last executing test programs: 1m23.585013398s ago: executing program 0 (id=4134): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1m11.884036295s ago: executing program 0 (id=4134): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 56.870776301s ago: executing program 0 (id=4134): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 42.221699941s ago: executing program 0 (id=4134): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 29.5560766s ago: executing program 0 (id=4134): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 22.623492456s ago: executing program 2 (id=5973): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x3, 0x0, 0x4, 0x0, 0x44}, 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40900}, 0x0) 22.423876438s ago: executing program 2 (id=5975): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000940)=@file={0x0, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e) (async) bind$unix(r1, &(0x7f0000000940)=@file={0x0, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x5, 0x0, &(0x7f00000023c0)) (async) getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x5, 0x0, &(0x7f00000023c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) (async) r7 = socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r7, 0x4040942c, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r7, 0x4040942c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001806000000000000000900001800000002000000000000000000000300000000040000001fffffff000000000000"], &(0x7f0000000f40)=""/4096, 0x32, 0x1000, 0x1}, 0x20) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x1507, 0x4) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="604a772826dea736729103ad8de752c24b2367617ecb7b6e6831a11ecd0b3617817414bf3243338133aeb1ef59f7bb", 0x2f, 0x4}, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="604a772826dea736729103ad8de752c24b2367617ecb7b6e6831a11ecd0b3617817414bf3243338133aeb1ef59f7bb", 0x2f, 0x4}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a010300b6c0768efbf1f20d00e6ff00000000020000000900010073797a30000000000900030073797a320000", @ANYRES16=r8], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2048080}, 0x0) 18.648082971s ago: executing program 2 (id=6007): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x20, 0x70bd26, 0x25dfdc01, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4001) r2 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) 18.491673006s ago: executing program 2 (id=6010): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="b5c300c7503614bcbad037", @ANYRES64=0x0], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x4}}}}]}, 0x40}}, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x8c4}, 0x4) sendfile(r7, r7, 0x0, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r9, 0x2, 0x2}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r3, 0x2, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280), 0x0, 0x0}, 0x40) syz_init_net_socket$ax25(0x3, 0x2, 0xda6118dfbc15f4d) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}, @sadb_lifetime={0x4, 0x3}]}, 0xa0}}, 0x0) 18.251953419s ago: executing program 2 (id=6014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet(0xa, 0x801, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) (async, rerun: 64) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) (async) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000001b"], 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYBLOB="51800e0e137f599a10150349c33af1591ed652a5ecb1663e38aa16e4c1e70534f69587ed46fcda5b19e1afde5b9729c73a77a73da722c5c478f00d20d22d15455a871a8c92e91aeeb9c33637439a92774ec96be8be0cb61cae60e85871df1b779288eb3d86e6a489213ab6d6820ca4efcb1f18d228b29e9efabbc6dcb34c21e3eccf52749d374c4387c2dcf407f073653304e907f3ce6cf50c3be9fad47e54b0935abcb2cc6795559b", @ANYRES16=r3, @ANYRES64=r9, @ANYRESDEC=r3, @ANYRESHEX=r8, @ANYRES16=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe9f}, 0x94) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) (rerun: 32) close(r10) (async) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async, rerun: 64) close(r5) (async, rerun: 64) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) r12 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r12, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x2, 0x691}, 0x10) (async) sendto$inet6(r12, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xbc}, 0x1, 0x0, 0x0, 0x40851}, 0x0) 17.813360996s ago: executing program 2 (id=6022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x84, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 12.355009295s ago: executing program 0 (id=4134): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.95201671s ago: executing program 4 (id=6120): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x401, 0x4) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a30000000002800048008000240000000001400030073797a5f74756e000000000000000000080001400000000014000000110001"], 0x9c}}, 0x0) (async) syz_emit_ethernet(0x26a, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0xfffffffffffffe5a, 0x6, 0x1, @remote, @local, {[@hopopts={0x5c, 0xd, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra={0x5, 0x2, 0xdca7}, @hao={0xc9, 0x10, @mcast1}, @generic={0xac, 0x0, "66f1dc9f8a4c6dc89ec04c6b8a62170bb72c77d82e5e92a165cb8cb2928e2f46b9a279d8a143df1bfb0c2297800b9d7a669503de42dd86eea14c1d25136d14c15fd567a5ab9588a889f4afe7e3f49f8f2836b24f498dbea12da7f304c4147113d1dbc6b3055eecbc9bb4473a15c0cc4671bf902c59dd7b8fdb1953d1e99a75e60540c64a18476fccab5a78c792b62cd57252cc8f2a37c516ee9cd794dddd405858c9cd029466f20ea366670964ffed2a41"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffff}, @hao={0xc9, 0x10, @loopback}]}, @hopopts={0x21, 0x10, '\x00', [@generic={0x93, 0x77, "fc22a2a1b41b83f5626736b942d3e77750f31dcfe3e9612fc420ae584e1a3f38ac8632c89f2bb5a6efe68da2489560e9cadc39de3d4deeefe7954f83faa2c75d0920c770e0109c6d6742e8733c79a71b4f21b727b45269a36564cf350fa5b9d282c0de230c35e94751900b58d6c06c3ea7808edca633f7"}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x80000001}]}, @dstopts={0x0, 0x1f, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x0, [0x0]}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x8, 0x90, "f77e64f9fe1e87414c92e0bae638c945f5e74ceb9c86e7bb4b4c7444551dbe967f484fc3082c327b3b50c49aaca5e5f4f4f61e144248f04a42396c7fb2bba03f775cebfe7c5b7ffdc68b01c63bdfb828388265157f397d8d59a721a30592dcc3831a4e51be43cfe5fdb62144926a562845f55dc38406b50d5cb0cbe9a88a96dfa5aa8a74e4043f7ce473b41efd7a2a64"}, @calipso={0x7, 0x38, {0x3, 0xc, 0x7, 0x9, [0x1000000000000, 0x8, 0x4, 0x5, 0x8, 0x9]}}]}, @hopopts={0x33, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r3, 0x11, 0x68, &(0x7f0000000540)=0x2000000, 0x4) (async) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000500)=0x2, 0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000007c5fcc02e23e210f52544944498001800dd8d000000000000000002000000000000060000000006001500010000001800378014fddbe015817c2170000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 1.739822587s ago: executing program 4 (id=6123): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000180)="207bc9875a5ce52ae56fbd9cb2643c7a7f0fd4b02938f64c6086829480cb80704ca7ad3e442cc6ab395c8643f738611ae6cc69d742f98ecd2ea9fc51ac6efe1cd209086a37510ee5df36b7c66ca565a399a57ad477699cb7445949895fc3dc14c4bcdf770e42439f6d493c4d13f7e19a11a08a2be4615407fbb100daaef983c6a969586ea8b2e3b31b81b0d1832b8e29d6d37163d387dec6cd571c090b611605599658f3bb509c110f71cf47b31bbf0bccd53101e63257f991a6b093842e13db43df22b858779f124e9d2c7b1745", 0xce}, {&(0x7f0000000580)="76b165c213f88afa4c53688f124937850b1a56eb70", 0x15}, {&(0x7f00000006c0)='d', 0x1}], 0x3) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006b00000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffec3, 0x0, 0x0, 0x10, 0xd84}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r3) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) 1.614425981s ago: executing program 4 (id=6125): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xf0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x70, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x134}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.46357346s ago: executing program 3 (id=6126): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x11c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x9c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x160}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 1.383903915s ago: executing program 4 (id=6127): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000007100)="19", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0xa17a, @mcast2, 0x4}}, 0x2, 0xb, 0x7, 0x5, 0x4, 0x4, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x6}, &(0x7f0000000000)=0x10) 1.176018435s ago: executing program 3 (id=6129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x230, 0x238, 0x238, 0x230, 0x238, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'batadv_slave_1\x00', 'pimreg0\x00', {0xff}, {}, 0x62, 0x6, 0x2, 0x10}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xffffffff, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'wg2\x00', 'veth1\x00', {}, {}, 0x84}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x200, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000001a21428c6d08586dd61bcc1d700006cff0000000000000000000000000000000100000000000000000000000000000001", @ANYBLOB="707abcac836574e786dc53cbc4120a86b6e6d96a8bca185466fe2fcbd45f6c287bbae7583be594d8f6fc330affff54acde12232f1dc6fd7a85bfbf48020fd9a1"], 0x0) pipe(&(0x7f0000000040)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.172981364s ago: executing program 4 (id=6130): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0xffffffffffffffd7, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20040810) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x368, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, &(0x7f0000000340), {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x2, 0x3, 0x9, 'snmp_trap\x00', 'syz0\x00', {0x7fff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1c, 0x8, 0x7, 0xf35b, 'syz1\x00', 'syz0\x00', {0xfffffffffffffff9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000011405002dbd7000fbdbdf25080001"], 0x18}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x1bd, 0x9ffffd}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100240032000000000000000000000000001400070000007468315f746f5f6272696467650009a7a9a0c24974d9cddf6e00020073797a300000000009acec0073797a3041d2279f79329a5725cedbc22c771bc08777369e82cb6e07cdcc91c4b11102b1ac5b392011"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r3, 0x0) r6 = socket(0x10, 0x2, 0x0) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000001000001801000020786c2525da91fe5263ce635756b100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000890}, 0x40010) r7 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080000000f0000000000000045"], 0xffbf) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r10, &(0x7f0000000080)="842961cc85e495ab8c5d823befc2b74240acd3501380513ab7c563074f95ccb694caad253fa8bb73ee0b974499102c4209af510490f66f63f17159dac620e3ae1b170af360fe450f58bc87669ede75325ade5317dacd28c0ad2dd0584966dba157b5fbfab31320cc94e5c44f0c1ed077bd52a22dec297ff1e86f226cf12f04129b41ede89dca9269e707dfac8331c39559df41e74cbcf9ff5881b18c", 0x9c, 0x4014, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @local, 0xf5a}, 0x1c) 1.128816088s ago: executing program 1 (id=6131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x20000800) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) 854.990815ms ago: executing program 1 (id=6132): unshare(0x28000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c090) 800.059232ms ago: executing program 3 (id=6133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x20, r0}, 0x18) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@fallback=r0, r1, 0x2b, 0x2010, 0xffffffffffffffff, @value=r2}, 0x20) 623.107136ms ago: executing program 1 (id=6134): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000a00)=""/254, 0xfe}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4093, 0xffd}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000dc0)=""/104, 0x68}, {&(0x7f0000000240)=""/116, 0x74}], 0x6}, 0xb0}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x20, 0x0) 491.880927ms ago: executing program 3 (id=6135): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000003fc0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="7778d9b06ff04eddd896cd66dd07f62289dd295c55967f288ff0a76f2b744dd43b0070e32c8ec9e6d9837ab9ff87b62efbcff9f3938f71099f1b7842556e51ba147c2df4cd092b5ce716510f3fff8e29ff2aeaf1b33b0160f3658c4799c7880e857038a4eb0d7653ed82b4beaef12f18a3463abbb500e0ec7f24670b8958f18e1ca0798693ce38131e48e03f15f7dddcfe61822713baa092e58e0e29604cb86c66a1a15ea3e17da94f34c0bf55764ff06b41b69cd6bb4cab6600dfd0ad6e", 0xbe}], 0x1, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0xe0000000}], 0x18, 0x20040010}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="e59a98", 0x3}, {&(0x7f00000002c0)="4fb6eb56f5d03d6a0c104086aff6a1c8348e810955661a7eb004c99221bb8954d77ba6a863ba0129570800000000000000dabea3ff7978f7c13922626bfe45e5", 0x40}, {&(0x7f0000000300)="38d8bb0b73aceac2d7a9d7912350a863baf730a943df533e9362a551052266cf5f1e61db2b6aef26e895edee9b", 0x2d}, {&(0x7f0000000340)="447953026a006e880cdbc6214307e1a6b920dd87d5dee1acc370ec05ee3e900e1443d45689d8fcc16db39e44e9f3e8e51b2f43c014ff1daabf54c92440c629b79ec85efaedf49b57ec06082db708597e71943a1bde017a6d290bcbc41988ddad41c3bf4219f587a8181ba5302f818ec5b50b316bad8c74", 0x77}, {&(0x7f00000004c0)="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", 0xfb}], 0x5, &(0x7f0000000640)=[@assoc={0x18}, @iv={0x48, 0x117, 0x2, 0x34, "2f987636e465c8309bebb92ae9b71ae4c043f627bcb6ec1fce104724a098835610cba9bcc529d0bea1b52af22b0e9a29f3c36e92"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x28, 0x117, 0x2, 0xf, "200d11a8db0e685b48448c7cd91271"}], 0xa0}, {0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)="f2d211a04965078f91e0e13684f86ad26a5931b047be12140b9f3fa3e21b6ed555d8a6b31c0024b942e3a726b8b4bbbce614504064443825cbea8709500f19431639a646f07dde4f79c9a6e2ce9507e2a26b69d0aadb9da3a5c6d7388a548431e1c32ad9589094ad907e875124960a2e62c7f41594ba88b99e4de1784f967626f290560552c26d09ad8414ce678849b078b60005480d74fb0010fd7bbcedd0a544238c7368", 0xa5}, {&(0x7f00000007c0)="f913aa97d484cf4dfc89546a5fff4bd2d5c99d9df4f5439894e0a4ba9255dbb2e2e2877f78deae37927fa9bcf54c8518a1a3112d64eb9ca22f981c37da5f427ca1", 0x41}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="0d32fdea2f7e3da30a8657c19925d91230ba4a5056543d6ee6ea2e35a4de78c8276a152fe6a46ae5bb00766e87b68f8f901d1c835d49b4a6939df5952fe0d33d80a11d515ae433878cdfef89c273264e7ddcc4ca4c418557af961c536b97b8d0595899ddec700bd2791bad2db6fde13f1c6490c518c9102a65ca98ebc7f9e4c94c23e48bfbed105a8920b8755588515554ac03485c54627f3f1576c382a281b051295fca074f26f1246ada36f6f567c6590d77d7f3ddea3ca5685f7569a42381c5a5fe557a06d3b46242ac4234423ee75d47e325b0876fb26ad849076bf6d8", 0xdf}, {&(0x7f0000001940)="55d265dc27f52e7a4da62160679bf25a90074b7a6ea6a7da2d8cae07ed6642b7c00ff9829696d3c5599fae1893b0ca09e96bbeb68376f351d73d54fdc8b55158e82cbef1befe07c7e971a877540c78", 0x4f}, {&(0x7f00000003c0)="f4ac99ab6805763aa108a699f293494a5eb589cacb28be504ec63f3703e0d6eb108cdd69c5940a20a9fc99dd9fc7881e0e6a7443", 0x34}, {&(0x7f00000019c0)="2c111a749dd8a92327075dba66f3390381d90749eb2687bf638a54ef47ad01889afcbdebba260afebbac80d305475afe762eccc2f68f3f71933330f0bc20bbe3a99dfc20166bb9876d7a5ff40dd1a92fe3c7f4a9773dd5d72608a6f78848535a2fa9227e3deea762938232ade0e20f471090bd2b8fa5a87e3a8649d080bd996e625121e0a61f63773f0eff8f8649d6c111ae9e316eb730dda5a07527860101c803424d6e9adc08a383", 0xa9}, {&(0x7f0000001a80)="d6a257d7c953665ebb1b30b17d0aac06eebb3e62936b24f54dcc61bb61f517a50490ecece40b920e16fdc01ff972c3997ad805e15c83ae1b40303f94219cb094f820ebe7e9955ba64d6900ca066a4d2fe7ef1c55a345820ec997e917de724bd85a2eb3b04d0b8ae29b07edd909cc7143756669a78b386896da09430b1cad3ffa82e4a397b87ad0fa6b5c435b58a0e0085f", 0x91}, {&(0x7f0000001b40)="c0ea541b40d25309bed5b987a0533d0e4e4056cc796e059774de85326e287fd6e5e0a834c5dbce9beff018d05c53e13f21288eebca60d3335d81938d36019b859d98e1127f3ca9f0da8ee8c81096335df105d2d231cf7e2e7e8e35f0b4f0240cb80715658a7b2f07d1828bb1cdef607631a765cf3440db5d1d8a8171f3194f9a0c0c924dbc03fe566105795e70c60546cd89446bc69c2134203e1d0dd47fde930e45722e00708dc76a73e06940540592906471155ef8f14f8ea3334767be7a8a9602280c7057526c89bcedc32338c65aaaa00e375f217f16d6d03149df22172459c560965a310122ceb5651dac7adda44993de01886e528d69d23609c6aba3f3e67eba08fd4b332e6be57e4acdf4ef578dbc8331ba075b71172849fd0c1bfc692068b4f3a523912d9ed298ec25a72c00b0ec2a945a4d9b322544df5f7e5edc7b3cdf134911d55e8fdfde5598d490ff11b3695bd7a2bfae3d240a7ea5e9cc79dcfaed25e93eea57eca9de8242c25d1f07d4acb18ca360535510777914fa214a8f205326a2bedba26fe05037625403605f2aca3821f3648139ddabd5fa1b0a356797ef69ea8b291361421fcda357ab41f041ad76e0e5304e3268e09b676a411d09d4ded30cf2669b74fe4b3509eabf9644defc61e427a108d07635c3db7e619b5ac5ce965b04c1dde00ced7635dacc0ffb30ecd377941b50fa94914fe0f5b15c3928f8ae1f32c802742a1a662f2ab1938c8841240771fe163998b9156539ea49929d0fca4dc9a41f39e46201a32bbfcc4a75aa4b50fb93fd9bf910150e538f4fb8381982049e9d58b8df643f624421f594f60dd97ea55530b72fc0e6b47e0b74bffc08859baaf5c86d12dd921ef827dac81d50ba9f574382cccb2f10f16b413405e77de0776872fb43462848d667db616bb7af3ff003910efff173dd6d63ef88fdf80cddb85e9d545bc8c574e6914f67276d6ac19aba0a5892ef771082937bb8f9f75613015c14381fb4f3926957cbb84fb139ad074ccdc4b9fe7fbc28223a5aa35170491de726f769d5f09433a283a869e3093a5cf825f5fe1e29fb4ab5b95f1d41a31ad3e721e3bb6e75fa8f35fb44ed9e990d0d17231891185e62ceeea53c298fb14d955ec46a9ff6867c389e0044f433ac472a6f48bbf50a15ace1c643e42610d541a681fcb6cb515f2dc1893033984b171a0b73f12bc28a166e050de714db13b015d7cad8849c9dae0ab4a86d62017c803a40a30567df955cda9f3af590fb31d14460c3e970219e641b36989841e4f112113bc403a420872688c63443579e4acbf851c66220eedd460cb2fe63003c6653e47f770cda7966466b5eb20a2c61149253ff8512f7017172bad2dfb3828ca5a9e2b661af6a48962e078c8ba15bd9a3d7dc6ce2ee3ca40935e1102c8299846d89913c81685fd515abeab03ed8eb3f584df4c5860c87381eeccc52f6f6aaa0cbb784ff0436534b9c09dd65d1520418cc71a6ff73b39816dc4d674c8e85ea1a25f19575366795e0d5b962fb993a5a0ac3c9074bec4d29c7e3814b87add53f1412e34cd5c1d1f64b5da03f2373e56a5b90fa364dd4756556ddf04699b7a0749d1d37b887d5e1121d55b213449ef200ff1146cd03e5c23f4c429700065e073f06a57c213ff3c0856931b3726fc5e7507afd7417b0d91dbb8485c789cde72ad84eab244a9da7f61a50aec4fa8abd7322fc44ecee8e753f79ed56f96563858dd349b2cf32ab4308dec2308263261414b86a0986204b285cf3b171df046f68ed0d1388e2c8e0fdf1ee2d17e7a345ffb48091914a41f0d9d6c4279a89927c00a5ff58aa1ae7afcfde9e77b02e6e5fceaef0a2f6deb8e1143c56083f2e7335318aa1b6527a78f2cd386c979598768a86e8283b8a6e0e7c9b2ed16bd16aed047f42a33e14fd250071e24b47f0decb01400cf280b82cb734f6a48d64c15830741eb8d208f59e074d71ec077db43fbf353ff3ca044e6bcd174b408108a3d2eab245e3e633ab58713d4ba0b74a62ef78c649432d50dce622a33baa8bd7c85f75fba0f9809c91187f8aa104e0459bf4cd96b4fc06ebffc1fb15762b93b7feb978a3f81f749f7c7e2c9194dc1f0f493198a0591688041af72ff595b3297d274cb8fcbe56f8aa7c1bc1e54ecd7d7ad7faa539b3c08b58de80348e421edfcb732399a2a800f0e7e575cab8fcb4502b6e06e744872c0714ebfd196dc1c6e00fe96a014e13513a964bd99419917e85ed3647bbfed68c63458d2fe65be00add75cd77a9a20d206d96c41cab90e5fb03e617bc1b2bdc6a81fb8b08c3ab0cf81a6934bc31c1f8ebacbd373c2cbc6b4af0296e9ebe01c723d09e799b9e7b010902e3cb1c8b4dba2a0deff5e3e0037fe02157c106ce84eca0edaafcb3a45e8a74689acbad76269b8857403328bbe47532f5e9770882e9e10a551197c7665400065bbd36e28e843729992323b748d1f68848e86912fd1796f81f85e54a811154d42862a64937f6a7991c2d813c3623b51a1d5a3099bc7ee40fd0f61e94cb9a020a51034160c78d648b0e377c291edb855c6e8e906eae5715cbfd35d3d3043ff876a1a724d46a6cd15a75b9e31da95c75a08911924d911562cbbc441c6b24bd76842ff6cc3bb623ebe4a0ec27560fe34ccf37f55d70bca8568db2fee0060c8567aa229e6fa9381bd0dcc32c1673b7928aaa6fcb98a21cff70e88da39bf01d40f8c1522f57e2d4ef8c68d92318f28e6bb46da0987c41a61236e265985e04607b32504cf2c1ae0a4dc78fde01a722b31540d5bc587997afb7328d090f6ceb5db2890296b641a87ca1a1b4134aaf9e15d74007840ffdf617ce78012de78ff0cf93117891ecbb54c543fa7d2ccade5787cdb10c1e8b511f0f8139d5e9f813a4e072ce41f1e6baa6955c7764ac620f9e1e6c9fe350edf80ff77b896a770df8783e950718146d470812a677896a7ab3ff65991c1785ebd9bc75c382595f90b113123e109e1db05d4a49506c5b76385fdd51738af4fe07f071746ae3773c7e6c5ce452012b9bab19f71265a947749774abbe093ab7d591a457edbf47d7f0ae2a30e179596bba593599f13051aa7ed87c300aaebf7dae897612e1ab7cf0ad6752ff4d6f7591e36d0f25e3b432a3782ab409944576363763aedcdae7b7488b690a6acebf0e5b3ef015ab59a7a2df4b404c99a7c8fc792b0555ffaa43c572538de64d1a16e142ea4f2c8943d1f885f122cb6ff44e7432cf52f289d9b1e3e827297e82b5114119a7e939c746ab0a91151c21cf8955a4c32a69ee3d8f7767cc75432a75f21e73faa187cf86932fa5238e9ac54049351e4f017e7f451fa89f970f50c43510ba6d457a2c3510b31d5c9f86e0cde737c8582df94e4a1ac92d5f3c5294cd2b77537edcf74068b7ffd8f6f2aeb9a88b376aae70ba2b1ac74f2730a67c476b79eab77fdc5ff9650ec3be1abc91d3ccd38c5619e37c4ca7c6af54fc0dee9b44a1ee8132ef747ac42d36cd8f1cdcd5bd62e2993ead8640deccce3a41e4a25930c18ffcef99d4a60ce6f7aac37b75a2ddc2fd596a7e26d79332aac98f2f83e73169daa08a4fa883e729ef36ac9f956c7f75b9ce8482da6691d39b79b35d1e4f262ceb269fc1259001fdd6a041c1eace4b3198f6e7fe722080e87f793913a182087f8112573b7a6c116bde312b7b1725e2404d3225f70a9e7de6540b31d20b1d8b94d45aadaf3cbdd344881a26cb61eea84c02c2c68bd0cb4c4492edf245989a85ad5a05094a14b3f4e07741920c9f6133eb971637cec9ef4f603389436d00a632e6213e82c2dd01342d6dc6b19a203046d01206cf05c738b5dbd24618794d42e7df119df53694da97f1171bb072464e789515797531f665ec38971a44cc9b4932a2b4e4c5d9589f38f0317782b67b1604efcac9b4c42b79fdfaa63e82b3299fd2be3c57c425d85c718462fc730e0800183b17991e38d81f96c8d46b265a07e86bcce42e5f67f0ea8c7587cd1d2c88d359bb72625dd624d36ddce58ee9cd2bf4391af1a75226ee88cbd98f21598454ed1caf487e8b8340d06bbbafa4a37f08fe73fc572e7510473627c1b74c9123f5d78c7fe3498d7c022f46acf66b024df4e0715e5d44dc6d74099393ef9c7f0862b96a0e02fec934b302f08457df0d084fc9d725090a10d8559876e390d8acd108c5e77b1b3f8e84415d4753d60c5dc0ebe466578a804b4932fc4968f82ee59f5a1a2a1fa76acbef84def4611f765802071379f0e993556d715f1dec118d0df28643d56a0c63547f0473668718621dfffee690efa64aa513be9188c1b8c0fb1487f6725f15553a40717f2320d95f0962a94ca206bc4a8892b39c4ccc9664870230c44b4e6623dbe6a8ceb65aafc9b1bf85b994e8b761fb317c31ba6586a8095f6f08b736735c2678fd82ba76a21f50dc6c8557f64fd2cd340628f95af25b4339eb87732ccbdbb05077d909c23b6baab0721c0377a6820ab20d032d1d4d372dec1c4011095444434e8df5f1120c28b0208b6a39ec20593944a0c56dcfb5835a252d310a24582f021b77d27ecbefc1abb8ef935abbd6c9eecb4114a1cf6efcd8bfae93316919500b1c147f41db56ea747d3ae0c78425b1b4dfa379bf6ca2b182f8643afe110620621f5dc1bf517554fa0d99b829f6a88f26328138a0d44ec9fc3e3045b7a2f575506d4b736c5a07d13949576fd584fc0a8cce1a09713a3c89d150b022e1b77f327b7ff7a0d5e3e7da30234c6267ff322cfd3485e1bfe8d132802cd68aa85fb26b2626ab7a2b60a4095c33fe41c7f38e3781fed56e071d72162e58dc84c16f8f6e0aa5539df1cec519b64a215654585b2b43a03a034e919058973283cbd775da03582f857bdf12ac370558e1555a03b1a66a32d659ce803365ad040ea71a816aacdd7a140c811c7459026223a02e6153ce404a519e94361881e4a08f7b123e046346f0fb88c1983b7049cc9f20f18eaef5bd8025a8123178d5f3d737a4eec983eee668e194fe174bb0b9d2c23c60081b17f9b7b7d3a44f2a222602d2803345353713678fc88c76e1ab8ae823969c412241be836a94dc6489ec709463818e7defc7fa11ad0f6a90b1958cd8632a12cb4ad59fedde158ce770f4cdb66621cc736287ac02a8ec68d84aef317e1366794faa587fe5b7343be4209f1de42971a0dc48c977f37ef88fe07c7c78d7a57e8b7eb91800be429f6a87334d1be70f6ca5bb7c3611ec6ff15efe5b41171dec17b48fd7d535d56040e066bbb5967461988ccd5fd71f68b491cf71a084411989669d6a5338e1e4a30e667378b892eeea97cdfa3d041eb7235b61cfa1c23157bc92f3b9c00e1653f428a50ed0685c660cb12946d3f1444b7516ba1e5a28f67e4270910f23bc32872d4f63b39aa5d5e704cc60b9381e33708a369e9411d5da15952d3b0a0f2403547b3198fb73b96b397b54ffb5922e5dd302ab70334efe69aa742b06b32ea3a69d8a6c7b0d42348df013623b19ecacf4fcae9e66023c6b01666f9017750288ba2d3a49c0b6a1472d61c3ca086fc5fac5ca59238f42b65ae87454fff59ce7d59792fcef32cb694ecc29fa87350bb03497f85e1883516164706849766cd8e7796b97cd2ed92f30db6eeea8947766fbfefce1508ca0846f17e995b6288b1a04e0d6f5d6bbaf4287cedd1e9e4bd52dd85dde348194dd2c8c2f03b3453ff0282681a459bb71ecf12739f5b4239407cdbd193d9ccfd43a5146d5c13ebb67b5dbed3e231ba44497ee84082c05255cf1fbbc01374793ae6cd80c9d08f98733", 0x1000}], 0x9, &(0x7f0000002c00)=[@iv={0x98, 0x117, 0x2, 0x84, "0f1e6db615f6766991a86b3f6d5515fedd3cc9d36bbc860b596de2aeab50ae827b15dde80841d5a04f63f489a2150c88318883c6bdfc064f2d736b5731e564acd053ee9024626dd4e6a3d64dad15f049f6c7bfa1622c2f50f85f0c2bb1837d305f3688182f26ef4cf6e27ce564e1e645a26780e461f62630530c5280e05022760debfff3"}, @iv={0x30, 0x117, 0x2, 0x1b, "d78916eacf60947b13833606231f6159815422e421bf7ae3b4158c"}, @iv={0x38, 0x117, 0x2, 0x24, "a9fc13065605d4e47cd355ed659c2cbfffa6829c2ac98e45d91c20d4eb1c107aa8161220"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}], 0x130, 0x20000000}, {0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002d40)="ef9edcaf3bf507dd4923d6483414b30ca6d7ad74b53772c521b66bc3c744349de5da55fa22e5909f8bf391542d6bb8a6308cdf71ed0e79464d33fb85622c4e83a90926824b993cc82292bc83b3b69fef9c249936343711fec01711e0721846d59c3ad8953c1e6c93e30a1b8d2ca3756456efe36fe70065fe78030122ade571b06a6b7a8ec2335bcd66aaa4f8159e5a0e5780dbcf69d61699d16377fc96ab890b7e70b21d74c218eee739928e263e2dd54dd11574ed3c5f47958a67a08cec571ac1b65d44eca86a4cc31d4b5d91a91b85443cd8a4cf271c0d015012fcf3eca97c0fd0442031067a8b29a009d2357ac3ddd27a39", 0xf3}], 0x1, &(0x7f0000002e80)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x2004c011}, {0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002f00)="9352d032817d53ec5dffebfecc6315486ffa71c7", 0x14}, {&(0x7f0000002f40)="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", 0x1000}], 0x2, &(0x7f0000003f80)=[@assoc={0x18}], 0x18, 0x400c080}], 0x5, 0x20040011) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 396.237067ms ago: executing program 1 (id=6136): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000200a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 240.769603ms ago: executing program 3 (id=6137): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xf0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x70, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x134}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 111.752539ms ago: executing program 1 (id=6138): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x84, 0x4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, &(0x7f0000000640)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newae={0x70, 0x1e, 0x399, 0x0, 0x0, {{@in6=@mcast1, 0x0, 0x0, 0x2b}, @in6=@local}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) 65.103098ms ago: executing program 3 (id=6139): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000980)='%-010d \x00'}, 0x20) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@volatile={0x1, 0x0, 0x0, 0x9, 0x1}, @enum64={0x2, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x4, 0x401, 0xff49}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x4}, @typedef={0x9, 0x0, 0x0, 0x8, 0x2}, @enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x4}]}, @fwd={0xe}]}, {0x0, [0x30, 0x0, 0x2e, 0x30, 0x30, 0x30]}}, &(0x7f0000000bc0)=""/48, 0x80, 0x30, 0x0, 0xfffffff8, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x0, 0x9ef, 0x4, 0x8648, r0, 0x10001, '\x00', 0x0, r1, 0x3, 0x3, 0x4, 0xa, @value=r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) pipe(&(0x7f0000000440)={0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x97}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000272, &(0x7f0000000540), &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb73, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x1b, r8, 0x8, &(0x7f0000000480)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x4, 0xdce17013, 0x8}, 0x10, r9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r8) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r10, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x2008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x15, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcff2000000000000034e58085000000a0000000850000009e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x100b, &(0x7f0000001680)=""/4107}, 0x90) 63.435725ms ago: executing program 1 (id=6140): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000015c0)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000100)="f1208824a643875e58d41ce6291d62353580fbcb0f920ed5a54ff012a9a6da8a93a9c230a48223e383ddac66e13f40afdb8beb2bdabd703c6cc9b11fb45b1c48e651a21f19efc3466c972b36c55157fc717c07a6290c31a451985aee1670", 0x5e}, {&(0x7f0000000180)="0b80e51a3f", 0x5}, {&(0x7f00000001c0)="b98361ae7704ee9f282245af78ba5b18787e0c57bc1d4c4fe9700b04a6", 0x1d}], 0x3}}, {{&(0x7f0000000240)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="c8739929a7b50886b362c071cbe4b89be2b443b66ad64299fb832024ccd8f72b4af45e51ff20e7d45d4febb2ed12eadc1dd428b19c06369d49c3e384dfd2db9f929f88616732c5aab054faaef671", 0x4e}, {&(0x7f0000000400)="5b3d8576b807850ae62ba14d73f38fbe7282f1c5dc51a90b791f36a71ded927fc80c949183da395bf525886ef09b0e7ed55cb3c1da0102ee6de9f61b53f41a4806fa72f3f0cc774a0b54fd686416648ea2117b687369e137b054d2aaceca0ae5f291ae41c3aa12410efe393ccc514c1e06a53c6da3e86c19fc48101002ca5be4d63c7e49ed53f8b2468c4012b369ec17ed43e2c470fccb7ad1cd5a84285a7b6b6aafd2b4bfc0220f1212c23cb970c3", 0xaf}], 0x2, &(0x7f00000004c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xc00000000000000}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x60}}, {{&(0x7f0000000540)=@generic={0x18, "c35c72af38d77937202c1cc91a5688dd70c3863854261226b26e83661eee63959cc170692639671c062632592be64f48509b0049fe0256ef08aca67842236bfc75d1b517f9016bd3afbb2e173a186e5c3e856fa8f1c471c16c5d2eeb9cfe8fdc6a7c5220328a4239f51f37b252875c7d101b13dbaaed4a60d4afb6c09303"}, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)="89a985f6c2453d8a975f4898a1f8e940a4c42856438644f92f9d0904619722e08053b0a5f3238b668a061ea29af8131fa2119f0034c74f27f0c8dd8c5c09bde595d64c6ff599aac404b0aba606bdf835419997e7341bcf8610db090861b431dc2c7cb630a9ead415fa50c5d8537ba474c1f99d662688ce7c4ee7b5f61da29a34c995ba750187e14b025116f7a4df090cea6993f0f2b52d84d8e666a5724d7cc82c6cd80c21db03", 0xa7}, {&(0x7f0000000680)="35eb2e180bf89eb8efad0046addb3be0df490fba1b7fb8e4e1b799a67282e9113ea78b2142aaad4244f6ca24afdb15eb98685a0f2b985a840f989a7208646489e6c17260494f2dc0c52aca9a5d51fc5c03dc562b078cf2", 0x57}, {&(0x7f0000000700)="87e54b67be469dea9a6ba4639b1867f778b40a1adb406bc2b7d89f072d3744f162d718c7d369f9fe29ea05127c8ed28502a6e466678cf48c8b91136714bd59a6fba6ba3ff36712e8e0", 0x49}, {&(0x7f0000000380)="fcfa65ef8070021d2de5e85cfbd967c6ff4b7f8a78e25c9231231ca6069bf0fe2d78", 0x22}, {&(0x7f0000000780)="e55878fe676ac220638ba63e1cdd74a2a4d2bccf479afc835eb54e9db5aca8b9e44c5148cdcbe7c5ff63316765d5fd9fc46aed44fbf678b7348a3638f07e97aa7184fdc8fe2ea9e979cdd2f1b3461d8d6624ff7e2df201ff28448f41102de5373631bfaa418dfb6ae893f2e285bc7b16f64178f56b7476d81e9564ed8097364b08f66f8253ec7b5e33d0b3756727e130f1cdb77ce3ac4c2cf22b508bf5114a51338bc3aae2b199606c20bb5d9c843aa733e22155f4afc8003d4748f8f2a9055dc0060363d1f8d569a63c264506d10b7b21dd96b9ee", 0xd5}], 0x5}}, {{&(0x7f0000000900)=@pppoe={0x18, 0x0, {0x2, @multicast, 'syzkaller1\x00'}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000980)="01facb81f02734befa997c757d8955e4190c8b28a1c210bddb8c303a277eaf287b7052dd1d8ee0614ce27e1c0904ba34832eb8dd1d123bf1cbc284acd3f60541434b25ea25a14263a85002f374d1a5bd34a5cafe4d09196f4b7ac84e03582de910b6b3ef2127817f867f4d8ed681258ded8fcb8f196ca65ce372e7332410a49a5c0e24fc862e6d18823310c03932db74f57e5c7675ae30447b195f5c11e6c355e6c2d0c58cb8114e078dc6b83f1b94692c6f6b64142727decc08975b2dbb064771e4356cacabf1c4b574d5e8893dbba2", 0xd0}, {&(0x7f0000000a80)="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", 0xfd}, {&(0x7f0000000b80)="6351e4e122835fb663e4f4264e94f854b91ca946a0cf0564816335276d90c322643ed64b6ed6a7be79c5f19e07656bd00eeb618d738fefbda008f632c8f5be8cbcb79cc12b89bdfe740941de689e903a976e209dbf602eca89b03873aa3de439edd477c5a02ce780eeffa2f7a5dc80fed131de41125b81a259e4463c3abdae99f3cafec4167103b60073d48451712ec136b20d650ddffe4cb474a553c418105b920c9983c80233b7c66415336f8e3a1c4ddd8c595abc76a2f0bc0b2b68dfec09c8bb3eaedc3b9e5f8d7736e9b2a50ee4ea72e7a2bb0a6cbd75ad4dbc66e4705c313a8c85be15fa0d18ae03b22b043e0dd477ddb7", 0xf4}, {&(0x7f0000001780)="5f627687b582f107ad3d1e28ff71bec67e5a9a01c6415afbaf7a91befc63559320f095c0681cccf06fc9684deec1ba2f627568278a0d2f6189ae1c502553fb9c5ffd945a5aca77d1cfe53613a4ac2b2b3967a86077a05ea588b1c5e4f4379c32cde7cd76acb76d1b269287644a4b3113593555ed0fc38a2f6dd7b7b4ec4f3e6d9981eb70d2671b000000000000000000bc3578daf955df000000000000000000", 0xa0}, {&(0x7f0000000d40)="c4d73234739872bab7b7ee84613a9f8e4c3ee3b9e684ead6993f0c5ce07597a6c20877f75df117cdca6e678e607f6d1251210e2ce94b8551d9c600cafd8de27434df9b6535f440c7ad4cf2ea98bd90852c239240570de4595a419ad5bae5f82602873cb3e07323a2209b", 0x6a}], 0x5, &(0x7f0000000e40)=[@mark={{0x14, 0x1, 0x24, 0x2c0a}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x30}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000f00)="5baf3c1ecb54baa478", 0x9}, {&(0x7f0000000f40)="6fc8efc7ff0e79b021e2dfdbe81f81cf85383e8375152ce3b0e5e646e670248791c12629bc96e89a825288c55e1fa4b1b2a816405b1557a18e7d1d49cae3d757c18a7cd81378ed8b564f762d6e45b21bef7e5cbaf4f4", 0x56}, {&(0x7f0000000fc0)="2b9a7cbab491cb32f705f83dba58e0d17591fb4a47a3a9ef4764cb49e12e5f24d28043954d9530a87dda50235648281ccf5a3c4ead6cad4296bc5e80d7244649b4ec5c47eeeff8e65c930f72a6ee665f915dae24ada3b085cd91c28c97759abdc88ba68aa6e25265a8c9c5191f7b", 0x6e}, {&(0x7f0000001040)="cbf5920b21dff4ccb3381d7351f668c77e7cee04baf37944895612afd686816a4625df7325d8eb0cbb84c417d7b7666cefa70adcb68305bfe5ebbb01bd20083e3b5c6082d4eccc1d16ac2e", 0x4b}, {&(0x7f00000010c0)="e25c6f649afd1a8ee7343bf0ae79543ab827c39ef7fb0a83ea0749dcabae9e95d7a07b87371de5230b4caadd82b510071c203c1aad2077f747574ae5f4e0695c55be9c65ee2975149057a5e6c82456971c8b7bbfcfb651f1c9c7515fc3b48c28c50888d255c66eef944b56a36ff60c59988b7be0bb36ac3bb85a42bf455af27bf6039dd0e9051a88d4d51e21a8cce1110b7a01cb4754a8210c4092e8fd816a7895cd68156211fde21e1e4f7d325efe907e3f33507ebdda56ebd863817c08a3dcedc1d9173375c40763dfa34d782acf316bff6e4184", 0xd5}, {&(0x7f00000011c0)="e4911154c5793d3605ee7c9747ed9f0e23715e954bc5e1", 0x17}, {&(0x7f0000001200)="e12486a641eb7846879238aeeb56de99c36780f3c32bf9b07670edc8ba39badb8272ebd6b1fa020ad75c8c18aee1f484ac7a4d2df65b33446381c6594b4f46d0cf1c9f5b962dd20e", 0x48}], 0x7, &(0x7f0000001300)=[@mark={{0x14, 0x1, 0x24, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x80}}], 0x30}}, {{&(0x7f0000001340)=@nl=@unspec, 0x80, &(0x7f0000001480)=[{&(0x7f00000013c0)="856ff8fa4cceda1bfcf407067c03d26130f33ee2b3eff10df6ac4e0e7b4dcde7f2fa772198aa8cb1b8c7979bd6b6d545c4928d6dc53532563732e549ca6c310c169c210a06308f1215b63a4f3ca5f6bc7fd81fda181138d0a356613bee27c8b35c06bbed2982ea995e60bd2363fe83c99d13ed83d3c52987d7c531c0ac47fe27c4a023079e", 0x85}], 0x1, &(0x7f00000014c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0xf0}}], 0x6, 0xc000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r3, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000014) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r7) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r8, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x0) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 0s ago: executing program 4 (id=6141): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x4014) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) kernel console output (not intermixed with test programs): ng state [ 458.271884][T13531] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.279178][T13531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.336374][T20774] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5305'. [ 458.363422][T20780] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5305'. [ 458.365299][T20774] sit0: entered promiscuous mode [ 458.479965][T20773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5305'. [ 458.523122][T20774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5305'. [ 458.936457][T20561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.074050][T20561] veth0_vlan: entered promiscuous mode [ 459.074715][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.103598][T20561] veth1_vlan: entered promiscuous mode [ 459.198675][T20561] veth0_macvtap: entered promiscuous mode [ 459.221230][T20561] veth1_macvtap: entered promiscuous mode [ 459.256176][T20561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.272550][T20812] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5317'. [ 459.282370][T20561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.312945][T20561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.352573][T20561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.376311][T20817] netlink: 152064 bytes leftover after parsing attributes in process `syz.4.5319'. [ 459.385826][T20561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.385983][T20817] netlink: zone id is out of range [ 459.394527][T20561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.427232][T20819] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 459.448530][T20817] netlink: zone id is out of range [ 459.466947][T20817] netlink: zone id is out of range [ 459.497381][T20817] netlink: zone id is out of range [ 459.507727][T20817] netlink: zone id is out of range [ 459.662381][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.680683][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.796732][ T6131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.811984][ T6131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.859430][T20837] netlink: 'syz.3.5326': attribute type 1 has an invalid length. [ 459.876249][ T5848] Bluetooth: hci1: command tx timeout [ 459.897405][T20837] netlink: 'syz.3.5326': attribute type 3 has an invalid length. [ 459.935039][T20837] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5326'. [ 459.944120][T20837] NCSI netlink: No device for ifindex 813332851 [ 460.009744][T20837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5326'. [ 460.047586][T20846] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5328'. [ 460.130745][T20855] xt_NFQUEUE: number of total queues is 0 [ 460.344164][T20866] FAULT_INJECTION: forcing a failure. [ 460.344164][T20866] name failslab, interval 1, probability 0, space 0, times 0 [ 460.384957][T20866] CPU: 0 UID: 0 PID: 20866 Comm: syz.3.5335 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 460.384984][T20866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.384995][T20866] Call Trace: [ 460.385003][T20866] [ 460.385012][T20866] dump_stack_lvl+0x189/0x250 [ 460.385041][T20866] ? __pfx____ratelimit+0x10/0x10 [ 460.385066][T20866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.385090][T20866] ? __pfx__printk+0x10/0x10 [ 460.385113][T20866] ? __pfx___might_resched+0x10/0x10 [ 460.385137][T20866] ? fs_reclaim_acquire+0x7d/0x100 [ 460.385162][T20866] should_fail_ex+0x414/0x560 [ 460.385190][T20866] should_failslab+0xa8/0x100 [ 460.385211][T20866] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 460.385229][T20866] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 460.385251][T20866] ? __alloc_skb+0x112/0x2d0 [ 460.385275][T20866] __alloc_skb+0x112/0x2d0 [ 460.385298][T20866] rtmsg_ifinfo_build_skb+0x84/0x260 [ 460.385321][T20866] ? neigh_carrier_down+0x22/0x30 [ 460.385352][T20866] rtmsg_ifinfo+0x8c/0x1a0 [ 460.385382][T20866] netif_state_change+0x29e/0x3a0 [ 460.385404][T20866] ? __pfx_netif_state_change+0x10/0x10 [ 460.385419][T20866] ? __local_bh_enable_ip+0x12d/0x1c0 [ 460.385444][T20866] ? __local_bh_enable_ip+0x12d/0x1c0 [ 460.385467][T20866] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 460.385492][T20866] netdev_state_change+0x10a/0x220 [ 460.385517][T20866] br_dev_siocdevprivate+0xdb8/0x1580 [ 460.385543][T20866] ? __pfx___mutex_trylock_common+0x10/0x10 [ 460.385563][T20866] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 460.385585][T20866] ? rcu_is_watching+0x15/0xb0 [ 460.385613][T20866] ? __mutex_lock+0x330/0xe80 [ 460.385633][T20866] ? __lock_acquire+0xab9/0xd20 [ 460.385659][T20866] ? dev_ioctl+0x83c/0x1150 [ 460.385677][T20866] ? full_name_hash+0x92/0xe0 [ 460.385701][T20866] ? netdev_name_node_lookup+0xdf/0x120 [ 460.385728][T20866] dev_ifsioc+0xb54/0xf00 [ 460.385756][T20866] dev_ioctl+0x84c/0x1150 [ 460.385778][T20866] sock_ioctl+0x719/0x790 [ 460.385805][T20866] ? __pfx_sock_ioctl+0x10/0x10 [ 460.385830][T20866] ? __fget_files+0x3a0/0x420 [ 460.385848][T20866] ? __fget_files+0x2a/0x420 [ 460.385870][T20866] ? bpf_lsm_file_ioctl+0x9/0x20 [ 460.385898][T20866] ? __pfx_sock_ioctl+0x10/0x10 [ 460.385920][T20866] __se_sys_ioctl+0xfc/0x170 [ 460.385947][T20866] do_syscall_64+0xfa/0x3b0 [ 460.385962][T20866] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.385985][T20866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.386002][T20866] ? clear_bhb_loop+0x60/0xb0 [ 460.386024][T20866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.386040][T20866] RIP: 0033:0x7fc8ad98e929 [ 460.386056][T20866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.386070][T20866] RSP: 002b:00007fc8ae87f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.386090][T20866] RAX: ffffffffffffffda RBX: 00007fc8adbb5fa0 RCX: 00007fc8ad98e929 [ 460.386103][T20866] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 460.386115][T20866] RBP: 00007fc8ae87f090 R08: 0000000000000000 R09: 0000000000000000 [ 460.386126][T20866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.386137][T20866] R13: 0000000000000000 R14: 00007fc8adbb5fa0 R15: 00007ffc8f73ff68 [ 460.386169][T20866] [ 460.479094][T20870] x_tables: duplicate underflow at hook 2 [ 460.854408][T20875] tipc: Enabled bearer , priority 0 [ 460.871874][T20871] tipc: Disabling bearer [ 461.116232][ T6131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.154676][ C1] net_ratelimit: 223 callbacks suppressed [ 461.154696][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.592543][ T6131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.895538][ T6131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.956627][ T6131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.055722][ T6131] bridge_slave_1: left allmulticast mode [ 462.061426][ T6131] bridge_slave_1: left promiscuous mode [ 462.068182][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.078079][ T6131] bridge_slave_0: left allmulticast mode [ 462.083754][ T6131] bridge_slave_0: left promiscuous mode [ 462.089943][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.198882][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.528471][ T6131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.559749][T20906] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 462.605699][ T6131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.648544][ T6131] bond0 (unregistering): Released all slaves [ 462.739298][T20911] netlink: 'syz.4.5351': attribute type 1 has an invalid length. [ 462.845813][T20910] __nla_validate_parse: 5 callbacks suppressed [ 462.845831][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5351'. [ 462.975234][T20910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5351'. [ 462.981583][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5352'. [ 463.001089][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 463.016809][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 463.025487][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 463.042660][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 463.055957][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 463.067283][T20916] team_slave_0: entered promiscuous mode [ 463.073177][T20916] team_slave_1: entered promiscuous mode [ 463.156159][ T5156] Bluetooth: hci5: command 0x041b tx timeout [ 463.173092][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5357'. [ 463.200645][T20926] netlink: 'syz.3.5357': attribute type 2 has an invalid length. [ 463.228435][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5359'. [ 463.234683][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.240397][T20926] netlink: 'syz.3.5357': attribute type 1 has an invalid length. [ 463.253377][T20926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5357'. [ 463.279660][T20935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5359'. [ 463.433843][T20939] Unsupported ieee802154 address type: 0 [ 463.588135][T20946] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.5363'. [ 463.928336][T20965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.058171][T20970] xt_TCPMSS: Only works on TCP SYN packets [ 464.273530][T20980] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.274701][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.515146][ T6131] hsr_slave_0: left promiscuous mode [ 464.547014][ T6131] hsr_slave_1: left promiscuous mode [ 464.553663][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.568609][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.580548][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.595304][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.648019][ T6131] veth1_macvtap: left promiscuous mode [ 464.653618][ T6131] veth0_macvtap: left promiscuous mode [ 464.669386][ T6131] veth1_vlan: left promiscuous mode [ 464.674957][ T6131] veth0_vlan: left promiscuous mode [ 465.155552][ T5848] Bluetooth: hci1: command tx timeout [ 465.183931][ T6131] team0 (unregistering): Port device team_slave_1 removed [ 465.230291][ T6131] team0 (unregistering): Port device team_slave_0 removed [ 465.316623][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.924220][T20919] chnl_net:caif_netlink_parms(): no params data found [ 466.047390][T21007] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5384'. [ 466.135078][T21012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5385'. [ 466.257050][T20919] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.264312][T20919] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.285088][T20919] bridge_slave_0: entered allmulticast mode [ 466.292907][T20919] bridge_slave_0: entered promiscuous mode [ 466.317556][T20919] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.335010][T20919] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.342279][T20919] bridge_slave_1: entered allmulticast mode [ 466.354695][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.363763][T20919] bridge_slave_1: entered promiscuous mode [ 466.531657][T20919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.566480][T20919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.684402][T20919] team0: Port device team_slave_0 added [ 466.704874][T20919] team0: Port device team_slave_1 added [ 466.759286][T21037] x_tables: duplicate underflow at hook 1 [ 466.787403][T20919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.804564][T20919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.832639][T20919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.852177][T20919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.864806][T20919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.892305][T20919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.071196][T20919] hsr_slave_0: entered promiscuous mode [ 467.091031][T20919] hsr_slave_1: entered promiscuous mode [ 467.098262][T20919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.106987][T20919] Cannot create hsr debugfs directory [ 467.236691][ T5848] Bluetooth: hci1: command tx timeout [ 467.355242][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f24b800: rx timeout, send abort [ 467.394697][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 467.501370][T21064] syz!: rxe_newlink: already configured on team_slave_0 [ 467.863571][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f24b800: abort rx timeout. Force session deactivation [ 467.900759][T21079] __nla_validate_parse: 1 callbacks suppressed [ 467.900779][T21079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5406'. [ 467.922786][T21076] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5404'. [ 468.376370][T21092] netlink: 'syz.4.5409': attribute type 1 has an invalid length. [ 468.438289][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.316922][ T5848] Bluetooth: hci1: command tx timeout [ 469.477565][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.348398][T20919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 470.381316][T20919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 470.430071][T20919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 470.469713][T20919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 470.514837][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.701265][T21140] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 470.801468][T20919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.861857][T21146] netlink: 'syz.3.5422': attribute type 10 has an invalid length. [ 470.867301][T20919] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.903869][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.911099][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.960709][T21146] wlan1: mtu greater than device maximum [ 470.995127][T21146] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 471.042168][T21153] team0: Device gtp0 is up. Set it down before adding it as a team port [ 471.142710][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.149958][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.300402][T21167] netlink: 416 bytes leftover after parsing attributes in process `syz.3.5429'. [ 471.321412][T21167] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 471.355492][T21167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.396871][ T5848] Bluetooth: hci1: command tx timeout [ 471.554751][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.556717][T21181] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 471.776595][T20919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.913398][T20919] veth0_vlan: entered promiscuous mode [ 471.928031][T21194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5438'. [ 471.949174][T20919] veth1_vlan: entered promiscuous mode [ 472.091498][T20919] veth0_macvtap: entered promiscuous mode [ 472.117288][T20919] veth1_macvtap: entered promiscuous mode [ 472.181468][T20919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.227763][T20919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.261129][T20919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.283758][T21210] nbd: device at index 1 is going down [ 472.301296][T21211] nbd: device at index 1 is going down [ 472.304637][T20919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.315930][T21210] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5445'. [ 472.371876][T20919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.389862][T20919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.510593][T21225] netlink: 'syz.1.5448': attribute type 1 has an invalid length. [ 472.594860][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 472.599726][T21225] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.712118][T21232] netlink: 'syz.4.5450': attribute type 1 has an invalid length. [ 472.729322][T21232] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5450'. [ 472.741866][T21232] openvswitch: netlink: Missing valid actions attribute. [ 472.750540][T21232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.765499][T21227] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.770055][T21230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5448'. [ 472.772553][T21227] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 472.838019][T21227] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 473.069248][T21225] veth3: entered promiscuous mode [ 473.098387][T21225] bond3: (slave veth3): Enslaving as an active interface with a down link [ 473.159923][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.171679][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.216894][T12775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.246192][T12775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.635206][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.661745][T21270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5461'. [ 474.269651][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.406586][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.504530][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.589647][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.675368][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 474.703280][ T13] bridge_slave_1: left allmulticast mode [ 474.709077][ T13] bridge_slave_1: left promiscuous mode [ 474.715638][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.726248][ T13] bridge_slave_0: left allmulticast mode [ 474.731923][ T13] bridge_slave_0: left promiscuous mode [ 474.737708][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.176529][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.188257][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.198980][ T13] bond0 (unregistering): Released all slaves [ 475.621000][ T13] hsr_slave_0: left promiscuous mode [ 475.627109][ T13] hsr_slave_1: left promiscuous mode [ 475.632863][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.675479][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.705841][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.713351][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.720561][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.827150][ T13] veth1_macvtap: left promiscuous mode [ 475.839005][ T13] veth0_macvtap: left promiscuous mode [ 475.865272][ T13] veth1_vlan: left promiscuous mode [ 475.870675][ T13] veth0_vlan: left promiscuous mode [ 475.916892][T21297] netlink: 'syz.3.5468': attribute type 2 has an invalid length. [ 475.924920][T21297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5468'. [ 475.933887][T21297] netlink: 'syz.3.5468': attribute type 2 has an invalid length. [ 475.952132][T21297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5468'. [ 476.255568][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 476.265776][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 476.273922][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 476.282825][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 476.291633][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.635945][ T13] team0 (unregistering): Port device team_slave_1 removed [ 476.684012][ T13] team0 (unregistering): Port device team_slave_0 removed [ 476.755327][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 477.015551][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029b75000: rx timeout, send abort [ 477.342480][T21311] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 477.523823][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029b75000: abort rx timeout. Force session deactivation [ 477.632382][T21327] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5476'. [ 477.664891][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5476'. [ 477.684759][T21327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5476'. [ 477.794668][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 478.157982][T21341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5481'. [ 478.173019][T21341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5481'. [ 478.226931][T21341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5481'. [ 478.282020][T21341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5481'. [ 478.355494][ T5156] Bluetooth: hci1: command tx timeout [ 478.527984][T21306] chnl_net:caif_netlink_parms(): no params data found [ 478.834662][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 478.883325][T21381] __nla_validate_parse: 61 callbacks suppressed [ 478.883344][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5493'. [ 478.922156][T21306] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.941135][T21306] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.959433][T21306] bridge_slave_0: entered allmulticast mode [ 478.970746][T21381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5493'. [ 479.022860][T21306] bridge_slave_0: entered promiscuous mode [ 479.029423][T21381] netlink: 'syz.4.5493': attribute type 5 has an invalid length. [ 479.098850][T21306] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.118580][T21306] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.135137][T21306] bridge_slave_1: entered allmulticast mode [ 479.168109][T21306] bridge_slave_1: entered promiscuous mode [ 479.202856][T21386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.372836][T21306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.413936][T21306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.602991][T21306] team0: Port device team_slave_0 added [ 479.637084][T21306] team0: Port device team_slave_1 added [ 479.748455][T21306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.777350][T21306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.845547][T21306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.874759][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 479.900749][T21306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.924781][T21306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.984933][T21306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.299610][T21306] hsr_slave_0: entered promiscuous mode [ 480.317926][T21306] hsr_slave_1: entered promiscuous mode [ 480.342267][T21306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.355373][T21306] Cannot create hsr debugfs directory [ 480.365515][T21422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.439541][ T5156] Bluetooth: hci1: command tx timeout [ 480.756429][T21442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5514'. [ 480.915182][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.259512][T21457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.379367][T21464] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 481.465913][T21468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5524'. [ 481.520479][T21468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5524'. [ 481.625001][T21475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5527'. [ 481.795880][T21481] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5530'. [ 481.806355][T21483] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5531'. [ 481.806427][T21483] netlink: zone id is out of range [ 481.806467][T21483] netlink: get zone limit has 8 unknown bytes [ 481.954746][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 482.002281][T21306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 482.018258][T21490] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5534'. [ 482.070929][T21494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.094764][T21306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 482.109501][T21306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 482.171900][T21306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 482.436762][T21520] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5544'. [ 482.465055][T21520] netlink: zone id is out of range [ 482.470250][T21520] netlink: get zone limit has 8 unknown bytes [ 482.516375][ T5156] Bluetooth: hci1: command tx timeout [ 482.525899][T21306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.576792][T21306] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.592584][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.599810][ T6131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.675778][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.682965][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.994766][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 483.206427][T21562] openvswitch: netlink: Flow actions attr not present in new flow. [ 483.220859][T21567] openvswitch: netlink: Flow key attr not present in new flow. [ 483.311961][T21306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.391800][T21582] netlink: 'syz.3.5561': attribute type 4 has an invalid length. [ 483.476342][T21582] tipc: New replicast peer: 255.42.255.255 [ 483.482408][T21582] tipc: Enabled bearer , priority 10 [ 483.583077][T21306] veth0_vlan: entered promiscuous mode [ 483.597354][T21306] veth1_vlan: entered promiscuous mode [ 483.711752][T21306] veth0_macvtap: entered promiscuous mode [ 483.750645][T21306] veth1_macvtap: entered promiscuous mode [ 483.810499][T21306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.855579][T21306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.901412][T21306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.921804][T21306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.935591][T21306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.944666][T21306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.034883][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 484.145461][T12775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.163274][T12775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.243073][T13531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.271940][T13531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.284768][T21613] __nla_validate_parse: 4 callbacks suppressed [ 484.284786][T21613] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5575'. [ 484.991433][T21654] netlink: 'syz.2.5591': attribute type 2 has an invalid length. [ 484.999329][T21654] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.5591'. [ 485.031547][T21654] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 485.135224][T21658] bond3: entered promiscuous mode [ 485.145175][T21658] bond3: entered allmulticast mode [ 485.165152][T21658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 485.640914][T12775] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.020246][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 486.033184][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 486.042692][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 486.053134][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 486.068727][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 486.148979][T12775] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.404348][T12775] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.508340][T12775] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.653114][T21680] chnl_net:caif_netlink_parms(): no params data found [ 486.692382][T12775] bridge_slave_1: left allmulticast mode [ 486.698167][T12775] bridge_slave_1: left promiscuous mode [ 486.705389][T12775] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.716336][T12775] bridge_slave_0: left allmulticast mode [ 486.722001][T12775] bridge_slave_0: left promiscuous mode [ 486.728515][T12775] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.106584][T12775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.118257][T12775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.129004][T12775] bond0 (unregistering): Released all slaves [ 487.154664][ C1] net_ratelimit: 4 callbacks suppressed [ 487.154681][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 487.242413][T21687] netlink: 'syz.1.5604': attribute type 2 has an invalid length. [ 487.294895][T21687] netlink: 119 bytes leftover after parsing attributes in process `syz.1.5604'. [ 487.305036][T21694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5604'. [ 487.314341][T21694] x_tables: ip_tables: udp match: only valid for protocol 17 [ 487.396750][T21690] bond4: entered promiscuous mode [ 487.407005][T21690] bond4: entered allmulticast mode [ 487.425429][T21690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 487.738216][T21680] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.767307][T21680] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.788292][T21680] bridge_slave_0: entered allmulticast mode [ 487.808395][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 487.818517][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 487.831512][T21680] bridge_slave_0: entered promiscuous mode [ 487.837562][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 487.861680][T21680] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.869999][T21680] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.878371][T21680] bridge_slave_1: entered allmulticast mode [ 487.884403][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 487.895635][T21680] bridge_slave_1: entered promiscuous mode [ 487.902206][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 487.992723][T21711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5611'. [ 488.090108][T21717] team0: Cannot enslave team device to itself [ 488.119457][ T5848] Bluetooth: hci1: command tx timeout [ 488.193012][T21680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.194847][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 488.258205][T21680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.311213][T21728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5616'. [ 488.413463][T21733] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5618'. [ 488.537830][T21724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.652538][T21680] team0: Port device team_slave_0 added [ 488.688894][T21737] openvswitch: netlink: IP tunnel dst address not specified [ 488.766022][T12775] hsr_slave_0: left promiscuous mode [ 488.772702][T12775] hsr_slave_1: left promiscuous mode [ 488.802216][T12775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.818757][T12775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.847544][T12775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.876102][T12775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.913456][T12775] veth1_macvtap: left promiscuous mode [ 488.920019][T12775] veth0_macvtap: left promiscuous mode [ 488.925733][T12775] veth1_vlan: left promiscuous mode [ 488.931221][T12775] veth0_vlan: left promiscuous mode [ 489.234799][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 489.492191][T12775] team0 (unregistering): Port device team_slave_1 removed [ 489.547195][T12775] team0 (unregistering): Port device team_slave_0 removed [ 489.957271][ T5848] Bluetooth: hci2: command tx timeout [ 490.038603][T21680] team0: Port device team_slave_1 added [ 490.196798][ T5848] Bluetooth: hci1: command tx timeout [ 490.249917][T21680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.258417][T21680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.274698][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.284739][T21680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.336593][T21680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.343583][T21680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.396971][T21680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.454031][T21754] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5626'. [ 490.572268][T21759] bridge3: entered promiscuous mode [ 490.578979][T21759] bridge3: entered allmulticast mode [ 490.590985][T21680] hsr_slave_0: entered promiscuous mode [ 490.598029][T21680] hsr_slave_1: entered promiscuous mode [ 490.604348][T21680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.612064][T21680] Cannot create hsr debugfs directory [ 490.706463][T21765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.756866][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5630'. [ 490.902957][T12775] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.928521][T12775] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.073580][T12775] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.084789][T12775] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.223138][T12775] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.242431][T12775] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.314802][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.415842][T12775] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.429345][T12775] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.456101][T21708] chnl_net:caif_netlink_parms(): no params data found [ 491.606296][T21798] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5640'. [ 491.765089][T21803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5641'. [ 491.891653][T21708] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.910658][T21708] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.925417][T21708] bridge_slave_0: entered allmulticast mode [ 491.941453][T21708] bridge_slave_0: entered promiscuous mode [ 492.033690][T21708] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.041510][T21708] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.047441][ T5848] Bluetooth: hci2: command tx timeout [ 492.049089][T21708] bridge_slave_1: entered allmulticast mode [ 492.062467][T21708] bridge_slave_1: entered promiscuous mode [ 492.219920][T21819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5648'. [ 492.246497][T21708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.285076][ T5848] Bluetooth: hci1: command tx timeout [ 492.354770][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 492.572152][T12775] bond1 (unregistering): (slave gretap1): Releasing active interface [ 492.621576][T12775] dvmrp0 (unregistering): left allmulticast mode [ 492.985700][T12775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.015057][T12775] bond_slave_0: left allmulticast mode [ 493.046610][T12775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.074392][T12775] bond_slave_1: left allmulticast mode [ 493.084000][T12775] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 493.098367][T12775] mac80211_hwsim hwsim54 wlan1: left allmulticast mode [ 493.115211][T12775] bond0 (unregistering): Released all slaves [ 493.244295][T12775] bond1 (unregistering): Released all slaves [ 493.264240][T12775] bond2 (unregistering): Released all slaves [ 493.287435][T21708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.394796][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 493.678869][T21708] team0: Port device team_slave_0 added [ 493.798763][T21708] team0: Port device team_slave_1 added [ 494.007137][T21708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.028875][T21708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.060663][T21708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.124647][ T5848] Bluetooth: hci2: command tx timeout [ 494.179153][T21708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.194760][T21708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.280630][T21708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.384646][ T5848] Bluetooth: hci1: command tx timeout [ 494.434730][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 494.445780][T21877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5668'. [ 494.503702][T12775] hsr_slave_0: left promiscuous mode [ 494.521751][T12775] hsr_slave_1: left promiscuous mode [ 494.535680][T12775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.564905][T12775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.587140][T12775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.605224][T12775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.653645][T12775] team_slave_0: left promiscuous mode [ 494.659453][T12775] team_slave_1: left promiscuous mode [ 494.684416][T12775] veth1_macvtap: left promiscuous mode [ 494.690288][T12775] veth0_macvtap: left promiscuous mode [ 495.147787][T12775] team0 (unregistering): Port device team_slave_1 removed [ 495.216098][T12775] team0 (unregistering): Port device team_slave_0 removed [ 495.475849][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 495.859416][T21708] hsr_slave_0: entered promiscuous mode [ 495.883501][T21708] hsr_slave_1: entered promiscuous mode [ 495.901710][T21708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.920442][T21708] Cannot create hsr debugfs directory [ 496.124294][T21680] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 496.145226][T21902] IPv6: NLM_F_CREATE should be specified when creating new route [ 496.155122][T21902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5676'. [ 496.168984][T21902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5676'. [ 496.194774][ T5848] Bluetooth: hci2: command tx timeout [ 496.201039][T21902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5676'. [ 496.234744][T21680] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 496.248829][T21680] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 496.278753][T21680] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 496.519862][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 496.530904][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5682'. [ 496.629732][T21920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.784339][T12775] IPVS: stop unused estimator thread 0... [ 496.964163][T21680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.036981][T21680] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.092803][T13527] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.100032][T13527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.159815][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.167011][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.437665][T21951] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 497.554817][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 497.642931][T21708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 497.685436][T21708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 497.702554][T21708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 497.723014][T21708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 497.959651][T21708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.996314][T21708] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.011219][T21680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.029106][T13527] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.036306][T13527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.070750][T13527] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.077970][T13527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.248030][T21680] veth0_vlan: entered promiscuous mode [ 498.306999][T21680] veth1_vlan: entered promiscuous mode [ 498.411883][T21680] veth0_macvtap: entered promiscuous mode [ 498.433182][T21989] mac80211_hwsim hwsim59 wlan1: entered promiscuous mode [ 498.451987][T21680] veth1_macvtap: entered promiscuous mode [ 498.468827][T21989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5704'. [ 498.531077][T21680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.563781][T21680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.594884][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 498.616710][T21680] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.637591][T21680] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.657419][T21680] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.683682][T21680] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.836331][T21708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.031346][T21708] veth0_vlan: entered promiscuous mode [ 499.058474][T13527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.070619][T13527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.116350][T21708] veth1_vlan: entered promiscuous mode [ 499.203056][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.222287][T21708] veth0_macvtap: entered promiscuous mode [ 499.229869][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.256326][T21708] veth1_macvtap: entered promiscuous mode [ 499.338297][T21708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.386803][T21708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.430148][T21708] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.458059][T21708] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.470053][T22017] nbd: must specify a device to reconfigure [ 499.477051][T21708] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.496328][T21708] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.634992][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 499.725489][T12775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.745991][T12775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.844644][T12775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.853032][T12775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.147951][T22040] netlink: 'syz.3.5724': attribute type 7 has an invalid length. [ 500.179765][T22040] : entered promiscuous mode [ 500.306478][T22048] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5726'. [ 500.537010][T22057] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 500.544197][ T977] IPVS: starting estimator thread 0... [ 500.634749][T22063] IPVS: using max 29 ests per chain, 69600 per kthread [ 500.674799][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 500.752063][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5736'. [ 500.815943][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b486000: rx timeout, send abort [ 500.967287][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.257810][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.325839][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b486000: abort rx timeout. Force session deactivation [ 501.400903][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.437242][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 501.449247][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 501.457633][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 501.466945][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 501.475527][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 501.511947][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.653180][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.714713][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 501.834724][ T13] bridge_slave_1: left allmulticast mode [ 501.840410][ T13] bridge_slave_1: left promiscuous mode [ 501.849776][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.861626][ T13] bridge_slave_0: left allmulticast mode [ 501.867863][ T13] bridge_slave_0: left promiscuous mode [ 501.873573][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.244129][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.262016][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.272581][ T13] bond0 (unregistering): Released all slaves [ 502.416813][T22075] chnl_net:caif_netlink_parms(): no params data found [ 502.754709][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 502.776641][T22075] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.787334][T22075] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.794850][T22075] bridge_slave_0: entered allmulticast mode [ 502.813804][T22075] bridge_slave_0: entered promiscuous mode [ 502.866263][ T13] hsr_slave_0: left promiscuous mode [ 502.888123][ T13] hsr_slave_1: left promiscuous mode [ 502.895500][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.902995][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.912332][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.922197][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.961794][ T13] veth1_macvtap: left promiscuous mode [ 502.974728][ T13] veth0_macvtap: left promiscuous mode [ 502.980430][ T13] veth1_vlan: left promiscuous mode [ 502.995225][ T13] veth0_vlan: left promiscuous mode [ 503.267501][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 503.278698][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 503.287811][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 503.297386][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 503.307499][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 503.568344][ T5848] Bluetooth: hci0: command tx timeout [ 503.615032][ T13] team0 (unregistering): Port device team_slave_1 removed [ 503.657457][ T13] team0 (unregistering): Port device team_slave_0 removed [ 503.796432][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 504.092444][T22075] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.116220][T22075] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.123459][T22075] bridge_slave_1: entered allmulticast mode [ 504.149238][T22075] bridge_slave_1: entered promiscuous mode [ 504.156245][T22095] tipc: Started in network mode [ 504.161140][T22095] tipc: Node identity ac14140f, cluster identity 4711 [ 504.168564][T22095] tipc: New replicast peer: 255.255.255.255 [ 504.176203][T22095] tipc: Enabled bearer , priority 10 [ 504.185684][T22097] netlink: 'syz.2.5741': attribute type 11 has an invalid length. [ 504.208754][T22097] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5741'. [ 504.309124][T22075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.348510][T22075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.364943][T22109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5743'. [ 504.619758][T22075] team0: Port device team_slave_0 added [ 504.652215][T22075] team0: Port device team_slave_1 added [ 504.738263][T22118] netlink: 'syz.1.5747': attribute type 1 has an invalid length. [ 504.817625][T22118] bond4: entered promiscuous mode [ 504.823074][T22118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 504.834789][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 504.846369][T22075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.873720][T22075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.911309][T22075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.923937][T22126] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5750'. [ 504.926126][T22075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.947480][T22075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.982139][T22075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.174483][T22075] hsr_slave_0: entered promiscuous mode [ 505.195232][T22075] hsr_slave_1: entered promiscuous mode [ 505.215404][T22075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.229734][T22075] Cannot create hsr debugfs directory [ 505.285580][ T5898] tipc: Node number set to 2886997007 [ 505.355631][T22139] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5753'. [ 505.399676][ T5848] Bluetooth: hci2: command tx timeout [ 505.523289][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.604411][T22148] veth0: entered promiscuous mode [ 505.634932][ T5848] Bluetooth: hci0: command tx timeout [ 505.636372][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.671692][T22148] veth0: left promiscuous mode [ 505.747397][T22154] netlink: 'syz.1.5758': attribute type 1 has an invalid length. [ 505.757096][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.812973][T22154] 8021q: adding VLAN 0 to HW filter on device bond5 [ 505.874789][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 505.897661][T22158] bond5: (slave geneve2): making interface the new active one [ 505.919549][T22158] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 505.953863][T22154] bond5: entered promiscuous mode [ 505.970670][T22154] geneve2: entered promiscuous mode [ 506.042825][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.059152][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050011000: rx timeout, send abort [ 506.074087][T22164] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5760'. [ 506.084110][T22099] chnl_net:caif_netlink_parms(): no params data found [ 506.091756][T22164] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 506.127402][T22166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5761'. [ 506.137226][T22166] netlink: 'syz.1.5761': attribute type 7 has an invalid length. [ 506.145296][T22166] netlink: 'syz.1.5761': attribute type 8 has an invalid length. [ 506.153217][T22166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5761'. [ 506.318761][T22099] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.335949][T22099] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.355299][T22099] bridge_slave_0: entered allmulticast mode [ 506.369810][T22099] bridge_slave_0: entered promiscuous mode [ 506.567419][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050011000: abort rx timeout. Force session deactivation [ 506.649327][T22177] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 506.777297][T22179] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5765'. [ 506.914716][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 507.186827][ T13] bond0 (unregistering): Released all slaves [ 507.203190][ T13] bond1 (unregistering): Released all slaves [ 507.238072][T22099] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.246307][T22099] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.253553][T22099] bridge_slave_1: entered allmulticast mode [ 507.261937][T22099] bridge_slave_1: entered promiscuous mode [ 507.343375][T22099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.374838][ T13] : left promiscuous mode [ 507.477255][ T5848] Bluetooth: hci2: command tx timeout [ 507.478823][T22099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.574294][T22196] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5771'. [ 507.598787][ T13] tipc: Disabling bearer [ 507.610448][ T13] tipc: Disabling bearer [ 507.621202][ T13] tipc: Left network mode [ 507.645543][T22192] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5770'. [ 507.717044][ T5848] Bluetooth: hci0: command tx timeout [ 507.730269][T22099] team0: Port device team_slave_0 added [ 507.825824][T22099] team0: Port device team_slave_1 added [ 507.944389][T22210] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 507.954791][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 508.065773][T22099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.072911][T22099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.114047][T22099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.145096][T22216] netlink: 'syz.1.5778': attribute type 1 has an invalid length. [ 508.190875][T22099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.192919][T22216] netlink: 'syz.1.5778': attribute type 1 has an invalid length. [ 508.203184][T22219] netlink: 'syz.1.5778': attribute type 7 has an invalid length. [ 508.213943][T22219] netlink: 'syz.1.5778': attribute type 8 has an invalid length. [ 508.221823][T22099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.248502][T22099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.321283][T22223] netlink: 'syz.2.5780': attribute type 72 has an invalid length. [ 508.489422][T22099] hsr_slave_0: entered promiscuous mode [ 508.505765][T22099] hsr_slave_1: entered promiscuous mode [ 508.529172][T22099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.544656][T22099] Cannot create hsr debugfs directory [ 508.662419][T22235] tap0: tun_chr_ioctl cmd 1074025676 [ 508.675029][T22235] tap0: owner set to 0 [ 508.709625][T22075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 508.792113][T22242] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 508.834019][T22075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 508.875387][T22075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 508.931852][T22075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 508.994784][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 509.049339][ T13] hsr_slave_0: left promiscuous mode [ 509.074719][ T13] hsr_slave_1: left promiscuous mode [ 509.103271][ T13] veth1_macvtap: left promiscuous mode [ 509.109216][ T13] veth0_macvtap: left promiscuous mode [ 509.114957][ T13] veth1_vlan: left promiscuous mode [ 509.121148][ T13] veth0_vlan: left promiscuous mode [ 509.243512][ T13] pimreg (unregistering): left allmulticast mode [ 509.555578][ T5848] Bluetooth: hci2: command tx timeout [ 509.807105][ T5848] Bluetooth: hci0: command tx timeout [ 510.038137][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 510.099092][T22252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.277766][T22258] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 510.310408][T22258] __nla_validate_parse: 4 callbacks suppressed [ 510.310426][T22258] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5790'. [ 510.395941][T22268] netlink: 'syz.4.5793': attribute type 72 has an invalid length. [ 510.719366][T22075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.795910][T22075] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.814349][T13531] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.821578][T13531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.866824][T22279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5797'. [ 510.878603][T13531] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.885808][T13531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.907179][T22286] Bluetooth: MGMT ver 1.23 [ 510.913423][T22286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5799'. [ 511.074795][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 511.377032][T22300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.479803][T22099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 511.522748][T22099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 511.552882][T22099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 511.581189][T22099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 511.600135][T22282] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 511.644720][ T5848] Bluetooth: hci2: command tx timeout [ 511.866741][T22322] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5806'. [ 511.896008][T22075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.948772][T22099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.012580][T22329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5808'. [ 512.114961][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 512.162792][T22099] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.196337][T22329] netlink: 'syz.2.5808': attribute type 1 has an invalid length. [ 512.245413][T22330] netlink: 'syz.2.5808': attribute type 1 has an invalid length. [ 512.270770][T22335] netlink: 'syz.2.5808': attribute type 1 has an invalid length. [ 512.315267][T22337] veth0: entered promiscuous mode [ 512.322213][T22075] veth0_vlan: entered promiscuous mode [ 512.360630][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.367871][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.380472][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.390907][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.407783][T22075] veth1_vlan: entered promiscuous mode [ 512.428681][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.435903][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.568351][T22344] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5813'. [ 512.597054][T22075] veth0_macvtap: entered promiscuous mode [ 512.621237][T22075] veth1_macvtap: entered promiscuous mode [ 512.691695][T22075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.775918][T22075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.801312][T22075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.816686][T22353] netlink: 'syz.2.5816': attribute type 11 has an invalid length. [ 512.825135][T22075] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.834729][T22353] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5816'. [ 512.843910][T22075] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.855151][T22354] netlink: 'syz.2.5816': attribute type 11 has an invalid length. [ 512.863081][T22075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.872178][T22354] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5816'. [ 512.972881][T22356] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5817'. [ 513.086875][T22336] veth0: left promiscuous mode [ 513.118807][T22099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.155015][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 513.179440][T13531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.207664][T13531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.330553][T13531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.352887][T13531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.392003][T22372] unsupported nla_type 49928 [ 513.425276][T22372] netlink: 'syz.1.5823': attribute type 2 has an invalid length. [ 513.449295][T22099] veth0_vlan: entered promiscuous mode [ 513.453775][T22372] netlink: 'syz.1.5823': attribute type 2 has an invalid length. [ 513.508404][T22099] veth1_vlan: entered promiscuous mode [ 513.612045][T22378] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5825'. [ 513.641088][T22099] veth0_macvtap: entered promiscuous mode [ 513.678826][T22099] veth1_macvtap: entered promiscuous mode [ 513.748343][T22099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.830006][T22099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.894089][T22395] batman_adv: batadv0: Adding interface: ipvlan2 [ 513.912345][T22395] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.960758][T22395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.983359][T22395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.006132][T22395] batman_adv: batadv0: Interface activated: ipvlan2 [ 514.021464][T22099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.044724][T22099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.053462][T22099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.128519][T22099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.194688][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 514.239890][T22404] x_tables: duplicate entry at hook 1 [ 514.516620][T22422] batadv_slave_1: entered allmulticast mode [ 514.577342][T22421] batadv_slave_1: left allmulticast mode [ 514.586406][ T6131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.609533][ T6131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.780925][T13531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.789225][T13531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.189093][T22456] netlink: 'syz.1.5849': attribute type 1 has an invalid length. [ 515.238404][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 515.298773][T22456] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 515.481093][T22463] __nla_validate_parse: 6 callbacks suppressed [ 515.481112][T22463] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.5851'. [ 515.721932][T13531] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.897591][T13531] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.112784][T13734] syz_tun (unregistering): left allmulticast mode [ 516.143698][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 516.152178][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 516.163819][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 516.172071][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 516.182589][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 516.267313][T13531] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.274745][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 516.393398][T13531] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.565891][T13531] bridge_slave_1: left allmulticast mode [ 516.571594][T13531] bridge_slave_1: left promiscuous mode [ 516.578598][T13531] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.588847][T13531] bridge_slave_0: left allmulticast mode [ 516.594524][T13531] bridge_slave_0: left promiscuous mode [ 516.608398][T13531] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.930278][T13531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.941179][T13531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.953380][T13531] bond0 (unregistering): Released all slaves [ 516.971953][T22473] chnl_net:caif_netlink_parms(): no params data found [ 517.103452][T22473] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.111237][T22473] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.118709][T22473] bridge_slave_0: entered allmulticast mode [ 517.126920][T22473] bridge_slave_0: entered promiscuous mode [ 517.137410][T22473] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.145532][T22473] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.152706][T22473] bridge_slave_1: entered allmulticast mode [ 517.160747][T22473] bridge_slave_1: entered promiscuous mode [ 517.226574][T22473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.239322][T22473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.314682][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 517.324491][T22473] team0: Port device team_slave_0 added [ 517.372854][T22473] team0: Port device team_slave_1 added [ 517.485319][T13531] hsr_slave_0: left promiscuous mode [ 517.491160][T13531] hsr_slave_1: left promiscuous mode [ 517.499571][T13531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.512544][T13531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.578236][T22486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5858'. [ 517.588305][T13531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.604904][T13531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.657603][T13531] veth1_macvtap: left promiscuous mode [ 517.663187][T13531] veth0_macvtap: left promiscuous mode [ 517.683464][T13531] veth1_vlan: left promiscuous mode [ 517.694621][T13531] veth0_vlan: left promiscuous mode [ 517.827863][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062c3cc00: rx timeout, send abort [ 517.937375][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 517.946739][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 517.958646][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 517.967577][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 517.977366][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 518.278340][ T5156] Bluetooth: hci2: command tx timeout [ 518.331917][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062c3c800: rx timeout, send abort [ 518.340305][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062c3cc00: abort rx timeout. Force session deactivation [ 518.354705][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 518.388797][T13531] team0 (unregistering): Port device team_slave_1 removed [ 518.431797][T13531] team0 (unregistering): Port device team_slave_0 removed [ 518.840191][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062c3c800: abort rx timeout. Force session deactivation [ 518.888200][T22473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.896954][T22473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.923998][T22473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.958612][T22473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.984826][T22473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.047138][T22473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.233048][T22473] hsr_slave_0: entered promiscuous mode [ 519.250843][T22473] hsr_slave_1: entered promiscuous mode [ 519.265784][T22473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.283741][T22473] Cannot create hsr debugfs directory [ 519.326681][T22502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5863'. [ 519.394753][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 519.607894][T22508] bond0: option ad_select: unable to set because the bond device is up [ 519.833465][T22473] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.947373][T22473] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.052201][ T5848] Bluetooth: hci3: command tx timeout [ 520.099758][T22473] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.191016][T22473] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.357983][ T5848] Bluetooth: hci2: command tx timeout [ 520.434679][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 520.636541][T22527] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.5872'. [ 520.645968][T22491] chnl_net:caif_netlink_parms(): no params data found [ 520.769875][T22473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 520.817808][T22473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 520.838972][T22473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 520.885137][T22473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 520.981325][T22543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5876'. [ 521.057636][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5876'. [ 521.474716][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 521.742139][T22537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.124932][ T5848] Bluetooth: hci3: command 0x041b tx timeout [ 522.354539][T22491] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.361795][T22491] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.370205][T22491] bridge_slave_0: entered allmulticast mode [ 522.393838][T22491] bridge_slave_0: entered promiscuous mode [ 522.401710][T22556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5878'. [ 522.417184][T22491] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.424332][T22491] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.436655][ T5156] Bluetooth: hci2: command tx timeout [ 522.441804][T22491] bridge_slave_1: entered allmulticast mode [ 522.458156][T22491] bridge_slave_1: entered promiscuous mode [ 522.466723][T22556] tipc: Started in network mode [ 522.471610][T22556] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 522.484968][T22556] tipc: Enabled bearer , priority 10 [ 522.515107][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 522.632237][T22491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.668528][T22491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.844405][T22491] team0: Port device team_slave_0 added [ 522.874482][T22491] team0: Port device team_slave_1 added [ 522.896367][T22543] infiniband syz0: set active [ 522.918328][T22543] infiniband syz0: added bond_slave_0 [ 522.934407][T22543] syz0: rxe_create_cq: returned err = -12 [ 522.964728][T22543] infiniband syz0: Couldn't create ib_mad CQ [ 522.970931][T22543] infiniband syz0: Couldn't open port 1 [ 523.028152][T22491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.040286][T22543] RDS/IB: syz0: added [ 523.054750][T22543] smc: adding ib device syz0 with port count 1 [ 523.063153][T22543] smc: ib device syz0 port 1 has pnetid [ 523.070912][T22567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5883'. [ 523.097314][T22567] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5883'. [ 523.120780][T22491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.157339][T22491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.185499][T22491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.195663][T22491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.259160][T22491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.451073][T22491] hsr_slave_0: entered promiscuous mode [ 523.465341][T22491] hsr_slave_1: entered promiscuous mode [ 523.479386][T22491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.495758][T22491] Cannot create hsr debugfs directory [ 523.554683][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 523.605269][ T5891] tipc: Node number set to 10136234 [ 523.651134][T22473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.839694][T22473] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.962548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.969773][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.107880][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.115110][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.196084][ T5156] Bluetooth: hci3: command 0x041b tx timeout [ 524.515150][ T5156] Bluetooth: hci2: command tx timeout [ 524.594676][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 524.747615][T22491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 524.824696][T22491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 524.859248][T22491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 524.891868][T22596] Bluetooth: MGMT ver 1.23 [ 524.945639][T22491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 525.029218][T22473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.217831][T22473] veth0_vlan: entered promiscuous mode [ 525.290641][T22473] veth1_vlan: entered promiscuous mode [ 525.343090][T22491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.427953][T22491] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.463998][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.471216][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.508889][T22473] veth0_macvtap: entered promiscuous mode [ 525.529621][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.536860][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.612325][T22473] veth1_macvtap: entered promiscuous mode [ 525.634829][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 525.733293][T22473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.783708][T22473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.831537][T22473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.864737][T22473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.887473][T22473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.910809][T22473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.227802][T13531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.252370][T22491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.266543][T13531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.276876][ T5156] Bluetooth: hci3: command 0x041b tx timeout [ 526.429120][T13531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.447626][T13531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.503242][T22491] veth0_vlan: entered promiscuous mode [ 526.517170][T22491] veth1_vlan: entered promiscuous mode [ 526.592513][T22631] netlink: 'syz.3.5900': attribute type 3 has an invalid length. [ 526.612541][T22631] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5900'. [ 526.629591][T22491] veth0_macvtap: entered promiscuous mode [ 526.646991][T22631] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 526.665295][T22633] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5855'. [ 526.671186][T22631] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 526.674872][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 526.726602][T22491] veth1_macvtap: entered promiscuous mode [ 526.808000][T22636] nft_compat: unsupported protocol 0 [ 526.851221][T22491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.893874][T22491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.926113][T22491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.945744][T22491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.965723][T22491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.985278][T22491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.263579][T13523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.272143][T13523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.408625][T12775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.428842][T12775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.638875][T22659] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5911'. [ 527.714716][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 527.847326][ T30] audit: type=1107 audit(1750936733.216:2): pid=22674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='^ɂS*Exe@4y;ȄpPKM' [ 528.057146][T22686] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 528.218015][T22697] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5923'. [ 528.240572][T22697] netlink: zone id is out of range [ 528.250528][T22697] netlink: get zone limit has 8 unknown bytes [ 528.320922][ T2988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.436992][ T2988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.751923][ T2988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.762366][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 529.017234][ T2988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.182184][ T2988] bridge_slave_1: left allmulticast mode [ 529.190398][ T2988] bridge_slave_1: left promiscuous mode [ 529.196440][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.205425][ T2988] bridge_slave_0: left allmulticast mode [ 529.211062][ T2988] bridge_slave_0: left promiscuous mode [ 529.217411][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.583193][ T2988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.600050][ T2988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.613357][ T2988] bond0 (unregistering): Released all slaves [ 529.804705][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 530.143552][ T2988] hsr_slave_0: left promiscuous mode [ 530.218781][ T2988] hsr_slave_1: left promiscuous mode [ 530.239911][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.240513][T22704] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5926'. [ 530.261667][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.301612][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.328160][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.383348][ T2988] veth1_macvtap: left promiscuous mode [ 530.399800][ T2988] veth0_macvtap: left promiscuous mode [ 530.414820][T22712] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 530.434074][ T2988] veth1_vlan: left promiscuous mode [ 530.444848][ T2988] veth0_vlan: left promiscuous mode [ 530.819945][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 530.829632][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 530.837066][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 530.847007][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 530.864009][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 530.877576][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 531.221984][ T2988] team0 (unregistering): Port device team_slave_1 removed [ 531.269482][ T2988] team0 (unregistering): Port device team_slave_0 removed [ 531.874753][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 531.893344][T22727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.244866][T22740] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5939'. [ 532.573133][T22758] netlink: 'syz.3.5947': attribute type 21 has an invalid length. [ 532.588613][T22756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5945'. [ 532.600830][T22758] netlink: 'syz.3.5947': attribute type 1 has an invalid length. [ 532.873366][T22764] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5948'. [ 532.924759][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 532.937036][ T5156] Bluetooth: hci3: command tx timeout [ 533.623042][T22723] chnl_net:caif_netlink_parms(): no params data found [ 533.629035][T22796] ieee802154 phy0 wpan0: encryption failed: -22 [ 533.856965][T22809] warn_alloc: 1 callbacks suppressed [ 533.856983][T22809] syz.4.5960: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 533.905507][T22809] CPU: 0 UID: 0 PID: 22809 Comm: syz.4.5960 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 533.905538][T22809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.905550][T22809] Call Trace: [ 533.905559][T22809] [ 533.905569][T22809] dump_stack_lvl+0x189/0x250 [ 533.905605][T22809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.905631][T22809] ? __pfx__printk+0x10/0x10 [ 533.905651][T22809] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 533.905671][T22809] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 533.905692][T22809] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 533.905714][T22809] warn_alloc+0x214/0x310 [ 533.905735][T22809] ? stack_depot_save_flags+0x40/0x900 [ 533.905760][T22809] ? __pfx_warn_alloc+0x10/0x10 [ 533.905781][T22809] ? kasan_save_track+0x4f/0x80 [ 533.905803][T22809] ? xskq_create+0x56/0x170 [ 533.905824][T22809] ? xsk_init_queue+0xb0/0x110 [ 533.905843][T22809] ? xsk_setsockopt+0x43f/0x710 [ 533.905862][T22809] ? do_sock_setsockopt+0x257/0x3e0 [ 533.905879][T22809] ? __x64_sys_setsockopt+0x18b/0x220 [ 533.905896][T22809] ? do_syscall_64+0xfa/0x3b0 [ 533.905910][T22809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.905935][T22809] __vmalloc_node_range_noprof+0x125/0x12f0 [ 533.905982][T22809] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 533.906007][T22809] ? __kasan_kmalloc+0x93/0xb0 [ 533.906033][T22809] vmalloc_user_noprof+0xad/0xf0 [ 533.906051][T22809] ? xskq_create+0xbf/0x170 [ 533.906074][T22809] xskq_create+0xbf/0x170 [ 533.906100][T22809] xsk_init_queue+0xb0/0x110 [ 533.906124][T22809] xsk_setsockopt+0x43f/0x710 [ 533.906146][T22809] ? __pfx_xsk_setsockopt+0x10/0x10 [ 533.906165][T22809] ? __lock_acquire+0xab9/0xd20 [ 533.906196][T22809] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 533.906215][T22809] ? __pfx_xsk_setsockopt+0x10/0x10 [ 533.906237][T22809] do_sock_setsockopt+0x257/0x3e0 [ 533.906259][T22809] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 533.906282][T22809] ? __fget_files+0x2a/0x420 [ 533.906308][T22809] __x64_sys_setsockopt+0x18b/0x220 [ 533.906333][T22809] do_syscall_64+0xfa/0x3b0 [ 533.906346][T22809] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.906368][T22809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.906383][T22809] ? clear_bhb_loop+0x60/0xb0 [ 533.906403][T22809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.906418][T22809] RIP: 0033:0x7fa671d8e929 [ 533.906435][T22809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.906449][T22809] RSP: 002b:00007fa672bfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 533.906468][T22809] RAX: ffffffffffffffda RBX: 00007fa671fb6080 RCX: 00007fa671d8e929 [ 533.906483][T22809] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 533.906494][T22809] RBP: 00007fa671e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 533.906506][T22809] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.906517][T22809] R13: 0000000000000000 R14: 00007fa671fb6080 R15: 00007ffcb5383078 [ 533.906549][T22809] [ 533.906581][T22809] Mem-Info: [ 533.964846][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 533.981233][T22809] active_anon:4757 inactive_anon:0 isolated_anon:0 [ 533.981233][T22809] active_file:1882 inactive_file:40057 isolated_file:0 [ 533.981233][T22809] unevictable:768 dirty:151 writeback:0 [ 533.981233][T22809] slab_reclaimable:12643 slab_unreclaimable:131686 [ 533.981233][T22809] mapped:29494 shmem:1410 pagetables:1164 [ 533.981233][T22809] sec_pagetables:0 bounce:0 [ 533.981233][T22809] kernel_misc_reclaimable:0 [ 533.981233][T22809] free:1290014 free_pcp:18064 free_cma:0 [ 534.002823][T22813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5960'. [ 534.021344][T22809] Node 0 active_anon:19028kB inactive_anon:0kB active_file:7528kB inactive_file:160024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121976kB dirty:600kB writeback:0kB shmem:4104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13824kB pagetables:4480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 534.108027][T22815] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5960'. [ 534.111471][T22809] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 534.359083][T22809] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.391041][T22813] macvtap1: entered allmulticast mode [ 534.404497][T22809] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 534.410417][T22813] veth0_macvtap: entered allmulticast mode [ 534.410610][T22809] Node 0 DMA32 free:1235260kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19084kB inactive_anon:0kB active_file:7528kB inactive_file:158188kB unevictable:1536kB writepending:396kB present:3129332kB managed:2561016kB mlocked:0kB bounce:0kB free_pcp:55756kB local_pcp:38856kB free_cma:0kB [ 534.448804][T22809] lowmem_reserve[]: 0 0 1 1 1 [ 534.453558][T22809] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 534.484462][T22809] lowmem_reserve[]: 0 0 0 0 0 [ 534.490035][T22809] Node 1 Normal free:3908872kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14240kB local_pcp:11104kB free_cma:0kB [ 534.492157][T22723] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.546986][T22809] lowmem_reserve[]: 0 0 0 0 0 [ 534.552856][T22723] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.560374][T22809] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 534.560512][T22809] Node 0 DMA32: 1268*4kB (M) 511*8kB (ME) 48*16kB (UME) 689*32kB (UME) 420*64kB (UME) 69*128kB (UME) 27*256kB (UME) 13*512kB (UM) 5*1024kB (M) 9*2048kB (UME) 276*4096kB (M) = 1235304kB [ 534.560690][T22809] Node 0 Normal: [ 534.593514][T22723] bridge_slave_0: entered allmulticast mode [ 534.594027][T22809] 1*4kB [ 534.612485][T22723] bridge_slave_0: entered promiscuous mode [ 534.614019][T22809] (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 534.640012][T22723] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.654864][T22723] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.662088][T22809] Node 1 Normal: [ 534.662102][T22723] bridge_slave_1: entered allmulticast mode [ 534.685659][T22809] 184*4kB (UME) 39*8kB (UME) 45*16kB (UME) 189*32kB (UME) 66*64kB (UME) 16*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3908872kB [ 534.694671][T22723] bridge_slave_1: entered promiscuous mode [ 534.723270][T22809] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.764755][T22809] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 534.786299][T22809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.806632][T22809] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 534.835931][T22809] 43328 total pagecache pages [ 534.846659][T22809] 0 pages in swap cache [ 534.852142][T22809] Free swap = 124996kB [ 534.856436][T22809] Total swap = 124996kB [ 534.860708][T22809] 2097051 pages RAM [ 534.864856][T22809] 0 pages HighMem/MovableOnly [ 534.871572][T22809] 424691 pages reserved [ 534.876528][T22809] 0 pages cma reserved [ 534.892997][T22723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.923421][T22723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.994742][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 534.994818][ T5156] Bluetooth: hci3: command tx timeout [ 535.086845][T22842] netlink: 'syz.4.5974': attribute type 1 has an invalid length. [ 535.094718][T22842] netlink: 'syz.4.5974': attribute type 3 has an invalid length. [ 535.102534][T22842] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5974'. [ 535.351983][T22723] team0: Port device team_slave_0 added [ 535.393802][T22723] team0: Port device team_slave_1 added [ 535.458698][T22860] No such timeout policy "syz0" [ 535.895640][T22723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.902629][T22723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.944727][T22723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.958506][T22723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.967659][T22723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.019808][T22872] netlink: 'syz.4.5981': attribute type 21 has an invalid length. [ 536.028275][T22723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.029888][T22872] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5981'. [ 536.039133][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 536.065451][T22874] xt_socket: unknown flags 0x3c [ 536.112350][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5981'. [ 536.154169][T22878] mac80211_hwsim hwsim118 wlan1: entered allmulticast mode [ 536.311438][T22883] netlink: 'syz.3.5982': attribute type 10 has an invalid length. [ 536.352370][T22878] bridge_slave_0: left allmulticast mode [ 536.381838][T22878] bridge_slave_0: left promiscuous mode [ 536.407758][T22878] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.428114][T22878] bridge_slave_1: left allmulticast mode [ 536.433794][T22878] bridge_slave_1: left promiscuous mode [ 536.455541][T22878] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.475942][T22878] bond0: (slave bond_slave_0): Releasing backup interface [ 536.498797][T22878] bond0: (slave bond_slave_1): Releasing backup interface [ 536.560097][T22878] team0: Port device team_slave_0 removed [ 536.574332][T22878] team0: Port device team_slave_1 removed [ 536.581184][T22878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.588792][T22878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.607962][T22878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.622212][T22878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.644616][T22883] mac80211_hwsim hwsim118 wlan1: left allmulticast mode [ 536.663381][T22883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.676949][T22883] wlan1: mtu greater than device maximum [ 536.696317][T22883] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 536.723666][T22889] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5985'. [ 536.776246][T22723] hsr_slave_0: entered promiscuous mode [ 536.791089][T22723] hsr_slave_1: entered promiscuous mode [ 536.805464][T22723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.813192][T22723] Cannot create hsr debugfs directory [ 536.996636][T22897] FAULT_INJECTION: forcing a failure. [ 536.996636][T22897] name failslab, interval 1, probability 0, space 0, times 0 [ 537.009328][T22897] CPU: 1 UID: 0 PID: 22897 Comm: syz.1.5988 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 537.009354][T22897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.009365][T22897] Call Trace: [ 537.009373][T22897] [ 537.009381][T22897] dump_stack_lvl+0x189/0x250 [ 537.009410][T22897] ? __pfx____ratelimit+0x10/0x10 [ 537.009435][T22897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.009459][T22897] ? __pfx__printk+0x10/0x10 [ 537.009481][T22897] ? rcu_is_watching+0x15/0xb0 [ 537.009515][T22897] should_fail_ex+0x414/0x560 [ 537.009541][T22897] should_failslab+0xa8/0x100 [ 537.009563][T22897] kmem_cache_alloc_noprof+0x73/0x3c0 [ 537.009586][T22897] ? skb_clone+0x212/0x3a0 [ 537.009614][T22897] skb_clone+0x212/0x3a0 [ 537.009638][T22897] bpf_clone_redirect+0xad/0x3d0 [ 537.009682][T22897] bpf_prog_e2f29814702bf05a+0x5f/0x6b [ 537.009704][T22897] ? preempt_schedule+0xae/0xc0 [ 537.009725][T22897] ? bpf_test_run+0x205/0x830 [ 537.009746][T22897] ? preempt_schedule_common+0x83/0xd0 [ 537.009775][T22897] ? __pfx_do_softirq+0x10/0x10 [ 537.009811][T22897] ? __local_bh_disable_ip+0xf1/0x190 [ 537.009834][T22897] ? __pfx___cant_migrate+0x10/0x10 [ 537.009856][T22897] ? __local_bh_enable_ip+0x12d/0x1c0 [ 537.009879][T22897] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 537.009906][T22897] ? bpf_test_timer_continue+0x136/0x350 [ 537.009931][T22897] bpf_test_run+0x38b/0x830 [ 537.009962][T22897] ? bpf_test_run+0x205/0x830 [ 537.009989][T22897] ? __pfx_bpf_test_run+0x10/0x10 [ 537.010034][T22897] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 537.010059][T22897] ? convert___skb_to_skb+0x3d/0x590 [ 537.010081][T22897] bpf_prog_test_run_skb+0xb30/0x1560 [ 537.010117][T22897] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 537.010137][T22897] bpf_prog_test_run+0x2c4/0x340 [ 537.010165][T22897] __sys_bpf+0x4a4/0x860 [ 537.010189][T22897] ? __pfx___sys_bpf+0x10/0x10 [ 537.010224][T22897] ? ksys_write+0x22a/0x250 [ 537.010244][T22897] ? __pfx_ksys_write+0x10/0x10 [ 537.010258][T22897] ? rcu_is_watching+0x15/0xb0 [ 537.010289][T22897] __x64_sys_bpf+0x7c/0x90 [ 537.010310][T22897] do_syscall_64+0xfa/0x3b0 [ 537.010325][T22897] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.010348][T22897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.010365][T22897] ? clear_bhb_loop+0x60/0xb0 [ 537.010386][T22897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.010402][T22897] RIP: 0033:0x7f766d98e929 [ 537.010418][T22897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.010433][T22897] RSP: 002b:00007f766e79c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 537.010451][T22897] RAX: ffffffffffffffda RBX: 00007f766dbb5fa0 RCX: 00007f766d98e929 [ 537.010464][T22897] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 537.010476][T22897] RBP: 00007f766e79c090 R08: 0000000000000000 R09: 0000000000000000 [ 537.010488][T22897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.010499][T22897] R13: 0000000000000000 R14: 00007f766dbb5fa0 R15: 00007ffd44a88498 [ 537.010529][T22897] [ 537.318466][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 537.329569][ T5156] Bluetooth: hci3: command tx timeout [ 537.827153][T22913] netlink: 'syz.4.5993': attribute type 1 has an invalid length. [ 538.364982][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 538.971789][T22723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 539.034512][T22723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 539.047578][T22723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 539.108511][T22723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 539.132505][T22965] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6008'. [ 539.306214][T22980] : entered promiscuous mode [ 539.394817][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 539.440623][ T5156] Bluetooth: hci3: command tx timeout [ 539.527738][T22723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.689107][T22723] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.729869][T13523] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.737094][T13523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.762107][T22999] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 539.811607][T13531] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.818886][T13531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.856532][T23003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6021'. [ 540.052587][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.327877][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.434898][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 540.496506][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.756907][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.926492][T22723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.238723][T22723] veth0_vlan: entered promiscuous mode [ 541.247433][ T12] bridge_slave_1: left allmulticast mode [ 541.268876][ T12] bridge_slave_1: left promiscuous mode [ 541.269692][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 541.283490][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.294376][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 541.307041][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 541.323013][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 541.335804][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 541.354920][ T12] bridge_slave_0: left allmulticast mode [ 541.360579][ T12] bridge_slave_0: left promiscuous mode [ 541.369412][T23042] netlink: 'syz.1.6034': attribute type 21 has an invalid length. [ 541.383249][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.484628][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 542.480757][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.508574][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.517220][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 542.536505][ T12] bond0 (unregistering): Released all slaves [ 542.591553][T22723] veth1_vlan: entered promiscuous mode [ 542.626119][T23042] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6034'. [ 542.644742][ T5898] syz0: Port: 1 Link DOWN [ 542.722954][ T12] tipc: Disabling bearer [ 542.734656][ T12] tipc: Left network mode [ 542.763882][T22723] veth0_macvtap: entered promiscuous mode [ 542.936970][T22723] veth1_macvtap: entered promiscuous mode [ 543.018104][T22723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.089888][T23056] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 543.232893][T23063] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6039'. [ 543.324083][T22723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.331543][T23065] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6040'. [ 543.331604][T23065] netlink: zone id is out of range [ 543.331645][T23065] netlink: get zone limit has 8 unknown bytes [ 543.395122][ T5156] Bluetooth: hci1: command tx timeout [ 543.436962][T22723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.469764][T22723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.480174][T22723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.489425][T22723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.554761][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 543.917031][T13527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.941398][T23076] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6045'. [ 543.951053][T13527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.974938][T23076] netlink: zone id is out of range [ 543.999356][T23076] netlink: get zone limit has 8 unknown bytes [ 544.214439][T13531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.253364][T13531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.394698][T23084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6048'. [ 544.436101][T23084] bridge_slave_0: default FDB implementation only supports local addresses [ 544.594934][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 545.111461][T23094] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6051'. [ 545.175583][T23097] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6052'. [ 545.198166][ T12] hsr_slave_0: left promiscuous mode [ 545.204316][ T12] hsr_slave_1: left promiscuous mode [ 545.210812][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.224674][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.235827][T23097] netlink: zone id is out of range [ 545.241019][T23097] netlink: zone id is out of range [ 545.255515][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.263003][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.285010][T23097] netlink: zone id is out of range [ 545.296092][T23097] netlink: get zone limit has 8 unknown bytes [ 545.384028][ T12] veth1_macvtap: left promiscuous mode [ 545.406175][ T12] veth0_macvtap: left promiscuous mode [ 545.411910][ T12] veth1_vlan: left promiscuous mode [ 545.434785][ T12] veth0_vlan: left promiscuous mode [ 545.476225][ T5156] Bluetooth: hci1: command tx timeout [ 545.634667][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 546.227911][T23007] Set syz1 is full, maxelem 65536 reached [ 546.442065][ T12] team0 (unregistering): Port device team_slave_1 removed [ 546.495216][ T12] team0 (unregistering): Port device team_slave_0 removed [ 546.600145][ T6131] smc: removing ib device syz0 [ 546.674652][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 547.098980][T23037] chnl_net:caif_netlink_parms(): no params data found [ 547.454951][T23037] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.462177][T23037] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.485412][T23037] bridge_slave_0: entered allmulticast mode [ 547.505413][T23037] bridge_slave_0: entered promiscuous mode [ 547.526352][T23037] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.555439][ T5156] Bluetooth: hci1: command tx timeout [ 547.561061][T23037] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.574959][T23037] bridge_slave_1: entered allmulticast mode [ 547.617311][T23037] bridge_slave_1: entered promiscuous mode [ 547.714688][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 547.746654][T23110] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input49 [ 547.846360][T23037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.877119][T23037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.337681][T23037] team0: Port device team_slave_0 added [ 548.379616][T23037] team0: Port device team_slave_1 added [ 548.538149][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 548.548025][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 548.556346][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6062'. [ 548.556452][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 548.575779][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 548.583845][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 548.585189][T23136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6062'. [ 548.603252][T23136] netlink: 'syz.4.6062': attribute type 15 has an invalid length. [ 548.665464][T23037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.684699][T23037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.754815][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 548.792565][T23037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.816695][T23139] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6063'. [ 548.869320][T23037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.915463][T23037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.979070][T23037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.455599][T23037] hsr_slave_0: entered promiscuous mode [ 549.462350][T23037] hsr_slave_1: entered promiscuous mode [ 549.499517][T23037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.535008][T23037] Cannot create hsr debugfs directory [ 549.568072][ T12] IPVS: stop unused estimator thread 0... [ 549.635085][ T5156] Bluetooth: hci1: command tx timeout [ 549.683403][T23164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6070'. [ 549.704498][T23164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6070'. [ 549.794616][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 549.809645][T23168] netlink: 'syz.3.6070': attribute type 10 has an invalid length. [ 549.832557][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.905270][T23168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.914195][T23168] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 549.930962][T23164] sch_fq: defrate 0 ignored. [ 550.028419][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.047398][T23178] netlink: 'syz.3.6073': attribute type 4 has an invalid length. [ 550.063480][T23178] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6073'. [ 550.237654][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.392793][T23191] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.6076'. [ 550.415524][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.675916][ T5156] Bluetooth: hci3: command tx timeout [ 550.759272][T23205] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6082'. [ 550.772815][T23203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.834750][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 550.886504][ T12] bridge_slave_1: left allmulticast mode [ 550.892207][ T12] bridge_slave_1: left promiscuous mode [ 550.915554][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.927435][ T12] bridge_slave_0: left allmulticast mode [ 550.933105][ T12] bridge_slave_0: left promiscuous mode [ 550.949960][T23212] netlink: 'syz.1.6084': attribute type 1 has an invalid length. [ 550.950588][T23210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6083'. [ 550.958071][T23212] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6084'. [ 550.986456][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.553891][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.578136][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.593657][ T12] bond0 (unregistering): Released all slaves [ 551.651992][T23215] netlink: 'syz.3.6083': attribute type 1 has an invalid length. [ 551.675785][T23218] pimreg: entered allmulticast mode [ 551.874726][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 552.051251][T23237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6089'. [ 552.081159][T23237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6089'. [ 552.112135][T23239] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6090'. [ 552.144152][T23237] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 552.295525][T23134] chnl_net:caif_netlink_parms(): no params data found [ 552.468445][T23252] Cannot find set identified by id 0 to match [ 552.712224][T23037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 552.756729][ T5848] Bluetooth: hci3: command tx timeout [ 552.832879][T23037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 552.899011][T23037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 552.914717][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 552.932731][ T12] hsr_slave_0: left promiscuous mode [ 552.948355][ T12] hsr_slave_1: left promiscuous mode [ 552.956085][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.964368][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.979068][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.989020][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.021392][ T12] veth1_macvtap: left promiscuous mode [ 553.027370][ T12] veth0_macvtap: left promiscuous mode [ 553.032987][ T12] veth1_vlan: left promiscuous mode [ 553.038389][ T12] veth0_vlan: left promiscuous mode [ 553.592080][ T12] team0 (unregistering): Port device team_slave_1 removed [ 553.648183][ T12] team0 (unregistering): Port device team_slave_0 removed [ 553.959775][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 554.097064][T23273] macvtap1: entered promiscuous mode [ 554.102399][T23273] vlan0: entered promiscuous mode [ 554.109133][T23273] macvtap1: entered allmulticast mode [ 554.114977][T23273] vlan0: entered allmulticast mode [ 554.121275][T23273] veth0_vlan: entered allmulticast mode [ 554.130032][T23273] vlan0: left allmulticast mode [ 554.135029][T23273] veth0_vlan: left allmulticast mode [ 554.140335][T23273] vlan0: left promiscuous mode [ 554.167952][T23134] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.181137][T23134] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.188898][T23134] bridge_slave_0: entered allmulticast mode [ 554.197612][T23134] bridge_slave_0: entered promiscuous mode [ 554.207695][T23134] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.215828][T23134] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.223241][T23134] bridge_slave_1: entered allmulticast mode [ 554.246617][T23134] bridge_slave_1: entered promiscuous mode [ 554.262164][T23037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 554.295215][T23275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.436648][T23134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.478378][T23134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.630936][T23134] team0: Port device team_slave_0 added [ 554.706838][T23134] team0: Port device team_slave_1 added [ 554.835546][ T5848] Bluetooth: hci3: command 0x040f tx timeout [ 554.836649][T23134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.853965][T23308] __nla_validate_parse: 4 callbacks suppressed [ 554.853981][T23308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6109'. [ 554.893648][T23134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.971820][T23134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.994650][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 555.013588][T23134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.042848][T23134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.076989][T23134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.217019][T23324] sctp: [Deprecated]: syz.4.6116 (pid 23324) Use of int in maxseg socket option. [ 555.217019][T23324] Use struct sctp_assoc_value instead [ 555.276522][T23134] hsr_slave_0: entered promiscuous mode [ 555.290744][T23134] hsr_slave_1: entered promiscuous mode [ 555.315571][T23134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.323179][T23134] Cannot create hsr debugfs directory [ 555.433976][T23333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6117'. [ 555.538532][T23334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6117'. [ 555.612511][T23037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.733731][T23037] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.785035][T23346] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.6121'. [ 555.788667][T12774] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.801311][T12774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.832255][T23346] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.6121'. [ 555.869281][T23349] netlink: 'syz.3.6121': attribute type 10 has an invalid length. [ 555.916089][T12774] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.923256][T12774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.925274][T23346] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6121'. [ 555.992456][T23349] bond0: (slave batadv0): Releasing backup interface [ 556.034694][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 556.077454][T23355] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6124'. [ 556.238950][T23037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.544272][T23373] x_tables: duplicate underflow at hook 3 [ 556.703282][T23134] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 556.720733][T23385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6130'. [ 556.736675][T23378] xt_CT: No such helper "pptp" [ 556.772196][T23134] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 556.845662][T23134] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 556.869169][T23134] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 556.915650][ T5156] Bluetooth: hci3: command 0x040f tx timeout [ 556.942241][T23037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.020043][T23397] syzkaller1: entered promiscuous mode [ 557.026694][T23397] syzkaller1: entered allmulticast mode [ 557.075662][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 557.218032][T23037] veth0_vlan: entered promiscuous mode [ 557.257304][T23037] veth1_vlan: entered promiscuous mode [ 557.298885][T23406] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6136'. [ 557.314128][T23406] netlink: zone id is out of range [ 557.352162][T23037] veth0_macvtap: entered promiscuous mode [ 557.368047][T23406] netlink: get zone limit has 8 unknown bytes [ 557.383949][T23037] veth1_macvtap: entered promiscuous mode [ 557.493563][T23037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.516461][T23037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.576381][T23037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.604638][T23037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.613386][T23037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.654759][T23037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.694935][T23414] [ 557.697312][T23414] ====================================================== [ 557.704332][T23414] WARNING: possible circular locking dependency detected [ 557.711358][T23414] 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 Not tainted [ 557.718453][T23414] ------------------------------------------------------ [ 557.725456][T23414] syz.1.6140/23414 is trying to acquire lock: [ 557.731502][T23414] ffffffff8f668db8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 557.740977][T23414] [ 557.740977][T23414] but task is already holding lock: [ 557.748322][T23414] ffffffff8f668d58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 557.757878][T23414] [ 557.757878][T23414] which lock already depends on the new lock. [ 557.757878][T23414] [ 557.768264][T23414] [ 557.768264][T23414] the existing dependency chain (in reverse order) is: [ 557.777266][T23414] [ 557.777266][T23414] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 557.785166][T23414] lock_acquire+0x120/0x360 [ 557.790183][T23414] _raw_spin_lock_bh+0x36/0x50 [ 557.795456][T23414] nr_rt_ioctl+0x390/0xd50 [ 557.800380][T23414] sock_do_ioctl+0xd9/0x300 [ 557.805397][T23414] sock_ioctl+0x576/0x790 [ 557.810235][T23414] __se_sys_ioctl+0xfc/0x170 [ 557.815340][T23414] do_syscall_64+0xfa/0x3b0 [ 557.820350][T23414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.826747][T23414] [ 557.826747][T23414] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 557.834734][T23414] lock_acquire+0x120/0x360 [ 557.839748][T23414] _raw_spin_lock_bh+0x36/0x50 [ 557.845021][T23414] nr_rt_ioctl+0x193/0xd50 [ 557.849939][T23414] sock_do_ioctl+0xd9/0x300 [ 557.854953][T23414] sock_ioctl+0x576/0x790 [ 557.859790][T23414] __se_sys_ioctl+0xfc/0x170 [ 557.864889][T23414] do_syscall_64+0xfa/0x3b0 [ 557.869897][T23414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.876295][T23414] [ 557.876295][T23414] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 557.884102][T23414] validate_chain+0xb9b/0x2140 [ 557.889374][T23414] __lock_acquire+0xab9/0xd20 [ 557.894568][T23414] lock_acquire+0x120/0x360 [ 557.899582][T23414] _raw_spin_lock_bh+0x36/0x50 [ 557.904854][T23414] nr_rt_device_down+0xa9/0x720 [ 557.910210][T23414] nr_device_event+0x137/0x150 [ 557.915484][T23414] notifier_call_chain+0x1b3/0x3e0 [ 557.921107][T23414] __dev_notify_flags+0x18d/0x2e0 [ 557.926637][T23414] netif_change_flags+0xe8/0x1a0 [ 557.932084][T23414] dev_change_flags+0x130/0x260 [ 557.937444][T23414] dev_ioctl+0x7b4/0x1150 [ 557.942281][T23414] sock_do_ioctl+0x22c/0x300 [ 557.947382][T23414] sock_ioctl+0x576/0x790 [ 557.952221][T23414] __se_sys_ioctl+0xfc/0x170 [ 557.957325][T23414] do_syscall_64+0xfa/0x3b0 [ 557.962334][T23414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.968737][T23414] [ 557.968737][T23414] other info that might help us debug this: [ 557.968737][T23414] [ 557.978946][T23414] Chain exists of: [ 557.978946][T23414] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 557.978946][T23414] [ 557.992771][T23414] Possible unsafe locking scenario: [ 557.992771][T23414] [ 558.000223][T23414] CPU0 CPU1 [ 558.005583][T23414] ---- ---- [ 558.010943][T23414] lock(nr_neigh_list_lock); [ 558.015616][T23414] lock(&nr_node->node_lock); [ 558.022892][T23414] lock(nr_neigh_list_lock); [ 558.030124][T23414] lock(nr_node_list_lock); [ 558.034706][T23414] [ 558.034706][T23414] *** DEADLOCK *** [ 558.034706][T23414] [ 558.042835][T23414] 2 locks held by syz.1.6140/23414: [ 558.048020][T23414] #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 558.056818][T23414] #1: ffffffff8f668d58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 558.066816][T23414] [ 558.066816][T23414] stack backtrace: [ 558.072693][T23414] CPU: 0 UID: 0 PID: 23414 Comm: syz.1.6140 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 558.072712][T23414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.072721][T23414] Call Trace: [ 558.072729][T23414] [ 558.072736][T23414] dump_stack_lvl+0x189/0x250 [ 558.072759][T23414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.072777][T23414] ? __pfx__printk+0x10/0x10 [ 558.072792][T23414] ? print_lock_name+0xde/0x100 [ 558.072807][T23414] print_circular_bug+0x2ee/0x310 [ 558.072823][T23414] check_noncircular+0x134/0x160 [ 558.072838][T23414] validate_chain+0xb9b/0x2140 [ 558.072853][T23414] ? rt6_disable_ip+0x6b3/0x720 [ 558.072874][T23414] ? __lock_acquire+0xab9/0xd20 [ 558.072892][T23414] __lock_acquire+0xab9/0xd20 [ 558.072911][T23414] ? nr_rt_device_down+0xa9/0x720 [ 558.072923][T23414] lock_acquire+0x120/0x360 [ 558.072939][T23414] ? nr_rt_device_down+0xa9/0x720 [ 558.072955][T23414] ? nr_rt_device_down+0xa9/0x720 [ 558.072967][T23414] _raw_spin_lock_bh+0x36/0x50 [ 558.072984][T23414] ? nr_rt_device_down+0xa9/0x720 [ 558.072996][T23414] nr_rt_device_down+0xa9/0x720 [ 558.073009][T23414] ? do_raw_spin_unlock+0x122/0x240 [ 558.073026][T23414] nr_device_event+0x137/0x150 [ 558.073044][T23414] notifier_call_chain+0x1b3/0x3e0 [ 558.073066][T23414] __dev_notify_flags+0x18d/0x2e0 [ 558.073083][T23414] ? __pfx___dev_notify_flags+0x10/0x10 [ 558.073098][T23414] ? __dev_change_flags+0x4cc/0x6d0 [ 558.073115][T23414] ? __pfx___dev_change_flags+0x10/0x10 [ 558.073129][T23414] ? dev_ioctl+0x7a4/0x1150 [ 558.073142][T23414] ? full_name_hash+0x92/0xe0 [ 558.073160][T23414] netif_change_flags+0xe8/0x1a0 [ 558.073178][T23414] dev_change_flags+0x130/0x260 [ 558.073200][T23414] dev_ioctl+0x7b4/0x1150 [ 558.073214][T23414] sock_do_ioctl+0x22c/0x300 [ 558.073233][T23414] ? __pfx_sock_do_ioctl+0x10/0x10 [ 558.073251][T23414] ? __lock_acquire+0xab9/0xd20 [ 558.073272][T23414] sock_ioctl+0x576/0x790 [ 558.073291][T23414] ? __pfx_sock_ioctl+0x10/0x10 [ 558.073309][T23414] ? __fget_files+0x2a/0x420 [ 558.073323][T23414] ? __fget_files+0x3a0/0x420 [ 558.073337][T23414] ? __fget_files+0x2a/0x420 [ 558.073352][T23414] ? bpf_lsm_file_ioctl+0x9/0x20 [ 558.073370][T23414] ? __pfx_sock_ioctl+0x10/0x10 [ 558.073388][T23414] __se_sys_ioctl+0xfc/0x170 [ 558.073407][T23414] do_syscall_64+0xfa/0x3b0 [ 558.073419][T23414] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.073438][T23414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.073452][T23414] ? clear_bhb_loop+0x60/0xb0 [ 558.073467][T23414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.073480][T23414] RIP: 0033:0x7f766d98e929 [ 558.073494][T23414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.073506][T23414] RSP: 002b:00007f766e79c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.073521][T23414] RAX: ffffffffffffffda RBX: 00007f766dbb5fa0 RCX: 00007f766d98e929 [ 558.073531][T23414] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 558.073540][T23414] RBP: 00007f766da10b39 R08: 0000000000000000 R09: 0000000000000000 [ 558.073549][T23414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.073558][T23414] R13: 0000000000000000 R14: 00007f766dbb5fa0 R15: 00007ffd44a88498 [ 558.073573][T23414] [ 558.114712][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 559.002256][ T2988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.109044][ T2988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.154654][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 559.198980][ T2988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.238610][ T2988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.513864][ T2988] bond0 (unregistering): Released all slaves [ 559.562251][ T2988] : left promiscuous mode [ 559.605900][ T2988] tipc: Disabling bearer [ 559.611767][ T2988] tipc: Left network mode [ 559.763909][ T2988] hsr_slave_0: left promiscuous mode [ 559.772015][ T2988] hsr_slave_1: left promiscuous mode [ 559.780667][ T2988] veth1_macvtap: left promiscuous mode [ 559.801866][ T2988] veth0_macvtap: left promiscuous mode [ 559.808419][ T2988] veth1_vlan: left promiscuous mode [ 559.813725][ T2988] veth0_vlan: left promiscuous mode [ 560.194626][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 560.490714][ T2988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.550570][ T2988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.598633][ T2988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.650319][ T2988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.930153][ T2988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.987870][ T2988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.038270][ T2988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.089795][ T2988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.151441][ T2988] bridge_slave_1: left allmulticast mode [ 561.157169][ T2988] bridge_slave_1: left promiscuous mode [ 561.162872][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.173225][ T2988] bridge_slave_0: left allmulticast mode [ 561.178992][ T2988] bridge_slave_0: left promiscuous mode [ 561.185024][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.193447][ T2988] bridge_slave_1: left allmulticast mode [ 561.199197][ T2988] bridge_slave_1: left promiscuous mode [ 561.205692][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.213469][ T2988] bridge_slave_0: left allmulticast mode [ 561.219180][ T2988] bridge_slave_0: left promiscuous mode [ 561.224884][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.233180][ T2988] bridge_slave_1: left allmulticast mode [ 561.239036][ T2988] bridge_slave_1: left promiscuous mode [ 561.244650][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 561.252193][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.260260][ T2988] bridge_slave_0: left allmulticast mode [ 561.266091][ T2988] bridge_slave_0: left promiscuous mode [ 561.271701][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.379888][ T2988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.392560][ T2988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.401856][ T2988] bond0 (unregistering): Released all slaves [ 561.477858][ T2988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.488359][ T2988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.497782][ T2988] bond0 (unregistering): Released all slaves [ 561.567429][ T2988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.579246][ T2988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.589148][ T2988] bond0 (unregistering): Released all slaves [ 561.687082][ T2988] IPVS: stopping master sync thread 22686 ... [ 561.955380][ T2988] hsr_slave_0: left promiscuous mode [ 561.961065][ T2988] hsr_slave_1: left promiscuous mode [ 561.972230][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.984107][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.992291][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.999960][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.009790][ T2988] hsr_slave_0: left promiscuous mode [ 562.015451][ T2988] hsr_slave_1: left promiscuous mode [ 562.020989][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.028995][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.038518][ T2988] hsr_slave_0: left promiscuous mode [ 562.044165][ T2988] hsr_slave_1: left promiscuous mode [ 562.050803][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.058234][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.068049][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.075459][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.088869][ T2988] veth1_macvtap: left promiscuous mode [ 562.094343][ T2988] veth0_macvtap: left promiscuous mode [ 562.100010][ T2988] veth1_vlan: left promiscuous mode [ 562.105538][ T2988] veth0_vlan: left promiscuous mode [ 562.111153][ T2988] veth1_macvtap: left promiscuous mode [ 562.116655][ T2988] veth0_macvtap: left promiscuous mode [ 562.122149][ T2988] veth1_vlan: left promiscuous mode [ 562.127397][ T2988] veth0_vlan: left promiscuous mode [ 562.287021][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 562.300980][ T2988] team0 (unregistering): Port device team_slave_1 removed [ 562.311756][ T2988] team0 (unregistering): Port device team_slave_0 removed [ 562.474077][ T2988] team0 (unregistering): Port device team_slave_1 removed [ 562.492744][ T2988] team0 (unregistering): Port device team_slave_0 removed [ 562.652393][ T2988] team0 (unregistering): Port device team_slave_1 removed [ 562.680645][ T2988] team0 (unregistering): Port device team_slave_0 removed [ 563.314621][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 564.354614][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 565.394619][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 566.444620][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 567.474625][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available