last executing test programs: 4.327023277s ago: executing program 0 (id=5141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x1000, @empty, 0xe}}, 0x6, 0xa}, 0x90) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a80)=@newtaction={0x8c, 0x30, 0x200, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f00000000c0)="4b0003000000", 0x6) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4a}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x400, 0x70bd6d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008050}, 0x40004) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x91) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r11, 0x6, 0x1b, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4.261522284s ago: executing program 2 (id=5142): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000010300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.58963932s ago: executing program 4 (id=5146): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x16, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="e1af822f"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffefa, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b000000000000000000"]}, @nested={0x11e, 0x0, 0x0, 0x1, [@typed={0xdd, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) 1.589290171s ago: executing program 2 (id=5147): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000ea0000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 1.430560277s ago: executing program 0 (id=5149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_IE={0xb, 0x2a, [@ibss={0x6, 0x2, 0x180}, @dsss={0x3, 0x1, 0xe2}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x14048804) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe8, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xe8c5f3f706d9b1b2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1b}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7d}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x8840) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x21c, r1, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="76d988644b14"}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x7ff}]}, @NL80211_ATTR_IE={0x1d0, 0x2a, [@perr={0x84, 0xfc, {0xe, 0x10, [{{}, @broadcast, 0x1, @void, 0x12}, {{}, @device_b, 0x6, @void, 0x1a}, {{0x0, 0x1}, @broadcast, 0xfff, @value, 0x3a}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x3a}, {{}, @device_b, 0xfff, @void, 0x39}, {{0x0, 0x1}, @broadcast, 0xffffffc0, @value=@device_b, 0x9}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x37}, {{0x0, 0x1}, @device_b, 0x1f7, @value=@device_b, 0x23}, {{0x0, 0x1}, @device_a, 0x960b, @value=@broadcast, 0x28}, {{}, @broadcast, 0x32a3, @void, 0x25}, {{}, @device_b, 0x8, @void, 0x40}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x20}, {{}, @device_a, 0x7, @void, 0x30}, {{}, @broadcast, 0x3, @void, 0x36}, {{}, @broadcast, 0xde57, @void, 0x36}, {{}, @broadcast, 0x8, @void, 0xc}]}}, @fast_bss_trans={0x37, 0xcc, {0x6, 0x4, "dc4c404b0a3d4d85e24589e662069bfd", "38bc396ed51ffb9789deaf1ed150684693461b3e5fec8d391ff40ff0c0aba0a2", "454608063fad9bd14ec69761052a23b86daa9e189998903aba5b319834ea5ea4", [{0x1, 0x19, "e7ea49649c81e929f8046df3ceafc688e712b7e24b3dfaa411"}, {0x4, 0x12, "c44999d6b6f673be8250a7cf9265a00a25d2"}, {0x3, 0x27, "174c33b8115f88da2d0a4aa15561f52979e79ed9c91a8b061c28faa85cb332713e402d0b02c7ff"}, {0x4, 0x20, "66e73a11e1e517c8ac560f3ec1e9dc1439c19bd95ffa098113da0df742dcca5a"}]}}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x200}]}, 0x21c}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r3, 0x0, 0xe8, 0x1000, &(0x7f0000000700)="d0ed0d0a89d8d70cdc911fea696c993d64f988611faf2480389ced9f85b3511ce41f3cb70de0499084b95d1921922c670a712d5874feeeac5464654d4f7322bee36fc3957be166ced2ff5bfdbb976a787f4378b8e0418a8e3ff0e2c3081e7b6732e0c3327c27f17a92deaf8ffd26529a36c13c6604a8366603f7b9d583c09e2c430cf87dee379a83778d1a90f6ff38ad2eac641dd72cd3def94f969051b6755cb345e80fbcf3ebc01c4d2cdcbf187f96ae4aee218766335bd0d9d00cd6abb76a40fd17e71192337aff9c4ec2cfd4ff972ca1710aa4c4d0edc7d05f8acb5c0b2e13e855c78f667e85", &(0x7f0000000800)=""/4096, 0xe, 0x0, 0xa5, 0xd5, &(0x7f0000001800)="5ad580f20313d8c6e889112285c5e32008c02ff0df458396244a075983cd62500bc195107ab1b01b81f34a485c3549f1a7b2f63fbe97897ad8a4a8600da5cbdc59f24f0bd6cac16458cf2efdb5d0098e5d9f21a61afe027de6e8045c793ea15bc9663f0a1a68e73ab336db8bf8552b630145dd0c7768e8e631fced2b2ebbc7d5e95e722f7437ef8f90ba2613a12137093ea06d7fffdaaeb0494142efd3129f5d1df85c6dc2", &(0x7f00000018c0)="8de6d5ea6246f997d6e98c5bb92759e031a6186a862c2d86e8860d76c6397526841ccbb108ed8a1b2c8a2d3281b55571df92a0669f19bb0107777a6d8ce082668a7b2a0fd6ee8b4e1ede856cc627ca680bdf37192556c41f223ec2cbaa158da491db39dfec584d6454a0a013ab1a62200d422ee4bbb2b8af59c4f279bbb2e6bab19058c81d67812e32d2de69942584cd3e4e02cdac517b9f37ca18eda12e9dde9e7b62f4f6987df47715424ef514fbda584aa2dc048a987eb31031e0466b99652339d0d44987482a34a0731c9b395251a64c743f84", 0x2, 0x0, 0x2}, 0x50) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x54, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x79}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x8}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x420}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20040080) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000001bc0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000001b80), {[{{@arp={@private=0xa010102, @remote, 0xff, 0xffffff00, 0x4, 0x7, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, {[0xff, 0xff, 0xff]}}, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0xa2, 'veth0_to_hsr\x00', 'veth1\x00', {0xff}, {}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010101, @multicast1, 0x4, 0x1}}}, {{@arp={@remote, @remote, 0xff, 0x0, 0x7, 0x9, {@mac=@random="0974d6440559", {[0xff, 0xff, 0xff]}}, {@mac=@random="7bfe5e3bad8c", {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x8, 0x7, 0x29d8, 0x3c6, 0xfffc, 0xd7f, 'pimreg0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x81}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @local, @dev={0xac, 0x14, 0x14, 0x12}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0xf206c02aba3aa5f9}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x48010) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x200c0}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x68, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000014) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x28, 0x0, 0xb, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0xa, 0x1, 'rose0\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x28}}, 0x44000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002400)={0xb0, r1, 0x300, 0x101, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x75, 0x115, "3f36bea4863594f11e46b1dbd4eaa453fb77a2ee41701170e8b3300a62a361cf389d40216ee3b4272f624e471f0454cd0dbf28cfea19f26430224e2ff87197d5f2013b1e8dca27d81f8bcdd11664978b71f40d3638f3cd257501531ebe50457b6d3e72967fd2a54142c7ee6376443be074"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac09, 0x8]}], @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xb0}}, 0x40000c0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x64, r1, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7, 0x1, "33033b"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xa4}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x401}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x44085}, 0x4801) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f00000026c0)={0xf, 0x10001, 0x5, 0xc, 0x8, 0x81}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002740), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000002940)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002780)={0x154, r9, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8029}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x779}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}}}}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x433}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f00000029c0)={0xa8, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xdc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x93d}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20008040}, 0x40040) (async, rerun: 32) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b00), r0) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x64, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x48081}, 0x814) (async, rerun: 32) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000002c80), &(0x7f0000002cc0)=0xc) (rerun: 32) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000002f00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002d40)={0x148, r11, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff801}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26ee}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4050}, 0x2000c800) 1.297634475s ago: executing program 4 (id=5150): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) write$tun(0xffffffffffffffff, 0x0, 0xfdef) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000004000000000000fe8000000000000000000000000000aa87"], 0x0) 1.285491142s ago: executing program 1 (id=5151): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 1.240374859s ago: executing program 3 (id=5152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYBLOB="000219bd7000fbdb", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0a00060008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000000000a001a000802"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40080) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[], 0x80}, 0x1, 0xba01}, 0x4000810) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRESHEX=r0, @ANYRES8=r4, @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) accept$alg(r5, 0x0, 0x0) 1.048005749s ago: executing program 0 (id=5153): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x1, 0x840000000000a132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110880000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x10001}, 0x10}, 0x94) 1.044525593s ago: executing program 2 (id=5154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000010a9f0200"], 0x40}, 0x1, 0x0, 0x0, 0x24040844}, 0x40844) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb66514b1c5e45ff1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001000000522df19f34c9a2bf94a4ed9d958c817fb033bba0a04968537a6cbb63a056e5eb3562092976e1b8d533751f2107adba1c0c6861d1cc9e94800857aaec12f178d49397246fe6a921efa234a6b6", @ANYRES32=r2, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32], 0x48}}], 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001200)={0x60000010}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000300)={0x10000000}) epoll_pwait(r5, &(0x7f0000000280)=[{}, {}], 0x2, 0x7, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRES16=r3], 0x6c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0xc0a46000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000002340)={0x0, 0x3, 0x6, 0x9, 0xc, 0x0, 0x3, 0x0, {0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4800000, 0x0, 0x0, 0x100, 0x1ff}}, &(0x7f0000002400)=0xb0) sendmmsg$inet_sctp(r1, &(0x7f0000002540)=[{&(0x7f00000005c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000001240)="4890a677981cef2993af1ac4594dfc96f43df21c79b0134533dca95c39478e34abe7aed1d24090adf27cd9abd04ff81586f4d5a39b484c93d676388b03a8aff889f10e934daa7e2bf1a59bd97c77ef904efb54f9d1e909548b2f1660a5cb7c0687e55723eed25001b71cc6adad3d85d1a4b2a78113c74a9289c0e7558c74f39f0681ee55645bcb24452e5cb8e2adf167369350a3f30687a5033e567b6998091062ac0f8f72177355c92077b2f24526f19d73936f46e93c3991222074dc8437a49f92e16247c111b5e8a96a97eae20ac13e8de229d91f88c6893ff90640920670280bf0fce412ae45e9785e01f68476b6a57b51f1c75051febf71789975d9eb80289f445c5f2f860a2b4f68715262bee472c808efd7c41b05b1ecd14189162bf425897cb699502ac7ec0cbc741ade794f37e8cb221fd3d82f16a638fa4033191f217c332b5f781e6712ce693b107aca5d354e8d85db1d0602b8e4aaefa44267381a1d3bd032b66c3f4c16911525f3fb2b947bdba69352261423a87a42a7c6f759d90747ae9391c28bc87e52a27b8254f978100c15fe401cdeb664dfb812881c48a8eb763715101d476551733a2eaf7d237c59a51575a6ecace4acdab886a2dcbe493cf061f4f6c92bd4356bf5d6763f38554e2656e5bbfbe746aef9fe029e226e2cab1da9315609cf0aa9fa6ef6906d0716fa36d74ab87250f75877642b1011c54e59a7e2b42dae9159ee9caf6017967309af17a4d71e05b99916e3c61256e14d2bda5aee14b2ffda6a94a4b03dc1688c704643b9f9b604d6e088e776530044c6f8c367da58186f96c9203cca606e90a3572db4a93443400892dca8a9abcb3213eddcc625a1ca469ab1d3a8033da0d85c750d39b58045fc9f1cf673cb5cb328a713424caee623ff1991fd544a92a0dc7e4dafaae2f6df249902010a554a2b7adeea87a35ac07c6b0e84513e5b3001186b43fde448211e65a8777cb21905aab50509d37c93e8c5a7a3c8ab5a87f50c748070f1bd03293f8952ecbb8bf769ca1545b943a48bb1b1df4115a266dbabf40658017d4e11b0b8fb0c0e6124630700a1cfb32689a9eebd0d3b706f0b69aa5101ae38e1c9edccf16740b47963783398bc3506ea115e65e8d4ed6304aecea81d1720db0e04330d9c788919639ae54343319098614327cca7fbee4e3e8adefacab7e94149b52e2aaa162f0741b9b2a44beeb9439b8a14d8bb4d6c57fb4dfa0b69afa4dbf5cb9eeabdd0f8878214311a6895fde5f2c4d206ab0de8abd86b8da9d6025f8fdf656c81be5216c0caf7957eacbffefa80da0a5b144736676c3d1ad01588b02c780d7e77c67e24f22e40e29d983a33887fce16fe8d5eb2bf0891d70d01d64a80e4790fe60fdacb4b42ed014eed654e88b89f5194ebcb52d13e5d0679bec38e55c559a2cbce9096a5f55b7963c73cae4478b46322cd00615e829b521285241d28593cfe50da69f1e84a27910b86104bea2943bee4961d3b761f6e3aef73d011842c41f71a61cf1b9b5d02b16dcb8b43ccf9b7358a166c833214d29075b04b488ace388ddf3ef7f346c6a3b6ee0c8f0543e82c6a5cd93c701ea4f01ac93abef8685a3f6132dd75e7823bc16050edb7db7f36e4e050ea983a8c2b3251f382f4054328abbd880a81ed71934ebe8eee9cfb23f7b9bd84f1551c36fc9557030e4f162baf2a0f4d9b1cd9130f15e9e50329758cf39eae49bd602ff79a327d8375f4af41c1344e5cfb2d7aa932d4ee8b35a8ea8dcd926033e6286cc8a08d7fa12a6cb3fd339b9631b984cd54db93a831f49cae15f920191e37dc14e7e3518c7a7c3380ac29c0d682877677dd109ca1fdc88a2df0a5ec24c4f77e329c42d21d9e7f07813da82c6cfd6ee809f70116d80404b88a5528b8f2a8faa2e5bd0239ada573248dc01a0a67ee85237be45677da911680fe6f1378274bed7a6762512f4e08f0bac8e70dd6f95bc419f0ea811c24b28670c5e379b9a54907cbd8eb310a6a7d670e92e98369f17dc973b29e2611769524128d678750776584f9d02bfb71498845d7de44d826e4689b205d5df0af39a3f2c893b2b5c303ca9b0774d4610a215295a8056b5891886c19b5e7b20ccc4de51873daa106933afa69e4d95314c07dc48e9538c9f239141f86fde836c0360b2c61296633d73df6aa78efec3991f564bebaa4c926237797e09d5bcf4328c6ee24b4b0bb007a40bf64e13a35806fe7a9a2d4120b126ab4d3339fc3c9758a43200a03cd9039ddf9c157c8c1ba4755079097c7930e50aeca83c1399048da197b9c75e2226805757e2c35eee781fe7fa98a5fb533a858ab12c802b5df62b28ae33bd5183ca5f12acbbb8f7800901059bb0c978297f4f22471d30719226735eee3773509abda8ca1b8f308ea4ca5c670b78626e16d9c5b9f142fb65c773f96cfb26055184b1bc7714382bda40b3e014e0a787461ea31eef217f6e13f828aaf96c15a0f0a70273b4f39e27304544113e55ebfcfda1eb7034dc41b457b56556da2d34f6c6189b82f83b0be0575a233e5cb18391a7b7754155ee68b92c75103fc4f7adb67e82f31bcc4d2c15440cd536976a549641964f27d34c99cba925be368545d73de4bbea0d8a5cae8b95c0b8b6a030ae54b76b6cbc4d5732b7bdb961595dbfd39843375a90770c8e9ba9d4d772c2ba5f619a863ce91c64c01b4ab66c5919a21a753eae2244e45d0d7bf80e87ca485a781bbdc99794e1e96c92a7882f7912631bf10500dec1daa1619cdaafee06a6f9b88eb5a976bf59609a6792b6630fc3e4a489da6e0ddb0d3c7601d30c4da91c61eba5010e032289e6a9e47d794f6bf1e72bcffe527cdaaa79860fdac186ebcba013fc21e9d5aaaa440b6abe6b7f268245bf4e4e167853e53c5299f3e4b8251dfeb5c95433fce915567185926d200249404bb2ce30f2a0ad961b026993b26640671cd700fed9b894e4d3edb0a287f5f36c38b62d8f406f8106fc3069e6baff829d222017383889212b9ea6eb644414ca00f364774ddeaa202cb1da36ac8d0a78b3fbcf328fc9ccc7f07a886166c919ff21acaaaca646348d185b0e2efe1e6347944c47b66f5f48e03180476834a5d06e8a5b185896dd25647dfed91eb32c94d99b6c887a45f5d9be82dd8525df3d9f9e50b116b0dc29de174c33e9560ac64b0a5c9aafdd14f3889c29bca15fc9277647501f3d28db6d15cf459f9174867a44f7b2a0a3f96d919f11c7b9f7a20144e5c9f3137496df929fc639848a0f88c7d6320ab82d5527ec32553837b85177ee252033f4174e05f073fd4d825bc6564d44e2e0d791d1614fd1c21cf42f0a924ebbd266180d8e13728eac231c0432f4b3c64bdf69265808ff753bd2cb53e5df4d951cb783e838b2cb30b42d0bf5f11ea2a0d64da29b2bec8f348888d5de5f56ec4202266a7a4235ab9609e415ce95369d607453c7fe40fbce197116e40423ed24a3b92ec230f3a06cd9959ebd260820eb46111cef0283b5431a8c9735ac92801c8a54bd33bfcfd4d67ce64d1e875a0d51f059edb25b9cedb54632d7577eafc263effd24c1c94e0f59e7d5a995b4afe7937fc0bf6bcd06b0604f0f2bd8371993ff9cb803a3b5b4c83f7c30835494a78007ebdf8281d91e0d9eec0050a1274072889bbad684928b52f2e97ecb3a1ac4af110a870bd9052541287a5a9731ffd505b24f3c1eb0c5e44e4bfa5b482ccef0818e0a5be65249f753ce2cd2b79dca7fa22b461bfb1da74cd05cd4b19e6ccf48adf45b83d270d82c359be08735a29e631110ebe121f060cc1e8d3ccaa39b3f7201cd2cb91f0d7b691bee308addd1c6612d2c80dcad09e57d815b5f107d475dfaeedcb730db4ee9793c398df53435a88a5c35a55704715640526f63373e716c591f9a853e407c764f99919e6d50d58fee2327512206986ef1e312326e9de5766cce35ab74396c88289d484a1955e10de955b7f1fa1bd7b463d3e5d4ccfe04e6fa4638d928249c2dfbaaa1fdff1e088a73d52f963c90a932a547eba628343a072206bd92f8457661a78edb9f133b6c99e3fc15585a964901d08266e7bffa38a6765f5aa9f1ecb2aa3385dd6db2054fced0356757fd7f5af91989f384565741ad4347785d40d41872df3912a20ce956ce3726c3249f87e9ceee1ca9992e198168f4a065f3dcb8b3d1d21bf04f49bed295d1c0bd9f82c11c8b8eebaa9a6396e204bb24f3786035d361ee6d069721ebc13d2d3873e97ec4b3879c346cedbaf13a26b73cfd1bf2f99fad42df86e7fc1d1cc0b335619cbba8caceabeb2fab82732f7ab67b939ba4e9f4d95acffc9359529209639161eeda467a60389566edd8d67bf92ed4abc91ee92e5b79a6fe627bf2aaa77706c08d865bd45bf2d217884b0d956297c5d57983feec46105a9e1e8d8fa2d9c985f6bab7ca1ec4710176a138a8e01c71776bd617c6634fc240d166139831524a75ec12bda5a2677272f21de11699e75ed81136da7f486906b865f3d5077e821fdbd33333d566a3c5c212817d36f41b7d58314a30789d1f00069704306019667ea6ff92029d8e98101e064b97768dc3275fcb1975e50b03ef4d087d41f16151b6e67b0f738ded10424b31b8259eab09eb219407bbefacefcd2814f4235d9f9d47c828de3df36a6bbbc01c419b975c9ed270621aabb91433da9a1bba89544990a7e30c7048becf625ab61f1d0090a08cf83048a2ba292fe3ac62236c221e7f06456489f2dd803f7eadd91a35a0fd6f03b7019bfeddf2c213e5946084e9108d8395bf16f7701c6dee29329d0cbc63061fa7ff316af424424751b94b800719b6d962397965f1ef8ac723a815ae64187f2b98735f043749c3ae122460e12bf9911dcc8e7e5dc783b1edb0e26e9e381f0ea098dd7ecb88ba470e32915135bcd9d0d80782b08be0797a7d9176fe56fe69069fb5d940e18ec537b22dfd8bb840d7455e088ea7c898d0de249de2d16ed483aeb4a92f33bbd39bf0bc5954ed4ea17c6ce230ae46239fa5ae8afc76b1430db4c6844dbdcc0596e1c53c87ac1f66006e2d2e5f900fe4dbc834931f75248f516b5904b59b6b6ca62c20bddf514d40f8d1ddddc57c29b7777da0bc18195fde6d5c45364332707cfc7d3d725e24c10642cdce1249289e57a798b17e0f153ff308089b43ff395acbd174e5b8ae15c5e65f4e7c69a109de0bb16e848adcc8a724567302d5be0e02884f204af46e221a81911ebff6326900d5601ba5c67039acabfeb16c38d391f8025cb3c9c2484f00ec1ddaf8d8368f982685977eb81fa94289deacf6425f7368c84243b93cbe72dd11ef2fcb510591ec0e87212cba25100b6cceeabe943629c58247d149e4dd03d6a6664315be807c6267913a3fb68e7be66a85a597da4a71f8769c2cb4be91937ae1a3171b453b3d5fce932589e55a8df7b6dc8e31548e2aa985d9e6dc23e017f27680b2cd0feb309adeea834c62f9011972efa3ebb8ff5983e5a7245d7de43d0d833bfce99cfe6c10ae7056d8f9426a766c9daf5c9092ab333a00bbcc9c081adfb94741a933370ba9a37aa0d7406ecd22d6870fdb6499f9bc9834d14230ecf024c932d589583a3800d0187e9ee8dd8857cb7ef02276f7de57eec8323f9b5ae0be95cc8c3501e7fa89782ebaa1e304d54bbd5f13fa90c777fa8c5ad7dec0716b3949a38586588bc8e95ab7dd1aece4d411413a6e5b63c464a613585acf4ede960127666ff88b12b4779d0609cefac74b921eb574f3ae9c0f47eb11d8487247dfa19344568d9f5cfafdd8f0169a56259fea7", 0x1000}, {&(0x7f0000002980)="6d11e8c1ede83dae7a7d2d646388e11ec39d325f33266a80b6a06b186c70a2f77663f1efc7e6adb3f95c7e65fbaef4c962c67457d138b55af59e4a5801b380281374aca61b7903593609561d076cacacdbc20a2901f02455edc113caa211490466ece92784fcf9b5eb6a1bc1e2ba854dd90e0b3b12405d59d6a4a4cde8215880bcc8abab4fd4d45f0fd1dae8eaa893d126baf96260f7789a03eb09ad3c6ae57c0343b42b66afd14735008cabbaafbcb8d9b9aa583abfaef52ab89188f9fccb66b34668e41288af2d1790f0f55b25ffa549dccd53a163efe114f788b41ffe8d298dc1d1ab6c450dfdc0739c827bfe9be4d3a2e2425cd728090682b9a6970403aa8dd12c5c3402ca95358d902a1c999260abc72fa8aa5ffb0851cb7ee4305234cb61253a8b84b13a08ce86ded67ed1a1fee07e291868db8aa91be01ae40d5508716d09e6fbc1940401440ed6f9723325347bc649a8904dd1a2afdee9d18ad050c1f4be6da286a05de694ef403b33ae3e1a0219f696162d30c0e57c7bb2efddf941dccea649968486343719757c01a8f0f150a38ab592554263f3367840b2c49e5dda516d2d036bb4425b85980441b08478af74fe4e6210bc454d21d3b9132aad7301795574db88d3d104fabbdd1c265460ea57c675e59a729ebaef156dad4b272615c6c24b402486e897c2037110e7c2dd480c6a692d58ef2b2d0dc857586d3d44f14a218a080a5515101c354d41d05c6832495fc107b1d3786382cea43dc37f489df11191dd2f0ceff63a2c915b9652bc7d8c6db45ce44e29b54240ffc2d621dce7a072a8c9866011ce99da341952bde2673cb9c38bc2fea9649e0c7d8e1dcd924564883791cdfb4b1fdd424c596cee135f271da1c9f1201486ff07adabd5a5b47df408bd7cc4e1291c63e17661e3a65b08502678824bdf7bd38171762f81d10366fc4aa52e96af786d495380ad5e717a1fe47a6f1d27c1a2036e4f3b168bb5ea65989b834b5cc6a8af69e2b573997787820db468b439e2a975a8c8a4ff74a7112895021549b9fa816f95d80016411d4ee10f292243b9bf8ad4a0703fdbf664c521fc38d018fe9f242bb9b98207142517fe9ca25c49b6ff80cea1a42e490c3710ae9a2d724ab7deeb0854782aca3c69c8246a45b3f4cd1120e77eee4b90e8c0df7e4f38daf969e10e9d51c5bcfe5dbbf47ecae2ce80f2906694874072391cfd4bb39399edc655573336f5c82917207e7959740c32978cd64c179ec2739f8e384f3999b3a15203faef9a65d6867f4dd48532a70c7198066dfd093748eecb69551364ee4ce70c864d2489a97ae4a954b54dcaafa5daf3ff385e57561bde50fd2065388d87000f7b0e559244a982e955a5b7035b2fb1b07b1cab242a1bd2936cdb545628574aed3b6e1ac3ea25c94def66f7b5b34a956b8c1dedb7e8d68ac4b49ef79f4f3c2c8df8fb1a0f6ca5b1f05f6f1339204b9be1d544ed46ff72ccacb588279053107de41d87047b897fc1559e6c21677510130dbc5599db1ec12675f1637e8fe6b685d77bb6a8e3ebefff3352c608ece8b96532e9940e1c66a91d293ca1ad3ea055ebd9d507a082cad5814395852f941355a09f99cebbb6059a06ec96691b6b6b06ea62a37ccc8743301d0af14ab6dca74e0f85a02daf32da64985da029bc25a450d6f7f8183b96e46b6241894bbd501db2d7aa0a30b1c29627090277e7fbb153e636a8ee4b583c99a3754a3e117f8d552e50f2308f95559af255588f0923ac0b19ab7592a5390f05a17cb539c8e3a47ca1d996ccb6419b3561544a1ef3ccf4ff58792b1a048a370b6884e9352fbedc19be59544f9bff895fa7bc3da549d4acd5a397f7a77df35629b4e666243c0a3445bbc5b6c7c7fdac432e7e35fcb095b66a8a5acd073dc52fb31ed767923f448db808fa3e97058a49532acaf59718e80525b9d164d20ec0c7d5e8b1324f539f49e1fc9fa1d855d64227f81e8e7aa634cac2869f587e84d70f2f2f6443555e8d86b01efab773c4644a768fc006cad1c9051481487867afcb01f89662f51894a8860873d0c8875fadc3d756a47e3ed4ff50e90b782d023e66a68bbf3e2a80f14070be857ec37e3b62f6fe0c4203838e4b1940f78154ec2029fa2b2071a22d153ccbb87cb1b2e28faf7058f36de60b4d2cd2f164ad5fe3f140eb16190ba9006cbe7c99da4c7964795be152e9b981099b674b641aced562a42d4333e29111e25d4c30db8654121453a11e71fb4753417892338b8fa80125e18be8d10c7b6e9cf365480100f5e6eaf5f5ad063ee38c068adf94cae596f239b115f7ef051b2a64ab520851c09aa7a8bf55bf3aa29566bb76e4f25a5ee1bc29dcd05fc2e84ebdfa9b0da9dad6935cae185ff6d156a556a7d4ed743d35f6766e1ca84f3a75c212ccd3beb1be7ab4310d75cb31ab15c09e97c5d248dbf44ca5d028e1779859993a036d6912a68aab12fbbdf56c4091acd5939c5cab76a8e821404ac2a6271b17334e396af2674f7d22819b52045ec47d11cce93be11b8f74aacb1e2693dbba35f631c89e4a84c80fb89095b4d612201b8290fb1e1163d0823bc4bcb5f584c734f7938929bd7ab50cfe64f8f9c735883b211b0609584987fbe6b84d62a7c0eeb1811b241d0fd4652675b7667dc04a26569a6268e865a17a2c10eb752d00168a2819bbc567f8522339e68d383a759eab43c073395727abe8b841249c157f742108baa2c6ab29ae2015a8842789138d401e4a6e8f52783435a39b9973471315a8be3896ec62a67d37748d7cf865fc7a056b592bb4d9e36b90de8640cd3da11a5c4810f2370fb3457a9525fba66b0870b7e714e138372c9846e32996d3cd249ca5d4023421220dca71605be6a5953835e722e105173e7f74b0c8e4d24c9d4a9bc1ba96a574704454eb58fc0978e1fdea803873cb30198856fdf611f6f73c3f96504b9c74d16bdc97e194007627b3b302c6cbb785dea269b5fc09f91e8ef225e8a72b683657d2c2d5fb39de7567bdba9b2dd5bdcf48f60e7382c50967f85194d955d0560620e4823fedf3908947567feacf0c31b42310cc1320f99c8abb7c6d5730bd261dc06933ad00fbcc95c6bb877bbc74493234f937b957213a890f105b1f09afba3dd3d753782a1b8e908f214e52f834c4c375802c8b132aad3f92ef5402952fd0047dbd2ba305378746958d7743b0c20486d62969122637bf02cc062df0be74e1b0eee112022ca29142f6c99f7b42fb7cd622956043c1e7ce778ef4d0aef8faeeb5c3c9fdf928e1d55a9d7e48605c5f515b78bc4c38a1912824ebef795684bb3ce03543bf12010ff2cfeb637dd14226df38d17ce1857f03d54b39cedacf19fa19f1f0d10ab9321f8b95719251ea66b8f7527238ed5149a504fd9cfa9975d02407856d937bd7823a559f1bce64b4f5d8605224324752c128b84c3e3cda471ec79fbadee08b81201f5d958482b2f69351d82c2718b3baa9e6b319f76d7b762c3e906e5043ce9ce0ccd8a107cf5a8176a31223263979cda43a0703bd9037d87a12f0892b6ed250c5f9b8e67a078e004555a3095ca468145b475b245b1401984c6a64ca3200d88928cfbbe68ce0946e0f08e37102671647a6c73c058a0adf47397b926839c81297b74f64c7dd8b6ed5195125a38fa6348dd8af22a3973f99a4a96c51886a2c01c7cdc78dcf90f35f313e989c751861db06f62ba6c59d10ff22a6445a005bde4752e5dbe97ae07203c2f1fbff302f6f45ba8217f1d832bc2e12a4fc5e6bc2b68dd9a945af7cde99e41aae43f0389ef5ea78cd94304cdb5a65b500924c31bd01c929e7c19fdf00f23ea113d64c7e5d4795888b193eeb87aa6b5921fb8830ffe9edaef4885c1ad7b208a84bea0dd9655eb75062ea33d1f39ba9af51cdaa3307a87866c134c34e5a3d7a07e4acc7139af782f34962847363e85fbebd6b7363738f52680f28dc22dfe390be0d959d99c469ba2faa6359caf6e7ff9d1dc946b74956df40633457cb26d85cd87cfd3e07e8655426c2658ef6b6328d0405e956a261ba4a3ac45ff5b8300f824967adf328b2d43f28fe8dca59d6bde41da61f498b572b6408a8876d9c8f3c8b421e221b7c95bb21083ab452786eb121fbbce0b1c3fa2d686d9c57718f577b1c8b72f658d7270fee2f6bd26a9a6c58f069d5eb24257b5e08ec87c0631caf582ba7dbdfcb1dae9f86492cbc0dd9addac1589c2cc73d4f6701c8a717aeaf7ed994d112194efa68ed3a3754f985f8157027d9cc536f7a6de0363a8bb7894fa0574f9e87b21fcf654ffa398f7981028a348598ce8466a5f32679a213a6f809f615def21095989a7b274afc4fc342d4905a5abcfc9e04eddd93069bfc830560995169764130ec6cf0c224847b6b38155b5eb0d6ea6c876a76bab61a207a4b08fe4532d259a8f3b347c9cea682208351cd32a8ceb4cc7725298b5e68f7ba7456396a2bf42589904cf26d730acfe58df7a66e83c4bdb08a5544a753d8589e7b3003dd863a4de184406a2fba411dbefb09cef020c5f7c47fc30329d6bcf6f8a1fa8ecb892e0171603d875764ff172d85002daf7ad2ec35df26fcf6f26c241536ed4bb19db3539c5df7ac952184df98efe16bacec39cd708411b1f6c6e37c03766492fa8bd61cbc8b0e70575804cebc0364a9050d5031d4e4ddd12f78e2fb2e5881f4c9d6986f1b02c3ed89ae04bc51927fb3616e00ee99c6978369d53f84abde19879903a6a60978694c95e468853054f8fb4300bb43eb63f4146829e5b93fb99252d5669482b17f2161f8aeff7ca4eeaef05d03ef3ecd0b67439932dece5f4263345df1b56452663c8fe4bb09cc50856b3e390749bd6c40daa2d2aed73e27b0b3d0034600c2fcb872ba99cd153de695326291e18b24a483e5fab4697fa112762c18513a8773ebec32974351d549c15177b873e82f4e4afcb769eb5f0d8685ca153cb9f299f408b174e21dff2d21778ea49f6cad5993045f57241503bddb5127465c88385e2f2647ac209f2532b5e79ee2bd836360c141e2066c7943e0c431d8b3bdd5ace82ffcf2937c5778a49e0807065cb62172c43658522bee51551b6b011059483381193c942e84bea029380aa4f48aaf72cff91684e54a83cf6f200e7ff4504be1886e63bbc8440fa2b85e3a4144c7d76e3419e9567348da9bc1a674ade5c4cf4f1485d668878e8e9581a21133d3bd8e1aed54694043cf967fb78cd1b11ebca8af4979aad8309cc6562942773c0c1280d9316c49662e2d71b3ed9089ef937794643b341758caafc95aeb9f2563445fc020ee53eb1016bdf6ab498fbd188be2e3670eb9df96ef25dcf52ef2137d7184c07eaf497e5df61c36f657cb9ca7928225a7fb3a1844c986de56207cd75af6377c4e2f22afe94bd5f75b1c2b57e22dad46b265d2227e695dd1785b0e4a32066338a7991e0e23ee896fc49cbad4f653b8f969750e222d05e74c7231ee0b4c6dbd458101f19d4d45254ba21d2dae6e37ee15858e8c8424f53da3879e2b247329fa5d9b125d52408cf8bcf19ee6b7bc360e9d70de501bad43fcf6df571238f4614633cf3dae4c6decf163cd1a2d802bba6cc034c1f7ccd28cd8b3fe04e8e1c9ac62bd64f334dc9eed99c5ac1068fc098fe278155ce2ec6bc727db7030927e38dff07b84a2093f7e9b64e1a8294be28898a150768441b927a0fa79ff7799142956c4ea2d257af9b939c2d3b43456a3c74d74cbc040ac01f01890e94b343d61ce092363b1cba0befd3f7ef05df832f30373477104c11a0fe1818e27", 0x1000}], 0x2, &(0x7f0000000a00)=[@sndinfo={0x20, 0x84, 0x2, {0x32b, 0xf, 0x3, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x208}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0xa, 0x6, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x5, 0x1, 0x9f, 0x2, 0xff, 0x1804, 0x7f}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x20a, 0x4, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x7, 0x8f26, 0xd}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}], 0xe0, 0x8801}, {&(0x7f0000000840)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000940)="dc28955ffd60e406f365586b3694611cf742862000b7f4f5b82fb8145f2b40b134720a262f1a9c41ec877ddb526a604267aa07ce10a5686339fa57511fc4ac7f0f13dd31f6e87793216a0fccd44717eef5a87024b663f2b56b24a1a888", 0x5d}, {&(0x7f0000000880)="10e3157f2ca54a25d1dd26255fbbb6ac5e68ea82eb86e9da3fb0e5dcbc4e", 0x1e}], 0x2, &(0x7f0000000b00)=[@dstaddrv6={0x20, 0x84, 0x8, @private0}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x208, 0x3, 0x5}}, @init={0x18, 0x84, 0x0, {0x8001, 0xe, 0x4, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @init={0x18, 0x84, 0x0, {0xe0b0, 0x6, 0x5, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x204, 0x1, 0x5}}], 0xb0, 0x8000}, {&(0x7f0000000bc0)=@in6={0xa, 0x4e24, 0x7d, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x81}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c00)="a80f4e86ab7fd32ee6dad27651fbc39a3a04af7733ba6ca689970a2f074daf0e1e8d5e7de23c2af9045bf7351c35cc3c0250c5b7a4e02e62b75a013cce077994fdd562e0cef058ccce243a636ada851ce0a35c4a497c9c109a6bcbb66fa2bda1021144c546af9977852b79216387fb5f7cd1f9d7d85d316e833c2d49d09cb797e3675cba8fa2d434d080a8a86732cd53da48e39690590e733e06082e6cf40f34a52f7fdbc65a52cb1eac357a2368f2bb83551b2aa8e42b38ea1a39c7fc576f8cc7fa5ddaa2ee9f8c8c93fa1cc65c559dd5", 0xd1}, {&(0x7f0000000d00)="38507e88201515ee79073547439ab6a1157a0c78f9f609bd02dc8e1c920567ec0e8faf81c8d86122badc5c5787b7142bf3c2bc849c28dd8a5349749f24136f90ee5686a13e8c4335b0", 0x49}], 0x2, 0x0, 0x0, 0x44040}, {&(0x7f0000000dc0)=@in6={0xa, 0x4e22, 0x4, @local, 0x9}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000e00)="0eac2d9ff4b98b0e3e36dbdab7550d14a21bbf61d82f9ff9db9691faea796711574c7b6eda8213", 0x27}], 0x1, 0x0, 0x0, 0x811}, {&(0x7f0000000e80)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000003980)="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", 0x1000}], 0x1, &(0x7f0000001000)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x4, 0x1, 0x7, 0x81, 0x0, 0x7, 0x10}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @init={0x18, 0x84, 0x0, {0xfffe, 0xcfd, 0xbdd, 0x2b}}, @init={0x18, 0x84, 0x0, {0x0, 0x5, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0xf1}}, @sndrcv={0x30, 0x84, 0x1, {0xe56, 0x4, 0x6, 0xfffff442, 0x4, 0x1, 0x7c5}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x9, 0x0, 0x7fff}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xffffff28}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x731435b4fe2efbd6, 0x10001, 0x35c8}}], 0x130, 0x40004051}, {&(0x7f0000001140)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000002280), 0x0, &(0x7f0000002440)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xf}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x8, 0xb, 0xffffff74}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8000, 0xe, 0x8, r10}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0xe0, 0x40000}], 0x6, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) r11 = socket(0x2a, 0x2, 0x9) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x5, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000026c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r9, @ANYBLOB="040025bd7000fedbdf251000fbff070007000600000008000900020000001400018008000100539ac8d182051d068fbf6a9a2d9196e3729c9132181fc2993a47e06a92ec510649c4d908bcd78511fb2da0b885c73100b0d950e802c80ed420e3dd61bd24fbef75fc4e7711a69d6911f605632d25e713d7447580c9a7614eecc2892f499caf009a4c44f710b11406f80b", @ANYRES32=r12, @ANYBLOB="08000300020000000800090000000000680001801400020076657468315f746f5f626f6e64000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020070696d3672656730000000000000000008000300020000001400020076657468305f6d61637674617000000008000100", @ANYRES32=r12, @ANYBLOB="08000900ad75ffff"], 0xb0}, 0x1, 0x0, 0x0, 0x400c800}, 0x240400c0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r13, 0x8, 0xffffffff, 0x80}, 0x10) 1.040709309s ago: executing program 4 (id=5155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000e0603000000000000000000f000000905000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, 0x0, 0xf], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x81, 0x9, 0x893e, 0xc, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000, 0x2c, 0x8001, 0x80000001}}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="00000000190004002abd7000fbdbdf2580002008ff0300000014000000001c004e20000000000200e000000100000500ffffffff00001900", @ANYRES32=0x0, @ANYBLOB="00000600030000000000090000000206", @ANYRES32=r5, @ANYBLOB="00000400", @ANYRES32=r6, @ANYBLOB="0000060008000000a11bb1e5841134a342daf43ce79e56b8ad833cf3cb85ee225e782df22e6ebe444b7e1f23377b63abc1bc36ea85873d2e167cda85649ffdbf1d867821b0f908a912966744414d523c562aebcc037149de3063d2821eabc59ac6fb87c36617c13bfb5f458e7797895e6ab39e482d906a30b275b95dcb63a406"], 0xa}, 0x1, 0x0, 0x0, 0x800}, 0x300) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x80, 0x8, 0x9, 0x3, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x64, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @empty, {[@end, @rr={0x7, 0x3, 0xbb}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x700, 0x8011, 0x9, 0xfa, {{0x15, 0x4, 0x2, 0x3e, 0x54, 0x67, 0x0, 0xc, 0x2f, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x7, 0xb0, [@dev={0xac, 0x14, 0x14, 0x3b}]}, @rr={0x7, 0x13, 0xf1, [@local, @broadcast, @multicast2, @loopback]}, @lsrr={0x83, 0x23, 0xca, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @multicast2, @remote, @empty, @private=0xa010100, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x7, 0x5, 0x20, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8, 0x10, 0x81, 0x4d}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b00)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'tunl0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x1, 0x10, 0x7, 0x7ff, {{0xa, 0x4, 0x3, 0x7, 0x28, 0x65, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x12, 0x3, 0x6, [{@multicast2}, {@local, 0xe}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000001040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=0x0, @ANYBLOB="210227bd7000fcdbdf251700000024000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002800018008000300010000001400020069703667726530000000000000000000080003000200000078000180080003000100000008000300010000000800030000000000140002006261746164765f736c6176655f30000008000100", @ANYRES32=r2, @ANYBLOB="0800030000000000140002007767310000000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="940001801400020076657468305f6d616376746170000000140002006d6163766c616e3000000000000000001400020076657468305f6d616376746170000000140002006272696467655f736c6176655f31000008000300130917b0140002006261746164765f736c6176655f300000140002007665746830000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000300010000001c00018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32=r13, @ANYBLOB="4400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000100000008000100", @ANYRES32=r14, @ANYBLOB="0800030002000000080003000000000008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="d58bd5e087328b4df524b566cdd139ae2f00285243287ccb81d352cc6359e49e9eb818f0fc239ee070a4fd64de921e83e6504e009d8308505c413fe2546d7c6ee1f8a2dc2fa904db5752f76ed3cd645624812fc7c8f410df3a043e6061ebfe33d547171214b060635fc0a70fabd4aff8ddfa3116b58497707af8776601ba3d83cf3a9a2c72aa2e589ab91b4341475b54e7eb6a825bfc7f39da6e14d6eccec93227f461db5b12a2a9458d263521c25ec36470e570e0fab430a3b64415e704fa822673e2c13a1c116734dacbb7adce60c883decbdcddccd45f6460e8ce5aac1dda63fe"], 0x1d8}}, 0x800) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r19 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r21 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r21, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r20, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x3c}}, 0x20008000) sendmsg$TIPC_NL_BEARER_SET(r17, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r18, @ANYRES32=r21, @ANYBLOB="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", @ANYRES8=r0], 0x258}, 0x1, 0x0, 0x0, 0x8014}, 0x8010) 1.040145769s ago: executing program 1 (id=5156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9400", @ANYRES16=r2, @ANYBLOB="000219bd7000fbdbdf256b000000", @ANYBLOB="0a00060008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000000000a001a0008"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40080) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 925.742232ms ago: executing program 3 (id=5157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x110}}, 0x0) 899.423637ms ago: executing program 0 (id=5158): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000012300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 858.175864ms ago: executing program 1 (id=5159): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000100)=0x40000003, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2400c810, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 749.639859ms ago: executing program 4 (id=5160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 689.366132ms ago: executing program 3 (id=5161): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001880)={&(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x3}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) 684.917909ms ago: executing program 1 (id=5162): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1, 0x7}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {0xc}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x48}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32], 0x40}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r7) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x24004044) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000500)={0x0, 0x5, 0x0, 0x7fff, 0x3, 0xc, 0x4, 0x0, {0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x200, 0x4ee, 0xffff5bd2, 0x3, 0x5}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000700)={r10, 0xf3, "eca6f3bc9a06443f9e0dea54ce55d42ab64b2719e85e08d1a16ed8c2ac26786bb2863695abc80cfe998caed2980dfac26e71e3e0eef62cedb711197ad40f6ed54d5fbab0d9f5bf9661837a113c85f8adba64afbbeff989d95d14a87f192afa6f905e9daafd22136619ab6203949a3f9cf4d64b609d4826a001cf3b1c60beab1864d5718eab06369b9175c11554a05df738ead8f07d50b00a729b8add81f02d1d09cff298824785d10795a205d6b4c29b8a8d42dca35d6810fdc6faa64a4de89e96ecf433fca144ae5ebf915d3a359c1e3d2e12ba953e6d34e6c3a6198dcd16d7dd7fd354d70a61850b3775ee71b6c005e39e2b"}, &(0x7f00000003c0)=0xfb) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000fedbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r6, &(0x7f0000000180)={0x27}, 0x6) 549.215534ms ago: executing program 3 (id=5163): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={{r0}, 0x3, 0x40, 0x3}) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x40000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x20044040) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5a}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xffff}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xb}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xc}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80014) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2f, 0xb, 0x9, 0xc370c47e, 0x0, @remote, @private2, 0x7800, 0x80, 0x1, 0x5}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x90, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xfa}]}, 0x90}, 0x1, 0x0, 0x0, 0x805}, 0x8000) sendmsg(r1, &(0x7f0000000c80)={&(0x7f0000000700)=@ieee802154={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)="c1c942de1974677f834402715aa464c91f41c885a970cf617e08463405de9921ab76076ffb9d006cdfee96a0cd78f1ac8ef7e7ef43c234c732aa49cea576e28e42dca9e13ea013a2fa978c698f4e9fc642e838778359391958900eab1b8b106f74b59e0413777adae7aa4b16b9c12588efd319e5e09268492d266f4da545d403ea0918b6e999c04a99b712c530d75c301e23a6257f722d060c9c3223c5f1a590cd1a0267b3b0111d", 0xa8}], 0x1, &(0x7f0000000880)=[{0x98, 0x116, 0x286e, "818276766512eb1b09a3745caa2c92da579aa4b8faa2b0d70cf8a3eb8ca3ee3c2a9c8d8ca5ceab8a681f05f848be780a98d8b43aa3def6c5da498d204a97adf508a9e5a416cdd6f5d06d6650f8d4053d542426c67da7bdc1864df6bd07c9dbc6d1496cdd238f8b8ee1ab455ad721b2d7e20874c692e9baefb497b1a41fa3c251fc54ebae1a"}, {0x28, 0xff, 0x5b05, "5fb1c1e3beff6d8b691f85b5d4d593456c04ad51"}, {0xc8, 0x104, 0xdd9, "752c3bd74f50a74ddbb6dfe0c7591138e7ac6017b50b5d37df9f3f58f7008783e4c9ddb0304d6edf8958610079b7a8c82dd014b21a7a13c475ad6abed8cd8b78b26d4f8302a99be2ceac944dd8df98569a8aafaf51f3cd2f7b535c7c520f5b8c417bcc91629a4a6ceea8fd8526c8e7716605325a2816d2bfbe0dbfe2b6a4ed2478fc540b70cb5ceb1bc840603b9eebd6af41bc4c80aec57ed904d1ab42800c04e8719d9bcbb3591c4df2f8f8d9d4d6b892b59bd3cace42"}, {0x90, 0x114, 0xa, "c90b7c2ab452d9943b5bf49236eeeef0a587ec2a0cc65e66ce1959c5b1e0635b69c27f45895736b5a46376ccaeac5983ad00de87ffd19f08f9d647ede9d0cdcd92a6eecaec0cef381839bf2ff85197d8b1debf4c444e4796cd766826892a943a58ffa54e1f6ca6d1eaa2c5a5fd66720bba5a118b0ef32c53f88de3"}, {0x80, 0x3a, 0x3, "fe8f06facd83e9168821e2052207bd135ca8933e99ef985a7b237982c837d45f98c58082eba0b5a1604466d5a91884e32d3842b598ebf8bfcd972456004d9544edc4195b14da69deca08c96f0ed77e0cfc38950c4e59477870bc34744cf5189212f48a532eb8f67117d48ca63e"}, {0xa0, 0x111, 0x2, "d05a428ca7cc6eb9cef55ba2c8756b2736c807eae4e910747372cae32c130f2f3615e4b3cbee150c74a474546e77fffedb7fb7592cd628cf3e5d5d7309c9893d4a556a1b09faf69b8fc9ad65da43432411795c5bae3eeb48a20dbec61b20ad85c2e20b878c498f636be71099922161164152283fdb8e4b3f2d79eff514a7b62457bf49300a27e57bab94a80028"}, {0xa0, 0x3a, 0x80000001, "270d829025e73b5f43c3f83256c95498c93c895b97ab278006dc3b2f8e266eb3fed81e78827224996a3ef4972318f80d3c8e39bb6c41b4268fe2493ed114120af25783f129a0521c4c1a8ccb18aab94cb990866eebe6afe2031f6c8568192594e56e70dd628a4537ede365ef4188abfeab4665f31879f0f3d68c9db5bd9e2d77dbb43e586c6290a0321c13"}], 0x3d8}, 0x40000000) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000cc0)={r2, 0x5, 0x7ff, 0x3}) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb4, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc8a0}, 0x4c840) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x70, r9, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa8e}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x851}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008004}, 0x44040) (async) connect(r0, &(0x7f0000001080)=@can={0x1d, r6}, 0x80) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001100)={@loopback, @dev={0xac, 0x14, 0x14, 0x36}}, 0x8) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400038}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x54, r11, 0x20, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x7c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2041}, 0x44001) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r12, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, r13, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x880) (async) r14 = openat$cgroup_ro(r2, &(0x7f0000001400)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r14, 0x890b, &(0x7f0000001440)={@bcast, @bcast, 0x5, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 521.699966ms ago: executing program 0 (id=5164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800ef90b104e981b62f96000042cd0000000000000000009bc23d0200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r1, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x71, 0x8, 0x8, &(0x7f0000001ac0)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180ba000000aaaaaaaaaaaa08004500001c00000000001190780800001ce0000001000017c1000890780da7fb6cba972ad9a6c488ef1ac481047f84539148a2ae719e82ab7e0899235703383909efaf12466cae9c6355fbcac630ffed028421402f513cd5ca22d9e22ee1e3ab9e92061f2b3ab203f062bf0de52d63eea367360e72ee3752"], 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f00000001c0)={r7, 0x0, 0x3ff}, 0x8) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x140) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180000000000000068000000680000000c000000000000000000000300000000020000000200000000080000f5d14edaa5a345c798bb9232b90c00000000000011050000000800000000000000030000060400000001000000010000000a000000000203000f00000007000000040000040000000e0500000000000000040000000000000c030000000061615f002e612e00003000"], &(0x7f0000000340)=""/185, 0x8c, 0xb9, 0x0, 0x3}, 0x28) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB="19004fbc242cf2eb492700d70000000007000000", @ANYRES32=r11], 0x18}}, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) r13 = openat$cgroup_int(r8, &(0x7f0000000580)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000740)=0x5, 0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000001c40)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x25, &(0x7f00000012c0)={r14, @in={{0x2, 0x4e20, @empty}}}, 0xff6b) 515.775412ms ago: executing program 4 (id=5165): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000ed0000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 357.57997ms ago: executing program 1 (id=5166): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) write$tun(0xffffffffffffffff, 0x0, 0xfdef) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000012000000000000fe8000000000000000000000000000aa87"], 0x0) 356.770375ms ago: executing program 3 (id=5167): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000020000000000000000000fe8000000000000000000000000000aa87"], 0x0) 352.562256ms ago: executing program 2 (id=5168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94000000", @ANYBLOB="000219bd7000fbdb", @ANYRES32, @ANYBLOB="0a00060008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000000000a001a000802"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40080) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10000000) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r4, 0x2, 0x1ffe, 0x2, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 185.148187ms ago: executing program 2 (id=5169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9400", @ANYRES16=r2, @ANYBLOB="000219bd7000fbdbdf256b000000", @ANYBLOB="0a00060008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000000000a001a0008"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40080) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 89.690294ms ago: executing program 0 (id=5170): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000008c0)=0x6, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0x9}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60006010}, 0x200008c2) 89.215367ms ago: executing program 1 (id=5171): r0 = socket(0x22, 0x5, 0x239) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x33, @broadcast, 0x4e23, 0x2, 'lc\x00', 0x20, 0x401, 0x34}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4e22, 0x2, 0xb, 0xf, 0x4}}, 0x44) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={0x0, 0x0, 0x1, [0x10000, 0x3, 0xfffffffffffffff2, 0x1fc, 0x80000000], [0xb, 0x8000, 0x44bc, 0x80, 0x5, 0x6, 0xc1dc, 0x7fffffff, 0x9, 0x1, 0x3ff, 0x2ff, 0x7, 0x15, 0x1, 0x2, 0x7, 0x20c, 0x7, 0x7, 0x3ff, 0xa, 0x4, 0x2, 0x2, 0x5, 0x9, 0x5, 0xfffffffffffffffb, 0x0, 0x9, 0xfffffffffffffff9, 0x101, 0xffffffffffffffff, 0x40, 0x3, 0xae4f, 0x1, 0x1ff, 0x7, 0x3, 0x0, 0x6, 0xffff, 0x4, 0x52d7, 0xf0, 0x9, 0x6, 0x200, 0x2, 0x7000000, 0x0, 0x0, 0x7, 0xf8, 0x3, 0x5, 0x3ff, 0x71e, 0x428ed224, 0x8, 0x800, 0x7, 0x27, 0x7, 0x7, 0x0, 0x4, 0x100000000, 0x4, 0x8000000000000001, 0xb85e, 0x4, 0x5b, 0x4, 0x97a, 0x800, 0xfffffffffffffff9, 0x2, 0x5, 0xfffffffffffffffc, 0x7f, 0x9, 0x9, 0x7, 0x8, 0x4675e28b, 0x8001, 0x6, 0x8, 0x8001, 0x8, 0x7, 0x80000000, 0x8, 0x400, 0x4, 0x2, 0x9, 0x4, 0x2, 0x1afa, 0x2, 0x697e, 0x90000000000000, 0x0, 0x7, 0xf, 0x9, 0x991, 0x8, 0x100, 0xff, 0xb988, 0xe5, 0x5, 0x8, 0x100000000, 0x1, 0x800]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={r1, 0x6, 0x8000, 0x1}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) socket(0x22, 0x5, 0x239) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x33, @broadcast, 0x4e23, 0x2, 'lc\x00', 0x20, 0x401, 0x34}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4e22, 0x2, 0xb, 0xf, 0x4}}, 0x44) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={0x0, 0x0, 0x1, [0x10000, 0x3, 0xfffffffffffffff2, 0x1fc, 0x80000000], [0xb, 0x8000, 0x44bc, 0x80, 0x5, 0x6, 0xc1dc, 0x7fffffff, 0x9, 0x1, 0x3ff, 0x2ff, 0x7, 0x15, 0x1, 0x2, 0x7, 0x20c, 0x7, 0x7, 0x3ff, 0xa, 0x4, 0x2, 0x2, 0x5, 0x9, 0x5, 0xfffffffffffffffb, 0x0, 0x9, 0xfffffffffffffff9, 0x101, 0xffffffffffffffff, 0x40, 0x3, 0xae4f, 0x1, 0x1ff, 0x7, 0x3, 0x0, 0x6, 0xffff, 0x4, 0x52d7, 0xf0, 0x9, 0x6, 0x200, 0x2, 0x7000000, 0x0, 0x0, 0x7, 0xf8, 0x3, 0x5, 0x3ff, 0x71e, 0x428ed224, 0x8, 0x800, 0x7, 0x27, 0x7, 0x7, 0x0, 0x4, 0x100000000, 0x4, 0x8000000000000001, 0xb85e, 0x4, 0x5b, 0x4, 0x97a, 0x800, 0xfffffffffffffff9, 0x2, 0x5, 0xfffffffffffffffc, 0x7f, 0x9, 0x9, 0x7, 0x8, 0x4675e28b, 0x8001, 0x6, 0x8, 0x8001, 0x8, 0x7, 0x80000000, 0x8, 0x400, 0x4, 0x2, 0x9, 0x4, 0x2, 0x1afa, 0x2, 0x697e, 0x90000000000000, 0x0, 0x7, 0xf, 0x9, 0x991, 0x8, 0x100, 0xff, 0xb988, 0xe5, 0x5, 0x8, 0x100000000, 0x1, 0x800]}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={r1, 0x6, 0x8000, 0x1}) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) (async) 85.910979ms ago: executing program 4 (id=5172): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 57.712044ms ago: executing program 2 (id=5173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}, {&(0x7f0000004300)=""/214, 0xd6}], 0x3}, 0x4}], 0x1, 0x23, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000000000000000000af49f04a904f57fb9f3dad137a74117eb93343efb561c3045bf7dd63c031d52c026f9cec79d7e9480af54896315629aa1a221e8b121f6846bc2f86953b5bfcf9bbc42c4fa536778448ec8620c78a601c67f9860dd7754454b4ce9a70bdaa7975b8f6e97c6e66ddc896818ddbf9c713862185a30b28e5caef9e3ee59f78b400f"], 0x28}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="a000000000012bbd7000fedbdf25", @ANYRES32=r5, @ANYBLOB="0000040002010400680034801400350070696d36726567310000000000000000140035006261746164765f736c6176655f30000014003500626f6e645f736c6176655f3100000000140035007465616d5f736c6176655f300000000014003500776c616e3100000000000000000000000800280083f700"], 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x0) 0s ago: executing program 3 (id=5174): r0 = socket(0x1, 0x803, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bind$phonet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c00030026ad3dc548f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000140a01040000000000000000070000060c00064000000000000000040900010073797a30000000000900020073797a320000000008000340000000060c00064000000000000000050c00064000000000000000020c0006ba81fc9462c42fe0bbccfe00e1400000000000000001080003400000000308000340000000040900020073797a300000000028000000000a010400000000000000000a00000a0900010073797a31000000000800024000000003140000001100010000000000000000000200000a"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x70}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08efbdeb99690c76", @ANYRES16=r3, @ANYBLOB="01022bbd7000fcdbdf250100000000000000014100000018001700000009000000007564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x81dad07607e9375}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) socket(0x1, 0x803, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async) bind$phonet(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c00030026ad3dc548f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000140a01040000000000000000070000060c00064000000000000000040900010073797a30000000000900020073797a320000000008000340000000060c00064000000000000000050c00064000000000000000020c0006ba81fc9462c42fe0bbccfe00e1400000000000000001080003400000000308000340000000040900020073797a300000000028000000000a010400000000000000000a00000a0900010073797a31000000000800024000000003140000001100010000000000000000000200000a"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x70}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08efbdeb99690c76", @ANYRES16=r3, @ANYBLOB="01022bbd7000fcdbdf250100000000000000014100000018001700000009000000007564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x81dad07607e9375}, 0x0) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) (async) kernel console output (not intermixed with test programs): T15102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.360827][T15227] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.3310'. [ 326.370833][T15227] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.3310'. [ 326.382463][T15227] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.3310'. [ 326.432168][T15102] team0: Port device team_slave_0 added [ 326.450472][ T5945] IPVS: starting estimator thread 0... [ 326.463760][T15102] team0: Port device team_slave_1 added [ 326.545724][T15231] IPVS: using max 28 ests per chain, 67200 per kthread [ 326.629997][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3313'. [ 326.659728][T15102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.667799][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.734993][T15102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.797971][T15102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.804984][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.832947][T15247] FAULT_INJECTION: forcing a failure. [ 326.832947][T15247] name failslab, interval 1, probability 0, space 0, times 0 [ 326.851012][T15084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.886511][T15247] CPU: 0 UID: 0 PID: 15247 Comm: syz.0.3317 Not tainted syzkaller #0 PREEMPT(full) [ 326.886539][T15247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.886552][T15247] Call Trace: [ 326.886560][T15247] [ 326.886570][T15247] dump_stack_lvl+0x189/0x250 [ 326.886600][T15247] ? __pfx____ratelimit+0x10/0x10 [ 326.886630][T15247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.886655][T15247] ? __pfx__printk+0x10/0x10 [ 326.886691][T15247] ? __pfx___might_resched+0x10/0x10 [ 326.886717][T15247] should_fail_ex+0x414/0x560 [ 326.886750][T15247] should_failslab+0xa8/0x100 [ 326.886783][T15247] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 326.886813][T15247] ? __alloc_skb+0x112/0x2d0 [ 326.886850][T15247] __alloc_skb+0x112/0x2d0 [ 326.886886][T15247] netlink_sendmsg+0x5c6/0xb30 [ 326.886927][T15247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.886962][T15247] ? aa_sock_msg_perm+0xf1/0x1d0 [ 326.886997][T15247] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.887019][T15247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.887051][T15247] __sock_sendmsg+0x21c/0x270 [ 326.887110][T15247] ____sys_sendmsg+0x505/0x830 [ 326.887138][T15247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.887169][T15247] ? import_iovec+0x74/0xa0 [ 326.887197][T15247] ___sys_sendmsg+0x21f/0x2a0 [ 326.887219][T15247] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.887279][T15247] ? __fget_files+0x2a/0x420 [ 326.887309][T15247] ? __fget_files+0x3a0/0x420 [ 326.887351][T15247] __x64_sys_sendmsg+0x19b/0x260 [ 326.887376][T15247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.887411][T15247] ? __pfx_ksys_write+0x10/0x10 [ 326.887435][T15247] ? rcu_is_watching+0x15/0xb0 [ 326.887462][T15247] ? do_syscall_64+0xbe/0x3b0 [ 326.887496][T15247] do_syscall_64+0xfa/0x3b0 [ 326.887524][T15247] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.887553][T15247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.887573][T15247] ? clear_bhb_loop+0x60/0xb0 [ 326.887598][T15247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.887619][T15247] RIP: 0033:0x7f64c258ebe9 [ 326.887638][T15247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.887674][T15247] RSP: 002b:00007f64c3380038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.887697][T15247] RAX: ffffffffffffffda RBX: 00007f64c27b5fa0 RCX: 00007f64c258ebe9 [ 326.887713][T15247] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 326.887726][T15247] RBP: 00007f64c3380090 R08: 0000000000000000 R09: 0000000000000000 [ 326.887739][T15247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.887752][T15247] R13: 00007f64c27b6038 R14: 00007f64c27b5fa0 R15: 00007ffdcb0d52f8 [ 326.887787][T15247] [ 326.895564][T15102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.197057][ T5864] Bluetooth: hci1: command tx timeout [ 327.618601][T15102] hsr_slave_0: entered promiscuous mode [ 327.646423][T15102] hsr_slave_1: entered promiscuous mode [ 327.667902][T15281] sock: sock_set_timeout: `syz.4.3326' (pid 15281) tries to set negative timeout [ 327.674265][T15102] debugfs: 'hsr0' already exists in 'hsr' [ 327.702875][T15102] Cannot create hsr debugfs directory [ 328.005117][T15292] netlink: 'syz.0.3331': attribute type 32 has an invalid length. [ 328.092339][T15292] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 328.425034][T15300] tipc: Started in network mode [ 328.435856][T15300] tipc: Node identity ac1414aa, cluster identity 4711 [ 328.463992][T15300] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.479924][T15300] tipc: Enabled bearer , priority 10 [ 328.506687][T15307] __nla_validate_parse: 3 callbacks suppressed [ 328.506709][T15307] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3335'. [ 328.595873][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.616161][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.735746][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.741113][T15102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.787786][T15319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3340'. [ 328.847544][T15322] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3341'. [ 328.875776][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.960215][T15328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3343'. [ 328.973712][T15102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.009791][T15328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.018821][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.160385][T15102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.257262][ T5864] Bluetooth: hci1: command tx timeout [ 329.422450][T15102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.435691][ C0] net_ratelimit: 2 callbacks suppressed [ 329.435708][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.576341][ T5868] tipc: Node number set to 2886997162 [ 329.715725][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.985904][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.089647][T15102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 330.124221][T15102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 330.185001][T15102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 330.239821][T15102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 330.271305][T15371] pim6reg1: entered promiscuous mode [ 330.284429][T15371] pim6reg1: entered allmulticast mode [ 330.320574][T15378] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3354'. [ 330.515716][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.646295][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 330.664894][T15399] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3360'. [ 330.686747][T15401] netlink: 'syz.2.3359': attribute type 21 has an invalid length. [ 330.694765][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3357'. [ 330.703990][T15399] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3360'. [ 330.706043][T15102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.732372][T15395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3357'. [ 330.742511][T15403] IPVS: set_ctl: invalid protocol: 8 172.20.20.29:20002 [ 330.742550][T15399] netlink: 'syz.3.3360': attribute type 6 has an invalid length. [ 330.812312][T15399] netlink: 'syz.3.3360': attribute type 5 has an invalid length. [ 330.821739][T15102] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.904458][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.911717][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.958114][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.965330][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.093322][T15413] hsr_slave_0: left promiscuous mode [ 331.111516][T15413] hsr_slave_1: left promiscuous mode [ 331.176675][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.337766][ T51] Bluetooth: hci1: command tx timeout [ 331.575827][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.998602][T15102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.134644][T15102] veth0_vlan: entered promiscuous mode [ 332.179862][T15102] veth1_vlan: entered promiscuous mode [ 332.311717][T15102] veth0_macvtap: entered promiscuous mode [ 332.359754][T15102] veth1_macvtap: entered promiscuous mode [ 332.448280][T15102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.508000][T15102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.615796][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.689211][ T1323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.729408][ T1323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.777227][ T1318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.867175][ T1318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.150773][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.186263][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.278247][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.338133][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.519483][T15498] __nla_validate_parse: 8 callbacks suppressed [ 333.519504][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3391'. [ 333.592400][T15498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3391'. [ 333.655750][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.733736][T15509] FAULT_INJECTION: forcing a failure. [ 333.733736][T15509] name failslab, interval 1, probability 0, space 0, times 0 [ 333.797363][T15509] CPU: 1 UID: 0 PID: 15509 Comm: syz.4.3394 Not tainted syzkaller #0 PREEMPT(full) [ 333.797407][T15509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.797429][T15509] Call Trace: [ 333.797442][T15509] [ 333.797457][T15509] dump_stack_lvl+0x189/0x250 [ 333.797489][T15509] ? __pfx____ratelimit+0x10/0x10 [ 333.797518][T15509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.797543][T15509] ? __pfx__printk+0x10/0x10 [ 333.797578][T15509] ? __pfx___might_resched+0x10/0x10 [ 333.797598][T15509] ? fs_reclaim_acquire+0x7d/0x100 [ 333.797636][T15509] should_fail_ex+0x414/0x560 [ 333.797669][T15509] should_failslab+0xa8/0x100 [ 333.797703][T15509] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 333.797739][T15509] ? __alloc_skb+0x112/0x2d0 [ 333.797776][T15509] __alloc_skb+0x112/0x2d0 [ 333.797811][T15509] netlink_ack+0x146/0xa50 [ 333.797839][T15509] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.797861][T15509] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 333.797883][T15509] ? __pfx_nl80211_post_doit+0x10/0x10 [ 333.797907][T15509] ? __asan_memcpy+0x40/0x70 [ 333.797930][T15509] ? __pfx_ref_tracker_free+0x10/0x10 [ 333.797968][T15509] netlink_rcv_skb+0x28c/0x470 [ 333.797995][T15509] ? __lock_acquire+0xab9/0xd20 [ 333.798026][T15509] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.798051][T15509] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.798102][T15509] ? down_read+0x1ad/0x2e0 [ 333.798138][T15509] genl_rcv+0x28/0x40 [ 333.798158][T15509] netlink_unicast+0x82c/0x9e0 [ 333.798196][T15509] ? __pfx_netlink_unicast+0x10/0x10 [ 333.798226][T15509] ? netlink_sendmsg+0x642/0xb30 [ 333.798254][T15509] ? skb_put+0x11b/0x210 [ 333.798291][T15509] netlink_sendmsg+0x805/0xb30 [ 333.798343][T15509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.798376][T15509] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.798409][T15509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.798430][T15509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.798458][T15509] __sock_sendmsg+0x21c/0x270 [ 333.798487][T15509] ____sys_sendmsg+0x505/0x830 [ 333.798513][T15509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.798542][T15509] ? import_iovec+0x74/0xa0 [ 333.798568][T15509] ___sys_sendmsg+0x21f/0x2a0 [ 333.798590][T15509] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.798647][T15509] ? __fget_files+0x2a/0x420 [ 333.798675][T15509] ? __fget_files+0x3a0/0x420 [ 333.798721][T15509] __x64_sys_sendmsg+0x19b/0x260 [ 333.798744][T15509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.798777][T15509] ? __pfx_ksys_write+0x10/0x10 [ 333.798800][T15509] ? rcu_is_watching+0x15/0xb0 [ 333.798824][T15509] ? do_syscall_64+0xbe/0x3b0 [ 333.798856][T15509] do_syscall_64+0xfa/0x3b0 [ 333.798882][T15509] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.798907][T15509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.798927][T15509] ? clear_bhb_loop+0x60/0xb0 [ 333.798950][T15509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.798969][T15509] RIP: 0033:0x7f4e81d8ebe9 [ 333.798986][T15509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.799004][T15509] RSP: 002b:00007f4e82b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.799025][T15509] RAX: ffffffffffffffda RBX: 00007f4e81fb5fa0 RCX: 00007f4e81d8ebe9 [ 333.799039][T15509] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 333.799051][T15509] RBP: 00007f4e82b47090 R08: 0000000000000000 R09: 0000000000000000 [ 333.799063][T15509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.799074][T15509] R13: 00007f4e81fb6038 R14: 00007f4e81fb5fa0 R15: 00007ffc48b87e58 [ 333.799105][T15509] [ 334.695676][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.847669][T15541] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3403'. [ 334.910974][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.923448][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.934963][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.955171][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.967655][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.023835][T15546] C speed is unknown, defaulting to 1000 [ 335.251830][T15555] pim6reg1: entered promiscuous mode [ 335.275921][T15555] pim6reg1: entered allmulticast mode [ 335.735754][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.761678][T15582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3413'. [ 335.818842][T15582] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3413'. [ 335.895313][T15566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3411'. [ 335.983545][T15570] team0: Device gtp0 is of different type [ 336.182725][T14395] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.309622][T15594] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3416'. [ 336.417555][T15599] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3416'. [ 336.441781][T14395] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.646437][T15602] vlan2: entered promiscuous mode [ 336.651880][T15602] bridge0: entered promiscuous mode [ 336.710346][T14395] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.724370][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3419'. [ 336.775677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.879744][T14395] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.937418][ T55] block nbd0: Possible stuck request ffff888025485080: control (read@0,1024B). Runtime 210 seconds [ 336.948965][ T55] block nbd0: Possible stuck request ffff888025485240: control (read@1024,1024B). Runtime 210 seconds [ 336.960649][ T55] block nbd0: Possible stuck request ffff888025485400: control (read@2048,1024B). Runtime 210 seconds [ 336.971931][ T55] block nbd0: Possible stuck request ffff8880254855c0: control (read@3072,1024B). Runtime 210 seconds [ 337.017197][ T51] Bluetooth: hci4: command tx timeout [ 337.199616][T14395] bridge0: port 1(batadv0) entered disabled state [ 337.815716][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.931859][T14395] ` (unregistering): Released all slaves [ 338.083243][T14395] bond1 (unregistering): Released all slaves [ 338.210988][T14395] bond2 (unregistering): Released all slaves [ 338.243051][T14395] bond3 (unregistering): Released all slaves [ 338.393433][T14395] bond4 (unregistering): Released all slaves [ 338.544920][T14395] bond5 (unregistering): Released all slaves [ 338.671900][T14395] bond6 (unregistering): Released all slaves [ 338.695095][T14395] bond7 (unregistering): Released all slaves [ 338.723720][T14395] bond8 (unregistering): Released all slaves [ 338.849030][T14395] bond9 (unregistering): Released all slaves [ 338.855672][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.973271][T14395] bond10 (unregistering): Released all slaves [ 339.076874][T14395] bond11 (unregistering): Released all slaves [ 339.100953][ T51] Bluetooth: hci4: command tx timeout [ 339.201545][T14395] bond12 (unregistering): Released all slaves [ 339.309983][T14395] bond13 (unregistering): Released all slaves [ 339.330484][T14395] bond0 (unregistering): Released all slaves [ 339.362411][T14395] bond14 (unregistering): Released all slaves [ 339.381615][T14395] bond15 (unregistering): Released all slaves [ 339.407832][T14395] bond16 (unregistering): Released all slaves [ 339.426251][T14395] bond17 (unregistering): Released all slaves [ 339.455318][T14395] bond18 (unregistering): Released all slaves [ 339.478438][T14395] bond19 (unregistering): Released all slaves [ 339.499031][T14395] bond20 (unregistering): Released all slaves [ 339.517943][T14395] bond21 (unregistering): Released all slaves [ 339.542844][T14395] bond22 (unregistering): Released all slaves [ 339.564704][T14395] bond23 (unregistering): Released all slaves [ 339.585456][T14395] bond24 (unregistering): Released all slaves [ 339.721529][T14395] bond25 (unregistering): Released all slaves [ 339.859556][T14395] bond26 (unregistering): Released all slaves [ 339.879494][T14395] bond27 (unregistering): Released all slaves [ 339.895675][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.898321][T14395] bond28 (unregistering): Released all slaves [ 340.024104][T14395] bond29 (unregistering): Released all slaves [ 340.049904][T14395] bond30 (unregistering): Released all slaves [ 340.069948][T15546] chnl_net:caif_netlink_parms(): no params data found [ 340.364628][T14395] tipc: Disabling bearer [ 340.372289][T15546] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.379962][T14395] tipc: Left network mode [ 340.384668][T15546] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.394575][T15546] bridge_slave_0: entered allmulticast mode [ 340.411206][T15546] bridge_slave_0: entered promiscuous mode [ 340.467835][T15546] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.475196][T15546] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.483595][T15546] bridge_slave_1: entered allmulticast mode [ 340.497879][T15546] bridge_slave_1: entered promiscuous mode [ 340.607695][T15546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.645471][T15546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.809435][T15546] team0: Port device team_slave_0 added [ 340.818636][T15546] team0: Port device team_slave_1 added [ 340.935728][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.949854][T15546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.957030][T15546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.016603][T15546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.066255][T15546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.075494][T15546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.130942][T15546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.175684][ T51] Bluetooth: hci4: command tx timeout [ 341.182208][T14395] hsr_slave_0: left promiscuous mode [ 341.196871][T14395] hsr_slave_1: left promiscuous mode [ 341.232406][T14395] veth1_macvtap: left promiscuous mode [ 341.241224][T14395] veth0_macvtap: left promiscuous mode [ 341.249567][T14395] veth1_vlan: left promiscuous mode [ 341.254931][T14395] veth0_vlan: left promiscuous mode [ 341.975659][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.476526][ T13] smc: removing ib device syz0 [ 342.502489][ T5945] C speed is unknown, defaulting to 1000 [ 342.517154][ T5945] syz0: Port: 1 Link DOWN [ 342.674325][T15546] hsr_slave_0: entered promiscuous mode [ 342.699576][T15546] hsr_slave_1: entered promiscuous mode [ 342.731664][T15546] debugfs: 'hsr0' already exists in 'hsr' [ 342.745901][T15546] Cannot create hsr debugfs directory [ 343.015998][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.255841][ T51] Bluetooth: hci4: command tx timeout [ 343.925263][T15546] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 343.968078][T15546] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 343.991141][T15546] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 344.014767][T15546] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 344.055667][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 344.212226][T15546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.262665][T15546] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.303138][T14396] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.310446][T14396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.361013][T14396] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.368222][T14396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.482534][T15546] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.501568][T15546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.917998][T15546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.984298][T15546] veth0_vlan: entered promiscuous mode [ 344.998819][T15546] veth1_vlan: entered promiscuous mode [ 345.074555][T15546] veth0_macvtap: entered promiscuous mode [ 345.085382][T15546] veth1_macvtap: entered promiscuous mode [ 345.095652][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.123471][T15546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.141531][T15546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.210627][T14395] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.225235][T14395] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.241826][T14395] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.270687][T14395] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.368427][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.395366][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.442093][T14396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.453933][T14396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.539444][T15629] netlink: 'syz.2.3397': attribute type 1 has an invalid length. [ 345.547483][T15629] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3397'. [ 346.135722][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.177582][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 348.215760][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.255871][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.295675][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.335708][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.375683][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.795240][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3428'. [ 352.926976][T15648] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3431'. [ 353.052717][T15648] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3431'. [ 353.085875][T15653] netlink: 'syz.1.3432': attribute type 21 has an invalid length. [ 353.094464][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3433'. [ 353.136316][T15658] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 353.145361][T15653] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3432'. [ 353.193672][T15653] netlink: 'syz.1.3432': attribute type 21 has an invalid length. [ 353.228848][T15653] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3432'. [ 353.263189][T15653] netlink: 'syz.1.3432': attribute type 21 has an invalid length. [ 353.284351][T15653] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3432'. [ 353.304190][T15662] veth3: entered allmulticast mode [ 353.326047][T15653] netlink: 'syz.1.3432': attribute type 21 has an invalid length. [ 353.349776][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 353.364770][T15653] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3432'. [ 353.384508][T15653] netlink: 'syz.1.3432': attribute type 21 has an invalid length. [ 353.419604][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.424007][T15653] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3432'. [ 353.476963][T15653] netlink: 'syz.1.3432': attribute type 21 has an invalid length. [ 353.519675][T15653] netlink: 'syz.1.3432': attribute type 21 has an invalid length. [ 353.536050][T15672] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.573185][T15653] netlink: 'syz.1.3432': attribute type 21 has an invalid length. [ 353.610581][T15653] netlink: 'syz.1.3432': attribute type 21 has an invalid length. [ 353.641390][T15653] netlink: 'syz.1.3432': attribute type 21 has an invalid length. [ 354.211877][T15707] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 354.455829][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.496145][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.560281][T15763] veth0_macvtap: left promiscuous mode [ 355.587345][T15763] macvtap0: entered allmulticast mode [ 355.630035][T15763] macvtap0: refused to change device tx_queue_len [ 356.471452][T15800] netem: change failed [ 356.535788][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.831372][T15818] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.867496][T15818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.874839][T15818] IPv6: NLM_F_CREATE should be set when creating new route [ 356.882259][T15818] IPv6: NLM_F_CREATE should be set when creating new route [ 356.889536][T15818] IPv6: NLM_F_CREATE should be set when creating new route [ 357.303243][T15843] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 357.575761][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.167941][T15885] validate_nla: 27 callbacks suppressed [ 358.167964][T15885] netlink: 'syz.1.3516': attribute type 1 has an invalid length. [ 358.334637][T15892] netlink: 'syz.3.3517': attribute type 1 has an invalid length. [ 358.586390][T15900] __nla_validate_parse: 46 callbacks suppressed [ 358.586412][T15900] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3519'. [ 358.615669][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.654284][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3522'. [ 358.723618][T15907] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3523'. [ 358.747146][T15907] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3523'. [ 358.863344][T15910] netlink: 'syz.0.3526': attribute type 2 has an invalid length. [ 358.877942][T15910] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.3526'. [ 359.048864][T15916] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3528'. [ 359.169546][T15922] netlink: 'syz.4.3531': attribute type 11 has an invalid length. [ 359.238302][T15922] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3531'. [ 359.337333][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.531788][T15942] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3536'. [ 359.615966][T15946] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3537'. [ 359.655737][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.767870][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3537'. [ 359.818177][T15946] netlink: 'syz.3.3537': attribute type 3 has an invalid length. [ 359.865684][T15946] netlink: 'syz.3.3537': attribute type 2 has an invalid length. [ 360.478615][T15978] tipc: Started in network mode [ 360.483571][T15978] tipc: Node identity 0a2e786b928a, cluster identity 4711 [ 360.491289][T15978] tipc: Enabled bearer , priority 0 [ 360.509226][T15978] syzkaller0: entered promiscuous mode [ 360.514794][T15978] syzkaller0: entered allmulticast mode [ 360.669461][T15978] tipc: Resetting bearer [ 360.696892][T15977] tipc: Resetting bearer [ 360.705783][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.751649][T15977] tipc: Disabling bearer [ 361.061939][T16007] netlink: 'syz.0.3554': attribute type 9 has an invalid length. [ 361.138322][T16009] veth0: entered promiscuous mode [ 361.301458][T16017] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 361.503446][T16008] veth0: left promiscuous mode [ 361.735647][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.634148][T16067] netlink: 'syz.2.3572': attribute type 5 has an invalid length. [ 362.775647][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.807376][T16072] ipvlan2: entered promiscuous mode [ 363.031737][T16081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.816610][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 363.943890][T16118] __nla_validate_parse: 14 callbacks suppressed [ 363.943912][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3587'. [ 363.988964][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3587'. [ 364.114342][T16118] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3587'. [ 364.135431][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3587'. [ 364.161051][T16118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.162815][T16124] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3592'. [ 364.319397][T16118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.446446][T16127] net veth1_virt_wifi .: renamed from virt_wifi0 [ 364.548127][T16134] netlink: 'syz.2.3596': attribute type 32 has an invalid length. [ 364.559345][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'. [ 364.573782][T16134] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 364.585499][T16135] netlink: 'syz.1.3595': attribute type 1 has an invalid length. [ 364.800888][T16135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.855996][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.911647][T16140] bond1: (slave geneve2): making interface the new active one [ 364.950402][T16140] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 365.321966][T16170] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 365.759664][T16190] geneve3: entered promiscuous mode [ 365.772586][T16190] geneve3: entered allmulticast mode [ 365.787137][ T5868] IPVS: starting estimator thread 0... [ 365.808157][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 365.839806][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 365.874034][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 365.885889][T16196] IPVS: using max 26 ests per chain, 62400 per kthread [ 365.895753][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 365.908325][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 366.094158][T16200] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3613'. [ 366.220764][T16203] bridge_slave_0: left allmulticast mode [ 366.236212][T16203] bridge_slave_0: left promiscuous mode [ 366.306912][T16203] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.395120][T16203] bridge_slave_1: left allmulticast mode [ 366.424433][T16203] bridge_slave_1: left promiscuous mode [ 366.452360][T16203] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.533620][T16203] bond0: (slave bond_slave_0): Releasing backup interface [ 366.574845][T16203] bond0: (slave bond_slave_1): Releasing backup interface [ 366.650389][T16203] team0: Port device team_slave_0 removed [ 366.699339][T16203] team0: Port device team_slave_1 removed [ 366.722691][T16203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.739028][T16203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.822990][T16225] tipc: Enabling of bearer rejected, failed to enable media [ 366.935668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.999551][T16251] netlink: 'syz.1.3624': attribute type 32 has an invalid length. [ 367.018916][ T55] block nbd0: Possible stuck request ffff888025485080: control (read@0,1024B). Runtime 240 seconds [ 367.025683][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'. [ 367.030574][ T55] block nbd0: Possible stuck request ffff888025485240: control (read@1024,1024B). Runtime 240 seconds [ 367.049805][ T55] block nbd0: Possible stuck request ffff888025485400: control (read@2048,1024B). Runtime 240 seconds [ 367.061416][ T55] block nbd0: Possible stuck request ffff8880254855c0: control (read@3072,1024B). Runtime 240 seconds [ 367.123625][T16251] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 367.481578][T16267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3630'. [ 367.828012][T16286] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3635'. [ 367.931735][T16293] netlink: 'syz.1.3638': attribute type 1 has an invalid length. [ 367.975663][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.986305][T16293] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 368.110298][T16306] netlink: 'syz.3.3641': attribute type 32 has an invalid length. [ 368.195250][T16313] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 368.267867][T16306] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 368.321414][T16315] 8021q: VLANs not supported on vcan0 [ 368.623369][T16330] pim6reg1: entered promiscuous mode [ 368.656325][T16330] pim6reg1: entered allmulticast mode [ 368.823634][T16340] bond0: option ad_select: unable to set because the bond device is up [ 368.848482][T16341] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 369.015747][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.053319][T16351] __nla_validate_parse: 7 callbacks suppressed [ 369.053341][T16351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3655'. [ 369.090078][T16352] netlink: 'syz.0.3656': attribute type 1 has an invalid length. [ 369.325021][T16352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 369.426396][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3658'. [ 369.441376][T16358] bond2: (slave geneve2): making interface the new active one [ 369.453180][T16358] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 369.652102][T16374] netlink: 'syz.4.3663': attribute type 13 has an invalid length. [ 369.694641][T16374] lo: entered promiscuous mode [ 369.705683][T16374] lo: entered allmulticast mode [ 369.726816][T16374] tunl0: entered promiscuous mode [ 369.731906][T16374] tunl0: entered allmulticast mode [ 369.777541][T16374] gre0: entered promiscuous mode [ 369.796495][T16374] gre0: entered allmulticast mode [ 369.829448][T16374] gretap0: entered promiscuous mode [ 369.849832][T16374] gretap0: entered allmulticast mode [ 369.877115][T16386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3666'. [ 369.882025][T16374] gretap0: refused to change device tx_queue_len [ 369.893996][T16374] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 369.911831][T16380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3666'. [ 369.974489][T16380] tc_dump_action: action bad kind [ 370.042679][T16380] netlink: 'syz.1.3666': attribute type 1 has an invalid length. [ 370.055722][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.252473][T16398] netlink: 'syz.4.3669': attribute type 32 has an invalid length. [ 370.281211][T16400] netlink: 'syz.0.3670': attribute type 29 has an invalid length. [ 370.290990][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'. [ 370.313487][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3669'. [ 370.344984][T16400] netlink: 'syz.0.3670': attribute type 29 has an invalid length. [ 370.353062][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'. [ 370.370157][T16398] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 370.785235][T14396] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 370.803280][T16419] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3675'. [ 370.860219][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 371.095764][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.178086][T16436] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 371.712466][T16448] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3683'. [ 372.125809][T16470] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3689'. [ 372.138348][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.478314][T16486] netlink: 'syz.2.3695': attribute type 25 has an invalid length. [ 372.515323][ T49] tipc: Subscription rejected, illegal request [ 372.877495][T16504] tipc: Enabled bearer , priority 0 [ 372.892126][T16504] syzkaller0: entered promiscuous mode [ 372.924826][T16504] syzkaller0: entered allmulticast mode [ 372.984682][T16504] tipc: Resetting bearer [ 373.000175][T16503] tipc: Resetting bearer [ 373.033148][T16503] tipc: Disabling bearer [ 373.175850][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.769205][T16542] netlink: 'syz.0.3714': attribute type 32 has an invalid length. [ 373.836214][T16542] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 373.903156][T16548] syzkaller0: entered promiscuous mode [ 373.916340][T16548] syzkaller0: entered allmulticast mode [ 373.921673][T16549] netlink: 'syz.4.3717': attribute type 1 has an invalid length. [ 373.994549][T16553] netlink: 'syz.3.3716': attribute type 7 has an invalid length. [ 374.139424][T16553] : entered promiscuous mode [ 374.215707][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.621261][T16573] __nla_validate_parse: 5 callbacks suppressed [ 374.621282][T16573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3725'. [ 374.710985][T16571] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3724'. [ 374.854860][T16582] netlink: 'syz.2.3728': attribute type 32 has an invalid length. [ 374.901152][T16586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.912540][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 374.935405][T16587] netlink: 'syz.3.3731': attribute type 1 has an invalid length. [ 374.943957][T16582] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 374.988604][T16593] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3733'. [ 375.093764][T16597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3730'. [ 375.108566][T16600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3731'. [ 375.173483][T16592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.193456][T16592] bond5: (slave bond6): making interface the new active one [ 375.206460][T16592] bond5: (slave bond6): Enslaving as an active interface with an up link [ 375.255749][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.272236][T16596] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 375.312012][T16600] 8021q: adding VLAN 0 to HW filter on device bond5 [ 375.634842][T16611] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3738'. [ 375.771962][T16623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3743'. [ 375.822002][T16621] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3742'. [ 376.249234][T16642] netlink: 'syz.0.3749': attribute type 2 has an invalid length. [ 376.295763][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.336206][T16644] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3750'. [ 376.632533][T16660] tipc: Started in network mode [ 376.661891][T16660] tipc: Node identity f6f662151432, cluster identity 4711 [ 376.748630][T16660] tipc: Enabled bearer , priority 0 [ 376.764428][T16665] syzkaller0: entered promiscuous mode [ 376.785414][T16665] syzkaller0: entered allmulticast mode [ 376.929991][T16665] tipc: Resetting bearer [ 377.062147][T16665] tipc: Disabling bearer [ 377.335692][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.335850][T16696] netlink: 'syz.4.3763': attribute type 32 has an invalid length. [ 377.419351][T16696] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 377.801837][T16711] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 377.858543][T16711] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 378.165099][T16735] netlink: 'syz.2.3774': attribute type 1 has an invalid length. [ 378.338872][T16735] 8021q: adding VLAN 0 to HW filter on device bond4 [ 378.385737][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.418529][T16740] bond4: (slave geneve2): making interface the new active one [ 378.462012][T16740] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 378.553352][T16749] netlink: 'syz.3.3779': attribute type 32 has an invalid length. [ 378.582073][T16749] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 378.810763][T16754] tap0: tun_chr_ioctl cmd 1074025672 [ 378.816303][T16754] tap0: ignored: set checksum disabled [ 379.186953][T16788] netlink: 'syz.0.3792': attribute type 1 has an invalid length. [ 379.320798][T16788] 8021q: adding VLAN 0 to HW filter on device bond4 [ 379.359404][T16787] tipc: Started in network mode [ 379.373199][T16787] tipc: Node identity aa52f8f8d1d3, cluster identity 4711 [ 379.413735][T16787] tipc: Enabled bearer , priority 0 [ 379.425744][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.484378][T16800] syzkaller0: entered promiscuous mode [ 379.535948][T16800] syzkaller0: entered allmulticast mode [ 379.667798][T16813] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 379.688964][T16800] tipc: Resetting bearer [ 379.718972][T16814] netlink: 'syz.4.3798': attribute type 21 has an invalid length. [ 379.727398][T16814] __nla_validate_parse: 9 callbacks suppressed [ 379.727415][T16814] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3798'. [ 379.753463][T16800] tipc: Disabling bearer [ 379.963353][T16824] netlink: 'syz.4.3801': attribute type 33 has an invalid length. [ 380.400421][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3809'. [ 380.456678][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.652836][T16852] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.660698][T16852] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.704007][T16860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3813'. [ 380.725072][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 380.865853][T16865] netlink: 'syz.2.3815': attribute type 21 has an invalid length. [ 380.906887][T16865] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3815'. [ 380.917070][T16865] netlink: 'syz.2.3815': attribute type 4 has an invalid length. [ 380.926839][T16867] netlink: 'syz.2.3815': attribute type 21 has an invalid length. [ 380.934800][T16865] netlink: 'syz.2.3815': attribute type 5 has an invalid length. [ 380.952537][T16867] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3815'. [ 380.962212][T16865] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3815'. [ 380.988955][T16867] netlink: 'syz.2.3815': attribute type 4 has an invalid length. [ 381.011708][T16867] netlink: 'syz.2.3815': attribute type 5 has an invalid length. [ 381.034760][T16867] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3815'. [ 381.495648][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.599573][T16894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3825'. [ 381.609855][T16894] bridge_slave_1: left allmulticast mode [ 381.615532][T16894] bridge_slave_1: left promiscuous mode [ 381.642236][T16894] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.699953][T16894] bridge_slave_0: left allmulticast mode [ 381.709743][T16894] bridge_slave_0: left promiscuous mode [ 381.721128][T16894] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.197175][T16922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.228448][T16924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3833'. [ 382.545634][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.536886][T16967] netlink: 'syz.1.3846': attribute type 11 has an invalid length. [ 383.575654][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.615760][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.770694][T17019] __nla_validate_parse: 6 callbacks suppressed [ 384.770714][T17019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3863'. [ 384.823523][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3863'. [ 385.165176][T17034] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 385.282970][T17046] netlink: 'syz.1.3871': attribute type 11 has an invalid length. [ 385.333071][T17046] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3871'. [ 385.441244][T17052] netlink: 'syz.2.3873': attribute type 1 has an invalid length. [ 385.655794][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.871380][T17077] sctp: [Deprecated]: syz.1.3882 (pid 17077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.871380][T17077] Use struct sctp_sack_info instead [ 385.908772][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3883'. [ 385.925820][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3883'. [ 385.951941][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 386.186530][T17093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 386.281419][T17097] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 386.321427][T17101] netlink: 'syz.3.3890': attribute type 1 has an invalid length. [ 386.695643][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.964827][T17129] netlink: 'syz.0.3901': attribute type 1 has an invalid length. [ 386.982805][T17130] smc: net device bond0 applied user defined pnetid SYZ2 [ 387.006014][T17130] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3900'. [ 387.017557][T17130] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3900'. [ 387.101842][T17129] 8021q: adding VLAN 0 to HW filter on device bond5 [ 387.111624][T17135] netlink: 'syz.1.3902': attribute type 21 has an invalid length. [ 387.240855][T17137] xt_policy: too many policy elements [ 387.273756][T17130] smc: removing net device bond0 with user defined pnetid SYZ2 [ 387.289255][T17130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.303348][T17130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.320142][T17130] bond0 (unregistering): Released all slaves [ 387.353873][T17135] netlink: 'syz.1.3902': attribute type 6 has an invalid length. [ 387.376744][T17135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3902'. [ 387.593955][T17144] netlink: 'syz.4.3905': attribute type 1 has an invalid length. [ 387.735731][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.764923][T17148] vlan2: entered promiscuous mode [ 388.037878][T17165] netlink: 'syz.4.3913': attribute type 1 has an invalid length. [ 388.054044][T17168] netlink: 'syz.3.3914': attribute type 32 has an invalid length. [ 388.130650][T17165] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.140593][T17168] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 388.230953][T17168] smc: adding net device bond0 with user defined pnetid SYZ2 [ 388.708283][T17189] netlink: 'syz.1.3922': attribute type 72 has an invalid length. [ 388.778525][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 388.842818][T17196] delete_channel: no stack [ 389.021340][T17206] netlink: 'syz.0.3929': attribute type 1 has an invalid length. [ 389.035314][T17198] C: renamed from team_slave_0 (while UP) [ 389.060722][T17198] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 389.204442][T17206] 8021q: adding VLAN 0 to HW filter on device bond6 [ 389.261691][T17220] openvswitch: netlink: Unknown key attributes 2 [ 389.803050][T17232] __nla_validate_parse: 4 callbacks suppressed [ 389.803071][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3938'. [ 389.825847][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.104395][T17250] 8021q: adding VLAN 0 to HW filter on device bond5 [ 390.155255][T17257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3945'. [ 390.786408][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3955'. [ 390.865819][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.938931][T17291] validate_nla: 2 callbacks suppressed [ 390.938952][T17291] netlink: 'syz.0.3957': attribute type 1 has an invalid length. [ 391.058258][T17291] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.082770][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3960'. [ 391.161280][T17302] lo: left allmulticast mode [ 391.193238][T17302] tunl0: left allmulticast mode [ 391.214765][T17302] gre0: left allmulticast mode [ 391.236118][T17302] gretap0: left allmulticast mode [ 391.258905][T17302] erspan0: entered promiscuous mode [ 391.292141][T17302] ip_vti0: entered promiscuous mode [ 391.480486][T17315] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3964'. [ 391.521389][T17315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3964'. [ 391.565748][T17315] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3964'. [ 391.588199][T17315] netlink: 'syz.4.3964': attribute type 3 has an invalid length. [ 391.635696][T17315] netlink: 'syz.4.3964': attribute type 2 has an invalid length. [ 391.644374][T17315] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3964'. [ 391.895631][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.925303][T17331] netlink: 'syz.2.3971': attribute type 1 has an invalid length. [ 392.054328][T17331] 8021q: adding VLAN 0 to HW filter on device bond6 [ 392.132953][T17335] netlink: 'syz.0.3972': attribute type 72 has an invalid length. [ 392.203660][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3974'. [ 392.935672][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.985185][T17376] sctp: [Deprecated]: syz.1.3987 (pid 17376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.985185][T17376] Use struct sctp_sack_info instead [ 393.046223][T17377] netlink: 'syz.0.3985': attribute type 72 has an invalid length. [ 393.047370][T17380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3988'. [ 393.151068][T17381] veth3: entered allmulticast mode [ 393.522168][T17397] gtp0: entered promiscuous mode [ 393.930375][T17414] tipc: New replicast peer: 255.255.255.255 [ 393.936916][T17414] tipc: Enabled bearer , priority 10 [ 393.975650][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.103717][T17422] netlink: 'syz.4.4000': attribute type 72 has an invalid length. [ 394.531545][T17435] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 394.590498][T17435] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 394.660474][T17435] gretap1: entered promiscuous mode [ 394.678749][T17435] gretap1: entered allmulticast mode [ 394.988467][T17460] __nla_validate_parse: 3 callbacks suppressed [ 394.988486][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4013'. [ 395.015789][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.169240][T17465] syzkaller0: entered promiscuous mode [ 395.174839][T17465] syzkaller0: entered allmulticast mode [ 395.200520][T17463] tipc: Enabled bearer , priority 0 [ 395.359102][T17465] tipc: Resetting bearer [ 395.477201][T17465] tipc: Disabling bearer [ 395.541748][T17485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4019'. [ 395.662083][T17487] netlink: 'syz.3.4020': attribute type 1 has an invalid length. [ 395.696811][T17487] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4020'. [ 395.892306][T17503] netlink: 'syz.1.4025': attribute type 2 has an invalid length. [ 396.055677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.115990][T17514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4029'. [ 396.125068][T17517] tipc: Enabling of bearer rejected, failed to enable media [ 396.571323][T17537] netlink: 'syz.3.4035': attribute type 4 has an invalid length. [ 396.586264][T17537] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4035'. [ 396.819871][T17548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4040'. [ 396.843256][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4040'. [ 397.010542][T17559] netlink: 'syz.0.4043': attribute type 32 has an invalid length. [ 397.034011][T17561] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4045'. [ 397.051372][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4043'. [ 397.075844][T17559] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 397.096056][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.104387][ T55] block nbd0: Possible stuck request ffff888025485080: control (read@0,1024B). Runtime 270 seconds [ 397.115533][ T55] block nbd0: Possible stuck request ffff888025485240: control (read@1024,1024B). Runtime 270 seconds [ 397.127521][ T55] block nbd0: Possible stuck request ffff888025485400: control (read@2048,1024B). Runtime 270 seconds [ 397.139515][ T55] block nbd0: Possible stuck request ffff8880254855c0: control (read@3072,1024B). Runtime 270 seconds [ 397.221266][T17569] pimreg3: entered allmulticast mode [ 397.471595][T17577] lo: entered promiscuous mode [ 397.501729][T17577] tunl0: entered promiscuous mode [ 397.510869][T17577] gre0: entered promiscuous mode [ 397.532835][T17577] gretap0: entered promiscuous mode [ 397.551608][T17577] erspan0: entered promiscuous mode [ 397.562255][T17577] ip_vti0: entered promiscuous mode [ 397.604268][T17582] 8021q: adding VLAN 0 to HW filter on device bond7 [ 398.110099][T17600] vxcan1: tx address claim with dlc 1 [ 398.145780][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.235874][T17612] netlink: 'syz.3.4057': attribute type 32 has an invalid length. [ 398.267746][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4057'. [ 398.286369][T17612] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 398.420039][T17615] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3944. macoff=96 [ 398.615034][ T30] audit: type=1804 audit(1755696432.625:3): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4061" name="/newroot/200/cgroup.controllers" dev="tmpfs" ino=1028 res=1 errno=0 [ 398.705734][ T30] audit: type=1800 audit(1755696432.665:4): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4061" name="cgroup.controllers" dev="tmpfs" ino=1028 res=0 errno=0 [ 399.044209][T17641] syzkaller1: entered promiscuous mode [ 399.062699][T17641] syzkaller1: entered allmulticast mode [ 399.100700][T17643] batman_adv: batadv0: Adding interface: dummy0 [ 399.112742][T17643] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.143017][T17643] batman_adv: batadv0: Interface activated: dummy0 [ 399.155501][T17650] openvswitch: netlink: IP tunnel TTL not specified. [ 399.157010][T17641] pim6reg1: entered allmulticast mode [ 399.175754][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 399.312002][T17653] netlink: 'syz.3.4071': attribute type 32 has an invalid length. [ 399.320635][T17653] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 399.425268][T17658] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 399.459286][T17658] tipc: New replicast peer: 0.0.0.0 [ 399.506146][T17658] tipc: Enabled bearer , priority 10 [ 400.052285][T17686] netlink: 'syz.2.4082': attribute type 32 has an invalid length. [ 400.057293][T17683] __nla_validate_parse: 6 callbacks suppressed [ 400.057317][T17683] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4081'. [ 400.081005][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4082'. [ 400.109228][T17678] netlink: 'syz.4.4081': attribute type 1 has an invalid length. [ 400.136381][T17686] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 400.215681][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.383391][T17694] tipc: Enabled bearer , priority 0 [ 400.404811][T17698] syzkaller0: entered promiscuous mode [ 400.433227][T17698] syzkaller0: entered allmulticast mode [ 400.491845][T17702] netlink: 'syz.0.4086': attribute type 32 has an invalid length. [ 400.512375][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4086'. [ 400.608751][T17702] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 400.618340][ T5945] tipc: Node number set to 2560915563 [ 400.669481][T17704] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4084'. [ 400.751195][T17694] tipc: Resetting bearer [ 400.884386][T17692] tipc: Resetting bearer [ 400.909849][T17712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.974468][T17692] tipc: Disabling bearer [ 401.069306][T17709] pim6reg1: entered promiscuous mode [ 401.095721][T17709] pim6reg1: entered allmulticast mode [ 401.175315][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4095'. [ 401.203610][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4095'. [ 401.229093][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4095'. [ 401.255732][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.426829][T17744] netlink: 'syz.4.4101': attribute type 32 has an invalid length. [ 401.434934][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4101'. [ 401.561369][T17744] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 401.942293][T17763] veth0_to_bridge: entered promiscuous mode [ 402.077940][T17765] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4110'. [ 402.235913][T17762] veth0_to_bridge: left promiscuous mode [ 402.295655][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.404800][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 403.209534][T17820] netlink: 'syz.2.4126': attribute type 1 has an invalid length. [ 403.250764][T17820] netlink: 'syz.2.4126': attribute type 1 has an invalid length. [ 403.335727][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.447786][T17830] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 403.505345][T17830] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.514148][T17830] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.659277][T17825] dvmrp0: entered allmulticast mode [ 404.375697][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.404134][T17872] netlink: 'syz.0.4145': attribute type 9 has an invalid length. [ 404.802960][T17898] netlink: 'syz.4.4154': attribute type 32 has an invalid length. [ 404.830701][T17898] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 404.917291][T17904] netlink: 'syz.0.4153': attribute type 33 has an invalid length. [ 405.352810][T17926] __nla_validate_parse: 5 callbacks suppressed [ 405.352830][T17926] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4163'. [ 405.383385][T17924] bond0: entered promiscuous mode [ 405.395767][T17924] bond_slave_0: entered promiscuous mode [ 405.402210][T17924] bond_slave_1: entered promiscuous mode [ 405.403928][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4163'. [ 405.417682][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.454127][T17924] batadv0: entered promiscuous mode [ 405.473882][T17931] netlink: 'syz.4.4164': attribute type 28 has an invalid length. [ 405.484804][T17924] hsr1: entered allmulticast mode [ 405.495976][T17931] netlink: 'syz.4.4164': attribute type 3 has an invalid length. [ 405.504378][T17924] bond0: entered allmulticast mode [ 405.514507][T17924] bond_slave_0: entered allmulticast mode [ 405.524639][T17931] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4164'. [ 405.532109][T17929] netlink: 'syz.0.4163': attribute type 30 has an invalid length. [ 405.543137][T17924] bond_slave_1: entered allmulticast mode [ 405.551133][T17924] batadv0: entered allmulticast mode [ 405.576517][T17924] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 405.582332][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4163'. [ 405.626246][T17924] bond0: left promiscuous mode [ 405.658203][T17924] bond_slave_0: left promiscuous mode [ 405.680000][T17924] bond_slave_1: left promiscuous mode [ 405.699063][T17924] batadv0: left promiscuous mode [ 405.924914][T17945] tipc: New replicast peer: 255.255.255.255 [ 405.950766][T17945] tipc: Enabled bearer , priority 10 [ 406.122911][T17960] tipc: New replicast peer: 255.255.255.255 [ 406.132767][T17960] tipc: Enabled bearer , priority 10 [ 406.283388][T17966] netlink: 'syz.4.4177': attribute type 1 has an invalid length. [ 406.353547][T17966] 8021q: adding VLAN 0 to HW filter on device bond7 [ 406.455698][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.721396][T17981] netlink: 'syz.4.4181': attribute type 5 has an invalid length. [ 406.843382][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4184'. [ 406.872332][T17988] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 406.967652][T17991] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 407.050309][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4186'. [ 407.065979][T14011] tipc: Node number set to 2072115448 [ 407.073939][T17994] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.081205][T17994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.088821][T17994] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.096017][T17994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.144773][T17994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.495922][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.547653][T18019] netlink: 194480 bytes leftover after parsing attributes in process `syz.3.4192'. [ 407.875374][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4199'. [ 407.916818][T18036] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 408.276640][T18056] validate_nla: 3 callbacks suppressed [ 408.276660][T18056] netlink: 'syz.3.4205': attribute type 72 has an invalid length. [ 408.485470][T18067] syzkaller1: entered promiscuous mode [ 408.504850][T18067] syzkaller1: entered allmulticast mode [ 408.545689][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.674075][T18074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.811225][T18078] tunl0: entered promiscuous mode [ 408.831442][T18078] netlink: 'syz.1.4214': attribute type 3 has an invalid length. [ 408.848594][T18078] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4214'. [ 409.012144][T18082] netlink: 'syz.2.4215': attribute type 32 has an invalid length. [ 409.034409][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4215'. [ 409.078612][T18082] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 409.157211][T18085] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 409.528163][T18101] tipc: Enabled bearer , priority 0 [ 409.553908][T18101] syzkaller0: entered promiscuous mode [ 409.558546][T18103] netlink: 'syz.2.4221': attribute type 72 has an invalid length. [ 409.570688][T18101] syzkaller0: entered allmulticast mode [ 409.576707][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.649737][T18106] tipc: Resetting bearer [ 409.686515][T18099] tipc: Resetting bearer [ 409.789796][T18099] tipc: Disabling bearer [ 409.981635][T18122] netlink: 'syz.4.4227': attribute type 2 has an invalid length. [ 410.029674][T18122] veth0: entered promiscuous mode [ 410.171762][T18121] veth0: left promiscuous mode [ 410.199311][T18132] netlink: 'syz.1.4230': attribute type 1 has an invalid length. [ 410.301177][T18138] netlink: 'syz.0.4232': attribute type 13 has an invalid length. [ 410.332498][T18140] netlink: 'syz.2.4231': attribute type 32 has an invalid length. [ 410.334896][T18132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.359630][T18140] __nla_validate_parse: 1 callbacks suppressed [ 410.359648][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4231'. [ 410.401801][T18140] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 410.615797][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 410.694474][T18157] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4237'. [ 410.750878][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4237'. [ 410.980302][T14009] IPVS: starting estimator thread 0... [ 410.986901][T18169] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 411.106450][T18174] IPVS: using max 26 ests per chain, 62400 per kthread [ 411.214828][T18183] netlink: 'syz.3.4245': attribute type 1 has an invalid length. [ 411.223708][T18182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4244'. [ 411.251365][T18176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4243'. [ 411.292439][T18183] 8021q: adding VLAN 0 to HW filter on device bond11 [ 411.294086][T18187] netlink: 'syz.1.4246': attribute type 32 has an invalid length. [ 411.341467][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 411.398652][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4246'. [ 411.490275][T18187] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 411.655816][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.039743][T18221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4256'. [ 412.097688][T18206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4253'. [ 412.172077][T18229] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4258'. [ 412.361833][T18236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4259'. [ 412.695772][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.407984][T18292] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 413.502182][T18297] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 413.735910][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.839517][T18307] netlink: 'syz.1.4285': attribute type 1 has an invalid length. [ 414.253247][T18332] netlink: 'syz.1.4294': attribute type 1 has an invalid length. [ 414.470971][T18341] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 414.550067][T18341] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 414.642843][T18332] gretap2: entered promiscuous mode [ 414.690885][T18332] bond5: (slave gretap2): making interface the new active one [ 414.751274][T18332] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 414.785690][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.806654][T18344] macvlan2: entered promiscuous mode [ 414.838389][T18344] macvlan2: entered allmulticast mode [ 414.845195][T18344] bond5: entered promiscuous mode [ 414.855366][T18344] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 414.871586][T18344] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 414.894234][T18344] bond5: left promiscuous mode [ 414.938349][T18358] netlink: 'syz.4.4302': attribute type 1 has an invalid length. [ 415.089557][T18364] netlink: 'syz.2.4303': attribute type 1 has an invalid length. [ 415.282775][T18382] netlink: 'syz.0.4306': attribute type 1 has an invalid length. [ 415.283590][T18366] bond12: (slave gretap1): making interface the new active one [ 415.356630][T18366] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 415.815676][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 415.824595][T18403] __nla_validate_parse: 6 callbacks suppressed [ 415.824614][T18403] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4315'. [ 415.911887][T18403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.976018][T18404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4315'. [ 416.303217][T18425] bridge_slave_0: left allmulticast mode [ 416.346580][T18425] bridge_slave_0: left promiscuous mode [ 416.356540][T18425] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.414434][T18425] bridge_slave_1: left allmulticast mode [ 416.442760][T18425] bridge_slave_1: left promiscuous mode [ 416.462113][T18425] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.491137][T18425] bond0: (slave bond_slave_0): Releasing backup interface [ 416.511853][T18425] bond0: (slave bond_slave_1): Releasing backup interface [ 416.532543][T18425] team0: Port device team_slave_0 removed [ 416.553916][T18425] team0: Port device team_slave_1 removed [ 416.562232][T18425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.570055][T18425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.580485][T18425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.590309][T18425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.619602][T18425] bond1: (slave geneve2): Releasing active interface [ 416.646248][ T5868] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 416.767481][T14009] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 416.855762][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.870843][T18441] tipc: Enabling of bearer rejected, failed to enable media [ 417.370549][T18465] netlink: 'syz.2.4334': attribute type 13 has an invalid length. [ 417.434201][T18470] netlink: 'syz.0.4335': attribute type 33 has an invalid length. [ 417.462821][T18470] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 417.517571][T18472] sctp: [Deprecated]: syz.3.4337 (pid 18472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.517571][T18472] Use struct sctp_sack_info instead [ 417.577468][T18470] tipc: Started in network mode [ 417.582406][T18470] tipc: Node identity 062596af81a9, cluster identity 4711 [ 417.600857][T18470] tipc: Enabled bearer , priority 0 [ 417.874673][T18485] syzkaller0: entered promiscuous mode [ 417.888016][T18485] syzkaller0: entered allmulticast mode [ 417.895630][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.900562][T18485] tipc: Resetting bearer [ 418.144564][T18508] netlink: 'syz.2.4347': attribute type 1 has an invalid length. [ 418.235883][T18466] tipc: Resetting bearer [ 418.667794][T14009] tipc: Node number set to 2274137775 [ 418.945658][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.499323][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.975634][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.213779][T18466] tipc: Disabling bearer [ 420.231536][T18508] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 420.441674][T18523] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4353'. [ 420.493059][T18527] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4354'. [ 420.870238][T18548] netlink: 'syz.4.4360': attribute type 1 has an invalid length. [ 420.987011][T18553] netlink: 516 bytes leftover after parsing attributes in process `syz.4.4360'. [ 421.015671][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.073532][T18556] netlink: 'syz.0.4364': attribute type 11 has an invalid length. [ 421.550369][T18570] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4368'. [ 421.782341][T18583] netlink: 'syz.3.4372': attribute type 1 has an invalid length. [ 422.038267][T18587] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 422.056105][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.080359][T18587] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 422.120750][T18590] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 422.143464][T18583] gretap3: entered promiscuous mode [ 422.155055][T18583] bond12: (slave gretap3): making interface the new active one [ 422.169162][T18583] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 422.190754][T18600] gtp1: entered promiscuous mode [ 422.203464][T18600] gtp1: entered allmulticast mode [ 422.267209][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4372'. [ 422.290975][T18587] macvlan2: entered promiscuous mode [ 422.297639][T18587] macvlan2: entered allmulticast mode [ 422.576929][T18618] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4383'. [ 422.689093][T18620] tipc: Enabled bearer , priority 0 [ 422.757229][T18628] syzkaller0: entered promiscuous mode [ 422.762759][T18628] syzkaller0: entered allmulticast mode [ 422.848206][T18620] tipc: Resetting bearer [ 422.887054][T18619] tipc: Resetting bearer [ 422.946309][T18619] tipc: Disabling bearer [ 422.968144][T18641] netlink: 'syz.2.4391': attribute type 4 has an invalid length. [ 423.094049][T18645] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 423.101839][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.144182][T18645] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 423.195813][T18650] netlink: 'syz.2.4395': attribute type 32 has an invalid length. [ 423.227194][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4395'. [ 423.259559][T18650] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 423.683744][T18664] tipc: Enabled bearer , priority 0 [ 423.761684][T18680] syzkaller0: entered promiscuous mode [ 423.767612][T18680] syzkaller0: entered allmulticast mode [ 423.774697][T18680] tipc: Resetting bearer [ 423.924776][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4404'. [ 423.942147][T18662] tipc: Resetting bearer [ 424.135644][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.178726][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.154729][T18662] tipc: Disabling bearer [ 426.215636][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.337298][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4414'. [ 426.558203][T18731] tipc: Enabled bearer , priority 0 [ 426.603743][T18731] tipc: Resetting bearer [ 426.617999][T18735] netlink: 'syz.3.4420': attribute type 1 has an invalid length. [ 426.703657][T18735] 8021q: adding VLAN 0 to HW filter on device bond13 [ 426.848628][T18748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4420'. [ 426.877087][T18742] 8021q: adding VLAN 0 to HW filter on device bond13 [ 426.885169][T18747] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4424'. [ 426.908505][T18742] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 426.964351][T18742] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 427.185424][ T55] block nbd0: Possible stuck request ffff888025485080: control (read@0,1024B). Runtime 300 seconds [ 427.196922][ T55] block nbd0: Possible stuck request ffff888025485240: control (read@1024,1024B). Runtime 300 seconds [ 427.210032][ T55] block nbd0: Possible stuck request ffff888025485400: control (read@2048,1024B). Runtime 300 seconds [ 427.221320][ T55] block nbd0: Possible stuck request ffff8880254855c0: control (read@3072,1024B). Runtime 300 seconds [ 427.248625][T18735] veth7: entered promiscuous mode [ 427.255766][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.272802][T18735] bond13: (slave veth7): Enslaving as an active interface with a down link [ 427.285046][T18748] 8021q: adding VLAN 0 to HW filter on device bond13 [ 427.342997][T18759] can: request_module (can-proto-5) failed. [ 427.511035][T18771] netlink: 'syz.3.4429': attribute type 1 has an invalid length. [ 427.608982][T18771] 8021q: adding VLAN 0 to HW filter on device bond14 [ 427.671556][T18780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.815320][T18780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4432'. [ 427.815320][T18782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4432'. [ 427.915866][T18791] tipc: Enabled bearer , priority 0 [ 427.983735][T18792] syzkaller0: entered promiscuous mode [ 428.067563][T18792] syzkaller0: entered allmulticast mode [ 428.113436][T18787] tipc: Resetting bearer [ 428.154565][T18786] tipc: Resetting bearer [ 428.252154][T18786] tipc: Disabling bearer [ 428.295731][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.495287][T18815] netlink: 'syz.3.4444': attribute type 1 has an invalid length. [ 428.619947][T18814] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 428.656615][T18824] netlink: 'syz.1.4447': attribute type 6 has an invalid length. [ 428.790061][T18815] 8021q: adding VLAN 0 to HW filter on device bond15 [ 428.909217][T18832] nbd: must specify a device to reconfigure [ 429.023479][T18840] netlink: 'syz.1.4452': attribute type 1 has an invalid length. [ 429.034445][T18841] netlink: 'syz.4.4449': attribute type 4 has an invalid length. [ 429.046577][T18840] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4452'. [ 429.078325][T18845] netlink: 'syz.3.4454': attribute type 1 has an invalid length. [ 429.272888][T18851] tipc: Enabled bearer , priority 0 [ 429.293685][T18851] syzkaller0: entered promiscuous mode [ 429.330683][T18851] syzkaller0: entered allmulticast mode [ 429.341485][T18854] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4457'. [ 429.353100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.357026][T18851] tipc: Resetting bearer [ 429.413812][T18850] tipc: Resetting bearer [ 429.450125][T18850] tipc: Disabling bearer [ 429.611897][T18866] netlink: 'syz.2.4461': attribute type 1 has an invalid length. [ 429.614049][T18863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4459'. [ 429.670999][T18866] 8021q: adding VLAN 0 to HW filter on device bond14 [ 429.892809][T18880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.083934][T18887] netlink: 'syz.0.4463': attribute type 10 has an invalid length. [ 430.161615][T18887] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 430.375722][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.525949][T18902] netlink: 'syz.2.4468': attribute type 10 has an invalid length. [ 430.605490][T18908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4471'. [ 430.706324][T18911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4470'. [ 430.730689][T18908] team0: Port device geneve0 added [ 430.851294][T18913] 8021q: adding VLAN 0 to HW filter on device bond17 [ 430.917723][T18924] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 431.041718][T18929] geneve3: entered promiscuous mode [ 431.415805][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.500044][T18944] __nla_validate_parse: 2 callbacks suppressed [ 431.500066][T18944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4481'. [ 431.517515][T18941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4480'. [ 431.537773][T18944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4481'. [ 431.637185][T18950] syzkaller1: entered promiscuous mode [ 431.662545][T18950] syzkaller1: entered allmulticast mode [ 431.807459][T18955] validate_nla: 4 callbacks suppressed [ 431.807479][T18955] netlink: 'syz.1.4486': attribute type 1 has an invalid length. [ 431.821516][ T5864] Bluetooth: hci5: command 0x0406 tx timeout [ 431.951748][T18955] 8021q: adding VLAN 0 to HW filter on device bond6 [ 432.170149][T18972] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4490'. [ 432.176051][T18973] netlink: 'syz.1.4489': attribute type 32 has an invalid length. [ 432.181446][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4490'. [ 432.201385][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4489'. [ 432.235710][T18962] syz.0.4485 (18962) used greatest stack depth: 15128 bytes left [ 432.244453][T18973] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 432.455727][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.711314][T18991] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4495'. [ 432.789085][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 433.001122][T19004] netlink: 'syz.1.4499': attribute type 1 has an invalid length. [ 433.011720][T19006] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4500'. [ 433.244118][T19019] netlink: 'syz.0.4504': attribute type 32 has an invalid length. [ 433.250558][T19004] 8021q: adding VLAN 0 to HW filter on device bond8 [ 433.315671][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4504'. [ 433.324968][T19019] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 433.505652][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.898987][T19055] netlink: 'syz.4.4514': attribute type 1 has an invalid length. [ 433.945422][T19063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.101202][T19055] 8021q: adding VLAN 0 to HW filter on device bond9 [ 434.200503][T19076] netlink: 'syz.3.4517': attribute type 1 has an invalid length. [ 434.239562][T19078] netlink: 'syz.0.4518': attribute type 10 has an invalid length. [ 434.267923][T19076] 8021q: adding VLAN 0 to HW filter on device bond18 [ 434.316869][T19078] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.344138][T19078] bond0: (slave team0): Enslaving as an active interface with an up link [ 434.545756][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.291493][T19138] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 435.391997][T19141] netlink: 'syz.1.4532': attribute type 1 has an invalid length. [ 435.564329][T19141] 8021q: adding VLAN 0 to HW filter on device bond9 [ 435.575715][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.891940][T19165] netlink: 'syz.2.4539': attribute type 32 has an invalid length. [ 436.163436][T19165] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 436.305593][T15076] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.314609][T15076] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 436.415699][T15076] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.424715][T15076] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 436.615611][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.750256][T15076] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.780310][T15076] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 436.848528][T15076] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.873079][T15076] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 437.057925][T19199] netlink: 'syz.2.4548': attribute type 1 has an invalid length. [ 437.286708][T19199] 8021q: adding VLAN 0 to HW filter on device bond17 [ 437.655612][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.703584][T19233] netlink: 'syz.0.4555': attribute type 32 has an invalid length. [ 437.735842][T19233] __nla_validate_parse: 6 callbacks suppressed [ 437.735860][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4555'. [ 437.774076][T19233] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 437.862458][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4558'. [ 437.960837][T19246] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 438.166842][T19258] netlink: 'syz.4.4564': attribute type 1 has an invalid length. [ 438.309012][T19258] 8021q: adding VLAN 0 to HW filter on device bond10 [ 438.593956][T19284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4567'. [ 438.603155][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4567'. [ 438.699418][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.735616][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.674886][T19274] netlink: 'syz.2.4567': attribute type 29 has an invalid length. [ 440.720741][T19284] veth3: entered allmulticast mode [ 440.775617][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.097031][T19310] netlink: 'syz.2.4579': attribute type 1 has an invalid length. [ 441.129685][T19313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4581'. [ 441.170211][T19315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4580'. [ 441.204255][T19310] 8021q: adding VLAN 0 to HW filter on device bond18 [ 441.257533][T19315] gretap0: entered allmulticast mode [ 441.470854][T19327] netlink: 'syz.2.4585': attribute type 12 has an invalid length. [ 441.473888][T19328] netlink: 'syz.0.4586': attribute type 1 has an invalid length. [ 441.601536][T19328] bond13 (unregistering): Released all slaves [ 441.723111][T19332] macsec1: entered promiscuous mode [ 441.728655][T19332] macsec1: entered allmulticast mode [ 441.769224][T19335] ip6tnl1: entered promiscuous mode [ 441.778580][T19335] ip6tnl1: entered allmulticast mode [ 441.808041][T19342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4590'. [ 441.821863][T19342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4590'. [ 441.825658][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.066257][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 442.855609][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.869147][T19371] syzkaller0: entered promiscuous mode [ 442.884871][T19371] syzkaller0: entered allmulticast mode [ 443.053468][T19399] FAULT_INJECTION: forcing a failure. [ 443.053468][T19399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.089431][T19399] CPU: 0 UID: 0 PID: 19399 Comm: syz.4.4606 Not tainted syzkaller #0 PREEMPT(full) [ 443.089461][T19399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 443.089478][T19399] Call Trace: [ 443.089487][T19399] [ 443.089502][T19399] dump_stack_lvl+0x189/0x250 [ 443.089531][T19399] ? __pfx____ratelimit+0x10/0x10 [ 443.089557][T19399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.089579][T19399] ? __pfx__printk+0x10/0x10 [ 443.089617][T19399] should_fail_ex+0x414/0x560 [ 443.089647][T19399] _copy_to_user+0x31/0xb0 [ 443.089671][T19399] simple_read_from_buffer+0xe1/0x170 [ 443.089702][T19399] proc_fail_nth_read+0x1b3/0x220 [ 443.089726][T19399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.089750][T19399] ? rw_verify_area+0x2a6/0x4d0 [ 443.089772][T19399] ? __lock_acquire+0xab9/0xd20 [ 443.089797][T19399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.089820][T19399] vfs_read+0x200/0xa30 [ 443.089843][T19399] ? fdget_pos+0x247/0x320 [ 443.089863][T19399] ? __pfx___mutex_lock+0x10/0x10 [ 443.089890][T19399] ? __pfx_vfs_read+0x10/0x10 [ 443.089915][T19399] ? __fget_files+0x2a/0x420 [ 443.089947][T19399] ? __fget_files+0x3a0/0x420 [ 443.089973][T19399] ? __fget_files+0x2a/0x420 [ 443.090010][T19399] ksys_read+0x145/0x250 [ 443.090036][T19399] ? __pfx_ksys_read+0x10/0x10 [ 443.090057][T19399] ? rcu_is_watching+0x15/0xb0 [ 443.090081][T19399] ? do_syscall_64+0xbe/0x3b0 [ 443.090112][T19399] do_syscall_64+0xfa/0x3b0 [ 443.090137][T19399] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.090161][T19399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.090180][T19399] ? clear_bhb_loop+0x60/0xb0 [ 443.090202][T19399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.090224][T19399] RIP: 0033:0x7f4e81d8d5fc [ 443.090242][T19399] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 443.090258][T19399] RSP: 002b:00007f4e82b47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 443.090285][T19399] RAX: ffffffffffffffda RBX: 00007f4e81fb5fa0 RCX: 00007f4e81d8d5fc [ 443.090299][T19399] RDX: 000000000000000f RSI: 00007f4e82b470a0 RDI: 0000000000000009 [ 443.090310][T19399] RBP: 00007f4e82b47090 R08: 0000000000000000 R09: 0000000000000000 [ 443.090322][T19399] R10: 000000000000005e R11: 0000000000000246 R12: 0000000000000001 [ 443.090333][T19399] R13: 00007f4e81fb6038 R14: 00007f4e81fb5fa0 R15: 00007ffc48b87e58 [ 443.090364][T19399] [ 443.905710][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 444.939434][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 445.452731][T19411] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4610'. [ 445.834222][T19433] netlink: 'syz.2.4618': attribute type 1 has an invalid length. [ 445.938706][T19433] 8021q: adding VLAN 0 to HW filter on device bond19 [ 445.975716][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.112907][T19440] syzkaller0: entered promiscuous mode [ 446.119193][T19440] syzkaller0: entered allmulticast mode [ 446.159073][T19444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'. [ 446.218879][T19448] nbd: must specify at least one socket [ 446.533598][T19452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4622'. [ 446.552684][T19454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4622'. [ 447.016104][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.179388][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 448.056432][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.223404][T19453] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 448.434527][T19461] netlink: 'syz.3.4624': attribute type 1 has an invalid length. [ 448.454016][T19459] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4625'. [ 448.463775][T19464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4626'. [ 448.598187][T19461] 8021q: adding VLAN 0 to HW filter on device bond19 [ 448.743554][T19478] tipc: Enabled bearer , priority 0 [ 448.761860][T19478] syzkaller0: entered promiscuous mode [ 448.773052][T19478] syzkaller0: entered allmulticast mode [ 448.782463][T19476] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4629'. [ 448.820863][T19476] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4629'. [ 448.860448][T19478] tipc: Resetting bearer [ 448.945047][T19477] tipc: Resetting bearer [ 448.989811][T19477] tipc: Disabling bearer [ 449.024804][T19490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4633'. [ 449.095747][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.212078][T19492] netlink: 'syz.1.4634': attribute type 1 has an invalid length. [ 449.229065][T19496] netlink: 'syz.2.4636': attribute type 32 has an invalid length. [ 449.248087][T19496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4636'. [ 449.303930][T19492] 8021q: adding VLAN 0 to HW filter on device bond10 [ 449.314305][T19496] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 450.135716][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.205318][T19537] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 450.306204][T19543] netlink: 'syz.2.4649': attribute type 1 has an invalid length. [ 450.457514][T19543] 8021q: adding VLAN 0 to HW filter on device bond21 [ 450.890099][T19565] __nla_validate_parse: 1 callbacks suppressed [ 450.890118][T19565] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4654'. [ 451.175609][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.262661][T19583] tipc: Enabled bearer , priority 0 [ 451.273139][T19588] sctp: [Deprecated]: syz.1.4661 (pid 19588) Use of int in max_burst socket option. [ 451.273139][T19588] Use struct sctp_assoc_value instead [ 451.309936][T19583] syzkaller0: entered promiscuous mode [ 451.325823][T19583] syzkaller0: entered allmulticast mode [ 451.357858][T19583] sch_tbf: burst 127 is lower than device veth1_to_hsr mtu (1514) ! [ 451.450609][T19583] tipc: Resetting bearer [ 451.519042][T19583] tun0: tun_chr_ioctl cmd 1074025675 [ 451.538208][T19583] tun0: persist disabled [ 451.643084][T19582] tipc: Resetting bearer [ 451.700266][T19582] tipc: Disabling bearer [ 451.740320][T19600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.073710][T19614] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4670'. [ 452.215711][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.244277][T19622] netlink: 'syz.4.4672': attribute type 10 has an invalid length. [ 452.284349][T19622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4672'. [ 452.329198][T19625] netlink: 'syz.1.4673': attribute type 1 has an invalid length. [ 452.369623][T19622] batadv0: entered promiscuous mode [ 452.413394][T19622] batadv0: entered allmulticast mode [ 452.428764][T19630] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4675'. [ 452.446752][T19622] bridge0: port 1(batadv0) entered blocking state [ 452.463612][T19622] bridge0: port 1(batadv0) entered disabled state [ 452.508621][T19625] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 452.653450][T19636] tipc: New replicast peer: 255.255.255.255 [ 452.669957][T19636] tipc: Enabled bearer , priority 10 [ 452.952127][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4681'. [ 453.013067][T14396] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 453.023303][T14396] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 453.248747][T19670] netlink: 'syz.1.4686': attribute type 32 has an invalid length. [ 453.256714][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.266865][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4686'. [ 453.276864][T19670] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 453.509934][T19679] netlink: set zone limit has 8 unknown bytes [ 453.576014][T19679] netlink: set zone limit has 8 unknown bytes [ 453.683002][T19684] netlink: 'syz.2.4690': attribute type 11 has an invalid length. [ 453.716142][T19684] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4690'. [ 453.786460][ T5926] tipc: Node number set to 3804520981 [ 453.815375][T19691] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 453.907025][T19699] netlink: 'syz.0.4695': attribute type 1 has an invalid length. [ 453.951002][T19696] tipc: Enabling of bearer rejected, already enabled [ 454.295694][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.451182][T19722] netlink: 'syz.1.4701': attribute type 6 has an invalid length. [ 454.512472][T19726] netlink: 'syz.1.4701': attribute type 6 has an invalid length. [ 454.562315][T19722] netlink: 'syz.1.4701': attribute type 10 has an invalid length. [ 454.640039][T19722] team0: Device hsr_slave_0 failed to register rx_handler [ 454.885338][T19741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4705'. [ 454.974930][T19735] can: request_module (can-proto-5) failed. [ 455.037893][T19745] sit0: entered promiscuous mode [ 455.049203][T19745] netlink: 'syz.4.4708': attribute type 1 has an invalid length. [ 455.061383][T19745] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4708'. [ 455.105515][T19745] netlink: 'syz.4.4708': attribute type 1 has an invalid length. [ 455.122231][T19745] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4708'. [ 455.146160][T19747] tipc: Enabled bearer , priority 0 [ 455.197322][T19747] syzkaller0: entered promiscuous mode [ 455.221613][T19747] syzkaller0: entered allmulticast mode [ 455.330358][T19746] tipc: Resetting bearer [ 455.347834][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 455.462350][T19746] tipc: Disabling bearer [ 456.238499][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4723'. [ 456.375603][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.394647][T19800] tipc: Enabling of bearer rejected, already enabled [ 456.579852][T19806] tipc: Enabled bearer , priority 0 [ 456.599794][T19806] syzkaller0: entered promiscuous mode [ 456.618271][T19806] syzkaller0: entered allmulticast mode [ 456.718485][T19804] tipc: Resetting bearer [ 456.804021][T19804] tipc: Disabling bearer [ 456.842347][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4728'. [ 456.885869][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4728'. [ 456.903809][T19810] 8021q: VLANs not supported on wg1 [ 456.982511][T19821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4732'. [ 457.140120][T19824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4733'. [ 457.262066][ T55] block nbd0: Possible stuck request ffff888025485080: control (read@0,1024B). Runtime 330 seconds [ 457.273142][ T55] block nbd0: Possible stuck request ffff888025485240: control (read@1024,1024B). Runtime 330 seconds [ 457.284460][ T55] block nbd0: Possible stuck request ffff888025485400: control (read@2048,1024B). Runtime 330 seconds [ 457.302882][ T55] block nbd0: Possible stuck request ffff8880254855c0: control (read@3072,1024B). Runtime 330 seconds [ 457.415730][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 457.466456][T19836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4736'. [ 457.537103][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4739'. [ 457.541124][T19844] netlink: 'syz.1.4737': attribute type 1 has an invalid length. [ 457.565314][T19844] netlink: 'syz.1.4737': attribute type 2 has an invalid length. [ 457.646309][T19844] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.4737'. [ 457.921080][T19861] netlink: 'syz.1.4743': attribute type 72 has an invalid length. [ 458.115223][T19870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4746'. [ 458.455707][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.559405][T19885] netlink: 'syz.0.4752': attribute type 2 has an invalid length. [ 459.052517][T19890] team0: Device gtp0 is of different type [ 459.334417][T19910] netlink: 'syz.4.4757': attribute type 72 has an invalid length. [ 459.377609][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4758'. [ 459.495727][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 459.857151][T19933] netlink: 'syz.4.4765': attribute type 1 has an invalid length. [ 459.965917][T19933] netlink: 'syz.4.4765': attribute type 1 has an invalid length. [ 459.973870][T19933] netlink: 'syz.4.4765': attribute type 1 has an invalid length. [ 460.011765][T19933] netlink: 'syz.4.4765': attribute type 1 has an invalid length. [ 460.034503][T19933] netlink: 'syz.4.4765': attribute type 1 has an invalid length. [ 460.535771][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 460.886442][T19983] tipc: Enabling of bearer rejected, already enabled [ 461.504219][T20010] 8021q: adding VLAN 0 to HW filter on device bond12 [ 461.543580][T20010] bond0: (slave bond12): Enslaving as an active interface with an up link [ 461.564963][T20019] syz.3.4793 uses old SIOCAX25GETINFO [ 461.575603][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 461.713868][T20022] __nla_validate_parse: 36 callbacks suppressed [ 461.713889][T20022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4795'. [ 461.764504][T20022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4795'. [ 462.139615][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4804'. [ 462.486605][T20052] 8021q: adding VLAN 0 to HW filter on device bond14 [ 462.615737][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 462.689332][T20059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4807'. [ 462.758879][T20061] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4808'. [ 462.983454][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4810'. [ 463.277376][T20085] validate_nla: 35 callbacks suppressed [ 463.277398][T20085] netlink: 'syz.2.4818': attribute type 33 has an invalid length. [ 463.426535][T20092] netlink: 'syz.0.4820': attribute type 1 has an invalid length. [ 463.486627][T20092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4820'. [ 463.513035][T20093] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4819'. [ 463.548237][T20093] netlink: 'syz.1.4819': attribute type 1 has an invalid length. [ 463.582184][T20093] netlink: 'syz.1.4819': attribute type 3 has an invalid length. [ 463.596705][T20093] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4819'. [ 463.655657][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 463.775395][T20104] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4826'. [ 463.931661][T20111] sctp: [Deprecated]: syz.4.4828 (pid 20111) Use of int in max_burst socket option deprecated. [ 463.931661][T20111] Use struct sctp_assoc_value instead [ 464.149082][T20121] tipc: New replicast peer: 255.255.255.255 [ 464.156120][T20121] tipc: Enabled bearer , priority 10 [ 464.699237][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 464.840942][T20155] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 465.220240][T20178] netlink: zone id is out of range [ 465.258065][T20178] netlink: zone id is out of range [ 465.268284][T20172] netlink: 'syz.3.4846': attribute type 10 has an invalid length. [ 465.290127][T20178] netlink: zone id is out of range [ 465.295302][T20178] netlink: zone id is out of range [ 465.304841][T20178] netlink: zone id is out of range [ 465.311261][T20172] veth0_macvtap: left promiscuous mode [ 465.317229][T20178] netlink: zone id is out of range [ 465.322550][T20178] netlink: zone id is out of range [ 465.335140][T20178] netlink: zone id is out of range [ 465.344736][T20178] netlink: zone id is out of range [ 466.394198][T20226] C: renamed from team_slave_0 [ 466.432749][T20226] netlink: 'syz.4.4868': attribute type 4 has an invalid length. [ 466.686278][T20236] hsr_slave_0: left promiscuous mode [ 466.716205][T20236] hsr_slave_1: left promiscuous mode [ 466.871662][T20245] __nla_validate_parse: 5 callbacks suppressed [ 466.871684][T20245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4877'. [ 466.878513][T20248] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4879'. [ 467.681711][T20284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4896'. [ 467.728707][T20284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4896'. [ 468.025494][T20298] netlink: 'syz.1.4903': attribute type 21 has an invalid length. [ 468.064400][T20298] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.4903'. [ 468.392808][T20315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4911'. [ 469.758265][T20369] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4931'. [ 469.783197][T20371] tipc: Enabling of bearer rejected, already enabled [ 469.817011][T20373] netlink: 'syz.4.4933': attribute type 1 has an invalid length. [ 469.895612][ C0] net_ratelimit: 227 callbacks suppressed [ 469.895633][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 470.003246][T20373] 8021q: adding VLAN 0 to HW filter on device bond11 [ 470.204340][T20389] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4938'. [ 470.361349][T20389] syzkaller0: entered promiscuous mode [ 470.376522][T20389] syzkaller0: entered allmulticast mode [ 470.417377][T20396] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 470.458349][T20396] syzkaller0: Linktype set failed because interface is up [ 470.505695][T20407] netlink: 'syz.2.4942': attribute type 6 has an invalid length. [ 470.546344][T20400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4942'. [ 470.585778][T20407] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4942'. [ 470.938832][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 471.975987][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 472.982263][T20417] batman_adv: batadv0: Interface deactivated: dummy0 [ 473.016404][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 473.031684][T20417] batman_adv: batadv0: Removing interface: dummy0 [ 473.060395][T20417] bridge_slave_0: left allmulticast mode [ 473.087540][T20417] bridge_slave_0: left promiscuous mode [ 473.093379][T20417] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.134333][T20417] bridge_slave_1: left allmulticast mode [ 473.144925][T20417] bridge_slave_1: left promiscuous mode [ 473.162707][T20417] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.249757][T20417] team0: Port device C removed [ 473.319648][T20417] team0: Port device team_slave_1 removed [ 473.353817][T20417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.382125][T20417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.419857][T20417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.437451][T20417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.472737][T20417] bond2: (slave geneve2): Releasing active interface [ 473.520298][T20417] bond5: (slave bond6): Releasing backup interface [ 473.530285][T20417] bond5: (slave bond6): the permanent HWaddr of slave - 52:20:8a:c1:82:05 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 473.550290][T20417] bond5: (slave gretap2): making interface the new active one [ 473.567799][T20417] bond5: (slave gretap2): Releasing backup interface [ 473.596711][T20417] bond12: (slave gretap3): Releasing active interface [ 473.624090][T20417] bond13: (slave veth7): Releasing active interface [ 473.953846][T20453] __nla_validate_parse: 1 callbacks suppressed [ 473.953866][T20453] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4955'. [ 474.013466][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4955'. [ 474.055740][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 474.884478][T20486] ip6gre1: entered allmulticast mode [ 474.999470][T20495] netlink: 'syz.4.4969': attribute type 1 has an invalid length. [ 475.095717][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 475.194996][T20495] 8021q: adding VLAN 0 to HW filter on device bond12 [ 475.224297][T20508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4971'. [ 475.468686][T20512] netlink: 'syz.3.4974': attribute type 1 has an invalid length. [ 475.494961][T20512] netlink: 'syz.3.4974': attribute type 1 has an invalid length. [ 475.505730][T20517] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 475.757351][T20530] netlink: 'syz.3.4980': attribute type 1 has an invalid length. [ 475.779537][T20530] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4980'. [ 475.799822][T20530] nbd: couldn't find device at index 1048576 [ 475.844509][T20533] netlink: 'syz.3.4980': attribute type 17 has an invalid length. [ 475.883019][T20533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4980'. [ 475.916302][T20530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4980'. [ 475.925861][T20533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4980'. [ 476.067148][T20541] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4983'. [ 476.107410][T20541] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 476.145595][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 476.246014][T20551] netlink: 'syz.1.4986': attribute type 1 has an invalid length. [ 476.334939][T20551] 8021q: adding VLAN 0 to HW filter on device bond13 [ 476.346834][T20555] netlink: 'syz.0.4988': attribute type 1 has an invalid length. [ 476.599432][T20568] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4990'. [ 476.707238][T20571] netlink: 'syz.0.4992': attribute type 3 has an invalid length. [ 476.734243][T20578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4994'. [ 476.744152][T20571] netlink: 'syz.0.4992': attribute type 3 has an invalid length. [ 476.778840][T20571] netlink: 'syz.0.4992': attribute type 3 has an invalid length. [ 477.175618][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 477.197888][T20599] netlink: 'syz.1.5002': attribute type 11 has an invalid length. [ 477.255509][T20596] 8021q: adding VLAN 0 to HW filter on device bond21 [ 477.571937][T20617] syzkaller1: entered promiscuous mode [ 477.604447][T20617] syzkaller1: entered allmulticast mode [ 477.860239][T14395] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.005773][T14395] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.038064][T14395] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.108338][ T1323] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.215714][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 478.403068][T20643] bond0: (slave team0): Releasing backup interface [ 478.429880][T20643] team0 (unregistering): Port device geneve0 removed [ 478.561057][T20650] 8021q: adding VLAN 0 to HW filter on device bond13 [ 478.994519][T20671] __nla_validate_parse: 7 callbacks suppressed [ 478.994537][T20671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5024'. [ 479.147238][T20678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5026'. [ 479.199421][T20678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5026'. [ 479.234904][T20678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5026'. [ 479.257535][T20678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5026'. [ 479.265623][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.526235][T20691] 8021q: adding VLAN 0 to HW filter on device bond22 [ 480.113046][T20717] validate_nla: 51 callbacks suppressed [ 480.113068][T20717] netlink: 'syz.2.5039': attribute type 21 has an invalid length. [ 480.295760][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.536055][ T51] Bluetooth: hci4: command tx timeout [ 480.539390][T20737] openvswitch: netlink: Key type 16358 is out of range max 32 [ 480.891005][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5053'. [ 480.981548][T20751] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5053'. [ 481.060285][T20748] netlink: 'syz.4.5052': attribute type 10 has an invalid length. [ 481.127511][T20748] batadv0: left allmulticast mode [ 481.165799][T20748] batadv0: left promiscuous mode [ 481.173343][T20748] bridge0: port 1(batadv0) entered disabled state [ 481.274693][T20748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.282091][T20768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5057'. [ 481.293813][T20748] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 481.308575][T20760] netlink: 'syz.2.5055': attribute type 14 has an invalid length. [ 481.345698][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 481.446925][T20772] tipc: Enabled bearer , priority 0 [ 481.482669][T20772] tipc: Resetting bearer [ 481.516823][T20774] netlink: 'syz.3.5062': attribute type 32 has an invalid length. [ 481.531074][T20774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5062'. [ 481.563336][T20771] tipc: Disabling bearer [ 481.617061][T20774] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 482.077934][T20797] netlink: 'syz.2.5071': attribute type 10 has an invalid length. [ 482.140985][T20797] team0: Device veth1_macvtap failed to register rx_handler [ 482.375798][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 482.668524][T20820] netlink: 'syz.0.5079': attribute type 32 has an invalid length. [ 482.698410][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5079'. [ 482.716166][T20820] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 482.991471][T20832] 8021q: adding VLAN 0 to HW filter on device bond14 [ 483.386781][T20851] netlink: 'syz.0.5090': attribute type 1 has an invalid length. [ 483.397497][T20851] bridge0: port 1(veth0_to_bridge) entered blocking state [ 483.405087][T20851] bridge0: port 1(veth0_to_bridge) entered disabled state [ 483.415668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 483.436014][T20851] veth0_to_bridge: entered allmulticast mode [ 483.483562][T20851] veth0_to_bridge: entered promiscuous mode [ 483.524476][T20851] bridge0: port 1(veth0_to_bridge) entered blocking state [ 483.532077][T20851] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 483.931990][T20874] netlink: 'syz.4.5098': attribute type 1 has an invalid length. [ 483.961519][T20874] netlink: 'syz.4.5098': attribute type 4 has an invalid length. [ 483.998665][T20874] __nla_validate_parse: 3 callbacks suppressed [ 483.998685][T20874] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5098'. [ 484.024288][T20877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5099'. [ 484.055475][T20881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5101'. [ 484.059129][T20877] bridge_slave_1: left allmulticast mode [ 484.076739][T20877] bridge_slave_1: left promiscuous mode [ 484.090146][T20877] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.135072][T20877] bridge_slave_0: left allmulticast mode [ 484.154407][T20877] bridge_slave_0: left promiscuous mode [ 484.160718][T20877] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.284021][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5102'. [ 484.294777][T20888] nbd: nbd0 already in use [ 484.455709][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.598308][T20896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.700717][T20895] bridge5: entered promiscuous mode [ 484.749468][T20895] bridge5: entered allmulticast mode [ 484.959670][T20912] netlink: 'syz.4.5111': attribute type 10 has an invalid length. [ 484.997585][T20915] 8021q: adding VLAN 0 to HW filter on device bond23 [ 485.008515][T20912] veth1_macvtap: left promiscuous mode [ 485.067323][T20912] team0: Device veth1_macvtap failed to register rx_handler [ 485.109790][T20918] tc_dump_action: action bad kind [ 485.172738][T20922] validate_nla: 1 callbacks suppressed [ 485.172757][T20922] netlink: 'syz.0.5114': attribute type 32 has an invalid length. [ 485.230893][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5114'. [ 485.277283][T20922] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 485.358167][T20930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5117'. [ 485.426392][T20930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5117'. [ 485.495955][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 485.564087][T20930] geneve3: entered promiscuous mode [ 485.576110][T20930] geneve3: entered allmulticast mode [ 485.728296][T20948] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 485.740447][T20949] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.5121'. [ 486.007561][T20960] netlink: 'syz.4.5127': attribute type 1 has an invalid length. [ 486.210508][T20960] 8021q: adding VLAN 0 to HW filter on device bond15 [ 486.261662][T20963] gretap2: entered promiscuous mode [ 486.461794][T20983] netlink: 'syz.3.5131': attribute type 32 has an invalid length. [ 486.515639][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5131'. [ 486.524964][T20983] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 486.535760][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 486.683165][T20994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5133'. [ 487.048196][T20998] syzkaller0: entered promiscuous mode [ 487.056073][T21007] netlink: 'syz.2.5142': attribute type 1 has an invalid length. [ 487.064021][T20998] syzkaller0: entered allmulticast mode [ 487.132529][T21007] 8021q: adding VLAN 0 to HW filter on device bond24 [ 487.154531][T21005] Bluetooth: MGMT ver 1.23 [ 487.338644][ T55] block nbd0: Possible stuck request ffff888025485080: control (read@0,1024B). Runtime 360 seconds [ 487.349767][ T55] block nbd0: Possible stuck request ffff888025485240: control (read@1024,1024B). Runtime 360 seconds [ 487.360929][ T55] block nbd0: Possible stuck request ffff888025485400: control (read@2048,1024B). Runtime 360 seconds [ 487.372212][ T55] block nbd0: Possible stuck request ffff8880254855c0: control (read@3072,1024B). Runtime 360 seconds [ 487.585756][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.856841][T21020] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 487.878811][T21020] netlink: 'syz.1.5145': attribute type 6 has an invalid length. [ 488.625624][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 488.632739][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 489.655701][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.713465][T21018] syzkaller1: entered promiscuous mode [ 489.717564][T21024] netlink: 'syz.2.5147': attribute type 32 has an invalid length. [ 489.725593][T21018] syzkaller1: entered allmulticast mode [ 489.757998][T21024] __nla_validate_parse: 2 callbacks suppressed [ 489.758018][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5147'. [ 489.846323][T21026] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5146'. [ 489.866501][T21024] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 490.285407][T21046] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5154'. [ 490.498939][T21052] netlink: 'syz.0.5158': attribute type 1 has an invalid length. [ 490.544117][T21056] netlink: 'syz.4.5160': attribute type 5 has an invalid length. [ 490.624530][T21052] 8021q: adding VLAN 0 to HW filter on device bond17 [ 490.695615][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.916091][T21072] netlink: 'syz.4.5165': attribute type 32 has an invalid length. [ 490.936185][T21072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5165'. [ 490.945413][T21072] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 491.006307][T21075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5168'. [ 491.173601][T21083] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5173'. [ 491.321139][T21088] [ 491.323526][T21088] ====================================================== [ 491.330555][T21088] WARNING: possible circular locking dependency detected [ 491.337592][T21088] syzkaller #0 Not tainted [ 491.342014][T21088] ------------------------------------------------------ [ 491.349029][T21088] syz.2.5173/21088 is trying to acquire lock: [ 491.355102][T21088] ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 491.364607][T21088] [ 491.364607][T21088] but task is already holding lock: [ 491.371975][T21088] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 491.381565][T21088] [ 491.381565][T21088] which lock already depends on the new lock. [ 491.381565][T21088] [ 491.391993][T21088] [ 491.391993][T21088] the existing dependency chain (in reverse order) is: [ 491.401005][T21088] [ 491.401005][T21088] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 491.408929][T21088] lock_acquire+0x120/0x360 [ 491.413974][T21088] _raw_spin_lock_bh+0x36/0x50 [ 491.419266][T21088] nr_rt_ioctl+0x390/0xd50 [ 491.424206][T21088] sock_do_ioctl+0xd9/0x300 [ 491.429238][T21088] sock_ioctl+0x576/0x790 [ 491.434093][T21088] __se_sys_ioctl+0xfc/0x170 [ 491.439218][T21088] do_syscall_64+0xfa/0x3b0 [ 491.444255][T21088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.450669][T21088] [ 491.450669][T21088] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 491.458664][T21088] lock_acquire+0x120/0x360 [ 491.463692][T21088] _raw_spin_lock_bh+0x36/0x50 [ 491.468972][T21088] nr_rt_ioctl+0x193/0xd50 [ 491.473924][T21088] sock_do_ioctl+0xd9/0x300 [ 491.478970][T21088] sock_ioctl+0x576/0x790 [ 491.483818][T21088] __se_sys_ioctl+0xfc/0x170 [ 491.488930][T21088] do_syscall_64+0xfa/0x3b0 [ 491.493964][T21088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.500377][T21088] [ 491.500377][T21088] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 491.508200][T21088] validate_chain+0xb9b/0x2140 [ 491.513483][T21088] __lock_acquire+0xab9/0xd20 [ 491.518691][T21088] lock_acquire+0x120/0x360 [ 491.523731][T21088] _raw_spin_lock_bh+0x36/0x50 [ 491.529017][T21088] nr_rt_device_down+0xa9/0x720 [ 491.534387][T21088] nr_device_event+0x137/0x150 [ 491.539678][T21088] notifier_call_chain+0x1b3/0x3e0 [ 491.545312][T21088] __dev_notify_flags+0x18d/0x2e0 [ 491.550870][T21088] netif_change_flags+0xe8/0x1a0 [ 491.556329][T21088] dev_change_flags+0x130/0x260 [ 491.561710][T21088] dev_ioctl+0x7b4/0x1150 [ 491.566572][T21088] sock_do_ioctl+0x22c/0x300 [ 491.571690][T21088] sock_ioctl+0x576/0x790 [ 491.576543][T21088] __se_sys_ioctl+0xfc/0x170 [ 491.581675][T21088] do_syscall_64+0xfa/0x3b0 [ 491.586709][T21088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.593118][T21088] [ 491.593118][T21088] other info that might help us debug this: [ 491.593118][T21088] [ 491.603342][T21088] Chain exists of: [ 491.603342][T21088] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 491.603342][T21088] [ 491.617192][T21088] Possible unsafe locking scenario: [ 491.617192][T21088] [ 491.624644][T21088] CPU0 CPU1 [ 491.630005][T21088] ---- ---- [ 491.635368][T21088] lock(nr_neigh_list_lock); [ 491.640054][T21088] lock(&nr_node->node_lock); [ 491.647341][T21088] lock(nr_neigh_list_lock); [ 491.654538][T21088] lock(nr_node_list_lock); [ 491.659140][T21088] [ 491.659140][T21088] *** DEADLOCK *** [ 491.659140][T21088] [ 491.667279][T21088] 2 locks held by syz.2.5173/21088: [ 491.672476][T21088] #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 491.681293][T21088] #1: ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 491.691312][T21088] [ 491.691312][T21088] stack backtrace: [ 491.697204][T21088] CPU: 1 UID: 0 PID: 21088 Comm: syz.2.5173 Not tainted syzkaller #0 PREEMPT(full) [ 491.697231][T21088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.697245][T21088] Call Trace: [ 491.697253][T21088] [ 491.697261][T21088] dump_stack_lvl+0x189/0x250 [ 491.697286][T21088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.697307][T21088] ? __pfx__printk+0x10/0x10 [ 491.697332][T21088] ? print_lock_name+0xde/0x100 [ 491.697357][T21088] print_circular_bug+0x2ee/0x310 [ 491.697377][T21088] check_noncircular+0x134/0x160 [ 491.697398][T21088] validate_chain+0xb9b/0x2140 [ 491.697417][T21088] ? rt6_disable_ip+0x6b3/0x720 [ 491.697438][T21088] ? __queue_work+0xc56/0xfb0 [ 491.697458][T21088] ? __lock_acquire+0xab9/0xd20 [ 491.697484][T21088] __lock_acquire+0xab9/0xd20 [ 491.697510][T21088] ? nr_rt_device_down+0xa9/0x720 [ 491.697529][T21088] lock_acquire+0x120/0x360 [ 491.697552][T21088] ? nr_rt_device_down+0xa9/0x720 [ 491.697576][T21088] ? nr_rt_device_down+0xa9/0x720 [ 491.697594][T21088] _raw_spin_lock_bh+0x36/0x50 [ 491.697615][T21088] ? nr_rt_device_down+0xa9/0x720 [ 491.697633][T21088] nr_rt_device_down+0xa9/0x720 [ 491.697654][T21088] ? do_raw_spin_unlock+0x122/0x240 [ 491.697676][T21088] nr_device_event+0x137/0x150 [ 491.697693][T21088] notifier_call_chain+0x1b3/0x3e0 [ 491.697714][T21088] __dev_notify_flags+0x18d/0x2e0 [ 491.697742][T21088] ? __pfx___dev_notify_flags+0x10/0x10 [ 491.697767][T21088] ? __dev_change_flags+0x4cc/0x6d0 [ 491.697784][T21088] ? __pfx___dev_change_flags+0x10/0x10 [ 491.697799][T21088] ? full_name_hash+0x92/0xe0 [ 491.697820][T21088] netif_change_flags+0xe8/0x1a0 [ 491.697837][T21088] dev_change_flags+0x130/0x260 [ 491.697865][T21088] dev_ioctl+0x7b4/0x1150 [ 491.697890][T21088] sock_do_ioctl+0x22c/0x300 [ 491.697912][T21088] ? __pfx_sock_do_ioctl+0x10/0x10 [ 491.697930][T21088] ? __lock_acquire+0xab9/0xd20 [ 491.697961][T21088] sock_ioctl+0x576/0x790 [ 491.697980][T21088] ? __pfx_sock_ioctl+0x10/0x10 [ 491.697999][T21088] ? __fget_files+0x2a/0x420 [ 491.698024][T21088] ? __fget_files+0x3a0/0x420 [ 491.698049][T21088] ? __fget_files+0x2a/0x420 [ 491.698075][T21088] ? bpf_lsm_file_ioctl+0x9/0x20 [ 491.698106][T21088] ? __pfx_sock_ioctl+0x10/0x10 [ 491.698126][T21088] __se_sys_ioctl+0xfc/0x170 [ 491.698147][T21088] do_syscall_64+0xfa/0x3b0 [ 491.698172][T21088] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.698194][T21088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.698212][T21088] ? clear_bhb_loop+0x60/0xb0 [ 491.698231][T21088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.698247][T21088] RIP: 0033:0x7fd83798ebe9 [ 491.698264][T21088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.698279][T21088] RSP: 002b:00007fd83882a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.698297][T21088] RAX: ffffffffffffffda RBX: 00007fd837bb6090 RCX: 00007fd83798ebe9 [ 491.698310][T21088] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 491.698321][T21088] RBP: 00007fd837a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 491.698332][T21088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.698343][T21088] R13: 00007fd837bb6128 R14: 00007fd837bb6090 R15: 00007fff034ff338 [ 491.698362][T21088] [ 491.756318][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.030909][T21097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5174'. [ 492.775581][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.815622][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 494.855646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.895614][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 496.935610][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 497.975614][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.016155][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 500.055618][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 501.095603][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available