last executing test programs: 13.196107802s ago: executing program 4 (id=2992): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000300001000000000004000000010100800c0001"], 0x114}], 0x1}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x24}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc005}, 0x404c810) 12.821149302s ago: executing program 4 (id=2996): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)={0x114, 0x14, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x14, 0x9d, 0x0, 0x0, @ipv6=@remote}, @typed={0xc, 0x5e, 0x0, 0x0, @u64=0xffff}, @nested={0xe1, 0x114, 0x0, 0x1, [@nested={0x4, 0x140}, @generic="dc34cbe45432423379173f4d12ecc783d7b5c26c85e781a39d31fabe107a432231a2473a1920d50c920eb7312c6065b604567f7871ceed6094a1bb5fa6489744d9abe27938bb58df7b043a8fd1591c34699d7e4d8f4b0935eca785453e6025fd4cbdbafbaafd7bd698e3e66549849b6e97448dc0077c882bfca48362ad44029b3c0b2da3f97110af18d5b22b1e2b2483ac329b66d49fc3ce1333486b184a25d348fb33ebeaeed305470d7a9df667d9c6610387da94ad2a0a598105f2c8fe15f0d59377f29cdfb4accd61ea28e392513117e870a76ecfadca82"]}]}, 0x114}, {&(0x7f0000000440)={0xd0, 0x1d, 0x200, 0x70bd29, 0x25dfdbfb, "", [@typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x31}}, @typed={0x8, 0xf7, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@local}, @nested={0x69, 0x74, 0x0, 0x1, [@typed={0x31, 0x0, 0x0, 0x0, @binary="de246c8b6dc7d6ce9e76cb3896d9e69c7db12def7e9414f1f3b2180a85e8d6db87d08ef64229ab5fa824c4df3e"}, @nested={0x4, 0x9c}, @generic="ce112faf3c5e0f8efa82cb32de74feec12f5f0da6959c9d670be3df15bb8be685abe838c727d6b4290752a9b17"]}, @nested={0x24, 0xa9, 0x0, 0x1, [@typed={0x4, 0xec}, @typed={0x14, 0x161, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x15c, 0x0, 0x0, @fd=r0}]}, @generic]}, 0xd0}], 0x2}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x3, 0x4) sendto$l2tp(r1, 0x0, 0x0, 0x30000040, &(0x7f0000000900)={0x2, 0x0, @empty, 0x3}, 0x10) 12.592559939s ago: executing program 4 (id=2998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x368}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$sock(r3, &(0x7f0000000bc0)={&(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x1}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000380)="70c065f68e0c66dfde11c51798a400076604fe341db2ae2500589c0b9a255541044251a9bc4551c5d4738ab0b626790a74d8631d1ce3c110972ee24b0a599c7f804eaa2bcfe2286410b95454ebfe", 0x4e}, {&(0x7f0000000480)="a3178cc57b97b2298dd6987c54f3c29f4b3c5f1a6bb42fda1a803fa33da84a55846191c02a0147e9eac07c6207d9876516ede9c13be10846c485d7ffbd73ee7330313633d710d2", 0x47}, {&(0x7f0000000500)="c0cc6ed37e151d0f183dc70665b17305c3ce18bac2cf7f5a9a2a198379b6c0a801550b8fd07a8a2ad6c9847124cc9b38b9eeb8e46e63646ab1e9997c9faf2d5d4b178f2b7213729a8ac986fcc7625c9e66444f59884e9c08bd29de5e12e887d0b3f3fedb4d08258c726739d7b031b07b33546880ace9045b91150d8967787cb0be4e5493731fdfb7c9939be841e80125b47f1ae827c2cfa97d4e5da266e7eae64500e647fc306f357122c8b045d9d41b199bc845de6b3622c97c91ed8b5f040978946dfcd036b80ba41391e1dee94477f89fa9fc9a9f8a7c", 0xd8}, {&(0x7f0000000700)="1017ae2f42089ce9f827df526753115e091718994aa2eada20360a8b2c24046daf0208966b64a7d27951720c081cc7215c1c8b4584f6b06129c85780821a40fa1ab30be56c4697ffd1498097fcbd0a200e390e0e235e841c0224e6b4b2ceb33c164cda7fa98b01aa9f575845bd4bb5f05ad7dd70f6a869e67d7d1b810530bd84577bd80150b8c926d6592aacb901fa4297ff455153a81b4c44dcf552d050864afee0181a190f53d65795a9b9a82fb3168117110db3a875c682b726727b4abe8e1b", 0xc1}, {&(0x7f0000000800)="41e2a9e369b5a162e138fad98c848ce381f868214b6a42f36e7114182b02c4ae9fa5ea0717b59fd12cb1d6e271cb9d241ba11c957462d435ed2957c2b6e2368550111ef4eb00dcf1333953da86e48b39e0f82e16f46cff42708436d26ea046fbe454fc8659a185b5b6fc062cd1c0bc5deb57635874c1f48a98cd975ed486a961dd004aa323c91394e09d85f529f5cd8c240f843f4927cee229bde70c67f824ce8b85655da4673ad49d730995445c106057a849749813888a7cf022c5c30e26b531c216", 0xc3}, {&(0x7f0000000900)="9b2a9942f7c3e909eeddc51fd183e9a5d98446e41a7ebc4ebfee53a8b3ab1dbe6620289ad4f86fcb7c51d307c83745bbfa146a92c830b530456e59cb37a039962ac1fc44d0ba557e30ec298531026bb752a91f0a1758ec740c5c9775f7436f538fcf66d5abecc95db33fe1f40d6bb301bafb6341be604aea484ee36af5af0993428cfe81c440039fe45c39cf2b071cadd0866e", 0x93}, {&(0x7f00000009c0)="406dcf727fe0de761225dc34b4924de71848746214801d4165c5d7a77f328ef3b831c4c5d580c45f28ab7a002eac5f793dbdcb205a7caa463ec25390a1695f950dd7240f94c1f97d67287935353a1cf12380916e71755f8694aff267f8a1e0b9974df37cc4fe7bc3c60b2091a743127fe24e54ababe1244004bc141e45da3c1277f5ee5b245c1ea3cc693dd642510429b8ca5de34cd7c5b6cf037218eedcd7ea444a4b26dcd5b2688f9e01b75f2083220793a13b16c2b1b51e54172ff1b9c928362e7f81a5f2ac085c95640baa1a4cae5732c65f04b3c23b1f64a6601fec20aacde177cc4f35ca65015dba632b175740775bf8fcf658", 0xf6}], 0x7, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0xb}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x60}, 0x40) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x7e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x8000) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0x2c}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(0x3) 11.79039636s ago: executing program 4 (id=3005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newtfilter={0x6c, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x9}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e4ad}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0xfffb}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x81}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4eb444c5fe6eee297e3a4c67d606757d568df33e2c5213673263b835cf2ba3a79fc2bf9b84364474135f7c9d64abb3c843d4d8be"}, 0x48}, 0x2, 0x0, 0x0, 0x24000884}, 0x30048009) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x2, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x6, 0x1}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000001c0)=0xffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001}, 0x1c) 11.445318918s ago: executing program 4 (id=3008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="581300004100070127bd7000fefdffff047c000008004280040008000c000180060006000806"], 0x1358}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 10.501793403s ago: executing program 4 (id=3012): unshare(0x6a040000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000080)={0x27, r0, 0xffffffffffffffff, 0x5}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36268a3afff3d36", 0xb7) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f00000000c0)) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.441953767s ago: executing program 2 (id=3048): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000700)="f14a4cca", 0x4}], 0x1}}], 0x1, 0x2004000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000028c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {}, {0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044038}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbba, {0x0, 0x0, 0x0, r9, {0xfffa, 0xc}, {0x0, 0x1}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x3}, {0x5, 0x7}}}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xe1d6, 0x8, 0x800}, {0xffffffffffffffff, 0x0, 0x2}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="251c1352bb0000760000000000e629080440fcb5fc1576b6d400000000000000", @ANYRES32=r10, @ANYBLOB="00080000009000001c0012800d62726964676500000c0002800600090004040000100000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 3.935247458s ago: executing program 2 (id=3051): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c0001800600060088470000180102"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYRES64=r0], 0x0, 0x34}, 0x28) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d", 0x2a}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.696372367s ago: executing program 2 (id=3054): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x13, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x160, 0x1f8, 0x290, 0x328, 0xc8, 0x160, 0x1f8, 0x290, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)) 3.21702575s ago: executing program 2 (id=3058): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r7, 0xc7, 0x1}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRESDEC=r6, @ANYRES8=r8], 0x44}}, 0x0) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r9, 0x0, 0x29, 0x0, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x804, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000000880)=""/4087, 0xff7}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) recvfrom(r11, 0x0, 0x0, 0x301c0, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r3, @ANYRES16=r10], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0x3) 3.00772022s ago: executing program 3 (id=3060): unshare(0x2a060400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x2000, 0x0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x40000121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x7, 0x1, 0x5, 0x0, 0x4, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) 2.868659483s ago: executing program 3 (id=3062): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xd9}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r13, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b800800"], 0x250}}, 0x2000c000) 2.71912893s ago: executing program 0 (id=3063): socket(0x400000000010, 0x3, 0x2) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket(0x10, 0x803, 0x0) unshare(0x2020600) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0xa, 0x1, 0x0) epoll_create1(0x0) socketpair(0x23, 0x3, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, r0, 0x14460000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0xf132, 0xffffffffffffffff, 0xa4fdf000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x27}) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x880, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@private2, @in6=@private1, 0x4e21, 0x6, 0x4e20, 0x7, 0x11, 0x0, 0xa0, 0x6}, {0x10, 0xa0, 0x6, 0x0, 0xb, 0x0, 0x7}, {0x5496, 0x403, 0x6, 0x5}, 0xef}, {{@in=@local, 0x4d3, 0xff}, 0x2, @in6=@loopback, 0x3501, 0x5, 0xdeb549066faab156, 0x2, 0x600000, 0x1, 0x7}}, 0xe8) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 2.451468929s ago: executing program 1 (id=3064): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c0400090000000600000000000000000000000084183368d89285ccda240e7c0d311805eeb05b57e6519abf14fa4500ff12e1815357f05dfb6e66e0a86e1ce74eb2a7711691d89368feb76c4dd66fad90d94f0659349973308d69c92a7ef53764d8b58b083cb7976690e8570c5e39117162bacacac61697709eb809a5670922d6a5e06567c8f4354d9b18754cc6d23d4292c6a255bb390ad5c3931080d9035968fce78e9011b294b5c9c326f320d3e55cf869841bc4029acb47bcd6a2e8b341bb", @ANYRES8=r1, @ANYRES32=r2], 0x3c}}, 0x5) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x4, 0x2, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) socket(0x1, 0x803, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[], 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffcbf) unshare(0x4020000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000900000000000000000000000000000001000000000000000a0010000100000000000000"], 0xc4}}, 0x0) 2.079237234s ago: executing program 0 (id=3065): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018", @ANYRES16, @ANYRES8=r1, @ANYRES64=r0], 0x44}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3030098914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f00000000c0)={'caif0\x00', @ifru_data=0x0}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000008", @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf250c00000008000400ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000680)) r7 = openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="03000000"], 0x1c}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000110001000000000000000000fc00000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r9, &(0x7f0000004d00), 0x0, 0xf00) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000880)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000001f00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001f40)=ANY=[@ANYBLOB="5c1c000092f3e62d04bf45d748bbae9a3271bd2a578118046c0aaa", @ANYRES16=0x0, @ANYRES32=r2], 0x1c5c}}, 0x20000000) 1.942943715s ago: executing program 1 (id=3066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000048000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000008000340000001", @ANYRESHEX=0x0], 0xd0}, 0x1, 0x0, 0x0, 0x200000d4}, 0x20050800) 1.765101221s ago: executing program 3 (id=3067): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x20}}, 0x4084000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10, 0x80800) getsockopt$inet6_mreq(r3, 0x29, 0x2edf8b755ccb00dc, &(0x7f0000000200)={@rand_addr, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'gre0\x00', r5, 0x8000, 0x7800, 0xa, 0x20000000, {{0x13, 0x4, 0x0, 0x8, 0x4c, 0x65, 0x0, 0x5, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0xa1, 0x0, 0x1, [0x7]}, @noop, @end, @timestamp_prespec={0x44, 0xc, 0x3f, 0x3, 0x1, [{@multicast1, 0x400}]}, @end, @timestamp_addr={0x44, 0x14, 0xbc, 0x1, 0x6, [{@rand_addr=0x64010102, 0x736}, {@remote, 0x44}]}, @timestamp={0x44, 0xc, 0xa7, 0x0, 0x4, [0xd2, 0x1000]}]}}}}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r6, 0x5}, 0x8) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x15, 0x2, 0x7, 0x20000004}}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x20}}, 0x4084000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10, 0x80800) (async) getsockopt$inet6_mreq(r3, 0x29, 0x2edf8b755ccb00dc, &(0x7f0000000200), &(0x7f0000000240)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'gre0\x00', r5, 0x8000, 0x7800, 0xa, 0x20000000, {{0x13, 0x4, 0x0, 0x8, 0x4c, 0x65, 0x0, 0x5, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0xa1, 0x0, 0x1, [0x7]}, @noop, @end, @timestamp_prespec={0x44, 0xc, 0x3f, 0x3, 0x1, [{@multicast1, 0x400}]}, @end, @timestamp_addr={0x44, 0x14, 0xbc, 0x1, 0x6, [{@rand_addr=0x64010102, 0x736}, {@remote, 0x44}]}, @timestamp={0x44, 0xc, 0xa7, 0x0, 0x4, [0xd2, 0x1000]}]}}}}}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r0}) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r6, 0x5}, 0x8) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x15, 0x2, 0x7, 0x20000004}}) (async) 1.649216077s ago: executing program 1 (id=3068): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x54, r2, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x44046) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc1e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004010}, 0x9) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) sendmsg$xdp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="548a", 0x2}], 0x1, 0x0, 0x0, 0x404}, 0x84) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3006c016) 1.470821711s ago: executing program 2 (id=3069): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000009002c3e00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r3, @ANYRES8=r2, @ANYBLOB="698503249e15320798624545f1df03a6b6e022d19365a9584412ecc512e2f7d83d407291a12bbfb9031c875ed4bb647c2f5f946750dd748597991a4b7ca8aa5e266aaac0ee7d2b34ac43b147555ded2ef8b4d394b00fffdc1149bec00e1577cd50361fde7b72b53892b0891871d64b5fcb494c1ac8843b6c99a3632097c69c2434e7c999b9b5c61fbe64d5b7ee36d199c8a4cafdc1ded1ef21b6a5dd5fffa68c0a1ed073b11bdddb6b4d3d56f89c891339", @ANYRES16=r1, @ANYRES16=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000840), &(0x7f0000000340)=r3}, 0x20) close(r3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f00000003c0)="55824e4a67954b5a899150903170275f855bd6b129df6be465eba03addaca9496c9153c245c36ab7b9dacd73733b182429d42b76b7e5487324a989ab560ded593ba57fb182d0b13f5729f42fb08569a306d5c675548b31cc9e0183"}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r4, @ANYBLOB="5a21ac65797e0cbfcc8826d96052dd7c3be873da489a3ef7813eb11571553d496606457f7bac8d0bfcec6731afbda68913249c44fc8cabaf74f827c2c66cafab983d7405a811c98c318eded3a2ea659e596d12e62446f3acea49659faa23476e8071bd19b1e4d9d756140a417a1ac1a8c776f9be06888ea5a3542af3b02023b0b142ecb0c032b9d02413be67d1a8785bf8fba10063f57bff15700a50df1218d9628f86f794204fae82e3d9e444b34e8e", @ANYBLOB="01010000ac1414bb00000000000000000000000086dd00"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4052) r6 = socket(0x10, 0x803, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) write(r8, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003031e000500e1000c0400070280000f00", 0x33a) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ff0800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x1, 0x15, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x4c, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800114000000000050015000e000000050005000a00"], 0x60}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) 1.384129593s ago: executing program 0 (id=3070): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc0adcb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) pipe(&(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000010000100000000005fc403430000000a48000000060a0b1600000000000000000200001a2800048024000180090001007866726d0000000014000280080001400000000b08000240000000050900020073797a3200000000140000001100010000000000000000000000000a27f46be3626af92fdceda1c1e79f6e2c91099fcf05de8da4346f2e5a1a45fe5d8b743d9efe453ee59f58709b53adc5a8c099e384935c8b040000001b48167ffabef4c9c0aa6273c834097d47aa021200d355a3e7b47e7ac2740f58ecab46a96f1cc83ecb39ded4d0ad5da003bf4448e85526"], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0x0, 0x26a9e3a96bccb3de], [0x0, 0xffffffff, 0xff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xffff00, 0xff000000], [0xff, 0xffffff00, 0xff000000], 'syzkaller0\x00', 'wlan1\x00', {0xff}, {}, 0x73, 0x1, 0x5, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x2, 0x6}, {0x4, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00], [0x0, 0x0, 0xff], 'ipvlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x6}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @empty, [], [0xff, 0xff], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}, {}, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.368489617s ago: executing program 1 (id=3071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@rand_addr=0x64010100, @remote}, 0x8) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1ef51b68, 0x0, 0x1, 0x8, '\x00', r1, 0xffffffffffffffff, 0x9, 0x1, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000380)={r2, &(0x7f0000000280)='GPL\x00', 0x21080, &(0x7f00000002c0)={@_ha_fsid={[0x6, 0x9]}, {0x1, 0x0, 0x10}}, 0x1, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000480)=0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x5, &(0x7f00000004c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x2}]}, &(0x7f0000000340)='GPL\x00', 0x5, 0xc3, &(0x7f0000000500)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x20000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.053434923s ago: executing program 1 (id=3072): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf0300000000000085000000d1fe0000b70000fffffe000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.031344622s ago: executing program 2 (id=3073): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) (async) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003580)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xc}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 811.429833ms ago: executing program 1 (id=3074): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async, rerun: 32) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="a17aad53f37a5c78cb4ac3917ae62211fc0a9660ac7f8c0d537a77be", 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2879380010000100010000000000000000000000ce722bc1d98c1d9b7347c408b04eef50fd7f9899ff3f0457c31988b60b4ad3cec201f14270340bed2c618a32a46d0af2f219e940126e66f9411fb0641fd74dec0a0c338265f90119b4d811d783ef4d6f812f58ce1f2ac9db5b9a2385e576e9dc32e387ffc950ef2f60f7a97ee6f9b890db70d024cd79585941ef00a8e09743686f894900", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) close(0x3) (async, rerun: 64) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000004c0)=0x10) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000080)={r8, 0x2}, &(0x7f0000000100)=0x8) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x800) 761.915621ms ago: executing program 0 (id=3075): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x5f3f}, &(0x7f0000000080)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0xfffffffffffffffd) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20300, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004000000e27f00000100000027940600", @ANYRES32, @ANYBLOB="8000000000000000baae69496071bc09280cc35d000000000f0000000000000075735f5b3e72374bdfba145a2c2d7603d4ea0000c01c18fabf4f37158658f5e6bf7f84c267a95e6c41ba2f9d4708224591c7a72ad0e01d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYBLOB="00160000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000097090100000002816500feff0000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x6, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x2}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @union={0xf, 0x5, 0x0, 0x5, 0x1, 0x4, [{0x3, 0x5}, {0xf, 0x4, 0xa74}, {0x5, 0x0, 0x7ff}, {0xf, 0x5, 0x7}, {0x4, 0x1, 0x5}]}, @func={0xe, 0x0, 0x0, 0xc, 0x4}, @const={0x5, 0x0, 0x0, 0xa, 0x3}, @fwd={0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x1}]}, @union={0xb, 0x1, 0x0, 0x5, 0x1, 0x9, [{0xd, 0x0, 0x8}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x0]}}, &(0x7f0000000980)=""/10, 0xce, 0xa, 0x0, 0x2, 0x10000, @value=r4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0x23, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000ffff000000000000ffffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001866000008000000000000000600000080582000010000008520000002000000181b0000", @ANYRES32=r5, @ANYBLOB="000000000000000085100000f8ffffffb7080000000000007b8af8ff00000000b70800000ed000007b8af0ff00000000040000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000042d4308d62aa390dd722eb411b18a204be0c248ce8ed4247849c32e874407ded8e5a8ec80c451c9b4b97d5a00ce0e61550a2719709b7d5672583677f35d86ed479c2f26b6ed79e14428b9f960eb2e3572499772036c52e283c056f2ad374a74dbc2254969e1b9853399c6d4d09db5837190869d74ee932d05d553e684b2b473a9dbec56308385b880ae68b2c09fc4abd4e1fd3719c6349791f4fdc", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000840)='syzkaller\x00', 0x235, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, r9, 0x8, &(0x7f0000000a00)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0x5, 0x1ff}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x1dd}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000000c0)={r7, 0x0, 0x2, 0x10000}) setsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e24, 0x3, @private2, 0x62}}}, 0x84) 597.544898ms ago: executing program 3 (id=3076): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000002c0)={{r0, &(0x7f0000000040)='bond\x00', 0x90000, &(0x7f00000000c0)={@align=0x2, {0x8, 0xc, 0x63d, 0x5}}, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x785b}, {[0x4b9, 0x8, 0x7, 0x4]}, 0xf87, 0x96, &(0x7f0000000200)=""/150}) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x165000, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000007c0)) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xf7567175e3d43fab}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r4, 0xe10, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) 542.223749ms ago: executing program 0 (id=3077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000100000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000008000340000001", @ANYRESHEX=0x0], 0xd0}, 0x1, 0x0, 0x0, 0x200000d4}, 0x20050800) 261.288372ms ago: executing program 0 (id=3078): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000006000000160302000ee60060bf500000000000001f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d2538808"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) listen(r3, 0x5) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000280)={0x23, 0x2, 0xac, 0x1}, 0x10) connect$phonet_pipe(r4, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f0000001fc0)=ANY=[], 0x0) accept$phonet_pipe(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x1000000, 0xe2, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r10 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r10, 0xbab8) readv(r10, &(0x7f0000000400)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 98.394763ms ago: executing program 3 (id=3079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getuid() sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x568, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x53c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, {0x38, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x13}]}}}, {0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x470, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x460, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BITWISE_XOR={0x2a8, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x6, 0x1, "45eb"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "6ac4f9e4736430976c4d511f526dd1db2d368993d8f3ea46a8a66e8af427a94e8af15ffe6d37df6166a92439a80058322acf60e8f55fdf116848ca1bd62fcf02bbda72c8c90c33a3a3e204e92b1dff00837a407fd98b3ca1131c1920562c9418d8b2f4327c09be245d422378539193dd8c12e2e9e045aa0d8841e6178c793c2beb96cc03fa82565bd8dae0b4011f9090a18eac72899772d22d00225807681f"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "fdfc3f93d9935ada95df9bcc4bec0d4c829b93ee745adb6aa87d9aafeb4a6527fbae4640f765dd5274735e1deca115ad1017949e6fdbecd7fb286f38a74663712c7e00b1d786192b568c119f19764ce081bfadd6087f6b1062d26479b812b084d162d5e5071797220058dc91edef92d4cbb59030203dcce4c361406df0ffa2d78e8b0d171884e1f9fbacf8bae5da75336191d1e9679636ab7de4300e545c91a00802b5448e6d1d68a6fc3fa9e8ed365523f63d7398e52cac56cffe6f0bca6c951f"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x75}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BITWISE_DATA={0x18c, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x57, 0x1, "23cf6b169f02d193cdc69fff99834252bda4e1311739e051497fa97ba38fe4d4f18d351d11e35499e5116c5a0cbdea94bdc0e0e1b50f3287864d2a22aebc7492a5c0abb6ce5d4b849145842cf5bdb327961b7b"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x762}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x590}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) 0s ago: executing program 3 (id=3080): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) read$alg(r0, &(0x7f0000000240)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x6, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000600", @ANYRESDEC=r3, @ANYRESDEC=r2], 0xfcf) kernel console output (not intermixed with test programs): ] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 408.310373][T14349] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2066'. [ 408.498943][ T5623] block nbd0: Receive control failed (result -32) [ 408.578913][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.618458][T14356] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 408.618506][T14356] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 408.652120][T14363] syzkaller0: entered promiscuous mode [ 408.659087][T14363] syzkaller0: entered allmulticast mode [ 408.796553][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 408.797455][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 409.305791][T14378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2073'. [ 409.547068][T14391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2076'. [ 409.547115][T14391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2076'. [ 409.617970][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 409.626418][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 410.336302][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 410.666192][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 410.835076][T14404] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 410.840668][T14404] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 411.243995][T14433] netlink: 'syz.4.2082': attribute type 3 has an invalid length. [ 411.696088][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.862178][T14455] __nla_validate_parse: 1 callbacks suppressed [ 411.868855][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 411.878013][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2088'. [ 411.887887][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'. [ 411.942288][T14457] vlan0: entered allmulticast mode [ 411.947882][T14457] bridge5: entered allmulticast mode [ 411.958663][T14457] bridge5: port 1(erspan0) entered blocking state [ 411.965634][T14457] bridge5: port 1(erspan0) entered disabled state [ 411.972580][T14457] erspan0: entered allmulticast mode [ 411.981936][T14457] erspan0: entered promiscuous mode [ 411.989876][T14457] bridge5: port 1(erspan0) entered blocking state [ 411.990138][T14457] bridge5: port 1(erspan0) entered forwarding state [ 412.007768][T14458] netlink: zone id is out of range [ 412.028394][T14457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2089'. [ 412.238820][T14471] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2092'. [ 412.251270][T14471] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 412.681551][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 412.746179][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.875066][T14493] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20003 [ 412.882048][T14491] ip_tables: iptables: counters copy to user failed while replacing table [ 412.940742][T14479] bond8 (unregistering): Released all slaves [ 413.030847][T14492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.043479][T14492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.055096][T14492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.066451][T14492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.076524][T14492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.112293][T14497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2098'. [ 413.112351][T14497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2098'. [ 413.134477][T14483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.142925][T14483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2095'. [ 413.155672][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2098'. [ 413.435584][T14510] gretap2: entered promiscuous mode [ 416.111651][T14503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.409149][T14538] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 416.792214][T14548] bridge5: entered promiscuous mode [ 416.792264][T14548] bridge5: entered allmulticast mode [ 416.896247][ C0] net_ratelimit: 40 callbacks suppressed [ 416.896302][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.132273][T14565] Bluetooth: hci0: unsupported parameter 1280 [ 417.132319][T14565] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 417.248542][T14571] __nla_validate_parse: 9 callbacks suppressed [ 417.255010][T14571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2114'. [ 417.419761][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 417.448604][T13708] block nbd64: NBD_DISCONNECT [ 417.632514][T14592] mac80211_hwsim hwsim3 wlan1 (unregistering): left allmulticast mode [ 417.632578][T14592] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode [ 417.634749][T14592] bridge0: port 3(wlan1) entered disabled state [ 417.936223][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 417.936358][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.160860][T13708] udevd[13708]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 418.200874][T14602] tap0: tun_chr_ioctl cmd 1074025673 [ 418.457217][T14617] xt_SECMARK: invalid mode: 9 [ 418.986223][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.834191][T14634] macvlan0: entered promiscuous mode [ 420.026100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.449303][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 420.539643][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 420.589001][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 421.091376][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.159822][T14687] bridge0: entered promiscuous mode [ 421.172810][T14687] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.180402][T14687] tipc: Resetting bearer [ 421.193231][T14687] bridge0: port 1(dummy0) entered blocking state [ 421.193414][T14687] bridge0: port 1(dummy0) entered forwarding state [ 421.237087][T14687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.338241][T14687] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 422.096181][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.371992][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'. [ 422.679038][T14754] erspan0: left allmulticast mode [ 422.679093][T14754] erspan0: left promiscuous mode [ 422.679326][T14754] bridge5: port 1(erspan0) entered disabled state [ 422.809678][T14754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.824587][T14764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2161'. [ 422.935716][T14769] netlink: 'syz.1.2165': attribute type 1 has an invalid length. [ 422.947469][T14764] syzkaller1: entered promiscuous mode [ 422.947508][T14764] syzkaller1: entered allmulticast mode [ 422.959685][T14769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 422.959746][T14769] IPv6: NLM_F_CREATE should be set when creating new route [ 422.959772][T14769] IPv6: NLM_F_CREATE should be set when creating new route [ 423.136208][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.902143][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2170'. [ 423.912069][T14789] openvswitch: netlink: Message has 4 unknown bytes. [ 424.176209][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.039855][T14825] nbd: socks must be embedded in a SOCK_ITEM attr [ 425.079975][T14825] netlink: 'syz.3.2178': attribute type 13 has an invalid length. [ 425.080029][T14825] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2178'. [ 425.080058][T14825] : renamed from syz_tun (while UP) [ 425.105011][T14825] : refused to change device tx_queue_len [ 425.105038][T14825] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 425.216138][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.605177][T14841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2184'. [ 425.662348][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'. [ 425.884732][T14851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2183'. [ 425.951664][T14853] tap0: tun_chr_ioctl cmd 2148553947 [ 426.256090][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.965109][T14887] netlink: 'syz.3.2190': attribute type 10 has an invalid length. [ 427.055711][T14896] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2190'. [ 427.071721][T14887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.110286][T14887] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 427.122636][T14896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2190'. [ 427.122663][T14896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2190'. [ 427.296099][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.561722][T14917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2198'. [ 427.562221][T14917] macvlan0: entered promiscuous mode [ 427.882603][T14922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2199'. [ 428.292026][T14931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2202'. [ 428.292079][T14931] openvswitch: netlink: Flow actions attr not present in new flow. [ 428.336092][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.601249][T14929] syzkaller0: entered promiscuous mode [ 428.601303][T14929] syzkaller0: entered allmulticast mode [ 428.920607][T14951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2203'. [ 429.195161][T14959] nbd: must specify a size in bytes for the device [ 429.381657][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.617715][T14973] netlink: 'syz.0.2208': attribute type 2 has an invalid length. [ 430.418577][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.465077][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.016388][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 432.497405][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.977639][T14973] : entered promiscuous mode [ 433.462405][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 433.536203][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.556865][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2218'. [ 434.578148][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.693041][T15044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2227'. [ 434.785241][T15051] tipc: Enabling of bearer rejected, already enabled [ 434.830797][T15044] ip6tnl3: entered allmulticast mode [ 434.831583][T15054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2230'. [ 435.182532][T15061] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 435.182566][T15061] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 435.616203][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.624935][ T9081] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 435.627281][ T9081] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 435.646596][ T6536] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 436.463494][T15102] sctp: [Deprecated]: syz.1.2241 (pid 15102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.463494][T15102] Use struct sctp_sack_info instead [ 436.561614][ T31] audit: type=1804 audit(1788676827.801:14): pid=15104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2242" name="/newroot/451/cgroup.controllers" dev="tmpfs" ino=2327 res=1 errno=0 [ 436.587689][ T6536] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 436.587913][ T6536] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 436.605828][ T31] audit: type=1800 audit(1788676827.851:15): pid=15104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2242" name="cgroup.controllers" dev="tmpfs" ino=2327 res=0 errno=0 [ 436.666179][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.760981][T15107] macvlan0: left promiscuous mode [ 436.801538][T15107] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 436.842726][T15107] vlan2: left allmulticast mode [ 436.851856][T15107] bond0: left allmulticast mode [ 436.851942][T15107] bond_slave_0: left allmulticast mode [ 436.851966][T15107] bond_slave_1: left allmulticast mode [ 436.918233][T15107] veth3: left allmulticast mode [ 436.935311][T15107] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 436.935357][T15107] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 436.935399][T15107] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 437.017065][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2244'. [ 437.033039][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 437.060858][T15111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2244'. [ 437.328718][T15122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2247'. [ 437.380849][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2249'. [ 437.696161][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.637450][T15171] netlink: 'syz.3.2261': attribute type 1 has an invalid length. [ 438.717132][T15179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2263'. [ 438.736276][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.920490][T15171] 8021q: adding VLAN 0 to HW filter on device bond14 [ 438.948707][T15186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2263'. [ 439.056464][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 439.140606][T15181] bond14: (slave veth5): Enslaving as an active interface with a down link [ 439.376370][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 439.776616][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.250664][T15184] bridge0: port 1(dummy0) entered disabled state [ 440.328147][T15184] tipc: Resetting bearer [ 440.816116][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.254195][T15209] netlink: 'syz.3.2268': attribute type 1 has an invalid length. [ 441.433883][T15184] vlan0: left promiscuous mode [ 441.855295][T15184] batman_adv: batadv0: Interface deactivated: gretap1 [ 441.864108][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.339748][T15184] bridge3: left promiscuous mode [ 442.407311][T15184] veth11: left allmulticast mode [ 442.420447][T15184] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 442.429873][T15184] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 442.465481][T15184] vlan2: left allmulticast mode [ 442.472271][T15184] batadv0: left allmulticast mode [ 442.512225][T15184] bond9: left allmulticast mode [ 442.554258][T15184] ip6tnl2: left allmulticast mode [ 442.646275][ T1170] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.646361][ T1170] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.646959][ T1170] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.646986][ T1170] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.647021][ T1170] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.647043][ T1170] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.647075][ T1170] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.647097][ T1170] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.751216][T15223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2269'. [ 442.764329][T15209] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 442.778642][T15211] veth7: entered allmulticast mode [ 442.807982][T15224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2269'. [ 442.896617][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.012488][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'. [ 443.344347][T15247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2274'. [ 443.615810][T15252] FAULT_INJECTION: forcing a failure. [ 443.615810][T15252] name failslab, interval 1, probability 0, space 0, times 0 [ 443.630763][T15252] CPU: 1 UID: 0 PID: 15252 Comm: syz.2.2276 Not tainted syzkaller #0 PREEMPT(full) [ 443.630795][T15252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 443.630807][T15252] Call Trace: [ 443.630815][T15252] [ 443.630824][T15252] dump_stack_lvl+0xe8/0x150 [ 443.630864][T15252] should_fail_ex+0x410/0x560 [ 443.631005][T15252] should_failslab+0xa8/0x100 [ 443.631035][T15252] __kmalloc_noprof+0xfe/0x720 [ 443.631066][T15252] ? __kmalloc_cache_noprof+0x14d/0x600 [ 443.631096][T15252] ? alloc_pipe_info+0x1f9/0x4c0 [ 443.631136][T15252] ? alloc_pipe_info+0x1f9/0x4c0 [ 443.631163][T15252] alloc_pipe_info+0x1f9/0x4c0 [ 443.631187][T15252] splice_direct_to_actor+0xa41/0xcb0 [ 443.631237][T15252] ? lock_acquire+0x115/0x350 [ 443.631268][T15252] ? __pfx_aa_file_perm+0x10/0x10 [ 443.631296][T15252] ? __pfx_direct_splice_actor+0x10/0x10 [ 443.631324][T15252] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 443.631364][T15252] do_splice_direct+0x195/0x290 [ 443.631396][T15252] ? __pfx_do_splice_direct+0x10/0x10 [ 443.631425][T15252] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 443.631457][T15252] ? bpf_lsm_file_permission+0x9/0x20 [ 443.631487][T15252] ? security_file_permission+0x75/0x260 [ 443.631568][T15252] ? rw_verify_area+0x203/0x4c0 [ 443.631603][T15252] do_sendfile+0x52e/0x7c0 [ 443.631637][T15252] ? __pfx_do_sendfile+0x10/0x10 [ 443.631662][T15252] ? __fget_files+0x3a2/0x420 [ 443.631701][T15252] __se_sys_sendfile64+0x144/0x1a0 [ 443.631729][T15252] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 443.631765][T15252] do_syscall_64+0x166/0x520 [ 443.631798][T15252] ? trace_irq_disable+0x3b/0x140 [ 443.631819][T15252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.631841][T15252] ? clear_bhb_loop+0x70/0xc0 [ 443.631867][T15252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.631888][T15252] RIP: 0033:0x7f38bf79e159 [ 443.631910][T15252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.631928][T15252] RSP: 002b:00007f38c058a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 443.631953][T15252] RAX: ffffffffffffffda RBX: 00007f38bfa26090 RCX: 00007f38bf79e159 [ 443.631968][T15252] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 443.631980][T15252] RBP: 00007f38c058a090 R08: 0000000000000000 R09: 0000000000000000 [ 443.631994][T15252] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 443.632007][T15252] R13: 00007f38bfa26128 R14: 00007f38bfa26090 R15: 00007ffea6212da8 [ 443.632042][T15252] [ 443.758851][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2278'. [ 443.791784][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2278'. [ 443.838849][T15256] pimreg: entered allmulticast mode [ 443.936266][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 444.035693][T15267] tipc: MTU too low for tipc bearer [ 444.740793][T15284] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 444.740935][T15284] syzkaller1: linktype set to 1 [ 444.976078][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 445.184628][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2290'. [ 445.694086][T15311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2291'. [ 445.751140][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2292'. [ 445.833997][T15319] FAULT_INJECTION: forcing a failure. [ 445.833997][T15319] name failslab, interval 1, probability 0, space 0, times 0 [ 445.834059][T15319] CPU: 1 UID: 0 PID: 15319 Comm: syz.1.2293 Not tainted syzkaller #0 PREEMPT(full) [ 445.834082][T15319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.834093][T15319] Call Trace: [ 445.834099][T15319] [ 445.834107][T15319] dump_stack_lvl+0xe8/0x150 [ 445.834138][T15319] should_fail_ex+0x410/0x560 [ 445.834170][T15319] ? __alloc_skb+0x1db/0x7a0 [ 445.834293][T15319] should_failslab+0xa8/0x100 [ 445.834317][T15319] ? __alloc_skb+0x1db/0x7a0 [ 445.834342][T15319] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 445.834372][T15319] ? __alloc_skb+0x18d/0x7a0 [ 445.834400][T15319] ? __alloc_skb+0x1db/0x7a0 [ 445.834432][T15319] __alloc_skb+0x1db/0x7a0 [ 445.834463][T15319] alloc_skb_with_frags+0xc6/0x760 [ 445.834509][T15319] ? ktime_get+0x1f5/0x220 [ 445.834534][T15319] sock_alloc_send_pskb+0x878/0x990 [ 445.834574][T15319] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 445.834601][T15319] ? llc_ui_sendmsg+0x433/0xe30 [ 445.834670][T15319] ? llc_ui_sendmsg+0x433/0xe30 [ 445.834692][T15319] ? __local_bh_enable_ip+0xd6/0x140 [ 445.834738][T15319] llc_ui_sendmsg+0x459/0xe30 [ 445.834778][T15319] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 445.834806][T15319] ? apparmor_socket_sendmsg+0x98/0x360 [ 445.834868][T15319] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 445.834889][T15319] sock_sendmsg_nosec+0x13a/0x180 [ 445.834918][T15319] sock_sendmsg+0x1ca/0x2d0 [ 445.834966][T15319] ? __pfx_sock_sendmsg+0x10/0x10 [ 445.835002][T15319] ? __asan_memset+0x22/0x50 [ 445.835029][T15319] ? iov_iter_bvec+0xb8/0x180 [ 445.835083][T15319] splice_to_socket+0xb5e/0x12a0 [ 445.835130][T15319] ? __pfx_splice_to_socket+0x10/0x10 [ 445.835179][T15319] ? shmem_file_splice_read+0xa2b/0xb90 [ 445.835230][T15319] ? __pfx_splice_to_socket+0x10/0x10 [ 445.835256][T15319] direct_splice_actor+0x101/0x160 [ 445.835286][T15319] splice_direct_to_actor+0x57b/0xcb0 [ 445.835330][T15319] ? __pfx_direct_splice_actor+0x10/0x10 [ 445.835355][T15319] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 445.835391][T15319] do_splice_direct+0x195/0x290 [ 445.835419][T15319] ? __pfx_do_splice_direct+0x10/0x10 [ 445.835445][T15319] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 445.835474][T15319] ? bpf_lsm_file_permission+0x9/0x20 [ 445.835496][T15319] ? security_file_permission+0x75/0x260 [ 445.835523][T15319] ? rw_verify_area+0x203/0x4c0 [ 445.835552][T15319] do_sendfile+0x52e/0x7c0 [ 445.835582][T15319] ? __pfx_do_sendfile+0x10/0x10 [ 445.835603][T15319] ? __fget_files+0x3a2/0x420 [ 445.835637][T15319] __se_sys_sendfile64+0x144/0x1a0 [ 445.835659][T15319] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 445.835691][T15319] do_syscall_64+0x166/0x520 [ 445.835717][T15319] ? trace_irq_disable+0x3b/0x140 [ 445.835735][T15319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.835754][T15319] ? clear_bhb_loop+0x70/0xc0 [ 445.835777][T15319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.835796][T15319] RIP: 0033:0x7f71f3d9e159 [ 445.835815][T15319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.835832][T15319] RSP: 002b:00007f71f4d18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 445.835863][T15319] RAX: ffffffffffffffda RBX: 00007f71f4026090 RCX: 00007f71f3d9e159 [ 445.835877][T15319] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 445.835889][T15319] RBP: 00007f71f4d18090 R08: 0000000000000000 R09: 0000000000000000 [ 445.835901][T15319] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 445.835913][T15319] R13: 00007f71f4026128 R14: 00007f71f4026090 R15: 00007ffc63695568 [ 445.835943][T15319] [ 445.879097][T15317] ip6t_hbh: too many supported opts specified [ 446.019984][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.746211][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 446.775958][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2297'. [ 446.971932][T15318] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2291'. [ 447.056194][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.433676][T15350] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2301'. [ 447.752376][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2305'. [ 447.993660][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 448.106204][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.503575][T15390] macsec3: entered allmulticast mode [ 448.506270][T15390] veth1_macvtap: entered allmulticast mode [ 448.518366][T15390] veth1_macvtap: left allmulticast mode [ 448.990904][T15411] sctp: [Deprecated]: syz.2.2311 (pid 15411) Use of int in max_burst socket option. [ 448.990904][T15411] Use struct sctp_assoc_value instead [ 449.146358][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.185513][T15418] __nla_validate_parse: 1 callbacks suppressed [ 449.192595][T15418] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2314'. [ 449.884265][T15435] xt_l2tp: missing protocol rule (udp|l2tpip) [ 449.923172][T15435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2318'. [ 449.967768][T15435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2318'. [ 449.983830][T15437] netlink: 'syz.3.2319': attribute type 1 has an invalid length. [ 450.003166][T15439] netlink: 'syz.3.2319': attribute type 1 has an invalid length. [ 450.176299][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.187657][T15445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2319'. [ 450.188182][T15446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2319'. [ 450.333034][T15442] bond15: (slave geneve4): making interface the new active one [ 450.352415][T15442] bond15: (slave geneve4): Enslaving as an active interface with an up link [ 450.368269][ T6030] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 450.369074][ T6030] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 450.369116][ T6030] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 450.369149][ T6030] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 450.395380][T15445] 8021q: adding VLAN 0 to HW filter on device bond15 [ 450.871307][T15458] tc_dump_action: action bad kind [ 451.016287][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2321'. [ 451.079499][T15468] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 451.216514][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.397195][T15475] bond3: entered promiscuous mode [ 451.397242][T15475] bond3: entered allmulticast mode [ 451.578020][T15482] tipc: Enabled bearer , priority 0 [ 451.775705][T15482] syzkaller0: entered promiscuous mode [ 451.782437][T15482] syzkaller0: entered allmulticast mode [ 451.784559][T15495] ip_tables: iptables: counters copy to user failed while replacing table [ 451.798454][T15482] tipc: Resetting bearer [ 451.845355][T15500] netlink: 'syz.4.2328': attribute type 2 has an invalid length. [ 451.864614][T15492] netlink: 'syz.4.2328': attribute type 11 has an invalid length. [ 451.864666][T15492] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2328'. [ 451.872611][T15491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.256241][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.507300][ T9077] tipc: Resetting bearer [ 453.306183][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.346179][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 455.376206][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.421207][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 457.221179][T15513] netlink: 'syz.0.2332': attribute type 7 has an invalid length. [ 457.229367][T15513] netlink: 'syz.0.2332': attribute type 8 has an invalid length. [ 457.237397][T15513] netlink: 'syz.0.2332': attribute type 13 has an invalid length. [ 457.258885][T15518] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 457.258956][T15518] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 457.308054][T15479] tipc: Resetting bearer [ 457.332106][T15479] tipc: Disabling bearer [ 457.343917][T15533] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2333'. [ 457.345122][T15533] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2333'. [ 457.456185][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 457.677985][T15552] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 457.678038][T15552] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2334'. [ 457.804517][T15555] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 457.955165][T15561] syzkaller0: entered promiscuous mode [ 457.965755][T15561] syzkaller0: entered allmulticast mode [ 457.991770][T15557] tipc: Enabled bearer , priority 0 [ 458.185342][T15561] tipc: Resetting bearer [ 458.202755][T15556] tipc: Resetting bearer [ 458.318593][T15556] tipc: Disabling bearer [ 458.506127][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.799669][T15581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2346'. [ 458.936670][T15586] x_tables: duplicate underflow at hook 1 [ 459.219872][T15592] netlink: 'syz.0.2350': attribute type 11 has an invalid length. [ 459.254784][T15598] : renamed from bond_slave_0 (while UP) [ 459.293196][T15601] netlink: 'syz.4.2353': attribute type 9 has an invalid length. [ 459.391942][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2353'. [ 459.439570][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2354'. [ 459.536090][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 460.148479][T15628] FAULT_INJECTION: forcing a failure. [ 460.148479][T15628] name failslab, interval 1, probability 0, space 0, times 0 [ 460.148543][T15628] CPU: 0 UID: 0 PID: 15628 Comm: syz.4.2359 Not tainted syzkaller #0 PREEMPT(full) [ 460.148567][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.148579][T15628] Call Trace: [ 460.148586][T15628] [ 460.148593][T15628] dump_stack_lvl+0xe8/0x150 [ 460.148625][T15628] should_fail_ex+0x410/0x560 [ 460.148657][T15628] ? __alloc_skb+0x1db/0x7a0 [ 460.148684][T15628] should_failslab+0xa8/0x100 [ 460.148706][T15628] ? __alloc_skb+0x1db/0x7a0 [ 460.148730][T15628] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 460.148756][T15628] ? __alloc_skb+0x18d/0x7a0 [ 460.148782][T15628] ? __alloc_skb+0x1db/0x7a0 [ 460.148813][T15628] __alloc_skb+0x1db/0x7a0 [ 460.148843][T15628] alloc_skb_with_frags+0xc6/0x760 [ 460.148874][T15628] sock_alloc_send_pskb+0x878/0x990 [ 460.148913][T15628] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 460.148939][T15628] ? llc_ui_sendmsg+0x433/0xe30 [ 460.148961][T15628] ? llc_ui_sendmsg+0x433/0xe30 [ 460.148982][T15628] ? __local_bh_enable_ip+0xd6/0x140 [ 460.149010][T15628] llc_ui_sendmsg+0x459/0xe30 [ 460.149049][T15628] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 460.149075][T15628] ? apparmor_socket_sendmsg+0x98/0x360 [ 460.149104][T15628] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 460.149124][T15628] sock_sendmsg_nosec+0x13a/0x180 [ 460.149151][T15628] sock_sendmsg+0x1ca/0x2d0 [ 460.149181][T15628] ? __pfx_sock_sendmsg+0x10/0x10 [ 460.149216][T15628] ? __asan_memset+0x22/0x50 [ 460.149242][T15628] ? iov_iter_bvec+0xb8/0x180 [ 460.149263][T15628] splice_to_socket+0xb5e/0x12a0 [ 460.149309][T15628] ? __pfx_splice_to_socket+0x10/0x10 [ 460.149356][T15628] ? shmem_file_splice_read+0xa2b/0xb90 [ 460.149400][T15628] ? __pfx_splice_to_socket+0x10/0x10 [ 460.149425][T15628] direct_splice_actor+0x101/0x160 [ 460.149454][T15628] splice_direct_to_actor+0x57b/0xcb0 [ 460.149506][T15628] ? __pfx_direct_splice_actor+0x10/0x10 [ 460.149531][T15628] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 460.149566][T15628] do_splice_direct+0x195/0x290 [ 460.149593][T15628] ? __pfx_do_splice_direct+0x10/0x10 [ 460.149618][T15628] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 460.149646][T15628] ? bpf_lsm_file_permission+0x9/0x20 [ 460.149668][T15628] ? security_file_permission+0x75/0x260 [ 460.149694][T15628] ? rw_verify_area+0x203/0x4c0 [ 460.149722][T15628] do_sendfile+0x52e/0x7c0 [ 460.149751][T15628] ? __pfx_do_sendfile+0x10/0x10 [ 460.149771][T15628] ? __fget_files+0x3a2/0x420 [ 460.149804][T15628] __se_sys_sendfile64+0x144/0x1a0 [ 460.149827][T15628] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 460.149858][T15628] do_syscall_64+0x166/0x520 [ 460.149883][T15628] ? trace_irq_disable+0x3b/0x140 [ 460.149900][T15628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.149919][T15628] ? clear_bhb_loop+0x70/0xc0 [ 460.149942][T15628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.149960][T15628] RIP: 0033:0x7f20c259e159 [ 460.149978][T15628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.149994][T15628] RSP: 002b:00007f20c3504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 460.150016][T15628] RAX: ffffffffffffffda RBX: 00007f20c2826090 RCX: 00007f20c259e159 [ 460.150030][T15628] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 460.150040][T15628] RBP: 00007f20c3504090 R08: 0000000000000000 R09: 0000000000000000 [ 460.150052][T15628] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 460.150064][T15628] R13: 00007f20c2826128 R14: 00007f20c2826090 R15: 00007fffcca25c98 [ 460.150094][T15628] [ 460.586139][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 460.902701][T15633] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 460.902798][T15633] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 460.905029][T15633] tipc: Resetting bearer [ 460.936631][T15638] gtp1: entered promiscuous mode [ 460.936681][T15638] gtp1: entered allmulticast mode [ 461.423228][T15654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2367'. [ 461.456227][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 461.616087][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 462.593495][T15693] netlink: 'syz.2.2378': attribute type 10 has an invalid length. [ 462.621351][T15699] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 462.640509][T15699] bond10 (unregistering): Released all slaves [ 462.656314][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 462.932414][T15714] nft_compat: unsupported protocol 1 [ 463.077654][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2382'. [ 463.128249][T15716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2382'. [ 463.128570][T15703] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 463.162426][T15703] bond10 (unregistering): Released all slaves [ 463.685253][T15730] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2385'. [ 463.688287][T15729] erspan0: entered promiscuous mode [ 463.688451][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 463.706169][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 463.805340][T15740] netlink: 'syz.1.2389': attribute type 4 has an invalid length. [ 464.345550][T15761] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2396'. [ 464.399479][T15761] bond0: entered promiscuous mode [ 464.436923][T15761] bond0: left promiscuous mode [ 464.523331][T15769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2397'. [ 464.643346][T15769] vlan3: entered promiscuous mode [ 464.643388][T15769] : entered promiscuous mode [ 464.736226][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 464.890324][T15777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.209982][T15785] syzkaller0: entered promiscuous mode [ 465.210029][T15785] syzkaller0: entered allmulticast mode [ 465.386559][T15788] netlink: 'syz.0.2401': attribute type 2 has an invalid length. [ 465.635260][T15794] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2402'. [ 465.776180][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 466.075801][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2407'. [ 466.816109][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 466.848756][T15831] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 466.867368][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.886499][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.894784][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.903697][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.910681][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.920940][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.945503][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.950392][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.958380][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.962760][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.967528][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.975697][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.988390][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.008773][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.029283][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.041103][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.052758][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.064730][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.076906][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.088653][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.109531][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.114713][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.118911][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.124315][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.129157][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.135271][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.143127][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.145924][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.151529][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.154139][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.162166][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.170700][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.186960][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.856756][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 468.001512][T15870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2424'. [ 468.013265][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2425'. [ 468.025481][T15870] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 468.328138][T15881] sctp: [Deprecated]: syz.0.2428 (pid 15881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.328138][T15881] Use struct sctp_sack_info instead [ 468.363657][T15890] sctp: [Deprecated]: syz.0.2428 (pid 15890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.363657][T15890] Use struct sctp_sack_info instead [ 468.387714][T15877] netlink: 'syz.0.2428': attribute type 3 has an invalid length. [ 468.410036][T15877] netlink: 'syz.0.2428': attribute type 3 has an invalid length. [ 468.529127][T15879] bond16: Removing last arp target with arp_interval on [ 468.531759][T15895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2430'. [ 468.612640][T15882] bond17: Removing last arp target with arp_interval on [ 468.620191][T15881] netlink: 'syz.0.2428': attribute type 3 has an invalid length. [ 468.620482][T15881] netlink: 'syz.0.2428': attribute type 3 has an invalid length. [ 468.896089][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 468.920664][T15912] xt_ecn: cannot match TCP bits for non-tcp packets [ 469.050905][T15911] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 469.070764][T15911] batman_adv: batadv0: Adding interface: gretap4 [ 469.077479][T15911] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.103696][T15911] batman_adv: batadv0: Interface activated: gretap4 [ 469.936108][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 470.004734][T15939] netlink: 'syz.4.2440': attribute type 1 has an invalid length. [ 470.215480][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 470.225136][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2438'. [ 470.226306][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2440'. [ 470.243716][T15955] unsupported nlmsg_type 40 [ 470.342986][T15939] bond10: entered promiscuous mode [ 470.343535][T15939] 8021q: adding VLAN 0 to HW filter on device bond10 [ 470.430686][T15943] 8021q: adding VLAN 0 to HW filter on device bond10 [ 470.440094][T15943] bond10: (slave gre2): The slave device specified does not support setting the MAC address [ 470.450629][T15943] bond10: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 470.473246][T15943] bond10: (slave gre2): making interface the new active one [ 470.480959][T15943] gre2: entered promiscuous mode [ 470.487981][T15943] bond10: (slave gre2): Enslaving as an active interface with an up link [ 470.567122][T15954] dvmrp1: entered allmulticast mode [ 470.602995][T15953] bond10 (unregistering): (slave gre2): Releasing backup interface [ 470.603052][T15953] gre2: left promiscuous mode [ 470.631146][T15953] bond10 (unregistering): Released all slaves [ 470.976086][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 471.065563][T15972] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.066187][T15972] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.075583][T15972] bridge0: entered allmulticast mode [ 471.387827][T15986] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 471.387870][T15986] CPU: 1 UID: 0 PID: 15986 Comm: syz.2.2447 Not tainted syzkaller #0 PREEMPT(full) [ 471.387896][T15986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.387910][T15986] Call Trace: [ 471.387918][T15986] [ 471.387929][T15986] dump_stack_lvl+0xe8/0x150 [ 471.387967][T15986] sysfs_warn_dup+0x8e/0xa0 [ 471.388050][T15986] sysfs_do_create_link_sd+0xc0/0x110 [ 471.388090][T15986] device_add_class_symlinks+0x1cf/0x240 [ 471.388232][T15986] device_add+0x467/0xb80 [ 471.388269][T15986] wiphy_register+0x1fc8/0x2ff0 [ 471.388367][T15986] ? __pfx_wiphy_register+0x10/0x10 [ 471.388397][T15986] ? __pfx_netdev_run_todo+0x10/0x10 [ 471.388465][T15986] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 471.388539][T15986] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 471.388619][T15986] ieee80211_register_hw+0x3d3d/0x4a50 [ 471.388706][T15986] ? ieee80211_register_hw+0x1941/0x4a50 [ 471.388768][T15986] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 471.388805][T15986] ? __asan_memset+0x22/0x50 [ 471.388837][T15986] ? __hrtimer_setup+0x1b7/0x260 [ 471.388865][T15986] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 471.388939][T15986] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 471.388999][T15986] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 471.389051][T15986] ? kstrndup+0xbd/0x160 [ 471.389081][T15986] ? kstrndup+0xbd/0x160 [ 471.389105][T15986] hwsim_new_radio_nl+0xd8b/0xf90 [ 471.389159][T15986] genl_family_rcv_msg_doit+0x233/0x340 [ 471.389258][T15986] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 471.389308][T15986] ? bpf_lsm_capable+0x9/0x20 [ 471.389339][T15986] ? security_capable+0x7e/0x2c0 [ 471.389371][T15986] genl_rcv_msg+0x614/0x7a0 [ 471.389413][T15986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.389445][T15986] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 471.389480][T15986] ? __pfx_ref_tracker_free+0x10/0x10 [ 471.389549][T15986] netlink_rcv_skb+0x226/0x4a0 [ 471.389577][T15986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.389612][T15986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.389659][T15986] ? down_read+0x2be/0x330 [ 471.389709][T15986] genl_rcv+0x28/0x40 [ 471.389738][T15986] netlink_unicast+0x7bd/0x940 [ 471.389777][T15986] netlink_sendmsg+0x813/0xb40 [ 471.389815][T15986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.389852][T15986] ? apparmor_socket_sendmsg+0x98/0x360 [ 471.389890][T15986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.389916][T15986] sock_sendmsg_nosec+0x13a/0x180 [ 471.389949][T15986] ____sys_sendmsg+0x54e/0x850 [ 471.389981][T15986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.390018][T15986] ? import_iovec+0x73/0xa0 [ 471.390046][T15986] ___sys_sendmsg+0x2a5/0x360 [ 471.390069][T15986] ? __lock_acquire+0x6df/0x2e50 [ 471.390097][T15986] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.390128][T15986] ? futex_wait+0x2a2/0x390 [ 471.390212][T15986] ? __fget_files+0x2a/0x420 [ 471.390249][T15986] ? __fget_files+0x3a2/0x420 [ 471.390291][T15986] __x64_sys_sendmsg+0x1b1/0x290 [ 471.390320][T15986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.390371][T15986] do_syscall_64+0x166/0x520 [ 471.390401][T15986] ? trace_irq_disable+0x3b/0x140 [ 471.390422][T15986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.390444][T15986] ? clear_bhb_loop+0x70/0xc0 [ 471.390471][T15986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.390493][T15986] RIP: 0033:0x7f38bf79e159 [ 471.390515][T15986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.390534][T15986] RSP: 002b:00007f38c05ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.390560][T15986] RAX: ffffffffffffffda RBX: 00007f38bfa25fa0 RCX: 00007f38bf79e159 [ 471.390577][T15986] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 471.390591][T15986] RBP: 00007f38bf835024 R08: 0000000000000000 R09: 0000000000000000 [ 471.390605][T15986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.390618][T15986] R13: 00007f38bfa26038 R14: 00007f38bfa25fa0 R15: 00007ffea6212da8 [ 471.390657][T15986] [ 471.970080][T15999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2451'. [ 472.016084][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 472.535402][T16025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2457'. [ 472.889157][T16047] vlan0: entered promiscuous mode [ 472.889369][T16047] vlan0: entered allmulticast mode [ 472.889384][T16047] veth0_vlan: entered allmulticast mode [ 472.924624][T16039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2461'. [ 472.924686][T16039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2461'. [ 472.943290][T16046] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2465'. [ 473.056197][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 473.127155][T16048] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2465'. [ 473.397413][T16060] openvswitch: netlink: Duplicate or invalid key (type 0). [ 473.640864][T16076] __nla_validate_parse: 1 callbacks suppressed [ 473.640932][T16076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2472'. [ 473.682167][T16087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2476'. [ 473.706996][T16088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2476'. [ 473.810582][T16083] netlink: 'syz.1.2474': attribute type 1 has an invalid length. [ 473.899470][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2476'. [ 474.098498][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 474.134205][T16108] syzkaller0: entered promiscuous mode [ 474.134248][T16108] syzkaller0: entered allmulticast mode [ 474.443049][T16117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.074624][T16138] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2482'. [ 475.146087][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 476.176775][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 476.239469][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2485'. [ 476.249377][T16156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2485'. [ 476.259511][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2485'. [ 477.216079][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 477.355109][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'. [ 477.369494][T16192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2492'. [ 478.266223][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 478.919690][T16233] IPVS: set_ctl: invalid protocol: 58 172.20.20.53:20003 [ 479.296191][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.571753][T16255] netlink: zone id is out of range [ 479.571790][T16255] netlink: zone id is out of range [ 479.571863][T16255] netlink: zone id is out of range [ 479.571878][T16255] netlink: zone id is out of range [ 479.571919][T16255] netlink: zone id is out of range [ 479.572058][T16255] netlink: zone id is out of range [ 479.572071][T16255] netlink: zone id is out of range [ 479.572245][T16255] netlink: zone id is out of range [ 479.572261][T16255] netlink: zone id is out of range [ 482.946507][T16241] syzkaller1: entered allmulticast mode [ 483.171240][T16263] __nla_validate_parse: 1 callbacks suppressed [ 483.171551][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'. [ 483.171584][T16263] netlink: 'syz.0.2510': attribute type 30 has an invalid length. [ 483.171599][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2510'. [ 483.273672][T16268] netlink: 'syz.2.2511': attribute type 2 has an invalid length. [ 483.410862][T16268] : entered promiscuous mode [ 483.747402][T16288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2513'. [ 483.780749][T16288] vlan5: entered promiscuous mode [ 483.780807][T16288] gretap0: entered promiscuous mode [ 483.919343][T16294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2514'. [ 483.932418][T16294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2514'. [ 483.932475][T16294] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2514'. [ 484.414811][T16310] netlink: 'syz.1.2518': attribute type 1 has an invalid length. [ 484.479970][T16313] netlink: 'syz.1.2518': attribute type 1 has an invalid length. [ 484.506099][ C0] net_ratelimit: 5 callbacks suppressed [ 484.506139][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.555075][T16310] bond8: entered promiscuous mode [ 484.556888][T16310] 8021q: adding VLAN 0 to HW filter on device bond8 [ 484.604531][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2516'. [ 484.965438][T16328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2523'. [ 485.029035][T16336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2523'. [ 485.029102][T16336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2523'. [ 485.403084][T16328] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.403430][T16328] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.536110][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 486.009600][T16328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.051159][T16328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.391770][T16366] xt_cgroup: path and classid specified [ 486.391987][T16366] xt_cgroup: path and classid specified [ 486.392115][T16366] xt_cgroup: path and classid specified [ 486.393837][T16366] xt_cgroup: path and classid specified [ 486.393956][T16366] xt_cgroup: path and classid specified [ 486.394066][T16366] xt_cgroup: path and classid specified [ 486.394179][T16366] xt_cgroup: path and classid specified [ 486.394291][T16366] xt_cgroup: path and classid specified [ 486.394401][T16366] xt_cgroup: path and classid specified [ 486.394511][T16366] xt_cgroup: path and classid specified [ 486.576379][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.382342][T16328] batman_adv: batadv0: Interface deactivated: gretap4 [ 487.447867][ T143] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 487.447936][ T143] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.447979][ T143] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 487.448203][ T9078] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 487.448228][ T9078] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.448250][ T9078] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 487.448284][ T9078] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 487.448307][ T9078] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.448329][ T9078] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 487.448362][ T9078] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 487.448385][ T9078] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.448407][ T9078] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 487.517417][T16366] smc: adding net device vlan1 with user defined pnetid SYZ2 [ 487.616288][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.724214][T16372] netlink: 'syz.4.2536': attribute type 83 has an invalid length. [ 487.889972][T16383] netlink: 'syz.3.2535': attribute type 5 has an invalid length. [ 487.907112][T16386] netlink: 'syz.3.2535': attribute type 5 has an invalid length. [ 487.926267][ T1409] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.926344][ T1409] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.926402][ T1409] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.926445][ T1409] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.952424][T16376] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 488.095467][T16393] netlink: 'syz.0.2533': attribute type 10 has an invalid length. [ 488.191542][T16405] __nla_validate_parse: 8 callbacks suppressed [ 488.216906][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2543'. [ 488.285257][T16376] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 488.285441][T16376] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 488.297836][T16376] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 488.298008][T16376] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 488.298149][T16376] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 488.298283][T16376] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 488.298852][T16376] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 488.298990][T16376] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 488.299153][T16376] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 488.299288][T16376] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 488.305378][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2542'. [ 488.656116][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.696176][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.888980][T16467] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20002 [ 490.622826][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2564'. [ 490.671477][T16502] ip6gre1: entered promiscuous mode [ 490.681183][T16502] ip6gre1: entered allmulticast mode [ 490.736081][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.863310][T16507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.873323][ T6030] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.877152][ T6030] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.891720][T16512] bond4: entered allmulticast mode [ 490.894894][T16512] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2565'. [ 490.898451][ T6536] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.997526][T16507] bond4: (slave ip6gretap1): making interface the new active one [ 490.997568][T16507] ip6gretap1: entered allmulticast mode [ 491.006654][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.011359][T16507] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 491.366399][ T6536] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.373796][T16529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2570'. [ 491.687677][T16534] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2572'. [ 491.776203][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.158996][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'. [ 492.215628][T16552] tipc: Failed to remove unknown binding: 66,1,1/3758096386:3731638944/3731638946 [ 492.230765][T16552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2577'. [ 492.593279][T16574] bond10: entered promiscuous mode [ 492.601467][T16574] bond10: entered allmulticast mode [ 492.607789][T16574] 8021q: adding VLAN 0 to HW filter on device bond10 [ 492.721968][T16567] lo speed is unknown, defaulting to 1000 [ 492.816575][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.822965][T16567] lo speed is unknown, defaulting to 1000 [ 492.872907][T16567] lo speed is unknown, defaulting to 1000 [ 493.856075][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.895213][T15217] lo speed is unknown, defaulting to 1000 [ 493.901559][T16567] infiniband sz1: set down [ 493.910109][T16567] infiniband sz1: added lo [ 493.926648][T16567] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 493.933191][T16567] infiniband sz1: Couldn't open port 1 [ 493.942670][T16567] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 493.942708][T16567] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 493.942745][T16567] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 494.003721][T16615] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2590'. [ 494.020989][T16616] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2590'. [ 494.057780][T16567] RDS/IB: sz1: added [ 494.062608][T16567] smc: adding ib device sz1 with port count 1 [ 494.071040][T16567] smc: ib device sz1 port 1 has no pnetid [ 494.082378][T15217] lo speed is unknown, defaulting to 1000 [ 494.121512][T16567] lo speed is unknown, defaulting to 1000 [ 494.304128][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 494.313377][T16622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2592'. [ 494.878170][T16567] lo speed is unknown, defaulting to 1000 [ 494.906119][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.097979][T16646] openvswitch: netlink: Multiple metadata blocks provided [ 495.146137][ T9078] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.238642][T16648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2599'. [ 495.296217][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 495.424201][T16653] sock: sock_set_timeout: `syz.0.2601' (pid 16653) tries to set negative timeout [ 495.522986][T16632] lo speed is unknown, defaulting to 1000 [ 495.709132][T16658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2603'. [ 495.946178][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.960572][T16642] lo speed is unknown, defaulting to 1000 [ 495.988321][T16663] netlink: 558 bytes leftover after parsing attributes in process `syz.0.2605'. [ 496.553663][T16567] lo speed is unknown, defaulting to 1000 [ 496.656841][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 496.954815][T16567] lo speed is unknown, defaulting to 1000 [ 496.976155][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 497.244915][T16567] lo speed is unknown, defaulting to 1000 [ 498.016129][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 498.205525][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'. [ 498.314548][T16697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2613'. [ 498.315285][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'. [ 498.851074][T16703] lo speed is unknown, defaulting to 1000 [ 499.056066][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.685422][T16735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2623'. [ 499.711240][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2623'. [ 499.748584][T16735] hsr_slave_0: left promiscuous mode [ 499.759413][T16735] hsr_slave_1: left promiscuous mode [ 500.106227][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 500.786688][T16766] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2633'. [ 501.136163][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 501.184571][T16779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 501.184615][T16779] IPv6: NLM_F_CREATE should be set when creating new route [ 501.184682][T16779] IPv6: NLM_F_CREATE should be set when creating new route [ 502.176128][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.326044][T16821] xt_IDLETIMER: timeout value is zero [ 502.360395][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2647'. [ 502.371687][T16825] xt_TCPMSS: Only works on TCP SYN packets [ 502.489389][T16828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2647'. [ 502.489444][T16828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2647'. [ 502.500548][T16830] validate_nla: 6 callbacks suppressed [ 502.500567][T16830] netlink: 'syz.2.2646': attribute type 10 has an invalid length. [ 502.823132][T16838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2649'. [ 502.823201][T16838] bond0: ARP target 0.0.0.2 is already present [ 502.823244][T16838] bond0: option arp_ip_target: invalid value (33554432) [ 502.873348][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2650'. [ 502.928033][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2650'. [ 503.216240][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 503.599863][T16868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2659'. [ 503.788726][ T9077] IPVS: starting estimator thread 0... [ 503.886441][T16884] IPVS: using max 25 ests per chain, 60000 per kthread [ 504.256205][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 504.336258][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 504.711545][T16917] __nla_validate_parse: 3 callbacks suppressed [ 504.723233][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 505.171797][T16933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2674'. [ 505.296200][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 505.870337][T16964] netlink: 'syz.1.2681': attribute type 10 has an invalid length. [ 505.870382][T16964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2681'. [ 506.336067][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 506.345200][T16983] netlink: 'syz.2.2684': attribute type 83 has an invalid length. [ 506.968736][T15221] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 507.376202][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 507.673679][T17022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2696'. [ 507.777320][ T5748] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 507.801849][T17027] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2695'. [ 507.868618][T17036] IPv6: Can't replace route, no match found [ 507.868875][T17036] IPv6: Can't replace route, no match found [ 508.124182][T17046] netlink: 'syz.2.2699': attribute type 1 has an invalid length. [ 508.165833][T17049] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2701'. [ 508.170278][T17048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2702'. [ 508.349815][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 508.416098][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 509.073526][T17057] lo speed is unknown, defaulting to 1000 [ 509.152462][T17072] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2710'. [ 509.456354][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 510.506069][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 511.092266][T15531] udevd[15531]: setting mode of /dev/rfcomm2 to 020660 failed: No such file or directory [ 511.102597][T15531] udevd[15531]: setting owner of /dev/rfcomm2 to uid=0, gid=18 failed: No such file or directory [ 511.215877][T17107] Bluetooth: hci0: unsupported parameter 5135 [ 511.223039][T17107] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 511.242057][T17107] macsec1: entered allmulticast mode [ 511.249819][T17107] veth1_macvtap: entered allmulticast mode [ 511.284318][T17107] veth1_macvtap: left allmulticast mode [ 511.548456][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 511.927341][T17147] syzkaller0: left promiscuous mode [ 511.927397][T17147] syzkaller0: left allmulticast mode [ 511.966176][T17147] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2727'. [ 512.014980][T17149] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 512.309226][T17154] bond18 (unregistering): Released all slaves [ 512.576105][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 512.674511][T17170] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 512.674565][T17170] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 512.956861][T17181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2737'. [ 512.956910][T17181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2737'. [ 512.995585][T17181] netlink: 'syz.0.2737': attribute type 1 has an invalid length. [ 513.054369][T17184] tipc: Enabled bearer , priority 0 [ 513.616267][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 513.723933][T17218] vxcan1: tx drop: invalid sa for name 0x0000004000000000 [ 513.748604][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 513.748663][T17218] netlink: 'syz.1.2746': attribute type 30 has an invalid length. [ 513.850346][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 514.097941][T17229] batadv_slave_1: entered promiscuous mode [ 514.117551][T17231] ip6gre2: entered promiscuous mode [ 514.117589][T17231] ip6gre2: entered allmulticast mode [ 514.268925][T17220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2744'. [ 514.322328][T17213] batadv_slave_1: left promiscuous mode [ 514.389448][T17249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2751'. [ 514.389893][T17250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2751'. [ 514.559509][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2753'. [ 514.607957][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2751'. [ 514.608025][T17249] netlink: 'syz.3.2751': attribute type 10 has an invalid length. [ 514.656088][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 514.674311][T17253] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 514.703398][T17253] bond5 (unregistering): Released all slaves [ 514.774407][T17263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.788752][T17249] geneve5: entered promiscuous mode [ 514.794109][T17249] geneve5: entered allmulticast mode [ 515.153648][T17283] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 515.366323][T17292] tipc: Failed to remove unknown binding: 66,0,0/3758096386:3492187768/3492187769 [ 515.377385][T17292] tipc: Failed to remove unknown binding: 66,0,0/3758096386:3492187768/3492187769 [ 515.390540][T17294] x_tables: duplicate underflow at hook 1 [ 515.651962][T17298] lo speed is unknown, defaulting to 1000 [ 515.696070][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 515.723218][T17306] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 515.771186][T17306] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.771403][T17306] bridge0: port 2(bridge_slave_1) entered listening state [ 515.771790][T17306] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.772001][T17306] bridge0: port 1(bridge_slave_0) entered listening state [ 515.839989][T17306] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 515.879935][T17296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.373212][T17317] sctp: [Deprecated]: syz.1.2772 (pid 17317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.373212][T17317] Use struct sctp_sack_info instead [ 516.736266][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 517.472176][T17356] __nla_validate_parse: 5 callbacks suppressed [ 517.472230][T17356] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2782'. [ 517.776263][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 518.155591][T17385] netlink: 'syz.0.2786': attribute type 1 has an invalid length. [ 518.240402][T17385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 518.377760][T17392] bond5: (slave veth9): Enslaving as an active interface with a down link [ 518.420925][T17397] xt_connbytes: Forcing CT accounting to be enabled [ 518.614955][T17415] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 518.638259][T17418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2786'. [ 518.638765][T17416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2786'. [ 518.671328][T17386] bond5: (slave veth11): Enslaving as an active interface with a down link [ 518.689581][T17409] IPVS: Scheduler module ip_vs_sip not found [ 518.735014][T17409] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2790'. [ 518.816203][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 519.138640][T17395] erspan0: left promiscuous mode [ 519.254366][T17395] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.269294][T17395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.342206][T17395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 519.342263][T17395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.380675][T17395] veth1_vlan: left promiscuous mode [ 519.381984][T17395] v: left promiscuous mode [ 519.400289][T17426] ip_tables: iptables: counters copy to user failed while replacing table [ 519.410083][T17395] v: entered promiscuous mode [ 519.425789][T17395] veth1_vlan: entered promiscuous mode [ 519.488692][T17395] veth1_macvtap: left promiscuous mode [ 519.495105][T17395] veth0_macvtap: left promiscuous mode [ 519.499819][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2791'. [ 519.502982][T17395] veth0_macvtap: entered promiscuous mode [ 519.503205][T17395] macvtap0: left promiscuous mode [ 519.509674][T17395] veth1_macvtap: entered promiscuous mode [ 519.548804][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2791'. [ 519.585516][T17395] ip6gre1: left allmulticast mode [ 519.681344][T17395] geneve2: left promiscuous mode [ 519.693994][T17395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.702319][T17395] ip6gre2: left promiscuous mode [ 519.707439][T17395] ip6gre2: left allmulticast mode [ 519.715252][T17395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.728204][T17395] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.736054][T17395] vlan3: left promiscuous mode [ 519.740949][T17395] hsr0: left promiscuous mode [ 519.746759][T17395] vlan3: left allmulticast mode [ 519.746778][T17395] hsr0: left allmulticast mode [ 519.746788][T17395] hsr_slave_0: left allmulticast mode [ 519.746801][T17395] hsr_slave_1: left allmulticast mode [ 519.799796][T17433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2792'. [ 519.826241][T17395] bond3: left promiscuous mode [ 519.831227][T17395] bond3: left allmulticast mode [ 519.836833][T17395] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.848946][T17395] gtp1: left promiscuous mode [ 519.853942][T17395] gtp1: left allmulticast mode [ 519.858967][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 519.900580][T17395] bond4: left allmulticast mode [ 519.905612][T17395] ip6gretap1: left allmulticast mode [ 519.913311][T17395] 8021q: adding VLAN 0 to HW filter on device bond4 [ 519.924894][T17395] 8021q: adding VLAN 0 to HW filter on device eth0 [ 519.934817][T17395] 8021q: adding VLAN 0 to HW filter on device eth1 [ 519.946121][T17395] 8021q: adding VLAN 0 to HW filter on device eth2 [ 519.955895][T17395] 8021q: adding VLAN 0 to HW filter on device eth3 [ 519.968827][T17395] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 520.112160][T17411] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 520.152703][T17411] bond5: (slave batadv2): making interface the new active one [ 520.179283][T17411] batadv2: entered promiscuous mode [ 520.195568][T17411] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 520.406556][ T6030] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.418840][T17426] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2791'. [ 520.419778][ T1409] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.452960][ T1170] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 520.453205][ T1170] bond5: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 520.484488][T17439] netlink: 271 bytes leftover after parsing attributes in process `syz.1.2793'. [ 520.562161][ T9081] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.574493][ T9081] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.587071][ T5748] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.597467][ T5748] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.626365][ T1170] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.626430][ T1170] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.752698][ T9081] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 520.761926][ T9081] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 520.778483][T15221] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 520.896157][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 520.997247][T17455] netlink: 'syz.0.2795': attribute type 9 has an invalid length. [ 521.225588][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2796'. [ 521.297730][ T5748] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.338188][T17461] ip6gretap0: entered promiscuous mode [ 521.351153][T17461] bridge0: left promiscuous mode [ 521.359835][T17461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.373541][T17461] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.373984][T17461] tipc: Resetting bearer [ 521.406029][T17461] bridge0: port 1(dummy0) entered blocking state [ 521.406299][T17461] bridge0: port 1(dummy0) entered forwarding state [ 521.438950][T17461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.467543][T15221] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 521.582491][T17461] veth1_vlan: left promiscuous mode [ 521.594150][T17461] veth1_vlan: entered promiscuous mode [ 521.617956][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.628052][T17461] veth1_macvtap: left promiscuous mode [ 521.635123][T17461] veth0_macvtap: left promiscuous mode [ 521.647794][T17461] veth0_macvtap: entered promiscuous mode [ 521.655080][T17461] veth1_macvtap: entered promiscuous mode [ 521.673485][T17461] batman_adv: batadv0: Interface activated: gretap1 [ 521.682123][T17461] 8021q: adding VLAN 0 to HW filter on device eth0 [ 521.690563][T17461] 8021q: adding VLAN 0 to HW filter on device eth1 [ 521.700570][T17461] 8021q: adding VLAN 0 to HW filter on device eth2 [ 521.710564][T17461] 8021q: adding VLAN 0 to HW filter on device eth3 [ 521.734203][T17461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.760036][T17461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.769348][T17461] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 521.835232][T17461] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.850531][T17461] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.869991][T17461] 8021q: adding VLAN 0 to HW filter on device bond5 [ 521.883816][T17461] 8021q: adding VLAN 0 to HW filter on device bond6 [ 521.894546][T17461] 8021q: adding VLAN 0 to HW filter on device bond7 [ 521.913611][T17461] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 521.936052][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 521.950453][ T5748] bridge0: entered promiscuous mode [ 521.998973][ T6519] lo speed is unknown, defaulting to 1000 [ 521.999049][ T6519] sz1: Port: 1 Link ACTIVE [ 522.218351][T17482] xt_nfacct: accounting object `' does not exist [ 522.298387][T17475] bond0: (slave ip6gretap0): making interface the new active one [ 522.309219][T17475] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 522.324320][T17496] netlink: 'syz.2.2806': attribute type 4 has an invalid length. [ 522.354084][ T6518] lo speed is unknown, defaulting to 1000 [ 522.376687][ T9077] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.378114][ T9077] bond7: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 522.380887][T17497] netlink: 'syz.2.2806': attribute type 4 has an invalid length. [ 522.381151][ T9077] bond7: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 522.381346][ T9077] bond7: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 522.393801][ T9077] bond7: (slave veth7): making interface the new active one [ 522.399667][ T9077] bond7: active interface up! [ 522.499171][ T143] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.538127][ T6030] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.544240][ T7172] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.563201][T17497] __nla_validate_parse: 5 callbacks suppressed [ 522.563266][T17497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2806'. [ 522.563293][T17497] block nbd3: Unsupported socket: should be TCP or UNIX. [ 522.986400][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 523.274786][T17522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.286563][T17521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.288005][T17521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2811'. [ 523.294458][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2811'. [ 523.337510][T17521] veth0_macvtap: left promiscuous mode [ 523.593760][T17529] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2815'. [ 523.848661][T17536] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 524.016041][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 524.517818][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2825'. [ 524.769759][T17573] syzkaller0: entered promiscuous mode [ 524.777263][T17573] syzkaller0: entered allmulticast mode [ 524.845200][T17573] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 525.056321][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 525.244889][T17585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2830'. [ 525.284960][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'. [ 525.594641][T17597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.594688][T17597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.625696][T17597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.625751][T17597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.758991][T17597] batman_adv: batadv0: Interface deactivated: macsec2 [ 525.759041][T17597] batman_adv: batadv0: Removing interface: macsec2 [ 525.788983][T17597] batman_adv: batadv0: Interface deactivated: veth0 [ 525.789031][T17597] batman_adv: batadv0: Removing interface: veth0 [ 525.858965][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2836'. [ 525.878493][T17606] netlink: 'syz.0.2836': attribute type 1 has an invalid length. [ 525.991274][T17611] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2837'. [ 526.096232][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 526.451809][T17633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2841'. [ 526.822003][T17646] tipc: Bearer : already 2 bearers with priority 0 [ 526.822051][T17646] tipc: Enabling of bearer rejected, cannot adjust to lower [ 526.826619][T17646] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 526.826645][T17646] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 526.839225][T17646] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 527.146169][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.618956][T17667] lo speed is unknown, defaulting to 1000 [ 527.727385][T17683] sctp: [Deprecated]: syz.1.2858 (pid 17683) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.727385][T17683] Use struct sctp_sack_info instead [ 528.050634][T17687] __nla_validate_parse: 5 callbacks suppressed [ 528.050715][T17687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2859'. [ 528.176180][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 528.532862][T17710] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 528.648054][T17710] 8021q: adding VLAN 0 to HW filter on device bond11 [ 528.789019][T17698] syzkaller1: entered promiscuous mode [ 528.794815][T17698] syzkaller1: entered allmulticast mode [ 528.820571][T17676] lo speed is unknown, defaulting to 1000 [ 529.216706][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 529.400013][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 529.415330][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 529.428034][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 529.437956][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 529.447907][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 530.256092][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.629331][ T6030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.640644][ T6030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.069968][ T6030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.084674][ T6030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.296159][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 531.344025][T17761] xt_TCPMSS: Only works on TCP SYN packets [ 531.537139][ T5623] Bluetooth: hci5: command tx timeout [ 531.612289][ T6030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.612332][ T6030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.672177][T17754] syzkaller1: entered promiscuous mode [ 531.672222][T17754] syzkaller1: entered allmulticast mode [ 532.047829][ T6030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.047895][ T6030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.107015][ T9074] batadv2: left promiscuous mode [ 532.169734][T17779] syzkaller0: entered promiscuous mode [ 532.169781][T17779] syzkaller0: entered allmulticast mode [ 532.174584][T17722] lo speed is unknown, defaulting to 1000 [ 532.346205][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.760170][T17793] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2883'. [ 532.876919][ T9074] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.886159][ T9074] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.886209][ T9074] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.886243][ T9074] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.949798][T17804] ip6t_srh: unknown srh invflags 4000 [ 533.024059][ T6030] bridge_slave_1: left allmulticast mode [ 533.039250][ T6030] bridge_slave_1: left promiscuous mode [ 533.047889][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.085110][ T6030] bridge_slave_0: left allmulticast mode [ 533.085172][ T6030] bridge_slave_0: left promiscuous mode [ 533.085495][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.086069][T17808] netlink: 'syz.0.2886': attribute type 1 has an invalid length. [ 533.124203][T17812] xt_hashlimit: size too large, truncated to 1048576 [ 533.136956][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 533.137010][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 533.273062][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 533.350229][T17821] netlink: 'syz.0.2886': attribute type 1 has an invalid length. [ 533.355243][ T6030] pimreg: left allmulticast mode [ 533.376038][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 533.389517][T17824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 533.617932][ T5623] Bluetooth: hci5: command tx timeout [ 533.787805][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 534.154117][ T6030] bond5 (unregistering): (slave gre1): Releasing backup interface [ 534.154202][ T6030] gre1 (unregistering): left promiscuous mode [ 534.426474][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.496779][ T6030] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 534.505229][ T6030] bridge5 (unregistering): left promiscuous mode [ 534.643453][ T6030] bond0 (unregistering): (slave 30): Releasing backup interface [ 534.666706][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.678984][ T6030] bond0 (unregistering): Released all slaves [ 534.693751][ T6030] bond1 (unregistering): Released all slaves [ 534.711734][ T1170] smbdirect: ib_dev[syz0] removed [ 534.721357][ T6030] bond2 (unregistering): Released all slaves [ 534.782602][ T6030] bond3 (unregistering): Released all slaves [ 534.795793][ T6030] bond4 (unregistering): Released all slaves [ 534.814750][ T6030] bond5 (unregistering): Released all slaves [ 534.845418][ T6030] bond6 (unregistering): Released all slaves [ 534.867397][ T6030] bond7 (unregistering): Released all slaves [ 534.889571][ T6030] bond8 (unregistering): Released all slaves [ 534.983429][T17808] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 534.995430][T17813] : renamed from vxcan1 (while UP) [ 535.010621][T17814] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 535.013311][T17816] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 535.024964][T17817] bridge0: entered promiscuous mode [ 535.114207][T17821] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 535.120362][T17822] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 535.243299][T17824] bridge0: entered promiscuous mode [ 535.248681][T17824] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 535.284900][ T5748] infiniband syz0: ib_query_port failed (-19) [ 535.431343][ T6030] ovs-s!: left promiscuous mode [ 535.456087][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.655209][ T6030] : left promiscuous mode [ 535.706137][ T5623] Bluetooth: hci5: command tx timeout [ 535.962953][ T6030] : left promiscuous mode [ 536.071949][T17880] ip_tables: iptables: counters copy to user failed while replacing table [ 536.081057][T17870] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2897'. [ 536.123401][ T6030] tipc: Disabling bearer [ 536.130587][ T6030] tipc: Left network mode [ 536.248355][T17888] netlink: 'syz.2.2899': attribute type 5 has an invalid length. [ 536.506247][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 536.663865][ T6030] IPVS: stopping master sync thread 11174 ... [ 536.844053][T17901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2900'. [ 536.961365][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 537.124184][T17722] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.124340][T17722] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.124470][T17722] bridge_slave_0: entered allmulticast mode [ 537.127447][T17722] bridge_slave_0: entered promiscuous mode [ 537.133173][T17722] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.133292][T17722] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.133435][T17722] bridge_slave_1: entered allmulticast mode [ 537.147654][T17722] bridge_slave_1: entered promiscuous mode [ 537.247793][T17722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.279425][T17722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.329000][T17722] team0: Port device team_slave_0 added [ 537.332265][T17722] team0: Port device team_slave_1 added [ 537.388858][T17722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.388894][T17722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.388941][T17722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.438982][T17722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.439010][T17722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.439421][T17722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.536414][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.566535][T17722] hsr_slave_0: entered promiscuous mode [ 537.573375][T17722] hsr_slave_1: entered promiscuous mode [ 537.778856][ T5623] Bluetooth: hci5: command tx timeout [ 538.043638][T17722] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.140375][ T6030] hsr_slave_0: left promiscuous mode [ 538.164043][ T6030] veth1_macvtap: left promiscuous mode [ 538.164150][ T6030] veth0_macvtap: left promiscuous mode [ 538.164334][ T6030] veth1_vlan: left promiscuous mode [ 538.164505][ T6030] veth0_vlan: left promiscuous mode [ 538.586035][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.724385][T17722] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.837738][T17722] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.918423][T17874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.033272][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'. [ 539.046349][T17911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2901'. [ 539.545023][T17722] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.611455][T17926] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2903'. [ 539.620683][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 539.631460][T17940] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 539.824186][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'. [ 540.000813][T17936] tipc: Resetting bearer [ 540.086218][ T6030] IPVS: stop unused estimator thread 0... [ 540.217094][T17936] tipc: Disabling bearer [ 540.405854][T17955] netlink: 'syz.3.2905': attribute type 2 has an invalid length. [ 540.577066][T17955] : entered promiscuous mode [ 540.666030][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.447794][T17993] netlink: 'syz.0.2915': attribute type 1 has an invalid length. [ 541.457443][T17993] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2915'. [ 541.625723][T17722] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 541.672622][T17722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.677339][T17722] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 541.686769][T18006] netlink: 'syz.0.2915': attribute type 1 has an invalid length. [ 541.686789][T18006] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2915'. [ 541.706031][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.714502][T17722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.715707][T17722] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 541.734574][T17722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.920358][T17722] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 541.983359][T17722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.303767][T18023] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 542.395110][T17722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.400446][T18031] block nbd3: server does not support multiple connections per device. [ 542.400929][T18031] block nbd3: shutting down sockets [ 542.461033][T17722] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.484216][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.484343][ T8696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.500350][T18033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2919'. [ 542.512624][T18033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2919'. [ 542.545035][T18041] A link change request failed with some changes committed already. Interface 04 may have been left with an inconsistent configuration, please check. [ 542.578151][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.578292][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.621342][T18041] pim6reg1: entered promiscuous mode [ 542.621394][T18041] pim6reg1: entered allmulticast mode [ 542.735518][T18046] netlink: 'syz.2.2922': attribute type 9 has an invalid length. [ 542.736351][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.282544][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2928'. [ 543.291473][T18063] tipc: Resetting bearer [ 543.294937][T18063] dummy0: left allmulticast mode [ 543.298415][T18063] dummy0: left promiscuous mode [ 543.299466][T18063] bridge0: port 1(dummy0) entered disabled state [ 543.342708][T18063] bond5: (slave veth0_to_bond): Releasing backup interface [ 543.342763][T18063] bond5: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 543.468549][T18063] batman_adv: batadv0: Interface deactivated: gretap1 [ 543.468595][T18063] batman_adv: batadv0: Removing interface: gretap1 [ 543.582872][T18063] bond1: (slave geneve2): Releasing active interface [ 543.608544][T18078] ip_tables: iptables: counters copy to user failed while replacing table [ 543.649011][T18063] bond5: (slave bridge3): Releasing backup interface [ 543.684967][T18063] bond7: (slave veth7): Releasing active interface [ 543.687583][T18063] bond7: (slave veth7): the permanent HWaddr of slave - 9e:97:d3:c2:33:6b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 543.687657][T18063] bond7: (slave veth9): making interface the new active one [ 543.690887][T18079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2929'. [ 543.732190][T18063] bond7: (slave veth9): Releasing active interface [ 543.740724][T18063] bond7: (slave veth11): making interface the new active one [ 543.767293][T18063] bond7: (slave veth11): Releasing active interface [ 543.776156][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.846422][T18064] team0: Mode changed to "loadbalance" [ 543.880635][T18078] netlink: 'syz.3.2929': attribute type 12 has an invalid length. [ 544.097754][T18089] openvswitch: netlink: Actions may not be safe on all matching packets [ 544.271527][T18102] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 544.334575][T18106] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 544.471609][T18109] __nla_validate_parse: 1 callbacks suppressed [ 544.471698][T18109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2930'. [ 544.510988][T18102] 8021q: adding VLAN 0 to HW filter on device bond12 [ 544.622112][T18107] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 544.785228][T18118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2933'. [ 544.797562][T18118] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2933'. [ 544.817914][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.925225][T18116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2933'. [ 545.314247][T17722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.451259][T18133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2936'. [ 545.535853][T17722] veth0_vlan: entered promiscuous mode [ 545.573431][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2937'. [ 545.582849][T17722] veth1_vlan: entered promiscuous mode [ 545.588746][T18146] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2937'. [ 545.607282][T18133] dummy0: mtu less than device minimum [ 545.796627][T17722] veth0_macvtap: entered promiscuous mode [ 545.815975][T17722] veth1_macvtap: entered promiscuous mode [ 545.928631][ T31] audit: type=1804 audit(1788676937.171:16): pid=18154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2939" name="/newroot/564/cgroup.controllers" dev="tmpfs" ino=2916 res=1 errno=0 [ 545.928727][ T31] audit: type=1800 audit(1788676937.171:17): pid=18154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2939" name="cgroup.controllers" dev="tmpfs" ino=2916 res=0 errno=0 [ 545.949779][T17722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.043384][T17722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.397000][ T8696] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.906297][ C0] net_ratelimit: 1 callbacks suppressed [ 546.906360][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.936140][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.839720][T18163] syzkaller0: left allmulticast mode [ 548.976098][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.387173][T18168] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 549.539488][T18177] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2944'. [ 549.539551][T18177] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 549.558644][ T7173] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.558692][ T7173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.558726][ T7173] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.558760][ T7173] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.558792][ T7173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.558825][ T7173] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.558857][ T7173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.692567][ T8697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.692625][ T8697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.888980][T18185] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 550.026146][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.051939][T18185] bond13 (unregistering): Released all slaves [ 550.300013][ T8698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.300055][ T8698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.056849][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.130177][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 551.148231][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 551.158515][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 551.171233][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 551.186745][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 551.314914][T18229] lo speed is unknown, defaulting to 1000 [ 551.900865][ T5617] bond0: (slave ): Releasing backup interface [ 552.096205][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 552.560175][T18265] IPVS: Unknown mcast interface: vcan0 [ 552.713935][T18234] lo speed is unknown, defaulting to 1000 [ 552.973891][T18280] netlink: 'syz.4.2967': attribute type 4 has an invalid length. [ 553.115042][T18282] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2968'. [ 553.146224][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.263994][T18290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2968'. [ 553.306183][ T5623] Bluetooth: hci0: command tx timeout [ 553.685589][T18299] tipc: Enabling of bearer rejected, failed to enable media [ 554.176134][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.381226][T18321] netlink: 'syz.2.2975': attribute type 1 has an invalid length. [ 554.414750][T18325] netlink: 'syz.2.2975': attribute type 1 has an invalid length. [ 555.216047][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.244017][T18352] tipc: Started in network mode [ 555.244080][T18352] tipc: Node identity ac14140f, cluster identity 4711 [ 555.246800][T18352] tipc: New replicast peer: 255.255.255.255 [ 555.248661][T18352] tipc: Enabled bearer , priority 10 [ 555.248767][T18358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2984'. [ 555.254064][T18352] netlink: 'syz.1.2984': attribute type 1 has an invalid length. [ 555.287435][T18234] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.294741][T18234] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.294952][T18234] bridge_slave_0: entered allmulticast mode [ 555.296946][T18234] bridge_slave_0: entered promiscuous mode [ 555.299688][T18234] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.299791][T18234] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.299936][T18234] bridge_slave_1: entered allmulticast mode [ 555.301813][T18234] bridge_slave_1: entered promiscuous mode [ 555.345229][T18234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.353051][T18234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.377226][ T5623] Bluetooth: hci0: command tx timeout [ 555.453753][T18234] team0: Port device team_slave_0 added [ 555.458883][T18234] team0: Port device team_slave_1 added [ 555.520404][T18234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.528142][T18234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.528178][T18234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.635147][T18234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.643444][T18234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.670311][T18234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.770579][T18234] hsr_slave_0: entered promiscuous mode [ 555.779232][T18234] hsr_slave_1: entered promiscuous mode [ 555.801996][T18234] debugfs: 'hsr0' already exists in 'hsr' [ 555.810131][T18234] Cannot create hsr debugfs directory [ 556.256238][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.456099][T18234] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.474722][T18388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.561312][ T6518] tipc: Node number set to 2886997007 [ 556.692187][T18391] openvswitch: netlink: EtherType 300 is less than min 600 [ 556.698964][T18395] openvswitch: netlink: EtherType 300 is less than min 600 [ 556.712185][T18396] netlink: 'syz.4.2992': attribute type 1 has an invalid length. [ 556.712240][T18396] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2992'. [ 556.756018][T18234] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.875369][T18396] IPVS: Scheduler module ip_vs_sip not found [ 556.895409][T18234] bond0: (slave netdevsim1): Releasing backup interface [ 556.922733][T18234] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.001081][T18407] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 557.020535][T18405] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2995'. [ 557.306034][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.457091][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 557.457467][ T5623] Bluetooth: hci0: command tx timeout [ 557.602832][T18421] tipc: Enabled bearer , priority 0 [ 557.736343][T18234] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 557.755621][T18234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.757247][T18234] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 557.781935][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3002'. [ 557.791895][T18234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.801968][T18234] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 557.830574][T18234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.877203][T18234] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 557.918453][ T8696] IPVS: starting estimator thread 0... [ 557.926587][T18234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 558.003180][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3003'. [ 558.003232][T18434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3003'. [ 558.027706][T18436] IPVS: using max 26 ests per chain, 62400 per kthread [ 558.040470][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3003'. [ 558.040521][T18434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3003'. [ 558.071257][T18443] ipvlan3: entered promiscuous mode [ 558.097185][T18443] team0: Device ipvlan3 failed to register rx_handler [ 558.222832][T18234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.252831][T18234] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.281359][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.281507][ T8698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.310486][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.310633][ T8698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.336031][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 558.433518][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3006'. [ 558.609118][T18465] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3007'. [ 558.795088][T18234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 559.376340][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.546128][ T5623] Bluetooth: hci0: command tx timeout [ 559.673555][T18487] lo speed is unknown, defaulting to 1000 [ 559.806186][T18500] xt_hashlimit: size too large, truncated to 1048576 [ 560.416132][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 560.542354][T18234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.677868][T18234] veth0_vlan: entered promiscuous mode [ 560.717550][T18234] veth1_vlan: entered promiscuous mode [ 560.895521][T18529] netlink: 'syz.2.3021': attribute type 11 has an invalid length. [ 560.899613][T18234] veth0_macvtap: entered promiscuous mode [ 561.030944][T18234] veth1_macvtap: entered promiscuous mode [ 561.171093][T18540] netlink: 'syz.2.3025': attribute type 11 has an invalid length. [ 561.189806][T18540] netlink: 'syz.2.3025': attribute type 11 has an invalid length. [ 561.197981][T18540] __nla_validate_parse: 33 callbacks suppressed [ 561.204576][T18540] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3025'. [ 561.256358][T18543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3026'. [ 561.287801][T18234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.361328][T18234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.364878][T18545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3026'. [ 561.452243][ T9081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.466157][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.481765][ T8696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.481875][ T8696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.552106][ T9081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.894013][ T9081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.894058][ T9081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.050249][T18561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3029'. [ 562.052162][T18563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3029'. [ 562.052371][T18561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3029'. [ 562.267351][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.285376][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.506124][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.536311][ T9081] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 562.680091][T18574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.738345][T18582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3034'. [ 562.812594][T18587] netlink: 'syz.3.3037': attribute type 1 has an invalid length. [ 562.824591][T18587] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3037'. [ 562.835038][T18587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3037'. [ 562.868842][T18587] syzkaller0: entered promiscuous mode [ 562.874705][T18587] syzkaller0: entered allmulticast mode [ 563.270455][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 563.284245][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 563.292711][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 563.305057][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 563.313425][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 563.362169][T18604] Bluetooth: MGMT ver 1.23 [ 563.395450][T18604] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 563.536126][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.375450][T18618] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3042'. [ 564.509829][T18624] x_tables: unsorted entry at hook 2 [ 564.509939][T18624] x_tables: unsorted entry at hook 2 [ 564.510050][T18624] x_tables: unsorted entry at hook 2 [ 564.510130][T18624] x_tables: unsorted entry at hook 2 [ 564.510209][T18624] x_tables: unsorted entry at hook 2 [ 564.510290][T18624] x_tables: unsorted entry at hook 2 [ 564.510369][T18624] x_tables: unsorted entry at hook 2 [ 564.510449][T18624] x_tables: unsorted entry at hook 2 [ 564.510528][T18624] x_tables: unsorted entry at hook 2 [ 564.556776][T18624] x_tables: unsorted entry at hook 2 [ 564.573025][T18632] netlink: 'syz.3.3045': attribute type 1 has an invalid length. [ 564.581111][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.822134][T18620] tipc: Resetting bearer [ 564.822633][T18620] tipc: Resetting bearer [ 565.101853][T18638] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 565.117557][T18638] bond1 (unregistering): Released all slaves [ 565.386623][ T5623] Bluetooth: hci4: command tx timeout [ 565.479472][T18641] bridge1: entered promiscuous mode [ 565.577827][ T1170] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.587107][ T1170] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.616192][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.621571][ T8697] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.622588][ T8697] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.731181][T18602] lo speed is unknown, defaulting to 1000 [ 566.656023][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 566.809242][T18686] __nla_validate_parse: 3 callbacks suppressed [ 566.817661][T18686] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3059'. [ 566.971719][T18694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3061'. [ 567.041552][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3061'. [ 567.056955][T18694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3061'. [ 567.117087][T18699] nbd3: detected capacity change from 0 to 63 [ 567.124465][T18699] block nbd3: NBD_DISCONNECT [ 567.171710][T18699] block nbd3: Disconnected due to user request. [ 567.172398][T18699] block nbd3: shutting down sockets [ 567.190888][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.191154][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 567.209684][ T6028] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.209733][ T6028] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.209766][ T6028] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.209799][ T6028] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.266702][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.266811][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 567.266857][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.266925][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 567.266951][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.267029][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 567.267963][ T4941] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 567.267992][ T4941] Buffer I/O error on dev nbd3, logical block 0, async page read [ 567.269782][ T4941] Buffer I/O error on dev nbd3, logical block 1, async page read [ 567.269805][ T4941] Buffer I/O error on dev nbd3, logical block 2, async page read [ 567.269818][ T4941] Buffer I/O error on dev nbd3, logical block 3, async page read [ 567.273069][ T4941] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 567.273098][ T4941] Buffer I/O error on dev nbd3, logical block 0, async page read [ 567.273113][ T4941] Buffer I/O error on dev nbd3, logical block 1, async page read [ 567.273261][ T4941] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 567.273414][ T4941] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 567.275104][ T4941] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 567.276109][ T4941] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 567.276365][T16480] ldm_validate_partition_table(): Disk read failed. [ 567.280218][T16480] Dev nbd3: unable to read RDB block 0 [ 567.281810][T16480] nbd3: unable to read partition table [ 567.357875][T16480] ldm_validate_partition_table(): Disk read failed. [ 567.358575][T16480] Dev nbd3: unable to read RDB block 0 [ 567.360260][T16480] nbd3: unable to read partition table [ 567.457211][ T5623] Bluetooth: hci4: command tx timeout [ 567.634258][T18699] netlink: 'syz.3.3062': attribute type 1 has an invalid length. [ 567.696423][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.722589][T18703] netlink: 328 bytes leftover after parsing attributes in process `syz.3.3062'. [ 567.722689][T18703] netlink: 'syz.3.3062': attribute type 9 has an invalid length. [ 567.722723][T18703] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3062'. [ 567.722744][T18703] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3062'. [ 567.793469][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3064'. [ 568.037972][T18602] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.045444][T18602] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.053001][T18602] bridge_slave_0: entered allmulticast mode [ 568.061333][T18602] bridge_slave_0: entered promiscuous mode [ 568.073357][T18602] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.080765][T18602] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.088432][T18602] bridge_slave_1: entered allmulticast mode [ 568.097169][T18602] bridge_slave_1: entered promiscuous mode [ 568.174967][T18602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.189496][T18602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.279711][T18602] team0: Port device team_slave_0 added [ 568.291597][T18602] team0: Port device team_slave_1 added [ 568.423780][T18602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.423822][T18602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.423874][T18602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.434638][T18602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.434656][T18602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.434680][T18602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.540076][T18730] netlink: 'syz.2.3069': attribute type 15 has an invalid length. [ 568.540128][T18730] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3069'. [ 568.612641][T18730] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3069'. [ 568.699283][T18602] hsr_slave_0: entered promiscuous mode [ 568.706361][T18602] hsr_slave_1: entered promiscuous mode [ 568.712116][T18602] debugfs: 'hsr0' already exists in 'hsr' [ 568.712207][T18602] Cannot create hsr debugfs directory [ 568.728245][T18742] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 568.746039][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.914859][T18742] xt_CT: No such helper "netbios-ns" [ 569.054768][T18750] gre0: Caught tx_queue_len zero misconfig [ 569.466640][T18760] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 569.537440][ T5623] Bluetooth: hci4: command tx timeout [ 569.539067][T18760] bond1 (unregistering): Released all slaves [ 569.665252][T18766] netlink: 'syz.0.3078': attribute type 2 has an invalid length. [ 569.724894][T18766] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 569.786063][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 569.977203][T18602] netdevsim netdevsim ** replaying previous printk message ** [ 569.977203][T18602] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.980697][T18602] [ 569.997218][T18602] ====================================================== [ 570.004251][T18602] WARNING: possible circular locking dependency detected [ 570.011388][T18602] syzkaller #0 Not tainted [ 570.015930][T18602] ------------------------------------------------------ [ 570.022976][T18602] syz-executor/18602 is trying to acquire lock: [ 570.029239][T18602] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 570.039563][T18602] [ 570.039563][T18602] but task is already holding lock: [ 570.046957][T18602] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 570.057972][T18602] [ 570.057972][T18602] which lock already depends on the new lock. [ 570.057972][T18602] [ 570.068406][T18602] [ 570.068406][T18602] the existing dependency chain (in reverse order) is: [ 570.077526][T18602] [ 570.077526][T18602] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 570.086254][T18602] down_read+0x4a/0x330 [ 570.090967][T18602] kernfs_remove_by_name_ns+0x3f/0x140 [ 570.097063][T18602] internal_create_group+0x58e/0x1180 [ 570.102985][T18602] sysfs_update_groups+0x60/0x130 [ 570.108561][T18602] pmu_dev_alloc+0x29b/0x300 [ 570.113708][T18602] perf_event_sysfs_init+0x76/0x100 [ 570.119547][T18602] do_one_initcall+0x250/0x870 [ 570.124873][T18602] do_initcall_level+0x10a/0x1a0 [ 570.130392][T18602] do_initcalls+0x59/0xa0 [ 570.135265][T18602] kernel_init_freeable+0x29d/0x3e0 [ 570.141008][T18602] kernel_init+0x22/0x1d0 [ 570.145931][T18602] ret_from_fork+0x514/0xb70 [ 570.151091][T18602] ret_from_fork_asm+0x1a/0x30 [ 570.156406][T18602] [ 570.156406][T18602] -> #9 (pmus_lock){+.+.}-{4:4}: [ 570.163560][T18602] __mutex_lock+0x19d/0x1550 [ 570.168693][T18602] perf_event_init_cpu+0x1d1/0x7a0 [ 570.174373][T18602] cpuhp_invoke_callback+0x434/0x810 [ 570.180232][T18602] cpuhp_thread_fun+0x362/0x780 [ 570.185711][T18602] smpboot_thread_fn+0x565/0xa70 [ 570.191224][T18602] kthread+0x38b/0x480 [ 570.195848][T18602] ret_from_fork+0x514/0xb70 [ 570.200986][T18602] ret_from_fork_asm+0x1a/0x30 [ 570.206295][T18602] [ 570.206295][T18602] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 570.213872][T18602] cpuhp_thread_fun+0x127/0x780 [ 570.219273][T18602] smpboot_thread_fn+0x565/0xa70 [ 570.224855][T18602] kthread+0x38b/0x480 [ 570.229459][T18602] ret_from_fork+0x514/0xb70 [ 570.234594][T18602] ret_from_fork_asm+0x1a/0x30 [ 570.239912][T18602] [ 570.239912][T18602] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 570.247828][T18602] cpus_read_lock+0x42/0x160 [ 570.253476][T18602] static_key_slow_inc+0x12/0x30 [ 570.259086][T18602] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 570.265416][T18602] nbd_genl_foreach_sock+0x265/0x450 [ 570.271468][T18602] nbd_genl_reconfigure+0xbbb/0x1040 [ 570.277401][T18602] genl_family_rcv_msg_doit+0x233/0x340 [ 570.283488][T18602] genl_rcv_msg+0x614/0x7a0 [ 570.288621][T18602] netlink_rcv_skb+0x226/0x4a0 [ 570.293930][T18602] genl_rcv+0x28/0x40 [ 570.298457][T18602] netlink_unicast+0x7bd/0x940 [ 570.303764][T18602] netlink_sendmsg+0x813/0xb40 [ 570.309167][T18602] sock_sendmsg_nosec+0x13a/0x180 [ 570.314789][T18602] ____sys_sendmsg+0x54e/0x850 [ 570.320113][T18602] ___sys_sendmsg+0x2a5/0x360 [ 570.325341][T18602] __x64_sys_sendmsg+0x1b1/0x290 [ 570.330842][T18602] do_syscall_64+0x166/0x520 [ 570.335991][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.342784][T18602] [ 570.342784][T18602] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 570.350462][T18602] __mutex_lock+0x19d/0x1550 [ 570.355607][T18602] nbd_queue_rq+0x373/0xff0 [ 570.360856][T18602] blk_mq_dispatch_rq_list+0x499/0x1990 [ 570.367056][T18602] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 570.374050][T18602] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 570.380579][T18602] blk_mq_run_work_fn+0x16c/0x300 [ 570.386155][T18602] process_scheduled_works+0xc3d/0x1630 [ 570.392254][T18602] worker_thread+0xa47/0xfb0 [ 570.397403][T18602] kthread+0x38b/0x480 [ 570.402009][T18602] ret_from_fork+0x514/0xb70 [ 570.407137][T18602] ret_from_fork_asm+0x1a/0x30 [ 570.412535][T18602] [ 570.412535][T18602] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 570.419829][T18602] __mutex_lock+0x19d/0x1550 [ 570.424994][T18602] nbd_queue_rq+0xc1/0xff0 [ 570.429971][T18602] blk_mq_dispatch_rq_list+0x499/0x1990 [ 570.436080][T18602] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 570.442963][T18602] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 570.449587][T18602] blk_mq_run_work_fn+0x16c/0x300 [ 570.455258][T18602] process_scheduled_works+0xc3d/0x1630 [ 570.461514][T18602] worker_thread+0xa47/0xfb0 [ 570.466829][T18602] kthread+0x38b/0x480 [ 570.471438][T18602] ret_from_fork+0x514/0xb70 [ 570.476649][T18602] ret_from_fork_asm+0x1a/0x30 [ 570.482052][T18602] [ 570.482052][T18602] -> #4 (set->srcu){.+.+}-{0:0}: [ 570.489213][T18602] __synchronize_srcu+0xc9/0x2f0 [ 570.494783][T18602] elevator_switch+0x1e8/0x7b0 [ 570.500178][T18602] elevator_change+0x2fa/0x480 [ 570.505503][T18602] elevator_set_default+0x375/0x440 [ 570.511340][T18602] blk_register_queue+0x3f3/0x4e0 [ 570.516942][T18602] __add_disk+0x6cb/0xe30 [ 570.521815][T18602] add_disk_fwnode+0x100/0x3a0 [ 570.527112][T18602] nbd_dev_add+0x733/0xb60 [ 570.532086][T18602] nbd_init+0x168/0x1f0 [ 570.536801][T18602] do_one_initcall+0x250/0x870 [ 570.542382][T18602] do_initcall_level+0x10a/0x1a0 [ 570.547953][T18602] do_initcalls+0x59/0xa0 [ 570.552840][T18602] kernel_init_freeable+0x29d/0x3e0 [ 570.558605][T18602] kernel_init+0x22/0x1d0 [ 570.563480][T18602] ret_from_fork+0x514/0xb70 [ 570.568785][T18602] ret_from_fork_asm+0x1a/0x30 [ 570.574084][T18602] [ 570.574084][T18602] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 570.581916][T18602] __mutex_lock+0x19d/0x1550 [ 570.587212][T18602] elevator_change+0x1af/0x480 [ 570.592523][T18602] elevator_set_none+0xb5/0x140 [ 570.597974][T18602] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 570.604411][T18602] nbd_start_device+0x189/0xb30 [ 570.609805][T18602] nbd_genl_connect+0x167d/0x1cd0 [ 570.615380][T18602] genl_family_rcv_msg_doit+0x233/0x340 [ 570.621564][T18602] genl_rcv_msg+0x614/0x7a0 [ 570.626625][T18602] netlink_rcv_skb+0x226/0x4a0 [ 570.631951][T18602] genl_rcv+0x28/0x40 [ 570.636499][T18602] netlink_unicast+0x7bd/0x940 [ 570.641896][T18602] netlink_sendmsg+0x813/0xb40 [ 570.647205][T18602] sock_sendmsg_nosec+0x13a/0x180 [ 570.652874][T18602] ____sys_sendmsg+0x54e/0x850 [ 570.658188][T18602] ___sys_sendmsg+0x2a5/0x360 [ 570.663505][T18602] __x64_sys_sendmsg+0x1b1/0x290 [ 570.669004][T18602] do_syscall_64+0x166/0x520 [ 570.674153][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.680592][T18602] [ 570.680592][T18602] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 570.689218][T18602] blk_alloc_queue+0x544/0x690 [ 570.694547][T18602] __blk_mq_alloc_disk+0x194/0x390 [ 570.700217][T18602] nbd_dev_add+0x494/0xb60 [ 570.705186][T18602] nbd_init+0x168/0x1f0 [ 570.710007][T18602] do_one_initcall+0x250/0x870 [ 570.715352][T18602] do_initcall_level+0x10a/0x1a0 [ 570.720862][T18602] do_initcalls+0x59/0xa0 [ 570.725919][T18602] kernel_init_freeable+0x29d/0x3e0 [ 570.731665][T18602] kernel_init+0x22/0x1d0 [ 570.736542][T18602] ret_from_fork+0x514/0xb70 [ 570.741671][T18602] ret_from_fork_asm+0x1a/0x30 [ 570.746981][T18602] [ 570.746981][T18602] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 570.754206][T18602] fs_reclaim_acquire+0x71/0x100 [ 570.759698][T18602] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 570.765965][T18602] alloc_inode+0xb8/0x1b0 [ 570.770842][T18602] iget_locked+0x131/0x6a0 [ 570.775809][T18602] kernfs_get_inode+0x4f/0x770 [ 570.781153][T18602] kernfs_get_tree+0x5cd/0x980 [ 570.786470][T18602] vfs_get_tree+0x92/0x2a0 [ 570.791431][T18602] do_new_mount+0x319/0xdc0 [ 570.796471][T18602] __se_sys_mount+0x31d/0x420 [ 570.801694][T18602] do_syscall_64+0x166/0x520 [ 570.806830][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.813251][T18602] [ 570.813251][T18602] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 570.821634][T18602] __lock_acquire+0x15ff/0x2e50 [ 570.827047][T18602] lock_acquire+0x115/0x350 [ 570.832100][T18602] down_write+0x96/0x200 [ 570.836948][T18602] kernfs_remove_by_name_ns+0x4e/0x140 [ 570.845142][T18602] sysfs_remove_group+0x101/0x2e0 [ 570.850990][T18602] sysfs_remove_groups+0x54/0xb0 [ 570.856498][T18602] net_rx_queue_update_kobjects+0x6b7/0x780 [ 570.863003][T18602] netdev_unregister_kobject+0xff/0x450 [ 570.869194][T18602] unregister_netdevice_many_notify+0x1be1/0x2140 [ 570.876247][T18602] unregister_netdevice_queue+0x2f5/0x340 [ 570.882509][T18602] nsim_destroy+0x275/0x800 [ 570.887632][T18602] __nsim_dev_port_del+0x14e/0x200 [ 570.893320][T18602] nsim_dev_reload_destroy+0x288/0x490 [ 570.899419][T18602] nsim_drv_remove+0x58/0x170 [ 570.904643][T18602] device_release_driver_internal+0x48b/0x880 [ 570.911311][T18602] bus_remove_device+0x444/0x560 [ 570.916830][T18602] device_del+0x524/0x8f0 [ 570.921691][T18602] device_unregister+0x21/0xf0 [ 570.927130][T18602] del_device_store+0x2b5/0x370 [ 570.932548][T18602] kernfs_fop_write_iter+0x3a4/0x540 [ 570.938384][T18602] vfs_write+0x612/0xba0 [ 570.943203][T18602] ksys_write+0x150/0x270 [ 570.948090][T18602] do_syscall_64+0x166/0x520 [ 570.953252][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.959787][T18602] [ 570.959787][T18602] other info that might help us debug this: [ 570.959787][T18602] [ 570.970117][T18602] Chain exists of: [ 570.970117][T18602] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 570.970117][T18602] [ 570.984125][T18602] Possible unsafe locking scenario: [ 570.984125][T18602] [ 570.991681][T18602] CPU0 CPU1 [ 570.997070][T18602] ---- ---- [ 571.002437][T18602] rlock(&root->kernfs_supers_rwsem); [ 571.007993][T18602] lock(pmus_lock); [ 571.014523][T18602] lock(&root->kernfs_supers_rwsem); [ 571.022532][T18602] lock(&root->kernfs_rwsem); [ 571.027327][T18602] [ 571.027327][T18602] *** DEADLOCK *** [ 571.027327][T18602] [ 571.035484][T18602] locks held by syz-executor/18602: 8, last CPU#0: [ 571.041997][T18602] #0: ffff888028c00460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 571.051002][T18602] #1: ffff888056499c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 571.060765][T18602] #2: ffff888029123698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 571.070785][T18602] #3: ffffffff8fac85a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 571.081333][T18602] #4: ffff88807d507128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 571.091882][T18602] #5: ffff88807d506258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 571.102085][T18602] #6: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 571.111231][T18602] #7: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 571.122720][T18602] [ 571.122720][T18602] stack backtrace: [ 571.128626][T18602] CPU: 0 UID: 0 PID: 18602 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 571.138348][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.148495][T18602] Call Trace: [ 571.151994][T18602] [ 571.154926][T18602] dump_stack_lvl+0xe8/0x150 [ 571.159626][T18602] print_circular_bug+0x2e2/0x300 [ 571.164659][T18602] check_noncircular+0x12f/0x150 [ 571.169689][T18602] __lock_acquire+0x15ff/0x2e50 [ 571.174719][T18602] ? __lock_acquire+0x6df/0x2e50 [ 571.179663][T18602] lock_acquire+0x115/0x350 [ 571.184254][T18602] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 571.189899][T18602] down_write+0x96/0x200 [ 571.194157][T18602] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 571.199816][T18602] ? __pfx_down_write+0x10/0x10 [ 571.204671][T18602] ? down_read+0x2be/0x330 [ 571.209096][T18602] kernfs_remove_by_name_ns+0x4e/0x140 [ 571.214564][T18602] sysfs_remove_group+0x101/0x2e0 [ 571.219598][T18602] sysfs_remove_groups+0x54/0xb0 [ 571.224551][T18602] net_rx_queue_update_kobjects+0x6b7/0x780 [ 571.230488][T18602] netdev_unregister_kobject+0xff/0x450 [ 571.236133][T18602] unregister_netdevice_many_notify+0x1be1/0x2140 [ 571.242649][T18602] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 571.249415][T18602] ? __mutex_lock+0x1096/0x1550 [ 571.254281][T18602] unregister_netdevice_queue+0x2f5/0x340 [ 571.260004][T18602] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 571.266343][T18602] nsim_destroy+0x275/0x800 [ 571.270858][T18602] __nsim_dev_port_del+0x14e/0x200 [ 571.275979][T18602] nsim_dev_reload_destroy+0x288/0x490 [ 571.281486][T18602] nsim_drv_remove+0x58/0x170 [ 571.286166][T18602] ? __pfx_nsim_bus_remove+0x10/0x10 [ 571.291467][T18602] device_release_driver_internal+0x48b/0x880 [ 571.297538][T18602] bus_remove_device+0x444/0x560 [ 571.302490][T18602] ? __pfx_bus_remove_device+0x10/0x10 [ 571.307955][T18602] ? kernfs_remove_by_name_ns+0x101/0x140 [ 571.313682][T18602] device_del+0x524/0x8f0 [ 571.318196][T18602] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 571.324014][T18602] ? __pfx_device_del+0x10/0x10 [ 571.328892][T18602] ? lock_acquire+0x115/0x350 [ 571.333596][T18602] device_unregister+0x21/0xf0 [ 571.338382][T18602] del_device_store+0x2b5/0x370 [ 571.343252][T18602] ? __pfx_del_device_store+0x10/0x10 [ 571.348636][T18602] ? sysfs_file_kobj+0x1e4/0x230 [ 571.353584][T18602] ? sysfs_kf_write+0x166/0x260 [ 571.358448][T18602] ? __pfx_sysfs_kf_write+0x10/0x10 [ 571.363657][T18602] kernfs_fop_write_iter+0x3a4/0x540 [ 571.368952][T18602] vfs_write+0x612/0xba0 [ 571.373469][T18602] ? __pfx_vfs_write+0x10/0x10 [ 571.378243][T18602] ? do_sys_openat2+0x14e/0x200 [ 571.383100][T18602] ? kmem_cache_free+0x182/0x650 [ 571.388060][T18602] ksys_write+0x150/0x270 [ 571.392405][T18602] ? __pfx_ksys_write+0x10/0x10 [ 571.397269][T18602] do_syscall_64+0x166/0x520 [ 571.401871][T18602] ? trace_irq_disable+0x3b/0x140 [ 571.406899][T18602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.412971][T18602] ? clear_bhb_loop+0x70/0xc0 [ 571.417695][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.423678][T18602] RIP: 0033:0x7fb5a695e98e [ 571.428096][T18602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 571.447814][T18602] RSP: 002b:00007fff05282f88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 571.456263][T18602] RAX: ffffffffffffffda RBX: 0000555573444500 RCX: 00007fb5a695e98e [ 571.464423][T18602] RDX: 0000000000000001 RSI: 00007fff05283010 RDI: 0000000000000005 [ 571.472403][T18602] RBP: 00007fb5a6a358a7 R08: 0000000000000000 R09: 0000000000000000 [ 571.480395][T18602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.488542][T18602] R13: 00007fff05283010 R14: 00007fb5a7754620 R15: 0000000000000003 [ 571.496522][T18602] [ 571.501088][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 571.659135][ T5623] Bluetooth: hci4: command tx timeout [ 571.939082][T18602] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.109894][T18602] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.310341][T18602] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.362450][ T8697] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.362503][ T8697] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.428898][ T8697] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.428954][ T8697] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.462162][ T8697] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.462220][ T8697] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.528077][ T8697] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.528141][ T8697] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.595298][ T9081] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.616243][ T6028] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.646503][ T6028] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.657986][ T8697] bridge_slave_1: left allmulticast mode [ 572.658025][ T8697] bridge_slave_1: left promiscuous mode [ 572.658191][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.680474][ T8697] bridge_slave_0: left allmulticast mode [ 572.686835][ T8697] bridge_slave_0: left promiscuous mode [ 572.687010][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.812402][ T8697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.836725][ T8697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.848369][ T8697] bond0 (unregistering): Released all slaves [ 572.866196][ T6028] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.897983][ T8697] tipc: Disabling bearer [ 572.903450][ T8697] tipc: Left network mode [ 573.135778][ T8697] hsr_slave_0: left promiscuous mode [ 573.143332][ T8697] hsr_slave_1: left promiscuous mode [ 573.144335][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.144352][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.149521][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.149538][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.165650][ T8697] veth1_macvtap: left promiscuous mode [ 573.165682][ T8697] veth0_macvtap: left promiscuous mode [ 573.165758][ T8697] veth1_vlan: left promiscuous mode [ 573.165800][ T8697] veth0_vlan: left promiscuous mode [ 573.303023][ T8697] team0 (unregistering): Port device team_slave_1 removed [ 573.311160][ T8697] team0 (unregistering): Port device team_slave_0 removed [ 573.344474][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 573.562027][ T8697] IPVS: stop unused estimator thread 0... [ 573.771910][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 573.915225][ T8697] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.946303][ T1170] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.946394][ T1170] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.946426][ T1170] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.946453][ T1170] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.985130][ T8697] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.031756][ T8697] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.071570][ T8697] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.092305][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 574.135274][ T8696] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.149190][ T1170] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.169081][ T1170] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.177955][ T8697] bridge_slave_1: left allmulticast mode [ 574.183797][ T8697] bridge_slave_1: left promiscuous mode [ 574.189869][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.198560][ T8697] bridge_slave_0: left allmulticast mode [ 574.204523][ T8697] bridge_slave_0: left promiscuous mode [ 574.210837][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.230038][ T8697] bridge_slave_1: left allmulticast mode [ 574.235839][ T8697] bridge_slave_1: left promiscuous mode [ 574.247039][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.255660][ T8697] bridge_slave_0: left allmulticast mode [ 574.261875][ T8697] bridge_slave_0: left promiscuous mode [ 574.268108][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.352681][ T8697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.372793][ T8697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.382906][ T8697] bond0 (unregistering): Released all slaves [ 574.434594][ T8697] bond0 (unregistering): (slave ip6gretap0): Releasing active interface [ 574.507647][ T8697] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 574.818977][ T8697] bond6 (unregistering): (slave bridge0): Releasing backup interface [ 574.833207][ T8697] bond0 (unregistering): Released all slaves [ 574.840089][ T8697] bond1 (unregistering): (slave 04): Releasing backup interface [ 574.848794][ T8697] bond1 (unregistering): (slave 04): last VLAN challenged slave left bond - VLAN blocking is removed [ 574.849033][ T8697] bond1 (unregistering): Released all slaves [ 574.854293][ T8697] bond2 (unregistering): Released all slaves [ 574.861008][ T8697] bond3 (unregistering): Released all slaves [ 574.867461][ T8697] bond4 (unregistering): Released all slaves [ 574.885699][ T8697] bond5 (unregistering): (slave veth9): Releasing active interface [ 574.885750][ T8697] batadv2: entered promiscuous mode [ 574.900579][ T8697] bond5 (unregistering): (slave veth11): Releasing active interface [ 574.909811][ T8697] bond5 (unregistering): (slave batadv2): Releasing active interface [ 574.909856][ T8697] batadv2: left promiscuous mode [ 574.918704][ T8697] bond5 (unregistering): Released all slaves [ 574.923534][ T8697] bond6 (unregistering): Released all slaves [ 574.984888][ T8697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.995526][ T8697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.012041][ T8697] bond0 (unregistering): Released all slaves [ 575.019760][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 575.026516][ T8696] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.124925][ T8697] : left promiscuous mode [ 575.192080][ T8697] tipc: Left network mode [ 575.251886][ T8697] IPVS: stopping backup sync thread 6844 ... [ 575.558738][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 576.042570][ T8697] hsr_slave_0: left promiscuous mode [ 576.048560][ T8697] hsr_slave_1: left promiscuous mode [ 576.049122][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.049643][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.069666][ T8697] hsr_slave_0: left promiscuous mode [ 576.075240][ T8697] hsr_slave_1: left promiscuous mode [ 576.085020][ T8697] hsr_slave_0: left promiscuous mode [ 576.090719][ T8697] hsr_slave_1: left promiscuous mode [ 576.091303][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.091319][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.097058][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.097074][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.119329][ T8697] veth1_macvtap: left promiscuous mode [ 576.119359][ T8697] veth0_macvtap: left promiscuous mode [ 576.119420][ T8697] veth1_vlan: left promiscuous mode [ 576.119462][ T8697] veth0_vlan: left promiscuous mode [ 576.295585][ T8697] team0 (unregistering): Port device team_slave_1 removed [ 576.325400][ T8697] team0 (unregistering): Port device team_slave_0 removed [ 576.486304][ T8697] team0 (unregistering): Port device vlan2 removed [ 576.753794][ T8697] team0 (unregistering): Port device team_slave_1 removed [ 576.770096][ T8697] team0 (unregistering): Port device team_slave_0 removed [ 576.844661][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 577.095863][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7 [ 577.452943][ T8697] IPVS: stop unused estimator thread 0... [ 577.526249][ T5276] 8021q: adding VLAN 0 to HW filter on device eth8 [ 577.745345][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 577.975469][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 578.201977][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 578.453544][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12