last executing test programs: 6.783751242s ago: executing program 3 (id=2884): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000980)='br_fdb_add\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 6.527945494s ago: executing program 0 (id=2885): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) 6.403944293s ago: executing program 1 (id=2887): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x4004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x701}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="27f829bd7000fddbdf252500000005002a00010000000a00012af32dfc6e30000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc0004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0xffff, 0x0, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback=0xa010501, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x100000001) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d0000000000000000170000000800", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYBLOB="00022dbd7000fcdbdf2524000000", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x8041}, 0x800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x44084}, 0x0) 6.392689685s ago: executing program 3 (id=2888): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x4, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x62ea, 0x4) sendto$inet6(r7, 0x0, 0x97, 0x24000800, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r8, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x20000278, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES16=r8], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffc, @void, @value}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0, 0x224}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 6.238560305s ago: executing program 4 (id=2889): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)="c0c957d020443ad68b729d89baab588a8076993dc0dad1278c68", 0x1a}, 0x1, 0x0, 0x0, 0x804}, 0x4048801) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000300)={0x1d, r4, 0x0, {0x0, 0xf1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xb}, {0x8, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 6.171658402s ago: executing program 1 (id=2890): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$inet6(0xa, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x1012}, {r1}], 0x2, 0x85) 5.832991665s ago: executing program 2 (id=2892): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto$inet6(r2, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000400000000000e1362037a4107998b4dfb0034a7a43d03ad72df7a93e3e14558b2a2c263dd92f3ebb4bece3ca2d027cbe48f6e616c2895780be85bf13b02471b2b5cd9b929510020366f85fc48b5fed52ac386b8131dd3c5d3d905308cce94d07dada26a500b11dc71863d0f60a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0xd568b000) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x48, 0x2}]}) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x2}}, 0x10, 0x0}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000004f68b473d25a2fbe000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r8, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.740117744s ago: executing program 4 (id=2893): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x712, 0x0, 0xfffffffffffffd25) 5.582501475s ago: executing program 0 (id=2894): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000580)=0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x20, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) shutdown(r1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 5.581759345s ago: executing program 2 (id=2895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 5.350650499s ago: executing program 0 (id=2896): socket(0x1e, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xfff, 0x0, 0x0, 0xa, 0x91, 0x5c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000001300)=[{}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x36, 0x0, &(0x7f0000000340)="e02742f4680d85ff9782762f86ddc586c25f24c687dd827b1f843a63e2b6bf8fc044a8e99a2b7294fd24be3ecc1d7183afc9353d366c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080014"], 0x4c}}, 0x0) 5.196122696s ago: executing program 0 (id=2897): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x4, 0x28, 0x65, 0x0, 0x4a, 0x6, 0x0, @broadcast, @loopback}, {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0xd6fe}}}}}}, 0x0) 5.183320805s ago: executing program 1 (id=2898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 5.080936954s ago: executing program 2 (id=2899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000400000000000e1362037a4107998b4dfb0034a7a43d03ad72df7a93e3e14558b2a2c263dd92f3ebb4bece3ca2d027cbe48f6e616c2895780be85bf13b02471b2b5cd9b929510020366f85fc48b5fed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0xd568b000) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x14, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x2000a804) 5.019958625s ago: executing program 1 (id=2900): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r1, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a"], 0x44}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) 4.961389193s ago: executing program 3 (id=2901): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create(0x200008) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES32=r2], 0x20) 4.833787363s ago: executing program 4 (id=2902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x6, 0xfff1}}}, 0x24}}, 0x0) 4.627892839s ago: executing program 3 (id=2903): r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) close(0x3) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r5 = socket(0xa, 0x3, 0x3a) connect$rxrpc(r5, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x0, 0x3, r4, 0x630d}, 0xc) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002600010000000000000000"], 0x24}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet(0x2, 0xa, 0x8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x4, 0xf}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x12, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x12, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000700)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r8, &(0x7f0000001840)="4fef68c85ea2094c3431f6d06fd6541ad453784e4029e8f8325650f12b21a39ff1074de814e9fdc3d770c74cc43eb9806ff0e218bcaa9042ef5b58c12d2f6987f436958896751c8b7f2f42cb088763d7d449c31384c4420bc91c8fa2edcf0a3e30eedfaa8333d61f04105bd2ec35cd325ef326bbf64556", &(0x7f0000001900)=""/167, 0x4}, 0x20) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000000200)}, {&(0x7f0000000380)="c9d55a11c6bda7cc45f8288d2af4efbcfe9cad5f14621137b2517e0f6c31558327bdb5b005bcf487a58e4d47d4542be015857d040a8caedfa18254743d42734f459e349800c5fe59fc6ed570606e0e4500c617597f8f203f1f2598a37313d4a4fe33df4b62b52443e2eeb4091e2e9d0b5c3b41484bd8a89916ba20b5cf502100f891232d9f316a3b20f37fa78fdbac2305953b4bf5418f88644c4c022fa1d884e87e6624bc6027e5bbea59e8450527e3b503eb079d8bf133c86ce6915d", 0xbd}, {&(0x7f0000000480)="eee4c030c02b54bc699436007210cc82d1ea80b273948fc11f3cff2984b095b5d8694afa0dd13217f7d2a02611f458ab9f57b5552c413e3b85e67c17713d5758cb94a051a1fda8efe117a146dd531d926b0a7d079061de55420212cde8a5f49e1853510266d1a59948c9248a6a511894d5fe08a7535cb5bc6a383d01e4b05417020a65c1053fb208c50e8c1b473fcb1a7e9f27a0e6ee335cdf1c8cce73d0e2580f97df064fc478188158373134", 0xad}, {&(0x7f0000000580)="7fdb902b1e", 0x5}], 0x6) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 3.200995877s ago: executing program 1 (id=2904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 3.192938217s ago: executing program 2 (id=2905): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f8, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xd0, 0x7400}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r2) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x8000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xb46c}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000801) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) close(r1) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) 3.103992383s ago: executing program 0 (id=2906): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000580)=0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r9, 0x0, 0x20, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) shutdown(r1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 3.097260124s ago: executing program 4 (id=2907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) write$cgroup_pid(r3, &(0x7f0000000140)=r4, 0x12) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) 2.97069199s ago: executing program 2 (id=2908): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$inet6(0xa, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x1012}, {r1}], 0x2, 0x85) 2.923418979s ago: executing program 3 (id=2909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988caeae863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e559", 0x18}], 0x2) 2.851931826s ago: executing program 4 (id=2910): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="0d2192106b6324038a09815d5fd4e299f2ca374bf41b07b4c09a4fb89a0c2d1ca0dac314818e7e9f50fd8da639aaab3a86674e8719b9404aef7842672969589f92e51c71c3e9592e777647dce5c662773c262c624d3635c1d3c2e106cc6ec65ff23d3f4637cde68b1200020214cb093d3cb520048ef6c47c0892877badb365a92a2a2b8f4e803a6c25e39357480271fd53962b462458af776be527d225ed18dcd71411d421070668298faae82aa9687d753b83a4e1c04ece9d2dab419f00ccce3cfdba53a0512b6b5aad3c11c64df582c099657db7bb8bb55ce89c51ce5eefbb62154fa8c9706186e8eb9ef65a93e771f833662a2a2ee7b31ede", 0xfa, 0x80, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) shutdown(r1, 0x2) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xb}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x550fe000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 2.79198653s ago: executing program 1 (id=2911): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r7) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2.768206306s ago: executing program 0 (id=2912): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "d8c1a75b45c5d04c8e25fe4f8453b477a986c6bee7409272232f1ad62869de31", "49b1dce65a8f68a89ec4827f14c576e2", {"3289c5a3a189a20146784d8d20e96d1b", "4b7b80cd71f0be30fafaf191fd843de1"}}}}}}}}}, 0x9e) 2.530591612s ago: executing program 4 (id=2913): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) writev(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xf, 0x7}, {}, {0xb, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.686478072s ago: executing program 2 (id=2914): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x4, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r8, 0x29, 0x17, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x62ea, 0x4) sendto$inet6(r8, 0x0, 0x97, 0x24000800, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r9, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x20000278, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES16=r9], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffc, @void, @value}, 0x94) sendmsg$nl_route(r9, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0, 0x224}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 0s ago: executing program 3 (id=2915): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000400000000000e1362037a4107998b4dfb0034a7a43d03ad72df7a93e3e14558b2a2c263dd92f3ebb4bece3ca2d027cbe48f6e616c2895780be85bf13b02471b2b5cd9b929510020366f85fc48b5fed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0xd568b000) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x14, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x2000a804) kernel console output (not intermixed with test programs): 1*2048kB (E) 946*4096kB (UM) = 3907780kB [ 367.481862][T11367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.498541][T11367] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 367.520778][T11389] tipc: Failed to remove unknown binding: 66,1,1/0:568337201/568337203 [ 367.537971][T11367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.549482][T11389] tipc: Failed to remove unknown binding: 66,1,1/0:568337201/568337203 [ 367.571441][T11367] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 367.599372][T11367] 41351 total pagecache pages [ 367.613656][T11367] 0 pages in swap cache [ 367.626946][T11367] Free swap = 124996kB [ 367.639769][T11367] Total swap = 124996kB [ 367.654524][T11367] 2097051 pages RAM [ 367.666437][T11367] 0 pages HighMem/MovableOnly [ 367.682597][T11367] 428581 pages reserved [ 367.695894][T11367] 0 pages cma reserved [ 367.961468][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.224931][T11405] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 368.327780][T11409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1381'. [ 368.500613][T11404] syzkaller0: entered promiscuous mode [ 368.571090][T11404] syzkaller0: entered allmulticast mode [ 369.005021][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.041423][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.241774][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 371.096676][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.019418][T11453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1388'. [ 372.058337][T11451] bridge0: port 1(gretap0) entered blocking state [ 372.083060][T11451] bridge0: port 1(gretap0) entered disabled state [ 372.105546][T11451] gretap0: entered allmulticast mode [ 372.121489][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.143422][T11451] gretap0: entered promiscuous mode [ 372.309393][T11465] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2031879591/2031879593 [ 372.379094][T11470] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2031879591/2031879593 [ 372.421051][T11470] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2031879591/2031879593 [ 372.674009][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 372.966311][T11482] tipc: Started in network mode [ 372.981219][T11482] tipc: Node identity ac14142f, cluster identity 4711 [ 372.999056][T11482] tipc: New replicast peer: 0.0.0.0 [ 373.039453][T11482] tipc: Enabled bearer , priority 10 [ 373.064187][T11485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1397'. [ 373.161332][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 373.412749][T11494] syzkaller1: entered promiscuous mode [ 373.431259][T11494] syzkaller1: entered allmulticast mode [ 373.747242][T11499] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1400'. [ 374.171496][ T6956] tipc: Node number set to 2886997039 [ 374.201247][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 374.524414][T11521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1406'. [ 374.556858][T11518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.572417][T11518] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.605752][T11518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.637665][T11501] pimreg: left allmulticast mode [ 374.642923][T11523] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 374.936797][T11532] tipc: Failed to remove unknown binding: 66,1,1/2886997007:269862913/269862915 [ 375.015991][T11539] tipc: Failed to remove unknown binding: 66,1,1/2886997007:269862913/269862915 [ 375.043081][T11539] tipc: Failed to remove unknown binding: 66,1,1/2886997007:269862913/269862915 [ 375.142878][T11540] lo speed is unknown, defaulting to 1000 [ 375.181138][T11540] lo speed is unknown, defaulting to 1000 [ 375.218022][T11542] x_tables: duplicate entry at hook 2 [ 375.241347][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 375.331225][T11546] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 375.485064][T11548] 8021q: adding VLAN 0 to HW filter on device bond5 [ 375.697543][T11546] veth11: entered promiscuous mode [ 375.745765][T11546] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 375.826490][T11548] bond5: (slave veth11): Releasing backup interface [ 375.902451][T11556] bridge0: failed insert local address into bridge forwarding table [ 375.921969][T11556] bridge0: failed insert local address into bridge forwarding table [ 376.070109][T11562] No such timeout policy "syz1" [ 376.281338][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 376.783897][T11577] syzkaller1: entered promiscuous mode [ 376.789434][T11577] syzkaller1: entered allmulticast mode [ 377.019232][T11576] lo speed is unknown, defaulting to 1000 [ 377.083915][T11576] lo speed is unknown, defaulting to 1000 [ 377.124259][T11592] netlink: 'syz.0.1420': attribute type 1 has an invalid length. [ 377.162549][T11592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1420'. [ 377.321226][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 377.752898][T11596] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 377.898884][T11600] netlink: 'syz.4.1421': attribute type 12 has an invalid length. [ 377.924695][T11603] tipc: Failed to remove unknown binding: 66,1,1/2886997162:339863295/339863297 [ 378.004094][T11605] tipc: Failed to remove unknown binding: 66,1,1/2886997162:339863295/339863297 [ 378.021873][T11605] tipc: Failed to remove unknown binding: 66,1,1/2886997162:339863295/339863297 [ 378.330459][T11608] SET target dimension over the limit! [ 378.371064][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.433436][T11607] lo speed is unknown, defaulting to 1000 [ 378.465093][T11607] lo speed is unknown, defaulting to 1000 [ 379.379069][T11638] IPVS: Error connecting to the multicast addr [ 379.416481][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 379.471420][T11637] syzkaller1: entered promiscuous mode [ 379.476942][T11637] syzkaller1: entered allmulticast mode [ 379.516024][T11640] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 380.354204][T11656] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1438'. [ 380.412543][T11659] tipc: Failed to remove unknown binding: 66,1,1/1110323978:2869234997/2869234999 [ 380.451212][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 380.522910][T11665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1437'. [ 380.543268][T11666] tipc: Failed to remove unknown binding: 66,1,1/1110323978:2869234997/2869234999 [ 380.552778][T11666] tipc: Failed to remove unknown binding: 66,1,1/1110323978:2869234997/2869234999 [ 380.699151][T11655] syzkaller0: entered promiscuous mode [ 380.752821][T11655] syzkaller0: entered allmulticast mode [ 381.491224][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 382.521639][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 383.239536][T11698] bridge0: failed insert local address into bridge forwarding table [ 383.251665][T11700] bridge0: failed insert local address into bridge forwarding table [ 383.306275][T11673] lo speed is unknown, defaulting to 1000 [ 383.380412][T11673] lo speed is unknown, defaulting to 1000 [ 383.380746][T11707] IPVS: Error connecting to the multicast addr [ 383.451636][T11709] xt_CT: No such helper "netbios-ns" [ 383.561194][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 383.949603][T11722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1449'. [ 383.980061][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1450'. [ 383.993106][T11721] netlink: 'syz.0.1450': attribute type 1 has an invalid length. [ 384.015103][T11722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.034863][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1452'. [ 384.044864][T11722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.053993][T11722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.086469][T11722] IPVS: Error connecting to the multicast addr [ 384.134354][T11726] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 384.168725][T11724] lo speed is unknown, defaulting to 1000 [ 384.180900][T11726] netlink: 'syz.3.1452': attribute type 4 has an invalid length. [ 384.203614][T11724] lo speed is unknown, defaulting to 1000 [ 384.225862][T11731] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3631387618/3631387620 [ 384.306404][T11733] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3631387618/3631387620 [ 384.316781][T11733] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3631387618/3631387620 [ 384.601307][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 385.183488][T11745] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 385.192408][T11745] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 385.201366][T11745] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 385.210349][T11745] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 385.229535][T11755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.238269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.249536][T11755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.258016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.282685][T11745] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 385.291481][T11745] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 385.310223][T11745] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 385.319234][T11745] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 385.535114][T11747] dummy0: left promiscuous mode [ 385.594556][T11747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.628168][T11753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1457'. [ 385.662115][T11755] IPVS: Error connecting to the multicast addr [ 385.671470][ T5897] lo speed is unknown, defaulting to 1000 [ 385.689531][ T5897] s›z0: Port: 1 Link ACTIVE [ 386.021923][T11775] netlink: 'syz.2.1459': attribute type 11 has an invalid length. [ 386.029915][T11775] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1459'. [ 386.078531][T11778] netlink: 'syz.2.1459': attribute type 1 has an invalid length. [ 386.093540][T11778] netlink: 'syz.2.1459': attribute type 1 has an invalid length. [ 386.416884][T11787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1463'. [ 386.446993][T11787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1463'. [ 386.482430][T11786] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 386.544854][T11786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1463'. [ 387.220628][T11795] lo speed is unknown, defaulting to 1000 [ 387.235424][T11795] lo speed is unknown, defaulting to 1000 [ 387.439678][T11806] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1467'. [ 387.473975][T11803] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1467'. [ 387.501401][T11807] tipc: Failed to remove unknown binding: 66,1,1/2886997039:354949545/354949547 [ 387.599667][T11808] tipc: Failed to remove unknown binding: 66,1,1/2886997039:354949545/354949547 [ 387.632810][T11808] tipc: Failed to remove unknown binding: 66,1,1/2886997039:354949545/354949547 [ 388.238864][T11813] 8021q: VLANs not supported on ip6_vti0 [ 388.471402][T11817] bond0: left promiscuous mode [ 388.481817][T11817] bond0: left allmulticast mode [ 388.498928][T11817] geneve2: left allmulticast mode [ 388.520536][T11817] veth5: left promiscuous mode [ 388.529434][T11817] veth7: left promiscuous mode [ 388.539451][T11817] bond3: left promiscuous mode [ 388.545216][T11817] bond3: left allmulticast mode [ 388.553131][T11817] veth11: left promiscuous mode [ 388.558448][ T5920] lo speed is unknown, defaulting to 1000 [ 388.569268][ T5920] s›z0: Port: 1 Link DOWN [ 388.761130][ C1] net_ratelimit: 3 callbacks suppressed [ 388.761153][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.922794][T11837] xt_hashlimit: size too large, truncated to 1048576 [ 389.008569][T11840] geneve1: entered promiscuous mode [ 389.029450][T11840] __nla_validate_parse: 3 callbacks suppressed [ 389.029470][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 389.421918][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'. [ 389.440017][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 389.514800][T11851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1477'. [ 389.525621][T11848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1478'. [ 389.562499][T11848] Bluetooth: MGMT ver 1.23 [ 389.673626][T11853] lo speed is unknown, defaulting to 1000 [ 389.801113][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.858184][T11864] netlink: 'syz.3.1480': attribute type 4 has an invalid length. [ 389.952716][T11864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1480'. [ 390.220432][T11871] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1068338955/1068338957 [ 390.239233][T11866] tipc: New replicast peer: 255.255.255.255 [ 390.269783][T11866] tipc: Enabled bearer , priority 10 [ 390.300022][T11872] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1068338955/1068338957 [ 390.335323][T11872] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1068338955/1068338957 [ 390.389636][T11874] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1482'. [ 390.538840][T11880] syz.3.1484: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 390.582671][T11880] CPU: 0 UID: 0 PID: 11880 Comm: syz.3.1484 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 390.582707][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 390.582721][T11880] Call Trace: [ 390.582730][T11880] [ 390.582739][T11880] dump_stack_lvl+0x241/0x360 [ 390.582781][T11880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.582813][T11880] ? __pfx__printk+0x10/0x10 [ 390.582842][T11880] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 390.582876][T11880] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 390.582907][T11880] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 390.582942][T11880] warn_alloc+0x27c/0x410 [ 390.582963][T11880] ? is_mmconf_reserved+0x3a1/0x3f0 [ 390.582986][T11880] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 390.583009][T11880] ? __pfx_warn_alloc+0x10/0x10 [ 390.583032][T11880] ? kasan_save_track+0x3f/0x80 [ 390.583055][T11880] ? __kasan_kmalloc+0x9d/0xb0 [ 390.583102][T11880] ? xsk_setsockopt+0x449/0x840 [ 390.583122][T11880] ? do_sock_setsockopt+0x3b1/0x710 [ 390.583149][T11880] ? __x64_sys_setsockopt+0x1ee/0x280 [ 390.583169][T11880] ? do_syscall_64+0xf3/0x230 [ 390.583192][T11880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.583226][T11880] __vmalloc_node_range_noprof+0x128/0x1390 [ 390.583283][T11880] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 390.583310][T11880] ? __kasan_kmalloc+0x9d/0xb0 [ 390.583342][T11880] vmalloc_user_noprof+0x74/0x80 [ 390.583363][T11880] ? xskq_create+0xb6/0x170 [ 390.583384][T11880] xskq_create+0xb6/0x170 [ 390.583408][T11880] xsk_init_queue+0xa1/0x100 [ 390.583434][T11880] xsk_setsockopt+0x449/0x840 [ 390.583458][T11880] ? __pfx_xsk_setsockopt+0x10/0x10 [ 390.583476][T11880] ? __lock_acquire+0xad5/0xd80 [ 390.583498][T11880] ? __pfx_aa_sk_perm+0x10/0x10 [ 390.583530][T11880] ? aa_sock_opt_perm+0x79/0x120 [ 390.583567][T11880] ? __pfx_xsk_setsockopt+0x10/0x10 [ 390.583586][T11880] do_sock_setsockopt+0x3b1/0x710 [ 390.583616][T11880] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 390.583636][T11880] ? __fget_files+0x2a/0x420 [ 390.583661][T11880] ? __fget_files+0x39d/0x420 [ 390.583679][T11880] ? __fget_files+0x2a/0x420 [ 390.583709][T11880] __x64_sys_setsockopt+0x1ee/0x280 [ 390.583740][T11880] do_syscall_64+0xf3/0x230 [ 390.583768][T11880] ? clear_bhb_loop+0x45/0xa0 [ 390.583794][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.583815][T11880] RIP: 0033:0x7fd9b6f8d169 [ 390.583835][T11880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.583853][T11880] RSP: 002b:00007fd9b7d8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 390.583877][T11880] RAX: ffffffffffffffda RBX: 00007fd9b71a5fa0 RCX: 00007fd9b6f8d169 [ 390.583893][T11880] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 390.583906][T11880] RBP: 00007fd9b700e730 R08: 0000000000000004 R09: 0000000000000000 [ 390.583920][T11880] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.583934][T11880] R13: 0000000000000000 R14: 00007fd9b71a5fa0 R15: 00007ffd45c96a48 [ 390.583969][T11880] [ 390.583978][T11880] Mem-Info: [ 390.851287][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 390.881408][T11880] active_anon:10486 inactive_anon:0 isolated_anon:0 [ 390.881408][T11880] active_file:1416 inactive_file:38421 isolated_file:0 [ 390.881408][T11880] unevictable:768 dirty:421 writeback:0 [ 390.881408][T11880] slab_reclaimable:10689 slab_unreclaimable:107917 [ 390.881408][T11880] mapped:32480 shmem:4246 pagetables:796 [ 390.881408][T11880] sec_pagetables:0 bounce:0 [ 390.881408][T11880] kernel_misc_reclaimable:0 [ 390.881408][T11880] free:1325344 free_pcp:2388 free_cma:0 [ 390.978206][T11856] xt_hashlimit: size too large, truncated to 1048576 [ 390.991505][T11880] Node 0 active_anon:41844kB inactive_anon:0kB active_file:5664kB inactive_file:153612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129920kB dirty:1684kB writeback:0kB shmem:15448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12756kB pagetables:3084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 391.044531][T11880] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 391.081591][T11880] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.115213][T11889] xt_hashlimit: size too large, truncated to 1048576 [ 391.173704][T11880] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 391.206249][T11880] Node 0 DMA32 free:1362904kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:42016kB inactive_anon:0kB active_file:5664kB inactive_file:153512kB unevictable:1536kB writepending:1772kB present:3129332kB managed:2547248kB mlocked:0kB bounce:0kB free_pcp:4112kB local_pcp:612kB free_cma:0kB [ 391.299242][T11880] lowmem_reserve[]: 0 0 0 0 0 [ 391.310440][T11880] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.344060][T11880] lowmem_reserve[]: 0 0 0 0 0 [ 391.369306][T11880] Node 1 Normal free:3907780kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.419332][T11880] lowmem_reserve[]: 0 0 0 0 0 [ 391.477807][T11880] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 391.537303][T11880] Node 0 DMA32: 315*4kB (UME) 525*8kB (UME) 128*16kB (UME) 1592*32kB (UME) 1077*64kB (UME) 281*128kB (UME) 63*256kB (UME) 30*512kB (UME) 16*1024kB (UME) 5*2048kB (UME) 279*4096kB (M) = 1364244kB [ 391.630457][T11880] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 391.685621][T11880] Node 1 Normal: 261*4kB (UE) 60*8kB (UME) 51*16kB (UME) 235*32kB (UME) 101*64kB (UME) 32*128kB (UME) 13*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (UM) = 3907780kB [ 391.756726][T11880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.798282][T11880] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 391.847597][T11880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.877857][T11880] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 391.887412][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 391.935626][T11880] 43900 total pagecache pages [ 391.940377][T11880] 0 pages in swap cache [ 391.949174][T11880] Free swap = 124996kB [ 391.962497][T11880] Total swap = 124996kB [ 391.970431][T11880] 2097051 pages RAM [ 391.989340][T11880] 0 pages HighMem/MovableOnly [ 392.006150][T11880] 428581 pages reserved [ 392.024651][T11880] 0 pages cma reserved [ 392.259819][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 392.600731][T11904] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.620037][T11904] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.651278][T11904] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.673266][T11904] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.690442][T11904] geneve1: left promiscuous mode [ 392.767735][T11906] bridge0: port 1(gretap0) entered blocking state [ 392.778921][T11906] bridge0: port 1(gretap0) entered disabled state [ 392.786139][T11906] gretap0: entered allmulticast mode [ 392.795987][T11906] gretap0: entered promiscuous mode [ 392.817470][T11919] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1494'. [ 392.868881][T11909] gretap0: left allmulticast mode [ 392.873215][T11902] lo speed is unknown, defaulting to 1000 [ 392.877675][T11909] gretap0: left promiscuous mode [ 392.893189][T11909] bridge0: port 1(gretap0) entered disabled state [ 392.921070][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.945093][T11913] lo speed is unknown, defaulting to 1000 [ 393.090819][T11931] SET target dimension over the limit! [ 393.099224][T11929] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1495'. [ 393.280558][T11937] tipc: Failed to remove unknown binding: 66,1,1/7:725955738/725955740 [ 393.301807][T11939] syzkaller1: entered promiscuous mode [ 393.323862][T11939] syzkaller1: entered allmulticast mode [ 393.344557][T11942] tipc: Failed to remove unknown binding: 66,1,1/7:725955738/725955740 [ 393.368207][T11942] tipc: Failed to remove unknown binding: 66,1,1/7:725955738/725955740 [ 393.961067][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.224160][T11954] xt_hashlimit: size too large, truncated to 1048576 [ 394.618191][T11959] __nla_validate_parse: 1 callbacks suppressed [ 394.618213][T11959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1502'. [ 394.665260][T11966] IPVS: Error connecting to the multicast addr [ 394.710694][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'. [ 394.754120][T11961] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 395.011071][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 395.191761][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 395.201090][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'. [ 395.403140][T11980] xt_CT: No such helper "snmp" [ 395.414630][T11991] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1509'. [ 395.491672][T11978] batman_adv: batadv0: Adding interface: dummy0 [ 395.497991][T11978] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 395.684236][T11993] tipc: Failed to remove unknown binding: 66,1,1/2886997007:183233805/183233807 [ 395.699361][T11999] xt_hashlimit: size too large, truncated to 1048576 [ 395.760598][T12003] tipc: Failed to remove unknown binding: 66,1,1/2886997007:183233805/183233807 [ 395.798759][T12003] tipc: Failed to remove unknown binding: 66,1,1/2886997007:183233805/183233807 [ 396.041176][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.058168][T12008] IPVS: Scheduler module ip_vs_sip not found [ 396.108686][T12014] IPVS: length: 24 != 16106127384 [ 396.667869][T12033] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1520'. [ 396.970651][T12044] netlink: 'syz.1.1521': attribute type 27 has an invalid length. [ 396.981940][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 397.081288][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 397.127059][T12047] ipt_REJECT: TCP_RESET invalid for non-tcp [ 397.380303][T12047] lo: entered allmulticast mode [ 397.402070][T12047] lo: left allmulticast mode [ 397.479027][T12060] lo: entered promiscuous mode [ 397.505121][T12060] tunl0: entered promiscuous mode [ 397.510300][T12060] gre0: entered promiscuous mode [ 397.549877][T12060] gretap0: entered promiscuous mode [ 397.561494][T12060] erspan0: entered promiscuous mode [ 397.567152][T12064] xt_hashlimit: size too large, truncated to 1048576 [ 397.575941][T12060] ip_vti0: entered promiscuous mode [ 397.601296][T12060] ip6_vti0: entered promiscuous mode [ 397.631301][T12060] sit0: entered promiscuous mode [ 397.636485][T12060] ip6tnl0: entered promiscuous mode [ 397.691208][T12060] ip6gre0: entered promiscuous mode [ 397.696668][T12060] syz_tun: entered promiscuous mode [ 397.772236][T12060] ip6gretap0: entered promiscuous mode [ 397.864470][T12060] dummy0: entered promiscuous mode [ 397.892451][T12060] nlmon0: entered promiscuous mode [ 397.897855][T12060] caif0: entered promiscuous mode [ 397.931368][T12060] batadv0: entered promiscuous mode [ 397.961538][T12060] vxcan0: entered promiscuous mode [ 397.966975][T12060] vxcan1: entered promiscuous mode [ 397.997998][T12060] veth0: entered promiscuous mode [ 398.025275][T12060] veth1: entered promiscuous mode [ 398.051839][T12060] wg0: entered promiscuous mode [ 398.057005][T12073] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1020778456/1020778458 [ 398.087838][T12060] wg1: entered promiscuous mode [ 398.095128][T12060] wg2: entered promiscuous mode [ 398.115551][T12060] veth0_to_bridge: entered promiscuous mode [ 398.121657][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 398.176538][T12074] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1020778456/1020778458 [ 398.215859][T12074] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1020778456/1020778458 [ 398.261410][T12060] bridge_slave_0: entered promiscuous mode [ 398.267907][T12060] veth1_to_bond: entered promiscuous mode [ 398.274903][T12060] bond_slave_1: entered promiscuous mode [ 398.282050][T12060] veth0_to_team: entered promiscuous mode [ 398.288131][T12060] team_slave_0: entered promiscuous mode [ 398.299275][T12060] veth1_to_team: entered promiscuous mode [ 398.340792][T12060] team_slave_1: entered promiscuous mode [ 398.385186][T12060] veth0_to_batadv: entered promiscuous mode [ 398.415170][T12060] batadv_slave_0: entered promiscuous mode [ 398.453356][T12060] veth1_to_batadv: entered promiscuous mode [ 398.494340][T12060] batadv_slave_1: entered promiscuous mode [ 398.510470][T12060] xfrm0: entered promiscuous mode [ 398.516735][T12060] veth0_to_hsr: entered promiscuous mode [ 398.543392][T12060] veth1_to_hsr: entered promiscuous mode [ 398.549398][T12060] hsr0: entered promiscuous mode [ 398.562205][T12060] veth1_virt_wifi: entered promiscuous mode [ 398.568371][T12060] veth0_virt_wifi: entered promiscuous mode [ 398.583223][T12060] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 398.590672][T12060] geneve0: entered promiscuous mode [ 398.610174][T12060] geneve1: entered promiscuous mode [ 398.620306][T12060] bond1: entered promiscuous mode [ 398.630370][T12060] gretap1: entered promiscuous mode [ 398.639879][T12060] bond0.0004: entered promiscuous mode [ 398.648742][T12060] geneve2: entered promiscuous mode [ 398.658010][T12060] bond2: entered promiscuous mode [ 398.665607][T12060] ip6gretap1: entered promiscuous mode [ 398.675617][T12060] bond3: entered promiscuous mode [ 398.681371][T12060] bond4: entered promiscuous mode [ 398.686664][T12060] : entered promiscuous mode [ 398.691764][T12060] ip6gre1: entered promiscuous mode [ 398.697416][T12060] : entered promiscuous mode [ 398.703500][T12060] vlan0: entered promiscuous mode [ 398.708908][T12060] macvlan0: entered promiscuous mode [ 398.714434][T12060] bond5: entered promiscuous mode [ 398.719753][T12060] veth2: entered promiscuous mode [ 398.725658][T12060] veth3: entered promiscuous mode [ 398.731171][T12060] bond6: entered promiscuous mode [ 398.736248][T12060] veth5: entered promiscuous mode [ 398.742033][T12060] veth4: entered promiscuous mode [ 398.747434][T12060] bond7: entered promiscuous mode [ 398.804208][T12060] bond8: entered promiscuous mode [ 398.809554][T12060] bond9: entered promiscuous mode [ 398.831394][T12060] batadv1: entered promiscuous mode [ 398.836853][T12060] batadv2: entered promiscuous mode [ 398.853525][T12060] netdevsim netdevsim4 eth0: entered promiscuous mode [ 398.860546][T12060] netdevsim netdevsim4 eth1: entered promiscuous mode [ 398.914070][T12060] netdevsim netdevsim4 eth2: entered promiscuous mode [ 398.947497][T12060] netdevsim netdevsim4 eth3: entered promiscuous mode [ 398.965632][T12060] bridge0: entered promiscuous mode [ 398.988425][T12060] bridge1: entered promiscuous mode [ 399.047476][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 399.136625][T12088] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1534'. [ 399.149725][T12063] lo speed is unknown, defaulting to 1000 [ 399.171067][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 399.553414][ T30] audit: type=1800 audit(1744205872.066:8): pid=12078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1532" name="cgroup.controllers" dev="tmpfs" ino=1447 res=0 errno=0 [ 399.691392][T12099] can: request_module (can-proto-3) failed. [ 400.201047][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 400.389240][T12115] xt_hashlimit: size too large, truncated to 1048576 [ 400.630541][T12121] tipc: Can't bind to reserved service type 0 [ 400.867988][T12123] tipc: Failed to remove unknown binding: 66,1,1/1110323978:752345375/752345377 [ 400.947925][T12130] tipc: Failed to remove unknown binding: 66,1,1/1110323978:752345375/752345377 [ 401.011138][T12130] tipc: Failed to remove unknown binding: 66,1,1/1110323978:752345375/752345377 [ 401.241159][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 401.481105][T12137] lo speed is unknown, defaulting to 1000 [ 401.482677][ T5861] Bluetooth: hci3: command 0x0405 tx timeout [ 401.781850][T12125] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 401.841476][T12125] netlink: 'syz.3.1544': attribute type 2 has an invalid length. [ 401.863194][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1550'. [ 401.880731][T12144] netlink: 'syz.4.1550': attribute type 39 has an invalid length. [ 402.281048][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 402.312062][T12148] bridge_slave_1: entered allmulticast mode [ 402.565092][T12161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1554'. [ 402.585922][T12161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1554'. [ 403.060657][T12170] xt_hashlimit: size too large, truncated to 1048576 [ 403.331042][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 403.550634][T12178] lo speed is unknown, defaulting to 1000 [ 403.781421][T12188] tipc: Failed to remove unknown binding: 66,1,1/2886997162:699918912/699918914 [ 403.923646][T12188] tipc: Failed to remove unknown binding: 66,1,1/2886997162:699918912/699918914 [ 403.984861][T12188] tipc: Failed to remove unknown binding: 66,1,1/2886997162:699918912/699918914 [ 404.223336][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 404.243765][T12205] lo speed is unknown, defaulting to 1000 [ 404.300541][T12205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1562'. [ 404.361217][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 404.759457][T12214] netlink: 'syz.0.1563': attribute type 27 has an invalid length. [ 404.790207][T12213] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20004 [ 405.126330][T12221] IPVS: Error connecting to the multicast addr [ 405.401348][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 405.409150][T12224] lo speed is unknown, defaulting to 1000 [ 405.977493][T12234] netlink: 'syz.2.1569': attribute type 1 has an invalid length. [ 406.293007][T12244] xt_hashlimit: size too large, truncated to 1048576 [ 406.346229][T12246] tipc: Failed to remove unknown binding: 66,1,1/1110323978:1402324179/1402324181 [ 406.416923][T12249] tipc: Failed to remove unknown binding: 66,1,1/1110323978:1402324179/1402324181 [ 406.451092][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 406.491242][T12249] tipc: Failed to remove unknown binding: 66,1,1/1110323978:1402324179/1402324181 [ 407.030198][T12257] lo speed is unknown, defaulting to 1000 [ 407.204604][T12261] IPVS: Error connecting to the multicast addr [ 407.425273][T12269] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1579'. [ 407.477483][T12269] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 407.501034][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.589739][T12266] veth7: entered promiscuous mode [ 407.599186][T12266] bond10: (slave veth7): Enslaving as an active interface with an up link [ 407.685162][T12272] lo speed is unknown, defaulting to 1000 [ 408.012582][T12275] lo speed is unknown, defaulting to 1000 [ 408.093665][T12278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1581'. [ 408.174392][T12283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1580'. [ 408.521083][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.318946][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'. [ 409.421311][T12299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1585'. [ 409.561238][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.706220][T12305] xt_hashlimit: size too large, truncated to 1048576 [ 410.117494][T12309] tipc: Failed to remove unknown binding: 66,1,1/7:2927062853/2927062855 [ 410.198008][T12310] tipc: Failed to remove unknown binding: 66,1,1/7:2927062853/2927062855 [ 410.228642][T12310] tipc: Failed to remove unknown binding: 66,1,1/7:2927062853/2927062855 [ 410.276358][ T30] audit: type=1107 audit(1744205882.786:9): pid=12311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 410.285073][T12312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1589'. [ 410.480381][T12312] IPVS: Error connecting to the multicast addr [ 410.601072][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 410.707631][T12318] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 410.715900][T12318] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 410.723830][T12318] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1592'. [ 410.769957][T12322] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1592'. [ 410.986099][T12319] lo speed is unknown, defaulting to 1000 [ 411.641170][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 411.758296][T12335] team0 (unregistering): Port device geneve0 removed [ 411.758564][T12343] netlink: 'syz.2.1596': attribute type 13 has an invalid length. [ 411.907740][T12342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1596'. [ 411.959514][T12343] gretap0: refused to change device tx_queue_len [ 411.994757][T12343] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 412.255188][T12357] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 412.468013][T12354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1597'. [ 412.574772][T12362] veth13: entered promiscuous mode [ 412.623471][T12362] bond6: (slave veth13): Enslaving as an active interface with an up link [ 412.681164][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.879584][T12372] ipt_ECN: cannot use operation on non-tcp rule [ 413.116874][T12373] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 413.592359][T12371] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 413.721213][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.746485][T12383] lo speed is unknown, defaulting to 1000 [ 413.821473][T12383] lo speed is unknown, defaulting to 1000 [ 413.828147][T12383] lo speed is unknown, defaulting to 1000 [ 413.837042][T12391] syzkaller1: entered promiscuous mode [ 413.850084][T12391] syzkaller1: entered allmulticast mode [ 413.931729][T12383] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 413.975013][T12395] xt_hashlimit: size too large, truncated to 1048576 [ 414.029418][T12400] xt_hashlimit: size too large, truncated to 1048576 [ 414.079884][T12383] lo speed is unknown, defaulting to 1000 [ 414.088033][T12383] lo speed is unknown, defaulting to 1000 [ 414.096505][T12402] : renamed from bond0 [ 414.180130][T12383] lo speed is unknown, defaulting to 1000 [ 414.193311][T12383] lo speed is unknown, defaulting to 1000 [ 414.237637][T12383] lo speed is unknown, defaulting to 1000 [ 414.582750][T12413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1608'. [ 414.761154][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 414.946074][T12424] netlink: 'syz.3.1612': attribute type 29 has an invalid length. [ 415.064592][T12432] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 415.145443][T12436] netlink: 'syz.3.1612': attribute type 29 has an invalid length. [ 415.285987][T12440] IPv6: sit1: Disabled Multicast RS [ 415.304485][T12440] sit1: entered allmulticast mode [ 415.801395][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 415.864648][T12447] netlink: 'syz.1.1616': attribute type 10 has an invalid length. [ 415.883133][T12447] team0: Device veth1_macvtap failed to register rx_handler [ 415.923400][T12449] netlink: 'syz.1.1616': attribute type 11 has an invalid length. [ 415.931662][T12449] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1616'. [ 416.025721][T12445] wireguard0: entered promiscuous mode [ 416.036955][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 416.043609][T12445] wireguard0: entered allmulticast mode [ 416.429465][T12464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1619'. [ 416.790393][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1623'. [ 416.841149][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.179074][T12474] netlink: 'syz.3.1622': attribute type 4 has an invalid length. [ 417.404139][T12484] IPVS: Error connecting to the multicast addr [ 417.881072][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.280077][T12514] syzkaller1: entered promiscuous mode [ 418.298256][T12514] syzkaller1: entered allmulticast mode [ 418.832860][T12520] lo speed is unknown, defaulting to 1000 [ 418.864815][T12522] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 418.921238][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 419.008310][T12530] IPVS: Error connecting to the multicast addr [ 419.039212][T12522] lo speed is unknown, defaulting to 1000 [ 419.328550][T12536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1632'. [ 419.577130][T12520] lo speed is unknown, defaulting to 1000 [ 419.790225][T12547] Bluetooth: MGMT ver 1.23 [ 419.852206][T12551] netlink: 'syz.3.1635': attribute type 1 has an invalid length. [ 419.961033][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.149656][T12555] veth5: entered promiscuous mode [ 420.158994][T12555] bond7: (slave veth5): Enslaving as an active interface with an up link [ 420.285683][T12522] lo speed is unknown, defaulting to 1000 [ 420.305597][T12544] lo speed is unknown, defaulting to 1000 [ 420.409675][T12569] IPVS: Error connecting to the multicast addr [ 420.921300][ T5861] Bluetooth: hci3: command 0x0405 tx timeout [ 421.001157][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.338277][T12544] lo speed is unknown, defaulting to 1000 [ 422.041068][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 422.330237][T12594] pim6reg1: entered promiscuous mode [ 422.351723][T12594] pim6reg1: entered allmulticast mode [ 422.754249][T12604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1644'. [ 422.778253][T12607] IPVS: Error connecting to the multicast addr [ 422.804952][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'. [ 422.817147][T12612] xt_TCPMSS: Only works on TCP SYN packets [ 423.079686][T12620] IPVS: Error connecting to the multicast addr [ 423.086194][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 423.260043][T12625] lo speed is unknown, defaulting to 1000 [ 423.390549][T12622] lo speed is unknown, defaulting to 1000 [ 423.699496][T12631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1650'. [ 423.726862][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 424.131047][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.947446][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'. [ 425.040215][T12639] veth17: entered promiscuous mode [ 425.135968][T12646] netlink: 'syz.3.1655': attribute type 2 has an invalid length. [ 425.154390][T12625] lo speed is unknown, defaulting to 1000 [ 425.161201][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.254363][T12646] : entered promiscuous mode [ 425.267278][T12626] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1651'. [ 425.359502][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'. [ 425.557932][T12655] IPVS: Error connecting to the multicast addr [ 425.578849][T12622] lo speed is unknown, defaulting to 1000 [ 426.101951][T12661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1658'. [ 426.201827][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 426.363469][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'. [ 426.648511][T12668] lo speed is unknown, defaulting to 1000 [ 426.706364][T12673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1661'. [ 426.751733][T12673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1661'. [ 426.784178][T12673] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 426.863356][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 427.011565][ T30] audit: type=1800 audit(1744205899.516:10): pid=12664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1659" name="memory.events" dev="tmpfs" ino=1789 res=0 errno=0 [ 427.241204][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.637012][T12684] veth9: entered allmulticast mode [ 427.649276][T12684] bridge0: port 1(veth9) entered blocking state [ 427.657841][T12684] bridge0: port 1(veth9) entered disabled state [ 427.666234][T12684] veth9: entered promiscuous mode [ 427.741370][T12668] lo speed is unknown, defaulting to 1000 [ 427.784781][T12688] lo: left promiscuous mode [ 427.806009][T12688] tunl0: left promiscuous mode [ 427.843002][T12688] gre0: left promiscuous mode [ 427.863862][T12688] erspan0: left promiscuous mode [ 427.889894][T12688] ip_vti0: left promiscuous mode [ 427.913396][T12688] ip6_vti0: left promiscuous mode [ 427.928163][T12688] sit0: left promiscuous mode [ 427.945833][T12688] ip6tnl0: left promiscuous mode [ 427.965425][T12688] ip6gre0: left promiscuous mode [ 428.000244][T12688] syz_tun: left promiscuous mode [ 428.033075][T12688] ip6gretap0: left promiscuous mode [ 428.055194][T12688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.076217][T12688] dummy0: left promiscuous mode [ 428.086020][T12688] nlmon0: left promiscuous mode [ 428.095473][T12688] caif0: left promiscuous mode [ 428.100292][T12688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.281134][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.525264][T12712] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 428.909314][T12721] lo speed is unknown, defaulting to 1000 [ 428.918999][T12725] sctp: [Deprecated]: syz.4.1670 (pid 12725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.918999][T12725] Use struct sctp_sack_info instead [ 429.095705][T12728] IPVS: Error connecting to the multicast addr [ 429.116803][T12729] sctp: [Deprecated]: syz.4.1670 (pid 12729) Use of int in max_burst socket option deprecated. [ 429.116803][T12729] Use struct sctp_assoc_value instead [ 429.321041][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.386128][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1672'. [ 429.681930][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1669'. [ 429.901240][T12729] batadv0: left promiscuous mode [ 429.911441][T12729] vxcan0: left promiscuous mode [ 429.916496][T12729] vxcan1: left promiscuous mode [ 429.931337][T12729] veth0: left promiscuous mode [ 429.936521][T12729] veth1: left promiscuous mode [ 429.946706][T12729] wg1: left promiscuous mode [ 429.954702][T12729] wg2: left promiscuous mode [ 429.962177][T12729] veth0_to_bridge: left promiscuous mode [ 429.968056][T12729] bridge_slave_0: left promiscuous mode [ 429.982591][T12729] veth1_to_bond: left promiscuous mode [ 429.988328][T12729] bond_slave_1: left promiscuous mode [ 429.995207][T12729] veth0_to_team: left promiscuous mode [ 430.000892][T12729] team_slave_0: left promiscuous mode [ 430.008030][T12729] veth1_to_team: left promiscuous mode [ 430.014875][T12729] team_slave_1: left promiscuous mode [ 430.020607][T12729] veth0_to_batadv: left promiscuous mode [ 430.027605][T12729] batadv_slave_0: left promiscuous mode [ 430.034154][T12729] veth1_to_batadv: left promiscuous mode [ 430.040031][T12729] batadv_slave_1: left promiscuous mode [ 430.047086][T12729] xfrm0: left promiscuous mode [ 430.058558][T12729] veth0_to_hsr: left promiscuous mode [ 430.068454][T12729] veth1_to_hsr: left promiscuous mode [ 430.076943][T12729] hsr0: left promiscuous mode [ 430.083006][T12729] veth1_virt_wifi: left promiscuous mode [ 430.089065][T12729] veth0_virt_wifi: left promiscuous mode [ 430.096134][T12729] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 430.104534][T12729] geneve0: left promiscuous mode [ 430.109964][T12729] geneve1: left promiscuous mode [ 430.116798][T12729] bond1: left promiscuous mode [ 430.122952][T12729] gretap1: left promiscuous mode [ 430.128205][T12729] bond0.0004: left promiscuous mode [ 430.134846][T12729] geneve2: left promiscuous mode [ 430.140130][T12729] bond2: left promiscuous mode [ 430.146135][T12729] ip6gretap1: left promiscuous mode [ 430.152347][T12729] bond3: left promiscuous mode [ 430.157477][T12729] bond4: left promiscuous mode [ 430.163725][T12729] : left promiscuous mode [ 430.168502][T12729] ip6gre1: left promiscuous mode [ 430.174649][T12729] : left promiscuous mode [ 430.179344][T12729] vlan0: left promiscuous mode [ 430.185147][T12729] gretap0: left promiscuous mode [ 430.190364][T12729] macvlan0: left promiscuous mode [ 430.196403][T12729] bond5: left promiscuous mode [ 430.201550][T12729] veth2: left promiscuous mode [ 430.206508][T12729] veth3: left promiscuous mode [ 430.212033][T12729] bond6: left promiscuous mode [ 430.217162][T12729] veth4: left promiscuous mode [ 430.222991][T12729] veth5: left promiscuous mode [ 430.227987][T12729] bond7: left promiscuous mode [ 430.233931][T12729] bond8: left promiscuous mode [ 430.238886][T12729] bond9: left promiscuous mode [ 430.244300][T12729] batadv1: left promiscuous mode [ 430.249448][T12729] batadv2: left promiscuous mode [ 430.255013][T12729] netdevsim netdevsim4 eth0: left promiscuous mode [ 430.261847][T12729] netdevsim netdevsim4 eth1: left promiscuous mode [ 430.268494][T12729] netdevsim netdevsim4 eth2: left promiscuous mode [ 430.275460][T12729] netdevsim netdevsim4 eth3: left promiscuous mode [ 430.282483][T12729] bridge0: left promiscuous mode [ 430.287541][T12729] bridge1: left promiscuous mode [ 430.295699][T12729] veth7: left promiscuous mode [ 430.336702][T12737] bridge4: entered promiscuous mode [ 430.342360][T12737] bridge4: entered allmulticast mode [ 430.354426][T12737] team0: Port device bridge4 added [ 430.361081][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.532919][T12738] wg1: left promiscuous mode [ 430.537581][T12738] wg1: left allmulticast mode [ 430.554162][T12738] macvlan0: left promiscuous mode [ 430.564285][T12738] bond5: left promiscuous mode [ 430.583361][T12738] veth5: left promiscuous mode [ 430.595857][T12722] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 430.600678][T12742] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 430.633080][T12721] lo speed is unknown, defaulting to 1000 [ 430.959389][T12757] lo speed is unknown, defaulting to 1000 [ 430.960375][T12759] smc: net device bond0 applied user defined pnetid SYZ2 [ 431.015059][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 431.251422][T12757] lo speed is unknown, defaulting to 1000 [ 431.401136][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.141932][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1679'. [ 432.292871][T12779] lo speed is unknown, defaulting to 1000 [ 432.334876][T12784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1680'. [ 432.451029][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.537566][T12779] lo speed is unknown, defaulting to 1000 [ 432.553468][T12785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1680'. [ 432.565516][T12785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1680'. [ 432.575340][T12785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1680'. [ 432.694180][T12790] IPVS: Error connecting to the multicast addr [ 432.930375][T12797] bridge0: failed insert local address into bridge forwarding table [ 432.945790][T12797] bridge0: failed insert local address into bridge forwarding table [ 432.970785][T12800] netlink: 'syz.2.1684': attribute type 1 has an invalid length. [ 432.991304][T12800] netlink: 'syz.2.1684': attribute type 2 has an invalid length. [ 432.999397][T12800] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1684'. [ 433.076091][T12799] lo speed is unknown, defaulting to 1000 [ 433.491130][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.619517][T12799] lo speed is unknown, defaulting to 1000 [ 434.076978][T12818] lo: MTU too low for tipc bearer [ 434.107051][T12818] tipc: Enabling of bearer rejected, failed to enable media [ 434.239002][T12824] syzkaller1: entered promiscuous mode [ 434.275701][T12824] syzkaller1: entered allmulticast mode [ 434.531031][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.917662][T12834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1694'. [ 434.938374][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 434.984265][T12834] netlink: 'syz.4.1694': attribute type 11 has an invalid length. [ 435.021980][T12834] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1694'. [ 435.380523][T12848] netlink: 'syz.4.1697': attribute type 1 has an invalid length. [ 435.380648][T12849] IPVS: Error connecting to the multicast addr [ 435.405773][T12848] netlink: 'syz.4.1697': attribute type 2 has an invalid length. [ 435.460381][T12848] bridge0: port 2(vlan1) entered blocking state [ 435.501625][T12848] bridge0: port 2(vlan1) entered disabled state [ 435.508168][T12848] vlan1: entered allmulticast mode [ 435.531498][T12848] bond0: entered allmulticast mode [ 435.539291][T12848] vlan1: entered promiscuous mode [ 435.561032][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.682343][T12855] team0 (unregistering): Port device geneve0 removed [ 435.701778][T12855] team0 (unregistering): Port device bridge4 removed [ 436.070278][T12868] __nla_validate_parse: 1 callbacks suppressed [ 436.070300][T12868] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1699'. [ 436.387503][T12879] SET target dimension over the limit! [ 436.601167][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.767775][T12887] lo speed is unknown, defaulting to 1000 [ 437.317509][T12892] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 437.372787][T12892] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1706'. [ 437.425054][T12887] lo speed is unknown, defaulting to 1000 [ 437.431004][T12892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 437.441991][T12904] IPVS: Error connecting to the multicast addr [ 437.478832][T12892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1706'. [ 437.618391][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1707'. [ 437.651137][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.097493][T12912] syz.4.1710: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 438.119264][T12912] CPU: 0 UID: 0 PID: 12912 Comm: syz.4.1710 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 438.119298][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 438.119312][T12912] Call Trace: [ 438.119321][T12912] [ 438.119337][T12912] dump_stack_lvl+0x241/0x360 [ 438.119380][T12912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.119412][T12912] ? __pfx__printk+0x10/0x10 [ 438.119442][T12912] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 438.119477][T12912] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 438.119508][T12912] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 438.119545][T12912] warn_alloc+0x27c/0x410 [ 438.119567][T12912] ? is_mmconf_reserved+0x3a1/0x3f0 [ 438.119591][T12912] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 438.119614][T12912] ? __pfx_warn_alloc+0x10/0x10 [ 438.119638][T12912] ? kasan_save_track+0x3f/0x80 [ 438.119661][T12912] ? __kasan_kmalloc+0x9d/0xb0 [ 438.119688][T12912] ? xsk_setsockopt+0x449/0x840 [ 438.119708][T12912] ? do_sock_setsockopt+0x3b1/0x710 [ 438.119728][T12912] ? __x64_sys_setsockopt+0x1ee/0x280 [ 438.119747][T12912] ? do_syscall_64+0xf3/0x230 [ 438.119772][T12912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.119806][T12912] __vmalloc_node_range_noprof+0x128/0x1390 [ 438.119864][T12912] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 438.119892][T12912] ? __kasan_kmalloc+0x9d/0xb0 [ 438.119926][T12912] vmalloc_user_noprof+0x74/0x80 [ 438.119947][T12912] ? xskq_create+0xb6/0x170 [ 438.119968][T12912] xskq_create+0xb6/0x170 [ 438.119994][T12912] xsk_init_queue+0xa1/0x100 [ 438.120019][T12912] xsk_setsockopt+0x449/0x840 [ 438.120050][T12912] ? __pfx_xsk_setsockopt+0x10/0x10 [ 438.120069][T12912] ? __lock_acquire+0xad5/0xd80 [ 438.120092][T12912] ? __pfx_aa_sk_perm+0x10/0x10 [ 438.120125][T12912] ? aa_sock_opt_perm+0x79/0x120 [ 438.120162][T12912] ? __pfx_xsk_setsockopt+0x10/0x10 [ 438.120182][T12912] do_sock_setsockopt+0x3b1/0x710 [ 438.120213][T12912] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 438.120232][T12912] ? __fget_files+0x2a/0x420 [ 438.120258][T12912] ? __fget_files+0x39d/0x420 [ 438.120276][T12912] ? __fget_files+0x2a/0x420 [ 438.120307][T12912] __x64_sys_setsockopt+0x1ee/0x280 [ 438.120343][T12912] do_syscall_64+0xf3/0x230 [ 438.120371][T12912] ? clear_bhb_loop+0x45/0xa0 [ 438.120397][T12912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.120417][T12912] RIP: 0033:0x7f943b38d169 [ 438.120437][T12912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.120455][T12912] RSP: 002b:00007f943c110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 438.120480][T12912] RAX: ffffffffffffffda RBX: 00007f943b5a5fa0 RCX: 00007f943b38d169 [ 438.120497][T12912] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 438.120511][T12912] RBP: 00007f943b40e730 R08: 0000000000000004 R09: 0000000000000000 [ 438.120524][T12912] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.120538][T12912] R13: 0000000000000000 R14: 00007f943b5a5fa0 R15: 00007ffcc1f741c8 [ 438.120574][T12912] [ 438.120583][T12912] Mem-Info: [ 438.516230][T12920] netlink: 'syz.3.1712': attribute type 1 has an invalid length. [ 438.534464][T12912] active_anon:8619 inactive_anon:0 isolated_anon:0 [ 438.534464][T12912] active_file:1416 inactive_file:38439 isolated_file:0 [ 438.534464][T12912] unevictable:768 dirty:396 writeback:0 [ 438.534464][T12912] slab_reclaimable:10894 slab_unreclaimable:107097 [ 438.534464][T12912] mapped:32753 shmem:1446 pagetables:824 [ 438.534464][T12912] sec_pagetables:0 bounce:0 [ 438.534464][T12912] kernel_misc_reclaimable:0 [ 438.534464][T12912] free:1324553 free_pcp:5584 free_cma:0 [ 438.611045][T12912] Node 0 active_anon:34876kB inactive_anon:0kB active_file:5664kB inactive_file:153684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131112kB dirty:1584kB writeback:0kB shmem:4248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12708kB pagetables:3296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 438.661653][T12927] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1712'. [ 438.691137][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.717159][T12912] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 438.767282][T12927] batadv1: entered promiscuous mode [ 438.794342][T12927] batadv1: entered allmulticast mode [ 438.817832][T12912] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 438.890635][T12936] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1712'. [ 438.914433][T12912] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 438.950302][T12912] Node 0 DMA32 free:1396652kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:35368kB inactive_anon:0kB active_file:5664kB inactive_file:153584kB unevictable:1536kB writepending:1584kB present:3129332kB managed:2547248kB mlocked:0kB bounce:0kB free_pcp:1292kB local_pcp:140kB free_cma:0kB [ 439.013642][T12920] bond8: entered promiscuous mode [ 439.031930][T12912] lowmem_reserve[]: 0 0 0 0 0 [ 439.037246][T12912] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.067125][T12912] lowmem_reserve[]: 0 0 0 0 0 [ 439.068555][T12920] 8021q: adding VLAN 0 to HW filter on device bond8 [ 439.073937][T12939] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1713'. [ 439.088805][T12912] Node 1 Normal free:3907780kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:16kB free_cma:0kB [ 439.162351][T12912] lowmem_reserve[]: 0 0 0 0 0 [ 439.167177][T12912] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 439.195426][T12912] Node 0 DMA32: 1418*4kB (UME) 693*8kB (UME) 525*16kB (UME) 1354*32kB (UME) 1205*64kB (UME) 461*128kB (UME) 120*256kB (UME) 74*512kB (UME) 49*1024kB (UME) 12*2048kB (UME) 257*4096kB (UM) = 1395104kB [ 439.242414][T12912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 439.284894][T12912] Node 1 Normal: 261*4kB (UE) 60*8kB (UME) 51*16kB (UME) 235*32kB (UME) 101*64kB (UME) 32*128kB (UME) 13*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (UM) = 3907780kB [ 439.312918][T12912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.338848][T12912] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 439.356602][T12912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.371457][T12912] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 439.391589][T12912] 41290 total pagecache pages [ 439.396491][T12912] 0 pages in swap cache [ 439.400751][T12912] Free swap = 124996kB [ 439.412357][T12912] Total swap = 124996kB [ 439.417118][T12912] 2097051 pages RAM [ 439.427144][T12912] 0 pages HighMem/MovableOnly [ 439.433166][T12912] 428581 pages reserved [ 439.437491][T12912] 0 pages cma reserved [ 439.721506][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.821780][T12942] xt_socket: unknown flags 0x8 [ 439.896082][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'. [ 439.906506][T12947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1714'. [ 440.604569][T12965] netlink: ct family unspecified [ 440.609627][T12965] openvswitch: netlink: Actions may not be safe on all matching packets [ 440.761030][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.932243][T12968] syzkaller0: entered promiscuous mode [ 440.937793][T12968] syzkaller0: entered allmulticast mode [ 441.809073][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.851108][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.885794][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.287186][T12993] bridge4: left promiscuous mode [ 444.295945][T12993] bridge4: left allmulticast mode [ 444.334440][T13004] __nla_validate_parse: 2 callbacks suppressed [ 444.334463][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1728'. [ 444.396262][T13003] lo speed is unknown, defaulting to 1000 [ 444.495791][T13009] lo speed is unknown, defaulting to 1000 [ 444.921152][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.310633][T13003] lo speed is unknown, defaulting to 1000 [ 445.964020][T13009] lo speed is unknown, defaulting to 1000 [ 445.971023][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.156589][T13037] xt_CT: No such helper "snmp" [ 446.370559][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 446.460225][T13055] lo speed is unknown, defaulting to 1000 [ 446.477994][T13053] netlink: 'syz.3.1737': attribute type 10 has an invalid length. [ 446.516421][T13046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1735'. [ 446.972885][T13047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.001045][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.955224][T13073] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1739'. [ 448.041021][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.120532][T13079] sctp: [Deprecated]: syz.3.1743 (pid 13079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.120532][T13079] Use struct sctp_sack_info instead [ 448.140840][T13080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1742'. [ 448.330394][T13080] lo speed is unknown, defaulting to 1000 [ 448.373315][T13083] sctp: [Deprecated]: syz.3.1743 (pid 13083) Use of int in max_burst socket option deprecated. [ 448.373315][T13083] Use struct sctp_assoc_value instead [ 448.587906][T13083] bond8: left promiscuous mode [ 448.761370][T13080] lo speed is unknown, defaulting to 1000 [ 449.081065][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.169223][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1748'. [ 449.278839][T13087] IPVS: length: 78 != 8 [ 449.368571][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'. [ 449.654784][T13117] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1749'. [ 449.696745][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1749'. [ 449.739242][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 450.106394][T13121] wireguard0: entered promiscuous mode [ 450.121098][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.141395][T13121] wireguard0: entered allmulticast mode [ 450.200766][T13126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1751'. [ 450.273591][T13127] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 450.479773][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1752'. [ 450.658842][T13134] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1753'. [ 450.841937][T13142] netlink: 'syz.2.1755': attribute type 1 has an invalid length. [ 450.891093][T13142] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1755'. [ 450.923654][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'. [ 451.012462][T13151] tipc: New replicast peer: 0.0.0.0 [ 451.017988][T13151] tipc: Enabled bearer , priority 10 [ 451.081769][T13151] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 451.129242][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'. [ 451.171035][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.502630][T13165] sctp: [Deprecated]: syz.0.1758 (pid 13165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.502630][T13165] Use struct sctp_sack_info instead [ 451.526699][T13166] rdma_rxe: rxe_newlink: failed to add lo [ 451.667451][T13171] sctp: [Deprecated]: syz.0.1758 (pid 13171) Use of int in max_burst socket option deprecated. [ 451.667451][T13171] Use struct sctp_assoc_value instead [ 452.201204][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 452.559291][T13187] veth17: entered promiscuous mode [ 452.685691][T13193] IPVS: Error connecting to the multicast addr [ 453.118622][T13201] lo speed is unknown, defaulting to 1000 [ 453.241239][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.611348][T13201] lo speed is unknown, defaulting to 1000 [ 454.127820][ T30] audit: type=1800 audit(1744205926.636:11): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1773" name="memory.events" dev="tmpfs" ino=2038 res=0 errno=0 [ 454.192006][ T30] audit: type=1804 audit(1744205926.696:12): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1773" name="memory.events" dev="tmpfs" ino=2038 res=1 errno=0 [ 454.281129][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 454.435796][T13230] __nla_validate_parse: 8 callbacks suppressed [ 454.435819][T13230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1774'. [ 454.504415][T13230] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 454.569285][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 455.247380][T13242] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1777'. [ 455.321069][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.440431][T13246] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1779'. [ 455.584423][T13249] IPVS: Error connecting to the multicast addr [ 455.648649][T13252] batman_adv: batadv0: Adding interface: macvlan2 [ 455.692781][T13252] batman_adv: batadv0: Interface activated: macvlan2 [ 456.361153][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.411025][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.491463][T13284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1787'. [ 457.771552][T13280] lo speed is unknown, defaulting to 1000 [ 457.862420][T13289] wireguard0: entered promiscuous mode [ 457.868049][T13289] wireguard0: entered allmulticast mode [ 458.451022][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.765676][T13303] lo speed is unknown, defaulting to 1000 [ 458.974135][T13316] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1794'. [ 459.049874][T13317] bridge0: failed insert local address into bridge forwarding table [ 459.059150][T13317] bridge0: failed insert local address into bridge forwarding table [ 459.273001][T13322] IPVS: Error connecting to the multicast addr [ 459.481189][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.619561][T13282] lo speed is unknown, defaulting to 1000 [ 459.936636][T13334] tipc: Enabling of bearer rejected, already enabled [ 459.946177][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'. [ 459.955579][T13334] tipc: Disabling bearer [ 460.106099][T13280] lo speed is unknown, defaulting to 1000 [ 460.376268][T13347] netlink: 'syz.2.1799': attribute type 27 has an invalid length. [ 460.521112][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.108937][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 461.283054][ T30] audit: type=1800 audit(1744205933.786:13): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1800" name="memory.events" dev="tmpfs" ino=1754 res=0 errno=0 [ 461.322383][T13364] bridge_slave_1: left allmulticast mode [ 461.450259][T13364] veth13: left promiscuous mode [ 461.519272][T13303] lo speed is unknown, defaulting to 1000 [ 461.561172][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.709030][T13282] lo speed is unknown, defaulting to 1000 [ 461.882437][T13367] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1804'. [ 462.189377][T13374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1805'. [ 462.601305][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.392111][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 463.651181][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.314776][T13428] No such timeout policy "syz0" [ 464.427148][T13430] lo speed is unknown, defaulting to 1000 [ 464.691091][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.192571][T13451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1823'. [ 465.439468][T13454] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1824'. [ 465.465484][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1824'. [ 465.698740][T13430] lo speed is unknown, defaulting to 1000 [ 465.731106][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.754122][T13439] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 466.195893][T13464] tipc: Bearer : already 2 bearers with priority 10 [ 466.221112][T13464] tipc: Bearer : trying with adjusted priority [ 466.249089][T13464] tipc: Enabling of bearer rejected, failed to enable media [ 466.422518][T13472] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1830'. [ 466.761267][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.853077][T13480] gretap0: left allmulticast mode [ 466.858198][T13480] gretap0: left promiscuous mode [ 466.908906][T13480] bridge0: port 1(gretap0) entered disabled state [ 467.005200][T13480] erspan0: entered promiscuous mode [ 467.294323][T13480] 8021q: adding VLAN 0 to HW filter on device  [ 467.322803][T13480] batman_adv: batadv0: Interface activated: dummy0 [ 467.329425][T13480] batadv0: mtu less than device minimum [ 467.352957][T13480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.365026][T13480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.377117][T13480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.389150][T13480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.401250][T13480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.413318][T13480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.425296][T13480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.437384][T13480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.496428][T13480] batman_adv: batadv0: Interface deactivated: dummy0 [ 467.527729][T13480] batman_adv: batadv0: Removing interface: dummy0 [ 467.926417][T13484] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 468.989236][T13534] netlink: 'syz.2.1846': attribute type 11 has an invalid length. [ 469.021373][T13534] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1846'. [ 469.074648][T13534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1846'. [ 469.559827][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 470.619526][T13561] netlink: 'syz.0.1853': attribute type 1 has an invalid length. [ 470.818509][T13566] 8021q: adding VLAN 0 to HW filter on device bond6 [ 470.849010][T13566] bond0: (slave bond6): making interface the new active one [ 470.864088][T13566] bond0: (slave bond6): Enslaving as an active interface with an up link [ 470.876525][T13540] lo speed is unknown, defaulting to 1000 [ 470.966626][T13561] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 471.046688][T13570] wireguard0: entered promiscuous mode [ 471.052751][T13570] wireguard0: entered allmulticast mode [ 471.178369][T13584] netlink: 'syz.1.1859': attribute type 11 has an invalid length. [ 471.213667][T13584] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1859'. [ 471.910909][T13604] nftables ruleset with unbound chain [ 471.961191][ C1] net_ratelimit: 17 callbacks suppressed [ 471.961215][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 472.154410][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1867'. [ 472.390558][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1868'. [ 472.457860][T13618] sctp: [Deprecated]: syz.0.1868 (pid 13618) Use of int in max_burst socket option. [ 472.457860][T13618] Use struct sctp_assoc_value instead [ 472.814975][T13621] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 472.825261][T13618] IPVS: stopping backup sync thread 13621 ... [ 473.001245][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.891409][T13641] lo speed is unknown, defaulting to 1000 [ 474.041016][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 474.425888][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 474.551845][T13668] veth11: entered promiscuous mode [ 475.081163][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.096810][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1877'. [ 475.411439][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1886'. [ 475.459808][T13680] 8021q: adding VLAN 0 to HW filter on device bond9 [ 475.626010][T13693] 8021q: adding VLAN 0 to HW filter on device bond9 [ 475.635534][T13693] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 475.653183][T13693] bond9: (slave wireguard0): Error -95 calling set_mac_address [ 476.121019][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 476.435946][T13653] lo speed is unknown, defaulting to 1000 [ 476.453239][T13664] lo speed is unknown, defaulting to 1000 [ 476.481785][T13684] lo speed is unknown, defaulting to 1000 [ 477.171318][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 477.350524][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 477.548395][T13716] veth17: entered promiscuous mode [ 477.883217][T13724] bridge0: failed insert local address into bridge forwarding table [ 477.908104][T13724] bridge0: failed insert local address into bridge forwarding table [ 478.067437][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'. [ 478.201141][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 478.247994][T13738] rdma_rxe: rxe_newlink: failed to add lo [ 478.369056][T13744] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1904'. [ 478.596397][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 478.707484][T13755] veth7: entered promiscuous mode [ 478.838038][T13750] bond2: (slave ip6gretap1): Releasing backup interface [ 478.917881][T13750] bond6: (slave veth5): Releasing backup interface [ 478.965085][T13750] bond10: (slave veth7): Releasing backup interface [ 478.984719][T13750] veth9: left allmulticast mode [ 478.989905][T13750] veth9: left promiscuous mode [ 479.000747][T13750] bridge0: port 1(veth9) entered disabled state [ 479.014756][T13750] vlan1: left allmulticast mode [ 479.019849][T13750] bond0: left allmulticast mode [ 479.025947][T13750] vlan1: left promiscuous mode [ 479.033507][T13750] bridge0: port 2(vlan1) entered disabled state [ 479.241125][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 479.398533][T13783] netlink: 'syz.3.1913': attribute type 10 has an invalid length. [ 479.508455][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1915'. [ 479.648817][T13793] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1917'. [ 479.816145][T13796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1918'. [ 479.940392][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1918'. [ 480.026180][T13804] rdma_rxe: rxe_newlink: failed to add lo [ 480.281184][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.370892][T13813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1923'. [ 480.383493][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 480.460652][T13814] nbd: socks must be embedded in a SOCK_ITEM attr [ 480.685885][T13813] veth7: entered promiscuous mode [ 481.321197][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 482.142293][T13849] veth7: entered promiscuous mode [ 482.361304][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 482.717111][T13843] lo speed is unknown, defaulting to 1000 [ 482.754810][T13868] netlink: ct family unspecified [ 482.759936][T13868] openvswitch: netlink: Actions may not be safe on all matching packets [ 483.039619][T13873] __nla_validate_parse: 5 callbacks suppressed [ 483.039643][T13873] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1943'. [ 483.089841][T13875] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 483.407149][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 483.516677][T13890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1949'. [ 483.638119][T13892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1950'. [ 483.660435][T13890] veth17: entered promiscuous mode [ 483.958794][T13901] SET target dimension over the limit! [ 484.441242][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 484.565721][T13923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1962'. [ 484.654363][T13927] xt_hashlimit: size too large, truncated to 1048576 [ 485.144077][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 485.423935][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1971'. [ 485.481233][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 485.534780][T13957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1975'. [ 485.690822][T13962] syzkaller1: entered promiscuous mode [ 485.708488][T13962] syzkaller1: entered allmulticast mode [ 485.982969][T13970] xt_hashlimit: size too large, truncated to 1048576 [ 486.197227][T13978] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1984'. [ 486.382861][T13985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1987'. [ 486.521240][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 486.636773][T13997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1993'. [ 487.018962][T14017] xt_hashlimit: size too large, truncated to 1048576 [ 487.223545][T14026] netlink: ct family unspecified [ 487.251127][T14026] openvswitch: netlink: Actions may not be safe on all matching packets [ 487.364527][T14031] netlink: 'syz.2.2008': attribute type 3 has an invalid length. [ 487.571227][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 487.922197][T14059] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 488.611165][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 488.633150][T14078] xt_hashlimit: size too large, truncated to 1048576 [ 488.832725][T14088] __nla_validate_parse: 7 callbacks suppressed [ 488.832748][T14088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2027'. [ 488.915011][T14088] IPVS: Error connecting to the multicast addr [ 489.092107][T14095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2029'. [ 489.414534][T14059] lo speed is unknown, defaulting to 1000 [ 489.641166][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 489.817136][T14124] xt_hashlimit: size too large, truncated to 1048576 [ 489.929070][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2041'. [ 490.391213][T14067] lo speed is unknown, defaulting to 1000 [ 490.502208][T14143] pim6reg: entered allmulticast mode [ 490.653583][T14148] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 490.675726][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2053'. [ 490.685006][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.862610][T14159] xt_hashlimit: size too large, truncated to 1048576 [ 490.918349][T14161] tipc: Enabling of bearer rejected, already enabled [ 491.298485][T14170] netlink: ct family unspecified [ 491.321858][T14170] openvswitch: netlink: Actions may not be safe on all matching packets [ 491.344218][T14170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2059'. [ 491.681542][T14184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2066'. [ 491.721225][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.997014][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'. [ 492.160459][T14200] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2072'. [ 492.761144][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 492.985580][T14210] IPVS: length: 78 != 8 [ 493.127492][T14221] tipc: Enabling of bearer rejected, failed to enable media [ 493.801127][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 494.409119][T14248] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 494.516086][T14248] veth17: entered promiscuous mode [ 494.527351][T14248] bond12: (slave veth17): Enslaving as a backup interface with a down link [ 494.841206][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 495.202916][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2105'. [ 495.429831][T14291] netlink: 'syz.2.2109': attribute type 1 has an invalid length. [ 495.692700][T14295] veth15: entered promiscuous mode [ 495.743124][T14295] bond0: (slave veth15): Enslaving as a backup interface with a down link [ 495.881177][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 495.957204][T14310] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2114'. [ 496.073156][T14313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2115'. [ 496.533277][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'. [ 496.753468][T14338] IPVS: Error connecting to the multicast addr [ 496.921311][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 497.272515][T14356] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2134'. [ 497.667177][T14376] netlink: zone id is out of range [ 497.818577][T14386] pim6reg1: entered promiscuous mode [ 497.839901][T14386] pim6reg1: entered allmulticast mode [ 497.880837][T14390] netlink: 'syz.3.2147': attribute type 9 has an invalid length. [ 497.892824][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 497.961143][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 498.305446][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 498.746333][T14417] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 498.823790][T14417] veth11: entered promiscuous mode [ 498.844862][T14417] bond12: (slave veth11): Enslaving as a backup interface with a down link [ 498.926360][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 498.961235][T14423] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2159'. [ 498.970389][T14423] netlink: 460 bytes leftover after parsing attributes in process `syz.2.2159'. [ 499.001052][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 500.051005][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 500.359059][T14470] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 500.406279][T14472] __nla_validate_parse: 1 callbacks suppressed [ 500.406301][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2177'. [ 500.548757][T14477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2179'. [ 500.699289][T14485] netlink: ct family unspecified [ 500.706051][T14485] openvswitch: netlink: Actions may not be safe on all matching packets [ 500.729413][T14485] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2181'. [ 501.091083][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 501.099999][T14501] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2185'. [ 501.116651][T14498] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2185'. [ 501.774624][T14530] netlink: ct family unspecified [ 501.791720][T14530] openvswitch: netlink: Actions may not be safe on all matching packets [ 501.869274][T14530] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2194'. [ 502.131147][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 502.718634][T14517] lo speed is unknown, defaulting to 1000 [ 502.794082][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2202'. [ 503.171164][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 503.880515][T14564] lo speed is unknown, defaulting to 1000 [ 504.185591][T14595] sctp: [Deprecated]: syz.4.2211 (pid 14595) Use of int in max_burst socket option. [ 504.185591][T14595] Use struct sctp_assoc_value instead [ 504.210993][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 504.291118][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 504.300072][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 504.618531][T14600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2213'. [ 504.752754][T14580] lo speed is unknown, defaulting to 1000 [ 505.241131][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 505.892424][T14628] : renamed from bond0 [ 506.071808][T14633] __nla_validate_parse: 2 callbacks suppressed [ 506.071830][T14633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2225'. [ 506.110653][T14633] IPVS: Error connecting to the multicast addr [ 506.117554][T14635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2226'. [ 506.207736][T14635] IPVS: Error connecting to the multicast addr [ 506.257906][T14641] bridge_slave_0: default FDB implementation only supports local addresses [ 506.281000][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 506.282605][T14643] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2229'. [ 506.484596][T14652] syzkaller1: entered promiscuous mode [ 506.490186][T14652] syzkaller1: entered allmulticast mode [ 506.699964][T14664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2239'. [ 506.725782][T14664] IPVS: Error connecting to the multicast addr [ 506.962710][T14666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2241'. [ 506.981497][T14666] bridge: RTM_NEWNEIGH with unconfigured vlan 149 on bridge0 [ 507.202041][T14678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2245'. [ 507.220670][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2243'. [ 507.230445][T14681] netlink: 'syz.1.2244': attribute type 2 has an invalid length. [ 507.252303][T14681] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2244'. [ 507.320994][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 507.335274][T14678] IPVS: Error connecting to the multicast addr [ 507.504531][T14668] lo speed is unknown, defaulting to 1000 [ 507.657282][T14689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2248'. [ 507.714878][T14694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2250'. [ 507.744110][T14694] IPVS: Error connecting to the multicast addr [ 508.370996][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 509.002378][T14737] bridge0: failed insert local address into bridge forwarding table [ 509.017319][T14737] bridge0: failed insert local address into bridge forwarding table [ 509.401088][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 509.701552][T14761] syzkaller1: entered promiscuous mode [ 509.733764][T14761] syzkaller1: entered allmulticast mode [ 510.415205][T14756] lo speed is unknown, defaulting to 1000 [ 510.441165][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 511.009856][T14792] netlink: 'syz.0.2281': attribute type 10 has an invalid length. [ 511.148379][T14797] __nla_validate_parse: 4 callbacks suppressed [ 511.148398][T14797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2282'. [ 511.481104][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 512.531105][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 513.017550][T14832] lo speed is unknown, defaulting to 1000 [ 513.255892][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2305'. [ 513.571155][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 514.062173][T14897] netlink: ct family unspecified [ 514.084279][T14897] openvswitch: netlink: Actions may not be safe on all matching packets [ 514.136122][T14897] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2314'. [ 514.601185][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 515.086417][T14876] lo speed is unknown, defaulting to 1000 [ 515.388202][T14930] netlink: 'syz.0.2326': attribute type 4 has an invalid length. [ 515.589708][T14940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2323'. [ 515.651577][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 516.024013][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2333'. [ 516.691012][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 517.074683][T14944] lo speed is unknown, defaulting to 1000 [ 517.456579][T14969] syzkaller1: entered promiscuous mode [ 517.466991][T14969] syzkaller1: entered allmulticast mode [ 517.731039][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 518.182361][T14990] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2344'. [ 518.286680][T14992] sctp: [Deprecated]: syz.0.2345 (pid 14992) Use of int in max_burst socket option. [ 518.286680][T14992] Use struct sctp_assoc_value instead [ 518.334923][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'. [ 518.346736][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'. [ 518.495563][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'. [ 518.771032][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 519.422058][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2355'. [ 519.538766][T15035] syzkaller1: entered promiscuous mode [ 519.568263][T15035] syzkaller1: entered allmulticast mode [ 519.711173][T15037] sctp: [Deprecated]: syz.2.2358 (pid 15037) Use of int in max_burst socket option. [ 519.711173][T15037] Use struct sctp_assoc_value instead [ 519.801050][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 519.814689][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'. [ 519.831142][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'. [ 520.380807][T15012] lo speed is unknown, defaulting to 1000 [ 520.851106][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 520.937572][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'. [ 520.966425][T15064] xt_hashlimit: size too large, truncated to 1048576 [ 521.276171][T15014] lo speed is unknown, defaulting to 1000 [ 521.445253][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'. [ 521.886859][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 522.422022][T15080] lo speed is unknown, defaulting to 1000 [ 522.921264][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 523.144978][T15122] sctp: [Deprecated]: syz.4.2387 (pid 15122) Use of int in max_burst socket option. [ 523.144978][T15122] Use struct sctp_assoc_value instead [ 523.279940][T15124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2387'. [ 523.289087][T15124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2387'. [ 523.311889][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2387'. [ 523.320827][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2387'. [ 523.797637][T15131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2390'. [ 523.971348][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 524.220483][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2393'. [ 525.001223][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 525.337953][T15168] xt_hashlimit: size too large, truncated to 1048576 [ 525.624941][T15179] sctp: [Deprecated]: syz.2.2403 (pid 15179) Use of int in max_burst socket option. [ 525.624941][T15179] Use struct sctp_assoc_value instead [ 525.676571][T15179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2403'. [ 525.699780][T15179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2403'. [ 525.730600][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 525.751590][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 525.948489][T15191] syzkaller1: entered promiscuous mode [ 525.962474][T15191] syzkaller1: entered allmulticast mode [ 526.041412][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 526.149179][T15199] netlink: 'syz.1.2410': attribute type 2 has an invalid length. [ 526.349280][T15208] netlink: 'syz.4.2413': attribute type 29 has an invalid length. [ 526.372466][T15208] netlink: 'syz.4.2413': attribute type 29 has an invalid length. [ 526.525335][T15217] sctp: [Deprecated]: syz.0.2417 (pid 15217) Use of int in max_burst socket option. [ 526.525335][T15217] Use struct sctp_assoc_value instead [ 526.899443][T15235] netlink: 'syz.0.2423': attribute type 1 has an invalid length. [ 526.930165][T15236] netlink: 'syz.3.2422': attribute type 7 has an invalid length. [ 526.980877][T15236] netlink: 'syz.3.2422': attribute type 8 has an invalid length. [ 527.016466][T15235] veth17: entered promiscuous mode [ 527.031355][T15235] bond7: (slave veth17): Enslaving as a backup interface with a down link [ 527.081150][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 527.109391][T15242] netlink: ct family unspecified [ 527.114714][T15242] openvswitch: netlink: Actions may not be safe on all matching packets [ 527.907830][T15269] pim6reg1: entered promiscuous mode [ 527.914130][T15269] pim6reg1: entered allmulticast mode [ 528.054447][T15278] netlink: ct family unspecified [ 528.064003][T15278] openvswitch: netlink: Actions may not be safe on all matching packets [ 528.131213][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 528.586456][T15298] __nla_validate_parse: 14 callbacks suppressed [ 528.586481][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2444'. [ 528.791314][T15304] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2447'. [ 528.853508][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2447'. [ 528.865760][T15304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2447'. [ 528.875182][T15285] lo speed is unknown, defaulting to 1000 [ 529.030866][T15311] sctp: [Deprecated]: syz.4.2450 (pid 15311) Use of int in max_burst socket option. [ 529.030866][T15311] Use struct sctp_assoc_value instead [ 529.161246][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'. [ 529.171011][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 529.207606][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'. [ 529.254122][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'. [ 529.268802][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'. [ 529.334139][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 530.047728][T15331] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 530.201107][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 530.448047][T15344] syzkaller1: entered promiscuous mode [ 530.456442][T15344] syzkaller1: entered allmulticast mode [ 530.634049][T15354] netlink: 'syz.2.2465': attribute type 1 has an invalid length. [ 530.659562][T15354] netlink: 'syz.2.2465': attribute type 2 has an invalid length. [ 530.687967][T15354] netlink: 'syz.2.2465': attribute type 4 has an invalid length. [ 530.708273][T15354] netlink: 'syz.2.2465': attribute type 1 has an invalid length. [ 530.738718][T15354] netlink: 129988 bytes leftover after parsing attributes in process `syz.2.2465'. [ 531.241295][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 532.220293][T15410] validate_nla: 3 callbacks suppressed [ 532.220318][T15410] netlink: 'syz.1.2483': attribute type 1 has an invalid length. [ 532.243402][T15409] IPVS: Error connecting to the multicast addr [ 532.281136][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 532.512173][T15410] veth19: entered promiscuous mode [ 532.544149][T15410] bond13: (slave veth19): Enslaving as a backup interface with a down link [ 532.874182][T15436] dvmrp8: entered allmulticast mode [ 532.896614][T15436] pimreg: left allmulticast mode [ 532.914915][T15436] dvmrp8: left allmulticast mode [ 533.190060][T15445] syzkaller1: entered promiscuous mode [ 533.207351][T15445] syzkaller1: entered allmulticast mode [ 533.321001][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 533.525698][T15458] netlink: 'syz.2.2498': attribute type 1 has an invalid length. [ 533.617531][T15458] veth17: entered promiscuous mode [ 533.627537][T15458] bond7: (slave veth17): Enslaving as a backup interface with a down link [ 534.275964][T15487] __nla_validate_parse: 5 callbacks suppressed [ 534.275985][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 534.371120][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 534.774491][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2513'. [ 535.119687][T15512] unknown channel width for channel at 909000KHz? [ 535.196784][T15514] vlan2: entered promiscuous mode [ 535.238760][T15514] hsr0: entered promiscuous mode [ 535.401253][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 536.441177][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 537.000666][T15540] lo speed is unknown, defaulting to 1000 [ 537.481126][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 538.092094][T15580] lo speed is unknown, defaulting to 1000 [ 538.520983][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 538.655080][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'. [ 539.237950][T15630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2546'. [ 539.561114][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 540.050667][T15621] lo speed is unknown, defaulting to 1000 [ 540.600984][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 540.812710][T15656] syzkaller0: Caught tx_queue_len zero misconfig [ 540.944286][T15658] dccp_invalid_packet: P.type (SYNCACK) not Data || [Data]Ack, while P.X == 0 [ 541.346987][T15672] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2560'. [ 541.578847][T15685] netlink: 'syz.0.2563': attribute type 1 has an invalid length. [ 541.640995][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 541.651604][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'. [ 541.949974][T15693] veth19: entered promiscuous mode [ 541.974924][T15693] bond8: (slave veth19): Enslaving as a backup interface with a down link [ 542.166631][T15677] lo speed is unknown, defaulting to 1000 [ 542.197991][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2568'. [ 542.452532][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 542.691098][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 543.368995][T15745] netlink: 'syz.2.2580': attribute type 1 has an invalid length. [ 543.402020][T15727] lo speed is unknown, defaulting to 1000 [ 543.670385][T15750] veth19: entered promiscuous mode [ 543.686961][T15750] bond8: (slave veth19): Enslaving as a backup interface with a down link [ 543.720999][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 543.837290][T15754] xt_hashlimit: size too large, truncated to 1048576 [ 544.771041][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 545.707998][T15762] lo speed is unknown, defaulting to 1000 [ 545.800990][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 546.084310][T15767] lo speed is unknown, defaulting to 1000 [ 546.590976][T15805] lo speed is unknown, defaulting to 1000 [ 546.841110][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 547.013041][T15812] lo speed is unknown, defaulting to 1000 [ 547.880980][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 547.996598][T15841] netlink: 'syz.1.2604': attribute type 29 has an invalid length. [ 548.221905][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2605'. [ 548.413560][T15854] pim6reg1: entered promiscuous mode [ 548.419224][T15854] pim6reg1: entered allmulticast mode [ 548.524745][T15862] netlink: 'syz.1.2611': attribute type 1 has an invalid length. [ 548.618819][T15868] netlink: 'syz.1.2611': attribute type 1 has an invalid length. [ 548.920980][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 548.928929][T15860] lo speed is unknown, defaulting to 1000 [ 549.961130][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 550.186596][T15884] lo speed is unknown, defaulting to 1000 [ 550.947266][T15922] pim6reg1: entered promiscuous mode [ 550.964082][T15922] pim6reg1: entered allmulticast mode [ 551.001934][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 551.437550][T15938] netlink: 'syz.2.2629': attribute type 1 has an invalid length. [ 551.455610][T15938] netlink: 'syz.2.2629': attribute type 2 has an invalid length. [ 551.464272][T15938] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.2629'. [ 551.496382][T15938] bridge0: port 1(vlan1) entered blocking state [ 551.504638][T15938] bridge0: port 1(vlan1) entered disabled state [ 551.517950][T15938] vlan1: entered allmulticast mode [ 551.525127][T15938] bond0: entered allmulticast mode [ 551.530455][T15938] veth15: entered allmulticast mode [ 551.548197][T15938] vlan1: entered promiscuous mode [ 551.561166][T15938] bond0: entered promiscuous mode [ 552.040975][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 552.542293][T15983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'. [ 553.081224][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 553.492430][T15967] lo speed is unknown, defaulting to 1000 [ 553.600833][T16008] netlink: 'syz.4.2651': attribute type 1 has an invalid length. [ 553.684348][T16012] netlink: zone id is out of range [ 553.689641][T16012] netlink: zone id is out of range [ 553.697689][T16011] veth13: entered promiscuous mode [ 553.719807][T16012] netlink: zone id is out of range [ 553.743252][T16012] netlink: zone id is out of range [ 553.750361][T16012] netlink: zone id is out of range [ 553.757481][T16012] netlink: zone id is out of range [ 553.837397][T16019] TCP: TCP_TX_DELAY enabled [ 553.908673][T16021] xt_bpf: check failed: parse error [ 554.083075][T16023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2657'. [ 554.893511][T16054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2665'. [ 555.161102][ C1] net_ratelimit: 388 callbacks suppressed [ 555.161128][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 555.249241][T16067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2668'. [ 556.200982][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 556.559694][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2675'. [ 556.670543][T16085] lo speed is unknown, defaulting to 1000 [ 557.241116][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 557.255265][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2679'. [ 557.266526][T16116] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2679'. [ 557.316620][T16110] gtp0: entered promiscuous mode [ 557.707627][T16101] lo speed is unknown, defaulting to 1000 [ 558.291087][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 558.428426][T16123] lo speed is unknown, defaulting to 1000 [ 558.515832][T16137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2686'. [ 558.669915][T16135] syzkaller1: entered promiscuous mode [ 558.678284][T16135] syzkaller1: entered allmulticast mode [ 559.321090][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 560.361081][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 560.511249][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2702'. [ 560.549598][T16191] IPVS: Error connecting to the multicast addr [ 560.698472][T16161] lo speed is unknown, defaulting to 1000 [ 560.794030][T16199] bridge0: failed insert local address into bridge forwarding table [ 560.835897][T16199] bridge0: failed insert local address into bridge forwarding table [ 561.401278][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 561.683741][T16170] lo speed is unknown, defaulting to 1000 [ 562.441214][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 562.532579][T16225] sctp: [Deprecated]: syz.0.2709 (pid 16225) Use of int in max_burst socket option. [ 562.532579][T16225] Use struct sctp_assoc_value instead [ 562.646481][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2709'. [ 562.664311][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2709'. [ 562.674568][T16228] netlink: ct family unspecified [ 562.679581][T16228] openvswitch: netlink: Actions may not be safe on all matching packets [ 562.707409][T16228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2710'. [ 563.145882][T16240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2714'. [ 563.196088][T16240] IPVS: Error connecting to the multicast addr [ 563.256796][T16244] bridge0: failed insert local address into bridge forwarding table [ 563.291734][T16244] bridge0: failed insert local address into bridge forwarding table [ 563.432464][T16254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2719'. [ 563.480971][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 563.818642][T16266] sctp: [Deprecated]: syz.4.2721 (pid 16266) Use of int in max_burst socket option. [ 563.818642][T16266] Use struct sctp_assoc_value instead [ 563.905323][T16246] lo speed is unknown, defaulting to 1000 [ 564.138219][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2721'. [ 564.172360][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2721'. [ 564.521065][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 565.561105][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 565.639373][T16277] lo speed is unknown, defaulting to 1000 [ 566.474508][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2736'. [ 566.530351][T16322] sctp: [Deprecated]: syz.0.2737 (pid 16322) Use of int in max_burst socket option. [ 566.530351][T16322] Use struct sctp_assoc_value instead [ 566.567865][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'. [ 566.581095][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'. [ 566.601084][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 566.770840][T16331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.807808][T16331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.875809][ T6951] lo speed is unknown, defaulting to 1000 [ 566.888370][T16337] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2741'. [ 566.897660][ T6951] syz2: Port: 1 Link ACTIVE [ 567.641024][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 567.905386][T16361] netlink: 'syz.1.2748': attribute type 1 has an invalid length. [ 567.968526][T16364] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2748'. [ 568.056091][T16361] veth21: entered promiscuous mode [ 568.067208][T16361] bond15: (slave veth21): Enslaving as a backup interface with a down link [ 568.079252][T16368] sctp: [Deprecated]: syz.4.2750 (pid 16368) Use of int in max_burst socket option. [ 568.079252][T16368] Use struct sctp_assoc_value instead [ 568.171213][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 568.180149][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 568.530056][T16370] lo speed is unknown, defaulting to 1000 [ 568.680960][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 568.699804][T16387] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2754'. [ 568.798688][T16389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'. [ 569.545981][T16411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2763'. [ 569.730979][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 569.936289][T16427] sctp: [Deprecated]: syz.3.2767 (pid 16427) Use of int in max_burst socket option. [ 569.936289][T16427] Use struct sctp_assoc_value instead [ 570.263486][T16437] netlink: 'syz.2.2770': attribute type 1 has an invalid length. [ 570.702442][T16447] xt_hashlimit: size too large, truncated to 1048576 [ 570.725391][T16443] veth21: entered promiscuous mode [ 570.754718][T16443] bond9: (slave veth21): Enslaving as a backup interface with a down link [ 570.771933][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 570.901267][T16422] lo speed is unknown, defaulting to 1000 [ 571.801044][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 571.809333][T16454] lo speed is unknown, defaulting to 1000 [ 571.876525][T16476] sctp: [Deprecated]: syz.0.2779 (pid 16476) Use of int in max_burst socket option. [ 571.876525][T16476] Use struct sctp_assoc_value instead [ 571.960760][T16476] __nla_validate_parse: 5 callbacks suppressed [ 571.960781][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2779'. [ 571.979361][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2779'. [ 572.089442][T16480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2780'. [ 572.345193][T16486] netlink: 'syz.4.2783': attribute type 1 has an invalid length. [ 572.433511][T16490] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2783'. [ 572.581854][T16491] syz_tun: entered promiscuous mode [ 572.599138][T16491] syz_tun: left promiscuous mode [ 572.684406][T16492] veth13: entered promiscuous mode [ 572.697862][T16492] bond13: (slave veth13): Enslaving as a backup interface with a down link [ 572.763795][T16502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2788'. [ 572.841073][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 572.925752][T16511] sctp: [Deprecated]: syz.0.2791 (pid 16511) Use of int in max_burst socket option. [ 572.925752][T16511] Use struct sctp_assoc_value instead [ 572.992662][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 573.016164][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 573.363760][T16525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2795'. [ 573.756013][T16533] netlink: ct family unspecified [ 573.761099][T16533] openvswitch: netlink: Actions may not be safe on all matching packets [ 573.879262][T16534] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2797'. [ 573.888682][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 573.987346][T16537] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 574.035061][T16537] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2799'. [ 574.114106][T16537] veth15: entered promiscuous mode [ 574.138219][T16537] bond14: (slave veth15): Enslaving as a backup interface with a down link [ 574.423513][T16551] sctp: [Deprecated]: syz.4.2804 (pid 16551) Use of int in max_burst socket option. [ 574.423513][T16551] Use struct sctp_assoc_value instead [ 574.930998][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 575.423216][T16571] netlink: 'syz.2.2807': attribute type 1 has an invalid length. [ 575.441322][T16571] netlink: 'syz.2.2807': attribute type 2 has an invalid length. [ 575.804543][T16564] lo speed is unknown, defaulting to 1000 [ 575.961074][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 576.145595][T16585] netlink: ct family unspecified [ 576.157475][T16585] openvswitch: netlink: Actions may not be safe on all matching packets [ 576.572477][T16592] netlink: 'syz.0.2814': attribute type 1 has an invalid length. [ 576.818263][T16592] veth21: entered promiscuous mode [ 576.827900][T16592] bond9: (slave veth21): Enslaving as a backup interface with a down link [ 577.001117][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 577.202805][T16612] netlink: 'syz.2.2820': attribute type 1 has an invalid length. [ 577.271845][T16612] 8021q: adding VLAN 0 to HW filter on device bond10 [ 577.430249][T16614] bond10: (slave veth25): Enslaving as an active interface with a down link [ 577.439874][T16577] lo speed is unknown, defaulting to 1000 [ 577.465075][T16612] bond10: (slave dummy0): making interface the new active one [ 577.553466][T16612] dummy0: entered promiscuous mode [ 577.559143][T16612] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 577.609689][T16590] lo speed is unknown, defaulting to 1000 [ 577.785720][T16616] netlink: 'syz.2.2821': attribute type 1 has an invalid length. [ 577.793897][T16616] netlink: 'syz.2.2821': attribute type 2 has an invalid length. [ 577.801905][T16616] __nla_validate_parse: 8 callbacks suppressed [ 577.801919][T16616] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.2821'. [ 578.041101][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 578.571178][T16633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2826'. [ 578.722903][T16638] netlink: 'syz.2.2828': attribute type 1 has an invalid length. [ 578.812452][T16638] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2828'. [ 578.961942][T16638] veth27: entered promiscuous mode [ 578.991744][T16638] bond11: (slave veth27): Enslaving as a backup interface with a down link [ 579.038619][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2830'. [ 579.081275][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 579.290750][T16653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.292998][T16652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2831'. [ 579.341481][T16656] xt_hashlimit: size too large, truncated to 1048576 [ 579.932320][T16666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2835'. [ 580.121016][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 580.280507][T16678] netlink: 'syz.1.2841': attribute type 1 has an invalid length. [ 580.357248][T16685] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2841'. [ 581.170993][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 581.774564][T16680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2838'. [ 581.784543][T16678] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 581.785191][T16679] syzkaller1: entered promiscuous mode [ 581.811730][T16679] syzkaller1: entered allmulticast mode [ 581.905160][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2843'. [ 581.926275][T16686] veth23: entered promiscuous mode [ 581.991531][T16697] xt_hashlimit: size too large, truncated to 1048576 [ 582.200960][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 582.265547][T16704] netlink: ct family unspecified [ 582.289713][T16704] openvswitch: netlink: Actions may not be safe on all matching packets [ 582.333086][T16704] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2845'. [ 583.079927][T16733] netem: incorrect gi model size [ 583.094408][T16733] netem: change failed [ 583.212975][T16739] sctp: [Deprecated]: syz.1.2859 (pid 16739) Use of int in max_burst socket option. [ 583.212975][T16739] Use struct sctp_assoc_value instead [ 583.235135][T16739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.246319][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 583.308872][T16742] __nla_validate_parse: 2 callbacks suppressed [ 583.308897][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'. [ 583.311800][T16743] netlink: ct family unspecified [ 583.332105][T16743] openvswitch: netlink: Actions may not be safe on all matching packets [ 583.347121][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'. [ 583.356749][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'. [ 583.441935][T16749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2861'. [ 584.018043][T16772] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2870'. [ 584.281421][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 584.817728][T16800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2878'. [ 584.900627][T16805] sctp: [Deprecated]: syz.3.2882 (pid 16805) Use of int in max_burst socket option. [ 584.900627][T16805] Use struct sctp_assoc_value instead [ 584.933363][T16806] netlink: ct family unspecified [ 584.942618][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2882'. [ 584.953892][T16806] openvswitch: netlink: Actions may not be safe on all matching packets [ 584.963579][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2882'. [ 585.049395][T16806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2881'. [ 585.062659][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2882'. [ 585.565702][T16824] xt_hashlimit: size too large, truncated to 1048576 [ 586.361188][ C1] net_ratelimit: 1 callbacks suppressed [ 586.361208][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 586.450473][T16859] sctp: [Deprecated]: syz.0.2894 (pid 16859) Use of int in max_burst socket option. [ 586.450473][T16859] Use struct sctp_assoc_value instead [ 586.970571][T16873] netlink: 'syz.1.2900': attribute type 7 has an invalid length. [ 587.411069][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 588.445175][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 588.862780][ T36] dummy0: left promiscuous mode [ 588.881526][T16904] sctp: [Deprecated]: syz.0.2906 (pid 16904) Use of int in max_burst socket option. [ 588.881526][T16904] Use struct sctp_assoc_value instead [ 588.914591][T16907] __nla_validate_parse: 6 callbacks suppressed [ 588.914613][T16907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2907'. [ 589.007358][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'. [ 589.035614][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'. [ 589.053108][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'. [ 589.173986][T16918] tipc: Enabled bearer , priority 0 [ 589.287336][T16918] syzkaller0: entered promiscuous mode [ 589.293078][T16918] syzkaller0: entered allmulticast mode [ 589.299320][T16918] tipc: Resetting bearer [ 589.382594][T16917] tipc: Resetting bearer [ 589.491103][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 590.530966][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 591.570965][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 591.796870][T16917] tipc: Disabling bearer [ 591.952871][T16923] ------------[ cut here ]------------ [ 591.958877][T16923] WARNING: CPU: 1 PID: 16923 at net/ipv4/udp_offload.c:123 udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 591.970698][T16923] Modules linked in: [ 591.974944][T16923] CPU: 1 UID: 0 PID: 16923 Comm: syz.0.2912 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 591.986912][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 591.997079][T16923] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 592.003609][T16923] Code: 00 00 e8 c6 5a 2f f7 48 c1 e5 04 48 8d b5 20 53 c7 9a ba 10 00 00 00 4c 89 ff e8 ce 87 99 f7 e9 ce 00 00 00 e8 a4 5a 2f f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 cf 5e 2f f7 85 ed [ 592.023328][T16923] RSP: 0018:ffffc9000b5c7c48 EFLAGS: 00010293 [ 592.029433][T16923] RAX: ffffffff8a93fc9c RBX: 0000000000000000 RCX: ffff88802c761e00 [ 592.038008][T16923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.046415][T16923] RBP: 0000000000000000 R08: ffffffff8a93fabe R09: 1ffffffff20bfb2e [ 592.054866][T16923] R10: dffffc0000000000 R11: fffffbfff20bfb2f R12: ffff8880246c1fb8 [ 592.063278][T16923] R13: dffffc0000000000 R14: ffff8880246c1ff8 R15: 1ffff110048d83ff [ 592.071677][T16923] FS: 0000555594b75500(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 592.081054][T16923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.088088][T16923] CR2: 00007faeed2188e5 CR3: 000000005aa9a000 CR4: 00000000003526f0 [ 592.096172][T16923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 592.104202][T16923] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 592.112288][T16923] Call Trace: [ 592.115598][T16923] [ 592.118562][T16923] udpv6_destroy_sock+0x212/0x270 [ 592.123805][T16923] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 592.129383][T16923] sk_common_release+0x71/0x2e0 [ 592.134324][T16923] inet_release+0x17d/0x200 [ 592.138857][T16923] sock_close+0xbc/0x240 [ 592.143168][T16923] ? __pfx_sock_close+0x10/0x10 [ 592.148061][T16923] __fput+0x3e9/0x9f0 [ 592.152136][T16923] task_work_run+0x251/0x310 [ 592.156789][T16923] ? _raw_spin_unlock+0x28/0x50 [ 592.161949][T16923] ? __pfx_task_work_run+0x10/0x10 [ 592.167121][T16923] ? syscall_exit_to_user_mode+0xa3/0x340 [ 592.172952][T16923] syscall_exit_to_user_mode+0x13f/0x340 [ 592.178631][T16923] do_syscall_64+0x100/0x230 [ 592.183326][T16923] ? clear_bhb_loop+0x45/0xa0 [ 592.188044][T16923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.194057][T16923] RIP: 0033:0x7f6c88b8d169 [ 592.198506][T16923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.218285][T16923] RSP: 002b:00007ffc6dfcbe68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 592.226778][T16923] RAX: 0000000000000000 RBX: 00007f6c88da7ba0 RCX: 00007f6c88b8d169 [ 592.234837][T16923] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 592.242917][T16923] RBP: 00007f6c88da7ba0 R08: 00000000000000b4 R09: 000000096dfcc15f [ 592.251018][T16923] R10: 00007f6c88da7ac0 R11: 0000000000000246 R12: 00000000000900c5 [ 592.259033][T16923] R13: 00007f6c88da6160 R14: ffffffffffffffff R15: 00007ffc6dfcbf80 [ 592.267113][T16923] [ 592.270192][T16923] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 592.277492][T16923] CPU: 1 UID: 0 PID: 16923 Comm: syz.0.2912 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 592.289215][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 592.299276][T16923] Call Trace: [ 592.302557][T16923] [ 592.305492][T16923] dump_stack_lvl+0x241/0x360 [ 592.310213][T16923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.315420][T16923] ? __pfx__printk+0x10/0x10 [ 592.320021][T16923] ? vscnprintf+0x5d/0x90 [ 592.324351][T16923] panic+0x349/0x880 [ 592.328252][T16923] ? __warn+0x174/0x4d0 [ 592.332414][T16923] ? __pfx_panic+0x10/0x10 [ 592.336847][T16923] __warn+0x344/0x4d0 [ 592.340835][T16923] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 592.346648][T16923] report_bug+0x2b3/0x500 [ 592.350980][T16923] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 592.356793][T16923] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 592.362599][T16923] ? udp_tunnel_update_gro_rcv+0x28f/0x4c0 [ 592.368403][T16923] handle_bug+0x89/0x170 [ 592.372747][T16923] exc_invalid_op+0x1a/0x50 [ 592.377259][T16923] asm_exc_invalid_op+0x1a/0x20 [ 592.382109][T16923] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 592.388522][T16923] Code: 00 00 e8 c6 5a 2f f7 48 c1 e5 04 48 8d b5 20 53 c7 9a ba 10 00 00 00 4c 89 ff e8 ce 87 99 f7 e9 ce 00 00 00 e8 a4 5a 2f f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 cf 5e 2f f7 85 ed [ 592.408128][T16923] RSP: 0018:ffffc9000b5c7c48 EFLAGS: 00010293 [ 592.414203][T16923] RAX: ffffffff8a93fc9c RBX: 0000000000000000 RCX: ffff88802c761e00 [ 592.422169][T16923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.430134][T16923] RBP: 0000000000000000 R08: ffffffff8a93fabe R09: 1ffffffff20bfb2e [ 592.438121][T16923] R10: dffffc0000000000 R11: fffffbfff20bfb2f R12: ffff8880246c1fb8 [ 592.446091][T16923] R13: dffffc0000000000 R14: ffff8880246c1ff8 R15: 1ffff110048d83ff [ 592.454072][T16923] ? udp_tunnel_update_gro_rcv+0xae/0x4c0 [ 592.459796][T16923] ? udp_tunnel_update_gro_rcv+0x28c/0x4c0 [ 592.465604][T16923] ? udp_tunnel_update_gro_rcv+0x28c/0x4c0 [ 592.471409][T16923] udpv6_destroy_sock+0x212/0x270 [ 592.476440][T16923] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 592.481998][T16923] sk_common_release+0x71/0x2e0 [ 592.486863][T16923] inet_release+0x17d/0x200 [ 592.491373][T16923] sock_close+0xbc/0x240 [ 592.495629][T16923] ? __pfx_sock_close+0x10/0x10 [ 592.500491][T16923] __fput+0x3e9/0x9f0 [ 592.504487][T16923] task_work_run+0x251/0x310 [ 592.509085][T16923] ? _raw_spin_unlock+0x28/0x50 [ 592.513940][T16923] ? __pfx_task_work_run+0x10/0x10 [ 592.519074][T16923] ? syscall_exit_to_user_mode+0xa3/0x340 [ 592.524801][T16923] syscall_exit_to_user_mode+0x13f/0x340 [ 592.530438][T16923] do_syscall_64+0x100/0x230 [ 592.535035][T16923] ? clear_bhb_loop+0x45/0xa0 [ 592.539712][T16923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.545600][T16923] RIP: 0033:0x7f6c88b8d169 [ 592.550013][T16923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.569618][T16923] RSP: 002b:00007ffc6dfcbe68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 592.578036][T16923] RAX: 0000000000000000 RBX: 00007f6c88da7ba0 RCX: 00007f6c88b8d169 [ 592.586009][T16923] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 592.593980][T16923] RBP: 00007f6c88da7ba0 R08: 00000000000000b4 R09: 000000096dfcc15f [ 592.601976][T16923] R10: 00007f6c88da7ac0 R11: 0000000000000246 R12: 00000000000900c5 [ 592.609945][T16923] R13: 00007f6c88da6160 R14: ffffffffffffffff R15: 00007ffc6dfcbf80 [ 592.617934][T16923] [ 592.621214][T16923] Kernel Offset: disabled [ 592.625538][T16923] Rebooting in 86400 seconds..