered allmulticast mode [ 1311.062327][T15645] xt_ecn: cannot match TCP bits for non-tcp packets [ 1311.323764][ C0] net_ratelimit: 59 callbacks suppressed [ 1311.323787][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1311.464946][T15676] netlink: 'syz.5.11430': attribute type 1 has an invalid length. [ 1311.671840][T15689] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 1311.735020][T15689] syzkaller0: entered promiscuous mode [ 1311.740563][T15689] syzkaller0: entered allmulticast mode [ 1311.771115][T15689] tipc: Enabled bearer , priority 0 [ 1311.878561][T13636] IPVS: starting estimator thread 0... [ 1311.889471][T15686] tipc: Resetting bearer [ 1311.975486][T15699] IPVS: using max 31 ests per chain, 74400 per kthread [ 1311.996092][T15686] tipc: Disabling bearer [ 1312.075753][T15697] tipc: Enabled bearer , priority 0 [ 1312.125333][T15696] openvswitch: netlink: Message has 8 unknown bytes. [ 1312.276679][T15713] netlink: 'syz.3.11438': attribute type 33 has an invalid length. [ 1312.362807][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1313.409155][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1314.442902][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1315.396927][T15761] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1315.482854][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1315.912288][T15780] lo speed is unknown, defaulting to 1000 [ 1316.451426][T15822] __nla_validate_parse: 3 callbacks suppressed [ 1316.451451][T15822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11459'. [ 1316.522862][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1316.550319][T15823] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11459'. [ 1316.803316][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11462'. [ 1316.840133][T15835] macvlan2: entered allmulticast mode [ 1316.864255][T15835] hsr0: entered allmulticast mode [ 1316.891034][T15835] hsr_slave_0: entered allmulticast mode [ 1316.907894][T15835] hsr_slave_1: entered allmulticast mode [ 1317.035660][T15861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11468'. [ 1317.074001][T15865] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.11466'. [ 1317.112064][T15865] netlink: ct family unspecified [ 1317.370021][T15887] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11472'. [ 1317.398564][T15888] lo: entered allmulticast mode [ 1317.420714][T15888] lo: left allmulticast mode [ 1317.456656][T15888] openvswitch: netlink: Message has 8 unknown bytes. [ 1317.562869][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1317.698524][T15846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1317.733877][T15900] tipc: Enabled bearer , priority 5 [ 1317.947398][T15914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11479'. [ 1318.121348][T15930] x_tables: duplicate underflow at hook 4 [ 1318.571774][T15954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11490'. [ 1318.602795][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1318.767998][T15967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11494'. [ 1318.935034][T15974] Can't find ip_set type h[sh:ip,port [ 1318.940601][T15975] Can't find ip_set type h[sh:ip,port [ 1319.642832][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1319.788389][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11512'. [ 1319.889602][T16023] vlan3: entered allmulticast mode [ 1319.894995][T16023] bridge5: entered allmulticast mode [ 1319.925923][T16030] syzkaller0: entered promiscuous mode [ 1319.931670][T16030] syzkaller0: entered allmulticast mode [ 1320.235976][T16048] nbd: device at index 64 is going down [ 1320.322995][T16059] netlink: 'syz.1.11524': attribute type 9 has an invalid length. [ 1320.415494][T16060] netlink: 'syz.4.11525': attribute type 1 has an invalid length. [ 1320.537115][T16060] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1320.559733][T16068] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1320.561602][T16054] udevd[16054]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1320.590066][T16054] udevd[16054]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1320.620302][T16073] bond8: (slave geneve3): making interface the new active one [ 1320.640642][T16073] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1320.689958][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1320.725839][T19672] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.764126][T19672] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.795003][T19672] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.834867][T19672] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.869827][T16089] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1320.950449][T16094] netlink: 'syz.1.11532': attribute type 29 has an invalid length. [ 1321.034440][T16081] syzkaller1: entered promiscuous mode [ 1321.042147][T16081] syzkaller1: entered allmulticast mode [ 1321.140524][T16100] ipvlan0: entered allmulticast mode [ 1321.153543][T16100] batadv_slave_1: entered allmulticast mode [ 1321.419633][T16127] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1321.438922][T16123] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1321.466522][T16121] __nla_validate_parse: 5 callbacks suppressed [ 1321.466546][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11539'. [ 1321.615141][T16140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1321.704856][T16146] netlink: 'syz.4.11545': attribute type 12 has an invalid length. [ 1321.722846][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1321.732408][T16146] netlink: 'syz.4.11545': attribute type 29 has an invalid length. [ 1321.751840][T16146] netlink: 148 bytes leftover after parsing attributes in process `syz.4.11545'. [ 1321.771069][T16146] netlink: 'syz.4.11545': attribute type 1 has an invalid length. [ 1321.957976][T16161] netlink: 'syz.4.11548': attribute type 4 has an invalid length. [ 1321.979791][T16161] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11548'. [ 1322.015653][T16163] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.11548'. [ 1322.199409][T16180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11554'. [ 1322.210101][T16178] syzkaller0: entered allmulticast mode [ 1322.261546][T16178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11555'. [ 1322.277495][T16182] netlink: 70 bytes leftover after parsing attributes in process `syz.4.11556'. [ 1322.284902][T16178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11555'. [ 1322.300005][T16180] tipc: Resetting bearer [ 1322.319234][T16180] tipc: Disabling bearer [ 1322.354581][T16177] syzkaller0: left allmulticast mode [ 1322.428665][T16188] netlink: 'syz.4.11558': attribute type 5 has an invalid length. [ 1322.573375][T16197] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 1322.739222][T16199] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1322.762854][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1322.772067][T16210] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11564'. [ 1322.805595][T16205] syzkaller0: entered promiscuous mode [ 1322.812048][T16205] syzkaller0: entered allmulticast mode [ 1322.895168][T16205] =a: Caught tx_queue_len zero misconfig [ 1323.157000][ T30] audit: type=1800 audit(1774892606.214:28): pid=16230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11571" name="blkio.bfq.idle_time" dev="tmpfs" ino=2134 res=0 errno=0 [ 1323.402425][T16240] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1323.563503][T16250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1323.742271][T16257] bond11: (slave 26=a): Releasing backup interface [ 1323.777266][T16257] bond11: (slave 26=a): last VLAN challenged slave left bond - VLAN blocking is removed [ 1323.801085][T16257] bridge_slave_0: left allmulticast mode [ 1323.807237][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1323.816914][T16257] bridge_slave_0: left promiscuous mode [ 1323.825631][T16257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.877985][T16257] bond0: (slave bridge_slave_1): Releasing backup interface [ 1323.902242][T16257] bond0: (slave bond_slave_0): Releasing backup interface [ 1323.928245][T16257] bond0: (slave bond_slave_1): Releasing backup interface [ 1323.947443][T16257] team0: Port device team_slave_0 removed [ 1323.968524][T16257] team0: Port device team_slave_1 removed [ 1323.979807][T16257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1323.987915][T16257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.000089][T16257] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1324.129683][T16274] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1324.177537][T16276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11584'. [ 1324.765220][T16323] netlink: 'syz.3.11594': attribute type 2 has an invalid length. [ 1324.842890][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1325.753158][T16372] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1325.865252][T16376] sit2: entered promiscuous mode [ 1325.871140][T16380] netlink: 'syz.3.11611': attribute type 11 has an invalid length. [ 1325.879556][T16376] sit2: entered allmulticast mode [ 1325.895160][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1326.191527][T16396] ip6gre0: Master is either lo or non-ether device [ 1326.450894][T16406] macsec1: entered promiscuous mode [ 1326.474523][T16408] __nla_validate_parse: 7 callbacks suppressed [ 1326.474549][T16408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11623'. [ 1326.528640][T16403] syzkaller0: entered promiscuous mode [ 1326.538552][T16403] syzkaller0: entered allmulticast mode [ 1326.560373][T16413] netlink: 'syz.0.11624': attribute type 11 has an invalid length. [ 1326.770946][T16418] tipc: Enabled bearer , priority 0 [ 1326.779411][T16417] +: renamed from syzkaller0 [ 1326.789100][T16417] tipc: Disabling bearer [ 1326.922868][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1327.078787][T16433] IPv6: sit3: Disabled Multicast RS [ 1327.118399][T16433] sit3: entered allmulticast mode [ 1327.677943][T16466] netlink: set zone limit has 4 unknown bytes [ 1327.693921][T16468] netlink: zone id is out of range [ 1327.693943][T16468] netlink: zone id is out of range [ 1327.693954][T16468] netlink: zone id is out of range [ 1327.693968][T16468] netlink: zone id is out of range [ 1327.693978][T16468] netlink: zone id is out of range [ 1327.693989][T16468] netlink: zone id is out of range [ 1327.693999][T16468] netlink: zone id is out of range [ 1327.694010][T16468] netlink: zone id is out of range [ 1327.829463][T16468] veth9: entered allmulticast mode [ 1327.848218][T16470] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11640'. [ 1328.067060][T16479] syzkaller0: entered promiscuous mode [ 1328.073455][T16479] syzkaller0: entered allmulticast mode [ 1328.449623][T16509] netlink: 300 bytes leftover after parsing attributes in process `syz.3.11651'. [ 1328.955886][T16542] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11658'. [ 1331.397911][T16557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11659'. [ 1331.428441][T16558] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1331.428537][T16556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11659'. [ 1331.601222][T16567] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11663'. [ 1331.650535][T16567] netlink: 35 bytes leftover after parsing attributes in process `syz.4.11663'. [ 1331.673142][T16567] netlink: 'syz.4.11663': attribute type 5 has an invalid length. [ 1331.709131][T16567] netlink: 'syz.4.11663': attribute type 6 has an invalid length. [ 1331.718603][T16574] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11665'. [ 1331.734195][T16567] netlink: 35 bytes leftover after parsing attributes in process `syz.4.11663'. [ 1332.029488][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11671'. [ 1332.109154][T16595] team2: entered promiscuous mode [ 1332.121576][T16595] team2: entered allmulticast mode [ 1332.127184][ C0] net_ratelimit: 192 callbacks suppressed [ 1332.127210][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1332.171527][T16601] delete_channel: no stack [ 1332.208714][T16601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11672'. [ 1332.226433][T16603] netlink: 'syz.1.11674': attribute type 33 has an invalid length. [ 1332.324916][T16610] netlink: 216 bytes leftover after parsing attributes in process `syz.0.11672'. [ 1332.338617][T16603] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1332.353042][T16610] netlink: 'syz.0.11672': attribute type 2 has an invalid length. [ 1332.361128][T16610] netlink: 'syz.0.11672': attribute type 1 has an invalid length. [ 1332.375583][T16603] bond6 (unregistering): Released all slaves [ 1332.420450][T16614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11675'. [ 1332.878954][T16638] ip6tnl3: entered allmulticast mode [ 1333.162869][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1333.183674][T16664] netlink: 'syz.5.11690': attribute type 1 has an invalid length. [ 1333.296162][T16664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1333.319253][T16664] vlan4: entered allmulticast mode [ 1333.325400][T16664] veth0_to_bond: entered allmulticast mode [ 1333.337349][T16664] bond5: (slave vlan4): making interface the new active one [ 1333.346813][T16664] bond5: (slave vlan4): Enslaving as an active interface with an up link [ 1333.420769][T16671] lo speed is unknown, defaulting to 1000 [ 1333.486330][T16676] IPVS: set_ctl: invalid protocol: 136 172.30.1.6:20001 [ 1333.774936][T16690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11695'. [ 1333.800465][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11695'. [ 1334.202862][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1334.211779][T16671] netlink: 'syz.4.11691': attribute type 4 has an invalid length. [ 1334.982181][T16734] tap0: tun_chr_ioctl cmd 1074025676 [ 1335.007411][T16734] tap0: owner set to 0 [ 1335.242857][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1335.866644][T16784] openvswitch: netlink: Key 32 has unexpected len 260 expected 2 [ 1336.133944][T16800] syz_tun: left allmulticast mode [ 1336.282802][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1336.297079][T16809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.533888][T16828] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1336.577285][T16831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1336.577285][T16830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1336.670471][T16834] __nla_validate_parse: 7 callbacks suppressed [ 1336.670494][T16834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11736'. [ 1336.687325][T16834] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11736'. [ 1336.791684][T16840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11738'. [ 1336.805689][T16840] hsr_slave_0: left promiscuous mode [ 1336.819389][T16840] hsr_slave_1: left promiscuous mode [ 1337.074362][T16855] netlink: 'syz.4.11743': attribute type 21 has an invalid length. [ 1337.082432][T16855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1337.089851][T16855] IPv6: NLM_F_CREATE should be set when creating new route [ 1337.097185][T16855] IPv6: NLM_F_CREATE should be set when creating new route [ 1337.104506][T16855] IPv6: NLM_F_CREATE should be set when creating new route [ 1337.322886][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1338.362931][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1339.403093][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1340.442889][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1341.484775][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1342.522972][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1343.562891][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1344.602822][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1345.642896][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1346.682873][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1347.722932][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1348.762890][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1349.803111][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1350.842917][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1351.882926][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1352.922875][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1353.808756][T32185] lec:lec_start_xmit: lec0:No lecd attached [ 1353.962907][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1355.002892][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1356.042934][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1357.082862][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1358.123002][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1359.162961][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 1359.162960][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1359.178131][ C1] lec:lec_tx_timeout: lec0 [ 1360.202957][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1361.242849][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1361.971539][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1362.282897][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1363.322949][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1364.362959][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1365.402909][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1366.442961][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1367.162943][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 1367.171003][ C1] lec:lec_tx_timeout: lec0 [ 1367.482929][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1368.522912][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1369.562897][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1370.602876][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1371.642890][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1372.682937][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1373.722900][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1374.762980][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1375.802851][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1376.842891][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1377.882935][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1378.922909][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1379.962949][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1381.002964][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1382.042935][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1383.082951][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1384.122892][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1385.162909][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1386.202980][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1387.242902][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1388.282889][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1389.322879][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1390.362849][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1391.402960][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1391.959869][T16904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11747'. [ 1392.078422][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11747'. [ 1392.393676][T16928] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20004 [ 1392.442767][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1392.509970][T16935] netlink: zone id is out of range [ 1392.516432][T16935] netlink: zone id is out of range [ 1392.522067][T16935] netlink: zone id is out of range [ 1392.531054][T16935] netlink: zone id is out of range [ 1392.536536][T16935] netlink: zone id is out of range [ 1392.541807][T16935] netlink: zone id is out of range [ 1392.608650][T16942] netlink: 300 bytes leftover after parsing attributes in process `syz.4.11758'. [ 1392.991203][T16965] netlink: 512 bytes leftover after parsing attributes in process `syz.0.11764'. [ 1393.026898][T16964] netlink: 512 bytes leftover after parsing attributes in process `syz.0.11764'. [ 1393.351745][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11769'. [ 1393.394712][T16984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.470686][T16984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.489789][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11772'. [ 1393.682184][T17007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11775'. [ 1393.844623][T17020] netlink: 'syz.3.11777': attribute type 1 has an invalid length. [ 1394.043256][T17032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11780'. [ 1394.063034][T17032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11780'. [ 1394.167635][T17036] netlink: 'syz.4.11781': attribute type 1 has an invalid length. [ 1394.522829][ C0] net_ratelimit: 189 callbacks suppressed [ 1394.522852][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1394.608630][T17057] syzkaller0: entered promiscuous mode [ 1394.614586][T17057] syzkaller0: entered allmulticast mode [ 1394.972135][T17071] lo speed is unknown, defaulting to 1000 [ 1395.148217][T17089] netlink: 'syz.0.11797': attribute type 11 has an invalid length. [ 1395.404991][T17099] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1395.416875][T17099] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1395.425821][T17099] gretap2: entered promiscuous mode [ 1395.431265][T17099] gretap2: entered allmulticast mode [ 1395.562837][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1395.633649][T17114] netlink: 'syz.1.11806': attribute type 4 has an invalid length. [ 1395.648967][T17114] netlink: 'syz.1.11806': attribute type 4 has an invalid length. [ 1395.745370][T17119] syzkaller0: entered promiscuous mode [ 1395.750966][T17119] syzkaller0: entered allmulticast mode [ 1395.788549][T17121] netlink: 'syz.1.11808': attribute type 29 has an invalid length. [ 1396.031766][T17131] netlink: 'syz.5.11813': attribute type 10 has an invalid length. [ 1396.047251][T17132] nbd: couldn't find a device at index 3 [ 1396.072402][T17131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.101014][T17131] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1396.110945][T17132] lo: entered allmulticast mode [ 1396.116600][T17132] lo: left allmulticast mode [ 1396.496481][T17155] netlink: 'syz.3.11821': attribute type 10 has an invalid length. [ 1396.504404][T17156] syzkaller0: entered promiscuous mode [ 1396.504456][T17156] syzkaller0: entered allmulticast mode [ 1396.578321][T17155] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1396.602829][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1396.625761][T17155] : (slave netdevsim0): Enslaving as an active interface with an up link [ 1396.776605][T17168] veth0: Caught tx_queue_len zero misconfig [ 1396.861013][T17177] pim6reg: entered allmulticast mode [ 1396.980718][T17183] netlink: 'syz.3.11828': attribute type 1 has an invalid length. [ 1397.219520][T17199] syzkaller1: entered promiscuous mode [ 1397.235728][T17199] syzkaller1: entered allmulticast mode [ 1397.256477][T17207] netlink: 'syz.0.11835': attribute type 1 has an invalid length. [ 1397.265843][T17207] __nla_validate_parse: 12 callbacks suppressed [ 1397.265862][T17207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11835'. [ 1397.296746][T17205] syzkaller0: entered promiscuous mode [ 1397.313435][T17205] syzkaller0: entered allmulticast mode [ 1397.442273][T17213] team0: Device gtp1 is up. Set it down before adding it as a team port [ 1397.555218][T17219] xt_cgroup: path and classid specified [ 1397.573893][T17215] bond7: entered promiscuous mode [ 1397.642811][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1398.016636][T17253] syzkaller0: entered promiscuous mode [ 1398.022192][T17253] syzkaller0: entered allmulticast mode [ 1398.195579][T17269] syzkaller1: entered promiscuous mode [ 1398.221623][T17269] syzkaller1: entered allmulticast mode [ 1398.527600][T17285] netlink: 'syz.5.11856': attribute type 11 has an invalid length. [ 1398.557121][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11856'. [ 1398.583999][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11856'. [ 1398.682775][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1398.855882][T17302] netlink: 164 bytes leftover after parsing attributes in process `syz.5.11862'. [ 1398.875713][T17302] netlink: 164 bytes leftover after parsing attributes in process `syz.5.11862'. [ 1398.895285][T17302] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11862'. [ 1399.008768][T17310] bond10: (slave ip6gretap1): making interface the new active one [ 1399.051894][T17310] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1399.130402][T17304] syzkaller1: entered promiscuous mode [ 1399.155084][T17304] syzkaller1: entered allmulticast mode [ 1399.193037][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11857'. [ 1399.221041][T17330] validate_nla: 1 callbacks suppressed [ 1399.221066][T17330] netlink: 'syz.1.11867': attribute type 61 has an invalid length. [ 1399.480531][T17338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11869'. [ 1399.508048][T17341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.511296][T17342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1399.668780][T17351] netlink: 144 bytes leftover after parsing attributes in process `syz.5.11872'. [ 1399.722913][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1399.920432][T17366] sit3: entered promiscuous mode [ 1399.935090][T17366] sit3: entered allmulticast mode [ 1400.085797][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11879'. [ 1400.358499][T17403] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1400.450530][T17404] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1400.481108][T17404] bond12 (unregistering): Released all slaves [ 1400.762774][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1401.159047][T17459] netlink: 'syz.4.11900': attribute type 2 has an invalid length. [ 1401.181429][T17459] 9: entered promiscuous mode [ 1401.294493][ T7175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1401.306673][ T7175] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1401.318932][ T7175] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1401.327593][ T7175] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1401.339417][ T7175] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1401.366351][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1401.377237][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1401.385476][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1401.393668][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1401.401531][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1401.586454][T17462] lo speed is unknown, defaulting to 1000 [ 1401.802815][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1401.938677][T19672] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.973068][T19672] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.215796][T19672] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1402.226154][T19672] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.481058][T19672] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1402.495593][T19672] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.506519][T17524] __nla_validate_parse: 6 callbacks suppressed [ 1402.506540][T17524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11915'. [ 1402.563024][T17462] chnl_net:caif_netlink_parms(): no params data found [ 1402.570415][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11915'. [ 1402.596053][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11915'. [ 1402.626769][T19672] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1402.646303][T19672] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.842787][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1402.975532][T17462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.994323][T17462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.001814][T17462] bridge_slave_0: entered allmulticast mode [ 1403.014932][T17462] bridge_slave_0: entered promiscuous mode [ 1403.046900][T17462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.054788][T17462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.063512][T17462] bridge_slave_1: entered allmulticast mode [ 1403.071752][T17462] bridge_slave_1: entered promiscuous mode [ 1403.158072][T17462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.176539][T17462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.316103][T17462] team0: Port device team_slave_0 added [ 1403.327287][T17462] team0: Port device team_slave_1 added [ 1403.483056][ T5145] Bluetooth: hci4: command tx timeout [ 1403.661130][T19672] bond8 (unregistering): (slave geneve2): Releasing active interface [ 1403.767098][T19672] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1403.775913][T19672] bridge1 (unregistering): left promiscuous mode [ 1403.848644][T19672] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1403.857153][T19672] bridge3 (unregistering): left promiscuous mode [ 1403.882838][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1404.078958][T19672] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1404.088259][T19672] bond0 (unregistering): Released all slaves [ 1404.099936][T19672] bond1 (unregistering): Released all slaves [ 1404.117772][T19672] bond2 (unregistering): Released all slaves [ 1404.136304][T19672] bond3 (unregistering): Released all slaves [ 1404.156520][T19672] bond4 (unregistering): Released all slaves [ 1404.172096][T19672] bond5 (unregistering): Released all slaves [ 1404.189864][T19672] bond6 (unregistering): Released all slaves [ 1404.215353][T19672] bond7 (unregistering): Released all slaves [ 1404.231047][T19672] bond8 (unregistering): Released all slaves [ 1404.253394][T19672] bond9 (unregistering): Released all slaves [ 1404.270544][T19672] bond10 (unregistering): (slave vcan1): Releasing backup interface [ 1404.278688][T19672] vcan1: left promiscuous mode [ 1404.291654][T19672] bond10 (unregistering): Released all slaves [ 1404.308091][T19672] bond11 (unregistering): Released all slaves [ 1404.350762][T17462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.378420][T17462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.424994][T17462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.453199][T17462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.460268][T17462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.535858][T17462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.561306][T17576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1404.580501][T19672] : left promiscuous mode [ 1404.626465][T17578] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11931'. [ 1404.697176][T19672] tipc: Disabling bearer [ 1404.710649][T19672] tipc: Left network mode [ 1404.751765][T17462] hsr_slave_0: entered promiscuous mode [ 1404.760035][T17462] hsr_slave_1: entered promiscuous mode [ 1404.770652][T17462] debugfs: 'hsr0' already exists in 'hsr' [ 1404.777757][T17462] Cannot create hsr debugfs directory [ 1404.922825][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1404.968974][T19672] IPVS: stopping master sync thread 16558 ... [ 1405.417370][T19672] hsr_slave_0: left promiscuous mode [ 1405.424145][T19672] hsr_slave_1: left promiscuous mode [ 1405.431690][T19672] veth1_macvtap: left promiscuous mode [ 1405.437434][T19672] veth0_macvtap: left promiscuous mode [ 1405.451281][T19672] veth1_vlan: left promiscuous mode [ 1405.458043][T19672] veth0_vlan: left promiscuous mode [ 1405.501030][T17587] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1405.565361][ T5145] Bluetooth: hci4: command tx timeout [ 1405.680429][T19672] team0 (unregistering): Port device hsr0 removed [ 1405.785862][T17540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1405.799207][T17570] netlink: 'syz.4.11928': attribute type 1 has an invalid length. [ 1405.807399][T17570] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.11928'. [ 1405.962806][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1406.068451][T19672] vcan0 (unregistering): left allmulticast mode [ 1406.142227][T17600] IPVS: Unknown mcast interface: macvtap0 [ 1406.256072][T17610] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1406.472217][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11941'. [ 1406.511923][T17462] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1406.582389][T17462] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1406.640624][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11943'. [ 1406.650961][T17462] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1406.673711][T17629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11943'. [ 1406.717702][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11943'. [ 1406.728163][T17462] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1406.751490][T17629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11943'. [ 1406.937142][T17647] netlink: 'syz.3.11946': attribute type 1 has an invalid length. [ 1406.954619][T19672] IPVS: stop unused estimator thread 0... [ 1407.002757][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1407.013325][T17647] mac80211_hwsim hwsim107 wlan0: entered promiscuous mode [ 1407.085181][T17651] tipc: Started in network mode [ 1407.090320][T17651] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1407.116793][T17651] tipc: Enabled bearer , priority 24 [ 1407.150094][T17462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.223860][T17462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.268153][T19672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.275451][T19672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.317798][ T1979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.325043][ T1979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.390314][T17660] lo speed is unknown, defaulting to 1000 [ 1407.461497][T17669] ipt_REJECT: ECHOREPLY no longer supported. [ 1407.642810][ T5145] Bluetooth: hci4: command tx timeout [ 1407.823504][T17686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1407.858691][T17689] __nla_validate_parse: 4 callbacks suppressed [ 1407.858712][T17689] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11956'. [ 1408.045453][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1408.189804][T17710] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11958'. [ 1408.237710][T13637] tipc: Node number set to 10005162 [ 1408.254376][T17462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.275739][T17709] netlink: 'syz.1.11959': attribute type 10 has an invalid length. [ 1408.285277][T17714] xt_hashlimit: size too large, truncated to 1048576 [ 1408.454030][T17723] netlink: 'syz.3.11962': attribute type 10 has an invalid length. [ 1408.484690][T17462] veth0_vlan: entered promiscuous mode [ 1408.505713][T17723] team0: Port device dummy0 added [ 1408.527538][T17462] veth1_vlan: entered promiscuous mode [ 1408.653413][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11964'. [ 1408.681707][T17462] veth0_macvtap: entered promiscuous mode [ 1408.755437][T17462] veth1_macvtap: entered promiscuous mode [ 1408.851994][T17462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1408.882016][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11967'. [ 1408.976088][T17462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.072857][T17759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11969'. [ 1409.082763][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1409.142164][T16328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.201755][T16328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.219111][T16328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.299969][T16328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.536525][T17776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11972'. [ 1409.706371][T16329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.723964][ T5145] Bluetooth: hci4: command tx timeout [ 1409.729754][T17776] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11972'. [ 1409.748780][T16329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.989035][T16328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.008476][T16328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.122814][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1410.319561][T17814] F: left allmulticast mode [ 1410.520082][T17820] netlink: 'syz.0.11981': attribute type 10 has an invalid length. [ 1410.555853][T17820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.578109][T17820] bridge_slave_1: left allmulticast mode [ 1410.611941][T17820] bridge_slave_1: left promiscuous mode [ 1410.652877][T17820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.748411][T17820] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1410.912253][ T7175] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1410.933899][ T7175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1410.944423][ T7175] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1410.954815][ T7175] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1410.964911][ T7175] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1411.104604][T17842] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 1411.162762][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1411.250581][T17836] lo speed is unknown, defaulting to 1000 [ 1411.549826][T17849] IPv6: sit1: Disabled Multicast RS [ 1411.568633][T17849] sit1: entered allmulticast mode [ 1411.864616][T17836] chnl_net:caif_netlink_parms(): no params data found [ 1412.047780][T17881] netlink: 384 bytes leftover after parsing attributes in process `syz.0.11999'. [ 1412.068792][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11999'. [ 1412.126942][T17885] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.12001'. [ 1412.202798][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1412.267676][T17836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.285546][T17836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.293498][T17836] bridge_slave_0: entered allmulticast mode [ 1412.301751][T17836] bridge_slave_0: entered promiscuous mode [ 1412.323647][T17836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.330871][T17836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.343266][T17836] bridge_slave_1: entered allmulticast mode [ 1412.351310][T17836] bridge_slave_1: entered promiscuous mode [ 1412.470213][T17836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.503590][T17836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.640897][T17836] team0: Port device team_slave_0 added [ 1412.662460][T17836] team0: Port device team_slave_1 added [ 1412.711270][T17911] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1412.803550][T17836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.822052][T17836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.885208][T17836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.922332][T17836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.950103][T17836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.980027][T17836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.995448][T17923] __nla_validate_parse: 1 callbacks suppressed [ 1412.995469][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12011'. [ 1413.013265][T17925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12012'. [ 1413.041994][T17928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12013'. [ 1413.087374][ T7175] Bluetooth: hci1: command tx timeout [ 1413.157673][T17931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12014'. [ 1413.242803][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1413.570548][T17931] bond11: entered promiscuous mode [ 1413.578172][T17931] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1413.688929][T17836] hsr_slave_0: entered promiscuous mode [ 1413.720091][T17836] hsr_slave_1: entered promiscuous mode [ 1414.282757][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1414.748060][T23116] IPVS: starting estimator thread 0... [ 1414.852801][T18003] IPVS: using max 27 ests per chain, 64800 per kthread [ 1414.878156][T18005] tipc: Enabling of bearer rejected, failed to enable media [ 1414.962996][T17836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1415.002130][T17836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1415.052369][T17836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1415.114423][T17836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1415.150965][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12035'. [ 1415.163742][ T7175] Bluetooth: hci1: command tx timeout [ 1415.322783][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1415.450674][T17836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1415.531198][T17836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.588483][T16328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.595753][T16328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1415.637791][ T1984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.645251][ T1984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1415.756944][T18033] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.12042'. [ 1416.089462][T18039] netlink: 'syz.3.12043': attribute type 1 has an invalid length. [ 1416.098157][T18039] netlink: 'syz.3.12043': attribute type 4 has an invalid length. [ 1416.118526][T18039] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.12043'. [ 1416.362836][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1416.507595][T17836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.631641][T17836] veth0_vlan: entered promiscuous mode [ 1416.639806][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12050'. [ 1416.672450][T17836] veth1_vlan: entered promiscuous mode [ 1416.752774][T18065] xt_ipcomp: unknown flags 1D [ 1416.801449][T17836] veth0_macvtap: entered promiscuous mode [ 1416.848987][T17836] veth1_macvtap: entered promiscuous mode [ 1416.894666][T17836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.952015][T17836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.985999][ T1977] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.007578][ T1977] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.029873][ T1977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.093638][ T1977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.243622][ T7175] Bluetooth: hci1: command tx timeout [ 1417.331642][T32185] lec:lec_start_xmit: lec0:No lecd attached [ 1417.351698][T16328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.373586][T16328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.402998][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1417.429430][T16328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.438372][T16328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.596494][T18094] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1417.984875][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12064'. [ 1418.442799][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1418.806031][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12073'. [ 1418.961553][T18157] bond12: option xmit_hash_policy: invalid value (64) [ 1419.010564][T18157] bond12 (unregistering): Released all slaves [ 1419.291994][T18186] pim6reg: entered allmulticast mode [ 1419.306522][T18186] pim6reg: left allmulticast mode [ 1419.323234][ T7175] Bluetooth: hci1: command tx timeout [ 1419.482799][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1419.653528][T18203] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.12085'. [ 1419.704339][T18203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12085'. [ 1419.797922][T18173] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1419.810838][T18173] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1419.942846][T18173] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1419.960351][T18173] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1420.144085][T18218] PKCS7: Unknown OID: [4] (bad) [ 1420.149024][T18218] PKCS7: Only support pkcs7_signedData type [ 1420.167829][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12091'. [ 1420.392199][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12093'. [ 1420.452270][T18231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12093'. [ 1420.522756][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1420.749043][T18249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12102'. [ 1421.016306][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12109'. [ 1421.164694][T18285] netlink: 240 bytes leftover after parsing attributes in process `syz.0.12113'. [ 1421.230223][T18285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12113'. [ 1421.546006][T18310] syzkaller1: entered promiscuous mode [ 1421.551551][T18310] syzkaller1: entered allmulticast mode [ 1421.562761][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1421.829594][T18323] IPVS: length: 171 != 8 [ 1421.938313][T18329] xt_l2tp: unknown flags: 10 [ 1422.246174][T18338] netlink: 'syz.5.12130': attribute type 13 has an invalid length. [ 1422.296615][T18338] macvtap0: entered allmulticast mode [ 1422.323443][T18338] macvtap0: refused to change device tx_queue_len [ 1422.342831][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1422.350972][ C1] lec:lec_tx_timeout: lec0 [ 1422.451770][T18349] block nbd7: Unsupported socket: should be TCP or UNIX. [ 1422.602785][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1423.098668][T18376] netlink: 'syz.1.12140': attribute type 11 has an invalid length. [ 1423.119700][T18376] netlink: 'syz.1.12140': attribute type 11 has an invalid length. [ 1423.140699][T18383] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20003 [ 1423.412386][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1423.458369][T18398] gre1: entered promiscuous mode [ 1423.552994][T18398] gre1: entered allmulticast mode [ 1423.642845][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1423.929921][T18423] __nla_validate_parse: 9 callbacks suppressed [ 1423.929944][T18423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12151'. [ 1424.517265][T18448] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1424.555525][T18452] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12162'. [ 1424.562733][T18448] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1424.592806][T18448] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1424.646372][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12161'. [ 1424.655650][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12161'. [ 1424.682912][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1424.877080][T18458] netlink: 'syz.3.12163': attribute type 1 has an invalid length. [ 1424.888832][T18460] netlink: 'syz.0.12164': attribute type 10 has an invalid length. [ 1424.906160][T18458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12163'. [ 1424.921824][T18460] bond0: (slave wlan1): Opening slave failed [ 1425.018263][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1425.032997][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1425.053082][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1425.061256][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1425.069837][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1425.110497][ T7175] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1425.120185][ T7175] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1425.127767][ T7175] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1425.137044][ T7175] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1425.145930][ T7175] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1425.225572][T18464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12165'. [ 1425.419053][T18467] lo speed is unknown, defaulting to 1000 [ 1425.659840][T18479] batman_adv: batadv0: Adding interface: dummy0 [ 1425.693726][T18479] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.722759][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1425.824960][T18479] batman_adv: batadv0: Interface activated: dummy0 [ 1425.875587][T18483] batadv0: mtu less than device minimum [ 1425.882788][T18483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.895262][T18483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.907125][T18483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.919152][T18483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.931107][T18483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.943087][T18483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.955018][T18483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.967058][T18483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1426.105205][ T7170] syz_tun (unregistering): left allmulticast mode [ 1426.114573][ T7170] syz_tun (unregistering): left promiscuous mode [ 1426.121189][ T7170] bridge0: port 4(syz_tun) entered disabled state [ 1426.154783][T18485] syzkaller0: entered allmulticast mode [ 1426.204540][T18496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1426.233800][T18495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1426.339225][ T1977] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1426.402180][ T1977] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.587235][T18516] netlink: 256 bytes leftover after parsing attributes in process `syz.0.12173'. [ 1426.621910][T18516] unsupported nlmsg_type 40 [ 1426.657363][T18519] netlink: 'syz.3.12175': attribute type 1 has an invalid length. [ 1426.691210][ T1977] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1426.785561][ T1977] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.946432][T18519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1426.996215][T18534] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12177'. [ 1427.096018][ T1977] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1427.114806][ T1977] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.247856][ T7175] Bluetooth: hci2: command tx timeout [ 1427.366765][ T1977] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1427.428153][ T1977] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.486925][T18467] chnl_net:caif_netlink_parms(): no params data found [ 1428.269174][T18571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12182'. [ 1428.334863][T18580] netlink: 'syz.5.12183': attribute type 10 has an invalid length. [ 1428.360344][T18467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.406916][T18467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.428513][T18467] bridge_slave_0: entered allmulticast mode [ 1428.459951][T18467] bridge_slave_0: entered promiscuous mode [ 1428.486961][T18580] bridge_slave_1: left allmulticast mode [ 1428.493193][T18580] bridge_slave_1: left promiscuous mode [ 1428.509756][T18584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12185'. [ 1428.532989][T18580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.579522][T18580] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1428.606603][T18467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.630258][T18467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.653565][T18467] bridge_slave_1: entered allmulticast mode [ 1428.674913][T18467] bridge_slave_1: entered promiscuous mode [ 1428.838450][ T1977] veth0_to_bridge: left allmulticast mode [ 1428.865358][ T1977] veth0_to_bridge: left promiscuous mode [ 1428.881559][ T1977] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1428.904016][ T1977] bridge_slave_1: left allmulticast mode [ 1428.909857][ T1977] bridge_slave_1: left promiscuous mode [ 1428.922515][ T1977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.947252][ T1977] bridge_slave_0: left allmulticast mode [ 1428.956650][ T1977] bridge_slave_0: left promiscuous mode [ 1428.969272][ T1977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.164023][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 1429.172136][ C1] lec:lec_tx_timeout: lec0 [ 1429.313875][ T1977] bond10 (unregistering): (slave ip6gretap1): Releasing active interface [ 1429.322996][ T7175] Bluetooth: hci2: command 0x041b tx timeout [ 1429.634192][ T1977] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1429.696113][ T1977] bond8 (unregistering): (slave geneve3): Releasing active interface [ 1429.741360][ T1977] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1429.949468][ T1977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.960603][ T1977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.971301][ T1977] bond0 (unregistering): Released all slaves [ 1429.988427][ T1977] bond1 (unregistering): Released all slaves [ 1430.004489][ T1977] bond2 (unregistering): Released all slaves [ 1430.021261][ T1977] bond3 (unregistering): (slave veth3): Releasing active interface [ 1430.034716][ T1977] bond3 (unregistering): Released all slaves [ 1430.057009][ T1977] bond4 (unregistering): (slave veth5): Releasing active interface [ 1430.067674][ T1977] bond4 (unregistering): Released all slaves [ 1430.088047][ T1977] bond5 (unregistering): (slave veth7): Releasing active interface [ 1430.098934][ T1977] bond5 (unregistering): (slave veth9): Releasing active interface [ 1430.109361][ T1977] bond5 (unregistering): Released all slaves [ 1430.128585][ T1977] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1430.140951][ T1977] bond6 (unregistering): Released all slaves [ 1430.160046][ T1977] bond7 (unregistering): Released all slaves [ 1430.176089][ T1977] bond8 (unregistering): Released all slaves [ 1430.193291][ T1977] bond9 (unregistering): Released all slaves [ 1430.212103][ T1977] bond10 (unregistering): Released all slaves [ 1430.229792][ T1977] bond11 (unregistering): Released all slaves [ 1430.254306][T18467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.271567][T18467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1430.470919][T18467] team0: Port device team_slave_0 added [ 1430.481628][T18467] team0: Port device team_slave_1 added [ 1430.595070][ T1977] : left promiscuous mode [ 1430.640944][T18649] netlink: 'syz.3.12201': attribute type 1 has an invalid length. [ 1430.658419][T18467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.672886][T18467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.699819][T18467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.769813][T18467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.818530][T18467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.859289][T18467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.897172][T18663] __nla_validate_parse: 1 callbacks suppressed [ 1430.897197][T18663] netlink: 51 bytes leftover after parsing attributes in process `syz.1.12202'. [ 1430.916873][T18661] Cannot find add_set index 0 as target [ 1430.922851][ C0] net_ratelimit: 17 callbacks suppressed [ 1430.922874][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1430.937646][T18661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12205'. [ 1430.947652][ T1977] 9: left promiscuous mode [ 1430.965751][T18665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1430.974858][T18666] netlink: 54 bytes leftover after parsing attributes in process `syz.3.12206'. [ 1431.014714][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12206'. [ 1431.071418][ T1977] tipc: Disabling bearer [ 1431.123725][ T1977] tipc: Left network mode [ 1431.182016][T18674] syz.5.12208: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1431.201348][T18674] CPU: 1 UID: 0 PID: 18674 Comm: syz.5.12208 Not tainted syzkaller #0 PREEMPT(full) [ 1431.201380][T18674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1431.201396][T18674] Call Trace: [ 1431.201405][T18674] [ 1431.201416][T18674] dump_stack_lvl+0xe8/0x150 [ 1431.201455][T18674] warn_alloc+0x249/0x340 [ 1431.201483][T18674] ? stack_trace_save+0xa9/0x100 [ 1431.201511][T18674] ? __pfx_warn_alloc+0x10/0x10 [ 1431.201545][T18674] ? kasan_save_track+0x4f/0x80 [ 1431.201579][T18674] ? kasan_save_track+0x3e/0x80 [ 1431.201602][T18674] ? __kasan_kmalloc+0x93/0xb0 [ 1431.201626][T18674] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1431.201650][T18674] ? xskq_create+0x56/0x170 [ 1431.201673][T18674] ? xsk_setsockopt+0x54c/0x990 [ 1431.201706][T18674] ? do_sock_setsockopt+0x17c/0x1b0 [ 1431.201729][T18674] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1431.201753][T18674] ? do_syscall_64+0x14d/0xf80 [ 1431.201784][T18674] __vmalloc_node_range_noprof+0x132/0x1730 [ 1431.201843][T18674] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1431.201878][T18674] ? __kasan_kmalloc+0x93/0xb0 [ 1431.201911][T18674] vmalloc_user_noprof+0xad/0xe0 [ 1431.201937][T18674] ? xskq_create+0xbf/0x170 [ 1431.201962][T18674] xskq_create+0xbf/0x170 [ 1431.201988][T18674] xsk_init_queue+0x8a/0xe0 [ 1431.202014][T18674] xsk_setsockopt+0x54c/0x990 [ 1431.202053][T18674] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1431.202088][T18674] ? __pfx_aa_sk_perm+0x10/0x10 [ 1431.202124][T18674] ? aa_sock_opt_perm+0xff/0x1a0 [ 1431.202160][T18674] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1431.202186][T18674] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1431.202242][T18674] do_sock_setsockopt+0x17c/0x1b0 [ 1431.202275][T18674] __x64_sys_setsockopt+0x13d/0x1b0 [ 1431.202307][T18674] do_syscall_64+0x14d/0xf80 [ 1431.202332][T18674] ? trace_irq_disable+0x3b/0x150 [ 1431.202351][T18674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.202375][T18674] ? clear_bhb_loop+0x40/0x90 [ 1431.202405][T18674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.202428][T18674] RIP: 0033:0x7f29c2d9c819 [ 1431.202450][T18674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.202475][T18674] RSP: 002b:00007f29c3b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1431.202498][T18674] RAX: ffffffffffffffda RBX: 00007f29c3015fa0 RCX: 00007f29c2d9c819 [ 1431.202515][T18674] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1431.202529][T18674] RBP: 00007f29c2e32c91 R08: 0000000000000004 R09: 0000000000000000 [ 1431.202544][T18674] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1431.202558][T18674] R13: 00007f29c3016038 R14: 00007f29c3015fa0 R15: 00007ffc511aa6e8 [ 1431.202602][T18674] [ 1431.492567][ T5145] Bluetooth: hci2: command 0x041b tx timeout [ 1431.499591][T18674] Mem-Info: [ 1431.506558][T18674] active_anon:6657 inactive_anon:6 isolated_anon:0 [ 1431.506558][T18674] active_file:2954 inactive_file:40760 isolated_file:0 [ 1431.506558][T18674] unevictable:768 dirty:42 writeback:0 [ 1431.506558][T18674] slab_reclaimable:14276 slab_unreclaimable:139222 [ 1431.506558][T18674] mapped:30591 shmem:1390 pagetables:5921 [ 1431.506558][T18674] sec_pagetables:0 bounce:0 [ 1431.506558][T18674] kernel_misc_reclaimable:0 [ 1431.506558][T18674] free:1256899 free_pcp:25144 free_cma:0 [ 1431.554231][T18674] Node 0 active_anon:26728kB inactive_anon:24kB active_file:11816kB inactive_file:162840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:15868kB dirty:164kB writeback:0kB shmem:4024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17304kB pagetables:23628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1431.587764][T18674] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106496kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1431.620639][T18674] Node 0 DMA free:15292kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:32kB free_cma:0kB [ 1431.651648][T18674] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1431.657613][T18674] Node 0 DMA32 free:1343924kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26728kB inactive_anon:24kB active_file:11816kB inactive_file:162840kB unevictable:1536kB writepending:164kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:41300kB local_pcp:21324kB free_cma:0kB [ 1431.692885][T18674] lowmem_reserve[]: 0 0 0 0 0 [ 1431.697702][T18674] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1431.736948][ T1977] IPVS: stopping backup sync thread 10043 ... [ 1431.744038][T18679] openvswitch: netlink: IPv4 tun info is not correct [ 1431.770539][T18674] lowmem_reserve[]: 0 0 0 0 0 [ 1431.790631][T18674] Node 1 Normal free:3668380kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58608kB local_pcp:28668kB free_cma:0kB [ 1431.826001][T18674] lowmem_reserve[]: 0 0 0 0 0 [ 1431.830834][T18674] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15292kB [ 1431.848834][T18674] Node 0 DMA32: 11423*4kB (UM) 9169*8kB (UME) 6901*16kB (UM) 634*32kB (UME) 84*64kB (UM) 795*128kB (UM) 896*256kB (UME) 400*512kB (UME) 232*1024kB (UE) 154*2048kB (UME) 0*4096kB = 1344020kB [ 1431.870999][T18674] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1431.884955][T18674] Node 1 Normal: 8*4kB (UM) 8*8kB (UM) 9*16kB (UM) 11*32kB (UM) 12*64kB (UM) 11*128kB (UM) 9*256kB (UM) 5*512kB (UM) 7*1024kB (UM) 4*2048kB (U) 890*4096kB (UM) = 3668432kB [ 1431.903496][T18674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.931990][T18674] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1431.942287][T18674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.962738][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1432.021724][T18674] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1432.043104][T18674] 45102 total pagecache pages [ 1432.047874][T18674] 2 pages in swap cache [ 1432.052148][T18674] Free swap = 124988kB [ 1432.073064][T18691] netlink: 'syz.1.12211': attribute type 10 has an invalid length. [ 1432.073928][T18674] Total swap = 124996kB [ 1432.092434][T18686] syzkaller0: entered promiscuous mode [ 1432.098657][T18686] syzkaller0: entered allmulticast mode [ 1432.106471][T18679] syzkaller0: entered promiscuous mode [ 1432.117298][T18679] syzkaller0: entered allmulticast mode [ 1432.124155][T18674] 2097051 pages RAM [ 1432.128032][T18674] 0 pages HighMem/MovableOnly [ 1432.157020][T18467] hsr_slave_0: entered promiscuous mode [ 1432.168572][T18674] 427052 pages reserved [ 1432.174287][T18467] hsr_slave_1: entered promiscuous mode [ 1432.179029][T18674] 0 pages cma reserved [ 1432.188971][T18467] debugfs: 'hsr0' already exists in 'hsr' [ 1432.206335][T18467] Cannot create hsr debugfs directory [ 1432.294241][T18691] team0 (unregistering): Port device team_slave_0 removed [ 1432.314474][T18691] team0 (unregistering): Port device team_slave_1 removed [ 1433.006211][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1433.571705][ T5145] Bluetooth: hci2: command 0x041b tx timeout [ 1434.042789][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1435.082875][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1435.507883][T18733] netlink: 'syz.0.12215': attribute type 1 has an invalid length. [ 1435.627664][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12216'. [ 1435.643607][ T5145] Bluetooth: hci2: command 0x041b tx timeout [ 1436.122803][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1436.314314][T18770] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12224'. [ 1436.537961][T18781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.640981][T18784] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20000 [ 1436.666900][T18784] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20000 [ 1436.770804][ T1977] hsr_slave_0: left promiscuous mode [ 1436.802707][ T1977] hsr_slave_1: left promiscuous mode [ 1436.851838][ T1977] hsr0: left allmulticast mode [ 1437.090930][T18815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12234'. [ 1437.163008][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1437.376196][ T1977] team0 (unregistering): Port device team_slave_1 removed [ 1437.676870][ T30] audit: type=1107 audit(1774892720.734:29): pid=18821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='zb jP7;g#94&ToVBuVxGrv;"1i^5ܸ>S/)X'gdIYI_]|-XD* DkKOjooiuaIjN!r .&՘F۸+?#!ԣ.<⣪`I)oh#' [ 1438.202762][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1438.421178][T18467] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1438.476765][T18467] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1438.545194][T18844] bond7: entered allmulticast mode [ 1438.571256][T18844] bridge10: entered promiscuous mode [ 1438.577356][T18844] bridge10: entered allmulticast mode [ 1438.587758][T18844] bond7: (slave bridge10): Enslaving as an active interface with an up link [ 1438.610313][T18467] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1438.657956][T18467] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1438.685163][ T1977] IPVS: stop unused estimator thread 0... [ 1438.950390][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12244'. [ 1439.067361][T18872] vlan2: entered promiscuous mode [ 1439.083427][T18872] geneve1: entered promiscuous mode [ 1439.242033][T18467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.248998][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1439.312279][T18887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12247'. [ 1439.465270][T18467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.530051][T11389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.537394][T11389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.624077][T11389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.631345][T11389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.761420][T18899] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12251'. [ 1439.799428][T18899] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12251'. [ 1439.907800][T18902] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1439.955802][T18911] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12252'. [ 1440.282825][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1440.318863][T18467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.825951][T18963] sctp: [Deprecated]: syz.3.12263 (pid 18963) Use of int in maxseg socket option. [ 1440.825951][T18963] Use struct sctp_assoc_value instead [ 1440.878263][T18969] sctp: [Deprecated]: syz.3.12263 (pid 18969) Use of int in maxseg socket option. [ 1440.878263][T18969] Use struct sctp_assoc_value instead [ 1440.895154][T18971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12262'. [ 1441.022725][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12262'. [ 1441.235894][T18467] veth0_vlan: entered promiscuous mode [ 1441.279056][T18467] veth1_vlan: entered promiscuous mode [ 1441.323092][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1441.387760][T18467] veth0_macvtap: entered promiscuous mode [ 1441.419887][T18467] veth1_macvtap: entered promiscuous mode [ 1441.494935][T18467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1441.528180][T18467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1441.583773][ T1977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.606034][ T1977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.642306][ T1977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.677341][ T1977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.693740][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12271'. [ 1441.719346][T19007] bond0: (slave batadv0): Releasing backup interface [ 1441.746922][T19011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1441.753583][T19004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12271'. [ 1441.758586][T19011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1441.774885][T19004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12271'. [ 1441.804894][T19004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12271'. [ 1441.877212][T19011] xt_bpf: check failed: parse error [ 1441.902631][T19015] TC_ACT_REPEAT abuse ? [ 1442.302777][T16328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.311228][T16328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.335209][T19030] netlink: 'syz.0.12278': attribute type 1 has an invalid length. [ 1442.362610][T19030] netlink: 280 bytes leftover after parsing attributes in process `syz.0.12278'. [ 1442.362962][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1442.460548][T19039] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1442.487043][ T1991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.498422][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12279'. [ 1442.514494][ T1991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.527241][T19040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1442.531766][T19040] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12280'. [ 1442.555425][T19035] netlink: 'syz.3.12279': attribute type 13 has an invalid length. [ 1442.584526][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12279'. [ 1442.623133][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12279'. [ 1442.633025][T19042] sctp: [Deprecated]: syz.1.12282 (pid 19042) Use of int in max_burst socket option. [ 1442.633025][T19042] Use struct sctp_assoc_value instead [ 1442.642020][T19035] netlink: 'syz.3.12279': attribute type 13 has an invalid length. [ 1442.660231][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12279'. [ 1443.321959][T19096] netlink: 'syz.0.12297': attribute type 3 has an invalid length. [ 1443.391252][T19101] bridge_slave_0: left allmulticast mode [ 1443.398258][T19101] bridge_slave_0: left promiscuous mode [ 1443.403333][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1443.405296][T19101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.428387][T19101] bridge_slave_1: left allmulticast mode [ 1443.435578][T19101] bridge_slave_1: left promiscuous mode [ 1443.441534][T19101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.522831][T19101] bond0: (slave bond_slave_0): Releasing backup interface [ 1443.536596][T19101] bond0: (slave bond_slave_1): Releasing backup interface [ 1443.557716][T19101] team0: Port device team_slave_0 removed [ 1443.570435][T19101] team0: Port device team_slave_1 removed [ 1443.578093][T19101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.587681][T19101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.598635][T19101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.606951][T19101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.618945][T19101] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1443.676634][T19101] team0: Mode changed to "random" [ 1443.857746][T19119] mac80211_hwsim hwsim110 wlan0: entered promiscuous mode [ 1444.442836][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1444.776086][T19161] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.794792][T19161] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.808586][T19182] netlink: 'syz.1.12320': attribute type 4 has an invalid length. [ 1444.839577][T19178] delete_channel: no stack [ 1445.031826][T19161] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.064048][T19161] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.290920][T19161] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.308848][T19161] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.351757][T19204] veth5: entered allmulticast mode [ 1445.380826][T19215] x9: renamed from bridge_slave_0 [ 1445.483143][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1445.499831][T19161] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.511204][T19161] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.690409][T16328] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1445.707655][T16328] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.725794][T16328] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1445.752096][T16328] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.795851][T16328] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1445.805580][T16328] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.848431][T16328] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1445.857799][T16328] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.869982][T19232] netlink: 'syz.1.12332': attribute type 2 has an invalid length. [ 1445.883035][T19232] netlink: 'syz.1.12332': attribute type 2 has an invalid length. [ 1445.910231][T19232] netlink: 'syz.1.12332': attribute type 12 has an invalid length. [ 1446.016279][T19244] netlink: 'syz.5.12334': attribute type 11 has an invalid length. [ 1446.035576][T19244] netlink: 'syz.5.12334': attribute type 11 has an invalid length. [ 1446.152446][T19244] netlink: 'syz.5.12334': attribute type 11 has an invalid length. [ 1446.166247][T19244] netlink: 'syz.5.12334': attribute type 11 has an invalid length. [ 1446.278408][T19251] netlink: 'syz.1.12335': attribute type 10 has an invalid length. [ 1446.326425][T19251] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1446.370683][ T1977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.384064][T19244] netlink: 'syz.5.12334': attribute type 11 has an invalid length. [ 1446.397948][ T1977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.412709][T19244] netlink: 'syz.5.12334': attribute type 11 has an invalid length. [ 1446.522844][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1446.541297][T19244] netlink: 'syz.5.12334': attribute type 11 has an invalid length. [ 1446.550224][T19244] netlink: 'syz.5.12334': attribute type 11 has an invalid length. [ 1446.652064][T19258] netlink: 'syz.0.12338': attribute type 1 has an invalid length. [ 1446.660416][T19244] netlink: 'syz.5.12334': attribute type 11 has an invalid length. [ 1446.679764][T19244] netlink: 'syz.5.12334': attribute type 11 has an invalid length. [ 1446.723769][T19244] __nla_validate_parse: 17 callbacks suppressed [ 1446.723792][T19244] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12334'. [ 1446.778448][T19267] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12339'. [ 1446.963415][T19273] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 1447.097101][T19282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12343'. [ 1447.397584][T19303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12347'. [ 1447.411990][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12348'. [ 1447.497064][T19311] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.12351'. [ 1447.536133][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12350'. [ 1447.562815][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1447.867981][T19335] validate_nla: 2 callbacks suppressed [ 1447.868004][T19335] netlink: 'syz.0.12355': attribute type 1 has an invalid length. [ 1447.911671][T19335] netlink: 'syz.0.12355': attribute type 2 has an invalid length. [ 1447.937091][T19335] netlink: 'syz.0.12355': attribute type 1 has an invalid length. [ 1448.130312][T19387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12359'. [ 1448.181083][T19389] C: renamed from lo [ 1448.218293][T19389] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1448.242764][T19392] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12362'. [ 1448.252722][T19392] netlink: Unknown conntrack attr (0) [ 1448.464726][T19401] delete_channel: no stack [ 1448.602764][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1448.722983][T19416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12369'. [ 1448.795151][T19415] netlink: 'syz.3.12368': attribute type 2 has an invalid length. [ 1448.814082][T19415] netlink: 'syz.3.12368': attribute type 11 has an invalid length. [ 1449.295234][T13654] IPVS: starting estimator thread 0... [ 1449.310349][T19447] lo speed is unknown, defaulting to 1000 [ 1449.412632][T19448] IPVS: using max 26 ests per chain, 62400 per kthread [ 1449.504841][T19458] ------------[ cut here ]------------ [ 1449.511038][T19458] 1 [ 1449.511073][T19458] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#1: syz.0.12379/19458 [ 1449.523038][T19458] Modules linked in: [ 1449.527591][T19458] CPU: 1 UID: 0 PID: 19458 Comm: syz.0.12379 Not tainted syzkaller #0 PREEMPT(full) [ 1449.537176][T19458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1449.547330][T19458] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 1449.552340][T19458] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 0a 5c ba f7 66 90 e8 03 5c ba f7 31 ff 48 89 de ba 02 00 00 00 e8 d4 2c 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0f a6 a6 01 cc 49 [ 1449.572169][T19458] RSP: 0018:ffffc9000dba71e0 EFLAGS: 00010282 [ 1449.578457][T19458] RAX: 3219cd990c8d1200 RBX: ffff8880993d0c80 RCX: 0000000080000401 [ 1449.586550][T19458] RDX: 0000000000000002 RSI: ffffffff8def989e RDI: ffffffff8c27cb00 [ 1449.594620][T19458] RBP: ffffc9000dba74e0 R08: ffffffff9011beb7 R09: 1ffffffff20237d6 [ 1449.602779][T19458] R10: dffffc0000000000 R11: fffffbfff20237d7 R12: dffffc0000000000 [ 1449.610806][T19458] R13: 0000000000000000 R14: ffff8880993d0c80 R15: dffffc0000000000 [ 1449.618979][T19458] FS: 00007fb54b5236c0(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000 [ 1449.628068][T19458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1449.634772][T19458] CR2: 0000200000001f40 CR3: 0000000063f6e000 CR4: 00000000003526f0 [ 1449.642836][T19458] Call Trace: [ 1449.644846][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1449.646245][T19458] [ 1449.656278][T19458] ip_push_pending_frames+0x8b/0x110 [ 1449.661645][T19458] __icmp_send+0x118d/0x1590 [ 1449.666357][T19458] ? __icmp_send+0x22b/0x1590 [ 1449.671113][T19458] ? __pfx___icmp_send+0x10/0x10 [ 1449.676323][T19458] ? ip_route_input_noref+0xad/0x270 [ 1449.681697][T19458] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1449.687652][T19458] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 1449.692981][T19458] ip_options_compile+0x80/0xb0 [ 1449.697916][T19458] ip_rcv_finish_core+0xaa2/0x1c00 [ 1449.703197][T19458] ip_rcv_finish+0x14c/0x2a0 [ 1449.707871][T19458] NF_HOOK+0x336/0x3c0 [ 1449.712022][T19458] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1449.717414][T19458] ? NF_HOOK+0x9e/0x3c0 [ 1449.722081][T19458] ? __pfx_NF_HOOK+0x10/0x10 [ 1449.726896][T19458] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1449.732202][T19458] ? netif_receive_skb+0x102/0xc50 [ 1449.737450][T19458] ? __pfx_ip_rcv+0x10/0x10 [ 1449.742040][T19458] netif_receive_skb+0x45b/0xc50 [ 1449.747153][T19458] ? __pfx_netif_receive_skb+0x10/0x10 [ 1449.752714][T19458] ? __lock_acquire+0x6b5/0x2cf0 [ 1449.757903][T19458] ? tun_rx_batched+0x185/0x790 [ 1449.762894][T19458] tun_rx_batched+0x1de/0x790 [ 1449.767635][T19458] ? __build_skb+0x62/0x440 [ 1449.772233][T19458] ? __pfx_tun_rx_batched+0x10/0x10 [ 1449.777576][T19458] ? tun_get_user+0x2354/0x3dd0 [ 1449.782539][T19458] ? __local_bh_enable_ip+0xd0/0x130 [ 1449.787896][T19458] ? tun_get_user+0x2669/0x3dd0 [ 1449.792859][T19458] tun_get_user+0x2a78/0x3dd0 [ 1449.797622][T19458] ? aa_file_perm+0x50e/0x15e0 [ 1449.802442][T19458] ? __pfx_tun_get_user+0x10/0x10 [ 1449.807592][T19458] ? aa_file_perm+0x192/0x15e0 [ 1449.812441][T19458] ? ref_tracker_alloc+0x35c/0x4c0 [ 1449.817915][T19458] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1449.823521][T19458] ? tun_get+0x1c/0x2f0 [ 1449.827866][T19458] ? tun_get+0x1c/0x2f0 [ 1449.832082][T19458] ? tun_get+0x1c/0x2f0 [ 1449.836449][T19458] tun_chr_write_iter+0x113/0x200 [ 1449.841636][T19458] vfs_write+0x61d/0xb90 [ 1449.846009][T19458] ? __pfx_vfs_write+0x10/0x10 [ 1449.850853][T19458] ? __fget_files+0x2a/0x420 [ 1449.855663][T19458] ksys_write+0x150/0x270 [ 1449.860094][T19458] ? __pfx_ksys_write+0x10/0x10 [ 1449.865088][T19458] do_syscall_64+0x14d/0xf80 [ 1449.869830][T19458] ? trace_irq_disable+0x3b/0x150 [ 1449.874951][T19458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.881177][T19458] ? clear_bhb_loop+0x40/0x90 [ 1449.885990][T19458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.892049][T19458] RIP: 0033:0x7fb54a55d04e [ 1449.896844][T19458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1449.916914][T19458] RSP: 002b:00007fb54b522fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1449.925704][T19458] RAX: ffffffffffffffda RBX: 00007fb54b5236c0 RCX: 00007fb54a55d04e [ 1449.933863][T19458] RDX: 0000000000000046 RSI: 0000200000000440 RDI: 00000000000000c8 [ 1449.941896][T19458] RBP: 00007fb54a632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1449.949973][T19458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1449.958083][T19458] R13: 00007fb54a816038 R14: 00007fb54a815fa0 R15: 00007ffe7a3f87f8 [ 1449.966182][T19458] [ 1449.969367][T19458] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1449.976707][T19458] CPU: 1 UID: 0 PID: 19458 Comm: syz.0.12379 Not tainted syzkaller #0 PREEMPT(full) [ 1449.986786][T19458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1449.996899][T19458] Call Trace: [ 1450.000316][T19458] [ 1450.003299][T19458] vpanic+0x56c/0xa60 [ 1450.007525][T19458] ? __pfx__printk+0x10/0x10 [ 1450.012268][T19458] ? __pfx_vpanic+0x10/0x10 [ 1450.016932][T19458] ? is_bpf_text_address+0x292/0x2b0 [ 1450.022288][T19458] ? is_bpf_text_address+0x26/0x2b0 [ 1450.027567][T19458] panic+0xc5/0xd0 [ 1450.031368][T19458] ? __pfx_panic+0x10/0x10 [ 1450.035966][T19458] __warn+0x315/0x4f0 [ 1450.040038][T19458] ? ip_rt_bug+0x2d/0x140 [ 1450.044433][T19458] ? ip_rt_bug+0x2d/0x140 [ 1450.049017][T19458] __report_bug+0x29a/0x540 [ 1450.053679][T19458] ? NF_HOOK+0x336/0x3c0 [ 1450.058013][T19458] ? netif_receive_skb+0x45b/0xc50 [ 1450.063195][T19458] ? tun_rx_batched+0x1de/0x790 [ 1450.068632][T19458] ? ip_rt_bug+0x2d/0x140 [ 1450.073458][T19458] ? __pfx___report_bug+0x10/0x10 [ 1450.078656][T19458] ? ip_rt_bug+0x2d/0x140 [ 1450.083051][T19458] report_bug+0x16a/0x220 [ 1450.087441][T19458] ? ip_rt_bug+0x2d/0x140 [ 1450.091828][T19458] ? ip_rt_bug+0x2f/0x140 [ 1450.096202][T19458] handle_bug+0x9c/0x200 [ 1450.100583][T19458] exc_invalid_op+0x1a/0x50 [ 1450.105172][T19458] asm_exc_invalid_op+0x1a/0x20 [ 1450.110054][T19458] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 1450.115040][T19458] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 0a 5c ba f7 66 90 e8 03 5c ba f7 31 ff 48 89 de ba 02 00 00 00 e8 d4 2c 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0f a6 a6 01 cc 49 [ 1450.134702][T19458] RSP: 0018:ffffc9000dba71e0 EFLAGS: 00010282 [ 1450.140820][T19458] RAX: 3219cd990c8d1200 RBX: ffff8880993d0c80 RCX: 0000000080000401 [ 1450.148840][T19458] RDX: 0000000000000002 RSI: ffffffff8def989e RDI: ffffffff8c27cb00 [ 1450.156867][T19458] RBP: ffffc9000dba74e0 R08: ffffffff9011beb7 R09: 1ffffffff20237d6 [ 1450.164884][T19458] R10: dffffc0000000000 R11: fffffbfff20237d7 R12: dffffc0000000000 [ 1450.172901][T19458] R13: 0000000000000000 R14: ffff8880993d0c80 R15: dffffc0000000000 [ 1450.181123][T19458] ip_push_pending_frames+0x8b/0x110 [ 1450.186457][T19458] __icmp_send+0x118d/0x1590 [ 1450.191095][T19458] ? __icmp_send+0x22b/0x1590 [ 1450.195818][T19458] ? __pfx___icmp_send+0x10/0x10 [ 1450.200812][T19458] ? ip_route_input_noref+0xad/0x270 [ 1450.206245][T19458] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1450.212016][T19458] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 1450.217325][T19458] ip_options_compile+0x80/0xb0 [ 1450.222295][T19458] ip_rcv_finish_core+0xaa2/0x1c00 [ 1450.227644][T19458] ip_rcv_finish+0x14c/0x2a0 [ 1450.232334][T19458] NF_HOOK+0x336/0x3c0 [ 1450.236632][T19458] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1450.241782][T19458] ? NF_HOOK+0x9e/0x3c0 [ 1450.245974][T19458] ? __pfx_NF_HOOK+0x10/0x10 [ 1450.250702][T19458] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1450.255870][T19458] ? netif_receive_skb+0x102/0xc50 [ 1450.261119][T19458] ? __pfx_ip_rcv+0x10/0x10 [ 1450.265764][T19458] netif_receive_skb+0x45b/0xc50 [ 1450.270857][T19458] ? __pfx_netif_receive_skb+0x10/0x10 [ 1450.276383][T19458] ? __lock_acquire+0x6b5/0x2cf0 [ 1450.281390][T19458] ? tun_rx_batched+0x185/0x790 [ 1450.286291][T19458] tun_rx_batched+0x1de/0x790 [ 1450.291011][T19458] ? __build_skb+0x62/0x440 [ 1450.295558][T19458] ? __pfx_tun_rx_batched+0x10/0x10 [ 1450.300802][T19458] ? tun_get_user+0x2354/0x3dd0 [ 1450.305689][T19458] ? __local_bh_enable_ip+0xd0/0x130 [ 1450.311030][T19458] ? tun_get_user+0x2669/0x3dd0 [ 1450.315922][T19458] tun_get_user+0x2a78/0x3dd0 [ 1450.320696][T19458] ? aa_file_perm+0x50e/0x15e0 [ 1450.325509][T19458] ? __pfx_tun_get_user+0x10/0x10 [ 1450.330587][T19458] ? aa_file_perm+0x192/0x15e0 [ 1450.335499][T19458] ? ref_tracker_alloc+0x35c/0x4c0 [ 1450.340910][T19458] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1450.346449][T19458] ? tun_get+0x1c/0x2f0 [ 1450.350841][T19458] ? tun_get+0x1c/0x2f0 [ 1450.355036][T19458] ? tun_get+0x1c/0x2f0 [ 1450.359230][T19458] tun_chr_write_iter+0x113/0x200 [ 1450.364295][T19458] vfs_write+0x61d/0xb90 [ 1450.368689][T19458] ? __pfx_vfs_write+0x10/0x10 [ 1450.373515][T19458] ? __fget_files+0x2a/0x420 [ 1450.378213][T19458] ksys_write+0x150/0x270 [ 1450.382685][T19458] ? __pfx_ksys_write+0x10/0x10 [ 1450.387587][T19458] do_syscall_64+0x14d/0xf80 [ 1450.392219][T19458] ? trace_irq_disable+0x3b/0x150 [ 1450.397270][T19458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.403368][T19458] ? clear_bhb_loop+0x40/0x90 [ 1450.408087][T19458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.414009][T19458] RIP: 0033:0x7fb54a55d04e [ 1450.418460][T19458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1450.438098][T19458] RSP: 002b:00007fb54b522fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1450.446548][T19458] RAX: ffffffffffffffda RBX: 00007fb54b5236c0 RCX: 00007fb54a55d04e [ 1450.454641][T19458] RDX: 0000000000000046 RSI: 0000200000000440 RDI: 00000000000000c8 [ 1450.462822][T19458] RBP: 00007fb54a632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1450.470838][T19458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1450.478837][T19458] R13: 00007fb54a816038 R14: 00007fb54a815fa0 R15: 00007ffe7a3f87f8 [ 1450.486873][T19458] [ 1450.490548][T19458] Kernel Offset: disabled [ 1450.494907][T19458] Rebooting in 86400 seconds..