last executing test programs: 2.253145832s ago: executing program 3 (id=5599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, "d0ff000000000001000000000000803f0900000000000000d800000000800400", 0x0, 0x0, 0xfffffd, 0xfffffffd}, 0x3c) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x40880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x78, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @device_a, @broadcast, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x1, 0xff, 0xffff, 0x6}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd0}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffff, 0x20}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) 2.173709568s ago: executing program 1 (id=5600): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') ioctl$NS_GET_NSTYPE(r0, 0xb701, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x84}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x40880) 1.941255884s ago: executing program 1 (id=5603): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000008c0)) (async, rerun: 64) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000080)=""/54, 0x36, 0x40000122, &(0x7f00000001c0), 0x12) (async) r0 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000340)='^'}, 0x20) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.902152483s ago: executing program 0 (id=5604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}, @NFT_MSG_NEWSETELEM={0x1e9c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d80"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1e34, 0x3, 0x0, 0x1, [{0x1298, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xe4, 0xb, 0x0, 0x1, [{0x84, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x74, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'cluster\x00'}, @NFTA_MATCH_INFO={0x55, 0x3, "fdcddd3ae2794f93313140e81814552eca78bf2e0d8b92437ed936e15ab92cd72886238534c79412461baa776022fb4081b1ec44195e9a65ddab0f055400254a5547dbb6b5f9cf3cec89ed1271c2e88954"}, @NFTA_MATCH_NAME={0xa, 0x1, 'state\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x11b0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VALUE={0x76, 0x1, "538e77eb51286f94ead93bc60556835a147758cace2bd3acb19b0501f7f870d947999ec8dafa71bdb4dd6a4dc360bd3187ccd9fee65e5580bfcb96c1050a471191b4a97e68fd207994516662baf3859477db1c3f6348a09799204d6d3c16e8d3f535cefba1a7518454d6072dbf49862185d1"}, @NFTA_DATA_VALUE={0x1e, 0x1, "e2e7cd94f15aed35ceff5978738e1628cd464d4deb62bf67e136"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "3ee3bf28bae436dc766763b135fddf403bedc3e5b854eff1f7bcfbd4a7b65f24da362966ce5091618007e96101afc23328713375e10042a6790c3eb2469bb4f00ea2623853018c0d0735ee9ccbeb017a0b0a0632a9f35783e7c2195d3caf18591caca2fc5900bf9092e78fc2ab370490d5ce8706d6f49e29601430b0e6acfbfd5ffce2c7dba340f56ec63d6974cf5e859c1cdc83da9aefacbe4314001534634f01671af594cf8bcbba5ea17a3b45a3fbc533b8b2eb348603a8bbace49fd5933bbf764576ae5176777c430b7e"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x154, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xdc, 0x6, 0x1, 0x0, "31a5ef008b4d90692e099397994f934a93f5a8cc7efc47a2b93c08759c983893708e411ad29bc65a4e5cd7654b555d251610b1beeda974d950b0c295afbebe2ce9ae9acb029669ac13f27b753054a5b39d54e6d2543690bb36c359a52a4235b478a129bb3c2071986e09c778c365cce66687b5b5ef0ad02227a12dd0fa544b995bff1eb16200a13de1753edccaeb86a58bbfed454d16552d8f372bed58f8e84f142b100c836c014df0c2fdf73ed0bc40fc577c2bece8ce3daecb9553cae340dd603b62080a76d80571c9c174b14cacfd4e92cf1268c29403"}, @NFTA_SET_ELEM_DATA={0x5c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x49, 0x1, "9b775bf1ebbff863c9f7907e49b086337c7890c5dc88813ac834014f641303d5d740d4ddd00aea5a682b4bb54c6189f2183fdfecb04e9338c9d362ec8830fa25bfa71de246"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8d0a}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}]}, {0x2cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0x28c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe, 0x1, "ed95267dca6e32fe38fb"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x30, 0x1, "a4718acd5a2806932e02135b7d3b8ab4124bec79e6de27d6a83941ec17d3dd71c574ff0635bd32edb47fce24"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "f18dc5abbfc33f3edccaecd578b4137a95f260799e68140f676b4795b268f0856b73eec285d20113bd0bc6b77251e4095b8949fc6d50f1318efeb2da6a83514d50e0e455347cd76b443b77fb4a7299df539ae02a372e516e0098fc550a430fcf42e50487066a830d009f2efe6abd79963b63bf615133f4b819c88a4f162f1e26198af2cd0358c754641c"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "0c941b21eb36097a3b405a767855797f1c09abe686f5ee79d380cf2ea36e3e3294167b4442945279ad553974ef2cc1d3e31d8aca8246f153c6615b605bd0a6a745ab63dd1abc86f78d336078482ac78aa90bf4260d7849514cb85766fbace936089f2e361e8752c52564f52e9ffc28675a419eb85b994fe23658aeb1fb0899c0a23d905b0c2a4d4dcf"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x70c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2dc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "3487e5171d5cafe3d81fbc031d6eb4ec7cb27bd8350e023c8538abb893a2161468dce2d6697eb0d00a576ddcd01e1507bb2ac12559bcb1af78c007a6a5c7dd2725ed7c98e3eeec92d4066a352b59cd2c0a42dc1255e8a1fe434f99e4648cb3f0c4d7a4866e3872a808d8059013b91161a66123de0f8b1ce7c6ae755f2160377114b0880078ca971afcaa7a3f78e1ce76ab4ab7e4283e97b76ff4d0bfad"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "51fc690a380ff6d2caed4c52147d2ae408cf80409827381ad3c522617a9d5f07ad0d32fd07de5fe2fcfa6b8bb69e6cdc7364af04f3d464f753b4af64970c1c018c1ae720cbc06a2d0aa31fa75528e9157c99ee9c20f101b514b2f626cc8b66f8ecb8bfd833273501c610e88bfafc59fe9032b810de385e2bb45904165690fc7e7943750faaf3e50e12917fe8ec921e74d1d743b56da230219f13694f750b44555f7bec685fa24c06ecc70051ef6390396815a40a379dd26b8b"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xf7, 0x1, "8e0bb36cfee1d13c3318eb177ffa010ac14c43814ebcc760bbf960f941156e1629b359c17a80b38cc654ac93798c35be34b1642511dab8e1980cf1e415d12b3dfce634c220cf80e53e6904dbbef0a2ac30fd4635eb07124808249a4cbd24b126cd957a58725d94bb0a441353fe292566ed018eb2d6ee65d86d9895dcfa17588b993ede8c1bc6359731e1e4a85015bfc2117de8b77773ca420caef952798312e7781dbacb2521ff00fbfa57a740c2653dad878f7ce387647cc66e1785d4a81a0f1b0c0d936cc82f17887db501f892f6c972d8d6c0a02aadd0ec679aaa77bebaf4c7fdee8d9d0e06c0b678225f552809e8abfa54"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x310, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xbc}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x5d}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x4d}]}}}, {0x29c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x290, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x194, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "f633a7f99882c7ab87dbbea01314949496505e80c1c6b014518bc5df1ba5c7d901f6b76d95384a18d265a273a54593ac43ea23ba6432971b0e80e64399c9e17245447c1583c1d9727b4ae8157793454460b467f3c23a86"}, @NFTA_DATA_VALUE={0xb7, 0x1, "27d65d08cf5010e21df61f67c5881518b06e11d7cb55f52632dbd6f6baaa4e65ab0fb922b19f02da8f6e768aa1243487506614c3cb3a0a4a0dbdd968a996efe9b09ce171b6273b17e5d08a0c0f9900b553e0645e768e587bad57d388c1d4057f9fa5e83441400e23ef9f56ff2fc634c800ccf95f656dd5006e409bd7c9af78484a471e835ae4f585b17585035353b256c195230cb8abae525c35a22c254785fc9885dc5408f1f441e0d35e694b243462536218"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_CMP_DATA={0xe8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "a94ea139c75948b72493cb0a2abcbda5b490758a9c1e8b2f91287a0179c299c6f1453ee57005066e8545fc81d13349aa5198ba239717b6b74b725b28e8672e3c4d818158ad3ba0291764a229083dfdb08dae5dbfe63f562856f5034810672a8a62deed7052e428c15c5bf8b88402c6bece208ecaa091eeb0e86fdff8a8e43445411552750dc555ccd8436e0d81a711440f10831f3a3d11c47225644c13ebb7acf9e2224ac1ead2acdc849664ff3b399993f34fcb303859cf3a80b6a7dee2d562b3412d05c8241259d201b4f7ed79a6a23c09076958e12ce13d7c39cb65"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xef, 0x6, 0x1, 0x0, "53410474f9b7ce887d6122292a69d7481fad7d97172fda5ea014b2d173f1dde2f43bfd2069a1580959232cddcb8d144c91b3513fcab95d4339b0c724c9233eb01d0f990913443c2ba713e6afe33a15412be2cd6c27174f82f36e8fbc3d19c13d525b75e864cb87845f3b95c5a3ce111ff49be79649db3028cb56e4ce1546e66e5124928b19cad6277a8c65fbb40d85af1ca496b19b0e3f4953033edebed18bd1221459f747d1acd2c20a341aca5fde7b5a85edae1f9647a27d86f9eef246386255303f0a05e067748bc4bd98352609a5eb2f597900a5542b9ebb358ffa03889626b704919ee6cfb4d8220d"}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x23}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xeb12}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x1f30}}, 0x0) r1 = accept(r0, &(0x7f0000000040)=@sco={0x1f, @none}, &(0x7f0000000140)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@delsa={0x3c, 0x11, 0x421, 0x0, 0x0, {}, [@srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x50}}, 0x4041) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000095000000b936980254863a1e000000ffff000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) 1.696882569s ago: executing program 3 (id=5606): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x97, "4c0f84cca9b3017f9fa12131644bf12548e9bdd20f83f6fd0a2c1b397cdb038cccda880e9957c4cac1ef147b5e44c5e0f8804d88533375a2b10b9f48a809b3c51a712420f9c177b676e5b38ba07c02adb4fae7ac5acbea8982bfb2c8673a3d3d7c42a64ad999e505546b534b8daea093e81ef6674090fad9e96ba620b88cf0256ef45217ff7e4fd9e9ac14cacb01eb233c4879898674fc"}, &(0x7f0000000100)=0xbb) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x1a, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r3, 0x101, 0x1, 0x40}, 0x10) 1.66597179s ago: executing program 0 (id=5607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000c5000000030000004c0001800d0001007564703a73797a310000000038000400200001000a00000000100000ff05000000000000000000000000000100000000140002"], 0x60}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x17c, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x150, 0x9, 0x0, 0x1, [@m_ct={0xa8, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x65, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xa4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x7, 0x6, 0x6, 0x4}, @multicast2, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x3, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @rand_addr=0x64010102, @multicast1, 0xff000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2, 0x18, 0x1, 0x2, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x4040000) 1.663648743s ago: executing program 1 (id=5608): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000300000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.584239375s ago: executing program 3 (id=5609): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d2c651b101fa"}, 0x10) (async) unshare(0x22020600) (async) poll(&(0x7f0000000080)=[{r0, 0x4000}], 0x1, 0xff) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe, r1}, 0x38) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="000000000004338b35aa4b0ce643b48afe995656876fc277b8294ab3b6d4925734caf7318f690d851360178f3d9de95dcca2ba99ede9e76ac91cc4ad40a34d2a73d1e786c8a0c86b6c4ef39c0caaf07a9ad43a4c0fbabfc677e091a2d24cc8af545d089c8851598da8a944ee005f581b67add5e58ea0bcfebe6a5ac065b8447d7db0e390eb9e97a8faee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462'], 0xa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000000014070000000001000000000200e400000208000740000000000800034000000000000000"], 0x6c}}, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r7, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast]}, 0x10) (async) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) writev(r8, &(0x7f0000000940)=[{&(0x7f0000000240)='g*', 0x2}], 0x1) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) (rerun: 32) 1.446559569s ago: executing program 4 (id=5611): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r3, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x112}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x48, r6, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x4, 0x9}, @value=@ver_80211n={0x0, 0xd6, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @val, @void, @void, @void, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x48}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x3c008010) 1.432541408s ago: executing program 1 (id=5612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x400}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0xfd}, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x13, 0x18, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0) 1.385614662s ago: executing program 0 (id=5613): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRESHEX, @ANYRES8=r4], 0x1c}}, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.385191929s ago: executing program 3 (id=5614): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xcc, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0xfffa, 0x9}, {0x0, 0xffe0}, {0x4, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0xac6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000020000003a00000008000300", @ANYRES32=r6, @ANYBLOB="060065000900000004005b00"], 0x28}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x811) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc841}, 0x4080) (rerun: 32) 1.225712608s ago: executing program 2 (id=5616): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000001700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="c79094b15e35", @local}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x40140) connect$netlink(r0, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d010000000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc303000010010000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8cc658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ad539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c97888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5a444a41bac326ddea7d7b9c90d44f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2a4d39b43878b6ef26ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee92ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93b71db0a2366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000000000009a8329eb97567787ff28dd96c8e0f9e3c84394afc8f83dc6c6c813fafed61cdd6117092562837a3fa3fc388ab57429a9ecc4fddb0f0a7e4a1415d82d8bac999696d9130e36fc86df796a72559c523fae90d0b742d09cd2edf652c67aa62742e9ce0ff5283f627b622a83576f57d0899e0da8483f9dc296"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) (async) syz_emit_ethernet(0x2a, &(0x7f0000001700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="c79094b15e35", @local}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x40140) (async) connect$netlink(r0, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc) (async) 981.580798ms ago: executing program 2 (id=5617): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) 980.619948ms ago: executing program 1 (id=5618): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0x2f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x20000000000000a7, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000fc09c6071e21f0d55d3ef3304069b4260937b35e5caef779d7af6267cff694c15be67f04d524d9e70b343422c882b114e8ecced98a861805abb5549ddf434acd8073083c7e1df764de6c28baae3d2d507e9da99cb9a50d504c389843be3a56700dd0234d4aa385fd598de3a8128f9da6c398c0052e6ed6", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r2, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x2}, 0x8}], 0x3, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x0, 0x7f, 0x0, 0x1, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x0, 0x8000, 0x2, 0x4}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f00"], 0x24}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f0000001600), 0x4) socket$kcm(0x29, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, &(0x7f0000000200)="7f", 0x0}, 0x50) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e00010000000000000000000401ff800c0000000800000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 967.000913ms ago: executing program 3 (id=5619): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0xe8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0xe, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xb8, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0xffffffff}, @TCA_FLOW_EMATCHES={0x84, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x100}, {0xffffffff, 0xffffff81, 0x7, 0x1, 0x4}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x2}, {0x80, 0x8, 0x6, 0x4, 0x8}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x8}, {0x3, 0xa, 0x2, "2096646d2f22d6342660"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x3}, {0x2, 0x5, 0x4}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x7fff}, {{0x3, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7f}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 920.770466ms ago: executing program 0 (id=5620): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x7, 0x4e23, 0xfff8, 0x2, 0x0, 0x100, 0x0, 0x0, r3}, {0x9, 0x5b, 0x2, 0x6, 0xf0f, 0x3, 0x8, 0x997}, {0x5, 0xffff, 0x3, 0x5}, 0x7a68e1a6, 0x6e6bb8, 0x1, 0x0, 0x3, 0x3}, {{@in=@multicast2, 0x4d5, 0x33}, 0x2, @in=@empty, 0x3504, 0x4, 0x2, 0x81, 0x0, 0xdc1, 0xea}}, 0xe8) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {0x0}], 0x2, 0x0, 0x0, 0x1f000801}, 0x0) 857.518949ms ago: executing program 4 (id=5621): ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x3}) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e21, 0x8, @empty, 0x7}}, 0x8, 0x7, 0xd, 0x1, 0x40, 0x401, 0x90}, 0x9c) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={r1, 0x0, 0x1, 0x400, 0x10, 0xffff, 0x4, 0x3, {r1, @in={{0x2, 0x4e23, @remote}}, 0x5, 0xd, 0xe, 0x7, 0xcdb1}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e23, @multicast1}}, 0xfffffff9, 0x4, 0x3ff, 0x53, 0x80, 0x6, 0x6}, &(0x7f0000000380)=0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0)={r3, 0xaa, "d8e531602fb6b6061661307fafc988328226c5deb2ae5098b3e45c0b5a3929a9d5eac8075ebe250714e608ad323718406f6e2cbca28defbb0716676fc6ebae767216fe692453efb8c0c90b7122add7f47b9a7bf5fc1d4a9999d3742acf380a82a4f8ba6541569310354f7246a3d59d5db47babef4bafbec3c5535527383834eefa045d05a930ebfa418564bd35329b2b1dd7e41543c75e92b377882bcc81f684b6954b7079446e85cb8c"}, &(0x7f0000000480)=0xb2) (async) r5 = socket(0x1d, 0x5, 0x0) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r6, 0x500, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x10}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000640)=0x4, 0x4) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000680)=@assoc_value={r4, 0x730d}, 0x8) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000006c0)={0x6, 0xb}) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000700)={'hsr0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000740)={r5, 0x3b3, 0x40, 0xd}) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4400c044}, 0x40005) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000008c0)={r3, 0x2, 0xfff8}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000900)={r3, 0x8, 0x1000, "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"}, 0x1008) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000001940)={r1, @in={{0x2, 0x4e22, @multicast2}}, 0xfffffb14, 0x7fffffff, 0x6, 0xb2, 0x9}, &(0x7f0000001a00)=0x98) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001ac0)={@broadcast, @remote, 0x0}, &(0x7f0000001b00)=0xc) sendmsg$nl_route(r5, &(0x7f0000001c00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)=@RTM_DELMDB={0x78, 0x55, 0x427, 0x70bd25, 0x25dfdbff, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @local}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x2, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x4, {@ip4=@remote}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40085}, 0x48041) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0x5, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000001c40)=@gcm_128={{0x303}, "4f995b53969cd21b", "5e00c6d851f694e733a134d4d628e508", "bc686c90", "57bd21fe4b2cdc7a"}, 0x28) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000001c80)={r4, 0x4}, &(0x7f0000001cc0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001d00)={r11, 0x81, 0x4}, &(0x7f0000001d40)=0x8) accept4$inet6(r0, &(0x7f0000001d80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000001dc0)=0x1c, 0x80000) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r12, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)={0xb8, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x852b}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 755.755173ms ago: executing program 3 (id=5622): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6}}]}, 0x2c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0x2711}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r2, 0x0) r3 = accept4$unix(r0, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x102, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, &(0x7f00000000c0)={0x24, @short={0x2, 0x3}}, 0x14) setsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f0000000180)=0x1, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 719.838901ms ago: executing program 2 (id=5623): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x850) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000640)={@remote, @loopback, @private2={0xfc, 0x2, '\x00', 0x6}, 0x40000, 0x40, 0x2, 0x100, 0x0, 0x40180043, r5}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001140)=""/4058, 0xfda}, {&(0x7f0000002940)=""/4093, 0xffd}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000580)=""/99, 0x63}], 0x5}, 0x10100) 657.528136ms ago: executing program 1 (id=5624): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000410007010000000007000000017c00000400fc809400018006000600800a00008500908008"], 0xac}}, 0x4010) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000100)="ff256585e07627af8151c2fdca055209", 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='+$\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 587.943327ms ago: executing program 4 (id=5625): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0xc, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) sendmsg$qrtr(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="7e185e16f6362ba811a8580816ba0644a8f95bbb1034a5730687ad1818c06724de1d253f6f360dd4ca21506a150ced8b5c2e978a6c42bd6cbaf2b404a3f6b60a8b281aa7b0aaabee0446b7ba8cb779d5d2396da064da36346f426d05ef321ede4c04e740", 0x64}, {&(0x7f00000001c0)="45113e74abf0cce996c99a5ecf85caee2172011789", 0x15}, {&(0x7f0000000200)="fa4329682ac380039d71020fb537f06f26caefaf2646fcbb4938af24d7a94540c95139e7e56023c81935feae75c7a1e6cd09f3bb769133478a0fa311dc549c8436a0490f86ee4789fb01f9641655ab6db551310885594a36b4f9888900a391ca94f0e2f2514f96bb6ee2b3a51c7a82bc0c0eff26f794508d9f910714a1560086a2e102e1544af2e7fa72f30047ef9b988a67f8f2c24770c0fc221a0c29b32c38b3f8906faed18009dc496555705661a34310ba8c5b3fc625ecbdd077f954666b7ee94884a73bcdd93b465cff387d0b52e71e20ce69010c47d18483bbea8a3b0d8ae30645801a", 0xe6}, {&(0x7f0000000300)="18dabef830deb7ca695f1814252781e3a0919f83cd053ccc27195734ceceac0e77f09f1809adf638db3125364d707cd05cf41d6c8f325f1c728096f953967a7cc3235bf0d0a23fad84a0617298c3f61054c8a352fe4dece3b1f81a559de9822c3e51dd34dfda47718479e30c7f712270d2e9b7a94d60b7eb16f88f9c8190d9572c0b5c7b88f9ec3ee167b316f5ac514df47322eccf3ec534ebdd5e2e2f08b16318e3f8ac102252249de05730c33cc19996a60e3c261e03396db8095569f6914d63", 0xc1}, {&(0x7f0000000400)="39a55cce71793c5906b5ab41921c5038cefeb6e440dc8a08b6605d14ba709ab1a0fd6b6c66d3947fad6ce14b1c0947a6aa056fd1ff7c36c49f2db4597adc8cd1a59080b5833ec156b5c0be9848c6f3d6b9970396e78f9e884a33fc4c05f1fcb490bb9098fabfa4c4778b3b67", 0x6c}, {&(0x7f0000000480)="430ebfb88261f5d8d5e1f95f811614aeaa2408083155e020fbd489cbeabf31294b23ee818cb16be0be1bae09074fc873931ee7e3b57e10c8a0208c0bf42d55da7b57c5d48a9aeda3a68c830e9372e29fee9abd8682dbc51ed6983dda110750e206c1c8c33d78c84d1439bec6864ca2e9e98eb50bce27a753f0617693c00729bf4d489458f26dac6745774d37c293fbbc63e894d4556b753e639fa0ab8ad5edbc53fd033a4cb063ca8cefc2238ef53838cbba8a0ac4e466d31e594300ef1bcf12f1b227a04d6e4828df729567533f1c5136424290d7caf23f7d35602ad67386063ffede447845f2ed93d7be9c07fe9e3649385ddb", 0xf4}, {&(0x7f0000000580)="ebde4e6f1fb91c7deb501bfb3979e17e67df9151c781c30164724e61a7d6a22f5fdae128cae304d1fe38e63192eb379b603b46664ae4c47d295929dab8ebebca7f05e59d91aa99ee4b41985bb30bcfd544976fcd9a83e4cc6de4284dfeb0bcc023f11709546b87904f2e21f9d9f90271bf726d12", 0x74}, {&(0x7f0000000600)="6341b3a9007647ddd93be6d82fce1a4feff4e7367a99bcc642fdf0dae4a3d212e45d9f278f06dd6c51b9e7b69abd0aac4aa509c39f", 0x35}], 0x8, 0x0, 0x0, 0x40090}, 0x38) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000700)=0x9c3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000740)='0', 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000800)=0x1) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2010a0}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0xd, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x8005) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r3) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x1, 0x4, 0x6, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x48002) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x2, 0x6ba, 0xc191, 0x9}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000848) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x130, r5, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @remote, 0xf2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @remote, 0x4b6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8000, @private0, 0x790c}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000dc0), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000e00)={{{@in6=@mcast1, @in6}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000f00)=0xe8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000f40)={'macvlan1\x00', @local}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x38, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x37, 0x69}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000004}, 0x4004) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0xc000) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, r6, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x0, {0x4, 0x400, 0x7fff}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x1) accept$ax25(r0, &(0x7f0000001340)={{0x3, @rose}, [@null, @remote, @default, @rose, @default, @rose, @rose, @default]}, &(0x7f00000013c0)=0x48) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r0}, 0x8) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001480), r3) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x64, r10, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 531.500342ms ago: executing program 0 (id=5626): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)=""/119, 0x77, 0x10000, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'vcan0\x00'}}, 0x1e) close(r5) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000140)=0x60) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 349.077128ms ago: executing program 0 (id=5627): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5f, 0x3}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r6, 0x110, 0x3) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x26, &(0x7f0000000440)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x80, 0x8e, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000020000000200"/50], 0x0, 0x32}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 348.542489ms ago: executing program 4 (id=5628): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_DELSETELEM={0x18, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x1, '\x00', {}, 0x82}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 322.25912ms ago: executing program 2 (id=5629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000200012800e000100697036677265746170"], 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x44}}, 0x48040) 193.442379ms ago: executing program 2 (id=5630): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (rerun: 32) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x4, 0x3, 0x1}}, 0x26) (async) r2 = accept(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605ad0000000000000000000000f400000500010006000000050085000200000005000400000000000900020073797a31000000000c000300686173683a697000"], 0x50}}, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008044}], 0x1, 0x40081) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 48.435759ms ago: executing program 4 (id=5631): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018010000202070250000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=@newlink={0x34, 0x10, 0x439, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r2, 0x0, 0x110d1}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffc, 0x2}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880) 47.211459ms ago: executing program 2 (id=5632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x8000000000000000}]}}]}, 0xa0}}, 0x0) (async) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0), 0xa) 0s ago: executing program 4 (id=5633): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)="b77375e5dc1d74becd2fcc787b022dde75b63baa3a1b0623fb995e7f920ae8cf8a62f0f5225b223c6909a502bd4ec883fc49a915457b75ce789aa2cc9005fcebea2ef8b9fb2f79a284ca83e4ea6bd9f60e3d3572bcad4cced362aafec924f8a4d7d6cbb6dd8f0aa3c1ff1b980b4959d85a2924c48690d6b7f7cb1ebf03a2504dfe421bdf2d34e49d508865146527b64c77b123973248a81b658a2a4009fefee24bdc659901db56a08c264f0975db868e63", 0xb1}, {&(0x7f0000000380)="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", 0xf50}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000100)={0x1, 0xf}, 0xf7fb9da646ece1e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040001001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRESHEX=r3, @ANYBLOB="0500003f83e131f316b257ad", @ANYRES32=r3, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r3, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(r1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'wg1\x00', {'ipvlan1\x00'}, 0x200}) close(r0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x800) ioctl$SIOCNRDECOBS(r4, 0x89e2) kernel console output (not intermixed with test programs): ibutes in process `syz.1.3659'. [ 495.503160][T18918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.586688][T18923] IPVS: length: 8 != 1152 [ 495.619666][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3664'. [ 495.650146][T18930] wg1: entered promiscuous mode [ 495.699043][T18923] netlink: 'syz.0.3663': attribute type 1 has an invalid length. [ 495.708898][T18923] netlink: 'syz.0.3663': attribute type 1 has an invalid length. [ 495.821568][T18937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3666'. [ 496.070808][T18942] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3670'. [ 496.210246][T18947] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.220397][T18947] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.926305][T18984] netlink: 'syz.0.3683': attribute type 1 has an invalid length. [ 496.944215][T18984] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3683'. [ 496.946595][T18983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3682'. [ 497.092099][T18988] vlan0: entered allmulticast mode [ 497.128717][T18988] bridge0: entered allmulticast mode [ 497.137414][T18988] bridge3: port 1(vlan0) entered blocking state [ 497.155738][T18988] bridge3: port 1(vlan0) entered disabled state [ 497.174024][T18988] vlan0: entered promiscuous mode [ 497.181103][T18988] bridge0: entered promiscuous mode [ 497.322544][T19002] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 497.529127][T19017] nbd: must specify at least one socket [ 497.596431][T19023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.820415][T19021] pim6reg527: entered allmulticast mode [ 497.835658][T19032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.018713][T19045] Bluetooth: MGMT ver 1.23 [ 498.113156][T19054] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 498.141416][ T3517] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.158578][ T3517] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.194254][ T3517] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.205734][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.234204][T19057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.360394][T19064] unknown channel width for channel at 909000KHz? [ 498.403977][T19064] unknown channel width for channel at 909000KHz? [ 498.432217][T19064] unknown channel width for channel at 909000KHz? [ 498.804137][T19091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.119451][T19101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.147221][T19101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.171476][T19101] bond0 (unregistering): Released all slaves [ 499.400864][T19119] __nla_validate_parse: 6 callbacks suppressed [ 499.400886][T19119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3727'. [ 499.429353][T19119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3727'. [ 499.441471][T19119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3727'. [ 499.460320][T19119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3727'. [ 499.478271][T19117] netlink: 'syz.3.3726': attribute type 4 has an invalid length. [ 499.508837][T19126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3729'. [ 499.519186][T19127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3730'. [ 499.544256][T19128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3729'. [ 499.972492][T19149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3733'. [ 499.982764][T19153] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3738'. [ 500.013999][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3739'. [ 500.204264][T19166] netlink: 'syz.2.3742': attribute type 1 has an invalid length. [ 500.454718][T19181] Bluetooth: MGMT ver 1.23 [ 500.481485][T19176] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 500.503877][T19176] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 500.691419][T19193] tipc: Started in network mode [ 500.712109][T19193] tipc: Node identity ac14140f, cluster identity 4711 [ 500.727638][T19193] tipc: New replicast peer: 255.255.255.255 [ 500.739757][T19193] tipc: Enabled bearer , priority 10 [ 500.750992][T19191] syz_tun: entered allmulticast mode [ 500.828438][T19203] netlink: 'syz.0.3752': attribute type 1 has an invalid length. [ 500.832215][T19197] syz_tun: left allmulticast mode [ 500.855846][T19203] netlink: 'syz.0.3752': attribute type 1 has an invalid length. [ 501.080865][ T3517] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 501.099614][T19214] netlink: 'syz.3.3756': attribute type 10 has an invalid length. [ 501.115247][ T3517] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 501.124837][ T3517] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 501.163459][T19214] batman_adv: batadv0: Adding interface: team0 [ 501.177512][T19214] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.203318][T19214] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 501.226190][T19220] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.300814][T19220] bridge_slave_1 (unregistering): left allmulticast mode [ 501.308548][T19220] bridge_slave_1 (unregistering): left promiscuous mode [ 501.315759][T19220] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.378424][ T3517] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 501.748428][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.855571][ T929] tipc: Node number set to 2886997007 [ 501.902641][T19256] netlink: 'syz.1.3770': attribute type 29 has an invalid length. [ 501.923604][T19256] netlink: 'syz.1.3770': attribute type 29 has an invalid length. [ 502.209371][T19266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 502.252157][T19266] team0: Port device bond4 added [ 502.852357][T19310] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 502.869444][T19310] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 502.871604][T19318] netlink: 'syz.0.3784': attribute type 62 has an invalid length. [ 503.944543][T19368] netlink: 'syz.2.3799': attribute type 18 has an invalid length. [ 503.993305][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.010401][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.060136][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.129318][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.564554][T19401] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 504.662189][T19407] netlink: 'syz.4.3808': attribute type 1 has an invalid length. [ 504.718327][T19407] __nla_validate_parse: 19 callbacks suppressed [ 504.718352][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3808'. [ 505.165442][T19434] netlink: 'syz.4.3816': attribute type 12 has an invalid length. [ 505.220112][T19438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3817'. [ 505.345440][T19441] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3818'. [ 505.495419][T19448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3820'. [ 505.504689][T19451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3820'. [ 505.517736][T19448] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3820'. [ 505.600867][T19451] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3820'. [ 505.617034][T19457] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.3823'. [ 505.631201][T19467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3825'. [ 505.674720][T19456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3821'. [ 505.709189][T19456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.594789][T19516] chnl_net:caif_netlink_parms(): no params data found [ 506.700267][T19524] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.707537][T19524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.811468][T19527] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 507.859636][T19547] lo speed is unknown, defaulting to 1000 [ 508.102923][T19574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.130720][T19574] netlink: 'syz.2.3857': attribute type 3 has an invalid length. [ 508.302756][T19579] netlink: 'syz.1.3859': attribute type 4 has an invalid length. [ 508.440697][T19587] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 508.760351][T19595] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 508.785469][T19595] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 509.470495][T19637] netlink: 'syz.1.3876': attribute type 1 has an invalid length. [ 509.806186][T19650] __nla_validate_parse: 10 callbacks suppressed [ 509.806209][T19650] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3880'. [ 509.928693][T19658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3882'. [ 509.952935][T19650] tipc: Enabled bearer , priority 0 [ 509.963997][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3882'. [ 509.967801][T19650] syzkaller0: entered promiscuous mode [ 509.979226][T19650] syzkaller0: entered allmulticast mode [ 509.999736][T19662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3882'. [ 510.020071][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3882'. [ 510.025277][T19650] tipc: Resetting bearer [ 510.040570][T19660] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 510.063360][T19649] tipc: Resetting bearer [ 510.163166][T19649] tipc: Disabling bearer [ 510.202930][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3884'. [ 510.215906][T19668] netlink: 'syz.4.3885': attribute type 33 has an invalid length. [ 510.223926][T19668] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3885'. [ 510.263899][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3884'. [ 510.344332][T19669] block nbd6: server does not support multiple connections per device. [ 510.364400][T19669] block nbd6: shutting down sockets [ 510.424951][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3887'. [ 510.500198][T19679] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3888'. [ 510.692566][T19689] netlink: 'syz.4.3892': attribute type 24 has an invalid length. [ 510.776060][T19697] netlink: zone id is out of range [ 510.781251][T19697] netlink: zone id is out of range [ 510.820156][T19697] netlink: zone id is out of range [ 510.841750][T19697] netlink: get zone limit has 8 unknown bytes [ 512.992713][T19784] IPv6: NLM_F_CREATE should be specified when creating new route [ 513.078200][T19786] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.262348][T19800] netlink: 'syz.0.3921': attribute type 3 has an invalid length. [ 513.397156][T19811] netlink: 'syz.0.3925': attribute type 21 has an invalid length. [ 513.405635][T19811] IPv6: NLM_F_CREATE should be specified when creating new route [ 513.557474][T19814] syz_tun: entered allmulticast mode [ 513.592370][T19818] geneve3: entered promiscuous mode [ 513.598404][T19818] geneve3: entered allmulticast mode [ 513.608035][ T3163] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 513.664784][T19814] syz_tun (unregistering): left allmulticast mode [ 513.702369][ T3163] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 513.711988][ T3163] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 513.740713][ T3163] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 513.770134][T19818] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.787805][T19818] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.829165][T19818] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 513.907151][T19818] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.950841][T19818] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.964297][T19818] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 514.047867][T19818] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.058664][T19818] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.084983][T19818] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 514.239928][T19818] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.283913][T19818] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.314916][T19818] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 514.712226][T19868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 514.777644][T11770] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.791083][T11770] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 514.801992][T11770] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 514.840622][T11770] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.849249][T11770] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 514.858187][T11770] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 514.869085][T19881] netlink: 'syz.1.3943': attribute type 21 has an invalid length. [ 514.889442][T19880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.899363][T19881] __nla_validate_parse: 10 callbacks suppressed [ 514.899385][T19881] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3943'. [ 514.934903][T19877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.957091][ T61] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.966201][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 514.980010][ T61] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 515.007197][ T61] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.019837][ T61] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 515.042195][ T61] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 515.262984][T19900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3948'. [ 515.310942][T19900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3948'. [ 515.409973][T19908] sctp: [Deprecated]: syz.1.3951 (pid 19908) Use of int in maxseg socket option. [ 515.409973][T19908] Use struct sctp_assoc_value instead [ 515.761874][T19925] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 515.785108][T19925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3956'. [ 515.834060][T19925] veth0_to_team: entered promiscuous mode [ 515.839878][T19925] veth0_to_team: entered allmulticast mode [ 515.912290][T19931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3958'. [ 516.074357][T19938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3961'. [ 516.202030][T19938] bond2: entered promiscuous mode [ 516.222707][T19938] bond2: entered allmulticast mode [ 516.244909][T19938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 516.412778][T19938] bond2 (unregistering): Released all slaves [ 516.451261][T19947] vlan2: entered promiscuous mode [ 516.457031][T19947] vlan2: entered allmulticast mode [ 516.462262][T19947] hsr_slave_1: entered allmulticast mode [ 516.740648][T19965] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3968'. [ 516.775736][T19965] netlink: 'syz.2.3968': attribute type 1 has an invalid length. [ 516.783521][T19965] netlink: 'syz.2.3968': attribute type 10 has an invalid length. [ 516.797036][T19965] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3968'. [ 516.929377][T19973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3972'. [ 517.103955][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 517.244741][T19989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3976'. [ 517.705208][T20010] netlink: 'syz.3.3984': attribute type 3 has an invalid length. [ 517.764640][T20012] ip6erspan0: entered promiscuous mode [ 517.767051][T20014] netlink: 'syz.0.3986': attribute type 11 has an invalid length. [ 517.822684][T20014] netlink: 'syz.0.3986': attribute type 11 has an invalid length. [ 518.321858][T20041] sch_fq: defrate 0 ignored. [ 519.250668][T20077] lo: entered allmulticast mode [ 520.197270][T20111] tipc: New replicast peer: 255.255.255.255 [ 520.214224][T20111] tipc: Enabled bearer , priority 10 [ 520.486457][T20127] bridge_slave_0: left allmulticast mode [ 520.498296][T20127] bridge_slave_0: left promiscuous mode [ 520.507997][T20127] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.527391][T20127] bridge_slave_1: left allmulticast mode [ 520.538808][T20127] bridge_slave_1: left promiscuous mode [ 520.550065][T20127] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.581391][T20127] bond0: (slave bond_slave_0): Releasing backup interface [ 520.612098][T20135] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 520.632950][T20127] bond0: (slave bond_slave_1): Releasing backup interface [ 520.671977][T20127] team0: Port device team_slave_0 removed [ 520.708080][T20127] team0: Port device team_slave_1 removed [ 520.722807][T20127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.731009][T20127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.746862][T20127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.755432][T20127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.775885][T20127] bond0: (slave wlan1): Releasing backup interface [ 520.977799][T20148] __nla_validate_parse: 16 callbacks suppressed [ 520.977872][T20148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4024'. [ 521.000691][T20147] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4025'. [ 521.011024][T20147] NCSI netlink: No device for ifindex 0 [ 521.183230][T20154] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4030'. [ 521.209894][T20157] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4027'. [ 521.220803][T20154] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 521.425383][T20170] netlink: 'syz.3.4031': attribute type 10 has an invalid length. [ 521.448546][T20170] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.477008][T20170] bridge_slave_1: left allmulticast mode [ 521.482765][T20170] bridge_slave_1: left promiscuous mode [ 521.499042][T20179] sock: sock_timestamping_bind_phc: sock not bind to device [ 521.525945][T20170] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.542841][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4032'. [ 521.599806][T20170] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 521.645716][T20185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'. [ 522.084687][T20202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4039'. [ 522.340015][T20160] lec:lec_atm_close: lec0: Shut down! [ 522.411049][T20213] lo: entered promiscuous mode [ 522.421417][T20213] tunl0: entered promiscuous mode [ 522.445281][T20213] gre0: entered promiscuous mode [ 522.458203][T20219] sctp: [Deprecated]: syz.1.4044 (pid 20219) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.458203][T20219] Use struct sctp_sack_info instead [ 522.491082][T20213] gretap0: entered promiscuous mode [ 522.521860][T20213] erspan0: entered promiscuous mode [ 522.534022][T20213] ip_vti0: entered promiscuous mode [ 522.932618][T20233] tipc: Enabling of bearer rejected, failed to enable media [ 523.164487][T20243] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4049'. [ 523.171619][T20244] gre2: entered promiscuous mode [ 523.192489][T20244] gre2: entered allmulticast mode [ 523.196243][T20243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4049'. [ 523.270104][T20245] netlink: 'syz.4.4051': attribute type 1 has an invalid length. [ 523.284871][T20244] syzkaller1: entered promiscuous mode [ 523.290570][T20244] syzkaller1: entered allmulticast mode [ 523.298180][T20245] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4051'. [ 523.310748][T20245] netlink: 'syz.4.4051': attribute type 1 has an invalid length. [ 523.328052][T20245] netlink: 'syz.4.4051': attribute type 2 has an invalid length. [ 523.411904][T20263] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 523.726742][T20273] netlink: 'syz.1.4057': attribute type 1 has an invalid length. [ 523.814943][T20278] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 523.940663][T20287] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 524.059567][T20294] netlink: 'syz.0.4066': attribute type 1 has an invalid length. [ 524.221292][T20304] netlink: 'syz.0.4069': attribute type 1 has an invalid length. [ 524.265766][T20302] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 524.365154][T20306] sctp: [Deprecated]: syz.1.4070 (pid 20306) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.365154][T20306] Use struct sctp_sack_info instead [ 525.985034][ T5866] Bluetooth: hci0: command tx timeout [ 526.289876][T20364] __nla_validate_parse: 10 callbacks suppressed [ 526.289898][T20364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4086'. [ 526.318525][T20364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4086'. [ 526.341826][T20362] policy can only be matched on NF_INET_PRE_ROUTING [ 526.341850][T20362] unable to load match [ 526.356800][T20364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4086'. [ 526.637356][T20385] netlink: 4224 bytes leftover after parsing attributes in process `syz.1.4091'. [ 526.671728][T20385] openvswitch: netlink: Flow actions attr not present in new flow. [ 526.887732][T20404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4100'. [ 526.890993][T20405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4100'. [ 527.078154][T20411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4102'. [ 527.087466][T20411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4102'. [ 527.093119][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4103'. [ 527.107952][T20415] openvswitch: netlink: Unknown nsh attribute 0 [ 527.114923][T20415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.131982][T20415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4103'. [ 527.228539][T20415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 527.255371][T20420] netlink: 'syz.0.4104': attribute type 1 has an invalid length. [ 527.327012][T20423] vlan3: entered allmulticast mode [ 527.349188][T20423] bond4: entered allmulticast mode [ 527.422416][T20420] netlink: 'syz.0.4104': attribute type 1 has an invalid length. [ 527.681440][T20403] infiniband syz!: set active [ 527.750786][T20403] infiniband syz!: added team_slave_0 [ 527.791657][T20403] syz!: qp#16 rxe_init_rq: Unable to allocate recv queue [ 527.832189][T20403] syz!: rxe_create_qp: returned err = -12 [ 527.853228][T20403] infiniband syz!: Couldn't create ib_mad QP1 [ 527.890563][T20403] infiniband syz!: Couldn't open port 1 [ 528.007410][T20403] RDS/IB: syz!: added [ 528.011529][T20403] smc: adding ib device syz! with port count 1 [ 528.034481][T20403] smc: ib device syz! port 1 has pnetid [ 528.108479][T20468] tipc: Cannot configure node identity twice [ 528.172617][T20468] syzkaller1: entered promiscuous mode [ 528.202441][T20468] syzkaller1: entered allmulticast mode [ 529.176809][T20511] tipc: Enabled bearer , priority 0 [ 529.202035][T20511] syzkaller0: entered promiscuous mode [ 529.216158][T20511] syzkaller0: entered allmulticast mode [ 529.262290][T20511] tipc: Resetting bearer [ 529.391766][T20507] tipc: Resetting bearer [ 529.467264][T20507] tipc: Disabling bearer [ 529.541105][T20525] netlink: 'syz.3.4133': attribute type 10 has an invalid length. [ 529.564704][T20525] batman_adv: batadv0: Removing interface: team0 [ 529.592560][T20525] bridge0: port 2(team0) entered blocking state [ 529.635185][T20525] bridge0: port 2(team0) entered disabled state [ 529.641849][T20525] team0: entered allmulticast mode [ 529.664575][T20525] team_slave_0: entered allmulticast mode [ 529.670565][T20525] team_slave_1: entered allmulticast mode [ 529.698437][T20525] team0: entered promiscuous mode [ 529.703550][T20525] team_slave_0: entered promiscuous mode [ 529.735240][T20525] team_slave_1: entered promiscuous mode [ 530.347910][T20564] netlink: 'syz.3.4144': attribute type 1 has an invalid length. [ 530.645776][T20574] netlink: 'syz.0.4147': attribute type 7 has an invalid length. [ 530.991855][T20590] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 531.622373][T20618] __nla_validate_parse: 13 callbacks suppressed [ 531.622396][T20618] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4158'. [ 531.784133][T20625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4161'. [ 531.820005][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4161'. [ 531.878962][T20625] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 531.908564][T20621] IPVS: Scheduler module ip_vs_sip not found [ 531.925898][T20625] tipc: Cannot configure node identity twice [ 532.070600][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4163'. [ 532.100146][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4163'. [ 532.139393][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4163'. [ 532.588920][T20651] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4168'. [ 532.707284][T20661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4169'. [ 533.141438][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4175'. [ 533.178321][T20674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4175'. [ 533.400205][T20683] C: renamed from team_slave_0 (while UP) [ 533.435505][T20683] netlink: 'syz.3.4178': attribute type 1 has an invalid length. [ 533.450218][T20683] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 533.618829][T20658] lo speed is unknown, defaulting to 1000 [ 533.650242][T20689] veth0: entered promiscuous mode [ 533.698831][T20689] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 533.754100][T20689] tipc: Enabled bearer , priority 10 [ 533.763002][T20688] veth0: left promiscuous mode [ 533.832182][T20702] netlink: 'syz.3.4185': attribute type 8 has an invalid length. [ 533.840402][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 533.880040][T20706] netlink: 'syz.3.4185': attribute type 8 has an invalid length. [ 533.973890][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 534.113774][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 534.177539][T20714] netlink: 'syz.0.4186': attribute type 1 has an invalid length. [ 534.194700][T20714] netlink: 'syz.0.4186': attribute type 1 has an invalid length. [ 534.197903][T20718] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 534.234909][T20718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.253751][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 534.305029][T20718] netlink: 'syz.1.4189': attribute type 10 has an invalid length. [ 534.393738][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 534.814086][ T5906] tipc: Node number set to 249387538 [ 535.406451][T20769] tipc: Enabled bearer , priority 0 [ 535.537294][T20767] tipc: Disabling bearer [ 535.598608][T20777] veth0: entered promiscuous mode [ 535.654809][T20776] veth0: left promiscuous mode [ 535.981632][T20799] netlink: 'syz.3.4214': attribute type 10 has an invalid length. [ 536.026681][T20799] geneve0: entered promiscuous mode [ 536.064893][T20799] geneve0: entered allmulticast mode [ 536.076817][T20799] team0: Port device geneve0 added [ 536.152739][T20804] tipc: Enabled bearer , priority 10 [ 536.186123][T20804] netlink: 'syz.4.4215': attribute type 8 has an invalid length. [ 536.687273][T20834] __nla_validate_parse: 12 callbacks suppressed [ 536.687344][T20834] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4222'. [ 536.914256][T20839] netlink: 'syz.3.4224': attribute type 10 has an invalid length. [ 536.939867][T20842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4225'. [ 536.967145][T20842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4225'. [ 537.833736][ C1] net_ratelimit: 7 callbacks suppressed [ 537.833758][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 538.865357][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 539.712074][T20886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4233'. [ 539.759655][T20886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4233'. [ 539.903858][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 539.930787][T20894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.042533][T20900] netlink: 'syz.0.4240': attribute type 1 has an invalid length. [ 540.137664][T20900] 8021q: adding VLAN 0 to HW filter on device bond5 [ 540.247953][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4242'. [ 540.299594][T20907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4242'. [ 540.307498][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4242'. [ 540.362641][T20908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4242'. [ 540.368448][T20912] syzkaller0: entered promiscuous mode [ 540.379535][T20912] syzkaller0: entered allmulticast mode [ 540.388800][T20911] tipc: Enabled bearer , priority 0 [ 540.405681][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4242'. [ 540.526486][T20911] tipc: Resetting bearer [ 540.616686][T20911] tipc: Disabling bearer [ 540.667874][T20921] vlan0: entered allmulticast mode [ 540.682691][T20921] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 540.943930][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 541.132566][T20949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.139971][T20949] IPv6: NLM_F_CREATE should be set when creating new route [ 541.334326][T20957] netlink: 'syz.2.4258': attribute type 21 has an invalid length. [ 541.939419][T21003] __nla_validate_parse: 7 callbacks suppressed [ 541.939441][T21003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4267'. [ 541.983936][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 542.313046][T21016] tipc: Enabled bearer , priority 0 [ 542.326323][T21016] syzkaller0: entered promiscuous mode [ 542.332029][T21016] syzkaller0: entered allmulticast mode [ 542.376610][T21017] tipc: Resetting bearer [ 542.392973][T21015] tipc: Resetting bearer [ 542.412816][T21015] tipc: Disabling bearer [ 542.652458][T21029] netlink: 'syz.0.4275': attribute type 1 has an invalid length. [ 542.663209][T21029] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4275'. [ 542.950275][T21040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4278'. [ 543.008802][T21044] team0: left allmulticast mode [ 543.023021][T21044] C: left allmulticast mode [ 543.033860][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 543.070663][T21044] team_slave_1: left allmulticast mode [ 543.096078][T21044] geneve0: left allmulticast mode [ 543.101223][T21044] team0: left promiscuous mode [ 543.115070][T21044] C: left promiscuous mode [ 543.125024][T21044] team_slave_1: left promiscuous mode [ 543.152642][T21044] geneve0: left promiscuous mode [ 543.160115][T21044] bridge0: port 2(team0) entered disabled state [ 543.171898][T21053] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4283'. [ 543.192644][T21044] bridge_slave_0: left allmulticast mode [ 543.208759][T21040] netlink: 'syz.3.4278': attribute type 13 has an invalid length. [ 543.217416][T21044] bridge_slave_0: left promiscuous mode [ 543.223276][T21044] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.234878][T21040] netlink: 'syz.3.4278': attribute type 58 has an invalid length. [ 543.241622][T21060] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4283'. [ 543.242722][T21040] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4278'. [ 543.279377][T21044] bond0: (slave bridge_slave_1): Releasing backup interface [ 543.316203][T21044] bond0: (slave bond_slave_0): Releasing backup interface [ 543.336601][T21044] bond0: (slave bond_slave_1): Releasing backup interface [ 543.371097][T21044] team0: Port device C removed [ 543.387075][T21044] team0: Port device team_slave_1 removed [ 543.400134][T21044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.408461][T21044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.418950][T21044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.434364][T21044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.455092][T21044] team0: Port device geneve0 removed [ 543.741916][T21078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'. [ 543.792337][T21078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.063758][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 544.200223][T21099] netlink: 'syz.1.4291': attribute type 1 has an invalid length. [ 544.257279][T21104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4291'. [ 544.277417][T21099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.288690][T21108] veth0: entered promiscuous mode [ 544.599145][T21120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4296'. [ 544.620943][T21120] netlink: 'syz.2.4296': attribute type 5 has an invalid length. [ 544.638466][T21120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4296'. [ 544.776670][T21104] bond0 (unregistering): Released all slaves [ 544.839205][T21120] netlink: 'syz.2.4296': attribute type 12 has an invalid length. [ 544.873800][T21100] veth0: left promiscuous mode [ 545.103735][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 545.160817][T21143] netlink: 'syz.4.4303': attribute type 16 has an invalid length. [ 545.185460][T21143] netlink: 'syz.4.4303': attribute type 17 has an invalid length. [ 545.193501][T21143] lo: left promiscuous mode [ 545.213597][T21143] tunl0: left promiscuous mode [ 545.229948][T21143] gre0: left promiscuous mode [ 545.250466][T21150] openvswitch: netlink: Flow key attr not present in new flow. [ 545.312813][T21143] gretap0: left promiscuous mode [ 545.324117][T21143] erspan0: left promiscuous mode [ 545.342388][T21143] ip_vti0: left promiscuous mode [ 545.407393][T21143] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 545.461707][T21148] macsec2: entered promiscuous mode [ 545.469658][T21148] team0: entered promiscuous mode [ 545.480100][T21148] bond4: entered promiscuous mode [ 545.489971][T21148] macsec2: entered allmulticast mode [ 545.496184][T21148] team0: entered allmulticast mode [ 545.501511][T21148] team_slave_0: entered allmulticast mode [ 545.508025][T21148] team_slave_1: entered allmulticast mode [ 545.514901][T21148] geneve0: entered allmulticast mode [ 545.520221][T21148] bond4: entered allmulticast mode [ 545.527951][T21148] team0: Device macsec2 is already an upper device of the team interface [ 545.539102][T21148] team0: left allmulticast mode [ 545.550400][T21148] team_slave_0: left allmulticast mode [ 545.558546][T21148] team_slave_1: left allmulticast mode [ 545.569549][T21148] geneve0: left allmulticast mode [ 545.575411][T21148] bond4: left allmulticast mode [ 545.580759][T21148] team0: left promiscuous mode [ 545.586816][T21148] bond4: left promiscuous mode [ 545.722179][T21145] tipc: Enabled bearer , priority 0 [ 545.760698][T21167] syzkaller0: entered promiscuous mode [ 545.773206][T21167] syzkaller0: entered allmulticast mode [ 545.820038][T21144] tipc: Resetting bearer [ 545.833303][T21175] netlink: 'syz.0.4309': attribute type 1 has an invalid length. [ 545.879495][T21144] tipc: Disabling bearer [ 546.006835][T21175] 8021q: adding VLAN 0 to HW filter on device bond6 [ 546.029613][T21179] IPVS: Error joining to the multicast group [ 546.143852][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 546.539321][T21215] netlink: 'syz.0.4323': attribute type 83 has an invalid length. [ 547.183983][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 548.223930][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 549.103937][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 549.263769][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 550.303775][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 551.343783][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 552.393798][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 553.423775][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 554.463771][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 555.503771][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 556.543778][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 557.583773][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 558.623774][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 559.663961][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 560.703906][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 561.743773][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 562.783842][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 563.824010][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 564.863794][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 565.903833][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 566.953783][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 567.983811][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 569.033788][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 569.413339][T21236] openvswitch: netlink: IP tunnel dst address not specified [ 569.975320][T21280] netlink: 'syz.4.4345': attribute type 1 has an invalid length. [ 570.063735][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 570.229826][T21289] syzkaller1: entered promiscuous mode [ 570.236034][T21289] syzkaller1: entered allmulticast mode [ 570.317676][T21291] __nla_validate_parse: 38 callbacks suppressed [ 570.317708][T21291] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4350'. [ 570.339941][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4350'. [ 570.467360][T21297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4352'. [ 570.535877][T21293] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4351'. [ 570.556380][T21293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4351'. [ 570.605715][T21297] netlink: 548 bytes leftover after parsing attributes in process `syz.4.4352'. [ 570.858650][T21307] netlink: 'syz.0.4355': attribute type 13 has an invalid length. [ 570.889731][T21313] netlink: 'syz.2.4358': attribute type 1 has an invalid length. [ 570.895218][T21307] netlink: 'syz.0.4355': attribute type 4 has an invalid length. [ 571.071732][T21325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4361'. [ 571.104944][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 571.109231][T21325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4361'. [ 571.197332][T21319] lo: entered allmulticast mode [ 571.633426][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4366'. [ 571.652786][T21351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4365'. [ 572.108556][T21371] sit1: entered promiscuous mode [ 572.113868][T21371] sit1: entered allmulticast mode [ 572.144162][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 572.209279][T21369] syzkaller0: entered promiscuous mode [ 572.215484][T21369] syzkaller0: entered allmulticast mode [ 572.265985][T21386] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 573.186343][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 573.429136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.229814][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 574.486758][T21406] tipc: Enabled bearer , priority 0 [ 574.612395][T21406] tipc: Disabling bearer [ 575.273717][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 576.136781][ T61] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.162075][ T61] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.230572][ T61] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.240324][ T61] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.249493][ T61] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.281818][ T61] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.302967][ T61] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.312135][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 576.368346][ T61] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.469622][T21469] __nla_validate_parse: 8 callbacks suppressed [ 576.469626][T21468] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4391'. [ 576.469645][T21469] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4391'. [ 576.610071][T21474] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 576.646196][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 576.919290][T21496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4402'. [ 576.930008][T21497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4403'. [ 576.941366][T21496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4402'. [ 576.964906][T21497] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4403'. [ 576.993856][T21498] netlink: 'syz.3.4402': attribute type 12 has an invalid length. [ 577.019334][T21500] syzkaller1: left promiscuous mode [ 577.024883][T21500] syzkaller1: left allmulticast mode [ 577.135776][T21503] syzkaller0: entered promiscuous mode [ 577.144696][T21503] syzkaller0: entered allmulticast mode [ 577.153315][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4405'. [ 577.207151][T21504] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 577.331673][T21511] syzkaller1: entered promiscuous mode [ 577.343866][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 577.364883][T21511] syzkaller1: entered allmulticast mode [ 577.927517][T21533] netlink: zone id is out of range [ 577.974188][T21533] netlink: zone id is out of range [ 578.018066][T21533] netlink: zone id is out of range [ 578.026371][T21533] netlink: zone id is out of range [ 578.032483][T21533] netlink: zone id is out of range [ 578.041707][T21533] netlink: zone id is out of range [ 578.092254][T21551] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4417'. [ 578.196998][T21553] 8021q: adding VLAN 0 to HW filter on device bond5 [ 578.216171][T21553] bond0: (slave bond5): Enslaving as an active interface with an up link [ 578.457241][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4423'. [ 578.514920][T21564] netlink: 'syz.3.4421': attribute type 1 has an invalid length. [ 578.534663][T21565] netlink: 'syz.3.4421': attribute type 1 has an invalid length. [ 578.555682][T21565] netlink: 'syz.3.4421': attribute type 2 has an invalid length. [ 578.801867][T21583] netlink: 'syz.4.4428': attribute type 39 has an invalid length. [ 579.423714][ C1] net_ratelimit: 241 callbacks suppressed [ 579.423736][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 579.873301][T21611] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 580.137943][T21627] openvswitch: netlink: Unknown nsh attribute 0 [ 580.163842][T21627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.178876][T21629] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 580.463867][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 580.546588][T21649] delete_channel: no stack [ 581.450316][T21700] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 581.503741][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 581.615467][T21709] __nla_validate_parse: 12 callbacks suppressed [ 581.615489][T21709] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4465'. [ 581.667196][T21711] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4465'. [ 581.693953][T21711] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 581.711459][T21709] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 581.765929][T21709] bond0: (slave bond5): Releasing backup interface [ 582.154576][T21745] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 582.401593][T21757] netlink: 'syz.4.4480': attribute type 23 has an invalid length. [ 582.501183][T21759] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 582.775759][T21778] netlink: 'syz.2.4483': attribute type 12 has an invalid length. [ 582.788550][T21778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4483'. [ 583.124447][T21793] netlink: 'syz.2.4488': attribute type 10 has an invalid length. [ 583.247965][T21798] netlink: 'syz.0.4489': attribute type 142 has an invalid length. [ 583.291489][T21802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4490'. [ 583.298126][T21804] 8021q: VLANs not supported on ip6_vti0 [ 583.392694][T21810] netlink: 'syz.0.4489': attribute type 10 has an invalid length. [ 583.408941][T21810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.422434][T21810] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 583.543434][T21817] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4495'. [ 584.276412][T21862] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4510'. [ 584.280720][T21854] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 584.312978][T21862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4510'. [ 584.346658][T21862] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4510'. [ 584.368097][T21862] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4510'. [ 584.506562][T21873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4511'. [ 584.623823][ C1] net_ratelimit: 2 callbacks suppressed [ 584.623845][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 584.727463][T21874] syzkaller0: entered promiscuous mode [ 584.733098][T21874] syzkaller0: entered allmulticast mode [ 585.667928][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 586.713730][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 587.042827][T21917] netlink: 'syz.4.4522': attribute type 1 has an invalid length. [ 587.078228][T21917] netlink: 'syz.4.4522': attribute type 2 has an invalid length. [ 587.096104][T21920] team0: Device vti0 is up. Set it down before adding it as a team port [ 587.743863][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 588.354675][T21961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4538'. [ 588.762316][T21977] tc_dump_action: action bad kind [ 588.784751][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 588.802070][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4543'. [ 589.000356][T21986] netlink: 'syz.2.4546': attribute type 1 has an invalid length. [ 589.108666][T21986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.449089][T21997] team0: Device gtp0 is up. Set it down before adding it as a team port [ 589.564491][T22005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4551'. [ 589.824108][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 590.501317][T22044] netlink: 'syz.2.4563': attribute type 21 has an invalid length. [ 590.537768][T22044] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4563'. [ 590.586683][T22044] netlink: 'syz.2.4563': attribute type 5 has an invalid length. [ 590.617120][T22044] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4563'. [ 590.863846][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 591.183447][T22062] netlink: 'syz.0.4569': attribute type 64 has an invalid length. [ 591.220813][T22062] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4569'. [ 591.235657][T22062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4569'. [ 591.903724][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 592.027629][T22096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4574'. [ 592.166888][T22099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4575'. [ 592.393891][T22109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4579'. [ 592.902040][T22121] erspan0: entered promiscuous mode [ 592.943830][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 592.952654][T22121] vlan1: entered promiscuous mode [ 593.262365][T22143] netlink: 'syz.3.4589': attribute type 1 has an invalid length. [ 593.986601][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 595.028817][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 595.991857][T22160] netlink: 'syz.2.4596': attribute type 1 has an invalid length. [ 596.000450][T22160] netlink: 'syz.2.4596': attribute type 1 has an invalid length. [ 596.063835][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 596.258743][T22171] syzkaller0: entered promiscuous mode [ 596.279484][T22171] syzkaller0: entered allmulticast mode [ 597.103985][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 598.146707][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 598.531333][T22182] __nla_validate_parse: 3 callbacks suppressed [ 598.531354][T22182] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4602'. [ 598.531542][T22180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4601'. [ 598.556500][T22180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4601'. [ 598.574465][T22180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4601'. [ 598.593614][T22180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4601'. [ 598.719948][T22200] openvswitch: netlink: IP tunnel dst address not specified [ 598.848341][T22207] netlink: 'syz.3.4609': attribute type 1 has an invalid length. [ 598.875310][T22207] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4609'. [ 599.183849][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 599.212212][T22232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4617'. [ 599.214623][T22231] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4618'. [ 599.242706][T22231] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4618'. [ 599.662640][T22258] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4622'. [ 600.071040][T22282] netlink: 'syz.3.4626': attribute type 11 has an invalid length. [ 600.223824][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 600.394269][T22268] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 600.976884][T22309] delete_channel: no stack [ 600.995769][T22309] netlink: 'syz.2.4632': attribute type 58 has an invalid length. [ 601.263792][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 601.371506][T22273] lo speed is unknown, defaulting to 1000 [ 602.042020][T22336] bridge4: entered promiscuous mode [ 602.051326][T22336] bridge4: entered allmulticast mode [ 602.303714][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 602.427656][T22351] geneve2: entered promiscuous mode [ 602.436575][T22351] geneve2: entered allmulticast mode [ 602.500664][ T3517] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19487 - 0 [ 602.519686][ T3517] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19487 - 0 [ 602.541227][T22357] netlink: 'syz.3.4646': attribute type 1 has an invalid length. [ 602.556257][ T3517] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19487 - 0 [ 602.586107][T22357] netlink: 'syz.3.4646': attribute type 8 has an invalid length. [ 602.594827][ T3517] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19487 - 0 [ 602.850237][T22368] netlink: 'syz.1.4652': attribute type 1 has an invalid length. [ 603.145102][T22368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.315901][T22378] vlan2: entered promiscuous mode [ 603.342450][T22378] bond0: entered promiscuous mode [ 603.353703][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 603.378418][T22378] vlan2: entered allmulticast mode [ 603.411135][T22378] bond0: entered allmulticast mode [ 603.471076][T22399] netlink: 'syz.0.4655': attribute type 39 has an invalid length. [ 603.526250][T22382] bond0: (slave gretap1): making interface the new active one [ 603.550771][T22382] gretap1: entered promiscuous mode [ 603.561064][T22382] gretap1: entered allmulticast mode [ 603.580156][T22382] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 603.752875][T22407] tipc: Enabled bearer , priority 0 [ 603.871818][T22407] tipc: Resetting bearer [ 603.936961][T22421] syz.1.4662: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 603.962397][T22421] CPU: 0 UID: 0 PID: 22421 Comm: syz.1.4662 Not tainted syzkaller #0 PREEMPT(full) [ 603.962439][T22421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 603.962453][T22421] Call Trace: [ 603.962462][T22421] [ 603.962471][T22421] dump_stack_lvl+0x189/0x250 [ 603.962508][T22421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.962533][T22421] ? __pfx__printk+0x10/0x10 [ 603.962562][T22421] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 603.962586][T22421] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 603.962612][T22421] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 603.962641][T22421] warn_alloc+0x214/0x310 [ 603.962675][T22421] ? stack_depot_save_flags+0x40/0x860 [ 603.962706][T22421] ? __pfx_warn_alloc+0x10/0x10 [ 603.962740][T22421] ? kasan_save_track+0x4f/0x80 [ 603.962767][T22421] ? xskq_create+0x56/0x170 [ 603.962792][T22421] ? xsk_init_queue+0xb0/0x110 [ 603.962814][T22421] ? xsk_setsockopt+0x4dc/0x8d0 [ 603.962837][T22421] ? do_sock_setsockopt+0x17c/0x1b0 [ 603.962866][T22421] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 603.962884][T22421] ? do_syscall_64+0xfa/0x3b0 [ 603.962910][T22421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.962941][T22421] __vmalloc_node_range_noprof+0x125/0x12f0 [ 603.963012][T22421] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 603.963051][T22421] ? __kasan_kmalloc+0x93/0xb0 [ 603.963084][T22421] vmalloc_user_noprof+0xad/0xf0 [ 603.963115][T22421] ? xskq_create+0xbf/0x170 [ 603.963143][T22421] xskq_create+0xbf/0x170 [ 603.963172][T22421] xsk_init_queue+0xb0/0x110 [ 603.963199][T22421] xsk_setsockopt+0x4dc/0x8d0 [ 603.963226][T22421] ? __pfx_xsk_setsockopt+0x10/0x10 [ 603.963250][T22421] ? __pfx_aa_sk_perm+0x10/0x10 [ 603.963282][T22421] ? aa_sock_opt_perm+0xff/0x1b0 [ 603.963305][T22421] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 603.963326][T22421] ? __pfx_xsk_setsockopt+0x10/0x10 [ 603.963352][T22421] do_sock_setsockopt+0x17c/0x1b0 [ 603.963390][T22421] __x64_sys_setsockopt+0x13f/0x1b0 [ 603.963418][T22421] do_syscall_64+0xfa/0x3b0 [ 603.963454][T22421] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.963481][T22421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.963501][T22421] ? clear_bhb_loop+0x60/0xb0 [ 603.963527][T22421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.963547][T22421] RIP: 0033:0x7ff34bd8ebe9 [ 603.963569][T22421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.963588][T22421] RSP: 002b:00007ff34cbd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 603.963618][T22421] RAX: ffffffffffffffda RBX: 00007ff34bfb5fa0 RCX: 00007ff34bd8ebe9 [ 603.963632][T22421] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 603.963644][T22421] RBP: 00007ff34be11e19 R08: 0000000000000004 R09: 0000000000000000 [ 603.963656][T22421] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 603.963669][T22421] R13: 00007ff34bfb6038 R14: 00007ff34bfb5fa0 R15: 00007fffc2b39568 [ 603.963707][T22421] [ 604.283100][T22421] Mem-Info: [ 604.291831][T22421] active_anon:8046 inactive_anon:0 isolated_anon:0 [ 604.291831][T22421] active_file:2825 inactive_file:40008 isolated_file:0 [ 604.291831][T22421] unevictable:768 dirty:80 writeback:0 [ 604.291831][T22421] slab_reclaimable:12181 slab_unreclaimable:120363 [ 604.291831][T22421] mapped:30092 shmem:1359 pagetables:1267 [ 604.291831][T22421] sec_pagetables:0 bounce:0 [ 604.291831][T22421] kernel_misc_reclaimable:0 [ 604.291831][T22421] free:1300915 free_pcp:16418 free_cma:0 [ 604.346797][T22421] Node 0 active_anon:32284kB inactive_anon:0kB active_file:11300kB inactive_file:159828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120368kB dirty:316kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13800kB pagetables:4944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 604.380691][T22421] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 604.410935][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 604.437945][T22400] tipc: Disabling bearer [ 604.447848][T22421] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 604.479993][T22421] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 604.487257][T22421] Node 0 DMA32 free:1298004kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32136kB inactive_anon:0kB active_file:11300kB inactive_file:158260kB unevictable:1536kB writepending:316kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:48684kB local_pcp:19716kB free_cma:0kB [ 604.520582][T22421] lowmem_reserve[]: 0 0 1 1 1 [ 604.526284][T22421] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 604.560578][T22421] lowmem_reserve[]: 0 0 0 0 0 [ 604.565957][T22421] Node 1 Normal free:3890540kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17028kB local_pcp:11844kB free_cma:0kB [ 604.598205][T22421] lowmem_reserve[]: 0 0 0 0 0 [ 604.603198][T22421] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 604.617064][T22421] Node 0 DMA32: 2829*4kB (UME) 841*8kB (UME) 482*16kB (UM) 623*32kB (UME) 243*64kB (UME) 169*128kB (UME) 134*256kB (UM) 173*512kB (UME) 77*1024kB (UM) 5*2048kB (UM) 245*4096kB (M) = 1298364kB [ 604.637416][T22421] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 604.659555][T22421] Node 1 Normal: 233*4kB (UME) 59*8kB (UME) 41*16kB (UME) 171*32kB (UME) 54*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (UM) 1*1024kB (M) 0*2048kB 946*4096kB (M) = 3890540kB [ 604.701904][T22439] C: renamed from team_slave_0 [ 604.710332][T22421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.736360][T22439] netlink: 'syz.2.4667': attribute type 1 has an invalid length. [ 604.746848][T22439] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 604.762253][T22421] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 604.762327][T22421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.762346][T22421] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 604.762364][T22421] 44188 total pagecache pages [ 604.762373][T22421] 0 pages in swap cache [ 604.762383][T22421] Free swap = 124996kB [ 604.762392][T22421] Total swap = 124996kB [ 604.762403][T22421] 2097051 pages RAM [ 604.762412][T22421] 0 pages HighMem/MovableOnly [ 604.762420][T22421] 425656 pages reserved [ 604.762430][T22421] 0 pages cma reserved [ 604.968071][T22445] nbd: must specify at least one socket [ 604.968443][T22449] __nla_validate_parse: 14 callbacks suppressed [ 604.968459][T22449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4670'. [ 605.007654][T22445] geneve2: entered promiscuous mode [ 605.013267][T22445] geneve2: entered allmulticast mode [ 605.028360][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.041650][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.093793][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.133090][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.222509][T22459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4672'. [ 605.415708][T22468] dvmrp0: left allmulticast mode [ 605.424105][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 605.577136][T22477] veth0: entered promiscuous mode [ 605.673206][T22462] veth0: left promiscuous mode [ 605.856890][T22492] netlink: 'syz.4.4681': attribute type 23 has an invalid length. [ 605.895103][T22493] netlink: del zone limit has 4 unknown bytes [ 605.925033][T22491] netlink: del zone limit has 4 unknown bytes [ 605.949639][T22490] netlink: zone id is out of range [ 605.980992][T22490] netlink: zone id is out of range [ 605.989455][T22490] netlink: zone id is out of range [ 606.017912][T22495] macvlan0: left promiscuous mode [ 606.040477][T22495] macvlan0: left allmulticast mode [ 606.041303][T22490] netlink: set zone limit has 4 unknown bytes [ 606.117053][T22492] netlink: 'syz.4.4681': attribute type 4 has an invalid length. [ 606.374789][T22518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4691'. [ 606.386865][T22519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4690'. [ 606.423586][T22518] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4691'. [ 606.463873][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 606.838929][T22542] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4697'. [ 606.971323][T22545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4698'. [ 607.065726][T22550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4698'. [ 607.091674][T22551] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.248588][T22558] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4704'. [ 607.348730][T22564] netlink: 'syz.3.4706': attribute type 4 has an invalid length. [ 607.372916][T22564] netlink: 'syz.3.4706': attribute type 4 has an invalid length. [ 607.500357][T22568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4707'. [ 607.513809][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 607.649670][T22568] 8021q: adding VLAN 0 to HW filter on device bond2 [ 607.667851][T22571] vlan3: entered allmulticast mode [ 607.673029][T22571] bond2: entered allmulticast mode [ 607.836359][T22590] dvmrp0: left allmulticast mode [ 607.841826][T22590] lo: left allmulticast mode [ 608.543728][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 608.677691][T22640] netlink: 'syz.0.4727': attribute type 10 has an invalid length. [ 608.874258][T22651] Unsupported ieee802154 address type: 0 [ 610.252247][T22717] __nla_validate_parse: 11 callbacks suppressed [ 610.252271][T22717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4749'. [ 610.361620][T22717] syzkaller1: entered promiscuous mode [ 610.372455][T22717] syzkaller1: entered allmulticast mode [ 610.523237][T22728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 610.618693][T22730] netlink: 'syz.4.4755': attribute type 1 has an invalid length. [ 610.633851][ C1] net_ratelimit: 4 callbacks suppressed [ 610.633874][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 610.640051][T22730] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4755'. [ 610.671769][T22735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4757'. [ 611.117900][T22757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4763'. [ 611.163061][T22760] netlink: 'syz.2.4764': attribute type 23 has an invalid length. [ 611.541588][T22776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4771'. [ 611.663878][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 611.812004][T22789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4773'. [ 612.271823][T22797] netlink: 'syz.3.4776': attribute type 6 has an invalid length. [ 612.525292][T22805] netlink: 'syz.1.4779': attribute type 4 has an invalid length. [ 612.533544][T22801] syzkaller0: entered promiscuous mode [ 612.551844][T22801] syzkaller0: entered allmulticast mode [ 612.604082][T22811] netlink: 'syz.1.4779': attribute type 4 has an invalid length. [ 612.699841][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4784'. [ 612.709712][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4784'. [ 612.714054][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 612.719362][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4784'. [ 613.744233][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 613.911048][T22883] bridge: RTM_NEWNEIGH with invalid ether address [ 613.958565][ T5866] block nbd6: Receive control failed (result -32) [ 614.027868][T22886] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 614.360255][T22908] netlink: 'syz.4.4808': attribute type 32 has an invalid length. [ 614.369434][T22908] (unnamed net_device) (uninitialized): option coupled_control: invalid value (48) [ 614.384048][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.694741][T22921] netlink: 'syz.3.4812': attribute type 3 has an invalid length. [ 614.783890][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 615.321936][T22936] __nla_validate_parse: 11 callbacks suppressed [ 615.321970][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4818'. [ 615.343412][T22940] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4820'. [ 615.394634][T22940] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4820'. [ 615.456859][T22942] bridge5: entered promiscuous mode [ 615.462147][T22942] bridge5: entered allmulticast mode [ 615.570098][T22955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4824'. [ 615.607650][T22955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4824'. [ 615.622659][T22946] bridge_slave_0: left allmulticast mode [ 615.635103][T22946] bridge_slave_0: left promiscuous mode [ 615.649862][T22946] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.713263][T22946] team0: Port device team_slave_0 removed [ 615.773260][T22946] team0: Port device team_slave_1 removed [ 615.786168][T22946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.796209][T22946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.797464][T22964] netlink: 'syz.2.4825': attribute type 21 has an invalid length. [ 615.816293][T22946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.824798][T22946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.833783][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 615.859666][T22946] team0: Port device bond1 removed [ 615.867083][T22946] bridge3: port 1(vlan0) entered disabled state [ 615.880430][T22946] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 615.933983][T22955] veth5: entered allmulticast mode [ 615.949143][T17270] syz!: Port: 1 Link DOWN [ 615.973436][T22964] netlink: 'syz.2.4825': attribute type 6 has an invalid length. [ 615.991566][T22964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4825'. [ 616.206720][T22972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4828'. [ 616.477998][T22996] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 616.539119][T23001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.701311][T23007] netlink: 'syz.4.4837': attribute type 5 has an invalid length. [ 616.708675][T23008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4838'. [ 616.863882][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 616.879563][T23012] netlink: 'syz.0.4839': attribute type 4 has an invalid length. [ 617.186264][T23027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4844'. [ 617.214053][T23027] netlink: 'syz.0.4844': attribute type 11 has an invalid length. [ 617.232485][T23027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4844'. [ 617.265234][T23032] netlink: 'syz.3.4845': attribute type 10 has an invalid length. [ 617.283779][T23027] netlink: 'syz.0.4844': attribute type 11 has an invalid length. [ 617.306844][T23032] dummy0: entered promiscuous mode [ 617.322746][T23032] bridge0: port 1(dummy0) entered blocking state [ 617.330496][T23032] bridge0: port 1(dummy0) entered disabled state [ 617.343296][T23032] dummy0: entered allmulticast mode [ 617.903776][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 617.915606][T23061] ip6gre0: Master is either lo or non-ether device [ 618.059974][T23074] dummy0: left allmulticast mode [ 618.073751][T23074] bridge0: port 1(dummy0) entered disabled state [ 618.676234][T23103] xt_policy: too many policy elements [ 618.854872][T23110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.894257][T23110] netlink: 'syz.4.4869': attribute type 6 has an invalid length. [ 618.943972][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 618.960987][T23111] bond3: entered allmulticast mode [ 618.966744][T23111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 618.979229][T23111] bridge0: port 1(bond3) entered blocking state [ 618.990268][T23111] bridge0: port 1(bond3) entered disabled state [ 619.001692][T23116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.003118][T23111] bond3: entered promiscuous mode [ 619.171736][T23111] syzkaller1: entered promiscuous mode [ 619.193548][T23111] syzkaller1: entered allmulticast mode [ 619.484270][T23139] tipc: Enabling of bearer rejected, media not registered [ 619.644009][T23125] netlink: 'syz.4.4874': attribute type 11 has an invalid length. [ 619.668609][T23146] tap0: tun_chr_ioctl cmd 1074025672 [ 619.684566][T23146] tap0: ignored: set checksum disabled [ 619.983913][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 620.448621][T23189] __nla_validate_parse: 8 callbacks suppressed [ 620.448643][T23189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4891'. [ 620.513463][T23190] syzkaller1: entered promiscuous mode [ 620.523768][T23190] syzkaller1: entered allmulticast mode [ 620.671383][T23200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4894'. [ 620.836722][T23205] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4897'. [ 621.023813][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 621.165474][T23224] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.172062][T23226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4902'. [ 621.336611][T23224] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.430531][T23232] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4904'. [ 621.491197][T23224] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.561163][T23224] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.869944][ T7875] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.972875][T23258] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4910'. [ 622.016301][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.032038][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.063987][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 622.112255][ T7875] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.116162][T23269] netlink: 'syz.2.4914': attribute type 10 has an invalid length. [ 622.123058][T23261] pim6reg1: entered promiscuous mode [ 622.158724][T23261] pim6reg1: entered allmulticast mode [ 622.385553][T23281] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 622.696167][T23309] syzkaller1: entered promiscuous mode [ 622.721909][T23309] syzkaller1: entered allmulticast mode [ 622.833090][T23309] netlink: 'syz.3.4923': attribute type 8 has an invalid length. [ 623.106803][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 623.110973][T23320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4927'. [ 623.125003][T23320] netlink: 'syz.1.4927': attribute type 1 has an invalid length. [ 623.138992][T23320] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4927'. [ 623.305506][T23337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4933'. [ 623.486763][T23337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4933'. [ 623.552591][T23354] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 623.680340][T23359] netlink: 'syz.1.4936': attribute type 5 has an invalid length. [ 623.721272][T23364] netlink: 'syz.1.4936': attribute type 5 has an invalid length. [ 623.897487][T23370] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.909453][T23370] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 623.921376][T23370] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 624.074900][T23370] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.115930][T23370] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 624.143834][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 624.157516][T23370] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 624.268995][T23370] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.302796][T23370] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 624.334812][T23370] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 624.447000][T23370] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.464742][T23370] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 624.483357][T23370] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 624.676723][ T3163] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.721124][ T3163] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 624.745483][ T3163] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 624.762119][ T3163] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.772214][ T3163] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 624.781124][ T3163] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 624.830893][ T3163] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.841301][ T3163] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 624.850403][ T3163] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 624.860031][ T3163] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.869073][ T3163] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 624.880220][ T3163] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 624.970136][T23420] syzkaller0: entered promiscuous mode [ 624.976334][T23420] syzkaller0: entered allmulticast mode [ 625.193831][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 626.227195][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 627.276901][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 627.709472][T23471] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 627.785117][T23470] __nla_validate_parse: 5 callbacks suppressed [ 627.785138][T23470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4967'. [ 627.974349][T23479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4972'. [ 628.013821][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4972'. [ 628.043488][T23479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4972'. [ 628.062162][T23481] lo: left allmulticast mode [ 628.203797][T23492] netlink: 'syz.1.4975': attribute type 3 has an invalid length. [ 628.211637][T23492] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4975'. [ 628.303719][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 628.331506][T23501] tipc: Enabling of bearer rejected, failed to enable media [ 628.429818][T23510] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4981'. [ 628.460095][T23511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4977'. [ 628.482343][T23515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.761883][T23528] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4984'. [ 629.190733][T23545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4990'. [ 629.282974][T23549] netlink: 788 bytes leftover after parsing attributes in process `syz.4.4989'. [ 629.343833][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 629.592609][T23567] netlink: 'syz.1.4997': attribute type 2 has an invalid length. [ 630.383820][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 630.742725][T23595] netlink: 'syz.4.5004': attribute type 1 has an invalid length. [ 631.257669][T23628] C: renamed from lo (while UP) [ 631.339397][T23634] netlink: 'syz.1.5017': attribute type 7 has an invalid length. [ 631.360095][T23634] netlink: 'syz.1.5017': attribute type 8 has an invalid length. [ 631.423726][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 632.464714][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 632.828449][T23676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.503895][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.543835][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 635.583787][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 636.623779][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 637.663801][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.704320][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 639.753775][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 640.783818][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 641.823799][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 642.863774][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 643.903785][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 644.943781][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 645.983793][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 647.024396][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 648.063788][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 649.103807][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 650.143783][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 651.183784][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 652.223764][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 652.976081][T23694] __nla_validate_parse: 11 callbacks suppressed [ 652.976103][T23694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5034'. [ 653.053125][T23694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5034'. [ 653.123499][T23708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5034'. [ 653.181195][T23710] netlink: 'syz.2.5034': attribute type 8 has an invalid length. [ 653.263713][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 653.283422][T23713] netlink: 'syz.3.5041': attribute type 2 has an invalid length. [ 653.338016][T23718] netlink: 'syz.0.5043': attribute type 1 has an invalid length. [ 653.414017][T23718] netlink: 212332 bytes leftover after parsing attributes in process `syz.0.5043'. [ 653.510819][T23723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5045'. [ 653.671006][T23732] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5048'. [ 653.860541][ T30] audit: type=1804 audit(1755672224.056:6): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5050" name="/newroot/345/cgroup.controllers" dev="tmpfs" ino=1773 res=1 errno=0 [ 653.892453][ T30] audit: type=1800 audit(1755672224.056:7): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5050" name="cgroup.controllers" dev="tmpfs" ino=1773 res=0 errno=0 [ 654.303699][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 654.706850][T23780] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5059'. [ 655.261619][T23801] mac80211_hwsim hwsim40 : renamed from wlan1 [ 655.288025][T23803] netlink: 'syz.0.5065': attribute type 1 has an invalid length. [ 655.341246][T23808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5065'. [ 655.343916][T23803] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5065'. [ 655.360430][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.423419][T23808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5065'. [ 655.434228][T23803] netlink: 'syz.0.5065': attribute type 1 has an invalid length. [ 655.491483][T23803] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 655.532479][T23817] tipc: Enabled bearer , priority 0 [ 655.559343][T23817] syzkaller0: entered promiscuous mode [ 655.578032][T23817] syzkaller0: entered allmulticast mode [ 655.627480][T23817] tipc: Resetting bearer [ 655.683462][T23810] tipc: Resetting bearer [ 655.714456][T23823] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 655.724632][T23810] tipc: Disabling bearer [ 655.742241][T23822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.178235][T23843] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 656.383834][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 656.924413][T23881] netlink: 'syz.1.5090': attribute type 5 has an invalid length. [ 657.423860][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 657.656871][T23914] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 658.463697][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 658.622601][T23974] __nla_validate_parse: 15 callbacks suppressed [ 658.622624][T23974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5119'. [ 658.628729][T23973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5118'. [ 658.673721][T23973] netlink: 'syz.2.5118': attribute type 4 has an invalid length. [ 658.831506][T23983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5120'. [ 658.930547][T23988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5122'. [ 658.976390][T23983] netlink: 'syz.1.5120': attribute type 16 has an invalid length. [ 659.001019][T23983] netlink: 'syz.1.5120': attribute type 17 has an invalid length. [ 659.050650][T23983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 659.503694][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.144908][T24038] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5137'. [ 660.157282][T24038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5137'. [ 660.232861][T24038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5137'. [ 660.544810][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.589939][T24058] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.629895][T24061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.721340][T24058] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.824643][T24067] veth1_macvtap: left promiscuous mode [ 660.911210][T24058] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.952565][T24079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5150'. [ 660.961778][T24079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5150'. [ 661.002908][T24058] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.169224][ T61] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.213556][ T61] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.250346][ T61] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.272780][ T61] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.297254][T24090] netlink: 'syz.0.5154': attribute type 1 has an invalid length. [ 661.327497][T24090] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5154'. [ 661.386236][T24090] syzkaller1: entered promiscuous mode [ 661.391930][T24090] syzkaller1: entered allmulticast mode [ 661.559332][T24104] openvswitch: netlink: Multiple metadata blocks provided [ 661.583819][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 661.837470][T24119] netlink: 'syz.2.5161': attribute type 29 has an invalid length. [ 662.392776][T24147] netlink: 'syz.2.5172': attribute type 7 has an invalid length. [ 662.394520][T24145] team0: No ports can be present during mode change [ 662.636398][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 662.692503][T24154] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.729108][T24154] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 662.757348][T24154] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 662.792989][T24159] bond1: left promiscuous mode [ 662.832228][T24154] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.845896][T24154] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 662.872229][T24154] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 662.928549][T24154] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.947968][T24154] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 662.978016][T24154] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 663.148459][T24154] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.160995][T24154] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 663.185003][T24154] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 663.284875][T24181] mac80211_hwsim hwsim35 : renamed from wlan1 [ 663.363378][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.379345][T24190] netlink: 'syz.3.5184': attribute type 1 has an invalid length. [ 663.381843][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 663.413474][ T36] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 663.532168][T24183] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 663.562236][T24183] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 663.597008][T24183] bond6: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 663.661806][ T3561] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.670498][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.678805][ T3561] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 663.687455][ T3561] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 663.735390][ T3561] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.749460][ T3561] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 663.758686][ T3561] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 663.811095][T18885] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.822478][T18885] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 663.831971][T18885] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 664.085483][T24221] __nla_validate_parse: 6 callbacks suppressed [ 664.086881][T24221] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5192'. [ 664.180053][T24231] pim6reg: entered allmulticast mode [ 664.338029][T24235] tipc: Enabling of bearer rejected, failed to enable media [ 664.427691][T24242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5196'. [ 664.583045][T24251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5201'. [ 664.660344][T24254] netlink: 'syz.1.5201': attribute type 1 has an invalid length. [ 664.688730][T24247] syzkaller0: entered promiscuous mode [ 664.703886][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 664.714789][T24247] syzkaller0: entered allmulticast mode [ 664.791632][T24254] 8021q: adding VLAN 0 to HW filter on device bond4 [ 664.827738][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5203'. [ 664.839772][T24258] bond4: (slave gretap2): making interface the new active one [ 664.851789][T24258] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 664.904128][T24269] netlink: 'syz.0.5203': attribute type 1 has an invalid length. [ 664.942564][T24269] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5203'. [ 665.160453][T24274] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5206'. [ 665.170709][T24274] netlink: zone id is out of range [ 665.176076][T24274] netlink: zone id is out of range [ 665.181497][T24274] netlink: zone id is out of range [ 665.194346][T24274] netlink: get zone limit has 8 unknown bytes [ 665.757579][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 666.785257][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 667.823674][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 668.032790][T24317] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 668.313556][T24323] tipc: Enabled bearer , priority 0 [ 668.321349][T24332] syzkaller0: entered promiscuous mode [ 668.345261][T24332] syzkaller0: entered allmulticast mode [ 668.443207][T24323] tipc: Resetting bearer [ 668.456014][T24343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5222'. [ 668.508922][T24343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5222'. [ 668.553250][T24346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5225'. [ 668.600852][T24322] tipc: Resetting bearer [ 668.672482][T24322] tipc: Disabling bearer [ 668.863867][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 669.254502][T24384] netlink: 'syz.1.5236': attribute type 1 has an invalid length. [ 669.270355][T24384] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5236'. [ 669.286196][T24384] netlink: 'syz.1.5236': attribute type 1 has an invalid length. [ 669.297059][T24389] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5237'. [ 669.582471][T24405] netlink: 'syz.1.5241': attribute type 1 has an invalid length. [ 669.591321][T24405] netlink: 'syz.1.5241': attribute type 1 has an invalid length. [ 669.639233][T24404] tipc: Enabled bearer , priority 0 [ 669.676575][T24407] syzkaller0: entered promiscuous mode [ 669.682106][T24407] syzkaller0: entered allmulticast mode [ 669.705739][T24409] netlink: 'syz.4.5244': attribute type 2 has an invalid length. [ 669.788261][T24404] tipc: Resetting bearer [ 669.830695][T24402] tipc: Resetting bearer [ 669.851068][T24420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5246'. [ 669.903786][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 669.919598][T24402] tipc: Disabling bearer [ 670.066970][ T5866] Bluetooth: hci0: command tx timeout [ 670.121724][T24434] netlink: 'syz.3.5250': attribute type 1 has an invalid length. [ 670.129889][T24434] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5250'. [ 670.140747][T24434] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 670.228370][T24434] netlink: 'syz.3.5250': attribute type 1 has an invalid length. [ 670.237398][T24434] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5250'. [ 670.246987][T24434] netlink: 'syz.3.5250': attribute type 1 has an invalid length. [ 670.255966][T24434] netlink: 'syz.3.5250': attribute type 2 has an invalid length. [ 670.267555][T24434] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5250'. [ 670.277497][T24434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.288410][T24434] netlink: 'syz.3.5250': attribute type 10 has an invalid length. [ 670.298293][T24434] bond0: (slave ): Opening slave failed [ 670.468616][T24446] syzkaller0: entered promiscuous mode [ 670.475026][T24446] syzkaller0: entered allmulticast mode [ 670.486067][T24446] tipc: Enabled bearer , priority 0 [ 670.500118][T24450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5255'. [ 670.533251][T24445] tipc: Resetting bearer [ 670.597230][T24445] tipc: Disabling bearer [ 670.791625][T24467] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5260'. [ 670.828562][T24471] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5261'. [ 670.943672][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 670.977558][T24476] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5263'. [ 671.018785][T24476] netlink: 'syz.2.5263': attribute type 3 has an invalid length. [ 671.139813][T24484] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 671.240456][T24487] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 671.490811][T24501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.754671][T24513] netlink: 'syz.0.5276': attribute type 1 has an invalid length. [ 671.766360][T24513] netlink: 'syz.0.5276': attribute type 1 has an invalid length. [ 671.988215][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 672.067397][T24530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 672.635990][T24560] netlink: 'syz.4.5285': attribute type 1 has an invalid length. [ 672.651322][T24560] nbd: error processing sock list [ 672.672399][T24560] block nbd7: shutting down sockets [ 673.023677][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 673.081210][T24569] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 673.944175][T24625] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 673.962052][T24625] team0: Device macvtap1 is already an upper device of the team interface [ 674.063781][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.092467][T24628] pim6reg1: entered promiscuous mode [ 674.100716][T24628] pim6reg1: entered allmulticast mode [ 674.126011][T24628] Unsupported ieee802154 address type: 0 [ 674.286213][T24651] __nla_validate_parse: 11 callbacks suppressed [ 674.286236][T24651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5310'. [ 674.289456][T24647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5309'. [ 674.330656][T24648] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 674.462932][T24658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5313'. [ 674.501927][T24659] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.652871][T24661] tipc: Enabled bearer , priority 0 [ 674.672297][T24661] syzkaller0: entered promiscuous mode [ 674.699886][T24661] syzkaller0: entered allmulticast mode [ 674.730341][T24660] tipc: Resetting bearer [ 674.811799][T24660] tipc: Disabling bearer [ 675.104201][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 675.114906][T24694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5321'. [ 675.127330][T24694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5321'. [ 675.162059][T24694] validate_nla: 6 callbacks suppressed [ 675.162081][T24694] netlink: 'syz.1.5321': attribute type 18 has an invalid length. [ 675.212997][T24700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5324'. [ 675.215521][T24694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5321'. [ 675.238362][T24703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5324'. [ 675.240204][T24694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5321'. [ 675.261083][T24694] netlink: 'syz.1.5321': attribute type 18 has an invalid length. [ 675.525965][T24721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5330'. [ 675.878521][T24745] netlink: 'syz.1.5333': attribute type 5 has an invalid length. [ 676.131070][T24754] netlink: 'syz.0.5340': attribute type 39 has an invalid length. [ 676.143885][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 676.353287][T24765] netlink: 'syz.2.5341': attribute type 13 has an invalid length. [ 676.513353][T24765] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.528258][T24765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 676.918716][T24795] bridge_slave_1: left allmulticast mode [ 676.930657][T24795] bridge_slave_1: left promiscuous mode [ 676.942947][T24795] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.001172][T24795] bridge_slave_0: left allmulticast mode [ 677.012508][T24795] bridge_slave_0: left promiscuous mode [ 677.023471][T24795] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.183867][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 677.249621][T24809] syzkaller0: entered promiscuous mode [ 677.274810][T24809] syzkaller0: entered allmulticast mode [ 677.342278][T24809] netlink: 'syz.2.5355': attribute type 1 has an invalid length. [ 677.356310][T24819] netlink: 'syz.1.5357': attribute type 1 has an invalid length. [ 677.500443][T24824] gretap3: entered promiscuous mode [ 677.540407][T24828] netlink: 'syz.4.5359': attribute type 33 has an invalid length. [ 677.553415][T24824] bond5: (slave gretap3): making interface the new active one [ 677.575450][T24824] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 677.609075][T24819] macvlan0: entered promiscuous mode [ 677.615425][T24819] macvlan0: entered allmulticast mode [ 677.621921][T24819] bond5: entered promiscuous mode [ 677.629562][T24819] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 677.639195][T24819] bond5: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 677.658181][T24819] bond5: left promiscuous mode [ 678.227434][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 678.389233][T24874] netlink: 'syz.2.5373': attribute type 3 has an invalid length. [ 679.273744][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 679.341187][T24911] __nla_validate_parse: 69 callbacks suppressed [ 679.341208][T24911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5379'. [ 679.407727][T24913] syzkaller1: entered promiscuous mode [ 679.416680][T24913] syzkaller1: entered allmulticast mode [ 679.662130][T24928] netlink: 'syz.4.5386': attribute type 3 has an invalid length. [ 679.988504][T24940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5389'. [ 680.281687][T24958] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5397'. [ 680.303904][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 680.347141][T24962] openvswitch: netlink: Flow key attr not present in new flow. [ 680.356914][T24959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5396'. [ 680.388617][T24962] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5398'. [ 680.594212][T24978] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5402'. [ 680.612926][T24980] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5402'. [ 680.622614][T24978] ip6gretap0: entered promiscuous mode [ 680.640288][T24978] ip6gretap0: entered allmulticast mode [ 680.780250][T24988] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 680.915048][T24994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.964229][T24994] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5407'. [ 681.129300][T25005] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5410'. [ 681.337385][T25005] tap0: tun_chr_ioctl cmd 1074025672 [ 681.343757][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 681.365429][T25005] tap0: ignored: set checksum disabled [ 681.902267][T25037] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5417'. [ 682.393917][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.058710][T25093] validate_nla: 1 callbacks suppressed [ 683.058735][T25093] netlink: 'syz.1.5435': attribute type 1 has an invalid length. [ 683.369513][T25111] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 683.423737][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.494927][T25117] tipc: Enabled bearer , priority 10 [ 683.862508][T25138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.368921][T25172] bridge_slave_0: entered promiscuous mode [ 684.463992][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 684.617997][ T5923] tipc: Node number set to 443236383 [ 685.259061][T25224] __nla_validate_parse: 13 callbacks suppressed [ 685.259085][T25224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5474'. [ 685.513796][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 685.797114][T25257] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5482'. [ 686.004789][T25266] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.5484'. [ 686.543908][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 686.688817][T25287] syzkaller1: entered promiscuous mode [ 686.714586][T25287] syzkaller1: entered allmulticast mode [ 687.121972][T25307] syzkaller1: entered promiscuous mode [ 687.138879][T25307] syzkaller1: entered allmulticast mode [ 687.171391][T25307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5499'. [ 687.326980][T25318] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 687.527749][T25326] openvswitch: netlink: Flow key attr not present in new flow. [ 687.583928][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 687.655315][T25334] syzkaller1: entered promiscuous mode [ 687.660954][T25334] syzkaller1: entered allmulticast mode [ 687.837577][T25345] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.5508'. [ 688.148482][T25361] netlink: 'syz.3.5512': attribute type 1 has an invalid length. [ 688.342552][T25372] netlink: 'syz.2.5514': attribute type 10 has an invalid length. [ 688.344079][T25370] netlink: 'syz.2.5514': attribute type 10 has an invalid length. [ 688.391929][T25372] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5514'. [ 688.437896][T25370] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5514'. [ 688.464907][T25372] batadv0: entered promiscuous mode [ 688.490591][T25372] batadv0: entered allmulticast mode [ 688.501857][T25372] bridge0: port 1(batadv0) entered blocking state [ 688.510056][T25372] bridge0: port 1(batadv0) entered disabled state [ 688.539923][T25372] bridge0: port 1(batadv0) entered blocking state [ 688.546598][T25372] bridge0: port 1(batadv0) entered forwarding state [ 688.589407][T25384] tipc: Enabling of bearer rejected, failed to enable media [ 688.624133][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 688.632195][T25385] syzkaller0: entered promiscuous mode [ 688.638547][T25385] syzkaller0: entered allmulticast mode [ 688.782592][ T3517] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 688.796892][ T3517] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 689.663762][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 689.781055][T25443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5534'. [ 689.792615][T25443] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5534'. [ 689.930670][T25455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5537'. [ 689.987428][T25462] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 690.021601][T25458] netlink: 'syz.4.5539': attribute type 11 has an invalid length. [ 690.176187][T25467] ip6tnl2: entered allmulticast mode [ 690.330138][T25475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5544'. [ 690.537920][T25487] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 690.566104][T25487] CPU: 1 UID: 0 PID: 25487 Comm: syz.3.5547 Not tainted syzkaller #0 PREEMPT(full) [ 690.566134][T25487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.566147][T25487] Call Trace: [ 690.566155][T25487] [ 690.566166][T25487] dump_stack_lvl+0x189/0x250 [ 690.566199][T25487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.566224][T25487] ? __pfx__printk+0x10/0x10 [ 690.566259][T25487] ? kernfs_path_from_node+0x2f/0x290 [ 690.566282][T25487] ? kernfs_path_from_node+0x250/0x290 [ 690.566302][T25487] ? kernfs_path_from_node+0x2f/0x290 [ 690.566330][T25487] sysfs_warn_dup+0x8e/0xa0 [ 690.566352][T25487] sysfs_do_create_link_sd+0xc0/0x110 [ 690.566378][T25487] device_add_class_symlinks+0x1cf/0x240 [ 690.566405][T25487] device_add+0x475/0xb50 [ 690.566431][T25487] wiphy_register+0x1ba6/0x28d0 [ 690.566482][T25487] ? __pfx_wiphy_register+0x10/0x10 [ 690.566508][T25487] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 690.566541][T25487] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 690.566585][T25487] ieee80211_register_hw+0x3425/0x4080 [ 690.566631][T25487] ? ieee80211_register_hw+0x1441/0x4080 [ 690.566664][T25487] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 690.566692][T25487] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 690.566730][T25487] ? __hrtimer_setup+0x187/0x210 [ 690.566748][T25487] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 690.566780][T25487] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 690.566844][T25487] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 690.566868][T25487] ? trace_kmalloc+0x1f/0xd0 [ 690.566891][T25487] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 690.566917][T25487] ? kstrndup+0xbf/0x160 [ 690.566952][T25487] hwsim_new_radio_nl+0xea4/0x1b10 [ 690.566983][T25487] ? __pfx___nla_validate_parse+0x10/0x10 [ 690.567033][T25487] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 690.567076][T25487] ? __nla_parse+0x40/0x60 [ 690.567121][T25487] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 690.567156][T25487] genl_family_rcv_msg_doit+0x215/0x300 [ 690.567189][T25487] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 690.567230][T25487] ? bpf_lsm_capable+0x9/0x20 [ 690.567255][T25487] ? security_capable+0x7e/0x2e0 [ 690.567293][T25487] genl_rcv_msg+0x60e/0x790 [ 690.567325][T25487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 690.567346][T25487] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 690.567392][T25487] netlink_rcv_skb+0x205/0x470 [ 690.567418][T25487] ? __lock_acquire+0xab9/0xd20 [ 690.567448][T25487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 690.567473][T25487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 690.567528][T25487] ? down_read+0x1ad/0x2e0 [ 690.567560][T25487] genl_rcv+0x28/0x40 [ 690.567579][T25487] netlink_unicast+0x82c/0x9e0 [ 690.567617][T25487] ? __pfx_netlink_unicast+0x10/0x10 [ 690.567646][T25487] ? netlink_sendmsg+0x642/0xb30 [ 690.567671][T25487] ? skb_put+0x11b/0x210 [ 690.567706][T25487] netlink_sendmsg+0x805/0xb30 [ 690.567747][T25487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.567779][T25487] ? aa_sock_msg_perm+0xf1/0x1d0 [ 690.567810][T25487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 690.567828][T25487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.567855][T25487] __sock_sendmsg+0x219/0x270 [ 690.567884][T25487] ____sys_sendmsg+0x505/0x830 [ 690.567911][T25487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 690.567943][T25487] ? import_iovec+0x74/0xa0 [ 690.567971][T25487] ___sys_sendmsg+0x21f/0x2a0 [ 690.567995][T25487] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.568060][T25487] ? __fget_files+0x2a/0x420 [ 690.568097][T25487] ? __fget_files+0x3a0/0x420 [ 690.568140][T25487] __x64_sys_sendmsg+0x19b/0x260 [ 690.568165][T25487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 690.568199][T25487] ? rcu_is_watching+0x15/0xb0 [ 690.568227][T25487] ? do_syscall_64+0xbe/0x3b0 [ 690.568259][T25487] do_syscall_64+0xfa/0x3b0 [ 690.568283][T25487] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.568309][T25487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.568328][T25487] ? clear_bhb_loop+0x60/0xb0 [ 690.568353][T25487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.568372][T25487] RIP: 0033:0x7fc2f9b8ebe9 [ 690.568391][T25487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.568408][T25487] RSP: 002b:00007fc2fa9a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.568431][T25487] RAX: ffffffffffffffda RBX: 00007fc2f9db5fa0 RCX: 00007fc2f9b8ebe9 [ 690.568446][T25487] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 690.568459][T25487] RBP: 00007fc2f9c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 690.568472][T25487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.568484][T25487] R13: 00007fc2f9db6038 R14: 00007fc2f9db5fa0 R15: 00007ffdb05430e8 [ 690.568520][T25487] [ 691.035164][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 691.081584][T25488] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 691.094206][T25488] CPU: 1 UID: 0 PID: 25488 Comm: syz.3.5547 Not tainted syzkaller #0 PREEMPT(full) [ 691.094237][T25488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 691.094249][T25488] Call Trace: [ 691.094257][T25488] [ 691.094265][T25488] dump_stack_lvl+0x189/0x250 [ 691.094301][T25488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.094326][T25488] ? __pfx__printk+0x10/0x10 [ 691.094362][T25488] ? kernfs_path_from_node+0x2f/0x290 [ 691.094385][T25488] ? kernfs_path_from_node+0x250/0x290 [ 691.094404][T25488] ? kernfs_path_from_node+0x2f/0x290 [ 691.094432][T25488] sysfs_warn_dup+0x8e/0xa0 [ 691.094455][T25488] sysfs_do_create_link_sd+0xc0/0x110 [ 691.094481][T25488] device_add_class_symlinks+0x1cf/0x240 [ 691.094508][T25488] device_add+0x475/0xb50 [ 691.094536][T25488] wiphy_register+0x1ba6/0x28d0 [ 691.094587][T25488] ? __pfx_wiphy_register+0x10/0x10 [ 691.094614][T25488] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 691.094647][T25488] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 691.094686][T25488] ieee80211_register_hw+0x3425/0x4080 [ 691.094731][T25488] ? ieee80211_register_hw+0x1441/0x4080 [ 691.094765][T25488] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 691.094793][T25488] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 691.094829][T25488] ? __hrtimer_setup+0x187/0x210 [ 691.094848][T25488] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 691.094881][T25488] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 691.094949][T25488] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 691.094973][T25488] ? trace_kmalloc+0x1f/0xd0 [ 691.094996][T25488] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 691.095023][T25488] ? kstrndup+0xbf/0x160 [ 691.095059][T25488] hwsim_new_radio_nl+0xea4/0x1b10 [ 691.095095][T25488] ? __pfx___nla_validate_parse+0x10/0x10 [ 691.095146][T25488] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 691.095196][T25488] ? __nla_parse+0x40/0x60 [ 691.095230][T25488] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 691.095267][T25488] genl_family_rcv_msg_doit+0x215/0x300 [ 691.095300][T25488] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 691.095341][T25488] ? bpf_lsm_capable+0x9/0x20 [ 691.095367][T25488] ? security_capable+0x7e/0x2e0 [ 691.095405][T25488] genl_rcv_msg+0x60e/0x790 [ 691.095436][T25488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 691.095458][T25488] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 691.095504][T25488] netlink_rcv_skb+0x205/0x470 [ 691.095530][T25488] ? __lock_acquire+0xab9/0xd20 [ 691.095560][T25488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 691.095585][T25488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 691.095641][T25488] ? down_read+0x1ad/0x2e0 [ 691.095674][T25488] genl_rcv+0x28/0x40 [ 691.095694][T25488] netlink_unicast+0x82c/0x9e0 [ 691.095733][T25488] ? __pfx_netlink_unicast+0x10/0x10 [ 691.095762][T25488] ? netlink_sendmsg+0x642/0xb30 [ 691.095788][T25488] ? skb_put+0x11b/0x210 [ 691.095824][T25488] netlink_sendmsg+0x805/0xb30 [ 691.095866][T25488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.095901][T25488] ? aa_sock_msg_perm+0xf1/0x1d0 [ 691.095935][T25488] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 691.095956][T25488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.095986][T25488] __sock_sendmsg+0x219/0x270 [ 691.096016][T25488] ____sys_sendmsg+0x505/0x830 [ 691.096046][T25488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 691.096088][T25488] ? import_iovec+0x74/0xa0 [ 691.096117][T25488] ___sys_sendmsg+0x21f/0x2a0 [ 691.096142][T25488] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.096215][T25488] ? __fget_files+0x2a/0x420 [ 691.096244][T25488] ? __fget_files+0x3a0/0x420 [ 691.096288][T25488] __x64_sys_sendmsg+0x19b/0x260 [ 691.096314][T25488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 691.096362][T25488] ? do_syscall_64+0xbe/0x3b0 [ 691.096397][T25488] do_syscall_64+0xfa/0x3b0 [ 691.096423][T25488] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.096449][T25488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.096469][T25488] ? clear_bhb_loop+0x60/0xb0 [ 691.096495][T25488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.096515][T25488] RIP: 0033:0x7fc2f9b8ebe9 [ 691.096534][T25488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.096553][T25488] RSP: 002b:00007fc2fa980038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.096576][T25488] RAX: ffffffffffffffda RBX: 00007fc2f9db6090 RCX: 00007fc2f9b8ebe9 [ 691.096591][T25488] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 691.096603][T25488] RBP: 00007fc2f9c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 691.096616][T25488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.096628][T25488] R13: 00007fc2f9db6128 R14: 00007fc2f9db6090 R15: 00007ffdb05430e8 [ 691.096666][T25488] [ 691.582417][T25506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.604103][T25507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.813221][T25510] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5551'. [ 692.022062][T25526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5556'. [ 692.029968][T25530] tipc: Enabled bearer , priority 0 [ 692.042312][T25530] syzkaller0: entered promiscuous mode [ 692.056275][T25530] syzkaller0: entered allmulticast mode [ 692.064423][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.064959][T24429] Bluetooth: hci0: command tx timeout [ 692.076921][T25530] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 692.133053][T25530] tipc: Resetting bearer [ 692.162128][T25529] tipc: Resetting bearer [ 692.167294][T25537] netlink: 'syz.1.5560': attribute type 1 has an invalid length. [ 692.176713][T25537] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5560'. [ 692.230071][T25529] tipc: Disabling bearer [ 692.341343][T25544] Bluetooth: MGMT ver 1.23 [ 693.104803][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 694.144305][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 694.175775][T25600] netlink: 'syz.2.5577': attribute type 15 has an invalid length. [ 694.192560][T25600] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5577'. [ 694.228405][T25600] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5577'. [ 694.503188][T25616] openvswitch: netlink: Unknown key attributes 2 [ 694.552417][T25619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5583'. [ 694.676305][T25625] netlink: 'syz.1.5585': attribute type 1 has an invalid length. [ 694.736421][T25622] syzkaller0: entered promiscuous mode [ 694.742347][T25622] syzkaller0: entered allmulticast mode [ 694.804869][T25621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5584'. [ 694.911169][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5590'. [ 694.984465][T25643] netlink: 'syz.2.5590': attribute type 7 has an invalid length. [ 695.193728][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 696.225232][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 697.092604][T25625] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 697.153245][T25643] : entered promiscuous mode [ 697.252424][T25648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5591'. [ 697.264503][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 697.531082][T25666] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 697.942777][T25691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5602'. [ 698.214696][T25712] tipc: Enabling of bearer rejected, failed to enable media [ 698.304399][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 698.471031][T25730] netlink: 'syz.0.5613': attribute type 1 has an invalid length. [ 698.473494][T25729] netlink: 'syz.3.5614': attribute type 9 has an invalid length. [ 698.497588][T25729] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.5614'. [ 698.553242][T25733] bond9 (unregistering): Released all slaves [ 698.709819][T25730] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 698.951430][T25758] netlink: 'syz.0.5620': attribute type 10 has an invalid length. [ 698.964640][T25756] netlink: 'syz.1.5618': attribute type 1 has an invalid length. [ 698.978197][T25756] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5618'. [ 699.046002][T25765] sctp: [Deprecated]: syz.4.5621 (pid 25765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 699.046002][T25765] Use struct sctp_sack_info instead [ 699.054146][T25758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5620'. [ 699.099305][T25762] can: request_module (can-proto-0) failed. [ 699.210936][T25773] netlink: zone id is out of range [ 699.220961][T25774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5623'. [ 699.243846][T25775] netlink: 'syz.1.5624': attribute type 19 has an invalid length. [ 699.265236][T25774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5623'. [ 699.353862][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 699.519622][T25789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5629'. [ 699.563563][T25791] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 699.657237][T25795] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5630'. [ 699.669109][T25792] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5627'. [ 699.877726][T25805] [ 699.880122][T25805] ====================================================== [ 699.887154][T25805] WARNING: possible circular locking dependency detected [ 699.894266][T25805] syzkaller #0 Not tainted [ 699.898680][T25805] ------------------------------------------------------ [ 699.905712][T25805] syz.4.5633/25805 is trying to acquire lock: [ 699.912054][T25805] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 699.921304][T25805] [ 699.921304][T25805] but task is already holding lock: [ 699.928686][T25805] ffff88801ff4db70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 699.938020][T25805] [ 699.938020][T25805] which lock already depends on the new lock. [ 699.938020][T25805] [ 699.948457][T25805] [ 699.948457][T25805] the existing dependency chain (in reverse order) is: [ 699.957472][T25805] [ 699.957472][T25805] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 699.965478][T25805] lock_acquire+0x120/0x360 [ 699.970514][T25805] _raw_spin_lock_bh+0x36/0x50 [ 699.975806][T25805] nr_rt_device_down+0x12a/0x720 [ 699.981282][T25805] nr_device_event+0x137/0x150 [ 699.986596][T25805] notifier_call_chain+0x1b3/0x3e0 [ 699.992231][T25805] netif_close_many+0x29c/0x410 [ 699.997722][T25805] netif_close+0x158/0x210 [ 700.002666][T25805] dev_close+0x10a/0x220 [ 700.007442][T25805] bpq_device_event+0x377/0x6a0 [ 700.012830][T25805] notifier_call_chain+0x1b3/0x3e0 [ 700.018485][T25805] netif_close_many+0x29c/0x410 [ 700.023907][T25805] netif_close+0x158/0x210 [ 700.028880][T25805] dev_close+0x10a/0x220 [ 700.033682][T25805] bond_setup_by_slave+0x5f/0x3f0 [ 700.039268][T25805] bond_enslave+0x7a0/0x3a20 [ 700.044398][T25805] bond_do_ioctl+0x635/0x9b0 [ 700.049538][T25805] bond_siocdevprivate+0x17e/0x350 [ 700.055272][T25805] dev_ifsioc+0xb57/0xf00 [ 700.060140][T25805] dev_ioctl+0x84c/0x1150 [ 700.064994][T25805] sock_ioctl+0x719/0x790 [ 700.069938][T25805] __se_sys_ioctl+0xfc/0x170 [ 700.075070][T25805] do_syscall_64+0xfa/0x3b0 [ 700.080105][T25805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.086521][T25805] [ 700.086521][T25805] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 700.094351][T25805] lock_acquire+0x120/0x360 [ 700.099389][T25805] _raw_spin_lock_bh+0x36/0x50 [ 700.104680][T25805] nr_rt_device_down+0xa9/0x720 [ 700.110053][T25805] nr_device_event+0x137/0x150 [ 700.115514][T25805] notifier_call_chain+0x1b3/0x3e0 [ 700.121148][T25805] netif_close_many+0x29c/0x410 [ 700.126611][T25805] netif_close+0x158/0x210 [ 700.131672][T25805] dev_close+0x10a/0x220 [ 700.136464][T25805] bpq_device_event+0x377/0x6a0 [ 700.141862][T25805] notifier_call_chain+0x1b3/0x3e0 [ 700.147617][T25805] netif_close_many+0x29c/0x410 [ 700.153094][T25805] netif_close+0x158/0x210 [ 700.158216][T25805] dev_close+0x10a/0x220 [ 700.162989][T25805] bond_setup_by_slave+0x5f/0x3f0 [ 700.168544][T25805] bond_enslave+0x7a0/0x3a20 [ 700.173673][T25805] bond_do_ioctl+0x635/0x9b0 [ 700.178807][T25805] bond_siocdevprivate+0x17e/0x350 [ 700.184452][T25805] dev_ifsioc+0xb57/0xf00 [ 700.189320][T25805] dev_ioctl+0x84c/0x1150 [ 700.194311][T25805] sock_ioctl+0x719/0x790 [ 700.199803][T25805] __se_sys_ioctl+0xfc/0x170 [ 700.205296][T25805] do_syscall_64+0xfa/0x3b0 [ 700.210357][T25805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.216793][T25805] [ 700.216793][T25805] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 700.224975][T25805] validate_chain+0xb9b/0x2140 [ 700.230363][T25805] __lock_acquire+0xab9/0xd20 [ 700.235586][T25805] lock_acquire+0x120/0x360 [ 700.240624][T25805] _raw_spin_lock_bh+0x36/0x50 [ 700.245917][T25805] nr_rt_ioctl+0x390/0xd50 [ 700.251317][T25805] sock_do_ioctl+0xd9/0x300 [ 700.256343][T25805] sock_ioctl+0x576/0x790 [ 700.261197][T25805] __se_sys_ioctl+0xfc/0x170 [ 700.266359][T25805] do_syscall_64+0xfa/0x3b0 [ 700.271394][T25805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.277817][T25805] [ 700.277817][T25805] other info that might help us debug this: [ 700.277817][T25805] [ 700.288221][T25805] Chain exists of: [ 700.288221][T25805] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 700.288221][T25805] [ 700.302133][T25805] Possible unsafe locking scenario: [ 700.302133][T25805] [ 700.309584][T25805] CPU0 CPU1 [ 700.314956][T25805] ---- ---- [ 700.320418][T25805] lock(&nr_node->node_lock); [ 700.325446][T25805] lock(nr_node_list_lock); [ 700.332566][T25805] lock(&nr_node->node_lock); [ 700.339945][T25805] lock(nr_neigh_list_lock); [ 700.344625][T25805] [ 700.344625][T25805] *** DEADLOCK *** [ 700.344625][T25805] [ 700.352852][T25805] 2 locks held by syz.4.5633/25805: [ 700.358046][T25805] #0: ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 700.368125][T25805] #1: ffff88801ff4db70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 700.377892][T25805] [ 700.377892][T25805] stack backtrace: [ 700.383904][T25805] CPU: 1 UID: 0 PID: 25805 Comm: syz.4.5633 Not tainted syzkaller #0 PREEMPT(full) [ 700.383935][T25805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 700.383948][T25805] Call Trace: [ 700.383956][T25805] [ 700.383964][T25805] dump_stack_lvl+0x189/0x250 [ 700.383995][T25805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.384018][T25805] ? __pfx__printk+0x10/0x10 [ 700.384043][T25805] ? stack_trace_save+0x9c/0xe0 [ 700.384072][T25805] print_circular_bug+0x2ee/0x310 [ 700.384095][T25805] check_noncircular+0x134/0x160 [ 700.384119][T25805] validate_chain+0xb9b/0x2140 [ 700.384152][T25805] __lock_acquire+0xab9/0xd20 [ 700.384184][T25805] ? nr_rt_ioctl+0x390/0xd50 [ 700.384205][T25805] lock_acquire+0x120/0x360 [ 700.384232][T25805] ? nr_rt_ioctl+0x390/0xd50 [ 700.384255][T25805] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 700.384281][T25805] ? nr_rt_ioctl+0x390/0xd50 [ 700.384302][T25805] _raw_spin_lock_bh+0x36/0x50 [ 700.384325][T25805] ? nr_rt_ioctl+0x390/0xd50 [ 700.384345][T25805] nr_rt_ioctl+0x390/0xd50 [ 700.384374][T25805] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 700.384403][T25805] ? apparmor_capable+0x137/0x1b0 [ 700.384431][T25805] ? capable+0x89/0xe0 [ 700.384450][T25805] ? nr_ioctl+0x1b1/0x3b0 [ 700.384470][T25805] sock_do_ioctl+0xd9/0x300 [ 700.384493][T25805] ? __pfx_sock_do_ioctl+0x10/0x10 [ 700.384510][T25805] ? __lock_acquire+0xab9/0xd20 [ 700.384539][T25805] sock_ioctl+0x576/0x790 [ 700.384557][T25805] ? __pfx_sock_ioctl+0x10/0x10 [ 700.384575][T25805] ? __fget_files+0x2a/0x420 [ 700.384599][T25805] ? __fget_files+0x3a0/0x420 [ 700.384622][T25805] ? __fget_files+0x2a/0x420 [ 700.384741][T25805] ? bpf_lsm_file_ioctl+0x9/0x20 [ 700.384763][T25805] ? __pfx_sock_ioctl+0x10/0x10 [ 700.384782][T25805] __se_sys_ioctl+0xfc/0x170 [ 700.384803][T25805] do_syscall_64+0xfa/0x3b0 [ 700.384826][T25805] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.384848][T25805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.384864][T25805] ? clear_bhb_loop+0x60/0xb0 [ 700.384882][T25805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.384898][T25805] RIP: 0033:0x7f3dd4f8ebe9 [ 700.384914][T25805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.384930][T25805] RSP: 002b:00007f3dd5de1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 700.384957][T25805] RAX: ffffffffffffffda RBX: 00007f3dd51b5fa0 RCX: 00007f3dd4f8ebe9 [ 700.384970][T25805] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 700.384981][T25805] RBP: 00007f3dd5011e19 R08: 0000000000000000 R09: 0000000000000000 [ 700.384991][T25805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.385001][T25805] R13: 00007f3dd51b6038 R14: 00007f3dd51b5fa0 R15: 00007ffef734b3b8 [ 700.385020][T25805] [ 700.661507][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 701.663752][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 702.704147][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 703.743766][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 704.784226][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 705.833760][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 706.874170][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 707.903773][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 708.944229][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available