last executing test programs: 6.453523894s ago: executing program 1 (id=10452): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r5, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 6.269844286s ago: executing program 1 (id=10453): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0xffffff88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x6912223a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239fd7, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0xffdb, &(0x7f00000004c0)='\x00'/14, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 6.057999032s ago: executing program 1 (id=10456): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x34}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.486659223s ago: executing program 1 (id=10459): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) 5.390077303s ago: executing program 0 (id=10461): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 5.170454204s ago: executing program 0 (id=10463): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, 0x0, 0x0, 0x28044854}], 0x1, 0x40800) 4.674805498s ago: executing program 1 (id=10465): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 4.507175987s ago: executing program 2 (id=10466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 4.445499684s ago: executing program 0 (id=10468): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c) 4.350066303s ago: executing program 4 (id=10469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x9, 0xd32, 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8840) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x200c4004, &(0x7f00000001c0)={0x11, 0xe1, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4.255923962s ago: executing program 1 (id=10470): r0 = socket(0x10, 0x803, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0103"], 0x3c}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x33071, 0xffffffffffffffff, 0x0) write$nci(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7105091002"], 0x3f) 4.207772462s ago: executing program 4 (id=10471): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.144018229s ago: executing program 4 (id=10473): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x10, 0x453, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x800) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @bcast, @bpq0, 0x21, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xff, @null, @bpq0, 0x3, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 3.612185473s ago: executing program 2 (id=10475): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000010c0)="2ae2", 0x2}], 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) splice(r0, 0x0, r4, 0x0, 0x10000000000066, 0xa) 3.56027652s ago: executing program 0 (id=10476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) close(0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x2, 0x8, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x203}, {0xff, 0x7, 0x101, 0x8, 0x400810, 0xffffffff}, {0x9, 0x8, 0xfff, 0x2, 0xffffffff, 0x40000b93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x1, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xc58, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0x6, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x2, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x9, 0x9, 0x4, 0x3, 0x10000001}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0x8}, {0x1, 0x71, 0x1, 0xcf55, 0x6, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x5, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x4, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x8, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x7, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0xfff, 0x811, 0x9, 0x5, 0x4}, {0x1, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae78a, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x5}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x4, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x200, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x100, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x20000000, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x82, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x2, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x4, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x887b}, {0x6, 0x7, 0x2, 0x9, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x20000, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffdfc}, {0x7, 0x6, 0x3906, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4004, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xf, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x40, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf620, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x6, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x6, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xe, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0x7fffffff, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x20000004}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x9, 0x0, 0x7a, 0x5, 0x4, 0x7}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0x1000f, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x400008, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7d, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x5d7c}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x9, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.470351895s ago: executing program 2 (id=10477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000f5", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf250a00000008003a000e00000005002d000100000005002f0001"], 0x2c}, 0x1, 0x0, 0x0, 0x44851}, 0x4c01c) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="f7ad94a38fff48f3be52163448412ba8b0a3c27a7b0800000000000000506d0f1530fa2304649c13b1423affec1af5d0aedc1633aef8835ad2c153e660cb6f9e8c0bedbf3a343aad1f2fa32dc49953ef33789df6fe80a8a4e196f5b6933e0bc96ed427586b4ac8a8eed7867d431f7a09275e75d68e42ce64a57a78b06ca608b4baeb060db1c6d810eb2be5af9c6d8874793911b1e755fe776d97678699389be10b909a4211ee9ef3c49354f52178b07f7b9242574a807d2fc241bc5d86ebfcfc2e0361c8889aa8383c201e376fe886f87e", 0xd1}, {&(0x7f0000000800)="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", 0x113}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x40840) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x3afd}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 2.372824166s ago: executing program 2 (id=10479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c0002800500010005"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 2.371948874s ago: executing program 0 (id=10480): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 2.262924099s ago: executing program 0 (id=10481): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.261771237s ago: executing program 3 (id=10482): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0xe25) 2.210202277s ago: executing program 2 (id=10483): r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x40) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) pread64(r3, &(0x7f0000001840)=""/4096, 0x1003, 0x1) 2.020622435s ago: executing program 3 (id=10484): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) 1.942091502s ago: executing program 3 (id=10485): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x20088845) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r1], 0xa4}, 0x1, 0x0, 0x0, 0x48045}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.707384713s ago: executing program 3 (id=10486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 1.599363394s ago: executing program 3 (id=10487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) close(r2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 1.355831374s ago: executing program 2 (id=10488): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.169522366s ago: executing program 4 (id=10489): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x86c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 997.944404ms ago: executing program 4 (id=10490): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) r3 = socket(0x10, 0x803, 0xf) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="ba0455111f1b8072fd972350948b", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 86.756499ms ago: executing program 4 (id=10491): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x80000002) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = getpid() write$cgroup_pid(r4, &(0x7f0000000880)=r5, 0x12) 0s ago: executing program 3 (id=10492): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r3, 0x0, r1}, 0x10) kernel console output (not intermixed with test programs): s `syz.1.6173'. [ 282.222141][T18753] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6179'. [ 282.245998][T18753] netlink: 'syz.1.6179': attribute type 2 has an invalid length. [ 282.462107][T18765] : entered promiscuous mode [ 282.659686][T18780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6195'. [ 282.712124][T18785] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 283.168528][T18821] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6212'. [ 283.188609][T18821] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6212'. [ 283.397662][T18837] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6220'. [ 283.518225][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 283.896433][T18872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6237'. [ 283.971675][ T29] audit: type=1800 audit(1776213232.495:2): pid=18874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6239" name="memory.events" dev="tmpfs" ino=6166 res=0 errno=0 [ 284.018837][ T29] audit: type=1804 audit(1776213232.535:3): pid=18874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6239" name="/newroot/1228/memory.events" dev="tmpfs" ino=6166 res=1 errno=0 [ 284.573432][T18916] xt_l2tp: wrong L2TP version: 0 [ 284.871925][T18938] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 285.037778][ C1] net_ratelimit: 3 callbacks suppressed [ 285.037796][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 285.348502][T18976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.410750][T18982] netlink: 'syz.0.6292': attribute type 8 has an invalid length. [ 285.438075][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6292'. [ 285.447352][T18982] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.456214][T18982] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.077853][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.117781][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.166716][T19105] __nla_validate_parse: 1 callbacks suppressed [ 287.166734][T19105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6350'. [ 287.175379][T19108] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6352'. [ 287.193446][T19108] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6352'. [ 287.222154][T19108] netlink: 'syz.2.6352': attribute type 6 has an invalid length. [ 287.231684][T19108] netlink: 'syz.2.6352': attribute type 5 has an invalid length. [ 287.242186][T19108] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6352'. [ 287.288535][T19113] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6354'. [ 287.315666][T19113] vlan2: entered allmulticast mode [ 287.327992][T19113] gretap0: entered allmulticast mode [ 287.863673][T19153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6374'. [ 287.889611][T19153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6374'. [ 288.157877][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 288.371712][T19189] netlink: 'syz.3.6391': attribute type 1 has an invalid length. [ 288.412019][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6391'. [ 288.464637][T19189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6391'. [ 288.489641][T19189] netlink: 'syz.3.6391': attribute type 2 has an invalid length. [ 288.504627][T19189] netlink: 'syz.3.6391': attribute type 2 has an invalid length. [ 288.516485][T19189] netlink: 'syz.3.6391': attribute type 2 has an invalid length. [ 288.572492][T19201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6398'. [ 289.155390][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 289.185347][T19246] openvswitch: netlink: Message has 6 unknown bytes. [ 289.197780][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.767986][T19287] tipc: Enabled bearer , priority 24 [ 289.800417][T19291] netlink: 'syz.0.6442': attribute type 11 has an invalid length. [ 290.069469][T19310] tipc: Enabled bearer , priority 10 [ 290.237779][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.546429][T19343] nbd: must specify an index to disconnect [ 290.956166][T19375] tipc: Enabling of bearer rejected, already enabled [ 291.096071][ T29] audit: type=1107 audit(1776213239.625:4): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 291.232702][T19395] netlink: 'syz.2.6493': attribute type 58 has an invalid length. [ 291.287889][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.308838][T19399] netlink: 'syz.2.6498': attribute type 29 has an invalid length. [ 291.570957][T19417] vlan0: entered allmulticast mode [ 291.790584][T19433] veth0_to_bond: entered allmulticast mode [ 292.109195][T19456] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 292.128121][T19456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.281018][T19471] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 292.327775][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 292.466756][T19476] vlan2: entered allmulticast mode [ 292.478185][T19476] bond0: entered allmulticast mode [ 292.493632][T19476] bond_slave_0: entered allmulticast mode [ 292.518277][T19476] bond_slave_1: entered allmulticast mode [ 292.535756][T19479] __nla_validate_parse: 12 callbacks suppressed [ 292.535774][T19479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6535'. [ 293.357873][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.721347][T19552] netlink: 'syz.1.6571': attribute type 3 has an invalid length. [ 293.937970][T19561] netlink: 165 bytes leftover after parsing attributes in process `syz.3.6572'. [ 294.397861][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.474389][T19580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6583'. [ 295.154461][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6602'. [ 295.437869][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.666306][T19653] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 295.938727][T19676] netlink: 'syz.0.6630': attribute type 1 has an invalid length. [ 295.956726][T19676] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6630'. [ 295.977924][T19676] netlink: 'syz.0.6630': attribute type 1 has an invalid length. [ 295.985785][T19676] netlink: 'syz.0.6630': attribute type 8 has an invalid length. [ 296.010313][T19676] netlink: 606 bytes leftover after parsing attributes in process `syz.0.6630'. [ 296.028935][T19676] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6630'. [ 296.477964][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.760848][T19721] atomic_op ffff888055749998 conn xmit_atomic 0000000000000000 [ 296.886704][T19730] gretap0: entered promiscuous mode [ 296.897454][T19730] vlan2: entered promiscuous mode [ 297.314145][T19762] smc: removing ib device syz2 [ 297.517793][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.667658][T19777] tipc: Enabling of bearer rejected, failed to enable media [ 298.104300][T19790] netlink: 'syz.1.6685': attribute type 62 has an invalid length. [ 298.238104][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6687'. [ 298.557841][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 298.676348][T19811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6694'. [ 299.327010][T19849] netlink: 'syz.3.6712': attribute type 1 has an invalid length. [ 299.400746][T19855] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6715'. [ 299.442495][T19854] : entered promiscuous mode [ 299.598007][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.954423][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6733'. [ 300.209677][T19903] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.6738'. [ 300.232766][T19903] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.6738'. [ 300.637780][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 300.690736][T19924] vlan2: entered promiscuous mode [ 300.695818][T19924] bridge0: entered promiscuous mode [ 301.384982][T19975] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 301.400746][T19975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.504272][T19983] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6769'. [ 301.626694][T19991] nftables ruleset with unbound set [ 301.650237][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6773'. [ 301.677792][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 301.949818][T20017] xt_hashlimit: size too large, truncated to 1048576 [ 302.124728][T20021] bridge0: port 1(1x9) entered disabled state [ 302.224301][T20021] x9 (unregistering): left allmulticast mode [ 302.263396][T20021] x9 (unregistering): left promiscuous mode [ 302.291269][T20021] bridge0: port 1(1x9) entered disabled state [ 302.717888][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 303.074876][T20092] sctp: [Deprecated]: syz.4.6821 (pid 20092) Use of int in maxseg socket option. [ 303.074876][T20092] Use struct sctp_assoc_value instead [ 303.102491][T20096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6822'. [ 303.114908][T20093] sctp: [Deprecated]: syz.2.6820 (pid 20093) Use of int in max_burst socket option deprecated. [ 303.114908][T20093] Use struct sctp_assoc_value instead [ 303.273606][T20107] netlink: 'syz.2.6828': attribute type 9 has an invalid length. [ 303.372716][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6830'. [ 303.757867][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 303.858276][T20143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6845'. [ 304.305341][T20174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6858'. [ 304.337186][T20177] veth0: entered promiscuous mode [ 304.352819][T20177] veth0: left promiscuous mode [ 304.561500][T20196] netlink: 'syz.1.6868': attribute type 1 has an invalid length. [ 304.569740][T20197] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.6869'. [ 304.594634][T20196] netlink: 'syz.1.6868': attribute type 7 has an invalid length. [ 304.614999][T20196] netlink: 'syz.1.6868': attribute type 8 has an invalid length. [ 304.636086][T20196] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6868'. [ 304.724322][T20203] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6872'. [ 304.798008][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 304.867238][T20215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6878'. [ 305.092753][T20230] netlink: 'syz.3.6884': attribute type 1 has an invalid length. [ 305.116201][T20230] netlink: 'syz.3.6884': attribute type 2 has an invalid length. [ 305.134952][T20230] netlink: 'syz.3.6884': attribute type 1 has an invalid length. [ 305.163630][T20230] netlink: 'syz.3.6884': attribute type 3 has an invalid length. [ 305.196161][T20230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6884'. [ 305.308707][T20245] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 305.345376][T20245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.366178][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6896'. [ 305.510730][T20261] vcan0: tx address claim with dest, not broadcast [ 305.518751][ T9] IPVS: starting estimator thread 0... [ 305.525337][T20260] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 305.628735][T20262] IPVS: using max 30 ests per chain, 72000 per kthread [ 305.837884][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 305.960161][T20293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6915'. [ 306.013857][T20293] erspan0: entered promiscuous mode [ 306.431565][T20321] bond0: entered promiscuous mode [ 306.440071][T20321] bond_slave_0: entered promiscuous mode [ 306.446402][T20321] bond_slave_1: entered promiscuous mode [ 306.454938][T20321] bond0: left promiscuous mode [ 306.466493][T20321] bond_slave_0: left promiscuous mode [ 306.484321][T20321] bond_slave_1: left promiscuous mode [ 306.878459][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 307.101996][T20374] veth0: entered promiscuous mode [ 307.118303][T20373] veth0: left promiscuous mode [ 307.255841][T20381] Bluetooth: MGMT ver 1.23 [ 307.917819][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 308.047456][T20431] netlink: 'syz.0.6981': attribute type 83 has an invalid length. [ 308.157954][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 308.241736][T20447] netem: change failed [ 308.316442][T20452] netlink: 'syz.3.6991': attribute type 4 has an invalid length. [ 308.695401][T20484] __nla_validate_parse: 9 callbacks suppressed [ 308.695420][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7006'. [ 308.957828][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.133559][T20501] IPv6: NLM_F_CREATE should be specified when creating new route [ 309.179956][T20503] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7015'. [ 309.670849][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7032'. [ 309.753300][T20542] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7034'. [ 309.771224][T20542] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7034'. [ 309.895583][T20551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7038'. [ 309.937969][T20551] ipvlan2: entered allmulticast mode [ 309.945076][T20551] syz_tun: entered allmulticast mode [ 309.997775][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 310.031563][T20564] veth0: entered promiscuous mode [ 310.037487][T20564] veth0: left promiscuous mode [ 310.660807][T20605] netlink: 'syz.1.7064': attribute type 21 has an invalid length. [ 310.661265][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7062'. [ 310.670550][T20605] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7064'. [ 311.037802][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 311.092039][T20636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7081'. [ 311.112262][T20636] bridge0: port 3(gretap0) entered disabled state [ 311.118995][T20636] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.137435][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7080'. [ 311.724848][T20678] netlink: 'syz.3.7097': attribute type 29 has an invalid length. [ 311.749076][T20678] netlink: 'syz.3.7097': attribute type 29 has an invalid length. [ 311.758108][T20678] netlink: 'syz.3.7097': attribute type 29 has an invalid length. [ 311.766858][T20678] netlink: 'syz.3.7097': attribute type 29 has an invalid length. [ 311.776149][T20678] netlink: 'syz.3.7097': attribute type 29 has an invalid length. [ 311.786633][T20678] netlink: 'syz.3.7097': attribute type 29 has an invalid length. [ 311.812274][T20678] netlink: 'syz.3.7097': attribute type 29 has an invalid length. [ 311.966756][T20687] gretap0: entered promiscuous mode [ 311.975289][T20687] gretap0: left promiscuous mode [ 312.077904][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 313.117776][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 313.274270][T20776] blkio.reset_stats is deprecated [ 313.745936][T20814] netlink: 'syz.0.7159': attribute type 4 has an invalid length. [ 314.104747][T20844] netlink: 'syz.4.7174': attribute type 3 has an invalid length. [ 314.130722][T20844] __nla_validate_parse: 4 callbacks suppressed [ 314.130741][T20844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7174'. [ 314.157888][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 314.163913][T20842] netlink: set zone limit has 4 unknown bytes [ 314.232862][T20848] netlink: zone id is out of range [ 314.288105][T20848] netlink: zone id is out of range [ 314.539884][T20872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7187'. [ 315.121080][ T797] hid (null): global environment stack underflow [ 315.140209][ T797] hid-generic 0005:0458:0004.0001: global environment stack underflow [ 315.151282][ T797] hid-generic 0005:0458:0004.0001: item 0 0 1 11 parsing failed [ 315.161015][ T797] hid-generic 0005:0458:0004.0001: probe with driver hid-generic failed with error -22 [ 315.197812][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 315.510163][T20939] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7218'. [ 315.631454][T20949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7223'. [ 315.649148][T20949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7223'. [ 316.238752][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 316.654108][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7247'. [ 316.672785][T21007] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7247'. [ 317.050443][T21035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7260'. [ 317.086621][T21042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7260'. [ 317.094308][T21035] xfrm1: entered promiscuous mode [ 317.124926][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.127536][T21035] xfrm1: entered allmulticast mode [ 317.277873][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.718258][T21086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7280'. [ 318.317976][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 318.337337][T21127] validate_nla: 1 callbacks suppressed [ 318.337355][T21127] netlink: 'syz.0.7301': attribute type 83 has an invalid length. [ 319.097149][T21170] netlink: 'syz.4.7321': attribute type 2 has an invalid length. [ 319.110687][T21168] : renamed from bond0 (while UP) [ 319.357990][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 319.736664][T21220] netlink: 'syz.1.7342': attribute type 4 has an invalid length. [ 319.933807][T21233] __nla_validate_parse: 3 callbacks suppressed [ 319.933826][T21233] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.7350'. [ 320.206372][T21256] syz.3.7359: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 320.227036][T21256] CPU: 1 UID: 0 PID: 21256 Comm: syz.3.7359 Not tainted syzkaller #0 PREEMPT(full) [ 320.227066][T21256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 320.227086][T21256] Call Trace: [ 320.227093][T21256] [ 320.227102][T21256] dump_stack_lvl+0xe8/0x150 [ 320.227136][T21256] warn_alloc+0x249/0x340 [ 320.227162][T21256] ? stack_trace_save+0xa9/0x100 [ 320.227188][T21256] ? __pfx_warn_alloc+0x10/0x10 [ 320.227219][T21256] ? kasan_save_track+0x4f/0x80 [ 320.227240][T21256] ? kasan_save_track+0x3e/0x80 [ 320.227260][T21256] ? __kasan_kmalloc+0x93/0xb0 [ 320.227281][T21256] ? __kmalloc_cache_noprof+0x31c/0x660 [ 320.227303][T21256] ? xskq_create+0x56/0x170 [ 320.227328][T21256] ? xsk_setsockopt+0x54c/0x990 [ 320.227349][T21256] ? do_sock_setsockopt+0x17c/0x1b0 [ 320.227374][T21256] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 320.227399][T21256] ? do_syscall_64+0x14d/0xf80 [ 320.227430][T21256] __vmalloc_node_range_noprof+0x132/0x1730 [ 320.227487][T21256] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.227517][T21256] ? __kasan_kmalloc+0x93/0xb0 [ 320.227547][T21256] vmalloc_user_noprof+0xad/0xe0 [ 320.227570][T21256] ? xskq_create+0xbf/0x170 [ 320.227597][T21256] xskq_create+0xbf/0x170 [ 320.227626][T21256] xsk_init_queue+0x8a/0xe0 [ 320.227653][T21256] xsk_setsockopt+0x54c/0x990 [ 320.227680][T21256] ? __pfx_xsk_setsockopt+0x10/0x10 [ 320.227707][T21256] ? __pfx_aa_sk_perm+0x10/0x10 [ 320.227737][T21256] ? aa_sock_opt_perm+0xff/0x1a0 [ 320.227757][T21256] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 320.227779][T21256] ? __pfx_xsk_setsockopt+0x10/0x10 [ 320.227801][T21256] do_sock_setsockopt+0x17c/0x1b0 [ 320.227828][T21256] __x64_sys_setsockopt+0x13d/0x1b0 [ 320.227860][T21256] do_syscall_64+0x14d/0xf80 [ 320.227887][T21256] ? trace_irq_disable+0x3b/0x150 [ 320.227904][T21256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.227924][T21256] ? clear_bhb_loop+0x40/0x90 [ 320.227948][T21256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.227967][T21256] RIP: 0033:0x7f5a1439c819 [ 320.227992][T21256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.228015][T21256] RSP: 002b:00007f5a151e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 320.228037][T21256] RAX: ffffffffffffffda RBX: 00007f5a14615fa0 RCX: 00007f5a1439c819 [ 320.228052][T21256] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 320.228064][T21256] RBP: 00007f5a14432c91 R08: 0000000000000004 R09: 0000000000000000 [ 320.228076][T21256] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.228088][T21256] R13: 00007f5a14616038 R14: 00007f5a14615fa0 R15: 00007ffe5a092258 [ 320.228117][T21256] [ 320.496148][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 320.628621][T21256] Mem-Info: [ 320.631798][T21256] active_anon:5528 inactive_anon:7 isolated_anon:0 [ 320.631798][T21256] active_file:2825 inactive_file:40376 isolated_file:0 [ 320.631798][T21256] unevictable:768 dirty:266 writeback:0 [ 320.631798][T21256] slab_reclaimable:11830 slab_unreclaimable:98954 [ 320.631798][T21256] mapped:29076 shmem:1363 pagetables:3368 [ 320.631798][T21256] sec_pagetables:0 bounce:0 [ 320.631798][T21256] kernel_misc_reclaimable:0 [ 320.631798][T21256] free:1325695 free_pcp:11594 free_cma:0 [ 320.728714][T21281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7367'. [ 320.758439][T21256] Node 0 active_anon:22512kB inactive_anon:28kB active_file:11300kB inactive_file:161300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116404kB dirty:1064kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12524kB pagetables:13256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 320.791206][T21256] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 320.822595][T21256] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.864438][T21256] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 320.874824][T21256] Node 0 DMA32 free:1343304kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22528kB inactive_anon:28kB active_file:11300kB inactive_file:161300kB unevictable:1536kB writepending:1064kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:43796kB local_pcp:19760kB free_cma:0kB [ 320.922787][T21256] lowmem_reserve[]: 0 0 0 0 0 [ 320.948004][T21256] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.004165][T21256] lowmem_reserve[]: 0 0 0 0 0 [ 321.044619][T21256] Node 1 Normal free:3946424kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.125220][T21256] lowmem_reserve[]: 0 0 0 0 0 [ 321.138846][T21256] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 321.197940][T21256] Node 0 DMA32: 4783*4kB (UME) 3577*8kB (UM) 1902*16kB (UME) 475*32kB (UME) 625*64kB (UME) 374*128kB (UME) 430*256kB (UME) 286*512kB (UM) 136*1024kB (UM) 14*2048kB (UME) 180*4096kB (UM) = 1342980kB [ 321.270546][T21256] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 321.299843][T21256] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 10*16kB (UM) 5*32kB (UM) 9*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 961*4096kB (M) = 3946424kB [ 321.334045][T21256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.345566][T21256] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.356286][T21256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.366882][T21256] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.380484][T21256] 44561 total pagecache pages [ 321.385257][T21256] 0 pages in swap cache [ 321.396248][T21256] Free swap = 124996kB [ 321.409219][T21256] Total swap = 124996kB [ 321.423681][T21256] 2097051 pages RAM [ 321.427538][T21256] 0 pages HighMem/MovableOnly [ 321.444685][T21256] 427077 pages reserved [ 321.454797][T21256] 0 pages cma reserved [ 321.517906][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 321.616545][ T5488] veth0_macvtap: left promiscuous mode [ 321.895193][T21342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7387'. [ 322.457885][T21379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7401'. [ 322.557779][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 322.652179][T21392] netlink: 'syz.1.7407': attribute type 83 has an invalid length. [ 322.739238][T21396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7409'. [ 323.098596][T21423] netlink: 'syz.0.7422': attribute type 2 has an invalid length. [ 323.106366][T21423] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7422'. [ 323.200291][T21429] tap0: tun_chr_ioctl cmd 1074025678 [ 323.217037][T21429] tap0: group set to 0 [ 323.227250][T21435] netlink: 'syz.3.7427': attribute type 14 has an invalid length. [ 323.330917][T21440] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7430'. [ 323.453914][T21448] macvtap1: entered allmulticast mode [ 323.468344][T21448] veth0_macvtap: entered allmulticast mode [ 323.521075][T21451] netlink: 'syz.3.7436': attribute type 10 has an invalid length. [ 323.570232][T21451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.597787][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 323.609172][T21451] batadv0: entered promiscuous mode [ 323.614659][T21451] batadv0: entered allmulticast mode [ 323.628859][T21451] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 323.644327][T21459] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7440'. [ 323.978692][T21483] netlink: 'syz.1.7451': attribute type 1 has an invalid length. [ 324.008427][T21483] netlink: 'syz.1.7451': attribute type 2 has an invalid length. [ 324.028955][T21483] netlink: 'syz.1.7451': attribute type 1 has an invalid length. [ 324.037327][T21483] netlink: 'syz.1.7451': attribute type 3 has an invalid length. [ 324.076292][T21483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7451'. [ 324.344618][T21511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7465'. [ 324.384782][T21514] block nbd0: Unsupported socket: should be TCP or UNIX. [ 324.637789][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 324.781051][T21543] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 324.991251][T21551] netlink: 'syz.1.7484': attribute type 5 has an invalid length. [ 325.117171][T21564] xt_hashlimit: size too large, truncated to 1048576 [ 325.148562][T21566] veth0: entered promiscuous mode [ 325.168961][T21565] veth0: left promiscuous mode [ 325.208702][T21572] : renamed from vxcan1 (while UP) [ 325.677799][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.591290][T21651] __nla_validate_parse: 2 callbacks suppressed [ 326.591310][T21651] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7531'. [ 326.629160][T21651] netlink: 'syz.1.7531': attribute type 1 has an invalid length. [ 326.717813][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 327.136658][T21679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7542'. [ 327.194496][T21679] bridge_slave_1: left allmulticast mode [ 327.224330][T21679] bridge_slave_1: left promiscuous mode [ 327.244740][T21679] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.279748][T21679] bridge_slave_0: left promiscuous mode [ 327.287009][T21679] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.757865][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 327.938995][T21727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7563'. [ 328.086724][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7568'. [ 328.694504][T21783] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7591'. [ 328.797790][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 329.036618][T21805] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7602'. [ 329.096581][T21810] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7603'. [ 329.170307][T21816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7606'. [ 329.508590][T21837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7616'. [ 329.545833][T21837] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7616'. [ 329.837784][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 330.251040][T21889] tipc: Started in network mode [ 330.255965][T21889] tipc: Node identity ac14140f, cluster identity 4711 [ 330.264633][T21889] tipc: New replicast peer: 255.255.255.255 [ 330.275897][T21889] tipc: Enabled bearer , priority 10 [ 330.297904][T21889] tipc: Disabling bearer [ 330.320421][T21895] tipc: Started in network mode [ 330.325323][T21895] tipc: Node identity ac14140f, cluster identity 4711 [ 330.354643][T21895] tipc: New replicast peer: 255.255.255.255 [ 330.397081][T21895] tipc: Enabled bearer , priority 10 [ 330.877773][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.508101][ T10] tipc: Node number set to 2886997007 [ 331.690696][T21983] sctp: [Deprecated]: syz.0.7686 (pid 21983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.690696][T21983] Use struct sctp_sack_info instead [ 331.927777][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 332.470779][T22029] __nla_validate_parse: 4 callbacks suppressed [ 332.470799][T22029] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7707'. [ 332.716692][T22046] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7713'. [ 332.826660][T22055] block nbd0: not configured, cannot reconfigure [ 332.957866][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 333.249763][T22084] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 333.258678][T22082] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7730'. [ 333.280270][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7730'. [ 333.491350][T22101] TCP: TCP_TX_DELAY enabled [ 333.589450][T22106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.889930][T22130] netlink: 'syz.0.7754': attribute type 4 has an invalid length. [ 333.997781][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 334.159436][T22150] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.203384][T22152] IPv6: Can't replace route, no match found [ 334.219028][T22152] IPv6: Can't replace route, no match found [ 334.252599][T22155] netlink: 'syz.4.7762': attribute type 28 has an invalid length. [ 334.287011][T22155] netlink: 'syz.4.7762': attribute type 3 has an invalid length. [ 334.311305][T22155] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7762'. [ 334.391289][T22167] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7767'. [ 334.635847][T22181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7773'. [ 335.037786][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 335.348587][T22239] netlink: 'syz.1.7798': attribute type 1 has an invalid length. [ 335.356576][T22239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7798'. [ 336.077785][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.316700][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7827'. [ 336.603553][T22321] netlink: 'syz.0.7835': attribute type 5 has an invalid length. [ 336.623176][T22323] netlink: 'syz.4.7837': attribute type 1 has an invalid length. [ 336.637912][T22323] netlink: 'syz.4.7837': attribute type 3 has an invalid length. [ 336.661474][T22323] netlink: 'syz.4.7837': attribute type 7 has an invalid length. [ 336.676790][T22323] netlink: 'syz.4.7837': attribute type 8 has an invalid length. [ 336.684888][T22323] netlink: 184 bytes leftover after parsing attributes in process `syz.4.7837'. [ 336.695399][T22323] NCSI netlink: No device for ifindex 131092 [ 337.117782][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 337.793385][T22380] __nla_validate_parse: 1 callbacks suppressed [ 337.793406][T22380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7859'. [ 338.070734][T22403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7869'. [ 338.155863][T22403] netlink: 'syz.3.7869': attribute type 30 has an invalid length. [ 338.163869][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.190211][T22403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7869'. [ 339.128929][T22467] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 339.197792][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 339.591947][T22501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7919'. [ 339.671224][T22511] netlink: 'syz.2.7923': attribute type 1 has an invalid length. [ 339.682067][T22509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7922'. [ 339.691834][T22511] netlink: 'syz.2.7923': attribute type 2 has an invalid length. [ 339.701632][T22511] netlink: 'syz.2.7923': attribute type 1 has an invalid length. [ 339.719889][T22509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7922'. [ 339.938663][T22526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7930'. [ 340.237779][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 340.267472][T22554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7943'. [ 340.829879][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7965'. [ 340.989218][T22610] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 341.252129][T22628] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7979'. [ 341.277873][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.560503][T22652] tipc: Enabling of bearer rejected, already enabled [ 342.186963][T22695] bond4: entered promiscuous mode [ 342.317867][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 342.789684][T22736] ip6gre0: Master is either lo or non-ether device [ 342.808883][T22738] __nla_validate_parse: 9 callbacks suppressed [ 342.808901][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8031'. [ 343.324721][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8047'. [ 343.358082][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.391233][T22836] nbd0: detected capacity change from 0 to 63 [ 344.398058][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.412502][ T5143] block nbd0: Receive control failed (result -32) [ 344.419193][ T51] block nbd0: Receive control failed (result -32) [ 344.457253][T22851] block nbd0: Dead connection, failed to find a fallback [ 344.481893][T22851] block nbd0: shutting down sockets [ 344.489046][T22851] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.501906][T22851] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.510808][T22851] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.523448][T22851] Buffer I/O error on dev nbd0, logical block 1, async page read [ 344.532427][T22851] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.554153][T22851] Buffer I/O error on dev nbd0, logical block 2, async page read [ 344.596715][T22851] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.628415][T22851] Buffer I/O error on dev nbd0, logical block 3, async page read [ 344.636260][T22851] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.666241][T22851] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.676239][T22851] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.705419][T22851] Buffer I/O error on dev nbd0, logical block 1, async page read [ 344.713101][T22867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8087'. [ 344.726592][T22851] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.759311][T22851] Buffer I/O error on dev nbd0, logical block 2, async page read [ 344.767133][T22851] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.787499][T22851] Buffer I/O error on dev nbd0, logical block 3, async page read [ 344.796121][T22851] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.829740][T22851] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.848060][T22851] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.864603][T22851] Buffer I/O error on dev nbd0, logical block 1, async page read [ 344.883854][T22875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8091'. [ 344.896199][T22851] ldm_validate_partition_table(): Disk read failed. [ 344.913394][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8094'. [ 344.926076][T22851] Dev nbd0: unable to read RDB block 0 [ 344.946226][T22851] nbd0: unable to read partition table [ 344.964146][T22851] ldm_validate_partition_table(): Disk read failed. [ 344.973329][T22851] Dev nbd0: unable to read RDB block 0 [ 344.983124][T22851] nbd0: unable to read partition table [ 345.083439][T22888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8097'. [ 345.182409][T22888] macvtap1: entered promiscuous mode [ 345.189400][T22888] vlan0: entered promiscuous mode [ 345.194913][T22888] macvtap1: entered allmulticast mode [ 345.204995][T22888] vlan0: entered allmulticast mode [ 345.213277][T22888] veth0_vlan: entered allmulticast mode [ 345.302245][T22903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8104'. [ 345.370694][T22908] netlink: 'syz.3.8105': attribute type 1 has an invalid length. [ 345.416775][T22908] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8105'. [ 345.437775][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 345.440701][T22908] netlink: 'syz.3.8105': attribute type 1 has an invalid length. [ 345.453151][T22908] netlink: 'syz.3.8105': attribute type 8 has an invalid length. [ 345.483485][T22908] netlink: 582 bytes leftover after parsing attributes in process `syz.3.8105'. [ 345.516269][T22908] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8105'. [ 346.477871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 346.802713][ T5143] block nbd1: Receive control failed (result -32) [ 347.517862][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.763362][T23073] netlink: 'syz.2.8181': attribute type 2 has an invalid length. [ 347.786273][T23073] netlink: 'syz.2.8181': attribute type 2 has an invalid length. [ 348.424079][T23114] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 348.471393][T23120] __nla_validate_parse: 4 callbacks suppressed [ 348.471415][T23120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8200'. [ 348.557938][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 348.607552][T23124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.540811][T23182] syzkaller1: entered promiscuous mode [ 349.546472][T23182] syzkaller1: entered allmulticast mode [ 349.607829][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 350.424152][T23238] netlink: 'syz.4.8254': attribute type 2 has an invalid length. [ 350.439030][T23238] netlink: 'syz.4.8254': attribute type 2 has an invalid length. [ 350.638148][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 350.686390][T23216] dvmrp8: entered allmulticast mode [ 350.755806][T23252] erspan0: entered promiscuous mode [ 350.767178][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8258'. [ 350.787505][T23255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8261'. [ 350.912254][ T49] dvmrp8 (unregistering): left allmulticast mode [ 351.109155][T23273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8269'. [ 351.141600][T23273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8269'. [ 351.279352][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 351.297956][T23277] block nbd2: server does not support multiple connections per device. [ 351.310339][T23277] block nbd2: shutting down sockets [ 351.417307][T23295] macvlan0: entered promiscuous mode [ 351.677859][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 351.775922][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8288'. [ 351.860500][T23315] team0: Port device team_slave_0 removed [ 351.875281][ T29] audit: type=1800 audit(1776213300.405:5): pid=23322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8292" name="memory.events" dev="tmpfs" ino=8188 res=0 errno=0 [ 351.914031][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8293'. [ 351.928492][T23327] netlink: 65011 bytes leftover after parsing attributes in process `syz.1.8293'. [ 351.956612][T23330] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8295'. [ 351.973034][T23332] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8296'. [ 352.511327][T23370] bridge0: port 3(gretap0) entered blocking state [ 352.517997][T23370] bridge0: port 3(gretap0) entered listening state [ 352.524975][T23370] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.532229][T23370] bridge0: port 1(bridge_slave_0) entered listening state [ 352.606710][T23370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.617598][T23370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.649107][ T35] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 352.717855][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 353.087581][T23415] netlink: 'syz.1.8334': attribute type 1 has an invalid length. [ 353.096028][T23415] netlink: 'syz.1.8334': attribute type 1 has an invalid length. [ 353.155048][T23419] netlink: 'syz.3.8335': attribute type 17 has an invalid length. [ 353.757839][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.797797][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.822821][T23531] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.927147][T23544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.820441][T23602] sctp: [Deprecated]: syz.3.8415 (pid 23602) Use of int in max_burst socket option. [ 355.820441][T23602] Use struct sctp_assoc_value instead [ 355.838016][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.984371][T23614] syzkaller1: entered promiscuous mode [ 355.992079][T23614] syzkaller1: entered allmulticast mode [ 356.523632][T23651] __nla_validate_parse: 10 callbacks suppressed [ 356.523652][T23651] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.8429'. [ 356.563657][T23653] netlink: 'syz.0.8430': attribute type 63 has an invalid length. [ 356.574230][T23653] netlink: 'syz.0.8430': attribute type 63 has an invalid length. [ 356.877833][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 357.167782][T23691] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 357.445685][T23713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8455'. [ 357.457793][T23713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8455'. [ 357.538933][T23718] netlink: 'syz.3.8457': attribute type 1 has an invalid length. [ 357.747940][T23727] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 357.927852][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 358.427625][T23762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8478'. [ 358.621139][T23769] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8481'. [ 358.957874][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 359.008548][T23799] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 359.158483][T23809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8497'. [ 359.225760][T23809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8497'. [ 359.243565][T23809] nbd: device at index 64 is going down [ 359.347598][T23800] udevd[23800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 359.380717][T23803] udevd[23803]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 359.604011][T23833] syzkaller1: entered promiscuous mode [ 359.611948][T23833] syzkaller1: entered allmulticast mode [ 359.997866][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.602630][T23900] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8538'. [ 360.764007][T23912] netlink: 'syz.3.8541': attribute type 1 has an invalid length. [ 361.037884][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 361.122226][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.210683][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.262275][T23947] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8560'. [ 361.380144][T23955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8564'. [ 361.483141][T23961] syzkaller1: entered promiscuous mode [ 361.501459][T23961] syzkaller1: entered allmulticast mode [ 361.524198][T23961] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 361.869520][T23990] netlink: 'syz.3.8579': attribute type 4 has an invalid length. [ 361.926675][T23993] macvtap1: entered promiscuous mode [ 361.936875][T23993] macvtap1: entered allmulticast mode [ 361.943102][T23993] veth1_vlan: entered allmulticast mode [ 362.037149][T23996] macvtap2: entered promiscuous mode [ 362.045400][T23996] macvtap2: entered allmulticast mode [ 362.077777][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.411974][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8592'. [ 362.672537][T24048] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8602'. [ 363.117876][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 363.691728][T24113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8634'. [ 363.695188][T24114] netlink: 67 bytes leftover after parsing attributes in process `syz.1.8632'. [ 363.816009][T24121] syzkaller1: entered promiscuous mode [ 363.855721][T24121] syzkaller1: entered allmulticast mode [ 363.994330][T24134] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.8643'. [ 364.157912][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 364.411207][T24166] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8656'. [ 364.533981][T24174] syzkaller1: entered promiscuous mode [ 364.541490][T24174] syzkaller1: entered allmulticast mode [ 364.621615][T24177] syzkaller1: entered promiscuous mode [ 364.627249][T24177] syzkaller1: entered allmulticast mode [ 364.863112][T24191] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.8669'. [ 365.197876][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 365.943449][T24266] xt_hashlimit: size too large, truncated to 1048576 [ 365.944614][T24270] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8704'. [ 366.052368][T24278] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.8707'. [ 366.069165][T24279] sctp: [Deprecated]: syz.1.8705 (pid 24279) Use of int in max_burst socket option deprecated. [ 366.069165][T24279] Use struct sctp_assoc_value instead [ 366.237771][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 366.782581][T24327] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 366.860332][T24331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8730'. [ 366.880445][T24331] netlink: 'syz.0.8730': attribute type 7 has an invalid length. [ 367.131622][T24343] netlink: 'syz.2.8734': attribute type 1 has an invalid length. [ 367.277882][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 367.585347][T24375] __nla_validate_parse: 2 callbacks suppressed [ 367.585369][T24375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8750'. [ 367.953910][T24404] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8764'. [ 368.127593][T24418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8771'. [ 368.196073][T24421] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8772'. [ 368.318216][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.474813][T24439] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8781'. [ 368.825680][T24464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8789'. [ 369.357805][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 369.898285][T24527] pim6reg1: entered promiscuous mode [ 369.904131][T24527] pim6reg1: entered allmulticast mode [ 370.080352][ T5143] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 370.086883][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 370.176140][T24543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8824'. [ 370.192707][T24543] veth0_macvtap: left promiscuous mode [ 370.397781][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 370.467539][T24561] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8830'. [ 370.515812][T24563] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8832'. [ 370.586898][T24567] nbd: nbd1 already in use [ 370.592182][T24567] block nbd1: NBD_DISCONNECT [ 370.605110][T24567] block nbd1: Send disconnect failed -32 [ 370.617452][T24567] block nbd1: shutting down sockets [ 370.951581][T24591] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8847'. [ 371.084762][T24604] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 371.091720][T24604] syzkaller1: Refused to change device type [ 371.203720][T24615] netlink: 'syz.1.8857': attribute type 7 has an invalid length. [ 371.212908][T24615] netlink: 'syz.1.8857': attribute type 8 has an invalid length. [ 371.438058][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.611095][T24642] syzkaller1: entered promiscuous mode [ 371.617158][T24642] syzkaller1: entered allmulticast mode [ 372.376204][T24683] netlink: 'syz.3.8887': attribute type 9 has an invalid length. [ 372.477796][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 372.505062][T24683] netlink: 'syz.3.8887': attribute type 9 has an invalid length. [ 372.666391][T24691] __nla_validate_parse: 9 callbacks suppressed [ 372.666410][T24691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8891'. [ 372.889179][T24696] syzkaller1: entered promiscuous mode [ 372.921944][T24696] syzkaller1: entered allmulticast mode [ 373.159558][T24709] netlink: 'syz.1.8900': attribute type 21 has an invalid length. [ 373.174295][T24709] netlink: 'syz.1.8900': attribute type 22 has an invalid length. [ 373.184471][T24709] netlink: 'syz.1.8900': attribute type 23 has an invalid length. [ 373.192990][T24709] netlink: 'syz.1.8900': attribute type 25 has an invalid length. [ 373.202371][T24709] netlink: 'syz.1.8900': attribute type 26 has an invalid length. [ 373.210707][T24709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8900'. [ 373.246878][T24711] netlink: 'syz.2.8901': attribute type 51 has an invalid length. [ 373.281920][T24711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.292410][T24713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8902'. [ 373.302427][T24713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8902'. [ 373.303324][T24711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.320320][T24711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.327902][T24711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.517871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 373.715455][T24731] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8910'. [ 373.718405][T24729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8909'. [ 373.765268][T24729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8909'. [ 374.038177][T24745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8918'. [ 374.128715][T24749] netlink: 'syz.3.8920': attribute type 4 has an invalid length. [ 374.139158][T24749] netlink: 'syz.3.8920': attribute type 4 has an invalid length. [ 374.557822][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.719322][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.733769][T24767] syzkaller1: entered promiscuous mode [ 374.741337][T24767] syzkaller1: entered allmulticast mode [ 374.857032][T24779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8929'. [ 374.866168][T24779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8929'. [ 375.358324][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.597924][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 375.731123][T24813] ip6tnl2: entered promiscuous mode [ 375.758201][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.097547][T24821] hsr_slave_0 (unregistering): left promiscuous mode [ 376.422754][T24836] gretap2: entered promiscuous mode [ 376.429258][T24836] batman_adv: batadv0: Adding interface: gretap2 [ 376.435761][T24836] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 376.458006][T24836] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 376.637870][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 376.868303][T24862] vcan0: tx drop: invalid da for name 0x0000000000000008 [ 377.677784][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 377.840640][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.399342][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.557952][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.563360][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.717861][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.826924][T24972] validate_nla: 8 callbacks suppressed [ 378.826945][T24972] netlink: 'syz.2.9006': attribute type 25 has an invalid length. [ 378.878454][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.888327][T24972] __nla_validate_parse: 15 callbacks suppressed [ 378.888343][T24972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9006'. [ 378.944554][T24972] netlink: 'syz.2.9006': attribute type 25 has an invalid length. [ 378.948912][T24976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9009'. [ 378.963160][T24972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9006'. [ 379.170048][T24988] trusted_key: syz.1.9016 sent an empty control message without MSG_MORE. [ 379.573265][T25014] syzkaller1: entered promiscuous mode [ 379.582606][T25014] syzkaller1: entered allmulticast mode [ 379.757774][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.774245][T25024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9031'. [ 379.784374][T25024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9031'. [ 379.918009][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.173468][T25042] syzkaller1: entered promiscuous mode [ 380.187787][T25042] syzkaller1: entered allmulticast mode [ 380.470212][T25059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.507959][T25059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.516811][T25059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.567929][T25057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.578593][T25057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.633625][T25071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9051'. [ 380.797889][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 380.848190][T25083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9056'. [ 381.139191][T25110] syzkaller0: entered allmulticast mode [ 381.152502][T25110] syzkaller0 (unregistering): left allmulticast mode [ 381.323430][T25122] netlink: 'syz.1.9071': attribute type 14 has an invalid length. [ 381.333046][T25122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9071'. [ 381.362939][T25122] netlink: 'syz.1.9071': attribute type 14 has an invalid length. [ 381.371723][T25122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9071'. [ 381.615896][T25129] vlan0 (unregistering): left allmulticast mode [ 381.626237][T25129] veth0_vlan (unregistering): left allmulticast mode [ 381.633721][T25129] vlan0 (unregistering): left promiscuous mode [ 382.898862][T25157] netlink: 'syz.4.9084': attribute type 1 has an invalid length. [ 382.921023][T25157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.945485][T25157] bond2: (slave geneve2): making interface the new active one [ 382.954212][T25157] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 382.965796][ T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 382.981482][ T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 382.993975][ T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 383.003796][ T35] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 383.018308][T25160] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9085'. [ 383.049125][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 383.057397][ C1] bridge0: port 3(gretap0) entered learning state [ 383.116071][T25162] "syz.4.9086" (25162) uses obsolete ecb(arc4) skcipher [ 383.847341][T25208] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.861191][T25208] net_ratelimit: 6 callbacks suppressed [ 383.861203][T25208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.910280][T25211] netlink: 'syz.4.9105': attribute type 1 has an invalid length. [ 383.918301][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.938665][T25211] 8021q: adding VLAN 0 to HW filter on device bond4 [ 383.960954][T25211] bond4: (slave geneve3): making interface the new active one [ 383.969924][T25211] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 383.979050][ T35] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 383.987453][ T35] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 383.997669][ T35] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.011577][ T35] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.024369][T25099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.082114][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.165035][T25217] __nla_validate_parse: 2 callbacks suppressed [ 384.165056][T25217] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9107'. [ 384.478780][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.496514][T25237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9116'. [ 384.505780][T25237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9116'. [ 384.528692][T25243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9118'. [ 384.550053][T25237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9116'. [ 384.559388][T25237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9116'. [ 384.756758][T25255] atomic_op ffff888077de4998 conn xmit_atomic 0000000000000000 [ 384.915978][T25271] netlink: 'syz.3.9126': attribute type 9 has an invalid length. [ 384.943495][T25271] netlink: 'syz.3.9126': attribute type 11 has an invalid length. [ 384.957856][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 384.965382][T25271] netlink: 'syz.3.9126': attribute type 12 has an invalid length. [ 384.985922][T25271] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.9126'. [ 385.122165][T25275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.154888][T25249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.167054][T25249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.184352][T25296] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.312953][T25249] veth0_macvtap: left allmulticast mode [ 385.336800][T25293] bridge_slave_0: left allmulticast mode [ 385.344872][T25293] bridge_slave_0: left promiscuous mode [ 385.368394][T25293] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.383565][T25293] bridge_slave_1: left allmulticast mode [ 385.390467][T25293] bridge_slave_1: left promiscuous mode [ 385.397457][T25293] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.426538][T25293] bond0: (slave bond_slave_0): Releasing backup interface [ 385.456020][T25293] bond0: (slave bond_slave_1): Releasing backup interface [ 385.496185][T25293] team0: Port device team_slave_1 removed [ 385.523124][T25293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.535528][T25293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.545814][T25293] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 385.564944][ T60] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.588619][ T60] netdevsim netdevsim1 : unset [1, 1] type 2 family 0 port 19999 - 0 [ 385.602182][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.614412][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 385.640652][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.670477][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 385.691266][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.701745][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 385.793641][T25314] syzkaller1: entered promiscuous mode [ 385.802760][T25314] syzkaller1: entered allmulticast mode [ 385.997918][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 386.151175][T25340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9147'. [ 386.167618][T25340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9147'. [ 386.173650][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.193601][T25340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9147'. [ 387.992529][T25412] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 388.061149][T25415] chnl_net:caif_netlink_parms(): no params data found [ 389.117772][ C1] net_ratelimit: 6 callbacks suppressed [ 389.117791][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.243228][T25472] netlink: 'syz.2.9192': attribute type 4 has an invalid length. [ 389.320319][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.157801][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 390.190324][T25523] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 390.404682][T25274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.488446][T25542] syzkaller1: entered promiscuous mode [ 390.494069][T25542] syzkaller1: entered allmulticast mode [ 390.558966][T25262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.103926][T25566] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 391.151649][T25566] bond3: (slave lo): Enslaving as an active interface with an up link [ 391.185873][T25566] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 391.201481][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.333455][T25573] __nla_validate_parse: 6 callbacks suppressed [ 391.333473][T25573] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9225'. [ 391.335069][T25574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9226'. [ 391.388224][T25574] netlink: 'syz.0.9226': attribute type 7 has an invalid length. [ 391.395990][T25574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9226'. [ 391.435553][T25574] gretap0: entered promiscuous mode [ 391.441207][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.469435][T25574] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 391.529314][T25578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.576055][T25580] tipc: Resetting bearer [ 391.680916][T25585] netlink: 'syz.3.9231': attribute type 1 has an invalid length. [ 391.698065][T25585] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.9231'. [ 391.967316][T25591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.227508][ T561] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 392.248663][ T561] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.260559][ T561] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 392.269367][ T561] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.284816][ T561] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 392.322233][ T561] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.341542][ T561] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 392.360028][ T561] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.458033][T25608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9240'. [ 392.849774][T25630] pim6reg1: entered promiscuous mode [ 392.855120][T25630] pim6reg1: entered allmulticast mode [ 393.143535][T25655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9262'. [ 393.157958][T25655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9262'. [ 393.374308][T25672] netlink: 'syz.4.9271': attribute type 22 has an invalid length. [ 393.396180][T25672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9271'. [ 393.413051][T25672] netlink: 'syz.4.9271': attribute type 22 has an invalid length. [ 393.435817][T25672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9271'. [ 393.551672][T25683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9275'. [ 393.682950][T25698] ip6gre2: entered promiscuous mode [ 393.688934][T25698] ip6gre2: entered allmulticast mode [ 393.724872][T25702] netlink: 'syz.1.9283': attribute type 15 has an invalid length. [ 393.745551][ T12] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 256 - 0 [ 393.756317][T25702] netlink: 'syz.1.9283': attribute type 15 has an invalid length. [ 393.775293][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 393.799259][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 393.828458][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 393.969275][T25716] netlink: 'syz.2.9288': attribute type 9 has an invalid length. [ 393.977304][T25716] netlink: 'syz.2.9288': attribute type 11 has an invalid length. [ 393.985614][T25716] netlink: 'syz.2.9288': attribute type 12 has an invalid length. [ 394.196993][T25733] net_ratelimit: 10 callbacks suppressed [ 394.197018][T25733] netlink: Unknown conntrack attr (type=2304, max=9) [ 394.324087][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.563641][T25272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.924731][T25766] sit0: left promiscuous mode [ 394.938609][T25766] gretap1: left promiscuous mode [ 394.943843][T25766] xfrm1: left promiscuous mode [ 394.956568][T25766] ip6tnl2: left promiscuous mode [ 394.962058][T25766] gretap2: left promiscuous mode [ 395.074896][T25784] bridge_slave_0: invalid flags given to default FDB implementation [ 395.357864][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.608447][T25272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.398003][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.489946][T25814] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 396.497055][T25845] __nla_validate_parse: 11 callbacks suppressed [ 396.497074][T25845] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.9335'. [ 396.507905][T25814] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 396.638193][T25262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.646481][T25262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.784197][T25860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9341'. [ 396.810468][T25860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9341'. [ 396.835142][T25862] netlink: 512 bytes leftover after parsing attributes in process `syz.1.9342'. [ 396.845027][T25860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9341'. [ 396.955980][T25860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9341'. [ 396.968044][T25860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9341'. [ 396.977579][T25860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9341'. [ 397.072594][T25870] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 397.079173][T25870] syzkaller1: Linktype set failed because interface is up [ 397.101909][T25262] syzkaller1: tun_net_xmit 90 [ 397.239527][T25881] ip6tnl3: entered promiscuous mode [ 397.311715][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9351'. [ 397.413576][T25892] team0: No ports can be present during mode change [ 397.437845][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.685029][T25272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.517833][ C1] net_ratelimit: 2 callbacks suppressed [ 399.517852][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.679442][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.768493][T26028] validate_nla: 2 callbacks suppressed [ 399.768599][T26028] netlink: 'syz.1.9406': attribute type 1 has an invalid length. [ 399.769731][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.803919][T26028] bond4: entered promiscuous mode [ 399.815230][T26028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 399.847913][T26028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 399.855020][T26028] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 399.865755][T26028] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 399.878096][T26028] bond4: (slave vti0): making interface the new active one [ 399.885421][T26028] vti0: entered promiscuous mode [ 399.892641][T26028] bond4: (slave vti0): Enslaving as an active interface with an up link [ 400.324928][T26037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9408'. [ 400.397597][T26041] netlink: 'syz.2.9410': attribute type 1 has an invalid length. [ 400.430612][T26041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.557780][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.872196][T26060] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 400.892324][T26060] bond5: (slave lo): Enslaving as an active interface with an up link [ 400.903850][T26060] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 401.424285][T26088] netlink: 'syz.3.9428': attribute type 12 has an invalid length. [ 401.432628][T26088] netlink: 'syz.3.9428': attribute type 29 has an invalid length. [ 401.443472][T26088] netlink: 'syz.3.9428': attribute type 2 has an invalid length. [ 401.568429][T26099] __nla_validate_parse: 6 callbacks suppressed [ 401.568451][T26099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9431'. [ 401.597772][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.028317][T26007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.638040][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.685235][T26147] netlink: 'syz.1.9454': attribute type 1 has an invalid length. [ 402.753041][T26151] bond5: (slave geneve3): making interface the new active one [ 402.761687][T26151] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 402.770858][ T80] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 20004 - 0 [ 402.779947][ T80] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 402.789264][ T80] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 402.799393][ T80] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 403.426675][T26191] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9471'. [ 403.677870][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.776402][T26202] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9476'. [ 404.129250][T26221] GUP no longer grows the stack in syz.0.9482 (26221): 200000003000-20000000a000 (200000001000) [ 404.160110][T26222] netlink: 240 bytes leftover after parsing attributes in process `syz.4.9481'. [ 404.161219][T26221] CPU: 1 UID: 0 PID: 26221 Comm: syz.0.9482 Not tainted syzkaller #0 PREEMPT(full) [ 404.161246][T26221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 404.161263][T26221] Call Trace: [ 404.161270][T26221] [ 404.161279][T26221] dump_stack_lvl+0xe8/0x150 [ 404.161312][T26221] __get_user_pages+0x2453/0x29d0 [ 404.161346][T26221] ? __lock_acquire+0x6b5/0x2cf0 [ 404.161389][T26221] ? __gup_longterm_locked+0xc4e/0x1630 [ 404.161418][T26221] ? down_read_killable+0x1bb/0x340 [ 404.161444][T26221] __gup_longterm_locked+0xdcf/0x1630 [ 404.161496][T26221] gup_fast_fallback+0x1d82/0x22e0 [ 404.161556][T26221] ? __pfx_gup_fast_fallback+0x10/0x10 [ 404.161601][T26221] ? futex_unqueue+0x22/0x240 [ 404.161624][T26221] ? futex_unqueue+0x22/0x240 [ 404.161646][T26221] ? is_valid_gup_args+0x11f/0x200 [ 404.161677][T26221] ? get_user_pages_fast+0x4d/0xb0 [ 404.161709][T26221] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 404.161740][T26221] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 404.161764][T26221] iov_iter_get_pages2+0x5e/0xa0 [ 404.161789][T26221] __se_sys_vmsplice+0x7b3/0x1490 [ 404.161827][T26221] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 404.161845][T26221] ? __pfx_futex_wait+0x10/0x10 [ 404.161884][T26221] ? lockdep_hardirqs_on+0x7a/0x110 [ 404.161963][T26221] do_syscall_64+0x14d/0xf80 [ 404.161988][T26221] ? trace_irq_disable+0x3b/0x150 [ 404.162005][T26221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.162025][T26221] ? clear_bhb_loop+0x40/0x90 [ 404.162048][T26221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.162072][T26221] RIP: 0033:0x7f0daf79c819 [ 404.162098][T26221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.162115][T26221] RSP: 002b:00007f0db05d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 404.162137][T26221] RAX: ffffffffffffffda RBX: 00007f0dafa15fa0 RCX: 00007f0daf79c819 [ 404.162152][T26221] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 404.162164][T26221] RBP: 00007f0daf832c91 R08: 0000000000000000 R09: 0000000000000000 [ 404.162177][T26221] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 404.162189][T26221] R13: 00007f0dafa16038 R14: 00007f0dafa15fa0 R15: 00007fff75aa2648 [ 404.162219][T26221] [ 404.617210][T26238] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 404.643788][T26238] bond5 (unregistering): Released all slaves [ 404.708130][T26243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9491'. [ 404.718057][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.904702][ T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3c [ 405.373032][T26288] netlink: 'syz.3.9507': attribute type 12 has an invalid length. [ 405.493070][T26287] syzkaller0: entered promiscuous mode [ 405.514061][T26287] syzkaller0: entered allmulticast mode [ 405.615662][T26250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.757899][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.807825][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.343150][T26331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9521'. [ 407.401791][T26331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9521'. [ 407.413788][T26336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9523'. [ 407.424935][T26336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9523'. [ 407.837876][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 408.061013][T26357] veth1_to_bond: entered allmulticast mode [ 408.067186][T26361] veth1_to_bond: left allmulticast mode [ 408.261934][T26374] netlink: 'syz.0.9535': attribute type 10 has an invalid length. [ 408.295173][T26374] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.9535'. [ 408.730794][T26387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9541'. [ 408.877885][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 409.432974][T26418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9550'. [ 409.557040][T26429] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9556'. [ 409.649668][T26433] syzkaller0: entered allmulticast mode [ 409.859793][T26446] policy can only be matched on NF_INET_PRE_ROUTING [ 409.859818][T26446] unable to load match [ 409.917917][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 410.320663][T26481] netlink: 'syz.4.9578': attribute type 1 has an invalid length. [ 410.329106][T26481] netlink: 'syz.4.9578': attribute type 4 has an invalid length. [ 410.337436][T26481] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9578'. [ 410.595968][T26491] netlink: 'syz.4.9582': attribute type 1 has an invalid length. [ 410.703281][T26493] bond5: (slave geneve4): making interface the new active one [ 410.740425][T26493] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 410.759907][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 410.768781][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 410.780690][T26454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.795706][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 410.829378][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 410.963702][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 411.164482][T26503] netlink: 'syz.3.9585': attribute type 3 has an invalid length. [ 411.583403][T26535] netlink: 'syz.4.9601': attribute type 1 has an invalid length. [ 411.682020][T26544] bond6: (slave gretap4): making interface the new active one [ 411.690435][T26544] bond6: (slave gretap4): Enslaving as an active interface with an up link [ 411.843419][T26552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9604'. [ 411.997896][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.173396][T26570] syzkaller1: entered promiscuous mode [ 412.192281][T26570] syzkaller1: entered allmulticast mode [ 412.635786][T26597] __nla_validate_parse: 4 callbacks suppressed [ 412.635807][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9624'. [ 412.688647][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9624'. [ 412.785173][T26602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9625'. [ 413.037833][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 413.117970][ C1] bridge0: port 3(gretap0) entered forwarding state [ 413.124640][ C1] bridge0: topology change detected, propagating [ 413.131412][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.138665][ C1] bridge0: topology change detected, propagating [ 413.298091][ T5878] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 413.678863][T26637] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.9642'. [ 413.716306][T26640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9643'. [ 413.737150][ T561] netdevsim netdevsim1 : set [0, 1] type 1 family 0 port 8472 - 0 [ 413.745909][T26640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9643'. [ 413.755151][ T561] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 413.772412][ T561] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 413.792417][ T561] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 414.077896][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 414.106757][ T5828] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 414.123226][T26662] netlink: 'syz.3.9653': attribute type 26 has an invalid length. [ 414.133346][T26662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9653'. [ 414.146721][T26662] netlink: 'syz.3.9653': attribute type 26 has an invalid length. [ 414.188057][T26662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9653'. [ 414.235967][T26667] syzkaller1: entered promiscuous mode [ 414.253658][T26667] syzkaller1: entered allmulticast mode [ 414.264793][T26664] clip:clip_setentry: non-CLIP VCC [ 414.905430][T26703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9667'. [ 414.928658][T26703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9667'. [ 415.006708][T26699] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 415.117848][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 415.152381][T26717] lo: Caught tx_queue_len zero misconfig [ 415.263939][T26721] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 415.542855][T26740] sock: sock_set_timeout: `syz.2.9681' (pid 26740) tries to set negative timeout [ 416.167874][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 416.494040][T26783] netlink: 'syz.4.9695': attribute type 11 has an invalid length. [ 416.502637][T26783] netlink: 'syz.4.9695': attribute type 4 has an invalid length. [ 416.539524][T26783] netlink: 'syz.4.9695': attribute type 5 has an invalid length. [ 416.584472][T26783] netlink: 'syz.4.9695': attribute type 6 has an invalid length. [ 417.102451][T26822] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 417.197788][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 418.238962][T26872] syzkaller1: entered promiscuous mode [ 418.247866][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 418.265571][T26872] syzkaller1: entered allmulticast mode [ 418.790984][T26860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.062130][T26906] netlink: 'syz.1.9745': attribute type 1 has an invalid length. [ 419.153302][T26906] bond6: (slave gretap1): making interface the new active one [ 419.162248][T26906] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 419.206491][T26913] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 419.277944][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 419.459939][T26931] syzkaller1: entered promiscuous mode [ 419.477194][T26931] syzkaller1: entered allmulticast mode [ 419.612509][T26942] ip6gre1: entered promiscuous mode [ 419.640978][T26942] ip6gre1: entered allmulticast mode [ 419.778866][T26952] netlink: 'syz.1.9766': attribute type 1 has an invalid length. [ 419.855188][T26961] __nla_validate_parse: 11 callbacks suppressed [ 419.855207][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9770'. [ 419.871070][T26958] bond7: (slave ip6gretap2): making interface the new active one [ 419.880461][T26958] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 419.889552][T26958] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 419.897399][T26958] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 419.914009][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9770'. [ 420.128837][T26975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.209112][T26980] syzkaller1: entered promiscuous mode [ 420.214769][T26980] syzkaller1: entered allmulticast mode [ 420.327861][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 421.038464][T26982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.367823][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 421.892384][T27013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9790'. [ 421.915705][T27015] netlink: 'syz.1.9791': attribute type 1 has an invalid length. [ 421.948938][T27015] 8021q: adding VLAN 0 to HW filter on device bond8 [ 422.063485][T27021] bond8: (slave gretap2): making interface the new active one [ 422.073124][T27021] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 422.335989][T27038] netlink: 'syz.4.9802': attribute type 16 has an invalid length. [ 422.351241][T27038] netlink: 'syz.4.9802': attribute type 17 has an invalid length. [ 422.397883][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 422.414599][T27038] erspan0: left promiscuous mode [ 422.498511][T27038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.506808][T27038] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.532471][T27038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.162669][T27083] netlink: 'syz.0.9818': attribute type 39 has an invalid length. [ 423.437860][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 423.478753][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9824'. [ 423.745394][T27116] netlink: 'syz.3.9831': attribute type 1 has an invalid length. [ 423.784173][T27116] 8021q: adding VLAN 0 to HW filter on device bond6 [ 423.830048][T27116] veth0_to_bond: left allmulticast mode [ 423.859852][T27116] bond6: (slave veth0_to_bond): making interface the new active one [ 423.869472][T27116] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 423.893148][T27116] bond6: entered promiscuous mode [ 423.899052][T27116] veth0_to_bond: entered promiscuous mode [ 423.905085][T27116] bond6: entered allmulticast mode [ 423.910969][T27116] veth0_to_bond: entered allmulticast mode [ 424.016384][T27127] netlink: 'syz.3.9834': attribute type 4 has an invalid length. [ 424.032271][T27127] netlink: 'syz.3.9834': attribute type 4 has an invalid length. [ 424.090489][T27129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9835'. [ 424.097316][T27131] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2936669556/2936669558 [ 424.204978][T27133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9837'. [ 424.241782][T27135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9838'. [ 424.259556][T27135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9838'. [ 424.342457][T27140] syzkaller1: entered promiscuous mode [ 424.352001][T27140] syzkaller1: entered allmulticast mode [ 424.420938][T27145] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.465872][T27145] bridge_slave_0 (unregistering): left allmulticast mode [ 424.477859][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 424.491288][T27145] bridge_slave_0 (unregistering): left promiscuous mode [ 424.499635][T27145] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.561761][T27156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9844'. [ 425.111985][T27177] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.9853'. [ 425.266968][T27183] syzkaller1: entered promiscuous mode [ 425.276429][T27183] syzkaller1: entered allmulticast mode [ 425.292155][T27193] netlink: 'syz.0.9859': attribute type 4 has an invalid length. [ 425.332758][T27193] netlink: 'syz.0.9859': attribute type 4 has an invalid length. [ 425.336692][T27195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9860'. [ 425.342581][T27196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9861'. [ 425.517782][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 425.757204][T27218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9872'. [ 426.133045][T27239] netlink: 'syz.2.9880': attribute type 1 has an invalid length. [ 426.139193][T27240] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9879'. [ 426.240562][T27239] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.291621][T27241] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 426.349481][ T49] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 426.494746][T27247] bond3: entered promiscuous mode [ 426.500450][ T80] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 426.512168][T27247] 8021q: adding VLAN 0 to HW filter on device bond3 [ 426.557887][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.569108][T27249] bond9: entered promiscuous mode [ 426.575501][T27249] 8021q: adding VLAN 0 to HW filter on device bond9 [ 426.653215][T27257] bond9: (slave bridge4): making interface the new active one [ 426.705978][T27257] bridge4: entered promiscuous mode [ 426.730904][T27270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9887'. [ 426.740729][T27257] bridge4: left promiscuous mode [ 426.783488][T27275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9887'. [ 427.597787][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 427.714545][T27307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.816897][T27310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9902'. [ 427.852157][T27316] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9899'. [ 427.906817][T27320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9903'. [ 428.221823][T27333] validate_nla: 2 callbacks suppressed [ 428.221842][T27333] netlink: 'syz.0.9909': attribute type 30 has an invalid length. [ 428.343396][T27340] syzkaller1: entered promiscuous mode [ 428.353005][T27340] syzkaller1: entered allmulticast mode [ 428.637871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 428.836256][T27360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.847080][T27360] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 428.865974][T27360] team0: Failed to send options change via netlink (err -105) [ 428.880354][T27360] team0: Port device batadv0 added [ 429.055227][T27365] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.171605][T27372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.177695][ C1] hrtimer: interrupt took 481438 ns [ 429.687810][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 430.727835][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 430.825247][T27312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.973730][T27393] __nla_validate_parse: 5 callbacks suppressed [ 430.973751][T27393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9929'. [ 431.138839][T27395] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9930'. [ 431.267496][T27414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9935'. [ 431.757866][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 432.797880][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 432.965277][T27445] bridge0: port 3(dummy0) entered disabled state [ 432.971882][T27445] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.995313][T27464] netlink: 'syz.4.9949': attribute type 1 has an invalid length. [ 433.679132][T27445] veth1_vlan: left allmulticast mode [ 433.837792][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 433.867032][T27464] 8021q: adding VLAN 0 to HW filter on device bond7 [ 433.928613][T27479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9951'. [ 434.004023][T27469] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 434.039743][ T80] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.061672][ T80] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.105113][ T80] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.135457][ T80] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.166676][ T80] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.188750][ T80] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.229407][ T80] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.266426][ T80] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.361819][T27496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9958'. [ 434.709948][T27475] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 434.880301][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 434.929626][T27506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9962'. [ 435.196222][T27524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9969'. [ 435.268818][T27528] netlink: 'syz.0.9971': attribute type 29 has an invalid length. [ 435.274337][T27530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9972'. [ 435.282752][T27528] netlink: 'syz.0.9971': attribute type 29 has an invalid length. [ 435.300473][T27528] netlink: 'syz.0.9971': attribute type 32 has an invalid length. [ 435.318384][T27528] netlink: 500 bytes leftover after parsing attributes in process `syz.0.9971'. [ 435.324441][T27530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9972'. [ 435.648389][T27548] l2tp_ppp: sess 2/0: no socket in recv [ 435.917881][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 435.946323][T27581] syzkaller1: entered promiscuous mode [ 435.961011][T27581] syzkaller1: entered allmulticast mode [ 436.094184][T27591] sctp: [Deprecated]: syz.0.9995 (pid 27591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.094184][T27591] Use struct sctp_sack_info instead [ 436.425239][T27605] __nla_validate_parse: 1 callbacks suppressed [ 436.425253][T27605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10000'. [ 436.494666][T27608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10002'. [ 436.496028][T27550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.957870][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 437.997798][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 438.288984][T27642] lec:lec_atm_close: lec0: Shut down! [ 439.037765][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 439.188012][ T5966] lec:lec_start_xmit: lec0:No lecd attached [ 439.815507][T27732] tipc: Can't bind to reserved service type 1 [ 440.004449][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.013028][T27740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10039'. [ 440.077893][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 440.603654][T27755] syzkaller0: entered promiscuous mode [ 440.644602][T27755] syzkaller0: entered allmulticast mode [ 440.650820][T27758] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 440.906838][T27763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10046'. [ 441.117862][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 441.178872][T27774] nbd2: detected capacity change from 0 to 127 [ 441.192091][ T51] block nbd2: Receive control failed (result -32) [ 441.202002][T27556] block nbd2: Dead connection, failed to find a fallback [ 441.248744][T27556] block nbd2: shutting down sockets [ 441.253988][T27556] blk_print_req_error: 138 callbacks suppressed [ 441.254004][T27556] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.343067][T27556] buffer_io_error: 138 callbacks suppressed [ 441.343085][T27556] Buffer I/O error on dev nbd2, logical block 0, async page read [ 441.382470][T27556] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.428701][T27556] Buffer I/O error on dev nbd2, logical block 1, async page read [ 441.457291][T27556] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.483393][T27556] Buffer I/O error on dev nbd2, logical block 2, async page read [ 441.501699][T27556] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.527470][T27556] Buffer I/O error on dev nbd2, logical block 3, async page read [ 441.547256][T27556] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.580148][T27556] Buffer I/O error on dev nbd2, logical block 0, async page read [ 441.608145][T27556] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.647160][T27556] Buffer I/O error on dev nbd2, logical block 1, async page read [ 441.666855][T27556] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.688378][T27556] Buffer I/O error on dev nbd2, logical block 2, async page read [ 441.706815][T27556] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.727211][T27556] Buffer I/O error on dev nbd2, logical block 3, async page read [ 441.745677][T27556] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.766554][T27556] Buffer I/O error on dev nbd2, logical block 0, async page read [ 441.784731][T27556] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.805021][T27556] Buffer I/O error on dev nbd2, logical block 1, async page read [ 441.824076][T27556] ldm_validate_partition_table(): Disk read failed. [ 441.839042][T27556] Dev nbd2: unable to read RDB block 0 [ 441.848683][T27556] nbd2: unable to read partition table [ 441.885461][T27556] ldm_validate_partition_table(): Disk read failed. [ 441.898896][T27556] Dev nbd2: unable to read RDB block 0 [ 441.915214][T27556] nbd2: unable to read partition table [ 442.158123][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 442.237623][T27809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10062'. [ 442.433665][T27820] syzkaller0: entered promiscuous mode [ 442.439474][T27820] syzkaller0: entered allmulticast mode [ 442.477139][T27822] netlink: 'syz.0.10067': attribute type 1 has an invalid length. [ 442.523446][T27822] bond4: entered promiscuous mode [ 442.531343][T27822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 442.551657][T27822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10067'. [ 442.561406][T27822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10067'. [ 442.598319][T27822] bond4: (slave bridge4): making interface the new active one [ 442.606047][T27822] bridge4: entered promiscuous mode [ 442.614361][T27822] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 442.791038][T27835] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10072'. [ 443.197893][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 443.260498][T27857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10078'. [ 443.285433][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10081'. [ 443.299158][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10081'. [ 443.329066][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10080'. [ 443.353197][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10080'. [ 444.238328][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 444.761948][T27878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10086'. [ 444.877771][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5690 ms [ 444.887001][ C0] lec:lec_tx_timeout: lec0 [ 444.891899][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 445.139493][T27802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.221242][T27895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.277844][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 446.317863][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 446.402621][T27933] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 446.414816][T27933] bond7 (unregistering): Released all slaves [ 446.432593][T27940] netlink: 'syz.2.10109': attribute type 30 has an invalid length. [ 446.629556][T27952] vlan3: entered allmulticast mode [ 446.639788][T27952] hsr0: entered allmulticast mode [ 446.644852][T27952] hsr_slave_0: entered allmulticast mode [ 446.658381][T27952] hsr_slave_1: entered allmulticast mode [ 447.249246][T27988] bond6: entered promiscuous mode [ 447.261967][T27988] macvlan3: entered promiscuous mode [ 447.267364][T27988] macvlan3: entered allmulticast mode [ 447.274165][T27988] bond6: (slave macvlan3): Opening slave failed [ 447.357792][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 447.386862][T27996] __nla_validate_parse: 4 callbacks suppressed [ 447.386880][T27996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10132'. [ 447.441324][T27998] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10133'. [ 447.517160][T28002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10135'. [ 447.527342][T28002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10135'. [ 448.096037][T27886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.149155][T28010] tipc: Enabled bearer , priority 0 [ 448.158184][T28010] +: renamed from syzkaller0 [ 448.192127][T28010] tipc: Disabling bearer [ 448.397822][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 448.717845][T28045] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 448.899263][T28052] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 449.163393][T28024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.437649][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10156'. [ 449.446751][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 449.483843][T28062] infiniband sy1: set down [ 449.488816][T28062] infiniband sy1: added bond0 [ 449.543859][T28062] RDS/IB: sy1: added [ 449.549499][T28073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10157'. [ 449.559194][T28062] smc: adding ib device sy1 with port count 1 [ 449.587877][T28062] smc: ib device sy1 port 1 has no pnetid [ 449.908055][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 449.916136][ C0] lec:lec_tx_timeout: lec0 [ 449.921321][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 449.963411][T28087] syzkaller1: entered promiscuous mode [ 449.983474][T28087] syzkaller1: entered allmulticast mode [ 450.477867][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 451.324561][T28128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10176'. [ 451.501204][T28139] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10179'. [ 451.518133][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 451.920483][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10186'. [ 452.017108][T28160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.253753][T28174] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 452.383757][T28176] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 452.504103][T28176] syzkaller0: entered promiscuous mode [ 452.522554][T28176] syzkaller0: entered allmulticast mode [ 452.557913][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 453.042418][T28200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 453.607879][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 454.043757][T28211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10200'. [ 454.282318][ T49] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 454.474392][T28221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10203'. [ 454.637940][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 454.927788][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 454.935859][ C0] lec:lec_tx_timeout: lec0 [ 454.940479][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 455.663751][T28262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10219'. [ 455.677902][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 455.864455][T28270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10223'. [ 455.894150][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca [ 455.909275][T28273] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 455.954214][T28275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10223'. [ 456.427643][T28304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10233'. [ 456.717818][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 457.757766][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 458.211520][T28321] netlink: 'syz.1.10239': attribute type 1 has an invalid length. [ 458.801027][T28265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.809880][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 459.219855][T28356] syzkaller0: entered promiscuous mode [ 459.235772][T28356] syzkaller0: entered allmulticast mode [ 459.389834][T28367] syzkaller1: entered promiscuous mode [ 459.399468][T28367] syzkaller1: entered allmulticast mode [ 459.674273][T28383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10261'. [ 459.769365][T28389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10263'. [ 459.838181][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 459.947784][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 459.955814][ C0] lec:lec_tx_timeout: lec0 [ 459.961294][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 459.982302][T28397] tipc: Enabled bearer , priority 0 [ 460.096367][T28397] syzkaller0: entered promiscuous mode [ 460.118854][T28397] syzkaller0: entered allmulticast mode [ 460.125148][T28397] tipc: Resetting bearer [ 460.205941][T28403] syzkaller0: entered promiscuous mode [ 460.214106][T28403] syzkaller0: entered allmulticast mode [ 460.223809][T28395] tipc: Resetting bearer [ 460.497661][T28419] tipc: Failed to remove unknown binding: 66,0,0/2886997057:1846314813/1846314814 [ 460.508440][T28419] tipc: Failed to remove unknown binding: 66,0,0/2886997057:1846314813/1846314814 [ 460.713890][T28425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10273'. [ 460.879327][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 461.628630][T28395] tipc: Disabling bearer [ 461.808241][T28430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10274'. [ 461.908463][T28441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10278'. [ 461.917848][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 462.019740][T28448] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10280'. [ 462.085194][T28451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10282'. [ 462.301149][T28465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10286'. [ 462.360183][T28470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10288'. [ 462.481074][T28465] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10286'. [ 462.602249][T28484] netlink: 'syz.0.10292': attribute type 1 has an invalid length. [ 462.832831][T28496] netlink: 'syz.1.10293': attribute type 2 has an invalid length. [ 462.957864][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 463.233660][T28519] syzkaller1: entered promiscuous mode [ 463.239490][T28519] syzkaller1: entered allmulticast mode [ 463.952246][T28543] dvmrp0: entered allmulticast mode [ 463.997800][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 464.354774][T28561] tipc: Enabled bearer , priority 0 [ 464.474104][T28561] syzkaller0: entered promiscuous mode [ 464.498766][T28561] syzkaller0: entered allmulticast mode [ 464.505092][T28561] tipc: Resetting bearer [ 464.968282][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 464.976381][ C0] lec:lec_tx_timeout: lec0 [ 464.982736][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 465.041083][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 465.067529][T28559] tipc: Resetting bearer [ 466.079141][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 466.972677][T28559] tipc: Disabling bearer [ 466.993508][ T5966] tipc: Node number set to 2886997007 [ 467.117780][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 467.586047][T28676] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3709829783/3709829784 [ 467.606570][T28676] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3709829783/3709829784 [ 468.158110][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 468.292082][T28714] __nla_validate_parse: 5 callbacks suppressed [ 468.292111][T28714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10331'. [ 468.344621][T28718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10332'. [ 468.383657][T28714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10331'. [ 468.502744][T28725] tipc: Failed to remove unknown binding: 66,0,0/0:1049516164/1049516165 [ 468.560138][T28725] tipc: Failed to remove unknown binding: 66,0,0/0:1049516164/1049516165 [ 469.049367][T28758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10346'. [ 469.197866][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 469.997805][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 470.005903][ C0] lec:lec_tx_timeout: lec0 [ 470.011051][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 470.226888][T28800] syzkaller0: entered promiscuous mode [ 470.239084][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 470.253890][T28800] syzkaller0: entered allmulticast mode [ 471.277894][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 471.533214][T28849] netlink: 'syz.4.10365': attribute type 3 has an invalid length. [ 471.555967][T28849] netlink: 'syz.4.10365': attribute type 3 has an invalid length. [ 471.701478][T28857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 471.925012][T28868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10372'. [ 472.197160][T28876] syzkaller1: entered promiscuous mode [ 472.213898][T28876] syzkaller1: entered allmulticast mode [ 472.279710][T28879] syzkaller0: entered promiscuous mode [ 472.285499][T28879] syzkaller0: entered allmulticast mode [ 472.317851][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 472.523659][T28888] IPVS: sync thread started: state = MASTER, mcast_ifn = netdevsim0, syncid = 2, id = 0 [ 472.690392][T28896] syzkaller0: entered promiscuous mode [ 472.699951][T28896] syzkaller0: entered allmulticast mode [ 472.751392][T28885] infiniband syz0: set down [ 472.756011][T28885] infiniband syz0: added veth0_vlan [ 472.776224][T28899] syzkaller0: entered promiscuous mode [ 472.782249][T28899] syzkaller0: entered allmulticast mode [ 472.805894][T28885] RDS/IB: syz0: added [ 472.811550][T28885] smc: adding ib device syz0 with port count 1 [ 472.817930][T28885] smc: ib device syz0 port 1 has no pnetid [ 473.168862][T28913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10390'. [ 473.179105][T28913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10390'. [ 473.357881][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 473.688801][T28933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10398'. [ 473.740408][T28935] tipc: Started in network mode [ 473.745336][T28935] tipc: Node identity 42dd80e62b64, cluster identity 4711 [ 473.753060][T28935] tipc: Enabled bearer , priority 0 [ 473.814510][T28937] netlink: 'syz.0.10400': attribute type 1 has an invalid length. [ 473.847162][T28935] syzkaller0: entered promiscuous mode [ 473.853133][T28935] syzkaller0: entered allmulticast mode [ 473.860439][T28935] tipc: Resetting bearer [ 473.979567][T28939] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 473.998357][T28939] bond6: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 474.018756][T28939] bond6: (slave vxcan3): making interface the new active one [ 474.027011][T28939] bond6: (slave vxcan3): Enslaving as an active interface with an up link [ 474.045442][T28934] tipc: Resetting bearer [ 474.398267][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 475.021675][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 475.029703][ C0] lec:lec_tx_timeout: lec0 [ 475.034341][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 475.438036][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 475.660965][T28934] tipc: Disabling bearer [ 475.690651][T25283] tipc: Node number set to 1773764838 [ 475.880806][T28973] syzkaller0: entered promiscuous mode [ 475.886318][T28973] syzkaller0: entered allmulticast mode [ 476.488461][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 476.577118][T29006] syzkaller0: entered promiscuous mode [ 476.583575][T29006] syzkaller0: entered allmulticast mode [ 476.622506][T29003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10420'. [ 476.757220][T29014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10423'. [ 476.837325][T29018] syzkaller0: entered promiscuous mode [ 476.846600][T29018] syzkaller0: entered allmulticast mode [ 476.932442][T29020] macvtap2: entered promiscuous mode [ 476.938564][T29020] team0: entered promiscuous mode [ 476.943773][T29020] team_slave_0: entered promiscuous mode [ 476.949929][T29020] team_slave_1: entered promiscuous mode [ 476.956059][T29020] macvtap2: entered allmulticast mode [ 476.973569][T29020] team0: entered allmulticast mode [ 476.986891][T29020] team_slave_0: entered allmulticast mode [ 476.994934][T29020] team_slave_1: entered allmulticast mode [ 477.004343][T29020] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 477.262211][T29034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.282012][T29034] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.293353][T29034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.325255][T29033] syzkaller0: entered promiscuous mode [ 477.331737][T29033] syzkaller0: entered allmulticast mode [ 477.517881][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 477.580194][T29048] syzkaller0: entered promiscuous mode [ 477.585854][T29048] syzkaller0: entered allmulticast mode [ 477.687621][T29053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10440'. [ 477.688058][T29051] syzkaller0: entered promiscuous mode [ 477.702838][T29051] syzkaller0: entered allmulticast mode [ 477.734321][T29053] bond7: entered promiscuous mode [ 477.740364][T29053] 8021q: adding VLAN 0 to HW filter on device bond7 [ 477.859781][T29053] 8021q: adding VLAN 0 to HW filter on device bond7 [ 477.866855][T29053] bond7: (slave sit2): The slave device specified does not support setting the MAC address [ 477.879659][T29053] bond7: (slave sit2): Error -95 calling set_mac_address [ 477.894156][T29057] syzkaller0: entered promiscuous mode [ 477.900837][T29057] syzkaller0: entered allmulticast mode [ 477.978903][T29059] syzkaller0: entered promiscuous mode [ 477.994753][T29059] syzkaller0: entered allmulticast mode [ 478.053095][T29061] netlink: 'syz.3.10443': attribute type 1 has an invalid length. [ 478.120653][T29061] bond8: (slave bridge7): Enslaving as a backup interface with an up link [ 478.178934][T29061] macvlan0: entered promiscuous mode [ 478.184552][T29061] macvlan0: entered allmulticast mode [ 478.201035][T29061] bond8: entered promiscuous mode [ 478.206305][T29061] bridge7: entered promiscuous mode [ 478.213635][T29061] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 478.231973][T29061] bond8: left promiscuous mode [ 478.236932][T29061] bridge7: left promiscuous mode [ 478.311937][T29074] syzkaller1: entered promiscuous mode [ 478.320880][T29074] syzkaller1: entered allmulticast mode [ 478.557881][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 478.576107][T29090] netlink: 'syz.2.10451': attribute type 1 has an invalid length. [ 478.608121][T29093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10452'. [ 478.628747][T29090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 478.683805][T29090] bond7: (slave veth9): Enslaving as an active interface with a down link [ 478.716451][T29090] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 478.816515][T29090] bond7: (slave veth11): Enslaving as an active interface with a down link [ 478.835967][T29090] netlink: 'syz.2.10451': attribute type 1 has an invalid length. [ 478.844205][T29100] netlink: 'syz.3.10454': attribute type 1 has an invalid length. [ 478.854159][T29090] netlink: 'syz.2.10451': attribute type 2 has an invalid length. [ 478.903539][T29103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10454'. [ 478.931168][T29100] 8021q: adding VLAN 0 to HW filter on device bond9 [ 479.340379][T29103] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 479.354274][T29103] bond9: entered allmulticast mode [ 479.419518][T29100] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 479.597772][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 479.666368][T29130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10459'. [ 479.672903][T29131] syzkaller0: entered promiscuous mode [ 479.681349][T29131] syzkaller0: entered allmulticast mode [ 479.696299][T29126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10460'. [ 479.732183][ T51] block nbd3: Receive control failed (result -1) [ 479.974548][T29140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.050149][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 480.058255][ C0] lec:lec_tx_timeout: lec0 [ 480.063945][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 480.521834][T29144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10465'. [ 480.622626][T29144] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 480.637927][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 480.647328][T29144] macvlan2: entered promiscuous mode [ 480.653890][T29144] macvlan2: entered allmulticast mode [ 480.661175][T29144] bond10: entered promiscuous mode [ 480.666432][T29144] bridge7: entered promiscuous mode [ 480.672768][T29144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 480.680937][T29144] bond10: left promiscuous mode [ 480.685831][T29144] bridge7: left promiscuous mode [ 480.711176][T29154] syzkaller0: entered promiscuous mode [ 480.716730][T29154] syzkaller0: entered allmulticast mode [ 480.998085][T29170] syzkaller0: entered promiscuous mode [ 481.003729][T29170] syzkaller0: entered allmulticast mode [ 481.687915][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 482.624030][T29193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10478'. [ 482.672119][T29195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10479'. [ 482.698638][T29197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10480'. [ 482.717763][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 483.339926][T29221] syzkaller0: entered allmulticast mode [ 483.757783][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 483.780975][T29158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.062887][T29237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10490'. [ 484.798185][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 484.959377][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 484.959758][T29209] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 484.998294][T29209] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 485.027478][T29209] [ 485.029848][T29209] ====================================================== [ 485.036871][T29209] WARNING: possible circular locking dependency detected [ 485.043913][T29209] syzkaller #0 Not tainted [ 485.048331][T29209] ------------------------------------------------------ [ 485.055351][T29209] syz.0.10481/29209 is trying to acquire lock: [ 485.061494][T29209] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 485.072088][T29209] [ 485.072088][T29209] but task is already holding lock: [ 485.079448][T29209] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 485.089719][T29209] [ 485.089719][T29209] which lock already depends on the new lock. [ 485.089719][T29209] [ 485.100128][T29209] [ 485.100128][T29209] the existing dependency chain (in reverse order) is: [ 485.109139][T29209] [ 485.109139][T29209] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 485.117217][T29209] down_write+0x96/0x200 [ 485.122073][T29209] kernfs_add_one+0x41/0x5c0 [ 485.127186][T29209] kernfs_create_dir_ns+0xde/0x130 [ 485.132805][T29209] internal_create_group+0x425/0x1180 [ 485.138698][T29209] cpuhp_invoke_callback+0x445/0x860 [ 485.144499][T29209] cpuhp_issue_call+0x430/0x7a0 [ 485.149862][T29209] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 485.156445][T29209] __cpuhp_setup_state+0x3f/0x60 [ 485.161902][T29209] do_one_initcall+0x250/0x8d0 [ 485.167184][T29209] do_initcall_level+0x104/0x190 [ 485.172632][T29209] do_initcalls+0x59/0xa0 [ 485.177563][T29209] kernel_init_freeable+0x2a6/0x3e0 [ 485.183281][T29209] kernel_init+0x1d/0x1d0 [ 485.188121][T29209] ret_from_fork+0x51e/0xb90 [ 485.193313][T29209] ret_from_fork_asm+0x1a/0x30 [ 485.198592][T29209] [ 485.198592][T29209] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 485.206409][T29209] [ 485.206409][T29209] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 485.214156][T29209] cpus_read_lock+0x42/0x160 [ 485.219273][T29209] static_key_slow_inc+0x12/0x30 [ 485.224748][T29209] ipv6_flowlabel_opt+0x1b94/0x28e0 [ 485.230562][T29209] do_ipv6_setsockopt+0xda7/0x31c0 [ 485.236234][T29209] ipv6_setsockopt+0x59/0x170 [ 485.241520][T29209] rawv6_setsockopt+0x276/0x5f0 [ 485.246890][T29209] do_sock_setsockopt+0x17c/0x1b0 [ 485.252433][T29209] __x64_sys_setsockopt+0x13d/0x1b0 [ 485.258149][T29209] do_syscall_64+0x14d/0xf80 [ 485.263253][T29209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.269654][T29209] [ 485.269654][T29209] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 485.277378][T29209] lock_sock_nested+0x48/0x100 [ 485.282655][T29209] inet_shutdown+0x6a/0x390 [ 485.287770][T29209] nbd_mark_nsock_dead+0x2e9/0x560 [ 485.293397][T29209] recv_work+0x1c7f/0x1d90 [ 485.298335][T29209] process_scheduled_works+0xb6e/0x18c0 [ 485.304392][T29209] worker_thread+0xa53/0xfc0 [ 485.309494][T29209] kthread+0x388/0x470 [ 485.314077][T29209] ret_from_fork+0x51e/0xb90 [ 485.319179][T29209] ret_from_fork_asm+0x1a/0x30 [ 485.324458][T29209] [ 485.324458][T29209] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 485.332183][T29209] __mutex_lock+0x19f/0x1300 [ 485.337288][T29209] nbd_queue_rq+0x37b/0x1100 [ 485.342387][T29209] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 485.348469][T29209] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 485.355309][T29209] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 485.361802][T29209] blk_mq_run_hw_queue+0x348/0x4f0 [ 485.367440][T29209] blk_mq_dispatch_list+0xd16/0xe10 [ 485.373149][T29209] blk_mq_flush_plug_list+0x48d/0x570 [ 485.379034][T29209] __blk_flush_plug+0x3ed/0x4d0 [ 485.384403][T29209] __submit_bio+0x28d/0x580 [ 485.389427][T29209] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 485.395570][T29209] block_read_full_folio+0x599/0x830 [ 485.401369][T29209] filemap_read_folio+0x137/0x3b0 [ 485.406903][T29209] do_read_cache_folio+0x358/0x590 [ 485.412524][T29209] read_part_sector+0xb6/0x2b0 [ 485.417802][T29209] adfspart_check_ICS+0xa5/0xa40 [ 485.423257][T29209] bdev_disk_changed+0x7ba/0x1550 [ 485.428830][T29209] blkdev_get_whole+0x380/0x510 [ 485.434219][T29209] bdev_open+0x31e/0xd30 [ 485.438975][T29209] blkdev_open+0x470/0x610 [ 485.443907][T29209] do_dentry_open+0x785/0x14e0 [ 485.449187][T29209] vfs_open+0x3b/0x340 [ 485.453771][T29209] path_openat+0x2e08/0x3860 [ 485.458957][T29209] do_file_open+0x23e/0x4a0 [ 485.463971][T29209] do_sys_openat2+0x113/0x200 [ 485.469166][T29209] __x64_sys_openat+0x138/0x170 [ 485.474632][T29209] do_syscall_64+0x14d/0xf80 [ 485.479749][T29209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.486185][T29209] [ 485.486185][T29209] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 485.493492][T29209] __mutex_lock+0x19f/0x1300 [ 485.498661][T29209] nbd_queue_rq+0xc6/0x1100 [ 485.503771][T29209] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 485.509838][T29209] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 485.516684][T29209] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 485.523188][T29209] blk_mq_run_hw_queue+0x348/0x4f0 [ 485.528836][T29209] blk_mq_dispatch_list+0xd16/0xe10 [ 485.534569][T29209] blk_mq_flush_plug_list+0x48d/0x570 [ 485.540551][T29209] __blk_flush_plug+0x3ed/0x4d0 [ 485.545921][T29209] __submit_bio+0x28d/0x580 [ 485.550940][T29209] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 485.557087][T29209] block_read_full_folio+0x599/0x830 [ 485.562893][T29209] filemap_read_folio+0x137/0x3b0 [ 485.568444][T29209] do_read_cache_folio+0x358/0x590 [ 485.574257][T29209] read_part_sector+0xb6/0x2b0 [ 485.579549][T29209] adfspart_check_ICS+0xa5/0xa40 [ 485.585023][T29209] bdev_disk_changed+0x7ba/0x1550 [ 485.590572][T29209] blkdev_get_whole+0x380/0x510 [ 485.595999][T29209] bdev_open+0x31e/0xd30 [ 485.600773][T29209] blkdev_open+0x470/0x610 [ 485.605723][T29209] do_dentry_open+0x785/0x14e0 [ 485.611010][T29209] vfs_open+0x3b/0x340 [ 485.615612][T29209] path_openat+0x2e08/0x3860 [ 485.620715][T29209] do_file_open+0x23e/0x4a0 [ 485.625745][T29209] do_sys_openat2+0x113/0x200 [ 485.630947][T29209] __x64_sys_openat+0x138/0x170 [ 485.636361][T29209] do_syscall_64+0x14d/0xf80 [ 485.641471][T29209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.647880][T29209] [ 485.647880][T29209] -> #4 (set->srcu){.+.+}-{0:0}: [ 485.654994][T29209] __synchronize_srcu+0xca/0x300 [ 485.660445][T29209] elevator_switch+0x1e8/0x7a0 [ 485.665720][T29209] elevator_change+0x2cc/0x450 [ 485.670992][T29209] elevator_set_default+0x36c/0x430 [ 485.676800][T29209] blk_register_queue+0x366/0x430 [ 485.682361][T29209] __add_disk+0x677/0xd50 [ 485.687204][T29209] add_disk_fwnode+0xfb/0x480 [ 485.692394][T29209] nbd_dev_add+0x72c/0xb50 [ 485.697334][T29209] nbd_init+0x168/0x1f0 [ 485.701999][T29209] do_one_initcall+0x250/0x8d0 [ 485.707281][T29209] do_initcall_level+0x104/0x190 [ 485.712730][T29209] do_initcalls+0x59/0xa0 [ 485.717571][T29209] kernel_init_freeable+0x2a6/0x3e0 [ 485.723276][T29209] kernel_init+0x1d/0x1d0 [ 485.728122][T29209] ret_from_fork+0x51e/0xb90 [ 485.733242][T29209] ret_from_fork_asm+0x1a/0x30 [ 485.738524][T29209] [ 485.738524][T29209] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 485.746338][T29209] __mutex_lock+0x19f/0x1300 [ 485.751448][T29209] elevator_change+0x1b3/0x450 [ 485.756741][T29209] elevator_set_none+0xb5/0x140 [ 485.762196][T29209] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 485.768523][T29209] nbd_start_device+0x17f/0xb10 [ 485.773885][T29209] nbd_genl_connect+0x165b/0x1cf0 [ 485.779422][T29209] genl_family_rcv_msg_doit+0x22a/0x330 [ 485.785481][T29209] genl_rcv_msg+0x61c/0x7a0 [ 485.790497][T29209] netlink_rcv_skb+0x232/0x4b0 [ 485.795770][T29209] genl_rcv+0x28/0x40 [ 485.800281][T29209] netlink_unicast+0x80f/0x9b0 [ 485.805554][T29209] netlink_sendmsg+0x813/0xb40 [ 485.810826][T29209] ____sys_sendmsg+0x972/0x9f0 [ 485.816108][T29209] ___sys_sendmsg+0x2a5/0x360 [ 485.821295][T29209] __x64_sys_sendmsg+0x1bd/0x2a0 [ 485.826743][T29209] do_syscall_64+0x14d/0xf80 [ 485.831852][T29209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.838252][T29209] [ 485.838252][T29209] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 485.846850][T29209] blk_alloc_queue+0x546/0x680 [ 485.852215][T29209] __blk_mq_alloc_disk+0x197/0x390 [ 485.857845][T29209] nbd_dev_add+0x499/0xb50 [ 485.862770][T29209] nbd_init+0x168/0x1f0 [ 485.867437][T29209] do_one_initcall+0x250/0x8d0 [ 485.872718][T29209] do_initcall_level+0x104/0x190 [ 485.878223][T29209] do_initcalls+0x59/0xa0 [ 485.883072][T29209] kernel_init_freeable+0x2a6/0x3e0 [ 485.888962][T29209] kernel_init+0x1d/0x1d0 [ 485.894004][T29209] ret_from_fork+0x51e/0xb90 [ 485.899107][T29209] ret_from_fork_asm+0x1a/0x30 [ 485.904389][T29209] [ 485.904389][T29209] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 485.911596][T29209] fs_reclaim_acquire+0x71/0x100 [ 485.917047][T29209] kmem_cache_alloc_noprof+0x40/0x650 [ 485.922972][T29209] __kernfs_iattrs+0xdf/0x340 [ 485.928179][T29209] kernfs_iop_setattr+0xea/0x3f0 [ 485.933628][T29209] notify_change+0xc1a/0xf40 [ 485.938727][T29209] do_truncate+0x1c2/0x250 [ 485.943675][T29209] path_openat+0x2f89/0x3860 [ 485.948774][T29209] do_file_open+0x23e/0x4a0 [ 485.953872][T29209] do_sys_openat2+0x113/0x200 [ 485.959062][T29209] __x64_sys_openat+0x138/0x170 [ 485.964426][T29209] do_syscall_64+0x14d/0xf80 [ 485.969625][T29209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.976049][T29209] [ 485.976049][T29209] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 485.984643][T29209] __lock_acquire+0x15a5/0x2cf0 [ 485.990008][T29209] lock_acquire+0xf0/0x2e0 [ 485.994936][T29209] down_write+0x96/0x200 [ 485.999687][T29209] kernfs_unlink_sibling+0x71/0x180 [ 486.005396][T29209] __kernfs_remove+0x3e7/0x660 [ 486.010666][T29209] kernfs_remove_by_name_ns+0xaf/0x130 [ 486.016632][T29209] sysfs_unmerge_group+0xd4/0x140 [ 486.022172][T29209] dpm_sysfs_remove+0x76/0xd0 [ 486.027363][T29209] device_del+0x250/0x8f0 [ 486.032294][T29209] device_unregister+0x21/0xf0 [ 486.037581][T29209] hci_conn_del+0xc36/0x1230 [ 486.042679][T29209] hci_conn_hash_flush+0x191/0x260 [ 486.048322][T29209] hci_dev_close_sync+0x821/0x10e0 [ 486.053976][T29209] hci_dev_do_close+0x30/0xc0 [ 486.059162][T29209] hci_rfkill_set_block+0x1f4/0x290 [ 486.064867][T29209] rfkill_set_block+0x1a4/0x4e0 [ 486.070228][T29209] rfkill_fop_write+0x461/0x5a0 [ 486.075590][T29209] vfs_write+0x29a/0xb90 [ 486.077951][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6010 ms [ 486.080339][T29209] ksys_write+0x150/0x270 [ 486.088339][ C0] lec:lec_tx_timeout: lec0 [ 486.093137][T29209] do_syscall_64+0x14d/0xf80 [ 486.102627][T29209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.107785][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 486.109029][T29209] [ 486.109029][T29209] other info that might help us debug this: [ 486.109029][T29209] [ 486.109039][T29209] Chain exists of: [ 486.109039][T29209] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 486.109039][T29209] [ 486.139532][T29209] Possible unsafe locking scenario: [ 486.139532][T29209] [ 486.146963][T29209] CPU0 CPU1 [ 486.152314][T29209] ---- ---- [ 486.157762][T29209] lock(&root->kernfs_rwsem); [ 486.162523][T29209] lock(cpuhp_state_mutex); [ 486.169622][T29209] lock(&root->kernfs_rwsem); [ 486.176921][T29209] lock(&root->kernfs_iattr_rwsem); [ 486.182197][T29209] [ 486.182197][T29209] *** DEADLOCK *** [ 486.182197][T29209] [ 486.190323][T29209] 4 locks held by syz.0.10481/29209: [ 486.195591][T29209] #0: ffffffff8feeae08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x19a/0x5a0 [ 486.205692][T29209] #1: ffff88806cb20ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x28/0xc0 [ 486.215256][T29209] #2: ffff88806cb200c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 486.224905][T29209] #3: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 486.235599][T29209] [ 486.235599][T29209] stack backtrace: [ 486.241473][T29209] CPU: 1 UID: 0 PID: 29209 Comm: syz.0.10481 Not tainted syzkaller #0 PREEMPT(full) [ 486.241493][T29209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 486.241502][T29209] Call Trace: [ 486.241511][T29209] [ 486.241518][T29209] dump_stack_lvl+0xe8/0x150 [ 486.241541][T29209] print_circular_bug+0x2e1/0x300 [ 486.241566][T29209] check_noncircular+0x12e/0x150 [ 486.241591][T29209] __lock_acquire+0x15a5/0x2cf0 [ 486.241612][T29209] ? __lock_acquire+0x6b5/0x2cf0 [ 486.241635][T29209] lock_acquire+0xf0/0x2e0 [ 486.241653][T29209] ? kernfs_unlink_sibling+0x71/0x180 [ 486.241673][T29209] down_write+0x96/0x200 [ 486.241687][T29209] ? kernfs_unlink_sibling+0x71/0x180 [ 486.241703][T29209] ? __pfx_down_write+0x10/0x10 [ 486.241716][T29209] ? kernfs_root+0x1c/0x230 [ 486.241737][T29209] ? kernfs_root+0x1c/0x230 [ 486.241757][T29209] ? kernfs_root+0x1c/0x230 [ 486.241778][T29209] ? kernfs_root+0x1ea/0x230 [ 486.241799][T29209] kernfs_unlink_sibling+0x71/0x180 [ 486.241821][T29209] __kernfs_remove+0x3e7/0x660 [ 486.241837][T29209] kernfs_remove_by_name_ns+0xaf/0x130 [ 486.241854][T29209] sysfs_unmerge_group+0xd4/0x140 [ 486.241877][T29209] dpm_sysfs_remove+0x76/0xd0 [ 486.241900][T29209] device_del+0x250/0x8f0 [ 486.241919][T29209] ? klist_iter_exit+0xc1/0x100 [ 486.241941][T29209] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 486.241958][T29209] ? __pfx_device_del+0x10/0x10 [ 486.241978][T29209] ? __cancel_work+0x17f/0x230 [ 486.242000][T29209] ? lockdep_hardirqs_on+0x7a/0x110 [ 486.242022][T29209] device_unregister+0x21/0xf0 [ 486.242042][T29209] hci_conn_del+0xc36/0x1230 [ 486.242061][T29209] hci_conn_hash_flush+0x191/0x260 [ 486.242080][T29209] hci_dev_close_sync+0x821/0x10e0 [ 486.242099][T29209] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 486.242114][T29209] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.242132][T29209] hci_dev_do_close+0x30/0xc0 [ 486.242148][T29209] hci_rfkill_set_block+0x1f4/0x290 [ 486.242162][T29209] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 486.242177][T29209] rfkill_set_block+0x1a4/0x4e0 [ 486.242196][T29209] rfkill_fop_write+0x461/0x5a0 [ 486.242216][T29209] ? apparmor_file_permission+0x1f4/0x300 [ 486.242237][T29209] ? __pfx_rfkill_fop_write+0x10/0x10 [ 486.242256][T29209] ? security_file_permission+0x10/0x260 [ 486.242276][T29209] ? rw_verify_area+0x255/0x4d0 [ 486.242291][T29209] ? __pfx_rfkill_fop_write+0x10/0x10 [ 486.242311][T29209] vfs_write+0x29a/0xb90 [ 486.242330][T29209] ? __pfx_vfs_write+0x10/0x10 [ 486.242346][T29209] ? __fget_files+0x2a/0x420 [ 486.242360][T29209] ? __fget_files+0x2a/0x420 [ 486.242372][T29209] ? __fget_files+0x3a0/0x420 [ 486.242384][T29209] ? __fget_files+0x2a/0x420 [ 486.242400][T29209] ksys_write+0x150/0x270 [ 486.242417][T29209] ? __pfx_ksys_write+0x10/0x10 [ 486.242436][T29209] do_syscall_64+0x14d/0xf80 [ 486.242457][T29209] ? trace_irq_disable+0x3b/0x150 [ 486.242470][T29209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.242485][T29209] ? clear_bhb_loop+0x40/0x90 [ 486.242502][T29209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.242518][T29209] RIP: 0033:0x7f0daf79c819 [ 486.242533][T29209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.242548][T29209] RSP: 002b:00007f0db058e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.242564][T29209] RAX: ffffffffffffffda RBX: 00007f0dafa16180 RCX: 00007f0daf79c819 [ 486.242575][T29209] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 486.242585][T29209] RBP: 00007f0daf832c91 R08: 0000000000000000 R09: 0000000000000000 [ 486.242595][T29209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.242605][T29209] R13: 00007f0dafa16218 R14: 00007f0dafa16180 R15: 00007fff75aa2648 [ 486.242622][T29209] [ 486.611486][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 486.643550][T29209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 486.649769][T29209] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 486.680519][T29209] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 486.686520][T29209] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 486.695591][T29209] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 486.702317][T29209] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 487.677854][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 488.727867][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 489.767859][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 490.797939][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 491.837750][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 491.838040][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 491.845764][ C0] lec:lec_tx_timeout: lec0 [ 491.845974][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 492.877901][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 493.917901][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 494.958153][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available