last executing test programs: 2m51.436321124s ago: executing program 0 (id=2179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0x9, 0x1ff, {{0x2c, 0x4, 0x3, 0x37, 0xb0, 0x65, 0x0, 0x10, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_prespec={0x44, 0x3c, 0x4c, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0xa12888c}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x800}, {@loopback, 0x7}, {@rand_addr=0x64010102, 0x10}, {@remote, 0x3}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xb}]}, @cipso={0x86, 0x33, 0x3, [{0x7, 0xa, "2cfdf66c43bda85e"}, {0x2, 0xe, "588abca58b8b8380b7963b3f"}, {0x0, 0x4, "ad15"}, {0x1, 0x5, "2a42db"}, {0x6, 0xc, "73b53668923582472b86"}]}, @generic={0x89, 0xf, "8ca333ad80a671d6016bb1e2b9"}, @timestamp_prespec={0x44, 0x1c, 0x5b, 0x3, 0x9, [{@multicast2, 0x2}, {@local, 0x1}, {@rand_addr=0x64010102, 0x3}]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x9, 0x0, 0x3}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x30, 0xffffffffffffffff, 0x0) 2m51.264056332s ago: executing program 0 (id=2183): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000080)={0x2, {{0xa, 0x4e23, 0x2, @local, 0x6}}}, 0x88) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000140)="831b826242457ede5541fd19488af1d80fcc4f588b5efc87d997dc8d76a20186b086261546cddc0953f59ea5d77632f4bef7001a0829e4ee3c4ffb51473684d033ee7d03be0f2c418fa4cf5a", 0x4c, 0x48800, &(0x7f00000001c0)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) r2 = socket(0x1a, 0x5, 0x7) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) bind$packet(r2, &(0x7f0000000280)={0x11, 0x11, r3, 0x1, 0xff, 0x6, @multicast}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000002c0)={r1}) connect$x25(r4, &(0x7f0000000300)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000340)={0x2, 'wg0\x00', {0xc}, 0x9}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r6, &(0x7f0000000380)=""/4096, 0x1000, 0x2060, &(0x7f0000001380)={0xa, 0x4e24, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=@getroute={0x14, 0x1a, 0x10, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000014c0)=0x2, 0x4) getpeername$unix(r2, &(0x7f0000001500)=@abs, &(0x7f0000001580)=0x6e) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000017c0)={{r7, 0xfffffffffffff800, 0xfc, 0x5, 0x180000000, 0x2, 0x2, 0x6, 0x401, 0x5aa4, 0x8, 0x0, 0x45b, 0x2, 0x7}}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000027c0)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x3e, 0x0, "2eb90eb48e6cb5af25a490bb1ad5cbc67a060c8d4c6a03b52a5fd853a2a3daeb5b6b0ea02646abcb535f568ba8a7949b1350a6d1cbac82df8e77ca79f452943ad1db37de6b9ff48d00ccd99709449856"}, 0xd8) r8 = accept4$inet6(r4, &(0x7f00000028c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000002900)=0x1c, 0x800) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000002940)={'xfrm0\x00'}) sendmsg$sock(r0, &(0x7f0000002fc0)={&(0x7f0000002980)=@ieee802154, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002a00)="93ab65f8a3fde87bf5fc114c5a42f1aa2c47f5a366cd702c65f0a0dce857dfb73ce6a7867e1e8a9503984e4625e751f674a7dcf72d3f79c3252e0c946343e006e40d514db096ab9d7b288373b043051f8d9b8764e27d40c17ac28c1e5b79b36c86e56b9156be2db9abb1a4d226a357dc20648caa2ce9990ce1030569b82ae24099bb764d40d764c7bd745c3485201e7b77d6a3043bedec4c80e42b43930dd29a39f0751284ad16b61cd054c57e08fba74f8e5cd92eaf41e82f22d0bf2668add3c1a0d02e73e15a2ba81021ec5a432dbe8f4744ca0e64e041eb0cc07e8017394696ba276b2e071f321877b3b705", 0xed}, {&(0x7f0000002b00)="507291a3f575a20605f4db97f281bc497b201b6916f99fb8d64b29f316", 0x1d}, {&(0x7f0000002b40)="97e8f340254bd466b6f1ba2c0c34f04d23ab6899945e41b4b87d62d34babf94526e0f06ba16c3d0e3b3e13255ad20bad26ba9187a8628a3928d2b58e5e639a3d6f8b6818b05b59ba31c5c4b63719e1a845d6cd8685b13901740bdebff5231fcfd55f42b1bde61ffc59bc886e673a428fba04b667632f273c9f1c2e1cf67c2e4971e8dd6e23d3afb55b12ec9762e4425db6ff738cab71bb85b61a317477f04a1ead04b4c78a7365a167", 0xa9}, {&(0x7f0000002c00)="067697a4cc666ec5c6aea8fb50106387b9d780b8027aae84bde0970a514da0dc06300ff4389554d2177967966b4be4132023f225a202c9c89174b3eb8578ce3e60ad0c6131a018636ea1f881947dbe558c4515f61a5657f9d5b5ed2cb8a324c1fc5a02a9132faaf1f9ce3f2f01744fba8c4becf3ea9944d2c8772ec5c593ee5f65b7f77543721371d0bfe00b19078fd4ca4a8981fef4a452aa8b8c94f08d9b45390d512de8d4830c1598d64fb743111ef929c30ef03b7a3453f5de9f", 0xbc}, {&(0x7f0000002cc0)="c617d4db5bb57de6c0cf487b2295a702ae56b831b73697fbe4a7dcf34c6aabb1925fd7821357c3358e05ce702bdede859ddb6803cff93d645509ec32354843398ced2a5dd10419960b85b72d11530b62e5605e53b70958119aaf5fba89ff56791bb19c171a7378c8ef5c22a7547fad8125fd25ac86cadc9a8fbf04c5e77b978e7720f3be2c1517144d76a72bd0bbda3d4c475b555cf08d794712b08a27a3653ce5bd3a19d797ea85cadb2fe1963cda8f7f052a1992f158f9b955d90f2a3bc1f2cfd1c59183ad120472dae7a9473d794bf4d72bd548e8d51608e672c6e6fff59f8156869405a1195e", 0xe8}, {&(0x7f0000002dc0)="4362df1a80b1af8cb7e915dc14a957eaff8d4071701e52e976e7ba58d50e9295aa961d54e73372111a023ca6e8872d0c56b661a8cd5c8061665871c81fa44732151b1f203910f5f914", 0x49}], 0x6, &(0x7f0000002ec0)=[@mark={{0x14, 0x1, 0x24, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0xe}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4a3d}}], 0xd8}, 0xc000) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f0000003000)=@generic={0x1, 0x7, 0x3c000000}) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000003040)={{{@in=@multicast2, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000003140)=0xe8) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000003180)) socketpair(0x26, 0x1, 0xd, &(0x7f00000031c0)={0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_SERVICE(r10, &(0x7f0000003340)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x70, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2c}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x24000880) 2m51.099845407s ago: executing program 0 (id=2188): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/274, 0x112}, {&(0x7f0000000d00)=""/4078, 0xfee}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000380)=""/234, 0xea}, {&(0x7f00000000c0)=""/167, 0xa7}, {&(0x7f0000000180)=""/173, 0xad}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f00000008c0)=""/157, 0x9d}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/130, 0x82}], 0xc}, 0x10182) 2m50.819855756s ago: executing program 0 (id=2192): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m50.551657561s ago: executing program 0 (id=2197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd28, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd28, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c0000001800058007000100696200000c40028008000400ff000000107b927c7244c2f3949d65da1df599c011e060e4afbf2fa8f456c44267b70bab6bed47c6cf0361"], 0x2c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) connect$qrtr(0xffffffffffffffff, &(0x7f0000000280)={0x2a, 0x1, 0x2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x1, 0x71, 0x10, 0x15, 0x80000000}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a}, 0x94) 2m50.182244255s ago: executing program 0 (id=2204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004080) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r5, 0x400, 0x7, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8804) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000080), 0x4) (async) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) 2m49.894387476s ago: executing program 32 (id=2204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004080) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r5, 0x400, 0x7, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8804) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000080), 0x4) (async) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) 1.8919481s ago: executing program 5 (id=3690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={r3, 0x38, "2578bac7061f3447a08504a2446c491a23182dafbb473aafa54eb3ed48ca035bdffd91df4210d2f7aa12cbbe0f09339f6cb8fbb3fba27bbc"}, &(0x7f00000011c0)=0x40) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x1, 0x4) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x29, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) 1.607806701s ago: executing program 5 (id=3699): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000400), 0xe) listen(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES64, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) 1.468782795s ago: executing program 5 (id=3701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000040)={0x8, 0x2, '\x00', [@ra={0x5, 0x2, 0x4bc7}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.301355236s ago: executing program 1 (id=3703): r0 = socket(0x6, 0x2, 0x38) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) close(r0) 1.232340994s ago: executing program 3 (id=3704): socket$inet6(0xa, 0x80002, 0x88) r0 = epoll_create1(0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) r3 = accept(r2, 0x0, &(0x7f0000000100)) close(0x3) listen(r1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000140)={0x16, @rand_addr=0x64010101, 0x4e24, 0x0, 'sed\x00', 0x10, 0x64f3, 0x47}, 0x2c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x6, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x3) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)={0xa0000014}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000240)="005ab8a396a1e01c2d981f087c86b45abca98408f8c48b549e25376e1a43cff44a96b4b3875db435e5af4826bf8e66a72b4f", &(0x7f0000000280)=@tcp=r3, 0x4}, 0x20) 1.156236222s ago: executing program 5 (id=3705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed0000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000600)={'veth0_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r9, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x41) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffe49, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x2}, {0x3, 0x9, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x0, 0x2, 0x2}}, 0x26) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000740)={r8, r8}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 1.149929116s ago: executing program 1 (id=3707): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESOCT=r2, @ANYRES64=r2, @ANYRESOCT=r2, @ANYRESDEC=r2], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf4, 0x2f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r8, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x386}, [@alu={0x4, 0x0, 0x7, 0x3, 0x2, 0x100, 0xffffffffffffffff}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x9c, &(0x7f0000000380)=""/156, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x400}, 0x10, 0xffffffffffffffff, r2, 0x3, &(0x7f0000000440)=[0xffffffffffffffff, r8], &(0x7f0000000480)=[{0x5, 0x2, 0xc, 0xc}, {0x4, 0x2, 0xd, 0xc}, {0x5, 0x1, 0x4, 0x4}], 0x10, 0x9}, 0x94) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r9, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 878.615677ms ago: executing program 3 (id=3710): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {0x0, 0xfc}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x8}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x2, 0x0, 'snmp_trap\x00', {0x100000000}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffdf1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f09140002"], 0x44}, 0x1, 0x1000000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x228, 0x0, 0xffffffff, 0x370, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'vlan0\x00'}) unshare(0x600) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) 876.46863ms ago: executing program 2 (id=3711): r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x5a, &(0x7f0000000140)='cgroup\x00\xb5\x02w\xa1\naQ\x8b;\xf6\x95\xaf\xd0:\xf5\v6\xff\xd0\xa7n \x01R\x1b\x89\x8a\x8b\xfc\x89\xd4\xeak\xe4\xde\xb7z\xd0\xe7\x1c;\xd2\x86\x025\xd0\xbf\xe6\xa0;\x15\xbe4\x12\xb6k/2\xef^\xd7b\xc5l\xb5\xd3H-\xb0\xbd\x83cY\xeb~:\x8a\xfa\xd7!\xccr\xc9'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x70, 0x4) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080)=0xc1d2, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$qrtr(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x2a, 0x2, 0x1}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000280)="29c83f579fe3ee92633f02eb93c08be31e624e45dfea66ef1d66712ba53a42a165f2e861f4b36d0fec7768580533e7af3ed74745e02d8767d243ab9da70640695f47344c2bcd63514f8f158ea4c5b010a8a2139ca1857f605594a7a0235dde9757af552b506c428a8c69cac52bbea951bde1be13ef3935fc59140036c7d99c9bf963cd5341dd61fd7ab99d08ca3e98c8f09e46cd3dd93ba360303eedab6d1a996f502377a88ef69397203a397b6feee90e7f4542586e54fda2172f378664f2ab5313e15e22ba4b713d551a1f5f58b0e877c1edd04d4536e5bbfebbcb57a3a68148826f0e13639637b110eca76a6c1f", 0xef}, {&(0x7f0000000380)="82eb843be9407fef722638f3d7428603399930ed0ccbab3df0b23f1663ab45436f3a9b2fa652365e87928bfa8c0f36b81ff648b5f6e0e06a2580289c5df5f10e7c4ba304c816fcb391ad506f8b9353a8474f932b", 0x54}], 0x2, &(0x7f0000000400)=[{0x98, 0x117, 0x80000000, "21191d39845d8d12a54ebad19dab64de5d2a5e1088121b7360a1e7ad7277d849955b92e8baae95885d0279354dbaa28841b49382cbf50a4d0e99eb16e68bf960322fecbcc4e483c423009cd9fbf29b8ef0aacc7eda38673d2a21f15563beb1516d94639c11e7fc8fd366fdae69d3a30ab0aaa2f2d3b173ca12c8ce57c3181487b540"}, {0x40, 0x10f, 0x7, "2eed6aad77d93db08b179895b41b36b673f4bc489fefa053cdfa3b92da9e53ddd2d8ba0e34531492c827"}], 0xd8, 0x40001}, 0x38) close(r3) 805.639499ms ago: executing program 5 (id=3712): syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000400)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @initial, {0x2, 0x6}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @measure_req={0x0, 0x0, {0x40, [{0x26, 0xb2, {0x9, 0x4, 0x6, "33c0499dde0398be2be76bfb0c9ca7bc06eaa99dab9b0f31ebf0db2a9979bcc6f5df3ff178a9cfddb61aff6b84b10a87ec4042bda283206182360bca3cae94577128799f633ae7ef418a0dd63584cdbeb1516cb8a7c03c3d3e514f26ce53f0dc8965a026a2e32d284baa4dabfc330ec9e6c17cb11c5d6df8260ccc507e278c037cadb89cfc845c833d0dda62161c64fc411898ebfd6fc85bbf1e4e95a3efebc2ceac87006299e8d3f8eaabb130ce21"}}, {0x26, 0xc3, {0x9, 0x2, 0x2a, "59c03c15cf0d4af5188031e6be17c7d52f9b7b542439a10f6f7cb178ee34b4648c3e8d4d2e2a6efcd4f5e0f57bc71a29c6cae3de0f0c3980f762a3cb3f7f8cf030d3643867b9e4d57d9a7eea2cbcf0515918423b4b114080f1d9c9dd69402a9a0f36b06429c0a906fd0f6007a2da1893e0d6ab71ae6e337c784f4aeb3fc04693ca732ff8f0c7e07641f2b278d278982c0489ce2ae569a5f294674e212b3192bbd835ff61336975cadcd21d43301bee800c0f5c01e5bb11f8485a267b940c56eb"}}, {0x26, 0xdd, {0x7, 0xfd, 0x1, "8b2d6b4abb624c2ac6d596ea1f1b5e0c409735e6f50d5ca9d4dde09f185693fa0c1ed8772a9142ebb77f6d3608cc2b7208e7fbce3c25575f547deeb422b9db041df6679a12184f60aeb84bf14914180cd8c921d66c730a9178c3ac9c0063d9f6821e19a5736407876c0d3752d4af031d7200ddb23520b3bba2b0338e96072470fa818b920d0c79285edf715303ab6799ba6e3de30fd52d31b76274a65260a51089bbf23420f72bc72f70727777a912a90d4ae6e87444a6f0db7ffa4966f5421406c4edcd0352dca26bac15fe7db08dbe513ee4de72a6c28f3829"}}, {0x26, 0x7e, {0x9, 0x4, 0x7, "baf7e90c821785995e9eaf82cbfdb3bf77ddc3a9d2c886808c67a838e2d9766f1b2765e362881339d7d3876c5bcf675d99e13cee8973666579d51438ffad022716ca5f9a7f25e9f2c3110daae4afb8ca5c8e8b5eafcc894e80996d654efdf12ef208836d1fe332e7793a1ce4f52bf0f57f43cca991cbffcdb8315c"}}, {0x26, 0xaf, {0xe7, 0x8, 0xa, "4c667119d659a6e15b230c73ce49aa5ecb0ea74f5b3e82e154c8230a576b922a2d38dc5fce2d1037de0f55f3b4e2280539e2cae28c66e9105011eda103f6dd321c3b5883d10e921e5950f4754bd90a25fa2e7284b92cdf9cd61163cc0b3103814d98a9d1310e8cfdc89ec64bd9236736d56cb4f3333ccd7272201deb0c2142f32be8739faa48c055d7e9856c0373a78618609e80a6d7fb1330ce3764dc46acc037ebcc43c2515aae1f052851"}}, {0x26, 0x42, {0x9, 0x5, 0x9, "dcec309dfbef1abf01c8cf62dae5084058b4fc95a77e65515cf1254783c574f932c93b870e9466586ddc5cca39ceef08cbce17631ba1b14e4080e2799f16f4"}}]}}}, 0x3ec) 636.044365ms ago: executing program 2 (id=3713): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x10000000]}}) 622.349103ms ago: executing program 4 (id=3714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r1, &(0x7f0000000040)="05d936277c6f54fc2208", 0x16, 0x20000001, &(0x7f0000000200)={0x11, 0xc, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2400000020000103ffffffff00000000020000000500000318000000080017004e244e24db0be63712806fb37db953a239f466c5"], 0x24}}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2e, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 621.242265ms ago: executing program 1 (id=3715): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x50000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000030000000a004e23000000040000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000000ff02000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000001fc0200000000000000000000000000005700"/528], 0x210) accept4$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x4, 0x3}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0xe, 0xa, 0x6ad, 0xfffffffc, r3}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r4, 0x4) 594.600399ms ago: executing program 2 (id=3716): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) write$ppp(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x25}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 576.844486ms ago: executing program 3 (id=3717): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x2, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x9, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x7, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 464.04004ms ago: executing program 4 (id=3718): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@sco={0x1f, @none}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000040)="bd669e8d5ea6a758b130c8", 0xb}, {&(0x7f0000000140)="ffff24a400f43167b1d2bebf6d11", 0xe}, {&(0x7f0000000180)="3444a7925ff7c0fca1be42a86b8002fc4afda35f8899a80efe8188b447e0d43fd3528dbcc0fea8809309b8c7d3cf48f6ac657647cfbde3415068e986a97f124ace54db918e92861f3d59e7a2e2c9cb655bab4b9bac901bf528ac2419e283e24c2e1ed50e7a1e309349c86c05b07e0142c114c1685a0b61b26136a1c91eebce5c5621063ec4ec6626b0d92f3a5b57f0a48780f13a02ce8db8321d7e386253f1d784a4c094d94b5ded5f74b772440def270f515359239cfbee3ddc2e1341d937e9a9baaf04b2bfba6427800a7b045381f5bceb09a79cf1a052f58318f5bf3651eb83c1febd4b3e0276dc50a2a761b8810c", 0xf0}, {&(0x7f0000000280)="e44177cb0ea01a2be634c360dd6ae6fb418970b89203480c8c76f88ee21e5e5616be8d96f4ca566e68279be1355a", 0x2e}, {&(0x7f00000002c0)="03135941eb53783070d12f1bbfe8c1dea20260aa566a4604561b52289d4527bc4eef956e23b068e275b0a3b6e2d83e9cfe982c954010d8c6b930c7a95d0b6476ad5f19b16d5a38d804f7105dece7d0de5caeceaa2bc2677f5ffb1a3f25cc61c2f2527c828b374b103601d5e16faae4d66f10f554", 0x74}, {&(0x7f0000000340)="a3704c714bde9c69359c531c0034b4398089631e2a7c6f15d2b4cb72b30b4a5762972f793d0851ecec4e2c928f97ac4f2631f068a73ee6fb85f5d8d2ae9c24d9b7a8782c31735fbab02662bd94d78bcd575b5491f328db34a4196ba89bfb582b62be96de6d3c26ce41be14293e56f0ee36d23e46f78f4d", 0x77}, {&(0x7f00000003c0)="1b260f47e2e55a58fc18fcbf0c9461cee45ae85afb4ef6ff119c7a40f94e3d3990f724363d16093620b13ad925874f3c49aab85b8732ad4d651a514d42461cedb6a1672ce21e79d38aa1d7fa8a6a9d94bf95ce5383b94447bb2d11a6006aed0f556e1732f60e80b9d937e3b07aa391dd052f61b3e4893a4fa7f2c6a49c14307fd694cdeb75bef58f494ca3354a3c7268f62f33aeacc5596d3bb2ccf6293715c6b74845ad58ce1b036bb04d49517e8ff0e45ebc7b785007e198723a52c9b947f7afdef4c539756d12004dbfc94425c0715bfe8387cc5f340e981cb4b26599bc7eb41af0b255c32fab4c2b", 0xea}], 0x7}, 0x4000080) 463.077417ms ago: executing program 1 (id=3719): socket$kcm(0x29, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)="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", 0x446}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}], 0x2}}], 0x2, 0x11) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x20, 0x9, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async) close(r3) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}}, 0x40) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 428.191169ms ago: executing program 3 (id=3720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYBLOB="4000000000020000"], 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYBLOB="4000000000020000"], 0x20}}, 0x0) 415.978938ms ago: executing program 4 (id=3721): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0xffffffffffffff9e, &(0x7f0000000140)={&(0x7f00000013c0)={0x24, r6, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x28044810) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x20040045) 327.837493ms ago: executing program 1 (id=3722): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x19}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x4020940d, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x2, &(0x7f0000000040), 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40268000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, 0x0, 0x220, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x24}}, 0x2000000) 326.423046ms ago: executing program 2 (id=3723): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00030004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100000020000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000206010100000000000000000000000005000100070000000900020073797a300000000016000300686173a379a45e2d058c7a72742c6e6574000000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r6, 0xd0d, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0fd49d884a05b2e8577ec4c31e"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x40040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x8000) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, 0x0, 0x0) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r11, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r11, &(0x7f0000002200), 0x10) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000001180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001140)={&(0x7f0000000a40)={0x6ec, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x900000}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8b}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x15a}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x929}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}]}}]}, 0x6ec}, 0x1, 0x0, 0x0, 0x30000011}, 0x4001004) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x3, 0x0, @multicast2}}}, 0x84) 232.531344ms ago: executing program 3 (id=3724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3e3}, {&(0x7f00000003c0)="847839fc378469d5765bd74a8532b82037b02c9e", 0x14}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r2, &(0x7f0000000000)="e9383e84bd1c4da86b31d863ac708e35d9bfd55857d6359709770673", 0x1c, 0x8880, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c8001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c00108008000240000000070800014000000100080002400000000908000240fffffffd0800024000005bab080002400000000708000340000000cf08000740000000001800068014002200ff020000000000000000000000000001"], 0xac}}, 0x0) 232.010437ms ago: executing program 4 (id=3725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x88}}, 0x0) 231.518425ms ago: executing program 1 (id=3726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "1f8271b57326d2cd06c77f7141082f8bc18164a8cde63d55c42552f43f2cb0126f46de26c849626f8f1e92ec1693d6580135c73acfe420c078830b68732dd35588582d1623a87e1c705a6260fccb8a9723b1299a305b1fe6d1858aad80f29d43bc45d44ee93b8a1cd5a2f7bd1c8d4711330bd8e17da2ca0f428712c1f913fd0526a82497ee4888b2695491dabe3af483ec6c939b9ab1893cada806b245f320eeb8005c6a6b520e65a4449408ae841b548e6e309f3b9ad5fbd764d7338052495f89a82be087b692eb11f5b9153d0a3f22b5586c2078662e25d9ab57d339904f6e824fc2b705ac50cde174f48bb04e934ea306e91be9343d09e05192691250e303"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x400000002, 0x0) (rerun: 32) pipe(&(0x7f0000000280)={0xffffffffffffffff}) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xfffffffffffffea9) 196.369702ms ago: executing program 2 (id=3727): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x9}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c1000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400260000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044804) 135.698791ms ago: executing program 4 (id=3728): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000005}}, 0x2e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001300)) readv(r0, &(0x7f0000001440), 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000001040)={0x1}) 135.156843ms ago: executing program 3 (id=3729): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) ioctl$SIOCNRDECOBS(r2, 0x89e2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) accept$ax25(r0, 0x0, 0x0) 110.802457ms ago: executing program 5 (id=3730): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async, rerun: 64) socket(0x2000000000000021, 0x2, 0x10000000000002) (rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r6, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1000018005"], 0x2c}}, 0x0) (async) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) 61.694398ms ago: executing program 4 (id=3731): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0xa, 0x0, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x0, @local}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffe2b, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104006bc30d08f4382cdced00"/29, @ANYRESDEC=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffe2b, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104006bc30d08f4382cdced00"/29, @ANYRESDEC=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 0s ago: executing program 2 (id=3732): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a8, 0x478, 0x1b0, 0x0, 0x1b0, 0x478, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, [], [0xc5a2f505a334aa82, 0xffffffff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x800, 0xdd2, 0x401, 0x0, 0xb, 0x3a5f2568, 0xcc, 0x2]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@remote, 0x0, 0x37}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@rateest={{0x68}, {'team_slave_1\x00', 'virt_wifi0\x00', 0x30, 0x3, 0x5, 0x1ff, 0x400, 0x2, {0xf666}, {0x4000000000000}}}]}, @HL={0x28, 'HL\x00', 0x0, {0xfe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000005380), 0x4) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) kernel console output (not intermixed with test programs): 351.800941][T13467] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2085'. [ 351.821724][T13446] bond0: (slave bridge0): Releasing backup interface [ 351.862662][T13470] IPVS: Unknown mcast interface: netpci0 [ 352.010291][T13474] tipc: Enabled bearer , priority 0 [ 352.027510][T13474] syzkaller0: entered promiscuous mode [ 352.040291][T13474] syzkaller0: entered allmulticast mode [ 352.105093][T13474] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 352.154554][T13474] tipc: Resetting bearer [ 352.183894][T13473] tipc: Resetting bearer [ 352.287058][T13473] tipc: Disabling bearer [ 352.410185][T13510] netlink: 'syz.0.2094': attribute type 1 has an invalid length. [ 352.474867][T13510] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.581293][T13510] bond5: (slave geneve2): making interface the new active one [ 352.591853][T13510] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 353.668805][T13587] veth7: entered promiscuous mode [ 353.708522][T13591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.227313][T13615] netlink: 'syz.0.2124': attribute type 10 has an invalid length. [ 354.314591][T13615] team0: Port device geneve0 added [ 354.661481][T13628] netlink: 'syz.4.2128': attribute type 1 has an invalid length. [ 354.785388][T13636] bond6: (slave bridge4): making interface the new active one [ 354.813281][T13636] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 355.003772][T13651] syzkaller1: entered promiscuous mode [ 355.010040][T13651] syzkaller1: entered allmulticast mode [ 355.045145][T13651] SET target dimension over the limit! [ 355.130189][T13655] tipc: Enabling of bearer rejected, media not registered [ 355.165103][T13657] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 355.379403][T13672] netlink: 'syz.1.2142': attribute type 1 has an invalid length. [ 355.395440][T13674] team_slave_0: mtu greater than device maximum [ 355.395443][T13672] netlink: 'syz.1.2142': attribute type 2 has an invalid length. [ 355.533597][T13679] syz.2.2147 uses old SIOCAX25GETINFO [ 355.540542][T13681] netlink: 'syz.3.2148': attribute type 1 has an invalid length. [ 355.553836][T13681] netlink: 'syz.3.2148': attribute type 1 has an invalid length. [ 355.684242][T13692] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 355.798780][T13694] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 355.928748][T13712] __nla_validate_parse: 14 callbacks suppressed [ 355.928764][T13712] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2152'. [ 355.938428][T13708] netlink: 'syz.4.2154': attribute type 11 has an invalid length. [ 355.953887][T13708] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2154'. [ 356.220521][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 356.345681][T13490] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.373472][T13490] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.410956][T13490] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20003 - 0 [ 356.422526][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 356.579192][T13746] netlink: 'syz.4.2165': attribute type 1 has an invalid length. [ 356.596625][T13746] netlink: 'syz.4.2165': attribute type 1 has an invalid length. [ 356.810082][T13759] Cannot find add_set index 2 as target [ 356.859198][T13758] netlink: 'syz.1.2171': attribute type 1 has an invalid length. [ 356.943057][T13755] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 356.956236][T13755] bond7 (unregistering): Released all slaves [ 357.053503][T13771] bond3: (slave geneve2): making interface the new active one [ 357.062315][T13771] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 357.072016][T13777] veth0: entered promiscuous mode [ 357.104041][T13494] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 357.120780][T13494] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 357.159993][T13494] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 357.199451][T13492] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 357.243495][T13768] veth0: left promiscuous mode [ 357.269703][T13790] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2175'. [ 357.313105][T13789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2176'. [ 357.340183][T13792] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2175'. [ 357.441595][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2175'. [ 357.479350][T13796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2180'. [ 357.552694][T13801] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 357.752649][T13813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2188'. [ 358.059918][T13841] netlink: 'syz.2.2194': attribute type 1 has an invalid length. [ 358.493838][T13857] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 358.514594][T13857] netlink: 'syz.2.2200': attribute type 10 has an invalid length. [ 358.539166][T13857] netlink: 'syz.2.2200': attribute type 4 has an invalid length. [ 358.951337][T13876] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 358.979456][T13877] syzkaller0: entered promiscuous mode [ 358.994414][T13877] syzkaller0: entered allmulticast mode [ 359.342951][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.350989][T13895] bond0 (unregistering): left promiscuous mode [ 359.366715][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.374600][T13895] bridge_slave_1: left promiscuous mode [ 359.389271][T13895] geneve1: left promiscuous mode [ 359.398029][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.432367][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.440466][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.480623][T13906] netlink: 'syz.2.2217': attribute type 2 has an invalid length. [ 359.491156][T13895] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 359.502001][T13895] bridge_slave_1: left allmulticast mode [ 359.519801][T13895] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 359.528807][T13895] geneve1: left allmulticast mode [ 359.542975][T13895] bond0 (unregistering): Released all slaves [ 359.570359][T13908] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.595062][T13908] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 359.612631][T13908] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 359.695471][T13898] lo speed is unknown, defaulting to 1000 [ 359.797172][T13908] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.807592][T13908] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 359.819263][T13908] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 359.899882][T13908] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.914790][T13908] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 359.925196][T13908] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 360.001808][T13908] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.013085][T13908] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 360.023487][T13908] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 360.163659][T13898] chnl_net:caif_netlink_parms(): no params data found [ 360.282002][T13492] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.292758][T13492] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 360.304989][T13492] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 360.369636][T13494] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.384921][T13494] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 360.412787][T13494] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 360.465409][T13494] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.479886][T13494] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 360.488759][T13494] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 360.539852][T13490] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.551747][T13490] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 360.560537][T13490] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 360.598605][T13898] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.617861][T13898] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.625099][T13898] bridge_slave_0: entered allmulticast mode [ 360.696898][T13898] bridge_slave_0: entered promiscuous mode [ 360.721593][T13967] tipc: Enabled bearer , priority 0 [ 360.729817][T13963] syzkaller0: entered promiscuous mode [ 360.735306][T13963] syzkaller0: entered allmulticast mode [ 360.745682][T13971] netlink: 'syz.4.2232': attribute type 4 has an invalid length. [ 360.748830][T13898] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.764110][T13972] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 360.782903][T13898] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.815389][T13898] bridge_slave_1: entered allmulticast mode [ 360.828811][T13898] bridge_slave_1: entered promiscuous mode [ 360.886783][T13963] tipc: Resetting bearer [ 360.895200][T13968] syz_tun: entered allmulticast mode [ 360.917235][T13961] tipc: Resetting bearer [ 360.966071][T13961] tipc: Disabling bearer [ 360.983416][T13975] tipc: Enabled bearer , priority 0 [ 360.993817][T13898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.005270][T13966] syz_tun: left allmulticast mode [ 361.013036][T13976] syzkaller0: entered promiscuous mode [ 361.019449][T13976] syzkaller0: entered allmulticast mode [ 361.041323][T13898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.167107][T13987] __nla_validate_parse: 10 callbacks suppressed [ 361.167124][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2237'. [ 361.169239][T13976] tipc: Resetting bearer [ 361.219171][T13974] tipc: Resetting bearer [ 361.258885][T13974] tipc: Disabling bearer [ 361.281261][T13991] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 361.292413][T13898] team0: Port device team_slave_0 added [ 361.299128][T13991] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 361.310275][T13991] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 361.317785][T13991] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 361.351745][T13898] team0: Port device team_slave_1 added [ 361.367090][T13991] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 361.374012][T13991] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 361.485666][T13898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.504542][T13898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.539697][ T5846] Bluetooth: hci0: command tx timeout [ 361.554495][T13898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.570613][T13898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.577821][T13898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.606923][T13898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.870467][T13898] hsr_slave_0: entered promiscuous mode [ 361.881722][T13898] hsr_slave_1: entered promiscuous mode [ 361.917324][T13898] debugfs: 'hsr0' already exists in 'hsr' [ 361.923086][T13898] Cannot create hsr debugfs directory [ 362.443857][T14052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2256'. [ 362.725205][T14072] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2261'. [ 362.833511][T13898] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 362.841586][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2263'. [ 362.864178][T13898] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 362.964180][T13898] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 362.999315][T13898] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 363.182082][T14106] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 363.192208][T14106] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 363.285458][T13898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.419921][T13898] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.474008][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 363.491231][T14122] tipc: Enabled bearer , priority 0 [ 363.522080][T13494] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.529346][T13494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.541092][T14122] tipc: Disabling bearer [ 363.556043][T13494] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.563253][T13494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.616644][ T5846] Bluetooth: hci0: command tx timeout [ 363.872279][T14136] xt_hashlimit: size too large, truncated to 1048576 [ 364.070782][T13898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.273706][T14157] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2282'. [ 364.325600][T14157] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2282'. [ 364.367792][T14157] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2282'. [ 364.404053][T14157] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2282'. [ 364.441514][T14157] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2282'. [ 364.452125][T14164] x_tables: duplicate underflow at hook 4 [ 364.772436][T14184] netlink: 'syz.3.2290': attribute type 10 has an invalid length. [ 364.867458][T13898] veth0_vlan: entered promiscuous mode [ 364.924835][T13898] veth1_vlan: entered promiscuous mode [ 364.967735][T14195] xt_NFQUEUE: number of total queues is 0 [ 365.031751][T14197] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 365.060959][T13898] veth0_macvtap: entered promiscuous mode [ 365.102608][T13898] veth1_macvtap: entered promiscuous mode [ 365.159950][T13898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.245897][T13898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.292808][T14174] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.319519][T14174] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.347192][T14174] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.361685][T14174] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.427409][T14218] bond7: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 365.601527][T13495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.649517][T13495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.701006][ T5846] Bluetooth: hci0: command tx timeout [ 365.813912][T13499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.843399][T13499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.035528][T14277] __nla_validate_parse: 66 callbacks suppressed [ 367.035547][T14277] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2303'. [ 367.037766][T14281] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2305'. [ 367.051068][T14277] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2303'. [ 367.051093][T14277] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2303'. [ 367.091180][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 367.100299][T14281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2305'. [ 367.322706][T14298] xt_nat: multiple ranges no longer supported [ 367.379781][T14300] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 367.675492][T14307] syzkaller0: entered promiscuous mode [ 367.686095][T14307] syzkaller0: entered allmulticast mode [ 367.776620][ T5846] Bluetooth: hci0: command tx timeout [ 369.140248][T14319] syzkaller0: entered promiscuous mode [ 369.145746][T14319] syzkaller0: entered allmulticast mode [ 369.155549][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'. [ 369.291097][T14362] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20004 [ 369.327521][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'. [ 369.484085][T14371] syzkaller1: entered promiscuous mode [ 369.505581][T14371] syzkaller1: entered allmulticast mode [ 369.763589][T14392] nbd: must specify a size in bytes for the device [ 370.117542][T14417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2339'. [ 370.195675][T14424] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 370.414356][T14433] 8021q: VLANs not supported on ip_vti0 [ 370.589515][T14457] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2350'. [ 371.037489][T14480] lo: entered allmulticast mode [ 371.111643][T14485] lo: left allmulticast mode [ 371.313789][T14494] Bluetooth: MGMT ver 1.23 [ 371.523135][T14501] syzkaller0: entered promiscuous mode [ 371.556865][T14501] syzkaller0: entered allmulticast mode [ 372.244233][T14532] __nla_validate_parse: 7 callbacks suppressed [ 372.244251][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2370'. [ 372.265649][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2370'. [ 372.941911][T14523] vxcan2: entered allmulticast mode [ 372.980261][T14532] erspan0: entered promiscuous mode [ 373.002192][T14532] erspan0: left promiscuous mode [ 373.228026][T14552] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2377'. [ 373.242387][T14550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2375'. [ 373.268548][T14552] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2377'. [ 373.281433][T14550] netlink: 'syz.4.2375': attribute type 10 has an invalid length. [ 373.332294][T14558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2376'. [ 373.591903][T14571] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 373.625244][T14572] tipc: Enabled bearer , priority 0 [ 373.653995][T14572] syzkaller0: entered promiscuous mode [ 373.662624][T14572] syzkaller0: entered allmulticast mode [ 373.699981][T14572] tipc: Resetting bearer [ 373.712649][T14569] tipc: Resetting bearer [ 373.738517][T14569] tipc: Disabling bearer [ 374.647016][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2384'. [ 374.684237][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2386'. [ 374.708176][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2384'. [ 374.729665][T14584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2387'. [ 374.784583][T14590] netlink: 'syz.1.2389': attribute type 30 has an invalid length. [ 375.016716][T14607] nbd: socks must be embedded in a SOCK_ITEM attr [ 375.411701][T14625] bond7 (unregistering): Released all slaves [ 375.522296][T14626] bond7 (unregistering): Released all slaves [ 375.543542][T14644] tipc: Enabled bearer , priority 0 [ 375.552214][T14634] syzkaller0: entered promiscuous mode [ 375.558057][T14634] syzkaller0: entered allmulticast mode [ 375.576055][T14634] tipc: Resetting bearer [ 375.599368][T14634] sock: sock_set_timeout: `syz.3.2401' (pid 14634) tries to set negative timeout [ 375.618999][T14632] tipc: Resetting bearer [ 375.652241][T14632] tipc: Disabling bearer [ 378.582686][ T1301] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 435.887528][T14681] netlink: 'syz.4.2407': attribute type 4 has an invalid length. [ 435.888990][T14675] tipc: Enabled bearer , priority 0 [ 435.925822][T14681] netlink: 'syz.4.2407': attribute type 4 has an invalid length. [ 435.937177][T14675] syzkaller0: entered promiscuous mode [ 435.947600][T14675] syzkaller0: entered allmulticast mode [ 435.971695][T14675] tipc: Resetting bearer [ 435.996482][T14675] syzkaller0: tun_net_xmit 90 [ 436.025515][ T30] audit: type=1107 audit(1760437117.321:3): pid=14684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='x0x'XEt ^2V N"nT 6#bIEMvIPS=kn{cz S#}Tu' [ 436.072428][T14674] tipc: Resetting bearer [ 436.160086][T14674] tipc: Disabling bearer [ 436.187139][T14693] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 436.472296][T14720] IPVS: persistence engine module ip_vs_pe_ not found [ 436.495145][T14724] IPVS: persistence engine module ip_vs_pe_ not found [ 436.829366][T14747] ip6t_srh: unknown srh invflags 4000 [ 436.843778][T14742] tipc: Enabled bearer , priority 0 [ 436.888913][T14742] syzkaller0: entered promiscuous mode [ 436.906215][T14742] syzkaller0: entered allmulticast mode [ 436.913896][T14750] netem: change failed [ 436.922459][T14750] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 437.011960][T14742] tipc: Resetting bearer [ 437.355142][T14772] netlink: 'syz.5.2431': attribute type 11 has an invalid length. [ 437.368796][T14772] netlink: 'syz.5.2431': attribute type 11 has an invalid length. [ 437.379068][T14772] __nla_validate_parse: 2 callbacks suppressed [ 437.379085][T14772] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2431'. [ 437.533534][T14782] netlink: 'syz.1.2438': attribute type 5 has an invalid length. [ 437.551474][T14738] tipc: Resetting bearer [ 437.589553][T14738] tipc: Disabling bearer [ 437.723359][T14791] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 437.749614][T14792] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 437.946024][T14802] netlink: 'syz.3.2442': attribute type 1 has an invalid length. [ 438.006055][T14807] netlink: 'syz.2.2445': attribute type 10 has an invalid length. [ 438.031255][T14807] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 438.209153][T14818] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2447'. [ 438.214312][T14813] bond0: (slave bond_slave_1): Device is not bonding slave [ 438.228644][T14813] bond0: option active_slave: invalid value (bond_slave_1) [ 438.248202][T14813] bond0 (unregistering): Released all slaves [ 438.300659][T14824] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 438.684721][T14853] syzkaller1: entered promiscuous mode [ 438.697637][T14853] syzkaller1: entered allmulticast mode [ 438.768828][T14860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2459'. [ 438.870910][T14865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2461'. [ 438.898946][T14867] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 438.952284][T14871] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2463'. [ 439.314363][T14889] netlink: 'syz.5.2471': attribute type 19 has an invalid length. [ 439.487854][T14898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2472'. [ 439.517983][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2474'. [ 439.583347][T14903] netlink: 'syz.4.2475': attribute type 2 has an invalid length. [ 439.600280][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'. [ 439.623834][T14899] Cannot find add_set index 0 as target [ 439.827556][T14910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.027515][ T1301] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 440.399638][T14914] vxcan1: left promiscuous mode [ 440.404548][T14914] vxcan1: left allmulticast mode [ 440.562566][T14914] veth0_virt_wifi: left allmulticast mode [ 440.573907][T14914] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 440.849606][T14947] 8021q: adding VLAN 0 to HW filter on device bond6 [ 441.018650][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2488'. [ 441.059241][T14967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2488'. [ 441.076232][T14969] netlink: 'syz.5.2489': attribute type 4 has an invalid length. [ 441.088612][T14965] openvswitch: netlink: Flow key attr not present in new flow. [ 441.097076][T14969] netlink: 'syz.5.2489': attribute type 2 has an invalid length. [ 441.104904][T14967] openvswitch: netlink: Flow key attr not present in new flow. [ 442.120020][ T3471] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.145837][ T3471] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.185337][ T3471] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 442.265008][T15039] netlink: 'syz.3.2506': attribute type 4 has an invalid length. [ 442.929054][T15063] __nla_validate_parse: 1 callbacks suppressed [ 442.929074][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2511'. [ 443.383269][T15090] tipc: Enabled bearer , priority 0 [ 443.403059][T15090] syzkaller0: entered promiscuous mode [ 443.422212][T15090] syzkaller0: entered allmulticast mode [ 443.453218][T15089] tipc: Resetting bearer [ 443.524188][T15089] tipc: Disabling bearer [ 443.540595][T15103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2521'. [ 443.558133][T15103] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2521'. [ 443.904979][T14943] IPVS: starting estimator thread 0... [ 443.929842][T15128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2529'. [ 444.026749][T15125] IPVS: using max 32 ests per chain, 76800 per kthread [ 444.147969][T15133] dvmrp1: entered allmulticast mode [ 444.209675][T15133] openvswitch: netlink: Message has 2359 unknown bytes. [ 444.233460][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2532'. [ 444.244979][T15133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.295069][T15137] syzkaller0: entered promiscuous mode [ 444.311831][T15137] syzkaller0: entered allmulticast mode [ 444.342420][T15148] netlink: 'syz.1.2535': attribute type 1 has an invalid length. [ 444.384682][T15148] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2535'. [ 444.848185][T15169] xt_TCPMSS: Only works on TCP SYN packets [ 445.052100][T15182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2547'. [ 445.132035][T15185] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2548'. [ 445.319775][T15195] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2552'. [ 445.321829][T15194] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2551'. [ 445.362040][T15194] gretap0: entered promiscuous mode [ 445.393522][T15194] 0{X: renamed from gretap0 [ 445.436117][T15194] 0{X: left promiscuous mode [ 445.443671][T15194] 0{X: entered allmulticast mode [ 445.476545][T15194] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 446.378388][T15259] delete_channel: no stack [ 446.424259][T15257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.462694][T15257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.639503][T15264] bond1: entered promiscuous mode [ 446.739058][T15257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.813772][T15257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.981526][T15257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.047416][T15257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 447.230844][T15257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.276392][T15257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 447.403946][T15300] netlink: 'syz.1.2582': attribute type 13 has an invalid length. [ 447.429196][T15300] netlink: 'syz.1.2582': attribute type 58 has an invalid length. [ 447.475417][T13499] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 447.488631][T13499] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 447.553010][ T3471] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 447.564057][ T3471] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 447.588834][ T3471] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 447.597584][ T3471] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 447.617384][T14174] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 447.625656][T14174] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 447.946075][T15326] __nla_validate_parse: 6 callbacks suppressed [ 447.946094][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2589'. [ 448.384968][T15344] xt_hashlimit: max too large, truncated to 1048576 [ 448.420965][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2595'. [ 448.454587][T15348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.907786][T15381] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2604'. [ 448.933517][T15381] hsr_slave_0: left promiscuous mode [ 448.956867][T15381] hsr_slave_1: left promiscuous mode [ 449.040943][T15388] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 449.199735][T15397] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 449.241018][T15399] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 449.395167][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2612'. [ 449.432052][T15412] netlink: zone id is out of range [ 449.448819][T15416] netlink: 'syz.2.2615': attribute type 21 has an invalid length. [ 449.456746][T15414] x_tables: duplicate underflow at hook 3 [ 449.460010][T15412] netlink: del zone limit has 4 unknown bytes [ 449.516901][T15416] IPv6: NLM_F_CREATE should be specified when creating new route [ 449.730590][T15428] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 449.874505][T15445] netlink: 'syz.1.2623': attribute type 11 has an invalid length. [ 449.916079][T15445] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2623'. [ 450.014420][T15450] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2625'. [ 450.961710][T15493] netlink: 'syz.2.2634': attribute type 1 has an invalid length. [ 451.162681][T15500] Bluetooth: MGMT ver 1.23 [ 451.233798][T15503] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 451.436413][T15510] netlink: 'syz.4.2639': attribute type 10 has an invalid length. [ 451.496559][T15510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2639'. [ 451.516140][T15512] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 451.531751][T15510] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 451.588678][T15520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2642'. [ 451.943331][T15540] Bluetooth: hci0: invalid len left 70, exp >= 222 [ 452.264447][T15548] netlink: 'syz.1.2651': attribute type 83 has an invalid length. [ 452.512349][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2655'. [ 452.533776][T15573] netlink: 'syz.4.2655': attribute type 10 has an invalid length. [ 452.579488][T15573] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 452.910192][T15597] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2660'. [ 452.948146][T15600] netlink: 'syz.3.2662': attribute type 2 has an invalid length. [ 453.055769][T15605] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2664'. [ 453.383995][T15627] geneve3: entered promiscuous mode [ 453.465777][T15622] xt_CT: No such helper "snmp" [ 453.555632][T15633] lo speed is unknown, defaulting to 1000 [ 453.664653][T15641] netlink: 'syz.4.2672': attribute type 19 has an invalid length. [ 453.819515][T15652] netlink: 'syz.3.2674': attribute type 1 has an invalid length. [ 453.885488][T15659] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2675'. [ 453.990795][T15662] veth1_to_bond: entered allmulticast mode [ 454.002797][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2677'. [ 454.050486][T15662] bond0: (slave bond_slave_1): Releasing backup interface [ 454.081065][T15662] veth1_to_bond (unregistering): left allmulticast mode [ 454.144384][T15675] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2681'. [ 454.273747][T15684] netlink: 'syz.3.2682': attribute type 16 has an invalid length. [ 454.283187][T15684] netlink: 'syz.3.2682': attribute type 3 has an invalid length. [ 454.291883][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2682'. [ 454.303350][T15682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2683'. [ 454.680045][T15699] SET target dimension over the limit! [ 454.690240][T15709] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2690'. [ 454.790837][T15709] sctp: [Deprecated]: syz.3.2690 (pid 15709) Use of int in maxseg socket option. [ 454.790837][T15709] Use struct sctp_assoc_value instead [ 454.838383][T15716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2691'. [ 454.855549][T15713] netlink: 'syz.3.2690': attribute type 16 has an invalid length. [ 454.890829][T15713] netlink: 'syz.3.2690': attribute type 17 has an invalid length. [ 454.984462][T15713] 0{X: left allmulticast mode [ 455.065835][T15713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.081190][T15713] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.109353][T15713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.179025][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2693'. [ 455.181840][T15728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2694'. [ 455.320335][T15713] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 455.498395][T15740] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 456.084284][T15781] xt_socket: unknown flags 0xe4 [ 456.160935][T15784] syzkaller1: entered promiscuous mode [ 456.197488][T15784] syzkaller1: entered allmulticast mode [ 456.522127][ T5200] udevd[5200]: worker [15419] terminated by signal 33 (Unknown signal 33) [ 457.205655][T15839] netlink: 'syz.4.2725': attribute type 6 has an invalid length. [ 457.311388][T15838] syzkaller0: entered promiscuous mode [ 457.337555][T15838] syzkaller0: entered allmulticast mode [ 457.855453][T15870] IPv6: sit2: Disabled Multicast RS [ 458.002995][T15876] netlink: 'syz.2.2737': attribute type 32 has an invalid length. [ 458.073210][T15876] bond9: option coupled_control: invalid value (146) [ 458.091327][T15876] bond9 (unregistering): Released all slaves [ 458.236953][T15883] tipc: Enabling of bearer rejected, failed to enable media [ 458.328185][T15886] __nla_validate_parse: 11 callbacks suppressed [ 458.328213][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2740'. [ 458.396685][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2739'. [ 458.637833][T15894] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2741'. [ 458.651542][T15898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.700846][T15901] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2741'. [ 459.252460][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057358000: rx timeout, send abort [ 459.486745][T15927] netlink: 'syz.5.2752': attribute type 1 has an invalid length. [ 459.500722][T15926] veth0: entered promiscuous mode [ 459.510819][T15924] veth0: left promiscuous mode [ 459.613137][T15933] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2754'. [ 459.644215][T15933] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2754'. [ 459.691158][T15933] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2754'. [ 459.724358][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 459.741046][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 459.749968][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 459.758627][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 459.760727][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057358000: abort rx timeout. Force session deactivation [ 459.789935][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 459.840505][T15938] lo speed is unknown, defaulting to 1000 [ 459.903073][T15947] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2756'. [ 459.979989][T15947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2756'. [ 460.218924][T15964] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2762'. [ 460.219390][T15938] chnl_net:caif_netlink_parms(): no params data found [ 460.432435][T15938] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.442933][T15938] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.454835][T15938] bridge_slave_0: entered allmulticast mode [ 460.466609][T15938] bridge_slave_0: entered promiscuous mode [ 460.476186][T15938] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.484016][T15938] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.491402][T15938] bridge_slave_1: entered allmulticast mode [ 460.500285][T15938] bridge_slave_1: entered promiscuous mode [ 460.580925][T15983] netlink: 'syz.4.2766': attribute type 16 has an invalid length. [ 460.591960][T15983] netlink: 'syz.4.2766': attribute type 17 has an invalid length. [ 460.623659][T15938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.654135][T15983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.673479][T15938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.690145][T15978] ip6gre1: entered allmulticast mode [ 460.768490][T15938] team0: Port device team_slave_0 added [ 460.790005][T15938] team0: Port device team_slave_1 added [ 460.883303][T15938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.891338][T15938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.920336][T15938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.943564][T15938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.951830][T15938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.981931][T15938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.001174][T15994] bridge_slave_1: left allmulticast mode [ 461.010979][T15994] bridge_slave_1: left promiscuous mode [ 461.017795][T15994] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.030737][T15994] bridge_slave_0: left allmulticast mode [ 461.040749][T15994] bridge_slave_0: left promiscuous mode [ 461.047671][T15994] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.170291][T15938] hsr_slave_0: entered promiscuous mode [ 461.177884][T15938] hsr_slave_1: entered promiscuous mode [ 461.188965][T15938] debugfs: 'hsr0' already exists in 'hsr' [ 461.197192][T15938] Cannot create hsr debugfs directory [ 461.496083][T16021] tipc: Enabled bearer , priority 0 [ 461.513373][T16021] syzkaller0: entered promiscuous mode [ 461.525505][T16021] syzkaller0: entered allmulticast mode [ 461.562986][T15938] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 461.599860][T15938] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 461.687941][T16031] tipc: Resetting bearer [ 461.705178][T15938] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 461.730452][T15938] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 461.796538][T16019] tipc: Resetting bearer [ 461.839514][T16019] tipc: Disabling bearer [ 461.857025][ T5846] Bluetooth: hci3: command tx timeout [ 461.876239][T15938] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 461.889023][T15938] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 461.967744][T15938] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 461.980994][T15938] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.610407][T16069] syzkaller0: entered promiscuous mode [ 462.615977][T16069] syzkaller0: entered allmulticast mode [ 462.624393][T16068] xt_TCPMSS: Only works on TCP SYN packets [ 462.709330][T15938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 462.739136][T15938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 462.763325][T16072] netlink: 'syz.4.2788': attribute type 10 has an invalid length. [ 462.844105][T16072] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 462.860353][T15938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 462.897253][T15938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 462.994506][T16093] bridge0: port 1(vlan0) entered blocking state [ 463.004005][T16093] bridge0: port 1(vlan0) entered disabled state [ 463.010791][T16093] vlan0: entered allmulticast mode [ 463.016077][T16093] bridge0: entered allmulticast mode [ 463.035588][T16093] vlan0: left allmulticast mode [ 463.041353][T16093] bridge0: left allmulticast mode [ 463.055182][T16096] netlink: 'syz.1.2794': attribute type 32 has an invalid length. [ 463.220865][T15938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.271819][T15938] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.302606][T13498] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.309803][T13498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.359080][T13498] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.366336][T13498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.739789][T16132] __nla_validate_parse: 6 callbacks suppressed [ 463.739807][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2802'. [ 463.799886][T16132] netlink: 'syz.4.2802': attribute type 8 has an invalid length. [ 463.818903][T16136] netlink: 'syz.5.2803': attribute type 33 has an invalid length. [ 463.936934][ T5846] Bluetooth: hci3: command tx timeout [ 463.944911][T15938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.021002][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2808'. [ 464.025681][T15938] veth0_vlan: entered promiscuous mode [ 464.043038][T15938] veth1_vlan: entered promiscuous mode [ 464.052659][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2808'. [ 464.157063][T16157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2811'. [ 464.181628][T15938] veth0_macvtap: entered promiscuous mode [ 464.238598][T15938] veth1_macvtap: entered promiscuous mode [ 464.265488][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2813'. [ 464.273440][T16162] team0: No ports can be present during mode change [ 464.306805][T16162] tipc: Started in network mode [ 464.315098][T16162] tipc: Node identity 7f000001, cluster identity 4711 [ 464.323956][T16162] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 464.332013][T16162] tipc: Enabled bearer , priority 10 [ 464.352794][T15938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.401818][T15938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.456607][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 464.469691][ T3471] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.485250][ T3471] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.512773][ T3471] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.549031][ T3471] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.614782][T16177] netlink: 'syz.5.2817': attribute type 5 has an invalid length. [ 464.653984][T16182] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 464.729425][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 464.864952][T16199] netlink: 'syz.2.2822': attribute type 1 has an invalid length. [ 464.873516][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 464.972014][T16199] 8021q: adding VLAN 0 to HW filter on device bond9 [ 465.011161][T16200] 8021q: adding VLAN 0 to HW filter on device bond9 [ 465.016472][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 465.018681][T16200] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 465.039166][T16200] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 465.082469][T16204] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 465.095229][T16204] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 465.140009][T13499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.148331][T13499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.156651][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 465.272818][T16217] netlink: 'syz.2.2826': attribute type 83 has an invalid length. [ 465.293475][T14174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.301516][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 465.321853][T14174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.436993][T14946] tipc: Node number set to 2130706433 [ 465.443566][T16226] tipc: Enabling of bearer rejected, already enabled [ 465.497733][T16229] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 465.550315][T16229] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 465.577020][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 465.605424][T16229] gretap1: entered promiscuous mode [ 465.644494][T16229] gretap1: entered allmulticast mode [ 465.675060][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2833'. [ 465.823896][T16245] netlink: 'syz.3.2833': attribute type 3 has an invalid length. [ 465.846745][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 465.866384][T16245] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2833'. [ 465.963529][T16252] tipc: Enabled bearer , priority 0 [ 465.974733][T16252] syzkaller0: entered promiscuous mode [ 465.980576][T16252] syzkaller0: entered allmulticast mode [ 466.009919][T16252] tipc: Resetting bearer [ 466.017463][ T5846] Bluetooth: hci3: command tx timeout [ 466.038776][T16251] tipc: Resetting bearer [ 466.068469][T16251] tipc: Disabling bearer [ 466.103489][T16259] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.2837'. [ 466.263941][T16268] netlink: 'syz.4.2839': attribute type 2 has an invalid length. [ 466.277763][T16268] netlink: 'syz.4.2839': attribute type 83 has an invalid length. [ 466.336173][T16270] tipc: Enabled bearer , priority 0 [ 466.348903][T16270] syzkaller0: entered promiscuous mode [ 466.354399][T16270] syzkaller0: entered allmulticast mode [ 466.364125][T16270] tipc: Resetting bearer [ 466.376679][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 466.394261][T16270] tipc: Disabling bearer [ 466.580622][T16281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2843'. [ 466.641641][T13499] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.653187][T13499] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.691298][T13499] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.707807][T13499] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.854046][T16291] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 466.864127][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2850'. [ 467.196165][ T3471] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.217661][ T3471] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.232885][ T3471] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.251948][ T3471] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.097857][ T5846] Bluetooth: hci3: command tx timeout [ 468.134376][T16358] syzkaller0: entered promiscuous mode [ 468.140286][T16358] syzkaller0: entered allmulticast mode [ 468.173942][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 468.216936][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.235989][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.250846][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.259476][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 469.536447][ C1] net_ratelimit: 4 callbacks suppressed [ 469.536464][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 469.555967][T16370] lo speed is unknown, defaulting to 1000 [ 469.749101][T16391] validate_nla: 1 callbacks suppressed [ 469.749121][T16391] netlink: 'syz.3.2879': attribute type 1 has an invalid length. [ 469.978635][T16403] veth3: entered promiscuous mode [ 470.038662][T16370] chnl_net:caif_netlink_parms(): no params data found [ 470.046932][T16406] __nla_validate_parse: 24 callbacks suppressed [ 470.046949][T16406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2882'. [ 470.078296][T16414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2884'. [ 470.325093][T16427] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 470.336683][ T5846] Bluetooth: hci2: command tx timeout [ 470.344915][T16427] bond4 (unregistering): Released all slaves [ 470.359684][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2888'. [ 470.576582][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 470.621015][T16370] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.629799][T16370] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.640461][T16370] bridge_slave_0: entered allmulticast mode [ 470.648693][T16370] bridge_slave_0: entered promiscuous mode [ 470.660337][T16370] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.670901][T16370] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.679017][T16370] bridge_slave_1: entered allmulticast mode [ 470.694085][T16370] bridge_slave_1: entered promiscuous mode [ 470.939280][T16370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.970473][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2897'. [ 470.993756][T16370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.099557][T16476] netlink: 'syz.5.2897': attribute type 33 has an invalid length. [ 471.101373][T16370] team0: Port device team_slave_0 added [ 471.128708][T16370] team0: Port device team_slave_1 added [ 471.225204][T16476] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 471.243990][T16476] bond2 (unregistering): Released all slaves [ 471.304643][T16370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.306108][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'. [ 471.316029][T16370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.347691][T16370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.361579][T16370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.369913][T16370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.397771][T16370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.418956][T16490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2903'. [ 471.438268][T16490] netlink: 'syz.3.2903': attribute type 11 has an invalid length. [ 471.471284][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2904'. [ 471.589549][T16370] hsr_slave_0: entered promiscuous mode [ 471.613126][T16370] hsr_slave_1: entered promiscuous mode [ 471.626558][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 471.628121][T16370] debugfs: 'hsr0' already exists in 'hsr' [ 471.675924][T16370] Cannot create hsr debugfs directory [ 472.080234][T16529] netlink: 'syz.2.2917': attribute type 1 has an invalid length. [ 472.189933][T16529] 8021q: adding VLAN 0 to HW filter on device bond10 [ 472.210830][T16370] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.221607][T16370] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 472.231748][T16370] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 472.292153][T16538] bond10: (slave veth9): Enslaving as an active interface with a down link [ 472.323300][T16543] bond4: entered promiscuous mode [ 472.337159][T16547] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 472.347176][T16547] bond4: (slave macvlan3): Enslaving as an active interface with a down link [ 472.367997][T16545] bond10: (slave veth0_to_bond): making interface the new active one [ 472.378393][T16543] netlink: 'syz.1.2921': attribute type 10 has an invalid length. [ 472.389397][T16545] veth0_to_bond: entered promiscuous mode [ 472.395501][T16545] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 472.411612][T16548] bridge0: port 1(syz_tun) entered blocking state [ 472.417205][ T5846] Bluetooth: hci2: command tx timeout [ 472.419502][T16548] bridge0: port 1(syz_tun) entered disabled state [ 472.430778][T16548] syz_tun: entered allmulticast mode [ 472.438172][T16548] syz_tun: entered promiscuous mode [ 472.447637][T16370] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.466570][T16370] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 472.486356][T16370] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 472.559922][T16538] bond10: (slave veth11): Enslaving as an active interface with a down link [ 472.652189][T16370] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.662350][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 472.703449][T16370] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 472.721802][T16370] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 472.799177][T16370] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.826759][T16370] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 472.846340][T16370] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 473.017805][T16547] infiniband syz1: set down [ 473.022513][T16547] infiniband syz1: added syz_tun [ 473.044361][T16547] syz1: rxe_create_cq: returned err = -12 [ 473.050915][T16547] infiniband syz1: Couldn't create ib_mad CQ [ 473.078140][T16547] infiniband syz1: Couldn't open port 1 [ 473.185019][T16547] RDS/IB: syz1: added [ 473.206224][T16547] smc: adding ib device syz1 with port count 1 [ 473.230778][T16370] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 473.236147][T16547] smc: ib device syz1 port 1 has no pnetid [ 473.252000][T16370] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 473.275774][T16370] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 473.302263][T16370] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 473.489861][T16370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.522672][T16370] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.542027][T13498] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.549224][T13498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.578250][T13498] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.585422][T13498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.696985][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 473.833134][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2936'. [ 473.891972][T16370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.032766][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 474.184549][T16616] netlink: 'syz.3.2940': attribute type 4 has an invalid length. [ 474.214244][T16616] netlink: 'syz.3.2940': attribute type 4 has an invalid length. [ 474.235278][T16618] netlink: 'syz.2.2939': attribute type 1 has an invalid length. [ 474.282080][T16618] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2939'. [ 474.506076][ T5846] Bluetooth: hci2: command tx timeout [ 474.568710][T16370] veth0_vlan: entered promiscuous mode [ 474.601782][T16370] veth1_vlan: entered promiscuous mode [ 474.645383][T16370] veth0_macvtap: entered promiscuous mode [ 474.660361][T16370] veth1_macvtap: entered promiscuous mode [ 474.736399][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 474.742105][T16370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.801444][T16370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.849453][ T3471] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.887783][ T3471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.918654][ T3471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.928208][T16648] netlink: zone id is out of range [ 474.936005][T16648] netlink: zone id is out of range [ 474.954331][T16648] netlink: zone id is out of range [ 474.968091][ T3471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.977339][T16648] netlink: zone id is out of range [ 475.074664][T16648] netlink: zone id is out of range [ 475.097510][T16648] netlink: zone id is out of range [ 475.115040][T16648] netlink: zone id is out of range [ 475.137266][T16648] netlink: zone id is out of range [ 475.156078][T16648] netlink: zone id is out of range [ 475.336640][T12492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.344485][T12492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.426742][T13498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.439611][T13498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.477030][T16659] veth3: entered allmulticast mode [ 475.664367][T16672] __nla_validate_parse: 3 callbacks suppressed [ 475.664386][T16672] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2956'. [ 475.736173][T16676] tipc: Started in network mode [ 475.747041][T16676] tipc: Node identity 9e11fb9e3fa9, cluster identity 4711 [ 475.764628][T16676] tipc: Enabled bearer , priority 0 [ 475.780767][T16676] syzkaller0: entered promiscuous mode [ 475.793649][T16676] syzkaller0: entered allmulticast mode [ 475.828669][T16676] tipc: Resetting bearer [ 475.867202][T16673] tipc: Resetting bearer [ 475.936686][T16673] tipc: Disabling bearer [ 476.288454][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2960'. [ 476.603754][ T5831] Bluetooth: hci2: command tx timeout [ 476.721378][T16720] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2964'. [ 476.751242][T16724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2962'. [ 476.936155][T16735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2966'. [ 476.981988][T16738] netlink: 'syz.5.2967': attribute type 10 has an invalid length. [ 477.020697][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2967'. [ 477.211385][T16748] netlink: 'syz.5.2970': attribute type 27 has an invalid length. [ 477.348614][T16759] netlink: 'syz.4.2972': attribute type 4 has an invalid length. [ 477.356980][T16759] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2972'. [ 477.374083][T16759] `: renamed from bond0 (while UP) [ 477.673634][T16774] netlink: 'syz.2.2978': attribute type 1 has an invalid length. [ 477.720370][T16774] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 477.733476][T16774] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 477.744146][T16774] bond11: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 477.790397][T16776] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 477.803152][T16776] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 477.945086][T16783] gtp0: entered promiscuous mode [ 477.950216][T16783] gtp0: entered allmulticast mode [ 478.151706][T16789] netlink: 'syz.3.2984': attribute type 4 has an invalid length. [ 478.205606][T16789] netlink: 'syz.3.2984': attribute type 13 has an invalid length. [ 478.232313][T16789] veth0_macvtap: left promiscuous mode [ 478.242675][T16789] macvtap0: entered allmulticast mode [ 478.268239][T16797] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.2984'. [ 478.297690][T16789] macvtap0: refused to change device tx_queue_len [ 478.477696][T16803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2988'. [ 478.533449][T16806] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2988'. [ 478.657823][ T5831] Bluetooth: hci2: command 0x0405 tx timeout [ 478.838773][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 478.852796][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 478.862369][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 478.889697][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 478.900654][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 479.094733][T16822] lo speed is unknown, defaulting to 1000 [ 479.232506][T16846] pim6reg1: entered promiscuous mode [ 479.252853][T16846] pim6reg1: entered allmulticast mode [ 479.466955][T16861] netlink: 'syz.5.3003': attribute type 4 has an invalid length. [ 479.488951][T16859] netlink: 'syz.5.3003': attribute type 4 has an invalid length. [ 479.936533][ C1] net_ratelimit: 22 callbacks suppressed [ 479.936554][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 480.130572][T16881] netlink: 'syz.5.3009': attribute type 12 has an invalid length. [ 480.222004][T16822] chnl_net:caif_netlink_parms(): no params data found [ 480.288083][T16883] netlink: 'syz.1.3010': attribute type 21 has an invalid length. [ 480.439342][T16892] x_tables: unsorted underflow at hook 2 [ 480.445104][T16892] x_tables: unsorted underflow at hook 2 [ 480.454091][T16892] x_tables: unsorted underflow at hook 2 [ 480.461271][T16892] x_tables: unsorted underflow at hook 2 [ 480.468546][T16892] x_tables: unsorted underflow at hook 2 [ 480.475006][T16892] x_tables: unsorted underflow at hook 2 [ 480.483355][T16892] x_tables: unsorted underflow at hook 2 [ 480.505211][T16892] x_tables: unsorted underflow at hook 2 [ 480.555617][T16892] x_tables: unsorted underflow at hook 2 [ 480.564115][T16892] x_tables: unsorted underflow at hook 2 [ 480.574667][T16822] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.583920][T16822] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.597293][T16822] bridge_slave_0: entered allmulticast mode [ 480.605292][T16822] bridge_slave_0: entered promiscuous mode [ 480.628696][T16822] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.637090][T16822] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.644384][T16822] bridge_slave_1: entered allmulticast mode [ 480.652674][T16822] bridge_slave_1: entered promiscuous mode [ 480.792532][T16822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.832108][T16910] __nla_validate_parse: 4 callbacks suppressed [ 480.832125][T16910] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3017'. [ 480.855617][T16822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.981643][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 480.990697][ T5831] Bluetooth: hci4: command tx timeout [ 481.020300][T16923] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 481.028920][T16822] team0: Port device team_slave_0 added [ 481.055630][T16822] team0: Port device team_slave_1 added [ 481.228423][T16942] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3025'. [ 481.252060][T16822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.262975][T16822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.292144][T16822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.375033][T16822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.385403][T16822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.420103][T16822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.555486][T16955] netlink: 81 bytes leftover after parsing attributes in process `syz.5.3028'. [ 481.613650][T16822] hsr_slave_0: entered promiscuous mode [ 481.628688][T16822] hsr_slave_1: entered promiscuous mode [ 481.635161][T16822] debugfs: 'hsr0' already exists in 'hsr' [ 481.656688][T16822] Cannot create hsr debugfs directory [ 482.016538][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 482.383800][T16822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.395251][T16822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.405675][T16822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 482.475169][T16986] syz.5.3035 (16986) used greatest stack depth: 17832 bytes left [ 482.596613][T16822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.613983][T16822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.618966][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3039'. [ 482.631363][T16822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 482.711691][T17011] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3040'. [ 482.742130][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3041'. [ 482.754165][T16822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.770335][T16822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.794012][T16822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 482.799574][T17017] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3041'. [ 482.889204][T17023] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 483.056438][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 483.082097][T17036] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 483.087002][ T5831] Bluetooth: hci4: command tx timeout [ 483.117548][T17036] bond5 (unregistering): Released all slaves [ 483.134043][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3047'. [ 483.246165][T17040] tipc: Enabled bearer , priority 0 [ 483.337653][T17051] validate_nla: 2 callbacks suppressed [ 483.337669][T17051] netlink: 'syz.3.3051': attribute type 1 has an invalid length. [ 483.361131][T17039] tipc: Disabling bearer [ 483.387670][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'. [ 483.388826][T17055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3051'. [ 483.478310][T16822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 483.497125][T16822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 483.513868][T17053] syz_tun: left allmulticast mode [ 483.530844][T17053] syz_tun: left promiscuous mode [ 483.536119][T17053] bridge0: port 1(syz_tun) entered disabled state [ 483.630146][T16822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 483.652016][T16822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 483.797718][T17079] netlink: 'syz.5.3057': attribute type 5 has an invalid length. [ 483.913702][T16822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.972620][T16822] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.993984][T14174] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.001163][T14174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.065905][T14174] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.073106][T14174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.096545][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 484.140889][T17100] warn_alloc: 1 callbacks suppressed [ 484.140907][T17100] syz.5.3065: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 484.189801][T17096] team_slave_0: entered promiscuous mode [ 484.189917][T17100] CPU: 1 UID: 0 PID: 17100 Comm: syz.5.3065 Not tainted syzkaller #0 PREEMPT(full) [ 484.189953][T17100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 484.189974][T17100] Call Trace: [ 484.189982][T17100] [ 484.189989][T17100] dump_stack_lvl+0x189/0x250 [ 484.190013][T17100] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 484.190044][T17100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.190065][T17100] ? __pfx__printk+0x10/0x10 [ 484.190085][T17100] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 484.190112][T17100] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 484.190145][T17100] warn_alloc+0x214/0x310 [ 484.190173][T17100] ? stack_depot_save_flags+0x40/0x860 [ 484.190196][T17100] ? __cgroup_account_cputime+0xe5/0x120 [ 484.190223][T17100] ? __pfx_warn_alloc+0x10/0x10 [ 484.190253][T17100] ? kasan_save_track+0x3e/0x80 [ 484.190278][T17100] ? __kasan_kmalloc+0x93/0xb0 [ 484.190305][T17100] ? xsk_setsockopt+0x4dc/0x8d0 [ 484.190324][T17100] ? do_sock_setsockopt+0x179/0x1b0 [ 484.190344][T17100] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 484.190364][T17100] ? do_syscall_64+0xfa/0xfa0 [ 484.190385][T17100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.190414][T17100] __vmalloc_node_range_noprof+0x125/0x12d0 [ 484.190480][T17100] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 484.190512][T17100] ? __kasan_kmalloc+0x93/0xb0 [ 484.190547][T17100] vmalloc_user_noprof+0xad/0xf0 [ 484.190574][T17100] ? xskq_create+0xbf/0x170 [ 484.190597][T17100] xskq_create+0xbf/0x170 [ 484.190621][T17100] xsk_init_queue+0xb0/0x110 [ 484.190645][T17100] xsk_setsockopt+0x4dc/0x8d0 [ 484.190668][T17100] ? __pfx_xsk_setsockopt+0x10/0x10 [ 484.190691][T17100] ? __pfx_aa_sk_perm+0x10/0x10 [ 484.190718][T17100] ? aa_sock_opt_perm+0xff/0x1b0 [ 484.190748][T17100] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 484.190766][T17100] ? __pfx_xsk_setsockopt+0x10/0x10 [ 484.190787][T17100] do_sock_setsockopt+0x179/0x1b0 [ 484.190813][T17100] __x64_sys_setsockopt+0x13f/0x1b0 [ 484.190841][T17100] do_syscall_64+0xfa/0xfa0 [ 484.190863][T17100] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.190890][T17100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.190908][T17100] ? clear_bhb_loop+0x60/0xb0 [ 484.190932][T17100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.190955][T17100] RIP: 0033:0x7f333958eec9 [ 484.190974][T17100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.190991][T17100] RSP: 002b:00007f333a42e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 484.191013][T17100] RAX: ffffffffffffffda RBX: 00007f33397e5fa0 RCX: 00007f333958eec9 [ 484.191028][T17100] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 484.191040][T17100] RBP: 00007f3339611f91 R08: 0000000000000004 R09: 0000000000000000 [ 484.191053][T17100] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.191065][T17100] R13: 00007f33397e6038 R14: 00007f33397e5fa0 R15: 00007fff784ab538 [ 484.191098][T17100] [ 484.191191][T17100] Mem-Info: [ 484.195744][T17096] team_slave_1: entered promiscuous mode [ 484.206595][T17100] active_anon:3883 inactive_anon:0 isolated_anon:0 [ 484.206595][T17100] active_file:3021 inactive_file:39999 isolated_file:0 [ 484.206595][T17100] unevictable:768 dirty:59 writeback:0 [ 484.206595][T17100] slab_reclaimable:12856 slab_unreclaimable:174020 [ 484.206595][T17100] mapped:28940 shmem:1378 pagetables:1157 [ 484.206595][T17100] sec_pagetables:0 bounce:0 [ 484.206595][T17100] kernel_misc_reclaimable:0 [ 484.206595][T17100] free:1250228 free_pcp:13605 free_cma:0 [ 484.235812][T17096] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 484.239628][T17100] Node 0 active_anon:15532kB inactive_anon:0kB active_file:12084kB inactive_file:159792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115760kB dirty:232kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14844kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 484.278518][T17096] team0: Device macvtap1 is already an upper device of the team interface [ 484.279536][T17100] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 484.634342][T17100] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.634917][T17096] team_slave_0: left promiscuous mode [ 484.664230][T17100] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 484.664279][T17100] Node 0 DMA32 free:1093648kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15632kB inactive_anon:0kB active_file:12084kB inactive_file:159792kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:39988kB local_pcp:20276kB free_cma:0kB [ 484.669763][T17096] team_slave_1: left promiscuous mode [ 484.717167][T17100] lowmem_reserve[]: 0 0 1 1 1 [ 484.721919][T17100] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.754567][T17100] lowmem_reserve[]: 0 0 0 0 0 [ 484.760248][T17100] Node 1 Normal free:3891904kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13112kB local_pcp:7640kB free_cma:0kB [ 484.794220][T17100] lowmem_reserve[]: 0 0 0 0 0 [ 484.799062][T17100] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 484.813791][T17100] Node 0 DMA32: 450*4kB (UM) 381*8kB (UME) 58*16kB (UME) 139*32kB (UME) 82*64kB (UME) 146*128kB (UM) 503*256kB (UM) 312*512kB (UM) 187*1024kB (UME) 3*2048kB (UM) 140*4096kB (UM) = 1093744kB [ 484.836549][T17100] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 484.858253][T17100] Node 1 Normal: 128*4kB (UME) 48*8kB (UME) 40*16kB (UME) 180*32kB (UME) 57*64kB (UME) 10*128kB (UME) 3*256kB (ME) 2*512kB (M) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3891904kB [ 484.895616][T16822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.911865][T17100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.923525][T16822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.934135][T17100] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 484.948289][T17100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.966973][T17100] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 485.012160][T17100] 44395 total pagecache pages [ 485.022317][T17100] 0 pages in swap cache [ 485.032428][T17100] Free swap = 124996kB [ 485.044665][T17100] Total swap = 124996kB [ 485.051820][T17116] bond5: option mode: invalid value (133) [ 485.053194][T17100] 2097051 pages RAM [ 485.063343][T17100] 0 pages HighMem/MovableOnly [ 485.070969][T17100] 424543 pages reserved [ 485.075136][T17100] 0 pages cma reserved [ 485.108863][T17116] bond5 (unregistering): Released all slaves [ 485.136434][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 485.149790][ T5831] Bluetooth: hci4: command tx timeout [ 485.190002][T17118] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 485.197819][T17126] netlink: 'syz.5.3071': attribute type 12 has an invalid length. [ 485.284433][T17126] netlink: 'syz.5.3071': attribute type 12 has an invalid length. [ 485.316054][T17139] netlink: 'syz.4.3072': attribute type 10 has an invalid length. [ 485.367391][T13495] veth0_to_bond: left promiscuous mode [ 485.415916][T17143] netlink: 'syz.1.3074': attribute type 1 has an invalid length. [ 485.468929][T17143] 8021q: adding VLAN 0 to HW filter on device bond5 [ 485.579165][T17151] netlink: 'syz.5.3077': attribute type 3 has an invalid length. [ 485.587867][T17143] bond5: (slave geneve3): making interface the new active one [ 485.600551][T17143] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 485.617019][T17151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.646091][T16822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.747982][T17153] bond0: Invalid ad_actor_system MAC address. [ 485.754213][T17153] bond0: option ad_actor_system: invalid value (1) [ 485.763745][T17153] bond0 (unregistering): Released all slaves [ 485.792858][T17156] netlink: 'syz.3.3079': attribute type 4 has an invalid length. [ 485.900519][T17167] __nla_validate_parse: 70 callbacks suppressed [ 485.900539][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'. [ 485.910565][T16822] veth0_vlan: entered promiscuous mode [ 485.950436][T16822] veth1_vlan: entered promiscuous mode [ 485.989899][T16822] veth0_macvtap: entered promiscuous mode [ 486.003446][T16822] veth1_macvtap: entered promiscuous mode [ 486.045437][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3085'. [ 486.051665][T17173] sctp: [Deprecated]: syz.5.3085 (pid 17173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.051665][T17173] Use struct sctp_sack_info instead [ 486.058057][T16822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.091790][T16822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.121510][T14174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.131596][T14174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.155482][T13495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.176513][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 486.182884][T13495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.239752][T17180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3088'. [ 486.304228][T13499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.323184][T13499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.365627][T13499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.375614][T13499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.401520][T17186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3087'. [ 486.433016][T17188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.733993][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3096'. [ 487.113949][T17231] 8: entered promiscuous mode [ 487.216417][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 487.226170][T17237] netlink: 'syz.4.3103': attribute type 83 has an invalid length. [ 487.237563][ T5831] Bluetooth: hci4: command tx timeout [ 487.266216][T17239] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3108'. [ 487.361818][T17242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3107'. [ 487.835419][T17260] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 488.224327][T17267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.235299][T17274] netlink: 'syz.3.3119': attribute type 21 has an invalid length. [ 488.257243][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 488.273058][T17274] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3119'. [ 488.273193][T17277] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3119'. [ 488.296986][T17274] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3119'. [ 488.408303][T17283] batadv_slave_1: entered promiscuous mode [ 488.480392][T17282] batadv_slave_1: left promiscuous mode [ 488.930312][T17323] : renamed from vlan0 (while UP) [ 489.235942][T17346] tipc: Enabled bearer , priority 0 [ 489.250944][T17346] syzkaller0: entered promiscuous mode [ 489.256880][T17346] syzkaller0: entered allmulticast mode [ 489.285919][T17346] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 489.307788][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 489.321494][T17346] tipc: Resetting bearer [ 489.343908][T17348] tipc: Enabled bearer , priority 0 [ 489.351796][T17348] syzkaller0: entered promiscuous mode [ 489.357945][T17348] syzkaller0: entered allmulticast mode [ 489.371974][T17345] tipc: Resetting bearer [ 489.392325][T17345] tipc: Disabling bearer [ 489.411750][T17348] validate_nla: 5 callbacks suppressed [ 489.411767][T17348] netlink: 'syz.4.3144': attribute type 1 has an invalid length. [ 489.430383][T17348] tipc: Resetting bearer [ 489.439505][T17347] tipc: Resetting bearer [ 489.461232][T17347] tipc: Disabling bearer [ 489.557365][T17355] bridge_slave_0: entered promiscuous mode [ 489.772288][T17370] netlink: 'syz.2.3151': attribute type 4 has an invalid length. [ 490.034390][T17385] netlink: 'syz.2.3155': attribute type 5 has an invalid length. [ 490.336535][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 490.642383][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 490.657754][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 490.666169][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 490.674841][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 490.706193][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 490.808504][T17424] xt_hashlimit: max too large, truncated to 1048576 [ 490.830112][T17415] team0: Device wireguard0 is of different type [ 491.045191][T14174] smc: removing ib device syz1 [ 491.075741][T17410] lo speed is unknown, defaulting to 1000 [ 491.376815][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 491.392613][T17447] tipc: Enabled bearer , priority 0 [ 491.436551][T17447] syzkaller0: entered promiscuous mode [ 491.458522][T17447] syzkaller0: entered allmulticast mode [ 491.576522][T17455] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 491.591300][T17447] tipc: Resetting bearer [ 491.650472][T17442] tipc: Resetting bearer [ 491.673565][T17458] netlink: 'syz.3.3173': attribute type 10 has an invalid length. [ 491.717112][T17442] tipc: Disabling bearer [ 491.759741][T17464] __nla_validate_parse: 10 callbacks suppressed [ 491.759759][T17464] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3174'. [ 492.047598][T17469] netlink: 'syz.4.3177': attribute type 39 has an invalid length. [ 492.222804][T17410] chnl_net:caif_netlink_parms(): no params data found [ 492.297456][T17485] bond2: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 492.411452][T17490] tipc: Enabling of bearer rejected, failed to enable media [ 492.420598][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 492.449139][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 492.554131][T17487] lo speed is unknown, defaulting to 1000 [ 492.579007][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3183'. [ 492.604454][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3183'. [ 492.746791][ T5831] Bluetooth: hci5: command tx timeout [ 492.760076][T17498] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.768617][T17498] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.000302][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3188'. [ 493.009499][T17410] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.014781][T17410] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.026579][T17410] bridge_slave_0: entered allmulticast mode [ 493.054545][T17410] bridge_slave_0: entered promiscuous mode [ 493.069522][T17512] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 493.079465][T17410] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.096484][T17410] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.103783][T17410] bridge_slave_1: entered allmulticast mode [ 493.141851][T17410] bridge_slave_1: entered promiscuous mode [ 493.337841][T17524] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 493.456539][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 493.491854][T17410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.514357][T17527] netlink: 'syz.5.3192': attribute type 9 has an invalid length. [ 493.534528][T17410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.561211][T17527] netlink: 'syz.5.3192': attribute type 4 has an invalid length. [ 493.612551][T17530] netlink: 'syz.5.3192': attribute type 4 has an invalid length. [ 493.674143][T17410] team0: Port device team_slave_0 added [ 493.718233][T17410] team0: Port device team_slave_1 added [ 493.845983][T17410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.858694][T17410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.886836][T17410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.900921][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3195'. [ 493.944617][T17410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.961221][T17410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.004716][T17410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.105226][T17410] hsr_slave_0: entered promiscuous mode [ 494.114321][T17410] hsr_slave_1: entered promiscuous mode [ 494.121065][T17410] debugfs: 'hsr0' already exists in 'hsr' [ 494.126886][T17410] Cannot create hsr debugfs directory [ 494.401034][T17551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3201'. [ 494.427755][T17551] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 494.479052][T17410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.496520][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 494.512177][T17410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.525586][T17410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 494.628004][T17563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3204'. [ 494.650138][T17563] netlink: 'syz.2.3204': attribute type 8 has an invalid length. [ 494.660424][T17410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.674514][T17410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.676883][T17565] netlink: 'syz.5.3205': attribute type 1 has an invalid length. [ 494.685751][T17410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 494.710731][T17566] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3205'. [ 494.719942][T17565] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3205'. [ 494.796222][T17410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.810881][T17410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.821976][ T5831] Bluetooth: hci5: command tx timeout [ 494.827805][T17410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 494.841926][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029174800: rx timeout, send abort [ 495.261901][T17584] Bluetooth: hci0: invalid length 39, exp 2 for type 16 [ 495.275967][T17410] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 495.310297][T17410] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.338635][T17592] block nbd2: Unsupported socket: should be TCP or UNIX. [ 495.345753][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029174c00: rx timeout, send abort [ 495.354501][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029174800: abort rx timeout. Force session deactivation [ 495.363511][T17410] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.378216][T17410] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 495.395337][ T5831] Bluetooth: hci0: command tx timeout [ 495.536480][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 495.565008][T17410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.605800][T17410] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.633646][T13498] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.640847][T13498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.671851][T13498] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.679048][T13498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.845842][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029174c00: abort rx timeout. Force session deactivation [ 496.049177][T17634] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 496.063372][T17634] bond2 (unregistering): Released all slaves [ 496.163541][T17643] netlink: 'syz.3.3223': attribute type 24 has an invalid length. [ 496.189091][T17410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.253185][T17644] can: request_module (can-proto-0) failed. [ 496.259911][T17645] netlink: 'syz.5.3226': attribute type 1 has an invalid length. [ 496.357983][T17410] veth0_vlan: entered promiscuous mode [ 496.389877][T17410] veth1_vlan: entered promiscuous mode [ 496.449644][T17410] veth0_macvtap: entered promiscuous mode [ 496.465128][T17410] veth1_macvtap: entered promiscuous mode [ 496.519579][T17410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.553673][T17410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.572897][ T1148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.586759][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 496.603033][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.638573][ T1148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.672188][ T1148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.810356][T12492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.849528][T12492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.900580][ T5831] Bluetooth: hci5: command tx timeout [ 496.984910][T17679] tipc: Enabling of bearer rejected, already enabled [ 497.006010][T17682] __nla_validate_parse: 11 callbacks suppressed [ 497.006030][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 497.031780][T13489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.047727][T13489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.050023][T17684] syzkaller1: entered promiscuous mode [ 497.098263][T17684] syzkaller1: entered allmulticast mode [ 497.503693][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3243'. [ 497.617580][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 497.622755][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3248'. [ 497.649806][T17718] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3246'. [ 497.788235][T17725] tunl0: entered promiscuous mode [ 497.801035][T17725] netlink: 'syz.4.3251': attribute type 3 has an invalid length. [ 497.809378][T17725] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3251'. [ 497.852615][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3252'. [ 497.959306][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3254'. [ 498.135172][T17741] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 498.363423][T17758] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3260'. [ 498.656605][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 498.657932][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 498.671421][T17771] netlink: 'syz.4.3264': attribute type 1 has an invalid length. [ 498.717324][T17778] tipc: Enabling of bearer rejected, failed to enable media [ 498.929662][T17792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3272'. [ 498.982029][ T5831] Bluetooth: hci5: command tx timeout [ 499.557440][T17824] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 499.696545][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 499.729571][T17833] nbd: must specify at least one socket [ 499.796963][T17835] syzkaller0: entered promiscuous mode [ 499.825048][T17835] syzkaller0: entered allmulticast mode [ 499.879295][T17844] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 500.227030][T17862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.368481][T14174] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 500.736553][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 501.039733][T17888] IPVS: ip_vs_edit_dest(): server weight less than zero [ 501.040737][T14946] IPVS: starting estimator thread 0... [ 501.149046][T17889] IPVS: using max 31 ests per chain, 74400 per kthread [ 501.160341][T17878] netlink: 'syz.2.3296': attribute type 23 has an invalid length. [ 501.485847][ T1301] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 501.710176][T17918] netlink: 'syz.5.3309': attribute type 3 has an invalid length. [ 501.724875][T17924] sctp: [Deprecated]: syz.4.3311 (pid 17924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.724875][T17924] Use struct sctp_sack_info instead [ 501.767601][T17921] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 501.777214][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 501.842483][T17927] bridge0: port 3(ipvlan2) entered blocking state [ 501.849635][T17927] bridge0: port 3(ipvlan2) entered disabled state [ 501.856334][T17927] ipvlan2: entered allmulticast mode [ 501.861624][T17927] bridge0: entered allmulticast mode [ 501.873950][T17927] ipvlan2: left allmulticast mode [ 501.879137][T17927] bridge0: left allmulticast mode [ 502.342006][T17957] __nla_validate_parse: 9 callbacks suppressed [ 502.342024][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3323'. [ 502.385974][T17959] xt_cgroup: invalid path, errno=-2 [ 502.519009][T17958] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 502.553471][T17958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.566557][T17958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.582820][T17966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3325'. [ 502.606626][T17966] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3325'. [ 502.620288][T17966] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3325'. [ 502.631569][T17966] netlink: 'syz.4.3325': attribute type 7 has an invalid length. [ 502.639414][T17966] netlink: 'syz.4.3325': attribute type 8 has an invalid length. [ 502.709238][T17958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.720260][T17958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.720872][T17968] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3327'. [ 502.780225][T17958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.797574][T17958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.816696][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 502.920419][T17958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.935072][T17958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.071661][T13498] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.092925][T13498] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.134532][T13498] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.159447][T13498] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.192994][T13498] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.223302][T13498] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.277784][T17982] netlink: 'syz.4.3332': attribute type 1 has an invalid length. [ 503.285741][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3332'. [ 503.318404][T17980] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 503.356860][ T1148] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.393341][ T1148] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.609508][T17998] netlink: 'syz.1.3337': attribute type 12 has an invalid length. [ 503.640006][T17998] netlink: 'syz.1.3337': attribute type 11 has an invalid length. [ 503.658940][T17998] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3337'. [ 503.775418][T18006] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3340'. [ 503.856563][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 503.980739][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3345'. [ 504.010251][T18029] netlink: 1260 bytes leftover after parsing attributes in process `syz.5.3346'. [ 504.027868][T18020] netlink: 'syz.3.3345': attribute type 1 has an invalid length. [ 504.190700][T18034] bond3: (slave geneve2): making interface the new active one [ 504.199020][T18034] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 504.241034][T13489] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 504.289912][T13489] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 504.319081][T13489] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 504.348132][T13489] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 504.634888][T18067] netlink: 'syz.5.3355': attribute type 8 has an invalid length. [ 504.653918][T18070] netlink: 'syz.2.3356': attribute type 1 has an invalid length. [ 504.700210][T18070] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 504.702066][T18067] netlink: 'syz.5.3355': attribute type 32 has an invalid length. [ 504.712864][T18070] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 504.731459][T18070] bond2: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 504.792025][T18067] bond3: Setting coupled_control to off (0) [ 504.906657][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 504.973894][T18084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.009113][T18084] bond1: (slave gretap1): making interface the new active one [ 505.021406][T18084] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 505.244324][T18103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 505.257165][T18104] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 505.490724][T18115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.631596][ T30] audit: type=1107 audit(1760437186.931:4): pid=18125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='a [ 505.631596][ T30] 7^v.B|WDaG`ǽ0kM6 [ 505.631596][ T30] !rup6e]R?Y\pj"۬Ən"=jeWxv*7m]"v' [ 505.869471][T18142] veth0_virt_wifi: entered allmulticast mode [ 505.917380][T18142] team0: Port device veth0_virt_wifi added [ 505.938111][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 505.994653][T13489] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 505.999318][T18153] xt_CONNSECMARK: invalid mode: 0 [ 506.442248][T18180] validate_nla: 5 callbacks suppressed [ 506.442266][T18180] netlink: 'syz.2.3389': attribute type 2 has an invalid length. [ 506.457981][T18180] netlink: 'syz.2.3389': attribute type 8 has an invalid length. [ 506.742106][T18180] netlink: 'syz.2.3389': attribute type 1 has an invalid length. [ 506.976896][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 507.172160][T18209] team_slave_0: mtu greater than device maximum [ 507.551708][T18220] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 507.589120][T18226] __nla_validate_parse: 15 callbacks suppressed [ 507.589139][T18226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3402'. [ 507.699583][T18230] syzkaller1: left promiscuous mode [ 507.716430][T18230] syzkaller1: left allmulticast mode [ 507.880548][T18247] netlink: 'syz.2.3410': attribute type 1 has an invalid length. [ 507.890780][T18247] netlink: 'syz.2.3410': attribute type 2 has an invalid length. [ 507.950000][T18252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.016624][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 508.199233][T18268] syzkaller0: entered promiscuous mode [ 508.225147][T18268] syzkaller0: entered allmulticast mode [ 508.331132][T18275] tipc: Started in network mode [ 508.364831][T18275] tipc: Node identity 66113e5b9e6e, cluster identity 4711 [ 508.377541][T18275] tipc: Enabled bearer , priority 0 [ 508.390276][T18275] syzkaller0: entered promiscuous mode [ 508.400498][T18275] syzkaller0: entered allmulticast mode [ 508.471148][T18274] tipc: Resetting bearer [ 508.494291][T18274] tipc: Disabling bearer [ 508.924593][T18319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3429'. [ 508.933960][T18319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3429'. [ 509.066634][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 509.495624][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3434'. [ 509.575744][T18334] tipc: Enabling of bearer rejected, failed to enable media [ 509.597788][T18341] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3436'. [ 509.851060][T18350] tipc: Enabled bearer , priority 0 [ 509.860470][T18350] syzkaller0: entered promiscuous mode [ 509.865963][T18350] syzkaller0: entered allmulticast mode [ 509.978612][T18351] netlink: 'syz.5.3439': attribute type 1 has an invalid length. [ 509.997765][T18359] netlink: 'syz.5.3439': attribute type 1 has an invalid length. [ 510.011358][T18369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3445'. [ 510.035019][T18369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3445'. [ 510.064767][T18369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3445'. [ 510.095045][T18369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3445'. [ 510.104505][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 510.135166][T18369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3445'. [ 510.199942][T18349] tipc: Resetting bearer [ 510.264694][T18349] tipc: Disabling bearer [ 510.329489][T18384] vlan0: entered promiscuous mode [ 510.354209][T18384] bridge0: entered promiscuous mode [ 510.592163][T18394] veth3: entered allmulticast mode [ 510.927855][T18419] SET target dimension over the limit! [ 511.136620][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 511.414603][T18444] Unsupported ieee802154 address type: 0 [ 511.494533][T18453] netlink: 'syz.5.3466': attribute type 2 has an invalid length. [ 511.535741][T18453] netlink: 'syz.5.3466': attribute type 1 has an invalid length. [ 511.560561][T18453] netlink: 'syz.5.3466': attribute type 2 has an invalid length. [ 511.606495][T18453] netlink: 'syz.5.3466': attribute type 2 has an invalid length. [ 511.633051][T18453] netlink: 'syz.5.3466': attribute type 2 has an invalid length. [ 511.909990][T18472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.960679][T18473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.176964][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 512.552965][T18508] syzkaller0: entered promiscuous mode [ 512.558712][T18508] syzkaller0: entered allmulticast mode [ 512.653707][T18517] __nla_validate_parse: 47 callbacks suppressed [ 512.653725][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'. [ 513.219654][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 513.404574][T18532] xt_limit: Overflow, try lower: 271964/0 [ 514.011056][T18517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.045277][T18517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.206673][T18545] syzkaller1: entered allmulticast mode [ 514.257016][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 514.277187][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3497'. [ 514.341279][T18551] C: renamed from lo (while UP) [ 514.377861][T18551] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 514.383326][T18560] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3499'. [ 514.462886][T18564] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3500'. [ 514.644070][T18573] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.3504'. [ 514.669256][T18575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3505'. [ 514.934784][T18586] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3507'. [ 515.168299][T18598] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3511'. [ 515.296547][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 515.370513][T18613] netlink: 'syz.4.3516': attribute type 4 has an invalid length. [ 515.525659][T18614] xt_CT: No such helper "syz1" [ 515.622954][T18626] xt_cgroup: invalid path, errno=-2 [ 515.678961][T18628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3519'. [ 515.900915][T18638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3524'. [ 516.039733][T18645] tipc: Enabled bearer , priority 0 [ 516.047047][T18648] tipc: Enabling of bearer rejected, already enabled [ 516.056218][T18645] syzkaller0: entered promiscuous mode [ 516.062103][T18645] syzkaller0: entered allmulticast mode [ 516.072663][T18644] tipc: Resetting bearer [ 516.123538][T18644] tipc: Disabling bearer [ 516.336591][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 516.405004][T18647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.421391][T18647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.432846][T18647] bond0 (unregistering): Released all slaves [ 516.772793][T18695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.780094][T18695] IPv6: NLM_F_CREATE should be set when creating new route [ 516.966818][T18707] tipc: Started in network mode [ 516.985588][T18707] tipc: Node identity 429e576ee3b4, cluster identity 4711 [ 517.008080][T18707] tipc: Enabled bearer , priority 0 [ 517.019314][T18707] syzkaller0: entered promiscuous mode [ 517.024808][T18707] syzkaller0: entered allmulticast mode [ 517.076440][T18717] netlink: 'syz.5.3546': attribute type 11 has an invalid length. [ 517.090310][T18708] tipc: Resetting bearer [ 517.132528][T18708] tipc: Disabling bearer [ 517.284100][T18731] netlink: 'syz.3.3553': attribute type 9 has an invalid length. [ 517.342265][T18732] team_slave_0: entered promiscuous mode [ 517.348041][T18732] team_slave_1: entered promiscuous mode [ 517.357845][T18732] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 517.364887][T18735] IPVS: set_ctl: invalid protocol: 0 28.0.0.0:49184 [ 517.372701][T18735] IPVS: set_ctl: invalid protocol: 0 28.0.0.0:49184 [ 517.379724][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 517.389179][T18732] team0: Device macvtap1 is already an upper device of the team interface [ 517.406913][T18735] IPVS: set_ctl: invalid protocol: 0 28.0.0.0:49184 [ 517.416425][T18735] IPVS: set_ctl: invalid protocol: 0 28.0.0.0:49184 [ 517.423165][T18735] IPVS: set_ctl: invalid protocol: 0 28.0.0.0:49184 [ 517.432965][T18735] IPVS: set_ctl: invalid protocol: 0 28.0.0.0:49184 [ 517.463756][T18732] team_slave_0: left promiscuous mode [ 517.469279][T18732] team_slave_1: left promiscuous mode [ 517.509385][T18740] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.529575][T18740] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.571269][T18740] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 517.591500][T18748] netlink: get zone limit has 4 unknown bytes [ 517.672528][T18753] __nla_validate_parse: 4 callbacks suppressed [ 517.672546][T18753] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3561'. [ 517.705447][T18740] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.712839][T18749] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 517.734560][T18740] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.760305][T18740] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 517.792597][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3560'. [ 517.807591][T18761] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 517.841738][T18740] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.859553][T18740] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.870732][T18740] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 517.975395][T18770] netlink: 'syz.4.3564': attribute type 1 has an invalid length. [ 517.985055][T18770] netlink: 'syz.4.3564': attribute type 1 has an invalid length. [ 517.999127][T18740] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.013893][T18740] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.026114][T18740] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.087983][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 518.105658][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 518.215732][T13496] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.224879][T13496] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 518.235516][T13496] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 518.250326][T18791] netlink: 'syz.5.3570': attribute type 16 has an invalid length. [ 518.265165][T18791] netlink: 'syz.5.3570': attribute type 17 has an invalid length. [ 518.314222][T13496] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.323006][T13496] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 518.331928][T13496] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 518.377474][T18791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.416639][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 518.499573][ T1148] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.516428][ T1148] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 518.530206][ T1148] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 518.541250][T18798] tunl0: left promiscuous mode [ 518.589088][T18798] gtp0: left promiscuous mode [ 518.622504][ T1148] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.634189][ T1148] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 518.657584][ T1148] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 518.675735][T18804] tipc: Enabled bearer , priority 0 [ 518.698495][T18807] syzkaller0: entered promiscuous mode [ 518.704025][T18807] syzkaller0: entered allmulticast mode [ 518.844431][T18804] tipc: Resetting bearer [ 518.854134][T18803] tipc: Resetting bearer [ 518.933506][T18803] tipc: Disabling bearer [ 519.170752][T18835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3586'. [ 519.431519][T18855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3592'. [ 519.456624][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 519.548934][T18856] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3593'. [ 519.682705][T18876] netlink: 'syz.3.3596': attribute type 10 has an invalid length. [ 519.704579][T18875] netlink: 'syz.4.3597': attribute type 1 has an invalid length. [ 519.722878][T18876] team0: Device veth1_macvtap failed to register rx_handler [ 519.746458][T18875] netlink: 'syz.4.3597': attribute type 2 has an invalid length. [ 519.881210][T18884] netlink: 'syz.2.3600': attribute type 1 has an invalid length. [ 519.913358][T18884] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3600'. [ 520.008822][T18891] tipc: Enabling of bearer rejected, failed to enable media [ 520.242126][T18901] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 520.496539][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 520.594932][T13495] tipc: Subscription rejected, illegal request [ 521.546582][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 522.049223][T13498] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 522.136852][T18953] openvswitch: netlink: Key 25 has unexpected len 28 expected 16 [ 522.151158][T18935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.233226][T18959] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3619'. [ 522.347102][T18961] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3619'. [ 522.455212][T18973] veth0_macvtap: left promiscuous mode [ 522.462479][T18972] validate_nla: 1 callbacks suppressed [ 522.462497][T18972] netlink: 'syz.1.3622': attribute type 1 has an invalid length. [ 522.506511][T18972] netlink: 'syz.1.3622': attribute type 10 has an invalid length. [ 522.532068][T18972] netlink: 'syz.1.3622': attribute type 4 has an invalid length. [ 522.577824][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 522.620736][T18981] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 522.839925][T18996] __nla_validate_parse: 2 callbacks suppressed [ 522.839942][T18996] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3629'. [ 522.846440][T18991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3629'. [ 522.949892][T19003] xt_bpf: check failed: parse error [ 523.299914][T19025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3638'. [ 523.390262][T19031] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3641'. [ 523.498888][T19037] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3642'. [ 523.510249][T19039] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3643'. [ 523.519956][T19040] netlink: 'syz.5.3644': attribute type 2 has an invalid length. [ 523.626595][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 523.663775][T19040] syzkaller0: entered promiscuous mode [ 523.670515][T19040] syzkaller0: entered allmulticast mode [ 523.750752][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3645'. [ 523.796621][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3645'. [ 524.023884][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3650'. [ 524.052366][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3650'. [ 524.656940][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 525.594775][T19096] netlink: 'syz.2.3661': attribute type 1 has an invalid length. [ 525.671579][T19096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.696689][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 525.721373][T19101] netlink: 'syz.3.3662': attribute type 11 has an invalid length. [ 525.819027][T19111] tipc: Enabling of bearer rejected, failed to enable media [ 526.071084][T19126] netlink: 'syz.2.3670': attribute type 21 has an invalid length. [ 526.459634][T19153] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 526.467803][T19160] netlink: 'syz.2.3682': attribute type 10 has an invalid length. [ 526.470183][T19153] bond4: option packets_per_slave: allowed values 0 - 65535 [ 526.488550][T19153] bond4 (unregistering): Released all slaves [ 526.515819][T19155] tipc: Enabling of bearer rejected, failed to enable media [ 526.736691][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 527.255790][T19222] bridge0: entered promiscuous mode [ 527.274140][T19222] macsec1: entered promiscuous mode [ 527.284281][T19222] macsec1: entered allmulticast mode [ 527.292591][T19222] bridge0: entered allmulticast mode [ 527.308576][T19222] bridge0: port 3(macsec1) entered blocking state [ 527.318433][T19222] bridge0: port 3(macsec1) entered disabled state [ 527.346612][T19222] bridge0: left allmulticast mode [ 527.351933][T19222] bridge0: left promiscuous mode [ 527.777047][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 528.025228][T19276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.031787][T19269] xt_nat: multiple ranges no longer supported [ 528.059718][T19276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.174718][T19283] sctp: [Deprecated]: syz.1.3715 (pid 19283) Use of int in maxseg socket option. [ 528.174718][T19283] Use struct sctp_assoc_value instead [ 528.511959][T19307] __nla_validate_parse: 21 callbacks suppressed [ 528.511979][T19307] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3724'. [ 528.611762][T19313] netlink: 'syz.2.3727': attribute type 4 has an invalid length. [ 528.643009][T19313] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3727'. [ 528.706183][T19318] syzkaller0: refused to change device tx_queue_len [ 528.729751][T19318] [ 528.732107][T19318] ====================================================== [ 528.739128][T19318] WARNING: possible circular locking dependency detected [ 528.746155][T19318] syzkaller #0 Not tainted [ 528.750569][T19318] ------------------------------------------------------ [ 528.757588][T19318] syz.3.3729/19318 is trying to acquire lock: [ 528.763649][T19318] ffffffff8f6396d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 528.773064][T19318] [ 528.773064][T19318] but task is already holding lock: [ 528.780432][T19318] ffff8880265c8370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 528.784253][T19330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3731'. [ 528.789666][T19318] [ 528.789666][T19318] which lock already depends on the new lock. [ 528.789666][T19318] [ 528.789676][T19318] [ 528.789676][T19318] the existing dependency chain (in reverse order) is: [ 528.789684][T19318] [ 528.789684][T19318] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 528.789713][T19318] lock_acquire+0x120/0x360 [ 528.789735][T19318] _raw_spin_lock_bh+0x36/0x50 [ 528.789755][T19318] nr_rt_device_down+0x12a/0x720 [ 528.841563][T19318] nr_device_event+0x137/0x150 [ 528.846842][T19318] notifier_call_chain+0x1b6/0x3e0 [ 528.852466][T19318] netif_close_many+0x29c/0x410 [ 528.857830][T19318] netif_close+0x158/0x210 [ 528.862759][T19318] dev_close+0x10a/0x220 [ 528.867509][T19318] bpq_device_event+0x377/0x6a0 [ 528.872867][T19318] notifier_call_chain+0x1b6/0x3e0 [ 528.878487][T19318] netif_close_many+0x29c/0x410 [ 528.883852][T19318] netif_close+0x158/0x210 [ 528.888781][T19318] dev_close+0x10a/0x220 [ 528.893532][T19318] bond_setup_by_slave+0x5f/0x3f0 [ 528.899068][T19318] bond_enslave+0x6ca/0x3870 [ 528.904166][T19318] bond_do_ioctl+0x635/0x9b0 [ 528.909279][T19318] dev_ifsioc+0x908/0xf00 [ 528.914120][T19318] dev_ioctl+0x7b4/0x1150 [ 528.918957][T19318] sock_do_ioctl+0x22c/0x300 [ 528.924056][T19318] sock_ioctl+0x576/0x790 [ 528.928896][T19318] __se_sys_ioctl+0xfc/0x170 [ 528.933997][T19318] do_syscall_64+0xfa/0xfa0 [ 528.939009][T19318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.945410][T19318] [ 528.945410][T19318] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 528.953565][T19318] lock_acquire+0x120/0x360 [ 528.958582][T19318] _raw_spin_lock_bh+0x36/0x50 [ 528.963850][T19318] nr_rt_device_down+0xa9/0x720 [ 528.969208][T19318] nr_device_event+0x137/0x150 [ 528.974478][T19318] notifier_call_chain+0x1b6/0x3e0 [ 528.980098][T19318] netif_close_many+0x29c/0x410 [ 528.985464][T19318] netif_close+0x158/0x210 [ 528.990401][T19318] dev_close+0x10a/0x220 [ 528.995165][T19318] bpq_device_event+0x377/0x6a0 [ 529.000529][T19318] notifier_call_chain+0x1b6/0x3e0 [ 529.006151][T19318] netif_close_many+0x29c/0x410 [ 529.011515][T19318] netif_close+0x158/0x210 [ 529.016447][T19318] dev_close+0x10a/0x220 [ 529.021205][T19318] bond_setup_by_slave+0x5f/0x3f0 [ 529.026741][T19318] bond_enslave+0x6ca/0x3870 [ 529.031839][T19318] bond_do_ioctl+0x635/0x9b0 [ 529.036945][T19318] dev_ifsioc+0x908/0xf00 [ 529.041783][T19318] dev_ioctl+0x7b4/0x1150 [ 529.046614][T19318] sock_do_ioctl+0x22c/0x300 [ 529.051715][T19318] sock_ioctl+0x576/0x790 [ 529.056557][T19318] __se_sys_ioctl+0xfc/0x170 [ 529.061658][T19318] do_syscall_64+0xfa/0xfa0 [ 529.066674][T19318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.073076][T19318] [ 529.073076][T19318] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 529.080990][T19318] validate_chain+0xb9b/0x2140 [ 529.086265][T19318] __lock_acquire+0xab9/0xd20 [ 529.091448][T19318] lock_acquire+0x120/0x360 [ 529.096455][T19318] _raw_spin_lock_bh+0x36/0x50 [ 529.101727][T19318] nr_rt_ioctl+0x390/0xd50 [ 529.106664][T19318] sock_do_ioctl+0xdc/0x300 [ 529.111699][T19318] sock_ioctl+0x576/0x790 [ 529.116554][T19318] __se_sys_ioctl+0xfc/0x170 [ 529.121667][T19318] do_syscall_64+0xfa/0xfa0 [ 529.126686][T19318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.133090][T19318] [ 529.133090][T19318] other info that might help us debug this: [ 529.133090][T19318] [ 529.143352][T19318] Chain exists of: [ 529.143352][T19318] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 529.143352][T19318] [ 529.157165][T19318] Possible unsafe locking scenario: [ 529.157165][T19318] [ 529.164598][T19318] CPU0 CPU1 [ 529.169947][T19318] ---- ---- [ 529.175297][T19318] lock(&nr_node->node_lock); [ 529.180048][T19318] lock(nr_node_list_lock); [ 529.187145][T19318] lock(&nr_node->node_lock); [ 529.194416][T19318] lock(nr_neigh_list_lock); [ 529.199079][T19318] [ 529.199079][T19318] *** DEADLOCK *** [ 529.199079][T19318] [ 529.207202][T19318] 2 locks held by syz.3.3729/19318: [ 529.212379][T19318] #0: ffffffff8f639738 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 529.221863][T19318] #1: ffff8880265c8370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 529.231524][T19318] [ 529.231524][T19318] stack backtrace: [ 529.237405][T19318] CPU: 1 UID: 0 PID: 19318 Comm: syz.3.3729 Not tainted syzkaller #0 PREEMPT(full) [ 529.237440][T19318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 529.237458][T19318] Call Trace: [ 529.237466][T19318] [ 529.237474][T19318] dump_stack_lvl+0x189/0x250 [ 529.237496][T19318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.237512][T19318] ? __pfx__printk+0x10/0x10 [ 529.237527][T19318] ? stack_trace_save+0x9c/0xe0 [ 529.237553][T19318] print_circular_bug+0x2ee/0x310 [ 529.237575][T19318] check_noncircular+0x134/0x160 [ 529.237597][T19318] validate_chain+0xb9b/0x2140 [ 529.237625][T19318] __lock_acquire+0xab9/0xd20 [ 529.237643][T19318] ? nr_rt_ioctl+0x390/0xd50 [ 529.237659][T19318] lock_acquire+0x120/0x360 [ 529.237673][T19318] ? nr_rt_ioctl+0x390/0xd50 [ 529.237691][T19318] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 529.237714][T19318] ? nr_rt_ioctl+0x390/0xd50 [ 529.237730][T19318] _raw_spin_lock_bh+0x36/0x50 [ 529.237748][T19318] ? nr_rt_ioctl+0x390/0xd50 [ 529.237764][T19318] nr_rt_ioctl+0x390/0xd50 [ 529.237785][T19318] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 529.237800][T19318] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.237824][T19318] ? apparmor_capable+0x137/0x1b0 [ 529.237843][T19318] ? capable+0x89/0xe0 [ 529.237859][T19318] ? nr_ioctl+0x1b1/0x3b0 [ 529.237883][T19318] sock_do_ioctl+0xdc/0x300 [ 529.237907][T19318] ? __pfx_sock_do_ioctl+0x10/0x10 [ 529.237935][T19318] sock_ioctl+0x576/0x790 [ 529.237957][T19318] ? __pfx_sock_ioctl+0x10/0x10 [ 529.237979][T19318] ? __fget_files+0x3a0/0x420 [ 529.237993][T19318] ? __fget_files+0x2a/0x420 [ 529.238007][T19318] ? bpf_lsm_file_ioctl+0x9/0x20 [ 529.238025][T19318] ? __pfx_sock_ioctl+0x10/0x10 [ 529.238045][T19318] __se_sys_ioctl+0xfc/0x170 [ 529.238065][T19318] do_syscall_64+0xfa/0xfa0 [ 529.238084][T19318] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.238103][T19318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.238119][T19318] ? clear_bhb_loop+0x60/0xb0 [ 529.238142][T19318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.238158][T19318] RIP: 0033:0x7f53bfd8eec9 [ 529.238174][T19318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.238188][T19318] RSP: 002b:00007f53c0c7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.238205][T19318] RAX: ffffffffffffffda RBX: 00007f53bffe5fa0 RCX: 00007f53bfd8eec9 [ 529.238218][T19318] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000006 [ 529.238228][T19318] RBP: 00007f53bfe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 529.238239][T19318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.238249][T19318] R13: 00007f53bffe6038 R14: 00007f53bffe5fa0 R15: 00007ffff4b067a8 [ 529.238268][T19318] [ 529.240870][T19330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3731'. [ 529.248713][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 530.256861][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 531.296780][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 532.336393][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 533.386409][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 534.416427][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 535.456419][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 536.496390][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 537.536806][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 538.576712][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available