last executing test programs: 2.903861025s ago: executing program 2 (id=5147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x6c, r2, 0x1, 0x70bd26, 0x0, {}, [@WGDEVICE_A_PEERS={0x44, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x6c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r3}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) close(r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8) (async) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xa}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4}, 0x94) r11 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000300)=r10, 0x4) 2.581119943s ago: executing program 2 (id=5149): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000003c0)={r7, 0xcb}, 0x8) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r3, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000001c0)={0x5, [0x8000, 0x0, 0x8000, 0xfff0, 0x603]}, 0xe) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500002c00000000014e24655800189078040000000000000086ddffff00a06a6eaa4785ed51990a310d2b96d9112e3202c14ff6600b5d01d07b05d2be50bab2159df64705dad866fd776deeff0e8c999ef340ff720969"], 0x3e) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f00000010c0)=""/4103, &(0x7f0000000000)=0x1007) 1.831355456s ago: executing program 3 (id=5160): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0xfe33) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620a88fa809fd90f08b329c4ff0010000000102200000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004094}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f00000051c0)=""/264, 0x108}, {&(0x7f0000002940)=""/202, 0xca}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/131, 0x83}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/139, 0x8b}, {&(0x7f0000004b80)=""/130, 0x82}, {&(0x7f0000004c40)=""/34, 0x22}], 0x8}, 0x9}], 0x1, 0x60, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000004c0)={r5, 0x1, 0x6, @remote}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) (async) recvfrom$l2tp6(r6, 0x0, 0xc00, 0x60, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r8) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="d50044c1929d8cd4fdaf342f45c971b9ef54cb790d901cc7eb2edc092d321ab82cbb9d0b2a1309f03b0b58317f4fa0fcfb005f623ff35fc4c1f418f39b68e35b28da626aa288af10299ac055419d9a64303bc2e82c6b0f370e34ae7b3171410d7047b1d04cd161e0990737279ecc66d77f4248a545823d97c9afbb36c45c03167c06c095368fd4a4a48c9b0f4b46"], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2150040}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b52ca8fba96b60cd786b2bb8e9c3a4dd3edab16ab6e826a2e55fe04eeb3bab324d69c1bdb5ba5f48a2abbcc6b7", @ANYRES16=r9, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0xc000}, 0x24000004) (async) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r10, 0x80086601, &(0x7f0000000540)) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000300)=""/149, &(0x7f0000000400)=0x95) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x28}, [@call={0x85, 0x0, 0x0, 0x46f}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES64=r11], 0xfdef) 1.710742107s ago: executing program 3 (id=5161): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x25dfdbff, {0x25}}, 0x14}}, 0x24004804) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x800}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xf7fffffb, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0, 0x8}, {0xd, 0xffe0}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="040000000100"], 0x50) r10 = socket(0x840000000002, 0x3, 0xff) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r7, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c810}, 0x71423b9ea0cf1bac) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r11) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x30, r12, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x60}, 0x20) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r11, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x2b8, r13, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0xec, 0x13, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [{0xb, 0x1, 'clsact\x00'}, {0xc, 0x1, 'ethtool\x00'}, {0xb, 0x1, 'clsact\x00'}, {0x8, 0x1, '{/\'$'}]}, {0x10, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xc, 0x1, 'ethtool\x00'}]}, {0x34, 0x0, 0x0, 0x1, [{0x7, 0x1, '\\)\\'}, {0x7, 0x1, '!-/'}, {0xc, 0x1, 'devlink\x00'}, {0xc, 0x1, 'ethtool\x00'}, {0x5, 0x1, '\x00'}]}, {0x64, 0x0, 0x0, 0x1, [{0x5, 0x1, ')'}, {0x5, 0x1, '\x00'}, {0xc, 0x1, 'ethtool\x00'}, {0xb, 0x1, '*^+#:(-'}, {0x8, 0x1, '%/:\\'}, {0xf, 0x1, '}{[^%&&\xc4\\]$'}, {0x8, 0x1, ')&-!'}, {0xb, 0x1, 'clsact\x00'}, {0xc, 0x1, 'nl80211\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x18, 0x13, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [{0x4}, {0xc, 0x1, 'nl80211\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_LLC_SDP={0xfc, 0x13, 0x0, 0x1, [{0x4}, {0x30, 0x0, 0x0, 0x1, [{0xa, 0x1, '**.]F#'}, {0xc, 0x1, 'ethtool\x00'}, {0x7, 0x1, '!-#'}, {0xc, 0x1, 'devlink\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xb, 0x1, '+,!-@-('}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '-#'}]}, {0x14, 0x0, 0x0, 0x1, [{0x5, 0x1, '\\'}, {0x6, 0x1, ').'}]}, {0x10, 0x0, 0x0, 0x1, [{0xc, 0x1, 'devlink\x00'}]}, {0x64, 0x0, 0x0, 0x1, [{0xc, 0x1, 'ethtool\x00'}, {0x4}, {0x5, 0x1, '\x00'}, {0x1e, 0x1, '!&$/{\\s&\xf6{/}{*#$^.%+):/$]%'}, {0xc, 0x1, 'devlink\x00'}, {0x5, 0x1, '}'}, {0xc, 0x1, 'devlink\x00'}, {0x7, 0x1, '/-['}]}, {0x20, 0x0, 0x0, 0x1, [{0x8, 0x1, '-!:+'}, {0xb, 0x1, 'clsact\x00'}, {0x6, 0x1, '\'['}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_LLC_SDP={0x7c, 0x13, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0xb, 0x1, 'clsact\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x5, 0x1, '#'}]}, {0x30, 0x0, 0x0, 0x1, [{0xc, 0x1, 'devlink\x00'}, {0x4}, {0xc, 0x1, 'devlink\x00'}, {0x7, 0x1, '+{^'}, {0x6, 0x1, '\x8e-'}]}]}]}, 0x2b8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xffe0, 0x1}, {0x6}, {0xffe0, 0xf}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2400000c}, 0x4040080) 1.519040385s ago: executing program 2 (id=5163): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000002000000400000004000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e6a606c3cf7f733fc67255c06bf6ca254f8fce24b5b8513c00000000200000000a000000000025bf9be0549ef0860823b95918091e286a07f5c9ec08afc6a578e7219509d390ba8b73e0ad650f076aec1cf17d73d0e1120b3dbf5d2a6ffbe5e800ff96fff76a90e6dd60e1bcb6e518169ce4c794ad83ea738ac9420b3964b874398eafd468706bb2a60b29b27c682d599a7f22e842f7cce2fdf2aef047e698e26b6e8e9737909b360be241be3e192c14554031858db3fe0f9f644f3b995f2ffb553bdb09f0538e59bb7fac2e16fbab83c7c1defce2122341278da3f3dde3462bff82e88c32"], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r3, 0x0, 0x0}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x465c13919b7775a7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x400003, @loopback, 0x2}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.426569267s ago: executing program 0 (id=5164): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}}, 0x18) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x3b68, 0x8, 0x6}, &(0x7f0000000500)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000540)={r5, 0xffff, 0x10}, 0x8) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000007c0)={r5, 0x7}, &(0x7f0000000800)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000840)={r7, 0xffff, 0xd4, 0x0, 0x4000, 0xfffff65f}, 0x14) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x1c8, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x70, 0xa0, 0x0, {0xff0f000000000000}}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) (rerun: 32) r9 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000000004000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf0dd467b592f868ee30ad5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b6d0e196bf02f46c7953ab1abda45cbe8d0d24b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e4fd8f36e15fdd97870f2bdf4000000000000b0c2940dd8e263aa743f0400000000000000b100400600e1ffff8816326d7d25c32aac1c5d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9d6da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347903420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b1cbf698fce63a4fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0000000008919b3efce02a602b4ad38098774d1feaf5f277a4462a2fff2d6ff4780f9a30a2a5f5f284c00ad35e0a6f6a0f9dae214546d24ff6a9b8ced90b508dc3b55a8259614b731af86503e5849dc87ab86ec0f6a48f0d32f0d4a5f6a03c33600000bb44f2d80363dee9163424ac31469266877942abdbbb3729fd59c0ff048ed3fb58c81b76100aeaa4619668a2c4ef4e159d4594396864965422fe5f8c8181309becc88091dd6641c2d7e5a68ecbe778f2aae1742b92dc6854de98da66f8e38d1eca95809b738c8ddcf4cf1693cf61c2ae0a9c27bd1a6f1e72550fbb1f1543a9bcd48de44e837db44e2be1c364f1cdb53a1ed4169434fc8f705e262fb793cf25bcd60310991f0b0634fa08308c7105e2378d42eb22e035a88305f8342834cba801f76f820ed6def799116ce2336cd308544fbd3b74e0600968fce3c425729a77e3d089356654680e715f4ce5c1a39e4a63d8a67d6dbe1d3c26affdb25cbe15923f62849392cf4fb0327877e22a4dc617a5541a7fb89223888c76d65850dd99997e727557a477a1131d06f6f7360cfcf137ccd2e0d516bb31be411b0c7bd1bd24d3dc2d8e3f4cdfa872b66d89332e313934e9e9a3471f7170832a753bb2a8e4aa6321b1a6546a56e4121231380b04eb55337c7edc66d6e3400b06fcb31b659be19cff61cfac6f1b771967a60efb51c206ea0cbab9bef181cc917fca894189514e85d6e1d9249f8caa701b4357ae5b9117225d1f5ca89a4bb7d49086ea61948926db5132f2e29bf45a1429c19ba1adc457e2963d1474d85aeb3cca158e3fd4b7a05250ceafd44f46af924916ce9ce9a8881aad996ddaaf3fbd52e636367e9f90ab1c773fa96e538e7f87a21206a804524e1dc9fea9772b009bc49a8d787a90e78badf58e37b3cf6f64861d416e859994e4deca6f39551e73c7e332de66be92ecb94e63ecbc07f8f799536be0da90fa824b3f4965caa19b5556907746aec5db9fea5e5e69de3bd13a70c1374683a0e63ff6f6f51136d16e04bbd8ba0c96e0b562f5425614d80de6ba5e901587bb5c1f83382aab6efcccef90fdbebcc4ffed3af40365583fb800cf5ec6496a2a47f2217c7160f88b192ddec89558140447ec86726db3bfe9d22390085b1638f9ebf3219b426dcb69ff80f5b5be82803555c8421c17c9d39f9c1de9e8e7dedf826b00fd8860046e36f790e8e6796db3b778ff4f0fc2b79a5ca96ff3907452ed76bc5e63218ea96866ae2b265ab11206301bfb909a7fd77653c73b6d46a242864f839e5646cc5ada07fba0d9cf6f840179c34de5e9aa58d5b1ca5327dc945267524b8c363b7f847491b5939cf608927c797af1300"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r12, 0xffff0002, 0xe, 0x0, &(0x7f00000000c0)="2b206d074843b397737ea49da2aa", 0x0, 0xeffc, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="480000003000090000007cab6e49147c30309479885c75f5fcd72334cb4e6af3492556c27c0c9d4b9b84bf5f4a9cdea54b5d035cedcb0411bb41da629df6a64a2053e5ff2413787f1451aeaae925305913366db96ff0f8c717316d6f9bde180f83cf4ad285d3f64a36c0b2ce6279dc5972ec4a44aad4988fbfb64a92acac9ee561261e4a7f5fc6c1021d9a66bed8dcbca447f1ec262037c8ed382cb93d7f6355393e9db0630b7a34e56ad89f0170cae40c6d0acb6d2e331b0f6afb607b6b27d74cd75cb952aa6529d838f14546abc1a92bf632b74f7e0644bcb20b8007246199e2f7a4280f782f031762", @ANYBLOB="2e66de26c93b47c95ff83efb252c46add82b151876f892a1159aff44ae182a2d8553d9399cec0d1edcf99bdc7879f05bc0dafd04f53667c3527e8356adc7a624b8706c7c42c79fd74acec22e51714483f3a77bb87e929ab8a67e800780a7c4ce342731392ee6cafdd1aa58edaae25f0910f7d433983d483990289e2d67be9f66e28308", @ANYBLOB="9e6b03000000000014000300657273e1bf001a80100002800c00018008001400011e68d5786b813cd519ade565f95ffe964d0f4f253ec8eed36f933c7bd56c995c46bf23ef6c0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000884}, 0x20044010) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async, rerun: 64) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async, rerun: 32) r13 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="200000004100070130bd7000fedbdf25027c000004002d800800018004001f8073383457af1f6380c17e5ad418ff6f596b5d161ffdb03dbdd11da4e534a5a4c9e3a0159ffd16f15e4138b1e285306cd15785b5fff9a85b9abd143a083811a23792b6648c6dfa6575f4a044a81e85"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x5c, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x100}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0xaa}}, @filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x5c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc0) (async) r15 = socket$kcm(0x10, 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000880)) (async) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) (async, rerun: 64) sendmsg$kcm(r15, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x4040000) (rerun: 64) 1.419110309s ago: executing program 0 (id=5165): r0 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1, 0x0, 0xc00}, 0x80) r5 = socket$kcm(0x1e, 0x4, 0x0) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000400000006000000aa0b000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\n\x00'/28], 0x48) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r2}, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') ioctl$NS_GET_USERNS(r10, 0xb701, 0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) write$nci(r6, &(0x7f0000008a80)=ANY=[@ANYBLOB="7105080002010603080cdd0481deb6785dc40109047f0903"], 0xa3) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'hsr0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}}, 0x0) 1.387982133s ago: executing program 2 (id=5166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0201f15ac58cf2000001"], 0x48) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.swap.events\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='memory.swap.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r3) (async) close(r3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x8, 0x4) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) 1.322616393s ago: executing program 3 (id=5167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "210019", 0xc8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @dev, [{0x2, 0x14, "002b228078c8e10a87cf10a0e37bbe3522e2a0d5812008b645088f2672636368285a5538b713f5ab1d5b71e89a6c3f0890a2bdec87949dbe3e6283e5dee7833bd36cf9eb41d293a9dbc1a8096375d96f244eda9dd1b1435ac7241701e58e05d46b50b0a12c58673757640be944806693a698a9bba6018624eefa98f28e3cfee5d951fcf227c6c8d55d58fcee8d57c51500dfdc5ec9179e731fd90ef87a45"}]}}}}}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x13, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5000000}, {}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, @call={0x85, 0x0, 0x0, 0xa3}, @alu={0x4, 0x1, 0x3, 0xa, 0xb, 0x6, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x81b21000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x368, @media='eth\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24008000}, 0x80) 1.241423432s ago: executing program 3 (id=5169): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffd3d, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x10}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000002238030008000a00", @ANYRES32=r1, @ANYBLOB="2400128009000100626f6e64000000001400028005000d0002"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 987.694638ms ago: executing program 0 (id=5170): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000f3ff00000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2d, 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 949.897644ms ago: executing program 0 (id=5171): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x5c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6394bc11539d"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "de5cf1f6a3984103b1a46c1027"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 879.179257ms ago: executing program 0 (id=5172): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1a00000000000000000000000000000072019a0000000000950400000000000069f1cb8877845c1c08921e109c6725847bef8386d59bb2f7679e560a42d6aedf691e669b79aa"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x400e}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) bind$packet(r0, &(0x7f0000000280)={0x11, 0x1c, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 874.082702ms ago: executing program 0 (id=5173): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r1 = socket(0x2b, 0x80000, 0x2) listen(r0, 0xa1) bind$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000001780)=0x3, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x4}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000140)={{{@in=@dev, @in6=@local}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8) 863.358172ms ago: executing program 1 (id=5174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r2 = accept4(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x80, 0x2c3f296587e94b5d) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x55, 0x0, 0x24, 0x5}]}}, 0x0, 0x2a, 0x0, 0x0, 0x8000}, 0x28) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000002e00"], 0x3c}, 0x1, 0x2000000, 0x0, 0xc008}, 0x4008010) 779.209583ms ago: executing program 4 (id=5175): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000440)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd2c, 0x25dfdbff, {0x2, 0x10, 0x0, 0x4, 0x20, 0x0, 0x0, 0x5, 0x6}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r2, 0xee00}}, @FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x6c}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4}, 0x0) (async) r3 = socket(0x2, 0x5, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', r5, 0x700, 0x20, 0x99, 0x40, {{0x35, 0x4, 0x1, 0x17, 0xd4, 0x68, 0x0, 0x80, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp={0x44, 0x10, 0x3f, 0x0, 0x5, [0x9, 0x40, 0x93]}, @lsrr={0x83, 0xf, 0xe8, [@empty, @empty, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x5, [0x1, 0x9, 0x8, 0xd, 0x6]}, @timestamp={0x44, 0x14, 0x4f, 0x0, 0x1, [0x6, 0xe, 0x8, 0x1]}, @timestamp_addr={0x44, 0x24, 0x2, 0x1, 0x5, [{@multicast2, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x8}, {@empty, 0x8001}, {@remote}]}, @end, @end, @ssrr={0x89, 0x1b, 0xcf, [@local, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @private=0xa010101, @local, @empty]}, @timestamp_addr={0x44, 0x34, 0xa3, 0x1, 0x5, [{@multicast2, 0x7}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010100, 0x2}, {@multicast2, 0x1}, {@multicast1}]}]}}}}}) 778.656435ms ago: executing program 1 (id=5176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) 724.556801ms ago: executing program 1 (id=5177): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x1, 0x0, {{0x17, 0x4, 0x2, 0x3a, 0x5c, 0x67, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x3, [{@multicast2, 0x101}]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x2, 0xe, "de73c0d4222d0e125348dba7"}]}, @timestamp_prespec={0x44, 0x1c, 0x19, 0x3, 0x7, [{@loopback, 0xbe2}, {@multicast1, 0xff}, {@empty, 0x4d}]}, @timestamp={0x44, 0xc, 0xa1, 0x0, 0x8, [0x7, 0x5]}]}}}}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r8}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0x6, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0x3, 0x6, 0x0, 0xfffffffffffffff8, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000640)='GPL\x00', 0x1, 0xc, &(0x7f0000000680)=""/12, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000700)=[r4], &(0x7f0000000740)=[{0x1, 0x2, 0xa, 0x8}, {0x5, 0x4, 0xb}, {0x5, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x5, 0xd}, {0x4, 0x4, 0x4, 0x3}, {0x5, 0x2, 0x0, 0xa}, {0x5, 0x1, 0x10, 0x8}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x21, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @generic={0x7, 0x3, 0x4, 0xffff, 0xfffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x4, 0x4, &(0x7f00000003c0)=""/4, 0x40f00, 0x60, '\x00', r6, @fallback=0x21, r7, 0x8, &(0x7f00000004c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x2, 0x1, 0x1}, 0x10, r9, r11, 0x6, &(0x7f0000000880)=[r4, r5, r4, r4], &(0x7f00000008c0)=[{0x1, 0x4, 0x3, 0x5}, {0x3, 0x4, 0x3, 0xb}, {0x2, 0x1, 0xb, 0xb}, {0x5, 0x1, 0x6}, {0x5, 0x3, 0xd, 0x6}, {0x4, 0x3, 0xb, 0x9}], 0x10, 0x80000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000080)=r10, 0x4) 631.127049ms ago: executing program 1 (id=5178): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000011c0)="d1", 0x1}], 0x1}, 0x404c0c4) recvmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 575.223195ms ago: executing program 4 (id=5179): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad", 0x1) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d860cf52fcd3215bde6eb9904bd800f9cacc360a659edf5c908145e7"], 0x14}}, 0x4040000) (async) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x84000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x6a50}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000180)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r4, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 497.827218ms ago: executing program 3 (id=5180): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) connect$packet(r1, &(0x7f0000000280)={0x11, 0x2, r3, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) sendfile(r0, r1, &(0x7f0000000040)=0x7, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000000c0)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8, {0x0, 0x6, @default_ap_ssid}, @val, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000002, 0x6e073, 0xffffffffffffffff, 0x100000000) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0xc253, 0x2}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) socket(0x15, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000000c0)}, 0x10) (async) connect$packet(r1, &(0x7f0000000280)={0x11, 0x2, r3, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async) sendfile(r0, r1, &(0x7f0000000040)=0x7, 0x3) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000000c0)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8, {0x0, 0x6, @default_ap_ssid}, @val, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000002, 0x6e073, 0xffffffffffffffff, 0x100000000) (async) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0xc253, 0x2}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async) 495.655302ms ago: executing program 1 (id=5181): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="00080000075005001c0012800b00011062726964676500000c00028005002b0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="00080000075005001c0012800b00011062726964676500000c00028005002b0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 439.621792ms ago: executing program 4 (id=5182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x5c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6394bc11539d"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "de5cf1f6a3984103b1a46c1027"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 359.790401ms ago: executing program 1 (id=5183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) (async) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) (async) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001100050000000001feffffff07000000", @ANYRESHEX=r4, @ANYBLOB="1a200600000100000c001a800800058004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x40000) 358.378732ms ago: executing program 4 (id=5184): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x204d, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(0x4) 226.573491ms ago: executing program 4 (id=5185): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000500)={{0xffffffffffffffff, &(0x7f0000000040)='---.@\x8a\x12\\\x00', 0x369402, &(0x7f0000000140)={@align=0xfffffffffffffffd, {0x8, 0x8, 0x3, 0x1}}, 0x8, &(0x7f00000001c0), &(0x7f0000000280)=0xfffffffe}, {[0xb6fd, 0x6, 0x6, 0x5]}, 0x2, 0xb7, &(0x7f0000000340)=""/183}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x108, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c76}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20004844}, 0x4044) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="11220100"], 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 154.287723ms ago: executing program 2 (id=5186): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth0_to_team\x00'}, 0x18) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in=@remote, 0x4e23, 0x481, 0x4e24, 0x100, 0x2, 0xa0, 0x30, 0x62, r1, r2}, {0x1935, 0x40, 0x0, 0x4, 0x8, 0x200, 0x1fffe, 0x7}, {0xd, 0x3b9e63da, 0xbb, 0x1}, 0x2, 0x6e6bbc, 0x0, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d3, 0x33}, 0xa, @in6=@remote, 0x3507, 0x4, 0x2, 0x5, 0x5, 0xf4e2, 0x1}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) (async) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x1, 0x0, 0x4, 0x7, 0x7, 0xffffffffffffffff, 0x1}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x7, 0x10, &(0x7f0000000380)=""/16, 0x41000, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xd, 0x8, 0xe}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{0x4, 0x4, 0xb, 0x9}, {0x5, 0x4, 0xa, 0xa}], 0x10, 0x3}, 0x94) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x11, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call]}, &(0x7f0000000680)='syzkaller\x00', 0x7, 0x39, &(0x7f00000006c0)=""/57, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x7, 0x200, 0x4}, 0x10, 0x14c1c, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x2, 0xb, 0x3}, {0x2, 0x1, 0xc, 0xd}], 0x10, 0xe}, 0x94) (rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@cgroup=r5, 0xffffffffffffffff, 0x11, 0x4, r4, @void, @value=r6}, 0x20) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/66, 0x42}, {&(0x7f0000000900)=""/148, 0x94}], 0x2, &(0x7f0000000a00)=""/119, 0x77}, 0xe3}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/240, 0xf0}, {&(0x7f0000000b80)=""/122, 0x7a}, {&(0x7f0000000c00)=""/92, 0x5c}, {&(0x7f0000000c80)=""/69, 0x45}, {&(0x7f0000000d00)=""/189, 0xbd}, {&(0x7f0000000dc0)=""/163, 0xa3}], 0x6, &(0x7f0000000f00)=""/75, 0x4b}, 0x7}, {{&(0x7f0000000f80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001000)=""/76, 0x4c}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/181, 0xb5}, {&(0x7f0000002140)=""/186, 0xba}, {&(0x7f0000002200)=""/50, 0x32}], 0x5, &(0x7f00000022c0)=""/199, 0xc7}, 0x1}, {{&(0x7f00000023c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002440)=""/211, 0xd3}], 0x1, &(0x7f0000002580)=""/138, 0x8a}, 0x400}, {{&(0x7f0000002640)=@qipcrtr, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000026c0)=""/148, 0x94}, {&(0x7f0000002780)=""/177, 0xb1}, {&(0x7f0000002840)=""/149, 0x95}, {&(0x7f0000002900)=""/237, 0xed}, {&(0x7f0000002a00)=""/133, 0x85}], 0x5, &(0x7f0000002b40)=""/106, 0x6a}, 0x4}], 0x5, 0x0, &(0x7f0000002d00)={0x0, 0x3938700}) vmsplice(r3, &(0x7f0000002ec0)=[{&(0x7f0000002d40)="0910bcc9db73829ebb5800a801e65173cc536690aceb140d1fe535002635047471f9e7f240b0b6cb702d1c4bcb19499b547bf8e21c5f59bcf4a6c98917e935460b2bf80709ee56f22de3c25a74eea83d14a6e6a8b69fb91299f7134cecec0dea9ce41f5454998d4b52316c7f7d27939caade8373ba1b514cae757c61bb8981de12c476e7c8b4b3cb0e", 0x89}, {&(0x7f0000002e00)="26d05b3a430060bb423662ffa989d68db7194f83682719542e9c725785a927b875ffdec9b054aa8ece8082cd218c835ce2c40b6b8242d398c7745e5ecbd4e5239bab547cedf4db13a5add1de0fb019773c66e3ae756a67b7bccd308a4675bdb5e315a05ba7360ec3ce736b3c4895ab44552df709afee5569a10e8ea7a3016093183b3f4e0c434e12054498289d50fe29598dac06bae011589fc74a6d748db40b4f136fb281e93cabc9eea11410834b6df5806df28aab31e768eb", 0xba}], 0x2, 0xd) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002fc0)={'veth0_to_bridge\x00', &(0x7f0000002f00)=@ethtool_dump={0x3f, 0x5, 0x4aa, 0x75, "69191fa6f324b9746834158ebaad5be7cf9b4d7be56222d587d8995c4d5f9cd37dd9fadd08e89fe02b3dc86551335f4697753a9592065810a071fa256e27028ad1e95882112485cbf4597b940b9aaf2c782dc298cfd1d7e947ca41e5d006e4ee169a36cd3e308958b6d7c54936bbe6b9defe828e8a"}}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000003000)) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003040)={0x0}, &(0x7f0000003080)=0xc) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003540)=@base={0x1b, 0x0, 0x0, 0x3, 0x40005, 0xffffffffffffffff, 0x9, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) sendmsg$netlink(r7, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000030c0)={0x27c, 0x37, 0x2, 0x70bd25, 0x25dfdbfb, "", [@nested={0x214, 0x1, 0x0, 0x1, [@generic="0e3606ecf99ffc", @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback}, @typed={0x7a, 0x58, 0x0, 0x0, @binary="024f2275fbf0131dca56fc1daa025a7757ddab2d16f197e449cd0c880f8907b5921d0e1f140a534fdb3ef84c74e786245c5b5acf5dbe94e790b4ff2ed85501d7dfb2b7acd4a157c89f11f08391936ac8cc85e2e934fb1682a385b2b60e8f47062c3f2bda4ea4a05023ed5ee63258c3e7a9263df1105d"}, @generic="28a8448dafece7dde91c7f4c65a986ca66ae18a965fe63eb80093faab471fe95a571fee7199a41b9f089fcb62151ad60247d4bd76b57806a7526c798eb80306462cd34ab6a7d5126e9f2ae8f74ad5129042ee217bafe7dcfba3e83939b2968f03c30f6d71442bc65eb8fdd37fdcea51d03a98f1e6fc5f3d31d84e6714b5b06e5879891fa467b4fd981aa7b236da163e722f74e14cc6bf13104a294157e5d6e375df9", @generic, @typed={0x8, 0x2, 0x0, 0x0, @pid=r8}, @typed={0x4, 0xa7}, @generic="1ba29875b4e3ffd37169d3f82f7e97861935c5c0433b8d4443c7f170bbd468603f280eb94add223a5dd1fa5ccd2c00c8cc3115c9d1dfeb4c02914f848f1428fc68cd3f0cf20724ff06d329038295835fdc6bd41fea6ae87dd650c805b7955c5430d3c049999d281b771b8827071cc1c4d9928efaf2bcf267143cfe11f9add82c1521f7c0dcf65ab693222fe91cf9b2f1cbbcff43973a6b60729fac23e9d4d596d046b819d9a22d45a39e00b4fb92713dc8c2160c49ae2db0df0a6ade58817dece27466859ccd92", @typed={0x4, 0xde}]}, @generic="40313db47d8594be4d23e6519a9222b4e81d511ecdd7b67567102505d5cecbf5806021f0c61e937aff342c25ec29981fc141e2fd2b3d1693ac937e3afbf11c6b", @typed={0xb, 0x111, 0x0, 0x0, @str='+(\\^[@\x00'}, @typed={0x4, 0x2c}, @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@empty}]}, 0x27c}, {&(0x7f0000003340)={0x1bc, 0x14, 0x4, 0x70bd29, 0x25dfdbfe, "", [@nested={0xb9, 0x144, 0x0, 0x1, [@generic="e9ef05b12930c9093ce4439ea899c009ff3e760d419fe080fad0489281f815dd4bc63eee4bab69f61810aa0a036f174fc0d0b5d0faf3daa6c81b4c8b67eaf2a73de8dea5352e5e1541d79f8ac3fecf12cc661415117be3fc9f54290f9ab248f582106d57f4c34bb482523617457f70e371239c8421b5f6b796cb44068c1711a0f43b5bd95c810cbb5663877ba79c409fa03ef622a1ce88d44c906ed50e4eee5c41b928c112dca9334e157aca36f13e327a6fb54587"]}, @typed={0x8, 0x9c, 0x0, 0x0, @u32=0x6}, @typed={0xe7, 0x4a, 0x0, 0x0, @binary="603e6b18a5c7fe6437e38342b2237ad4658b7e5591961263d5349b0ed1aa262ed2336225559be4734414af3c38c23dbbf8e758fc0641780f7a0f30cbb3c0e49d76325b59c07458c7a5028d490b307e3241a6b4aafd53de15e0d481b16ab0a9d6c882babf1dc84067579fea0f0a6952f9156bf62eef23684c2bc4843638da9a979c439a1352d14c63ef14f10a8d420a6fc70e052c887023c18b7e05f5c5a7a8c35536ea60a53c0becdc4fb79b8bfc3eb1665995b74ac7d778cadfd3b6018509060d61172534bc08f9937eb40625dac3b47468ae1b446f23a03415c0460412c2a4d522cb"}]}, 0x1bc}], 0x2, &(0x7f00000035c0)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r0, r3, r5, r4, r3, r5, r9]}}], 0x38, 0x850}, 0x58805) (async) r10 = accept$packet(r6, &(0x7f0000003640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003680)=0x14) r11 = accept$packet(r10, &(0x7f00000036c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003700)=0x14) r12 = openat$cgroup_ro(r11, &(0x7f0000003740)='memory.swap.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r12, 0x6, 0x1f, &(0x7f0000003780)="1b1a3aeb3e9871070245530ad6e92a97d0b45c0685ef89a41ea9a58d38ef96e8f58c4cb4518cd9291e2bf112fe115a05a21c2b4358559d32d8a34001e02147f07e142b71b96fa4d667faaf", 0x4b) (async) shutdown(r10, 0x1) ioctl$XFS_IOC_GETBMAPX(r7, 0xc0205838, &(0x7f0000003800)={0x2, 0x66f0, 0x1, 0x9, 0x3, 0x20, 0x8}) (async) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000003880), r12) sendmsg$TIPC_CMD_SHOW_PORTS(r12, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x1c, r13, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) (async, rerun: 64) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000003980)={'veth0_to_batadv\x00', 0xb}) (rerun: 64) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f00000039c0), &(0x7f0000003a00)=0xc) 144.434622ms ago: executing program 3 (id=5187): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200ff020000000000000000000000000001080008000105"], 0x34}}, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000080)={@empty, @random='\x00\x00\x00\x00C7', @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0x88f5, "1f77"}}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x706}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.260025ms ago: executing program 4 (id=5188): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000240)=""/20, 0x14, 0x0, &(0x7f0000000540)=""/97, 0x61}}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000050000009500000000000000e6923b33b19a35d427f5e67496beeea639e2b7f2c14e7f99b7ecf39c93069d27164b045baa56262b38e43704f9b69a7a628f93ee62718c1331b374a2452f29c71f8e3e27cb5734add259f2c4045905f8a45ac0bcf54572565c58b6bc51b84b04df5211835b93aa87b5b652adc617b8d2831beec0b5c4bb871cdd0350b6121829a7e3576e9a0a486e0a97a0613343c8de3bec27990cdeb3bc92c681f68983ad2c81ef5a875b67598e7066cfd5b9a146c7204013ceb14c8297cd192f43aac1624b15d6a457d4dcf94f41e7526f1cf70961f9f3b48ca6de7b2fbc7a7f3e8f0d0924cb2f957bf60d51406d3a258af3d58e0380ae328a63434a74d406020076040044240835f3668a6896dbc8fcea250f4b0c297986b8acea238698844e0675d242a7d3acfd1ac46d85c8b23ad8279643d5e3e00a2d319882945b3d0aa8e9a54cbd1aeb90c55b295b9d6021217c70fc7cedba84dd598b53c8521f149b33cb95cae5df2ebf8b7103803aaaa8e7d68dcdfaa835bdb5a23bdbff8362d41a1126043b88f00fdc17ccd274999304c1dff6f4f4f8b219b418e09cf2c0e0cb2f9ad957fd859564f7ff6f28fb3b2d3a97df6f6f54c4ea794102494e1d56e88c1439ea086b1acc9fbc26c315246741cb722188846b1175178f6fa467be03e9f7cff922a1c78bbb28bdf7816bb27db7e86d988213dffd7f012721f2ec81ace497eeca313214f1d8c89ec824b5907e3ab7ec1d387cffbdb4d79ccb3c2e29275da223f5fa52525145684e10798d3de43fa175137b205fc7ccf3a4d0a237bf80bfd9acf1be2a56eecbbce4bc4708db946b1a1b989dc6b146853fea8deab55df9eaf759ffd08ff483103720ebfbc53be6a85fc1b610ba8e3ecb8a7351cf218073aecf3b631837846b703e7772626376aa84290a8b7b4f3472976f6688cb230ccd762d00fcf810ca0c3d20ccdcac10fe09cc5fccf31d9e16e899d32dee701d2b6fff95c1328f249878e6dde3ed840d4b5fb05cc1399dd151f59e53712285d5e9c4dba7e1eb9ff174487c74454f8f5e996e600c5740d21d7ac237d62bee06c1834b04e29c8ee7a5a56a386eca1b136904aeca3cbb85c7278fe202d286d45461d8c9e74654b95b8ebdfa7d9bbe7d5cc269d368efe9056060de9bcaa714bcc8429b623dd78d4fd6ebfaadb7bd35a3ff3da98e2164c8cc1d0d7017b8a7a0fef4f802d538e5bd40daba01aa97fa689d928a6e52e1b21c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fbdbdf251000000008003a000100000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) connect$unix(r6, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @local}], 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0xfff1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000240)=""/20, 0x14, 0x0, &(0x7f0000000540)=""/97, 0x61}}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000050000009500000000000000e6923b33b19a35d427f5e67496beeea639e2b7f2c14e7f99b7ecf39c93069d27164b045baa56262b38e43704f9b69a7a628f93ee62718c1331b374a2452f29c71f8e3e27cb5734add259f2c4045905f8a45ac0bcf54572565c58b6bc51b84b04df5211835b93aa87b5b652adc617b8d2831beec0b5c4bb871cdd0350b6121829a7e3576e9a0a486e0a97a0613343c8de3bec27990cdeb3bc92c681f68983ad2c81ef5a875b67598e7066cfd5b9a146c7204013ceb14c8297cd192f43aac1624b15d6a457d4dcf94f41e7526f1cf70961f9f3b48ca6de7b2fbc7a7f3e8f0d0924cb2f957bf60d51406d3a258af3d58e0380ae328a63434a74d406020076040044240835f3668a6896dbc8fcea250f4b0c297986b8acea238698844e0675d242a7d3acfd1ac46d85c8b23ad8279643d5e3e00a2d319882945b3d0aa8e9a54cbd1aeb90c55b295b9d6021217c70fc7cedba84dd598b53c8521f149b33cb95cae5df2ebf8b7103803aaaa8e7d68dcdfaa835bdb5a23bdbff8362d41a1126043b88f00fdc17ccd274999304c1dff6f4f4f8b219b418e09cf2c0e0cb2f9ad957fd859564f7ff6f28fb3b2d3a97df6f6f54c4ea794102494e1d56e88c1439ea086b1acc9fbc26c315246741cb722188846b1175178f6fa467be03e9f7cff922a1c78bbb28bdf7816bb27db7e86d988213dffd7f012721f2ec81ace497eeca313214f1d8c89ec824b5907e3ab7ec1d387cffbdb4d79ccb3c2e29275da223f5fa52525145684e10798d3de43fa175137b205fc7ccf3a4d0a237bf80bfd9acf1be2a56eecbbce4bc4708db946b1a1b989dc6b146853fea8deab55df9eaf759ffd08ff483103720ebfbc53be6a85fc1b610ba8e3ecb8a7351cf218073aecf3b631837846b703e7772626376aa84290a8b7b4f3472976f6688cb230ccd762d00fcf810ca0c3d20ccdcac10fe09cc5fccf31d9e16e899d32dee701d2b6fff95c1328f249878e6dde3ed840d4b5fb05cc1399dd151f59e53712285d5e9c4dba7e1eb9ff174487c74454f8f5e996e600c5740d21d7ac237d62bee06c1834b04e29c8ee7a5a56a386eca1b136904aeca3cbb85c7278fe202d286d45461d8c9e74654b95b8ebdfa7d9bbe7d5cc269d368efe9056060de9bcaa714bcc8429b623dd78d4fd6ebfaadb7bd35a3ff3da98e2164c8cc1d0d7017b8a7a0fef4f802d538e5bd40daba01aa97fa689d928a6e52e1b21c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) (async) socket$netlink(0x10, 0x3, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fbdbdf251000000008003a000100000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) connect$unix(r6, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @local}], 0x1) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0xfff1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) (async) 0s ago: executing program 2 (id=5189): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, r2, 0xe29, 0x70bd29, 0x5dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000018000000bca3000000000000240300f840feffff720af0ff0000000071a4f1ff000000001f030000000000002e0a0200000000002600030008ff000e61148c00000000001d430000000000007a0a00fe00581c1f61144f0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58d"], 0x0}, 0x94) r3 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:* rr'], 0x9) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) kernel console output (not intermixed with test programs): atadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.009816][T17807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.022704][T17807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.038673][T17807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.094185][T17807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.247005][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.279083][T17807] hsr_slave_0: entered promiscuous mode [ 439.285737][T17807] hsr_slave_1: entered promiscuous mode [ 439.292525][T17807] debugfs: 'hsr0' already exists in 'hsr' [ 439.299386][T17807] Cannot create hsr debugfs directory [ 439.300067][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3209'. [ 439.317568][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888054602800: abort rx timeout. Force session deactivation [ 439.352991][T17938] block nbd3: Unsupported socket: should be TCP or UNIX. [ 439.485004][T17940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3210'. [ 439.523121][T17940] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 439.695654][T17952] validate_nla: 24 callbacks suppressed [ 439.695674][T17952] netlink: 'syz.3.3214': attribute type 1 has an invalid length. [ 439.731243][T17952] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3214'. [ 439.742024][T17954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3215'. [ 439.762490][T17952] sctp: [Deprecated]: syz.3.3214 (pid 17952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.762490][T17952] Use struct sctp_sack_info instead [ 439.974434][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.001920][T17807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.214714][T17978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3220'. [ 440.286980][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.322414][T17807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.348430][T17980] ip_tables: iptables: counters copy to user failed while replacing table [ 440.386234][T17982] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3222'. [ 440.547692][T17807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.602085][T17990] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3223'. [ 440.830195][T18009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3227'. [ 440.840797][T18002] bond14: Unable to set down delay as MII monitoring is disabled [ 440.854394][T18002] bond14 (unregistering): Released all slaves [ 440.911489][T18008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3229'. [ 441.008856][T16567] Bluetooth: hci2: command tx timeout [ 441.128081][T18022] bridge0: Device is already in use. [ 441.326964][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.432444][T18039] gre3: entered promiscuous mode [ 441.503648][T18040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.557377][T18046] netlink: NAT attribute has 5 unknown bytes [ 441.594133][T18046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.626502][T18049] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 441.661163][T17807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 441.693222][T17807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.716626][T17807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 441.743380][T17807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.770509][T18051] : renamed from sit0 (while UP) [ 441.806448][T17807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 441.831859][T17807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.843989][T18069] tipc: Started in network mode [ 441.850614][T18069] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 441.876554][T18069] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 441.910285][T18069] tipc: Enabled bearer , priority 10 [ 441.930101][T17807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 441.956231][T17807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.294228][T18094] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20003 [ 442.294959][T17807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.359883][T17807] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.367080][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.381088][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.388254][ T9034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.446186][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.453465][ T9039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.612960][T18103] netlink: 'syz.2.3251': attribute type 12 has an invalid length. [ 442.678518][T18103] bond14: option primary_reselect: invalid value (255) [ 442.689299][T18103] bond14 (unregistering): Released all slaves [ 443.000975][T18125] bridge0: port 1(team0) entered disabled state [ 443.038119][T18122] netlink: 'syz.1.3255': attribute type 8 has an invalid length. [ 443.051494][T18125] team0 (unregistering): left allmulticast mode [ 443.063000][T18125] team0 (unregistering): left promiscuous mode [ 443.069928][T18125] bridge0: port 1(team0) entered disabled state [ 443.088315][T16567] Bluetooth: hci2: command tx timeout [ 443.109400][T18125] team0 (unregistering): Port device bridge3 removed [ 443.128366][ T5733] tipc: Node number set to 1 [ 443.370107][T18149] xt_hashlimit: size too large, truncated to 1048576 [ 443.407032][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.524637][T18160] netlink: 'syz.0.3264': attribute type 1 has an invalid length. [ 443.643863][T18160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.798175][T18169] netlink: 'syz.1.3266': attribute type 1 has an invalid length. [ 443.905905][T18188] __nla_validate_parse: 6 callbacks suppressed [ 443.905924][T18188] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3269'. [ 443.907424][T18169] netlink: 'syz.1.3266': attribute type 4 has an invalid length. [ 443.919416][T17807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.331772][T18212] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3275'. [ 444.375277][T18212] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3275'. [ 444.447840][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 444.482794][T17807] veth0_vlan: entered promiscuous mode [ 444.518168][T17807] veth1_vlan: entered promiscuous mode [ 444.556614][T17807] veth0_macvtap: entered promiscuous mode [ 444.572124][T17807] veth1_macvtap: entered promiscuous mode [ 444.603299][T17807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.623396][T17807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.679207][ T9039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.711428][ T9026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.739329][ T9026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.750031][ T9026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.852364][T18232] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3281'. [ 444.925425][T18233] netlink: 'syz.3.3281': attribute type 1 has an invalid length. [ 445.167815][T16567] Bluetooth: hci2: command tx timeout [ 445.487038][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.527008][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.263208][T18206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.354645][ T9026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.374445][ T9026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.503990][ T9029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.527689][ T9029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.530477][T18254] lo: entered promiscuous mode [ 447.566986][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.605522][T18254] tunl0: entered promiscuous mode [ 447.619333][T18254] gre0: entered promiscuous mode [ 447.670393][T18254] gretap0: entered promiscuous mode [ 447.682548][T18254] erspan0: entered promiscuous mode [ 447.713395][T18254] ip_vti0: entered promiscuous mode [ 447.992331][T18276] netlink: 'syz.3.3292': attribute type 29 has an invalid length. [ 448.016416][T18276] netlink: 'syz.3.3292': attribute type 29 has an invalid length. [ 448.305195][T18290] netlink: 'syz.0.3295': attribute type 4 has an invalid length. [ 448.386005][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 448.401906][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 448.413307][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 448.421867][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 448.432722][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 448.525883][T18286] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.3296'. [ 448.607128][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.896718][ T9029] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.912481][T18324] netlink: 'syz.4.3302': attribute type 21 has an invalid length. [ 448.922954][ T9029] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.964339][T18324] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3302'. [ 449.088808][T18328] bond2: entered promiscuous mode [ 449.094287][T18328] bond2: entered allmulticast mode [ 449.098087][T18333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3305'. [ 449.100795][T18328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 449.173144][ T9029] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.184347][ T9029] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.234476][T18324] syzkaller0: entered promiscuous mode [ 449.265426][T18324] syzkaller0: entered allmulticast mode [ 449.469063][ T9029] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.510583][ T9029] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.647045][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.700822][T18363] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:0 [ 449.805666][ T9029] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.849641][ T9029] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.388468][T18387] netlink: 'syz.1.3317': attribute type 1 has an invalid length. [ 450.403922][ T9029] dvmrp8: left allmulticast mode [ 450.413410][ T9029] pimreg3: left allmulticast mode [ 450.434329][ T9029] tipc: Resetting bearer [ 450.444098][ T9029] batman_adv: batadv0: Interface deactivated: gretap4 [ 450.530441][T16567] Bluetooth: hci3: command tx timeout [ 450.686996][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.958112][T18409] netlink: 'syz.4.3323': attribute type 2 has an invalid length. [ 450.986943][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3323'. [ 451.179489][ T9029] tipc: Disabling bearer [ 451.222513][ T9029] bond2 (unregistering): (slave gretap1): Releasing active interface [ 451.296713][ T9029] batman_adv: batadv0: Removing interface: gretap4 [ 451.358891][ T9029] bond9 (unregistering): (slave geneve3): Releasing active interface [ 451.441701][ T9029] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 451.450853][ T9029] bridge2 (unregistering): left promiscuous mode [ 451.474951][ T9029] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 451.483955][ T9029] bridge4 (unregistering): left promiscuous mode [ 451.493600][ T9029] bridge4 (unregistering): left allmulticast mode [ 451.522754][T18419] netlink: 'syz.0.3325': attribute type 21 has an invalid length. [ 451.544690][ T9029] bond1 (unregistering): Released all slaves [ 451.566532][ T9029] bond2 (unregistering): Released all slaves [ 451.590846][ T9029] bond3 (unregistering): Released all slaves [ 451.606450][ T9029] bond4 (unregistering): Released all slaves [ 451.630512][ T9029] bond5 (unregistering): Released all slaves [ 451.646649][ T9029] bond6 (unregistering): Released all slaves [ 451.663512][ T9029] bond7 (unregistering): Released all slaves [ 451.685010][ T9029] bond8 (unregistering): Released all slaves [ 451.705201][ T9029] bond9 (unregistering): Released all slaves [ 451.719438][ T9029] bond10 (unregistering): Released all slaves [ 451.727089][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.744775][ T9029] bond0 (unregistering): Released all slaves [ 451.762644][ T9029] bond11 (unregistering): Released all slaves [ 451.776040][ T9029] bond12 (unregistering): Released all slaves [ 451.791423][ T9029] bond13 (unregistering): Released all slaves [ 451.816657][T18387] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 451.826835][T18402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.877080][T18426] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3326'. [ 451.915217][T18426] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3326'. [ 452.024849][ T9029] ovs-system: left promiscuous mode [ 452.297845][ T9029] tipc: Disabling bearer [ 452.306349][ T9029] tipc: Left network mode [ 452.608201][T16567] Bluetooth: hci3: command tx timeout [ 452.767404][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.044144][T18438] kthread_run failed with err -4 [ 453.182724][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 453.807026][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.030163][T18497] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 454.292629][T18294] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.309509][T18294] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.322451][T18294] bridge_slave_0: entered allmulticast mode [ 454.364888][T18294] bridge_slave_0: entered promiscuous mode [ 454.382778][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 454.413218][T18294] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.427892][T18294] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.442028][T18294] bridge_slave_1: entered allmulticast mode [ 454.460677][T18294] bridge_slave_1: entered promiscuous mode [ 454.532387][T18294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.558144][T18294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.676488][T18294] team0: Port device team_slave_0 added [ 454.687505][T16567] Bluetooth: hci3: command tx timeout [ 454.701074][T18294] team0: Port device team_slave_1 added [ 454.846975][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.893336][T18294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.934448][T18294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.049848][T18294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.182624][T18294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.208265][T18294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.271268][T18294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.335162][ T9029] hsr_slave_0: left promiscuous mode [ 455.364867][ T9029] hsr_slave_1: left promiscuous mode [ 455.445997][ T9029] veth0_macvtap: left promiscuous mode [ 455.466655][ T9029] veth1_vlan: left promiscuous mode [ 455.482795][ T9029] veth0_vlan: left promiscuous mode [ 455.886967][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 455.959505][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3356'. [ 456.191592][T18560] bond0: (slave bond_slave_1): Releasing backup interface [ 456.236843][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 456.379483][T18583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3358'. [ 456.401768][T18294] hsr_slave_0: entered promiscuous mode [ 456.425978][T18294] hsr_slave_1: entered promiscuous mode [ 456.458558][T18294] debugfs: 'hsr0' already exists in 'hsr' [ 456.469109][T18588] netlink: 'syz.1.3361': attribute type 6 has an invalid length. [ 456.483191][T18294] Cannot create hsr debugfs directory [ 456.544895][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3358'. [ 456.604324][T18586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3358'. [ 456.767163][T16567] Bluetooth: hci3: command tx timeout [ 456.927091][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 457.234647][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3367'. [ 457.249736][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3367'. [ 457.766784][ T9029] IPVS: stop unused estimator thread 0... [ 457.967068][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.172241][T18648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3371'. [ 458.184146][T18646] syzkaller0: entered promiscuous mode [ 458.190200][T18646] syzkaller0: entered allmulticast mode [ 458.445904][T18661] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 458.494564][T18661] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 458.711208][T18646] team0: Device veth1_macvtap failed to register rx_handler [ 459.007053][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 459.172286][T18690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.226044][T18692] bond1: (slave geneve2): making interface the new active one [ 459.239634][T18692] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 459.253189][T18707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3382'. [ 459.497278][T18294] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 459.544624][T18723] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 459.548237][T18294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.593505][T18294] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 459.673209][T18294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.692214][T18294] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 459.704947][T18730] netlink: 'syz.1.3387': attribute type 2 has an invalid length. [ 459.730472][T18294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.745612][T18294] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 459.906565][T18294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.944250][T18730] : entered promiscuous mode [ 460.047079][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 460.108038][T18747] netlink: 'syz.1.3390': attribute type 21 has an invalid length. [ 460.141362][T18747] IPv6: NLM_F_CREATE should be specified when creating new route [ 460.167574][T18747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.174839][T18747] IPv6: NLM_F_CREATE should be set when creating new route [ 460.182137][T18747] IPv6: NLM_F_CREATE should be set when creating new route [ 460.189404][T18747] IPv6: NLM_F_CREATE should be set when creating new route [ 460.261294][T18750] netlink: 'syz.1.3390': attribute type 1 has an invalid length. [ 460.284290][T18754] trusted_key: syz.4.3393 sent an empty control message without MSG_MORE. [ 460.324853][T18294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.373121][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3393'. [ 460.405886][T18758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3393'. [ 460.426203][T18758] openvswitch: netlink: IPv4 frag type 65 is out of range max 2 [ 460.463531][T18294] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.508863][ T9031] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.516088][ T9031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.601744][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.608989][ T9039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.088069][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 461.653495][T18803] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 461.758900][T18805] netlink: 'syz.0.3402': attribute type 12 has an invalid length. [ 462.127021][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 462.216701][T18294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.484583][T18294] veth0_vlan: entered promiscuous mode [ 462.522025][T18294] veth1_vlan: entered promiscuous mode [ 462.538270][T18849] __nla_validate_parse: 1 callbacks suppressed [ 462.538286][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3412'. [ 462.641529][T18294] veth0_macvtap: entered promiscuous mode [ 462.690719][T18294] veth1_macvtap: entered promiscuous mode [ 462.762282][T18294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.851065][T18294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.938156][T18862] netlink: 'syz.4.3414': attribute type 1 has an invalid length. [ 462.971729][ T9024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.009631][T18865] netlink: 'syz.4.3414': attribute type 1 has an invalid length. [ 463.030983][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3416'. [ 463.060694][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3416'. [ 463.076468][T18867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3415'. [ 463.150839][ T9029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.166972][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 463.312275][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'. [ 463.349146][ T9027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.422934][ T9027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.780495][ T9024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.828568][ T9024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.947998][ T9039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.964292][T18913] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3422'. [ 463.980176][ T9039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.204995][T18926] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3424'. [ 464.214185][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 464.280838][T18925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3424'. [ 464.309345][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3426'. [ 464.331259][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3424'. [ 464.371740][T18934] netlink: 'syz.0.3426': attribute type 7 has an invalid length. [ 464.426746][T18934] netlink: 'syz.0.3426': attribute type 8 has an invalid length. [ 464.844791][T18956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.862511][T18956] bond0 (unregistering): Released all slaves [ 465.247012][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 465.378050][T18991] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 465.453114][T18996] netlink: 'syz.2.3444': attribute type 1 has an invalid length. [ 465.586234][T18996] bond1 (unregistering): Released all slaves [ 466.287056][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 466.785909][T19079] netlink: 'syz.4.3462': attribute type 10 has an invalid length. [ 466.912881][T19083] netlink: 'syz.4.3462': attribute type 10 has an invalid length. [ 466.936844][T19089] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 467.224509][T19103] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 467.326985][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 467.559827][T19128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.560271][T19129] Cannot find set identified by id 0 to match [ 467.583210][T19117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.611901][T19135] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 467.626529][T19132] netlink: 'syz.0.3472': attribute type 1 has an invalid length. [ 467.663890][T19132] __nla_validate_parse: 12 callbacks suppressed [ 467.663911][T19132] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3472'. [ 467.705214][T19135] 8021q: VLANs not supported on ip6tnl0 [ 467.939622][T19145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.190348][T19164] sctp: [Deprecated]: syz.3.3482 (pid 19164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.190348][T19164] Use struct sctp_sack_info instead [ 468.366977][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 468.454721][T19185] vxcan0: tx address claim with dest, not broadcast [ 469.407107][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 470.447072][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 471.093337][T19156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.298564][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3496'. [ 471.313388][T19215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3496'. [ 471.487677][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 471.723378][T19238] rdma_op ffff88802958f238 conn xmit_rdma 0000000000000000 [ 472.104381][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3500'. [ 472.527055][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 472.542732][T19292] netlink: 11396 bytes leftover after parsing attributes in process `syz.2.3519'. [ 472.566326][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3521'. [ 472.602389][T19298] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 472.615952][T19297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3520'. [ 472.926585][T19319] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 473.188633][T19339] syzkaller0: entered promiscuous mode [ 473.205549][T19339] syzkaller0: entered allmulticast mode [ 473.327229][T19352] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3535'. [ 473.380475][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3535'. [ 473.441318][T19356] veth1_macvtap: left promiscuous mode [ 473.568317][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 473.585797][T19371] netlink: 'syz.3.3539': attribute type 1 has an invalid length. [ 473.712467][T19371] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 473.874167][T19382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3543'. [ 474.077763][T19382] bond1: Invalid ad_actor_system MAC address. [ 474.102304][T19382] bond1: option ad_actor_system: invalid value (1) [ 474.136213][T19382] bond1 (unregistering): Released all slaves [ 474.455252][T19424] ip6gre1: entered allmulticast mode [ 474.520982][T19428] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3556'. [ 474.607066][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 474.952610][T19457] geneve0: entered allmulticast mode [ 475.012295][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3565'. [ 475.124461][T19464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3567'. [ 475.288351][T19466] Bluetooth: MGMT ver 1.23 [ 475.333867][T19474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3571'. [ 475.380114][T19477] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3570'. [ 475.386941][T19474] netlink: 'syz.3.3571': attribute type 10 has an invalid length. [ 475.414966][T19474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3571'. [ 475.472943][T19474] geneve3: entered promiscuous mode [ 475.498651][T19474] geneve3: entered allmulticast mode [ 475.622669][T19485] syzkaller0: entered promiscuous mode [ 475.631264][T19485] syzkaller0: entered allmulticast mode [ 475.647059][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 475.741265][T19495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 475.954888][T19504] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 476.123074][T19515] netlink: 420 bytes leftover after parsing attributes in process `syz.0.3584'. [ 476.687057][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 476.733354][T19553] x_tables: unsorted underflow at hook 1 [ 476.952556][T19558] netlink: 'syz.1.3598': attribute type 4 has an invalid length. [ 476.974528][T19558] netlink: 'syz.1.3598': attribute type 4 has an invalid length. [ 477.699486][T19593] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.727603][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 477.775842][T19593] bridge_slave_1 (unregistering): left allmulticast mode [ 477.784851][T19599] netlink: 'syz.4.3611': attribute type 1 has an invalid length. [ 477.793362][T19593] bridge_slave_1 (unregistering): left promiscuous mode [ 477.802840][T19593] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.932188][T19597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.945974][T19597] bond0: (slave bond1): Enslaving as an active interface with an up link [ 477.994598][T19604] bond1: (slave gretap1): making interface the new active one [ 478.003846][T19604] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 478.394577][T19636] netlink: 'syz.1.3621': attribute type 39 has an invalid length. [ 478.470439][T19641] tipc: Enabled bearer , priority 10 [ 478.479806][T19642] tipc: Enabling of bearer rejected, already enabled [ 478.709092][T19656] __nla_validate_parse: 43 callbacks suppressed [ 478.709122][T19656] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3628'. [ 478.766982][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 478.814383][T19662] tc_dump_action: action bad kind [ 479.600428][T19712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3641'. [ 479.686036][T19712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.700842][T19727] macvlan2: entered promiscuous mode [ 479.706222][T19727] macvlan2: entered allmulticast mode [ 479.718149][T19727] bond2: entered allmulticast mode [ 479.724881][T19727] bond2: entered promiscuous mode [ 479.731309][T19727] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 479.740152][T19727] team0: Port device macvlan2 added [ 479.806977][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.851917][T19727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3641'. [ 479.904622][T19745] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3641'. [ 479.946524][T19746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3648'. [ 479.986421][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3649'. [ 480.017075][T19754] netlink: 'syz.0.3649': attribute type 30 has an invalid length. [ 480.048411][T19754] syzkaller0: left promiscuous mode [ 480.073985][T19754] syzkaller0: left allmulticast mode [ 480.082584][T19755] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3650'. [ 480.098792][T19754] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3649'. [ 480.123182][T19755] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3650'. [ 480.251067][T19764] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 480.573337][T19786] netlink: 'syz.0.3659': attribute type 1 has an invalid length. [ 480.723092][T19786] bond0: entered promiscuous mode [ 480.736288][T19786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.756518][T19791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.780023][T19791] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 480.813586][T19791] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 480.840094][T19791] bond0: (slave ip6gre1): making interface the new active one [ 480.846967][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.886851][T19791] ip6gre1: entered promiscuous mode [ 480.902147][T19791] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 481.120967][T19824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3664'. [ 481.133883][T19823] netlink: 'syz.1.3666': attribute type 19 has an invalid length. [ 481.154971][T19823] netlink: 'syz.1.3666': attribute type 19 has an invalid length. [ 481.168018][ T9034] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.179650][ T9034] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.189070][ T9034] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.200052][ T9034] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.276370][T19832] netlink: 'syz.3.3670': attribute type 10 has an invalid length. [ 481.450171][T19839] openvswitch: netlink: Flow actions attr not present in new flow. [ 481.739263][T19846] netlink: 'syz.1.3675': attribute type 1 has an invalid length. [ 481.748164][T19847] netlink: 'syz.1.3675': attribute type 1 has an invalid length. [ 481.771403][T19847] bond3: entered promiscuous mode [ 481.776825][T19847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.796393][T19846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.803587][T19846] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 481.814033][T19846] bond3: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 481.825963][T19846] bond3: (slave ip6tnl1): making interface the new active one [ 481.838270][T19846] ip6tnl1: entered promiscuous mode [ 481.845947][T19846] bond3: (slave ip6tnl1): Enslaving as an active interface with an up link [ 481.886994][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 482.927082][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 483.921308][T19808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.966972][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.055392][T19859] netlink: 'syz.2.3679': attribute type 4 has an invalid length. [ 484.686767][T19900] bridge_slave_0: invalid flags given to default FDB implementation [ 484.716642][T19902] __nla_validate_parse: 8 callbacks suppressed [ 484.716659][T19902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'. [ 484.739196][T19900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.754357][T19904] netlink: 'syz.0.3693': attribute type 28 has an invalid length. [ 484.754381][T19904] netlink: 'syz.0.3693': attribute type 3 has an invalid length. [ 484.754394][T19904] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3693'. [ 484.807199][T19908] tipc: Started in network mode [ 484.844968][T19908] tipc: Node identity ac141441, cluster identity 4711 [ 484.936796][T19908] tipc: Enabled bearer , priority 10 [ 485.007425][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 485.025816][T19919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3695'. [ 485.040007][T19925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3697'. [ 485.076597][T19919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3695'. [ 485.254389][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3701'. [ 485.274008][T19937] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3701'. [ 485.315658][T19937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.332069][T19937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.350017][T19937] bond0 (unregistering): (slave bond1): Releasing backup interface [ 485.373036][T19937] bond0 (unregistering): Released all slaves [ 485.494189][T19955] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3706'. [ 485.504043][T19955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3706'. [ 485.707063][T19968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.814262][T19978] tipc: Enabling of bearer rejected, already enabled [ 485.873413][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3716'. [ 485.911547][T19989] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 486.047829][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 486.058585][ T24] tipc: Node number set to 2886997057 [ 486.148959][T19999] syzkaller0: entered promiscuous mode [ 486.164251][T19999] syzkaller0: entered allmulticast mode [ 486.322033][T20016] 8021q: VLANs not supported on ip_vti0 [ 486.548812][T20026] sctp: [Deprecated]: syz.0.3726 (pid 20026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.548812][T20026] Use struct sctp_sack_info instead [ 486.644390][T20033] sctp: [Deprecated]: syz.0.3726 (pid 20033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.644390][T20033] Use struct sctp_sack_info instead [ 486.650765][T20034] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 486.699231][T20034] batman_adv: batadv0: Adding interface: gretap1 [ 486.705868][T20034] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.768596][T20034] batman_adv: batadv0: Interface activated: gretap1 [ 486.832348][T20049] veth1_to_bond: entered allmulticast mode [ 486.861067][T20049] veth1_to_bond: left allmulticast mode [ 487.086961][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.176086][T20069] netlink: 'syz.3.3738': attribute type 1 has an invalid length. [ 487.330370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.342595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.565140][T20093] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 487.642743][T20104] xt_l2tp: invalid flags combination: 8 [ 487.883393][T20109] veth5: entered promiscuous mode [ 488.089129][T20124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 488.097672][T20124] bridge0: port 2(bond3) entered blocking state [ 488.104363][T20124] bridge0: port 2(bond3) entered disabled state [ 488.111417][T20124] bond3: entered allmulticast mode [ 488.123471][T20124] bond3: entered promiscuous mode [ 488.128639][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 488.143398][T20124] bridge0: port 2(bond3) entered blocking state [ 488.149961][T20124] bridge0: port 2(bond3) entered forwarding state [ 488.335841][T20142] hsr_slave_1 (unregistering): left promiscuous mode [ 488.376810][T20144] Bluetooth: MGMT ver 1.23 [ 488.410127][T20142] syzkaller0: entered promiscuous mode [ 488.415847][T20142] syzkaller0: entered allmulticast mode [ 488.584214][T20153] netlink: zone id is out of range [ 488.595554][T20153] netlink: del zone limit has 4 unknown bytes [ 489.000068][ T9027] bridge0: port 2(bond3) entered disabled state [ 489.167060][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.732301][T20195] __nla_validate_parse: 11 callbacks suppressed [ 489.732320][T20195] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3777'. [ 489.768934][T20195] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3777'. [ 490.217054][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.302703][T20200] syzkaller0: entered promiscuous mode [ 490.309842][T20200] syzkaller0: entered allmulticast mode [ 490.454859][T20234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3786'. [ 490.633938][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3789'. [ 490.662012][T20243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3789'. [ 490.834889][T20253] macvtap1: entered promiscuous mode [ 490.845681][T20253] dummy0: entered promiscuous mode [ 490.929004][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3794'. [ 490.940008][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3794'. [ 490.950114][ T24] dummy0: left promiscuous mode [ 491.257009][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 491.372870][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3799'. [ 491.619842][T20299] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 492.287019][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.306518][T20333] x_tables: duplicate entry at hook 3 [ 492.344687][T20337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3816'. [ 492.672469][T20348] xt_ecn: cannot match TCP bits for non-tcp packets [ 492.725303][T20351] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3818'. [ 492.895075][T20355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.933315][T20354] block nbd2: NBD_DISCONNECT [ 492.965909][T20354] block nbd2: Send disconnect failed -32 [ 493.029891][T20354] block nbd2: shutting down sockets [ 493.327071][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.371745][T20382] bond0: invalid NS target ff00:: specified for addition [ 493.402651][T20382] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 493.865065][T20399] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 493.880690][T20399] bond0 (unregistering): Released all slaves [ 493.932237][T16567] Bluetooth: hci3: link tx timeout [ 493.937816][T16567] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 493.956027][ T5623] Bluetooth: hci3: link tx timeout [ 493.966320][ T5623] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 494.152164][ T5623] Bluetooth: hci3: link tx timeout [ 494.157422][ T5623] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 494.200433][ T5623] Bluetooth: hci3: link tx timeout [ 494.206383][ T5623] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 494.365833][T20435] netlink: 'syz.3.3842': attribute type 21 has an invalid length. [ 494.380257][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 494.402914][T20435] netlink: 'syz.3.3842': attribute type 22 has an invalid length. [ 494.441563][T20435] netlink: 'syz.3.3842': attribute type 23 has an invalid length. [ 494.502800][T20435] netlink: 'syz.3.3842': attribute type 25 has an invalid length. [ 494.543537][ T5623] Bluetooth: hci3: link tx timeout [ 494.549913][ T5623] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 494.550674][T20435] netlink: 'syz.3.3842': attribute type 26 has an invalid length. [ 494.613097][T20454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.637690][T20447] policy can only be matched on NF_INET_PRE_ROUTING [ 494.637710][T20447] unable to load match [ 494.696778][T20454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.806867][T20462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.064522][T20483] netlink: zone id is out of range [ 495.085984][T20483] netlink: zone id is out of range [ 495.097930][T20483] netlink: zone id is out of range [ 495.105080][T20483] netlink: zone id is out of range [ 495.120127][T20483] netlink: zone id is out of range [ 495.169653][ T5623] Bluetooth: hci3: link tx timeout [ 495.174867][ T5623] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 495.185227][T20483] netlink: zone id is out of range [ 495.192908][T20483] netlink: zone id is out of range [ 495.200476][T20483] netlink: zone id is out of range [ 495.378471][T20496] __nla_validate_parse: 11 callbacks suppressed [ 495.378489][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'. [ 495.381493][T20498] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 495.653830][T20510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3860'. [ 495.670157][T20510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3860'. [ 495.706284][ T5623] Bluetooth: hci3: link tx timeout [ 495.712357][ T5623] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 495.808599][ T9027] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.829559][ T9027] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.842330][ T9027] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.854312][T20527] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3865'. [ 495.865396][ T9027] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.979078][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 495.992479][T20531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3866'. [ 496.154714][T20549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3870'. [ 496.440222][T20560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3871'. [ 496.467786][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'. [ 496.490235][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'. [ 498.516192][T20510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.527416][ C1] net_ratelimit: 34 callbacks suppressed [ 498.527438][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.219326][T20599] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3883'. [ 499.566958][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.710153][T20616] bond0: entered promiscuous mode [ 499.729328][T20616] bond_slave_0: entered promiscuous mode [ 499.753860][T20616] bond_slave_1: entered promiscuous mode [ 499.837692][T20616] batadv0: entered promiscuous mode [ 499.904300][T20616] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 499.926053][T20620] hsr_slave_0: left promiscuous mode [ 499.943227][T20620] hsr_slave_1: left promiscuous mode [ 500.174626][T20634] bridge1: entered promiscuous mode [ 500.617078][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 501.410151][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.577817][T20686] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 501.647023][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 501.921377][T20700] x9: renamed from bridge_slave_0 (while UP) [ 502.023078][T20706] __nla_validate_parse: 3 callbacks suppressed [ 502.023097][T20706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3919'. [ 502.042757][T20706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3919'. [ 502.425228][T20717] netlink: 'syz.3.3925': attribute type 8 has an invalid length. [ 502.445186][T20720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3924'. [ 502.687591][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.749629][T20728] veth7: entered allmulticast mode [ 502.839681][T20740] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.3930'. [ 502.946188][T20745] macsec0: entered promiscuous mode [ 502.961053][T20746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3934'. [ 503.034741][T20753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3935'. [ 503.719335][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3944'. [ 503.737138][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 503.913523][T20786] 8021q: VLANs not supported on vxcan1 [ 504.384559][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3949'. [ 504.555855][T20812] team0: Device macvlan2 failed to change mtu [ 504.726119][T20814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 504.756738][T20814] bond0: (slave bond2): Enslaving as an active interface with an up link [ 504.767204][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 504.911938][T20827] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 504.921057][T20827] bond2: option packets_per_slave: allowed values 0 - 65535 [ 504.975952][T20827] bond2 (unregistering): Released all slaves [ 505.239483][T20841] netlink: 'syz.1.3959': attribute type 3 has an invalid length. [ 505.290770][T20847] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3958'. [ 505.807060][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 505.851253][T20862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3963'. [ 506.607261][T16567] Bluetooth: hci3: command 0x0406 tx timeout [ 506.668243][T20907] ip6t_srh: unknown srh match flags 5F28 [ 506.846990][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 507.110081][T20921] __nla_validate_parse: 1 callbacks suppressed [ 507.110129][T20921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3979'. [ 507.151630][T20925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3978'. [ 507.887042][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 507.962969][T20964] netlink: 'syz.4.3990': attribute type 4 has an invalid length. [ 507.996148][T20964] ipvlan1: entered promiscuous mode [ 508.001773][T20956] ip_tables: iptables: counters copy to user failed while replacing table [ 508.019924][T20964] ipvlan1: entered allmulticast mode [ 508.025268][T20964] veth0_vlan: entered allmulticast mode [ 508.209147][T20975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3990'. [ 508.284594][T20976] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3990'. [ 508.293787][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3992'. [ 508.368564][T20983] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3994'. [ 508.678918][T20993] netlink: 'syz.3.3996': attribute type 5 has an invalid length. [ 508.709312][T20993] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3996'. [ 508.927034][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 509.030576][T21004] netlink: 'syz.3.4001': attribute type 1 has an invalid length. [ 509.069195][T21006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4000'. [ 509.103256][T21006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4000'. [ 509.583305][T21026] IPVS: ip_vs_add_dest(): server weight less than zero [ 509.591696][ T9034] IPVS: starting estimator thread 0... [ 509.688641][T21028] IPVS: using max 31 ests per chain, 74400 per kthread [ 509.913988][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4013'. [ 509.967029][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 510.026267][T21047] ip6gre2: entered allmulticast mode [ 510.241965][T21057] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 510.397752][T21057] block nbd4: not configured, cannot reconfigure [ 510.423963][T21063] tipc: Enabling of bearer rejected, failed to enable media [ 510.498501][T21060] netlink: 'syz.4.4017': attribute type 13 has an invalid length. [ 510.506016][T21063] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 510.526342][T21063] bond4 (unregistering): Released all slaves [ 510.761548][T21057] syzkaller0: Caught tx_queue_len zero misconfig [ 510.869362][T21085] netlink: 'syz.3.4025': attribute type 11 has an invalid length. [ 511.007635][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 511.017485][T21088] netlink: 'syz.2.4026': attribute type 1 has an invalid length. [ 511.374050][T21101] bond0: (slave veth3): Enslaving as an active interface with a down link [ 511.877697][T21128] Cannot find add_set index 2 as target [ 512.047057][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 512.205724][T21143] __nla_validate_parse: 4 callbacks suppressed [ 512.205744][T21143] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4039'. [ 512.284358][T21148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.340031][T21153] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4042'. [ 512.360087][T21153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4042'. [ 512.377276][T21155] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4043'. [ 512.653689][T21166] netlink: 'syz.4.4047': attribute type 12 has an invalid length. [ 512.929326][T21173] bond2 (unregistering): Released all slaves [ 513.087063][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 513.214791][T21188] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4054'. [ 513.265463][T21188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.287775][T21193] netlink: 'syz.2.4056': attribute type 1 has an invalid length. [ 513.297118][T21193] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4056'. [ 513.448854][T21192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4055'. [ 513.459716][T21197] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4057'. [ 513.532131][T21202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4058'. [ 513.572700][T21204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4055'. [ 513.757280][T21208] netlink: Failed to add ip_vti0 helper -22 [ 513.807881][T21208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.929337][T21215] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 513.949347][T21215] bond2 (unregistering): Released all slaves [ 514.127588][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 514.451234][T21245] netlink: 'syz.3.4069': attribute type 1 has an invalid length. [ 514.872664][T21259] x_tables: unsorted entry at hook 2 [ 514.893620][T21245] bond2: entered promiscuous mode [ 514.910369][T21245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.935552][T21237] syzkaller1: entered promiscuous mode [ 514.950532][T21237] syzkaller1: entered allmulticast mode [ 515.166973][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 515.463405][T21272] netlink: 'syz.4.4075': attribute type 30 has an invalid length. [ 516.207046][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 516.436625][T21305] netlink: 'syz.0.4082': attribute type 11 has an invalid length. [ 516.920783][T21323] netlink: 'syz.4.4088': attribute type 2 has an invalid length. [ 517.247186][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 517.324406][T21312] netlink: 'syz.3.4086': attribute type 1 has an invalid length. [ 517.353478][T21348] __nla_validate_parse: 7 callbacks suppressed [ 517.353497][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4094'. [ 517.378489][T21334] syzkaller0: entered promiscuous mode [ 517.386492][T21334] syzkaller0: entered allmulticast mode [ 517.395113][T21348] netlink: 'syz.0.4094': attribute type 5 has an invalid length. [ 517.406665][T21348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4094'. [ 518.289766][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 519.328720][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 520.211043][T21349] gtp1: entered promiscuous mode [ 520.218428][T21312] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 520.366960][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 520.506353][T21373] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 520.561343][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4102'. [ 520.601674][T21377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4102'. [ 520.682902][T21381] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4102'. [ 521.406969][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 522.369936][T21443] xt_CT: No such helper "pptp" [ 522.447064][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 523.120936][T21471] syzkaller0: entered promiscuous mode [ 523.140875][T21471] syzkaller0: entered allmulticast mode [ 523.236779][T21471] netlink: 768 bytes leftover after parsing attributes in process `syz.2.4129'. [ 523.290626][T21480] netlink: 'syz.0.4133': attribute type 21 has an invalid length. [ 523.343205][T21480] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4133'. [ 523.408973][T21480] openvswitch: netlink: IP tunnel dst address not specified [ 523.451932][T21480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.487074][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 523.556819][T21494] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4138'. [ 523.604678][T21492] syzkaller0: entered promiscuous mode [ 523.611196][T21492] syzkaller0: entered allmulticast mode [ 523.798925][ T9039] IPVS: starting estimator thread 0... [ 523.862236][T21501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4140'. [ 523.907253][T21500] IPVS: using max 30 ests per chain, 72000 per kthread [ 524.283253][T21504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4141'. [ 524.533582][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 525.568533][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 526.606965][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 526.984092][T21546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4154'. [ 527.013212][T21547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4153'. [ 527.272010][T21542] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.280016][T21542] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.411462][T21542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.435759][T21542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.627909][T21542] bond2: left allmulticast mode [ 527.632966][T21542] bond2: left promiscuous mode [ 527.647130][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.765924][ T9039] batman_adv: batadv0: Interface deactivated: gretap3 [ 527.841272][T21563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4159'. [ 528.348235][ T9039] batman_adv: batadv0: Removing interface: gretap3 [ 528.399109][ T9039] bond6 (unregistering): (slave geneve3): Releasing active interface [ 528.553453][ T9039] bond0 (unregistering): Released all slaves [ 528.585118][ T9039] bond1 (unregistering): Released all slaves [ 528.609691][ T9039] bond2 (unregistering): Released all slaves [ 528.630222][ T9039] bond3 (unregistering): Released all slaves [ 528.656391][ T9039] bond4 (unregistering): Released all slaves [ 528.686966][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 528.696544][ T9039] bond5 (unregistering): Released all slaves [ 528.731806][ T9039] bond6 (unregistering): Released all slaves [ 528.754820][ T9039] bond7 (unregistering): (slave veth9): Releasing active interface [ 528.773995][ T9039] bond7 (unregistering): Released all slaves [ 528.804433][T21573] : renamed from vxcan1 (while UP) [ 528.849287][ T9033] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.907674][ T9027] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.960337][ T9027] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.043211][ T9027] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.080661][ T9039] ovs-system: left promiscuous mode [ 529.181459][T21587] netlink: 'syz.3.4165': attribute type 7 has an invalid length. [ 529.214002][T21587] netlink: 'syz.3.4165': attribute type 8 has an invalid length. [ 529.260903][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4164'. [ 529.726974][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 529.868662][T21612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.929693][T21616] netlink: 'syz.0.4175': attribute type 1 has an invalid length. [ 529.959411][T21616] netlink: 'syz.0.4175': attribute type 3 has an invalid length. [ 529.962613][T21612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.972827][T21616] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4175'. [ 530.018825][T21626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4174'. [ 530.118287][T21626] netlink: 'syz.1.4174': attribute type 9 has an invalid length. [ 530.151366][T21626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4174'. [ 530.272188][T21626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4174'. [ 530.335938][T21626] netlink: 'syz.1.4174': attribute type 9 has an invalid length. [ 530.372007][T21626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4174'. [ 530.611173][ T9039] hsr_slave_1: left promiscuous mode [ 530.691321][T21642] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4182'. [ 530.722290][ T9039] veth1_macvtap: left promiscuous mode [ 530.731346][ T9039] veth0_macvtap: left promiscuous mode [ 530.738706][ T9039] veth1_vlan: left promiscuous mode [ 530.766979][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.994239][T21667] sctp: [Deprecated]: syz.3.4180 (pid 21667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 530.994239][T21667] Use struct sctp_sack_info instead [ 531.782149][T21676] tipc: Enabling of bearer rejected, failed to enable media [ 531.807035][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.163610][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4188'. [ 532.208330][T21692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4188'. [ 532.577024][T21705] netlink: 'syz.0.4196': attribute type 4 has an invalid length. [ 532.821071][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4201'. [ 532.846962][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 533.724205][T21749] netlink: 'syz.3.4209': attribute type 1 has an invalid length. [ 533.828964][T21749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 533.886964][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.208292][ T5623] Bluetooth: hci5: command 0x0406 tx timeout [ 534.524742][T21787] __nla_validate_parse: 3 callbacks suppressed [ 534.524760][T21787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 534.573411][T21787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4220'. [ 534.927040][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.991319][T21806] ip_tables: iptables: counters copy to user failed while replacing table [ 535.013266][T21806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.034459][T21801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.305865][T21822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4233'. [ 535.345866][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e8f1c00: rx timeout, send abort [ 535.493304][T21834] netlink: 'syz.2.4235': attribute type 16 has an invalid length. [ 535.513852][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4236'. [ 535.533738][T21834] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.4235'. [ 535.591155][T21837] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 535.841535][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e8f0c00: rx timeout, send abort [ 535.855067][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e8f1c00: abort rx timeout. Force session deactivation [ 535.966961][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 536.301050][T21861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4243'. [ 536.336779][T21861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4243'. [ 536.348768][T21852] bond3: invalid ARP target 0.0.0.0 specified for addition [ 536.350765][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e8f0c00: abort rx timeout. Force session deactivation [ 536.376309][T21852] bond3: option arp_ip_target: invalid value (0) [ 536.411047][T21852] bond3 (unregistering): Released all slaves [ 536.468810][T21867] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4248'. [ 536.503179][T21858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4245'. [ 536.525230][T21868] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 536.807301][T21878] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4251'. [ 537.007039][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.047048][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.120853][T21930] vlan1: entered promiscuous mode [ 538.131470][T21930] geneve1: entered promiscuous mode [ 538.138539][T21930] vlan1: entered allmulticast mode [ 538.145060][T21930] geneve1: entered allmulticast mode [ 538.304662][T21936] ip_tables: iptables: counters copy to user failed while replacing table [ 538.971553][T21966] macvlan0: entered promiscuous mode [ 539.351881][T21987] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 [ 539.972438][T22010] __nla_validate_parse: 8 callbacks suppressed [ 539.972455][T22010] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4290'. [ 540.004148][T22013] ip6t_srh: unknown srh invflags 4000 [ 540.129832][ C1] net_ratelimit: 1 callbacks suppressed [ 540.129851][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 540.233916][T22018] netlink: 'syz.1.4293': attribute type 8 has an invalid length. [ 540.463096][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4296'. [ 540.619653][T22038] netlink: Unknown NAT attribute (type=16383, max=9) [ 540.634756][T22038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.756104][T22043] netlink: 'syz.4.4299': attribute type 3 has an invalid length. [ 540.765737][T22041] netlink: 'syz.4.4299': attribute type 3 has an invalid length. [ 540.777266][T22041] netlink: 'syz.4.4299': attribute type 4 has an invalid length. [ 540.780692][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 540.785793][T22041] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.4299'. [ 540.808992][T22043] netlink: 'syz.4.4299': attribute type 4 has an invalid length. [ 540.825543][T22043] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.4299'. [ 541.034570][T22050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4302'. [ 541.167013][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.389350][T22067] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4307'. [ 541.435692][T22068] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 542.207068][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 542.459740][T22115] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 542.687856][T22122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4328'. [ 542.809841][T22140] netlink: 'syz.4.4327': attribute type 1 has an invalid length. [ 542.859604][T22140] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4327'. [ 542.923278][T22140] netlink: 41 bytes leftover after parsing attributes in process `syz.4.4327'. [ 543.013885][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.034401][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.122504][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.164486][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.177430][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.198603][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.218065][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.247021][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.249367][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.297833][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.346710][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.369295][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.383675][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.394686][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.414023][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.440999][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.488544][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.544341][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.571421][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.584120][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.619952][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.666023][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.750760][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.761241][T22177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4342'. [ 543.792408][T22145] tipc: Enabling of bearer rejected, failed to enable media [ 543.921812][T22180] xt_l2tp: unknown flags: 10 [ 544.287555][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.405689][T22194] openvswitch: netlink: Tunnel attr 12559 out of range max 16 [ 544.913667][T22211] netlink: 'syz.3.4352': attribute type 2 has an invalid length. [ 545.327057][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.374813][T22231] netlink: 'syz.0.4359': attribute type 10 has an invalid length. [ 545.408341][T22233] netlink: 'syz.2.4360': attribute type 5 has an invalid length. [ 545.434630][T22233] __nla_validate_parse: 3 callbacks suppressed [ 545.434664][T22233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4360'. [ 545.451035][T22231] syz_tun: entered promiscuous mode [ 545.464475][T22233] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4360'. [ 545.578049][T22237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4360'. [ 545.616209][T22237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4360'. [ 545.661546][T22237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4360'. [ 545.683467][T22243] openvswitch: netlink: IP tunnel TTL not specified. [ 545.693009][T22244] openvswitch: netlink: IP tunnel TTL not specified. [ 545.700381][T22244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.710040][T22243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.769566][T22247] netlink: 'syz.3.4363': attribute type 1 has an invalid length. [ 545.799405][T22243] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4363'. [ 545.889160][T22220] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 545.921805][T22220] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 546.032855][T22220] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 546.042552][T22220] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 546.221350][T22220] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 546.231934][T22220] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 546.323989][T22263] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 546.366963][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.382984][T22220] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 546.406954][T22220] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 546.514676][T22269] 8021q: VLANs not supported on ip6tnl0 [ 546.540635][T22269] 8021q: VLANs not supported on ip6tnl0 [ 546.576133][T22220] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 546.607400][T22220] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 546.731486][T22269] 8021q: VLANs not supported on ip6tnl0 [ 546.908326][T22269] 8021q: VLANs not supported on ip6tnl0 [ 546.946632][T22269] 8021q: VLANs not supported on ip6tnl0 [ 547.065635][T22269] 8021q: VLANs not supported on ip6tnl0 [ 547.109738][T22269] 8021q: VLANs not supported on ip6tnl0 [ 547.154616][T22269] 8021q: VLANs not supported on ip6tnl0 [ 547.190270][T22269] 8021q: VLANs not supported on ip6tnl0 [ 547.242708][T22269] 8021q: VLANs not supported on ip6tnl0 [ 547.406959][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.626323][T22300] ipvlan2: entered allmulticast mode [ 547.708616][T22300] batadv_slave_1: entered allmulticast mode [ 547.772555][T22300] batman_adv: batadv0: Adding interface: ipvlan2 [ 547.795744][T22300] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.859554][T22300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.861141][T22314] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.4375'. [ 547.873102][T22300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.933684][T22300] batman_adv: batadv0: Interface activated: ipvlan2 [ 548.008049][T22310] tipc: Started in network mode [ 548.025897][T22310] tipc: Node identity ac141441, cluster identity 4711 [ 548.094116][T22310] tipc: Enabled bearer , priority 10 [ 548.446962][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.725432][T22346] xt_CT: You must specify a L4 protocol and not use inversions on it [ 548.832711][T22350] netlink: 'syz.3.4385': attribute type 10 has an invalid length. [ 548.986132][T22354] netlink: 'syz.4.4387': attribute type 2 has an invalid length. [ 549.131316][T22354] : entered promiscuous mode [ 549.187045][ T24] tipc: Node number set to 2886997057 [ 549.229934][T22361] team0: No ports can be present during mode change [ 549.424387][T22372] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4391'. [ 549.469297][T22376] wg1: entered promiscuous mode [ 549.487048][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.514942][T22376] wg1: entered allmulticast mode [ 549.583131][T22378] : renamed from vlan1 [ 550.262002][T22401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4399'. [ 550.527039][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.640548][T22407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4402'. [ 550.707620][T22407] veth0_macvtap: left promiscuous mode [ 550.914547][T22420] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4404'. [ 550.951805][T22425] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4402'. [ 551.118307][T22427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.218392][T22427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.263984][T22427] bond0 (unregistering): Released all slaves [ 551.567013][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.723916][T22452] netlink: NAT attribute has 4 unknown bytes [ 551.760730][T22452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.801026][T22458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4412'. [ 552.259641][T22472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4417'. [ 552.611458][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 552.719672][T22499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.762442][T22497] xt_hashlimit: size too large, truncated to 1048576 [ 552.961601][T22505] netlink: 'syz.3.4425': attribute type 1 has an invalid length. [ 553.332278][T22513] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 553.367989][T22524] netlink: 'syz.1.4431': attribute type 21 has an invalid length. [ 553.400097][T22524] IPv6: NLM_F_CREATE should be specified when creating new route [ 553.453983][T22524] netlink: 'syz.1.4431': attribute type 1 has an invalid length. [ 553.647065][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.184693][T22540] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 554.238504][T22540] syzkaller0: entered promiscuous mode [ 554.251930][T22540] syzkaller0: entered allmulticast mode [ 554.463615][T22577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4439'. [ 554.686967][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.816584][T22592] xt_TPROXY: Can be used only with -p tcp or -p udp [ 554.857415][T22592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4444'. [ 554.957974][T22588] netlink: NAT attribute has 4 unknown bytes [ 554.990193][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4444'. [ 555.002589][T22588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.086705][T22606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4444'. [ 555.726957][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.151128][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.351525][T22649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4451'. [ 556.518186][T22662] xt_hashlimit: size too large, truncated to 1048576 [ 556.767125][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.134770][T22684] netlink: 'syz.4.4464': attribute type 2 has an invalid length. [ 557.321667][T22689] syzkaller0: left promiscuous mode [ 557.360039][T22689] syzkaller0: left allmulticast mode [ 557.386550][T22697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4466'. [ 557.452759][T22702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4466'. [ 557.487907][T22697] gretap0: entered promiscuous mode [ 557.661186][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4470'. [ 557.688168][T22708] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4471'. [ 557.738756][ C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.751498][ C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.804716][T22713] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4472'. [ 557.813782][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.896260][T22721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.922582][T22721] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 557.951864][T22720] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4476'. [ 558.145616][T22716] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.172526][T22721] tipc: Started in network mode [ 558.178127][T22721] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 558.196497][T22737] syzkaller0: entered promiscuous mode [ 558.217934][T22737] syzkaller0: entered allmulticast mode [ 558.426850][T22722] can: request_module (can-proto-0) failed. [ 558.473260][T22716] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.491227][T22750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4479'. [ 558.546251][T22744] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4479'. [ 558.806785][T22716] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.848568][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.033921][T22716] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.075676][T22770] netlink: 'syz.1.4486': attribute type 33 has an invalid length. [ 559.204962][T22776] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4487'. [ 559.527304][ T9026] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.650727][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.731024][ T9026] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.797115][ T9026] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.887097][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 560.419144][T22830] netlink: 'syz.1.4499': attribute type 29 has an invalid length. [ 560.799274][T22837] tipc: Disabling bearer [ 560.928536][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.345174][T22866] netlink: 'syz.4.4507': attribute type 1 has an invalid length. [ 561.363931][T22866] __nla_validate_parse: 6 callbacks suppressed [ 561.363949][T22866] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4507'. [ 561.405375][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4507'. [ 561.967094][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.370963][T22901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.449459][T22921] ip6gre0: entered promiscuous mode [ 562.520370][T22921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4519'. [ 562.613876][T22908] macsec1: entered promiscuous mode [ 562.701849][T22933] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4521'. [ 562.796499][T22933] netlink: 'syz.3.4521': attribute type 18 has an invalid length. [ 562.853440][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.006964][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 563.628197][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4531'. [ 563.681552][T22974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4531'. [ 563.723018][T22979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4534'. [ 563.766388][T22979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4534'. [ 564.046978][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.453286][T23028] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4545'. [ 564.662373][T23032] x_tables: ip_tables: osf match: only valid for protocol 6 [ 564.746660][T23036] netlink: 'syz.0.4546': attribute type 15 has an invalid length. [ 564.908059][T23049] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4550'. [ 565.086960][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.684463][T23069] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 566.126957][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.166984][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.709207][T23141] __nla_validate_parse: 3 callbacks suppressed [ 567.709227][T23141] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4576'. [ 568.015145][T23161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4580'. [ 568.050251][T23163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4582'. [ 568.206959][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.663771][T23191] x_tables: duplicate underflow at hook 2 [ 568.856323][T23199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4589'. [ 568.898918][T23202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4590'. [ 569.247032][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 569.250276][T23208] syzkaller1: entered promiscuous mode [ 569.269295][T23208] syzkaller1: entered allmulticast mode [ 569.831769][T23234] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 569.916223][T23247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4600'. [ 569.926694][T23234] bond5 (unregistering): Released all slaves [ 569.952245][T23249] netlink: 'syz.4.4603': attribute type 3 has an invalid length. [ 570.225995][ T30] audit: type=1107 audit(1787540925.528:8): pid=23262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>pً5%dZfUA٠0ltݕ' [ 570.287134][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 570.326622][T23240] bridge5: entered promiscuous mode [ 570.353264][T23240] bridge5: entered allmulticast mode [ 570.393565][T23266] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 570.839980][T23283] block nbd3: not configured, cannot reconfigure [ 571.071396][T23299] ip_tables: iptables: counters copy to user failed while replacing table [ 571.327200][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 571.407868][T23319] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4617'. [ 571.864792][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4622'. [ 571.875041][T23335] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4622'. [ 571.962345][T23336] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 571.990946][T23336] gretap1: entered promiscuous mode [ 572.001083][T23336] gretap1: entered allmulticast mode [ 572.122160][T23343] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.276568][T23347] syz.4.4625 (23347) used obsolete PPPIOCDETACH ioctl [ 572.367108][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 572.569633][T23364] bond5: Unable to set up delay as MII monitoring is disabled [ 572.584696][T23364] bond5 (unregistering): Released all slaves [ 572.814888][T23369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4632'. [ 572.863219][T23374] netlink: 'syz.3.4635': attribute type 30 has an invalid length. [ 572.904395][T23378] batadv_slave_0: entered promiscuous mode [ 572.919704][T23378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4636'. [ 572.983245][T23374] bond4: option arp_missed_max: invalid value (0) [ 572.992930][T23374] bond4: option arp_missed_max: allowed values 1 - 255 [ 573.004425][T23374] bond4 (unregistering): Released all slaves [ 573.070730][T23378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.216678][T23378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.329072][T23395] netlink: 'syz.3.4638': attribute type 30 has an invalid length. [ 573.406965][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 573.477456][T23402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4639'. [ 573.509409][T23402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4639'. [ 573.533687][T23398] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 573.657641][T23405] ip6tnl0: Caught tx_queue_len zero misconfig [ 573.794180][T23402] erspan0: entered promiscuous mode [ 573.899415][T23423] ip_tables: iptables: counters copy to user failed while replacing table [ 573.971067][T23428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4645'. [ 574.112921][T23402] erspan0: left promiscuous mode [ 574.396334][T23431] syzkaller0: entered promiscuous mode [ 574.402048][T23431] syzkaller0: entered allmulticast mode [ 574.447003][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 575.494885][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 576.529701][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 577.243762][T23445] tipc: Enabling of bearer rejected, failed to enable media [ 577.281497][T23461] syzkaller0: entered promiscuous mode [ 577.309769][T23461] syzkaller0: entered allmulticast mode [ 577.443267][T23464] netlink: 'syz.4.4654': attribute type 12 has an invalid length. [ 577.567861][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 577.769921][T23478] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4656'. [ 577.885404][T23478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4656'. [ 577.926824][T23483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4659'. [ 578.180915][T23492] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 578.520944][T23519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4665'. [ 578.564539][T23522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4668'. [ 578.565418][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4665'. [ 578.606965][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 578.676639][T23522] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4668'. [ 579.284801][T23548] netlink: 'syz.1.4675': attribute type 1 has an invalid length. [ 579.330042][T23548] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4675'. [ 579.425182][T23559] netlink: 'syz.2.4678': attribute type 12 has an invalid length. [ 579.480719][T23562] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4678'. [ 579.491450][T23559] netlink: 'syz.2.4678': attribute type 29 has an invalid length. [ 579.539426][T23562] ip_tables: iptables: counters copy to user failed while replacing table [ 579.575342][T23559] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4678'. [ 579.610341][T23559] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4678'. [ 579.646993][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 579.698430][T23572] lo: Caught tx_queue_len zero misconfig [ 579.767884][ T5271] v: left promiscuous mode [ 579.791376][ T5733] v: entered promiscuous mode [ 580.233437][T23593] team0 (unregistering): Port device team_slave_0 removed [ 580.245012][T23593] team0 (unregistering): Port device team_slave_1 removed [ 580.272286][T23593] team0 (unregistering): Port device macvlan2 removed [ 580.406775][T23603] team0 (unregistering): Port device team_slave_0 removed [ 580.459912][T23603] team0 (unregistering): Port device team_slave_1 removed [ 580.696984][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.791110][T23611] netlink: 'syz.4.4690': attribute type 1 has an invalid length. [ 580.803860][T23612] netlink: 'syz.4.4690': attribute type 1 has an invalid length. [ 580.856462][T23615] netlink: 'syz.0.4691': attribute type 1 has an invalid length. [ 580.904536][ T30] audit: type=1804 audit(1787540936.208:9): pid=23611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4690" name="/newroot/298/cgroup.controllers" dev="tmpfs" ino=1533 res=1 errno=0 [ 581.003021][ T30] audit: type=1800 audit(1787540936.208:10): pid=23611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4690" name="cgroup.controllers" dev="tmpfs" ino=1533 res=0 errno=0 [ 581.726962][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 582.015177][T23657] syzkaller0: entered promiscuous mode [ 582.059934][T23657] syzkaller0: entered allmulticast mode [ 582.108309][T23664] netlink: 'syz.4.4705': attribute type 1 has an invalid length. [ 582.125697][T23664] netlink: 'syz.4.4705': attribute type 3 has an invalid length. [ 582.148259][T23664] NCSI netlink: No device for ifindex 813332851 [ 582.368923][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.413548][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.459092][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.506697][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.767094][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 583.120069][T23699] vlan2: entered allmulticast mode [ 583.132424][T23699] veth1_virt_wifi: entered allmulticast mode [ 583.302835][T23708] No such timeout policy "syz0" [ 583.328070][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 583.479302][T23713] ipt_REJECT: TCP_RESET invalid for non-tcp [ 583.535186][T23713] __nla_validate_parse: 12 callbacks suppressed [ 583.535234][T23713] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4722'. [ 583.724126][T23695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.807085][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 583.985362][T23727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4724'. [ 584.012493][T23724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4723'. [ 584.062589][T23724] netlink: 'syz.4.4723': attribute type 1 has an invalid length. [ 584.075085][T23724] netlink: 'syz.4.4723': attribute type 2 has an invalid length. [ 584.327975][T23739] openvswitch: netlink: Flow key attr not present in new flow. [ 584.354831][T23739] openvswitch: netlink: Flow key attr not present in new flow. [ 584.586493][T23749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4729'. [ 584.641837][T23751] netlink: 'syz.1.4733': attribute type 1 has an invalid length. [ 584.779755][T23757] netlink: 'syz.3.4730': attribute type 1 has an invalid length. [ 584.834031][T23758] : renamed from dummy0 [ 584.846971][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 584.907610][T23757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 585.123559][T23780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4734'. [ 585.801550][T23806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4741'. [ 585.856851][T23808] netlink: 'syz.0.4742': attribute type 4 has an invalid length. [ 585.887270][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 585.915640][T23815] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4743'. [ 585.925969][T23808] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4742'. [ 586.103345][T23821] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4746'. [ 586.378411][T23825] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4747'. [ 586.460438][T23826] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 586.461643][T23826] block (null): Could not allocate knbd recv work queue. [ 586.539223][T23826] nbd: failed to add new device [ 586.901508][T23858] netlink: 'syz.2.4754': attribute type 21 has an invalid length. [ 586.926969][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 586.958509][T23863] netlink: 'syz.0.4755': attribute type 2 has an invalid length. [ 587.029854][T23868] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 587.898569][T23913] netlink: 'syz.4.4765': attribute type 29 has an invalid length. [ 587.967161][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 588.232478][T23920] netlink: Failed to add helper -22 [ 588.273500][T23920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.007160][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 589.461898][T23972] __nla_validate_parse: 10 callbacks suppressed [ 589.461915][T23972] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4783'. [ 589.505448][T23976] macvlan0: entered promiscuous mode [ 589.581023][T23981] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4785'. [ 589.696902][T23981] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.704632][T23981] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.789889][T23989] vxcan0: tx address claim with different name [ 589.924921][T23993] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4788'. [ 589.972751][T23993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4788'. [ 590.047134][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 591.087158][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 591.313400][T24057] bridge1: entered promiscuous mode [ 591.322928][T24057] bridge1: entered allmulticast mode [ 591.325520][T24063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.491986][T24073] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 591.523272][T24074] tipc: Enabling of bearer rejected, already enabled [ 591.547045][T24071] bridge0: port 3(veth1_to_bridge) entered blocking state [ 591.559057][T24071] bridge0: port 3(veth1_to_bridge) entered disabled state [ 591.566526][T24071] veth1_to_bridge: entered allmulticast mode [ 591.583212][T24071] veth1_to_bridge: entered promiscuous mode [ 591.590606][T24071] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 591.608075][T24071] bridge0: port 3(veth1_to_bridge) entered blocking state [ 591.618466][T24071] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 591.636728][T24074] xt_hl: Unknown Hop Limit match mode: 206 [ 591.846040][T24086] xt_hashlimit: size too large, truncated to 1048576 [ 592.013436][T24097] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 592.127162][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 592.183935][T24108] openvswitch: netlink: Duplicate or invalid key (type 0). [ 592.201506][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4816'. [ 592.613979][T24126] netlink: 'syz.4.4819': attribute type 1 has an invalid length. [ 592.865858][T24128] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 592.923969][T24126] veth5: entered promiscuous mode [ 592.932697][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4820'. [ 592.945755][T24126] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 592.955203][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4820'. [ 593.167188][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 593.434558][T24160] gretap0: entered promiscuous mode [ 593.450131][T24160] vlan2: entered promiscuous mode [ 593.827293][T24176] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4834'. [ 593.882761][T24176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4834'. [ 594.038320][T24185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.107706][T24191] netlink: 'syz.4.4841': attribute type 1 has an invalid length. [ 594.207658][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 594.293766][T24191] veth7: entered allmulticast mode [ 594.318305][T24191] bond4: (slave veth7): Enslaving as an active interface with a down link [ 594.328711][T24211] openvswitch: netlink: EtherType 300 is less than min 600 [ 594.384419][T24200] bond4: (slave veth0_to_bond): making interface the new active one [ 594.436060][T24200] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 594.556392][T24205] macvlan2: entered promiscuous mode [ 594.573231][T24205] macvlan2: entered allmulticast mode [ 594.624094][T24205] bond4: entered promiscuous mode [ 594.641763][T24205] veth0_to_bond: entered promiscuous mode [ 594.656623][T24205] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 594.685264][T24205] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 594.744035][T24205] bond4: left promiscuous mode [ 594.764009][T24224] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4850'. [ 594.766807][T24227] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4850'. [ 594.786750][T24205] veth0_to_bond: left promiscuous mode [ 594.788074][T24225] netlink: 'syz.0.4850': attribute type 1 has an invalid length. [ 594.817383][T24224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4850'. [ 594.856705][T24224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4850'. [ 594.991438][T24225] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 595.088510][T24240] x_tables: duplicate underflow at hook 1 [ 595.247177][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 595.263732][T24253] netlink: 'syz.3.4852': attribute type 7 has an invalid length. [ 595.282053][T24253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4852'. [ 595.299414][T24255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4856'. [ 595.301912][T24253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4852'. [ 595.372586][T24255] ip6t_srh: unknown srh match flags 4000 [ 595.581272][T24262] bond5: option mode: invalid value (10) [ 595.591623][T24262] bond5 (unregistering): Released all slaves [ 595.632250][T24269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4862'. [ 596.286975][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 596.325319][T24300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4868'. [ 596.375303][T24300] bridge: RTM_NEWNEIGH with invalid ether address [ 596.439002][T24309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4869'. [ 596.467753][T24312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.975139][T24334] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 597.186397][T24349] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 597.230168][T24349] --map-set only usable from mangle table [ 597.327127][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 598.250386][T24400] openvswitch: netlink: Duplicate or invalid key (type 0). [ 598.367146][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 598.820152][T24429] 8021q: adding VLAN 0 to HW filter on device bond5 [ 599.407056][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 599.546753][T24461] macvtap0: entered promiscuous mode [ 599.583937][T24461] macvtap0: entered allmulticast mode [ 599.610750][T24461] veth1_vlan: entered allmulticast mode [ 599.896298][T24488] __nla_validate_parse: 5 callbacks suppressed [ 599.896315][T24488] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4911'. [ 600.078477][T24491] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 600.144765][T24491] bond5 (unregistering): Released all slaves [ 600.447035][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 600.503854][T24512] x_tables: duplicate entry at hook 4 [ 600.602841][T24519] netlink: 'syz.3.4918': attribute type 3 has an invalid length. [ 600.660416][T24519] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4918'. [ 601.001831][T24540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4924'. [ 601.053397][T24540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4924'. [ 601.487023][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 601.805693][T24577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4934'. [ 602.091904][T24583] syzkaller0: entered promiscuous mode [ 602.111287][T24583] syzkaller0: entered allmulticast mode [ 602.150880][T24582] syzkaller0: entered allmulticast mode [ 602.187815][T24582] netlink: 'syz.2.4936': attribute type 1 has an invalid length. [ 602.493485][T24596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4938'. [ 602.531234][T24582] bond3: entered promiscuous mode [ 602.537076][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 602.548330][T24582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 602.601539][T24591] bond1: option mode: unable to set because the bond device has slaves [ 602.624554][T24597] bond1: (slave vlan2): Opening slave failed [ 602.671623][T24598] 8021q: adding VLAN 0 to HW filter on device bond3 [ 602.679638][T24598] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 602.693528][T24598] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 602.715653][T24598] bond3: (slave ip6gre1): making interface the new active one [ 602.732096][T24598] ip6gre1: entered promiscuous mode [ 602.740230][T24598] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 603.009074][T24611] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4943'. [ 603.450353][T24640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4952'. [ 603.460125][T24637] netlink: 'syz.4.4951': attribute type 16 has an invalid length. [ 603.483973][T24640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4952'. [ 603.498792][T24637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4951'. [ 603.532568][T24641] netlink: 'syz.4.4951': attribute type 1 has an invalid length. [ 603.567049][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 604.074651][T24659] macvtap1: entered promiscuous mode [ 604.081672][T24659] dummy0: entered promiscuous mode [ 604.343068][ T1215] dummy0: left promiscuous mode [ 604.607014][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 604.981124][T24700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4969'. [ 605.072458][T24700] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 605.134338][T24706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4970'. [ 605.334886][T24709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4971'. [ 605.364295][T24716] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4973'. [ 605.486800][T24714] pim6reg527: entered allmulticast mode [ 605.522568][T24722] veth1_to_bridge: left allmulticast mode [ 605.581073][T24722] veth1_to_bridge: left promiscuous mode [ 605.613034][T24722] bridge0: port 3(veth1_to_bridge) entered disabled state [ 605.647031][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 605.700612][T24722] bridge_slave_1: left allmulticast mode [ 605.743218][T24722] bridge_slave_1: left promiscuous mode [ 605.770030][T24734] netlink: 'syz.2.4980': attribute type 8 has an invalid length. [ 605.779890][T24722] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.813872][T24722] bridge_slave_0: left allmulticast mode [ 605.844480][T24722] bridge_slave_0: left promiscuous mode [ 605.876698][T24722] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.272886][T24756] netlink: 'syz.3.4988': attribute type 2 has an invalid length. [ 606.296425][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4988'. [ 606.564338][T24771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4991'. [ 606.686972][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 607.191307][T24800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5001'. [ 607.212379][T24805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5003'. [ 607.335265][T24807] xt_TCPMSS: Only works on TCP SYN packets [ 607.398860][T24812] xt_TCPMSS: Only works on TCP SYN packets [ 607.498931][T24819] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5007'. [ 607.557581][T24820] bridge_slave_1: left allmulticast mode [ 607.563439][T24820] bridge_slave_1: left promiscuous mode [ 607.572615][T24820] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.727016][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 607.784245][T24828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5009'. [ 608.001786][T24837] FAULT_INJECTION: forcing a failure. [ 608.001786][T24837] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 608.026839][T24837] CPU: 0 UID: 0 PID: 24837 Comm: syz.2.5012 Not tainted syzkaller #0 PREEMPT(full) [ 608.026866][T24837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.026884][T24837] Call Trace: [ 608.026891][T24837] [ 608.026902][T24837] dump_stack_lvl+0xe8/0x150 [ 608.026942][T24837] should_fail_ex+0x410/0x560 [ 608.026975][T24837] _copy_from_user+0x2d/0xb0 [ 608.026995][T24837] ___sys_sendmsg+0x1c6/0x360 [ 608.027022][T24837] ? __lock_acquire+0x683/0x2cf0 [ 608.027053][T24837] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.027114][T24837] ? __fget_files+0x2a/0x420 [ 608.027138][T24837] ? __fget_files+0x3a2/0x420 [ 608.027173][T24837] __x64_sys_sendmsg+0x1b1/0x290 [ 608.027204][T24837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 608.027252][T24837] do_syscall_64+0x166/0x520 [ 608.027275][T24837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.027293][T24837] ? clear_bhb_loop+0x70/0xc0 [ 608.027317][T24837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.027336][T24837] RIP: 0033:0x7f637ef9e0d9 [ 608.027353][T24837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.027370][T24837] RSP: 002b:00007f637feea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.027391][T24837] RAX: ffffffffffffffda RBX: 00007f637f225fa0 RCX: 00007f637ef9e0d9 [ 608.027405][T24837] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 608.027417][T24837] RBP: 00007f637feea090 R08: 0000000000000000 R09: 0000000000000000 [ 608.027429][T24837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.027440][T24837] R13: 00007f637f226038 R14: 00007f637f225fa0 R15: 00007ffdba0b65a8 [ 608.027472][T24837] [ 608.485364][T24859] x_tables: unsorted entry at hook 2 [ 608.585683][T24870] xt_hashlimit: size too large, truncated to 1048576 [ 608.682233][T24875] : renamed from vxcan1 (while UP) [ 608.817251][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 609.191654][ T9025] IPVS: starting estimator thread 0... [ 609.279357][T24929] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 609.337132][T24931] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 609.378408][T24922] IPVS: using max 43 ests per chain, 103200 per kthread [ 609.604874][T24947] netlink: 'syz.1.5044': attribute type 1 has an invalid length. [ 609.627269][T24946] sch_tbf: burst 65539 is lower than device syzkaller0 mtu (65589) ! [ 609.717594][T24950] netlink: 'syz.0.5046': attribute type 23 has an invalid length. [ 609.901694][T24963] tipc: Enabling of bearer rejected, already enabled [ 609.917044][T24963] block nbd2: Unsupported socket: should be TCP or UNIX. [ 609.927213][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 610.035443][T24969] vxcan0: tx drop: invalid da for name 0x00000000000000c7 [ 610.196678][T24976] bridge0: port 1(1x9) entered disabled state [ 610.285413][T24989] __nla_validate_parse: 8 callbacks suppressed [ 610.285431][T24989] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5056'. [ 610.391885][T24992] macsec1: entered promiscuous mode [ 610.397165][T24992] batadv0: entered promiscuous mode [ 610.406428][T24992] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 610.414236][T24992] batadv0: left promiscuous mode [ 610.445171][T24978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 610.464286][T24999] netlink: 'syz.1.5063': attribute type 24 has an invalid length. [ 610.588653][T25008] IPVS: Unknown mcast interface: nr0 [ 610.770241][T25021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5069'. [ 610.799881][T25021] vlan1: entered promiscuous mode [ 610.805015][T25021] erspan0: entered promiscuous mode [ 611.006977][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 611.027030][T25025] xt_TCPMSS: Only works on TCP SYN packets [ 611.118562][T25034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5074'. [ 611.153006][T25030] netlink: 'syz.4.5072': attribute type 1 has an invalid length. [ 611.155505][T25034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5074'. [ 611.229092][T25030] 8021q: adding VLAN 0 to HW filter on device bond5 [ 611.291491][T25029] netlink: 'syz.4.5072': attribute type 13 has an invalid length. [ 611.320950][T25045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5073'. [ 611.733919][T25064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5079'. [ 611.790929][T25068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5083'. [ 611.799909][T25068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5083'. [ 611.810746][T25062] netlink: 'syz.0.5081': attribute type 1 has an invalid length. [ 611.865679][T25066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5082'. [ 611.961037][T25078] syzkaller1: entered promiscuous mode [ 611.966663][T25078] syzkaller1: entered allmulticast mode [ 612.057172][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 612.131582][T25082] IPv6: sit1: Disabled Multicast RS [ 612.320718][T25082] veth9: entered promiscuous mode [ 612.387931][T25062] nbd2: detected capacity change from 0 to 63 [ 612.557766][T25096] IPv6: addrconf: prefix option has invalid lifetime [ 612.573865][T25096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5089'. [ 612.614577][ T5623] block nbd2: Receive control failed (result -104) [ 613.011180][T25120] netlink: 'syz.4.5097': attribute type 2 has an invalid length. [ 613.036300][T25120] syzkaller0: left promiscuous mode [ 613.107637][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 613.133531][T25120] syzkaller0: left allmulticast mode [ 613.158878][T25119] netlink: 'syz.0.5096': attribute type 2 has an invalid length. [ 613.338579][T25143] ip_tables: iptables: counters copy to user failed while replacing table [ 613.466948][T25151] openvswitch: netlink: Message has 4 unknown bytes. [ 613.572388][T25153] netlink: 'syz.0.5107': attribute type 1 has an invalid length. [ 613.603668][T25153] netlink: 'syz.0.5107': attribute type 2 has an invalid length. [ 614.157002][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 614.202187][T25173] ieee802154 phy0 wpan0: encryption failed: -22 [ 614.214041][T25173] syzkaller0: Caught tx_queue_len zero misconfig [ 614.392944][T25180] vlan1: Caught tx_queue_len zero misconfig [ 614.421107][T25180] lo: Caught tx_queue_len zero misconfig [ 614.475742][T25149] syz.0.5107 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 614.560497][T25149] CPU: 0 UID: 0 PID: 25149 Comm: syz.0.5107 Not tainted syzkaller #0 PREEMPT(full) [ 614.560525][T25149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.560537][T25149] Call Trace: [ 614.560546][T25149] [ 614.560554][T25149] dump_stack_lvl+0xe8/0x150 [ 614.560587][T25149] dump_header+0xd3/0x4b0 [ 614.560616][T25149] oom_kill_process+0x3ab/0x970 [ 614.560650][T25149] out_of_memory+0x1064/0x1480 [ 614.560677][T25149] ? try_charge_memcg+0xbce/0x1590 [ 614.560716][T25149] ? __pfx_out_of_memory+0x10/0x10 [ 614.560741][T25149] ? do_raw_spin_unlock+0xf5/0x200 [ 614.560776][T25149] try_charge_memcg+0xc78/0x1590 [ 614.560818][T25149] ? __pfx_try_charge_memcg+0x10/0x10 [ 614.560841][T25149] ? percpu_ref_tryget+0x15/0x180 [ 614.560889][T25149] ? charge_memcg+0x20/0x2b0 [ 614.560915][T25149] charge_memcg+0x19c/0x2b0 [ 614.560941][T25149] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 614.560966][T25149] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 614.560995][T25149] swap_cache_alloc_folio+0x4de/0x990 [ 614.561030][T25149] swap_cache_read_folio+0x44/0x120 [ 614.561053][T25149] swap_cluster_readahead+0x3a0/0x640 [ 614.561081][T25149] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 614.561115][T25149] ? get_vma_policy+0x27b/0x3c0 [ 614.561145][T25149] swapin_readahead+0x19a/0xc10 [ 614.561168][T25149] ? swap_table_get+0x1e/0x260 [ 614.561198][T25149] ? swap_table_get+0x1e/0x260 [ 614.561228][T25149] ? __pfx_swapin_readahead+0x10/0x10 [ 614.561250][T25149] ? swap_table_get+0x1e/0x260 [ 614.561278][T25149] ? swap_table_get+0x1e/0x260 [ 614.561303][T25149] ? swap_table_get+0x1e/0x260 [ 614.561332][T25149] ? swap_table_get+0x216/0x260 [ 614.561363][T25149] ? swap_cache_get_folio+0x2e7/0x2f0 [ 614.561399][T25149] do_swap_page+0x455/0x5060 [ 614.561443][T25149] ? __pte_offset_map+0x29/0x240 [ 614.561471][T25149] ? __lock_acquire+0x683/0x2cf0 [ 614.561496][T25149] ? do_swap_page+0x124/0x5060 [ 614.561525][T25149] ? __pfx_do_swap_page+0x10/0x10 [ 614.561552][T25149] ? __pte_offset_map+0x1ae/0x240 [ 614.561575][T25149] ? pte_offset_map_rw_nolock+0xea/0x160 [ 614.561598][T25149] handle_mm_fault+0x124c/0x3080 [ 614.561632][T25149] ? handle_mm_fault+0xec/0x3080 [ 614.561661][T25149] ? __pfx_handle_mm_fault+0x10/0x10 [ 614.561679][T25149] ? lock_vma_under_rcu+0x45a/0x500 [ 614.561730][T25149] do_user_addr_fault+0xa4f/0x1340 [ 614.561773][T25149] ? trace_page_fault_user+0x84/0x1e0 [ 614.561804][T25149] exc_page_fault+0x6a/0xc0 [ 614.561830][T25149] asm_exc_page_fault+0x26/0x30 [ 614.561848][T25149] RIP: 0033:0x7f282fb9e0eb [ 614.561867][T25149] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 614.561884][T25149] RSP: 002b:00007f2830a3c028 EFLAGS: 00010217 [ 614.561900][T25149] RAX: 000000000000000c RBX: 00007f282fe26090 RCX: ffffffffffffffe8 [ 614.561914][T25149] RDX: 0000000000000048 RSI: 0000200000000640 RDI: 0000000000000000 [ 614.561926][T25149] RBP: 00007f282fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 614.561939][T25149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.561951][T25149] R13: 00007f282fe26128 R14: 00007f282fe26090 R15: 00007fff29128228 [ 614.561983][T25149] [ 614.561991][T25149] memory: usage 307200kB, limit 307200kB, failcnt 617 [ 615.012561][T25149] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0 [ 615.020505][T25149] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 615.061718][T25149] Memory cgroup stats for /syz0: [ 615.062033][T25149] cache 4096 [ 615.070188][T25149] rss 4096 [ 615.073212][T25149] rss_huge 0 [ 615.076411][T25149] shmem 0 [ 615.076492][T25191] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 615.079340][T25149] mapped_file 4096 [ 615.176973][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 615.227985][T25149] dirty 0 [ 615.232421][T25149] writeback 0 [ 615.235717][T25149] workingset_refault_anon 0 [ 615.262646][T25149] workingset_refault_file 0 [ 615.300285][T25149] swap 135168 [ 615.313856][T25149] swapcached 135168 [ 615.326635][T25149] pgpgin 109042 [ 615.344767][T25149] pgpgout 109040 [ 615.349513][T25149] pgfault 190645 [ 615.353113][T25149] pgmajfault 4 [ 615.356614][T25149] inactive_anon 0 [ 615.360773][T25149] active_anon 4096 [ 615.364519][T25149] inactive_file 0 [ 615.368620][T25149] active_file 4096 [ 615.372472][T25149] unevictable 0 [ 615.375950][T25149] hierarchical_memory_limit 314572800 [ 615.390702][T25149] hierarchical_memsw_limit 9223372036854771712 [ 615.416970][T25200] __nla_validate_parse: 52 callbacks suppressed [ 615.416988][T25200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5128'. [ 615.425180][T25149] total_cache 4096 [ 615.432227][T25200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.473699][T25149] total_rss 4096 [ 615.480404][T25149] total_rss_huge 0 [ 615.488689][T25149] total_shmem 0 [ 615.495492][T25149] total_mapped_file 4096 [ 615.507292][T25149] total_dirty 0 [ 615.522633][T25149] total_writeback 0 [ 615.533963][T25206] xt_hashlimit: size too large, truncated to 1048576 [ 615.540954][T25205] xt_hashlimit: size too large, truncated to 1048576 [ 615.549271][T25149] total_workingset_refault_anon 0 [ 615.565481][T25149] total_workingset_refault_file 0 [ 615.584153][T25149] total_swap 135168 [ 615.599090][T25149] total_swapcached 135168 [ 615.615120][T25149] total_pgpgin 109042 [ 615.635241][T25149] total_pgpgout 109040 [ 615.664217][T25149] total_pgfault 190646 [ 615.690727][T25149] total_pgmajfault 4 [ 615.707719][T25149] total_inactive_anon 0 [ 615.725952][T25149] total_active_anon 4096 [ 615.750003][T25210] sock: sock_set_timeout: `syz.1.5131' (pid 25210) tries to set negative timeout [ 615.757144][T25149] total_inactive_file 0 [ 615.766421][T25149] total_active_file 4096 [ 615.779713][T25149] total_unevictable 0 [ 615.791359][T25149] anon_cost 0 [ 615.801434][T25149] file_cost 0 [ 615.813654][T25149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5107,pid=25147,uid=0 [ 615.846608][T25149] Memory cgroup out of memory: Killed process 25149 (syz.0.5107) total-vm:98604kB, anon-rss:1268kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 615.922538][T25219] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5133'. [ 615.971664][T25212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5132'. [ 616.223803][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 616.896657][T25256] netlink: 'syz.4.5144': attribute type 13 has an invalid length. [ 616.917776][T25256] netlink: 'syz.4.5144': attribute type 17 has an invalid length. [ 616.976436][T25265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5144'. [ 616.999909][T25256] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.007202][T25256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.014755][T25256] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.021926][T25256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.042661][T25256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.090609][T25256] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 617.267073][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 617.869788][T25305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5157'. [ 617.879763][T25301] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5156'. [ 617.942899][T25310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5158'. [ 618.092080][T25322] netlink: 'syz.3.5161': attribute type 1 has an invalid length. [ 618.131652][T25322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5161'. [ 618.179838][T25304] netlink: 'syz.4.5158': attribute type 83 has an invalid length. [ 618.277455][T25326] netlink: 'syz.0.5162': attribute type 2 has an invalid length. [ 618.313195][T25322] block nbd3: Unsupported socket: should be TCP or UNIX. [ 618.317487][ C1] net_ratelimit: 1 callbacks suppressed [ 618.317504][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 618.681942][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5169'. [ 618.691213][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5166'. [ 618.777347][T25348] 8021q: adding VLAN 0 to HW filter on device bond6 [ 618.787254][T25348] bond0: (slave bond6): Enslaving as an active interface with a down link [ 618.843060][T25337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.357128][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 619.843283][T25419] [ 619.845651][T25419] ====================================================== [ 619.852683][T25419] WARNING: possible circular locking dependency detected [ 619.859713][T25419] syzkaller #0 Not tainted [ 619.864132][T25419] ------------------------------------------------------ [ 619.871151][T25419] syz.2.5189/25419 is trying to acquire lock: [ 619.877222][T25419] ffffffff8ec8c680 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x660 [ 619.886561][T25419] [ 619.886561][T25419] but task is already holding lock: [ 619.893927][T25419] ffffffff8f5e91a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 619.902818][T25419] [ 619.902818][T25419] which lock already depends on the new lock. [ 619.902818][T25419] [ 619.913208][T25419] [ 619.913208][T25419] the existing dependency chain (in reverse order) is: [ 619.922215][T25419] [ 619.922215][T25419] -> #8 (gdp_mutex){+.+.}-{4:4}: [ 619.929364][T25419] __mutex_lock+0x19d/0x1550 [ 619.934492][T25419] get_device_parent+0x16f/0x3a0 [ 619.939957][T25419] device_add+0x2d4/0xb80 [ 619.944809][T25419] device_create+0x269/0x300 [ 619.949922][T25419] msr_device_create+0x33/0x50 [ 619.955203][T25419] cpuhp_invoke_callback+0x434/0x810 [ 619.961015][T25419] cpuhp_thread_fun+0x362/0x780 [ 619.966403][T25419] smpboot_thread_fn+0x565/0xa70 [ 619.971878][T25419] kthread+0x38b/0x480 [ 619.976484][T25419] ret_from_fork+0x514/0xb70 [ 619.981608][T25419] ret_from_fork_asm+0x1a/0x30 [ 619.986906][T25419] [ 619.986906][T25419] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 619.994477][T25419] cpuhp_thread_fun+0x127/0x780 [ 619.999866][T25419] smpboot_thread_fn+0x565/0xa70 [ 620.005336][T25419] kthread+0x38b/0x480 [ 620.009946][T25419] ret_from_fork+0x514/0xb70 [ 620.015063][T25419] ret_from_fork_asm+0x1a/0x30 [ 620.020357][T25419] [ 620.020357][T25419] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 620.028101][T25419] cpus_read_lock+0x42/0x160 [ 620.033226][T25419] static_key_slow_inc+0x12/0x30 [ 620.038700][T25419] nbd_genl_reconfigure+0x1301/0x1e80 [ 620.044625][T25419] genl_family_rcv_msg_doit+0x233/0x340 [ 620.050712][T25419] genl_rcv_msg+0x614/0x7a0 [ 620.055745][T25419] netlink_rcv_skb+0x226/0x4a0 [ 620.061026][T25419] genl_rcv+0x28/0x40 [ 620.065527][T25419] netlink_unicast+0x7bd/0x940 [ 620.070815][T25419] netlink_sendmsg+0x813/0xb40 [ 620.076102][T25419] sock_sendmsg_nosec+0x13a/0x180 [ 620.081642][T25419] ____sys_sendmsg+0x54e/0x850 [ 620.086932][T25419] ___sys_sendmsg+0x2a5/0x360 [ 620.092127][T25419] __x64_sys_sendmsg+0x1b1/0x290 [ 620.097583][T25419] do_syscall_64+0x166/0x520 [ 620.102687][T25419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.109093][T25419] [ 620.109093][T25419] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 620.116730][T25419] __mutex_lock+0x19d/0x1550 [ 620.121841][T25419] nbd_queue_rq+0x373/0x1150 [ 620.126958][T25419] blk_mq_dispatch_rq_list+0x499/0x1990 [ 620.133023][T25419] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 620.139865][T25419] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 620.146361][T25419] blk_mq_run_work_fn+0x16c/0x300 [ 620.151904][T25419] process_scheduled_works+0xa88/0x14c0 [ 620.157964][T25419] worker_thread+0xa47/0xfb0 [ 620.163069][T25419] kthread+0x38b/0x480 [ 620.167666][T25419] ret_from_fork+0x514/0xb70 [ 620.172794][T25419] ret_from_fork_asm+0x1a/0x30 [ 620.178100][T25419] [ 620.178100][T25419] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 620.185325][T25419] __mutex_lock+0x19d/0x1550 [ 620.190445][T25419] nbd_queue_rq+0xc1/0x1150 [ 620.195477][T25419] blk_mq_dispatch_rq_list+0x499/0x1990 [ 620.201548][T25419] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 620.208403][T25419] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 620.214917][T25419] blk_mq_run_work_fn+0x16c/0x300 [ 620.220471][T25419] process_scheduled_works+0xa88/0x14c0 [ 620.226546][T25419] worker_thread+0xa47/0xfb0 [ 620.231658][T25419] kthread+0x38b/0x480 [ 620.236243][T25419] ret_from_fork+0x514/0xb70 [ 620.241350][T25419] ret_from_fork_asm+0x1a/0x30 [ 620.246642][T25419] [ 620.246642][T25419] -> #3 (set->srcu){.+.+}-{0:0}: [ 620.253762][T25419] __synchronize_srcu+0xc9/0x2f0 [ 620.259214][T25419] elevator_switch+0x1e8/0x7b0 [ 620.264503][T25419] elevator_change+0x2fa/0x480 [ 620.269807][T25419] elevator_set_default+0x375/0x440 [ 620.275540][T25419] blk_register_queue+0x3f3/0x4e0 [ 620.281098][T25419] __add_disk+0x6cb/0xe30 [ 620.285959][T25419] add_disk_fwnode+0x100/0x3a0 [ 620.291256][T25419] nbd_dev_add+0x733/0xb60 [ 620.296194][T25419] nbd_init+0x15f/0x1e0 [ 620.300882][T25419] do_one_initcall+0x250/0x870 [ 620.306184][T25419] do_initcall_level+0x10a/0x1a0 [ 620.311652][T25419] do_initcalls+0x59/0xa0 [ 620.316511][T25419] kernel_init_freeable+0x29d/0x3e0 [ 620.322241][T25419] kernel_init+0x22/0x1d0 [ 620.327109][T25419] ret_from_fork+0x514/0xb70 [ 620.332241][T25419] ret_from_fork_asm+0x1a/0x30 [ 620.337542][T25419] [ 620.337542][T25419] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 620.345383][T25419] __mutex_lock+0x19d/0x1550 [ 620.350519][T25419] elevator_change+0x1af/0x480 [ 620.355821][T25419] elevator_set_none+0xb5/0x140 [ 620.361208][T25419] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 620.367550][T25419] nbd_start_device+0x189/0xb30 [ 620.367978][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 620.372944][T25419] nbd_genl_connect+0x1597/0x1c10 [ 620.372972][T25419] genl_family_rcv_msg_doit+0x233/0x340 [ 620.372996][T25419] genl_rcv_msg+0x614/0x7a0 [ 620.396420][T25419] netlink_rcv_skb+0x226/0x4a0 [ 620.401720][T25419] genl_rcv+0x28/0x40 [ 620.406244][T25419] netlink_unicast+0x7bd/0x940 [ 620.411549][T25419] netlink_sendmsg+0x813/0xb40 [ 620.416841][T25419] sock_sendmsg_nosec+0x13a/0x180 [ 620.422399][T25419] ____sys_sendmsg+0x54e/0x850 [ 620.427704][T25419] ___sys_sendmsg+0x2a5/0x360 [ 620.432915][T25419] __x64_sys_sendmsg+0x1b1/0x290 [ 620.438393][T25419] do_syscall_64+0x166/0x520 [ 620.443514][T25419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.449928][T25419] [ 620.449928][T25419] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 620.458540][T25419] blk_alloc_queue+0x544/0x690 [ 620.463840][T25419] __blk_mq_alloc_disk+0x194/0x390 [ 620.469472][T25419] nbd_dev_add+0x494/0xb60 [ 620.474421][T25419] nbd_init+0x15f/0x1e0 [ 620.479114][T25419] do_one_initcall+0x250/0x870 [ 620.484402][T25419] do_initcall_level+0x10a/0x1a0 [ 620.489854][T25419] do_initcalls+0x59/0xa0 [ 620.494698][T25419] kernel_init_freeable+0x29d/0x3e0 [ 620.500409][T25419] kernel_init+0x22/0x1d0 [ 620.505254][T25419] ret_from_fork+0x514/0xb70 [ 620.510360][T25419] ret_from_fork_asm+0x1a/0x30 [ 620.515643][T25419] [ 620.515643][T25419] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 620.522847][T25419] __lock_acquire+0x1520/0x2cf0 [ 620.528220][T25419] lock_acquire+0x106/0x350 [ 620.533245][T25419] fs_reclaim_acquire+0x71/0x100 [ 620.538694][T25419] __kmalloc_cache_noprof+0x61/0x660 [ 620.544488][T25419] get_device_parent+0x255/0x3a0 [ 620.549937][T25419] device_add+0x2d4/0xb80 [ 620.554781][T25419] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 620.560767][T25419] wakeup_source_register+0x17f/0x380 [ 620.566671][T25419] ep_insert+0xfaf/0x1af0 [ 620.571521][T25419] do_epoll_ctl_file+0x8c2/0xee0 [ 620.576986][T25419] __se_sys_epoll_ctl+0x162/0x230 [ 620.582529][T25419] do_syscall_64+0x166/0x520 [ 620.587634][T25419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.594130][T25419] [ 620.594130][T25419] other info that might help us debug this: [ 620.594130][T25419] [ 620.604347][T25419] Chain exists of: [ 620.604347][T25419] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 620.604347][T25419] [ 620.616340][T25419] Possible unsafe locking scenario: [ 620.616340][T25419] [ 620.623791][T25419] CPU0 CPU1 [ 620.629142][T25419] ---- ---- [ 620.634490][T25419] lock(gdp_mutex); [ 620.638374][T25419] lock(cpuhp_state-up); [ 620.645211][T25419] lock(gdp_mutex); [ 620.651610][T25419] lock(fs_reclaim); [ 620.655579][T25419] [ 620.655579][T25419] *** DEADLOCK *** [ 620.655579][T25419] [ 620.663701][T25419] locks held by syz.2.5189/25419: 3, last CPU#0: [ 620.670009][T25419] #0: ffffffff8ecfd740 (epnested_mutex){+.+.}-{4:4}, at: do_epoll_ctl_file+0x9df/0xee0 [ 620.679754][T25419] #1: ffff888064084060 (&ep->mtx){+.+.}-{4:4}, at: do_epoll_ctl_file+0xc7b/0xee0 [ 620.688972][T25419] #2: ffffffff8f5e91a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 620.698280][T25419] [ 620.698280][T25419] stack backtrace: [ 620.704149][T25419] CPU: 0 UID: 0 PID: 25419 Comm: syz.2.5189 Not tainted syzkaller #0 PREEMPT(full) [ 620.704169][T25419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.704179][T25419] Call Trace: [ 620.704187][T25419] [ 620.704195][T25419] dump_stack_lvl+0xe8/0x150 [ 620.704219][T25419] print_circular_bug+0x2e1/0x300 [ 620.704238][T25419] check_noncircular+0x12e/0x150 [ 620.704258][T25419] __lock_acquire+0x1520/0x2cf0 [ 620.704281][T25419] ? __mutex_trylock_common+0x15f/0x270 [ 620.704301][T25419] ? __lock_acquire+0x683/0x2cf0 [ 620.704326][T25419] ? __kmalloc_cache_noprof+0x61/0x660 [ 620.704345][T25419] lock_acquire+0x106/0x350 [ 620.704366][T25419] ? __kmalloc_cache_noprof+0x61/0x660 [ 620.704386][T25419] ? get_device_parent+0x16f/0x3a0 [ 620.704410][T25419] fs_reclaim_acquire+0x71/0x100 [ 620.704429][T25419] ? __kmalloc_cache_noprof+0x61/0x660 [ 620.704448][T25419] __kmalloc_cache_noprof+0x61/0x660 [ 620.704467][T25419] ? get_device_parent+0x255/0x3a0 [ 620.704488][T25419] ? get_device_parent+0x255/0x3a0 [ 620.704513][T25419] get_device_parent+0x255/0x3a0 [ 620.704537][T25419] device_add+0x2d4/0xb80 [ 620.704571][T25419] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 620.704591][T25419] wakeup_source_register+0x17f/0x380 [ 620.704615][T25419] ep_insert+0xfaf/0x1af0 [ 620.704635][T25419] ? __pfx_ep_insert+0x10/0x10 [ 620.704656][T25419] ? do_epoll_ctl_file+0xacd/0xee0 [ 620.704672][T25419] do_epoll_ctl_file+0x8c2/0xee0 [ 620.704689][T25419] ? do_epoll_ctl_file+0xacd/0xee0 [ 620.704705][T25419] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 620.704722][T25419] ? __fget_files+0x3a2/0x420 [ 620.704743][T25419] ? __fget_files+0x2a/0x420 [ 620.704767][T25419] __se_sys_epoll_ctl+0x162/0x230 [ 620.704784][T25419] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 620.704805][T25419] do_syscall_64+0x166/0x520 [ 620.704825][T25419] ? trace_irq_disable+0x3b/0x140 [ 620.704851][T25419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.704868][T25419] ? clear_bhb_loop+0x70/0xc0 [ 620.704886][T25419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.704903][T25419] RIP: 0033:0x7f637ef9e0d9 [ 620.704918][T25419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.704934][T25419] RSP: 002b:00007f637feea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 620.704951][T25419] RAX: ffffffffffffffda RBX: 00007f637f225fa0 RCX: 00007f637ef9e0d9 [ 620.704964][T25419] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000006 [ 620.704974][T25419] RBP: 00007f637f035024 R08: 0000000000000000 R09: 0000000000000000 [ 620.704985][T25419] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 620.704996][T25419] R13: 00007f637f226038 R14: 00007f637f225fa0 R15: 00007ffdba0b65a8 [ 620.705015][T25419] [ 621.406987][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 622.446954][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 623.486973][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 624.298510][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.527099][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 625.566998][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.607005][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 627.647030][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 628.686994][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 629.726960][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available