last executing test programs: 3m12.433642172s ago: executing program 3 (id=6027): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r1, 0x407, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m11.88138908s ago: executing program 3 (id=6031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r1, 0x18}, 0x38) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000107000000000000000001"], 0x114}], 0x1}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000140)='\x00', 0x64100, &(0x7f0000000180)={@align=0x2, {0x4, 0x401, 0x40, 0x5}}, 0x0, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000200)=0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xa, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000380)=0x5b9, 0x4) 3m11.181163767s ago: executing program 3 (id=6035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000400)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000540)}, 0x20) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000980)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r2}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x4, 0x1}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x80, '\x00', 0x0, r2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x27, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x918, 0x9e, &(0x7f0000000880)=""/158, 0x40f00, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x2, 0x3, 0x800, 0x8}, 0x10, 0x187ac, 0xffffffffffffffff, 0x5, &(0x7f0000000c00)=[r5, r6, r2, r0, r3, r0, r2, r7, r2], &(0x7f0000000c40)=[{0x2, 0x1, 0xf, 0x4}, {0x4, 0x3, 0xf, 0x6}, {0x1ff, 0x1, 0x5, 0x2}, {0x3, 0x3, 0xd}, {0x0, 0x1, 0xf, 0x2}], 0x10, 0x4}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000400001e040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m10.608053774s ago: executing program 3 (id=6037): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000040)={&(0x7f0000000000)=0x3, 0x6, &(0x7f0000000e80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x20040055) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m9.621050543s ago: executing program 3 (id=6040): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7ffffffd, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x3}, 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000240)="97", 0x0, 0x0, 0x0, 0x8, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x8, &(0x7f0000000180)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff830}], &(0x7f0000000200)='syzkaller\x00', 0xffff62f8, 0x6f, &(0x7f00000002c0)=""/111, 0x41000, 0x1, '\x00', r6, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x6, 0x4, 0xfffffffb}, 0x10, 0x0, r3, 0x3, &(0x7f00000004c0)=[r0, r7, r2, r0, r2, r2, r0], &(0x7f0000000580)=[{0x4, 0x5, 0x8, 0x8}, {0x0, 0x4, 0x0, 0x2}, {0x0, 0x3, 0x7, 0xb}], 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x470bd28, 0x100003, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4, 0x76}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c15176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3m8.202488881s ago: executing program 3 (id=6045): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x5, 0x0, 0x1, 0x2, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x5, 0x2, 0xa, 0x382a}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000140)=[{0x1, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xe, 0x3}, {0x0, 0x4, 0x2, 0xf8d21e60452979ec}, {0x5, 0x1, 0xe, 0x6}, {0x2, 0x1, 0x10, 0x1}, {0x1, 0x1, 0x1, 0x5}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x3}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x7f21, 0x80, 0x7fff, 0x8, {{0x2d, 0x4, 0x0, 0x9, 0xb4, 0x68, 0x0, 0x8, 0x2f, 0x0, @loopback, @local, {[@lsrr={0x83, 0x7, 0xda, [@loopback]}, @noop, @generic={0x44, 0x4, "fb43"}, @timestamp={0x44, 0x20, 0xe3, 0x0, 0x5, [0x9, 0x3, 0x8, 0x5, 0x3fc4, 0x8, 0x95]}, @cipso={0x86, 0x22, 0xffffffffffffffff, [{0x5, 0x12, "8ba94b02fbef75fde66436a067980bc0"}, {0x1, 0xa, "b359aa8a90a0241f"}]}, @end, @timestamp_prespec={0x44, 0x44, 0x1f, 0x3, 0xe, [{@local, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x9}, {@multicast1, 0x23}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xd2}, {@local, 0x8}, {@private=0xa010100, 0x9}, {@loopback, 0x957}, {@multicast1, 0x9}]}, @timestamp_prespec={0x44, 0xc, 0xbd, 0x3, 0x5, [{@remote, 0x8}]}]}}}}}) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, r1, 0x25, 0xcad9167e309f1668, @void}, 0x10) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000480)={'syztnl1\x00', r1, 0x7800, 0x700, 0x6, 0x80000001, {{0x6, 0x4, 0x3, 0x34, 0x18, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end]}}}}}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000500)={@private0, r4}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x5a, &(0x7f0000000540)={@empty, @broadcast, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0x1f, 0x3, 0x0, 0x0, "fbe95381c04862f29de6226ef61e63732bde4c0d65d9d597791bb94e933588fdbe09f5a3e47638bd5d670b91c2edd5aa48b8b818902701f3ba6ce0940f6d67ed"}}}}, &(0x7f00000005c0)={0x0, 0x3, [0xb6d, 0x52, 0xaa1, 0xe5]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x4, 0x0}, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000e40)={{r2, &(0x7f0000000800)='syztnl1\x00', 0x22c0c0, &(0x7f0000000840)={@_ha_fsid={[0x7, 0x5]}, {0x4fd4, 0x7, 0x80, 0xffffffffffffdbde}}, 0x6, &(0x7f0000000880), &(0x7f00000008c0)=0x6fc}, 0x5, &(0x7f0000000d80)=[{0x2, 0x585cf53d, &(0x7f0000000900)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000940)="836c1a988fc95f39fef4ac6ffd5899f0a45ce12dfb398bd7753ac888f986ea7b47a47740e1efe064799411d69edc562254b272d47b9de51af0a07966869c59d2aaced4909cbd5636e7aea88b4a5a3912685488eeae46d98f4963ef99a3ed13a4d258775cb6ab464e7d485241d44cbdfcad8c340aa3fe21c894d4722404aa31ca8bcb605bccbffe39b2071c8daaab58079f334c9166d346ae932f78e7292b8f4adbaafa4b5ec94267d365510e7942142209546357554c4c286e0e96324bc8b4b81974db85979d0ce36531cfe1ee255be30d2c021da8", 0xd5, 0x18}, {0x2, 0x9, &(0x7f0000000a40)=',\x00', &(0x7f0000000a80)="5d82aa209e5f1651eaf33ee0b9ae76cefcd6f0672797652f0439bdf7156567b8b7abf49c078694df9157a3526fb2535dcb1b0d447e8ec84de157f04c2dcb449e1fc377acde6cb341f81eeec374ff144f0283c5d356a53dfd772fe077a95ae1c5b964d7b348dd99ff4e0e9c23fe6ab6ed3478770e38bec0ce9ca2db9a5ab87fe3a615dd0755fe2e540e97032f234e35086c0b552841c93b7bc7101da807f570797ca9db40c72334e64cb839b9484b716dae", 0xb1, 0x22}, {0x3, 0x3ff, &(0x7f0000000b40)='syztnl1\x00', &(0x7f0000000b80)="370773b39b6b020ab496c56cbd537e7aebceeb4a29591907effaf6849acc0c91d81e780b6dafdae76380ede279cc486efee74e279bce2c40", 0x38, 0x3a}, {0x1, 0x88, &(0x7f0000000bc0)='\x00', &(0x7f0000000c00)="bd2536ef4cea9333ed675440522773769b26deb7ffdf3600583593601b0327fcc698282ef95e7777ed0acca26d2416b68f17ade023dfcda15ade0c8fdeaf3c82ba80c6a3969667d43c59d7551b5091d9117bd0d620e9c956419a3e4ca5cd98f10b200f5c9d24bef78d0c2e341dc9c1057d80bb85caade141d103b4eaf3", 0x7d, 0x3a}, {0x3ebfbab46084b744, 0x3, &(0x7f0000000c80)='@(#,\x00', &(0x7f0000000cc0)="776901923f14f738c108ed48cd894bfd29d2f26d1f97bbc0ed4e9e8e25fc82f6382123fa2205b90da32aca53533488468a8221f1a38bf223798c2128bd565b8a01bb68b8e675006d8d1e55bdc0b87c9e211a6356c08da712eb188184f649707deb328cdc85f2c6bdce6ec84b308e63900432e0498b0b0378fef49d2e56a5944e497f2a4687617e7d00efce3755ee2effca161dae5b0955db8bb4a0a4a951e6f5a7d0535ee9a1c08f0dc6442de09810b068788d1c", 0xb4, 0x2}]}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xdd7}, [@generic={0x7, 0x4, 0xa, 0x8, 0x100}, @alu={0x4, 0x1, 0xb, 0x6, 0x8, 0xfffffffffffffff0, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x69}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @ldst={0x1, 0x3, 0xe0e91912d1916ccc, 0x8, 0x2, 0x8, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @exit]}, &(0x7f0000000680)='syzkaller\x00', 0x81, 0x68, &(0x7f00000006c0)=""/104, 0x40f00, 0xa, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xa, 0x9, 0x4}, 0x10, r5, 0x0, 0x5, &(0x7f0000000ec0)=[r6], &(0x7f0000000f00)=[{0x2, 0x5, 0xb, 0x5}, {0x1, 0x5, 0x2}, {0x5, 0x4, 0xa, 0x5}, {0x5, 0x1, 0xa, 0xb}, {0x2, 0x1, 0x3}], 0x10, 0x6}, 0x94) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001080), r3) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xb0, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffa}}]}, 0xb0}}, 0x8000001) r9 = socket$netlink(0x10, 0x3, 0xb) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r3) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x64, r10, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000013c0), r6) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x58, r11, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x4}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4008010) socketpair(0x5, 0x80000, 0x6, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000001540)={0x0, 0x4, 0x2, 0x10}, &(0x7f0000001580)=0x10) sendmsg$kcm(r12, &(0x7f00000017c0)={&(0x7f00000015c0)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)="ca7e340afb807f55473a132bfea399453e9673a71589f7689a5d8da5d7e910577ccdd846e0e98482f429b3cdee0493059153a5462ffb0e91ea85db8ed9523e1513ebfe3db3380f0362bdff3b1dffdd2a916b4489df40c277cc5d2899420aa19bc5a824a5e6fa53aabd51b6245c532d7773f3a9a111a919a231a981ee2c5bde", 0x7f}], 0x1, &(0x7f0000001700)=[{0x90, 0x3a, 0x3, "3faf312e6f94235a4bf9dabd4ba520a5049e0bdb238e99f56aed9e93e35b4b409055df9593ff0d153ed5822fcdca6e44228fac63b516579d8229b9e19ccd500c3104cdec43d076c261020ad1f3cd3382da76ad3ef1da3715f815d747aee64831d2f173fdea985933bd8bfaa828bd73b7ac77c5d30f4ef36909754c1ce53d"}], 0x90}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0xb, 0x6, 0xf7, 0x6, 0x140, r6, 0x1ff, '\x00', r1, r3, 0x5, 0x2, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000018c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r9, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x28, r10, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x5, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0xc894) r15 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001a00), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r13, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x58, r15, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9e]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048180}, 0x20046084) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r16, &(0x7f0000001c40)={&(0x7f0000001b40), 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x60, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x60}}, 0x8090) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r7, 0x40086e81, &(0x7f0000001c80)=0x7abf) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002000)=@bpf_tracing={0x1a, 0xd, &(0x7f0000001cc0)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x5e, 0xd, 0x5, 0x81, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}], &(0x7f0000001d40)='GPL\x00', 0x40, 0xc5, &(0x7f0000001d80)=""/197, 0x41000, 0x4, '\x00', r4, 0x18, r3, 0x8, &(0x7f0000001e80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x3, 0xe, 0xfff, 0x8}, 0x10, 0xc166, 0xffffffffffffffff, 0x3, &(0x7f0000001f80)=[0xffffffffffffffff, r6], &(0x7f0000001fc0)=[{0x5, 0x4, 0x6, 0x7}, {0x3, 0x1, 0xd, 0xa}, {0x4, 0x3, 0x6, 0x9}], 0x10, 0x101}, 0x94) 2m48.774270627s ago: executing program 0 (id=6098): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x0, 0x8}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 2m47.275595115s ago: executing program 0 (id=6103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00c8", @ANYRES32, @ANYBLOB="0800040064010101080002"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x10) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x11, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80040000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x3, r5, 0x2b, r6}, 0x10) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r10, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r10, 0x0, 0xff40) write$ppp(r10, &(0x7f0000000040)="8fe8", 0x2) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000000)=0x200, 0x4) setsockopt(r9, 0x11b, 0x9, 0x0, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/7, 0x7, 0x2722, 0x0, 0xffffffffffffffa2) 2m45.213183319s ago: executing program 0 (id=6107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x2, @val=@netkit={@void, @value=r2}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaeaaffffffffff74ab"], 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc40f0441}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000088}, 0x20000880) 2m45.21241909s ago: executing program 2 (id=6108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x21, 0x80000, 0x9) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRES32=r0], 0x30}}, 0x0) (async, rerun: 64) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000000003800ff7f0000320f000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ff0000000500"/26], 0x48) (async) r3 = socket$inet(0x2, 0x3, 0x8) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) socketpair(0x15, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000240)=0x8) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000008c0)=0x3, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) close(r0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000000)="1afb3382c4c723a5d07600f5ffffff", 0x4af, r8}, 0x38) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="06000000", @ANYRES16=r9, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r8}, 0x38) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x48) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x178, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'tunl0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x1000, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 2m45.073612853s ago: executing program 1 (id=6110): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7010040000000500"/22], 0x1c}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000040)={0x5c, 0x2, 0x1, 0x6, 0x0, [0x1, 0x5, 0x5, 0x1]}) 2m44.284655223s ago: executing program 1 (id=6111): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000075360c000000140003800c00038008000180840002000400010018000180140002007369743000"], 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES16=r2], 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000075360c000000140003800c00038008000180840002000400010018000180140002007369743000"], 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES16=r2], 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async) 2m44.216332004s ago: executing program 0 (id=6112): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0xff80, 0x8000, 0x18000000, 0x9}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8001}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="ecd0c9a25ff60c71bf2e77d07db219dfadba7550deb45855efed504be13a604442ef5da34d50bc62f27e6e4bc6889337a977cd06be9e0644cf35d5aa86ecf459fec9c9e47e1ac45056fd78306fd9d3b474722e2656219840f2c7c5cd3390f8c620f9b32e5fb9da85d4f56d954c20c20a24723d1286132219ae94d3fd3fdeefeb5804403a63bd64900ab4cab1c1eb5cbb35e3e5a18cb6ea4398cc3ad9e6812f6bf79694a1c8f9", 0xa6}], 0x1}, 0x22000000) r2 = accept4(r0, &(0x7f00000001c0)=@nfc, &(0x7f0000000240)=0x80, 0x80000) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req={0x401, 0x8ca1, 0x1, 0x8}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x3, 'geneve1\x00', {0x7}, 0xc}) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004088}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}, @pad1]}, 0x20) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) r4 = accept(r0, &(0x7f0000001500)=@rc, &(0x7f0000001580)=0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000015c0)={r5}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001600)='memory.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001640)={0x0, 0x80000000}, &(0x7f0000001680)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000016c0)={r7, 0x64, "22cdfa437201f0283edc164fe2154aec1ec25a35a8e33091780cbf8ec4550fdd8a0fe038ff4144f68e5ca30333344ef87a0222886db498169a8c2691546d8e5082352ec366de4ff4e383e620c97514eb654bc836cda84aa548556c22794889a1ae2eb718"}, &(0x7f0000001740)=0x6c) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001840)=@get={0x1, &(0x7f0000001780)=""/130, 0x38bb}) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000001880)) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001900)=@generic={&(0x7f00000018c0)='./file0\x00'}, 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000001940)={r8, @in6={{0xa, 0x4e20, 0x62538b01, @mcast2, 0x89d0}}, [0x0, 0x4, 0x7, 0x6, 0x9, 0x1, 0x7ff, 0x0, 0x800, 0xfffffffffffffffd, 0x9, 0x8001, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x1]}, &(0x7f0000001a40)=0x100) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000001a80)={r10, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000001b40)=0x84) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001b80), 0x100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001bc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001e40)={{r11}, r12, 0x2, @inherit={0x60, &(0x7f0000001dc0)={0x1, 0x3, 0x400, 0x49315ae000000000, {0x9, 0x3, 0x9, 0x8001, 0xde}, [0x5, 0x7, 0x4]}}, @subvolid=0x8}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000002e40)={r7, @in6={{0xa, 0x4e24, 0xd00, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0xaa01, 0x7}, &(0x7f0000002f00)=0x90) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r13, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x701000a0}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x20, r14, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) 2m44.204451532s ago: executing program 2 (id=6113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x20000011) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100006000c00"], 0x48}, 0x1, 0x0, 0x0, 0x6404c441}, 0xc040) 2m43.881240655s ago: executing program 4 (id=6114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0xa, @local, 0xfffffe4a}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x16}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000340)=0x73ba, 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e0003002f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0xe, 0xffffffff}}) 2m43.760283599s ago: executing program 1 (id=6115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000240)={{[0x2, 0x1, 0x7fff, 0x6]}, 0x0, 0x2, 0xa348, 0x0, &(0x7f0000000180)=[{{@_ha_fsid={[0x3, 0x8]}, {0x9, 0x8, 0x2, 0xe000000000000000}}, 0x0, 0x0, '\x00'}, {{@align=0x2, {0x10, 0x61c9, 0x3, 0xcc}}, 0x3, 0x0, '{\x00'}, {{@_ha_fsid={[0x14000000, 0x6]}, {0x40, 0xfd9f, 0x4d8, 0x7}}, 0x5, 0x0, '^\x00'}, {{@_ha_fsid={[0x2, 0x8]}, {0x6, 0x6, 0x2, 0x5}}, 0x7, 0x0, ':/.\x00'}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$AUDIT_USER(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x9c, 0x3ed, 0x100, 0x70bd27, 0x25dfdbfc, "a54c580589ec35b10753cda4b132c832a90deeda75fe9486bb6d4cc9dec872d8476600ef14ff86054bb47029dc578751b57010654ff3415e38b74b85ef36aac7638cf8d6b46d0ed73230641fa1661b07e71d7b7e985c7dcde3403a0dca41cd124021890be3244f0567c39b365904fb0102c3d05bb71efff2ba583f7a2446a97397a8de502ffc1d6078b013", ["", "", "", "", "", "", "", ""]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 2m43.409907689s ago: executing program 0 (id=6116): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xffff, 0xf8, 0x65, 0x7fff}, {0x9, 0x2, 0x8, 0x8}, {0xe, 0x7, 0x7f, 0x6}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) write$cgroup_int(r2, &(0x7f0000000080)=0x7, 0x12) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r3, r2, 0x0, 0xe25) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001200010a00000000003e0013239ff1c68cf90fce0005020000100000800c00000965d11d38eb196c110833524a1ec58e91ab7d677923473cdaa1d30495e6bc30ad07609e3c5cf2e79f7bc9b91ea28eba3b1a5ef8d1326462f5f23c9eb2bd6b943e3d01a514e250bad6ffbc2a6bf6ae271cb33d67fb4d5a7ff572803195a80fcf9596557bf79f2cf88693757d644540cd6af783d247bd0dfcc2e52c3f71cd32bee936cc69c8e916d0ca8c90bb8cb865681d7c1c613ae22ce342b8ed604ebf54fc29e521d44bfb9ac7eeb0bc693e04871b9f0f57cfd633583d6ae1a61d6cd982186540ac7317ed2297ed85def34af36dd3bbda13e40e43e2ccf65c329dfde23837d28f8997926eebe2a4c52f736b83bc0dde4e5565dfd2d75e5e1979ad6e99c4431b762dfd547de48ea1d44d8f0f818d0ae686bd90de34ab8c064cba32a8baba4585d4a4ad29b3e5c577b2d441f9510590966a02db23a499d7e12043f8bc0becf8f65b77ab7f0537c0d8a6d46af034503fb954aa93a8e9b90965f0ffd9f5b8b4ad103db2a74148"], 0x24}}, 0x0) 2m43.149326672s ago: executing program 4 (id=6117): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000006cb325e29cc18b0e006508f6c790aaf9ab9b64425b4b719638d244a76d5a485b37f7f8c446a789a34d54bbbca90da06f38375bc1a7bcaafd8af0dd00577dbaa499ee3d0f0d2f0022265f6f86619f4fd2de3f48b51aa2ba4a2706c34fa8a4b9803f96348cd21def1d3bda1cae11"], 0x50) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x688) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2m43.148930229s ago: executing program 2 (id=6118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400dd}, 0x4000080) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r10, @ANYBLOB="2cec21a6fa81c76e2781f03137efe8e0125162078c39c251013d52ec770dbd8707778e5ea281feccabfd8643e0bbc4780c"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2m42.801782065s ago: executing program 0 (id=6119): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffeb7) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14, 0x14, 0x0, 0x7f}, [@FRA_SRC={0x8}]}, 0x24}}, 0x40090) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00001a1a3f006032ff02564fd6463c7a3fbe778a42077c1991a9231dc723683f722fef10147a188267834813ed2e17f1159421f12e80485a03a210b9bf6b4a6c8e92c7b5916d3e9417be1c93070861385ce0a5598dfcae9dece1ddc5b3ee6eaaf6a5a60b", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf25090000002800028008000100030000000800010016c600001400038008000200050000000800020006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x24000030) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x1, r4}, 0x38) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r5, 0x5) (async, rerun: 32) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd27, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e24, 0x4e24, [0x4, 0xfffd, 0xb, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async, rerun: 32) r7 = socket$inet6(0xa, 0x3, 0x7) sendto$inet6(r7, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) (async) readv(r7, &(0x7f0000000980)=[{&(0x7f00000017c0)=""/4122, 0x101a}, {0x0, 0x18}], 0x2) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r8, &(0x7f0000000040)='.\xbb/\x1a%$$\x9e*&/7*\x00', 0x20000, &(0x7f00000000c0)={@_ha_fsid={[0x7, 0x7398]}, {0x2, 0x1, 0x5, 0xb8}}, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x401}) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000240)={'batadv_slave_1\x00', 0xcd}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="913296136cbfae49dda44b5cf9799e8aeec9a96127bb10119ca15ee8ffabdcfc912e1044b0d4fe1eb3daa2d8d1967b7e59b9b03b8a56a6f28fcc1b35359140268c7247d98fe6d22ad2d39ff4284cd6b445b59e222b441921d833ea6c427e6b64131c98e3aba4e35a4b5ce08e10c10e62fa5fe3db7ecf9e7555bfbaa9703ccb7121f23ed8b5cb717d277cb1cc55c7294b6348f6ab779e599efb151e29891d5aae4be980c64efd1e304710e351c5baac1aa46d665140626661cf43b5cef64e640ba379a521d50afcf229f5e3ac4c470a714f1b5460c7940a3c0f526e2f68", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x24048101}, 0x4004000) (async, rerun: 64) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) 2m42.695380286s ago: executing program 1 (id=6120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000f40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="d8bc09442f1ac4e85d541aab2ea6e57c4e514bb51235454af181acdb27f0cc17bd12eac5b80c11eb76ab40e7e4e2c7218acd802382a4061e1d8d1b17c78c621697d797203c6b516ce3a8217df13fd3bf92c2e56625c566284868ba135b2972", @ANYRES16=r1, @ANYBLOB="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"], 0x6d4}}, 0x8000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x20, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='A', 0x1}], 0x1}}], 0x1, 0x0) (async) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='A', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x0, 0x43, 0xf5, &(0x7f00000001c0)="933a7798bdf9185932eb4dd0a1dc57e194fd50cb99968682ab6d6a500e4853d85e8ec3682535cccd3223bce9b69a05538d0fd791738d459e4f875892e49831f244e17e", &(0x7f0000000240)=""/245, 0xfff, 0x0, 0x90, 0x67, &(0x7f0000000340)="593e13e4e2e51ec8da89bec6dc4bc323921493fa040409ac042b0ba44aa15233fcb17125f03cf4032787d047238aa4735ea2e027a427b40d8e2e97e4c55c6991e82d0b2aede7c6b90d055c752b3365efdb8c46a34f0140442dd4127c67e3dcc6f4833e64f236baeb7d236e7618ff58c8972b3e7c639287443e4471b6d1cda82cad809336fa5aefecc2372d317c939c09", &(0x7f0000000500)="7ec4bd100e92449538ff6fc7220ee8b928948be5b28445914efcc1576b54a403950d761b5896cdc4da6a48a97951f0fb228db3abc0cd7d4d5e012aa9a2ef677a065295c57a22b8d1a72f9cecd0c7941127a2225b662c65bd4cb44429ec003a862664cf0bf99eef", 0x2, 0x0, 0x668}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r8, 0x11, 0x67, 0x0, &(0x7f0000000080)) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x14, 0x36, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x14, 0x36, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) (async) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5202) sendto$inet6(r2, &(0x7f0000000000)="826bb66f", 0x5ac, 0x0, 0x0, 0x0) 2m42.629923641s ago: executing program 4 (id=6121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xc, 0x9}, {0xfd}, {0xe, 0x2}, {0x3, 0x4}, {0x9, 0x3}], "b8b0d342f920599c"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000050}, 0x800) r4 = socket(0x2d, 0x2, 0x0) (async) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x110, 0xd}], 0x10}, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x11d, 0x1, 0x0, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0000010900010073797a3100000000400004803c0001800c0001007061796c6f6164002c000280080002400000000108000440000000fe080003400000002c080005400000001408000740000000010900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) r7 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0xff85}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c0002800600010001000000"], 0x3c}}, 0x0) 2m42.082308163s ago: executing program 4 (id=6122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000004000000140001800d0001007564703a7379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0100001a0033060000000000000000000000ffffffff000000000000000000000000000040004e24800100008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x14c}}, 0x200080d4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r6) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) close(r4) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r7, &(0x7f0000000180)=0x2, 0x12) r8 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) splice(r8, 0x0, r8, 0x0, 0xeba, 0xe) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000840000090000000002"], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000000000000000000085000000ad00e40c9b23001d00000000d36f2374f19536909ec96787823b103aa53b76"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 2m41.956882954s ago: executing program 2 (id=6123): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) 2m41.757221214s ago: executing program 1 (id=6124): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xd0b, 0x6}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 32) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f00000000c0)) (rerun: 32) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000100)={0x1, 0x1, 0x4, 0x7, 0x5, 0xfffff2b1}) (async) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x81, 0xffffffffffffffff, 0x10001}) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x14, r3, 0x2, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8821) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf251d0000000c000600030000000300000008000300", @ANYRES32=r4, @ANYBLOB="5c002f800c0002000000000000000000240003800c000500090000000000000005000200030000000c00038006000100030000002800038008000100020000000c00050064ffffffffffffff0800040040000000050002000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0006000300000003000000"], 0x98}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) (async) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000003c0)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000400)) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000440)=""/4096, &(0x7f0000001440)=0x1000) getpid() (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x90) (async) r5 = socket$key(0xf, 0x3, 0x2) getsockname(r5, &(0x7f0000001580)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x14, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async, rerun: 64) connect(r1, &(0x7f0000001980)=@l2tp6={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x80) (async, rerun: 64) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000001a00)) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)=r0}, 0x20) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000001a40)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xbd}], &(0x7f0000001ac0)='GPL\x00', 0x800, 0x12, &(0x7f0000001b00)=""/18, 0x41000, 0xc, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[r0, r8], &(0x7f0000001c40), 0x10, 0xa}, 0x94) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x20, 0x0, 0x800, 0x70bd26, 0x401, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x404c880}, 0x20000000) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m41.281148271s ago: executing program 2 (id=6125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000e40)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x0, 0x0, 0xfffffffe}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xb}, 0x90) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000040)={{@align=0x3, {0x8, 0x5, 0x2, 0x932a}}, {{[0x9, 0x0, 0x6, 0x9]}, 0x0, 0x2, 0x6, 0x0, &(0x7f0000000000)=[{{@align=0x6, {0x8, 0x8, 0x6, 0x6}}, 0x0, 0x0, '\'%.\x00'}]}}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x2, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0xffffffffffffffff, 0x0, 0x80}, 0x0, 0xfffffffe}}, 0xb8}}, 0x4000000) 2m40.927991085s ago: executing program 4 (id=6126): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010601000000000000000200000a0900010073797a30000000004c000000030a010602000000000000000200000a0900010073797a30000000000900030073797a30000000000b00070066696c7465720000140004800800014000000003080002400000000098000000060a010603000000000000000200000a0900010073797a30000000000900020073797a30000000006c0004802c0001800e000100696d6d6564696174650000001800028008000140000000010c00028008000100313233343c0001800a00010072616e67650000002c000280080001400000000108000240000000800c00038008000100313233340c000480080001"], 0x12c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24040008) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x10000, 0x0) 2m40.509017748s ago: executing program 1 (id=6127): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0ff980", 0x10, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0ff980", 0x10, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) shutdown(r5, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) 2m40.5086552s ago: executing program 2 (id=6128): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000000)) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xff5f}, 0x0) 2m40.465935649s ago: executing program 4 (id=6129): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xa, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYRESDEC=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000200)={r1, &(0x7f0000000000)='\x00', 0x24000, &(0x7f0000000040)={@align=0x7fffffffffffffff, {0x7, 0x6, 0x1, 0x401}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x401}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000240)=""/11, 0xb, 0x0, &(0x7f0000000280)}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000005580)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r13, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r13, 0xf5f) accept(r13, 0x0, 0x0) r14 = openat$cgroup_ro(r12, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r2, r3, 0xf, 0x0, @val=@tracing={r4, 0x8}}, 0x20) 0s ago: executing program 32 (id=6119): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffeb7) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14, 0x14, 0x0, 0x7f}, [@FRA_SRC={0x8}]}, 0x24}}, 0x40090) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00001a1a3f006032ff02564fd6463c7a3fbe778a42077c1991a9231dc723683f722fef10147a188267834813ed2e17f1159421f12e80485a03a210b9bf6b4a6c8e92c7b5916d3e9417be1c93070861385ce0a5598dfcae9dece1ddc5b3ee6eaaf6a5a60b", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf25090000002800028008000100030000000800010016c600001400038008000200050000000800020006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x24000030) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x1, r4}, 0x38) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r5, 0x5) (async, rerun: 32) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd27, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e24, 0x4e24, [0x4, 0xfffd, 0xb, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async, rerun: 32) r7 = socket$inet6(0xa, 0x3, 0x7) sendto$inet6(r7, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) (async) readv(r7, &(0x7f0000000980)=[{&(0x7f00000017c0)=""/4122, 0x101a}, {0x0, 0x18}], 0x2) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r8, &(0x7f0000000040)='.\xbb/\x1a%$$\x9e*&/7*\x00', 0x20000, &(0x7f00000000c0)={@_ha_fsid={[0x7, 0x7398]}, {0x2, 0x1, 0x5, 0xb8}}, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x401}) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000240)={'batadv_slave_1\x00', 0xcd}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="913296136cbfae49dda44b5cf9799e8aeec9a96127bb10119ca15ee8ffabdcfc912e1044b0d4fe1eb3daa2d8d1967b7e59b9b03b8a56a6f28fcc1b35359140268c7247d98fe6d22ad2d39ff4284cd6b445b59e222b441921d833ea6c427e6b64131c98e3aba4e35a4b5ce08e10c10e62fa5fe3db7ecf9e7555bfbaa9703ccb7121f23ed8b5cb717d277cb1cc55c7294b6348f6ab779e599efb151e29891d5aae4be980c64efd1e304710e351c5baac1aa46d665140626661cf43b5cef64e640ba379a521d50afcf229f5e3ac4c470a714f1b5460c7940a3c0f526e2f68", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x24048101}, 0x4004000) (async, rerun: 64) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) kernel console output (not intermixed with test programs): : hci0: unsupported parameter 8192 [ 627.977986][T24453] __nla_validate_parse: 16 callbacks suppressed [ 627.978010][T24453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4754'. [ 628.062226][T24449] tipc: Enabling of bearer rejected, already enabled [ 628.085714][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 628.394828][T24482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 628.445272][T24482] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4757'. [ 628.562881][T24486] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4758'. [ 628.563670][T24487] netlink: 'syz.4.4759': attribute type 142 has an invalid length. [ 628.616359][T24492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4760'. [ 628.672946][T24492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4760'. [ 628.731315][T24494] pim6reg: entered allmulticast mode [ 628.783062][T24497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4761'. [ 628.833944][T24494] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4759'. [ 629.025741][T24510] nbd: nbd1 already in use [ 629.026040][T24510] block nbd1: NBD_DISCONNECT [ 629.026108][T24510] block nbd1: Send disconnect failed -32 [ 629.026132][T24510] block nbd1: shutting down sockets [ 629.100568][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4763'. [ 629.125658][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 629.285833][T24534] netlink: 'syz.3.4764': attribute type 1 has an invalid length. [ 629.399792][T24538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4764'. [ 629.731347][ T8184] bond6 (unregistering): (slave ip6gre2): Releasing backup interface [ 629.731380][ T8184] ip6gre2 (unregistering): left promiscuous mode [ 630.031156][ T8184] bond0 (unregistering): (slave gretap1): Releasing active interface [ 630.031188][ T8184] gretap1 (unregistering): left promiscuous mode [ 630.119744][ T8184] bond3 (unregistering): (slave geneve3): Releasing active interface [ 630.165641][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 630.231924][ T8184] .` (unregistering): (slave ): Releasing backup interface [ 630.235232][ T8184] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.261780][ T8184] .` (unregistering): (slave team0): Releasing backup interface [ 630.264199][ T8184] .` (unregistering): Released all slaves [ 630.287714][ T8184] bond1 (unregistering): Released all slaves [ 630.305302][ T8184] bond0 (unregistering): left promiscuous mode [ 630.307812][ T8184] bond0 (unregistering): Released all slaves [ 630.337503][ T8184] bond2 (unregistering): Released all slaves [ 630.354462][ T8184] bond3 (unregistering): Released all slaves [ 630.379541][ T8184] bond4 (unregistering): (slave dummy0): Releasing active interface [ 630.384488][ T8184] bond4 (unregistering): (slave veth7): Releasing active interface [ 630.395111][ T8184] bond4 (unregistering): Released all slaves [ 630.421784][ T8184] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 630.423582][ T8184] bond5 (unregistering): Released all slaves [ 630.451641][ T8184] bond6 (unregistering): Released all slaves [ 630.510083][T24538] bond6: (slave bridge5): making interface the new active one [ 630.510809][T24538] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 630.533852][T24570] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 512, id = 0 [ 630.773963][ T8184] tipc: Left network mode [ 630.903797][ T8184] IPVS: stopping backup sync thread 14276 ... [ 631.206138][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 631.372601][ T5856] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 631.400089][T24585] Cannot find set identified by id 65534 to match [ 631.626562][T24616] netlink: 'syz.4.4777': attribute type 2 has an invalid length. [ 631.633228][T24616] netlink: 'syz.4.4777': attribute type 21 has an invalid length. [ 632.158616][T24639] xt_CT: No such helper "snmp_trap" [ 632.247115][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 633.156233][ T8184] hsr_slave_0: left promiscuous mode [ 633.162314][ T8184] hsr_slave_1: left promiscuous mode [ 633.163448][ T8184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.163469][ T8184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.202839][ T8184] veth1_macvtap: left promiscuous mode [ 633.202881][ T8184] veth0_macvtap: left promiscuous mode [ 633.203587][ T8184] veth1_vlan: left promiscuous mode [ 633.203891][ T8184] veth0_vlan: left promiscuous mode [ 633.285582][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 633.862046][T24726] netlink: 'syz.1.4797': attribute type 2 has an invalid length. [ 634.079281][ T8184] team0 (unregistering): Port device team_slave_1 removed [ 634.114211][ T8184] team0 (unregistering): Port device team_slave_0 removed [ 634.325585][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.386333][ T8177] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 634.639002][T24739] __nla_validate_parse: 8 callbacks suppressed [ 634.639025][T24739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4798'. [ 634.828967][T24747] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4802'. [ 634.828992][T24747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4802'. [ 634.888420][T24749] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4802'. [ 634.888446][T24749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4802'. [ 634.998905][T24756] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4803'. [ 635.319478][T24769] xt_hashlimit: size too large, truncated to 1048576 [ 635.319727][T24769] xt_hashlimit: max too large, truncated to 1048576 [ 635.319854][T24769] xt_hashlimit: overflow, rate too high: 0 [ 635.365589][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 635.456464][T24781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4807'. [ 635.456495][T24781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4807'. [ 635.463618][T24781] wireguard: wg2: Could not create IPv4 socket [ 635.464329][T24781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4807'. [ 635.530285][T24784] sctp: [Deprecated]: syz.3.4808 (pid 24784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.530285][T24784] Use struct sctp_sack_info instead [ 635.531571][T24784] netlink: 'syz.3.4808': attribute type 10 has an invalid length. [ 635.596516][T24784] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4808'. [ 635.829838][T24800] xt_ecn: cannot match TCP bits for non-tcp packets [ 635.832989][T24800] xt_ecn: cannot match TCP bits for non-tcp packets [ 636.048855][T24814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.386379][T24827] netlink: 'syz.4.4815': attribute type 17 has an invalid length. [ 636.405539][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 636.420048][T24827] gretap0: entered promiscuous mode [ 636.421469][T24827] gretap0: left promiscuous mode [ 636.711633][T24842] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 636.822902][T24847] netlink: 'syz.0.4822': attribute type 4 has an invalid length. [ 637.236778][T24866] netlink: 'syz.2.4825': attribute type 1 has an invalid length. [ 637.284341][T24866] 8021q: adding VLAN 0 to HW filter on device bond5 [ 637.398720][T24870] xt_hashlimit: size too large, truncated to 1048576 [ 637.420855][T24870] Bluetooth: hci0: unsupported parameter 5161 [ 637.420879][T24870] Bluetooth: hci0: unsupported parameter 8192 [ 637.420894][T24870] Bluetooth: hci0: unsupported parameter 5161 [ 637.420909][T24870] Bluetooth: hci0: unsupported parameter 8192 [ 637.455755][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 637.832874][T24880] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 638.133108][T24898] netlink: 'syz.2.4833': attribute type 1 has an invalid length. [ 638.190756][T24898] 8021q: adding VLAN 0 to HW filter on device bond6 [ 638.410346][T24898] bond6: (slave bridge4): making interface the new active one [ 638.432261][T24898] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 638.495620][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 639.302888][T24948] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 639.341888][T24951] netlink: ct_mark mask cannot be 0 [ 639.341922][T24951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.525601][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 640.024293][T24983] __nla_validate_parse: 8 callbacks suppressed [ 640.024317][T24983] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4854'. [ 640.149051][T24986] xt_ecn: cannot match TCP bits for non-tcp packets [ 640.211158][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4858'. [ 640.273638][T24986] netlink: 'syz.3.4856': attribute type 4 has an invalid length. [ 640.298551][T24995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4859'. [ 640.323626][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4858'. [ 640.565676][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 640.688155][T25016] netlink: 'syz.0.4865': attribute type 10 has an invalid length. [ 640.688479][T25016] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.688790][T25016] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.723509][T25016] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.723647][T25016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.723961][T25016] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.724129][T25016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.764340][T25016] bridge0: entered allmulticast mode [ 640.772769][T25016] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 640.999555][T25025] x_tables: unsorted entry at hook 1 [ 641.184780][T25039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4869'. [ 641.203226][T25038] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4871'. [ 641.289447][T25043] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4872'. [ 641.536121][T25054] syzkaller1: entered promiscuous mode [ 641.536145][T25054] syzkaller1: entered allmulticast mode [ 641.603340][T25062] xt_cgroup: no path or classid specified [ 641.605612][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 641.683567][T25060] 8021q: adding VLAN 0 to HW filter on device bond6 [ 641.828309][T25101] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4884'. [ 641.936410][T25103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4881'. [ 641.939163][T25108] veth0_to_bond: entered allmulticast mode [ 642.420668][T25136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4890'. [ 642.655567][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 643.303148][T25188] netlink: 'syz.4.4908': attribute type 1 has an invalid length. [ 643.303164][T25189] netlink: 'syz.4.4908': attribute type 1 has an invalid length. [ 643.364976][T25188] bond8: (slave bridge3): making interface the new active one [ 643.377388][T25188] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 643.695640][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 644.296304][T25234] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 644.296508][T25234] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 644.296708][T25234] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 644.296924][T25234] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 644.297141][T25234] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 644.297333][T25234] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 644.297525][T25234] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 644.297723][T25234] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 644.304102][T25234] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 644.304301][T25234] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 644.725529][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 645.076882][T25281] __nla_validate_parse: 13 callbacks suppressed [ 645.076906][T25281] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4933'. [ 645.082662][T25279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4933'. [ 645.226715][T25287] ipt_ah: unknown flags FF [ 645.252685][T25289] netlink: 'syz.3.4935': attribute type 29 has an invalid length. [ 645.264313][T25293] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4936'. [ 645.311840][T25295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4937'. [ 645.336103][T25263] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.336150][T25263] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.336185][T25263] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.343577][T25295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4937'. [ 645.351447][T25264] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.565161][T25295] veth5: entered allmulticast mode [ 645.613137][T25316] netlink: zone id is out of range [ 645.613154][T25316] netlink: zone id is out of range [ 645.613163][T25316] netlink: zone id is out of range [ 645.613171][T25316] netlink: zone id is out of range [ 645.613180][T25316] netlink: get zone limit has 4 unknown bytes [ 645.765518][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 645.870201][T25326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4943'. [ 645.973472][T25331] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4946'. [ 646.188372][T25340] netlink: 'syz.2.4947': attribute type 1 has an invalid length. [ 646.206108][T25342] netlink: 'syz.3.4949': attribute type 1 has an invalid length. [ 646.206165][T25342] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4949'. [ 646.249096][T25340] 8021q: adding VLAN 0 to HW filter on device bond7 [ 646.370919][T25344] bond7: (slave gretap0): making interface the new active one [ 646.381170][T25344] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 646.690801][T25371] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 646.805663][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 646.884938][T25380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4958'. [ 646.949510][T25386] netlink: 'syz.2.4959': attribute type 46 has an invalid length. [ 647.303587][T25397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4962'. [ 647.355646][T25401] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 647.356013][T25401] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 647.356385][T25401] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 647.357416][T25401] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 647.357776][T25401] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 647.358127][T25401] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 647.358471][T25401] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 647.358818][T25401] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 647.360180][T25401] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 648.030201][T25436] netlink: 'syz.1.4973': attribute type 9 has an invalid length. [ 648.492361][T25457] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20002 [ 648.506332][T25458] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20002 [ 649.229089][T25499] netlink: 'syz.0.4989': attribute type 3 has an invalid length. [ 649.270882][T25497] vlan0: entered allmulticast mode [ 649.270907][T25497] bond0: entered allmulticast mode [ 649.270922][T25497] bond_slave_0: entered allmulticast mode [ 649.270939][T25497] bond_slave_1: entered allmulticast mode [ 649.270956][T25497] team0: entered allmulticast mode [ 649.270970][T25497] team_slave_1: entered allmulticast mode [ 650.076939][T25540] netlink: 'syz.1.5000': attribute type 5 has an invalid length. [ 650.085220][T25540] geneve2: entered promiscuous mode [ 650.085245][T25540] geneve2: entered allmulticast mode [ 650.126132][T25540] __nla_validate_parse: 12 callbacks suppressed [ 650.126155][T25540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5000'. [ 650.126519][T25263] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 650.126565][T25263] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 650.126602][T25263] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 650.126638][T25263] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 650.129428][T25540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5000'. [ 650.305072][T25552] C: renamed from lo (while UP) [ 650.380229][T25554] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 650.463252][T25556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5004'. [ 650.463281][T25556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5004'. [ 650.463297][T25556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5004'. [ 650.666835][T25575] : renamed from bond0 [ 650.909420][T25590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5013'. [ 651.240341][T25606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5018'. [ 651.330900][T25614] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 651.881076][T25643] netlink: 'syz.3.5028': attribute type 1 has an invalid length. [ 651.911164][T25643] bond7: entered promiscuous mode [ 651.911698][T25643] 8021q: adding VLAN 0 to HW filter on device bond7 [ 651.930273][T25643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5028'. [ 651.930980][T25643] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5028'. [ 652.005508][ C1] net_ratelimit: 97 callbacks suppressed [ 652.005532][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 653.046197][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 654.085505][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 654.667557][T25625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.684815][T25645] netlink: 'syz.1.5024': attribute type 12 has an invalid length. [ 654.940914][T25654] netlink: 'syz.3.5029': attribute type 1 has an invalid length. [ 654.993723][T25661] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5033'. [ 655.040064][T25660] netlink: 'syz.4.5032': attribute type 10 has an invalid length. [ 655.075939][T25660] team0: Device veth0_vlan failed to register rx_handler [ 655.125484][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.304269][T25675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5037'. [ 655.599290][T25697] netlink: 'syz.4.5041': attribute type 3 has an invalid length. [ 655.599308][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5041'. [ 655.784428][T25706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5043'. [ 655.791930][T25706] netlink: 'syz.0.5043': attribute type 29 has an invalid length. [ 655.793520][T25706] netlink: 'syz.0.5043': attribute type 29 has an invalid length. [ 655.801627][T25706] ip_tables: iptables: counters copy to user failed while replacing table [ 656.165489][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 656.171488][T25730] Cannot find add_set index 34 as target [ 656.172625][T25732] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5052'. [ 656.219724][T25736] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5052'. [ 656.400948][T25740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5053'. [ 656.562299][T25750] netlink: 'syz.1.5056': attribute type 12 has an invalid length. [ 656.712892][T25755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5060'. [ 656.713994][T25756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5060'. [ 656.927298][T25771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5062'. [ 657.120503][T25777] bridge0: entered allmulticast mode [ 657.121043][T25777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5065'. [ 657.121125][T25777] bridge_slave_1: left allmulticast mode [ 657.121147][T25777] bridge_slave_1: left promiscuous mode [ 657.123059][T25777] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.164212][T25777] bridge_slave_0: left allmulticast mode [ 657.164241][T25777] bridge_slave_0: left promiscuous mode [ 657.164519][T25777] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.205615][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 657.233838][T25777] bond0: (slave bridge0): Releasing backup interface [ 657.234669][T25777] bridge0 (unregistering): left allmulticast mode [ 657.402154][T25790] tap0: tun_chr_ioctl cmd 2148553947 [ 657.587545][T25801] netlink: 'syz.1.5072': attribute type 20 has an invalid length. [ 657.587879][T25801] netlink: 'syz.1.5072': attribute type 20 has an invalid length. [ 658.246212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 658.563778][T25849] netlink: 'syz.1.5083': attribute type 22 has an invalid length. [ 658.564046][T25849] netlink: 'syz.1.5083': attribute type 22 has an invalid length. [ 658.757620][T25859] x_tables: duplicate underflow at hook 3 [ 658.988559][T25871] netlink: 'syz.4.5091': attribute type 10 has an invalid length. [ 658.998368][T25872] netlink: 'syz.4.5091': attribute type 10 has an invalid length. [ 659.286487][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 659.441517][ T990] hid-generic 0005:16C0:0009.0003: item fetching failed at offset 0/1 [ 659.442198][ T990] hid-generic 0005:16C0:0009.0003: probe with driver hid-generic failed with error -22 [ 660.097635][T25938] vlan3: entered promiscuous mode [ 660.097660][T25938] bridge0: entered promiscuous mode [ 660.097852][T25938] vlan3: entered allmulticast mode [ 660.325519][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.480014][T25957] netlink: 'syz.1.5114': attribute type 1 has an invalid length. [ 660.562499][T25957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.805228][T25975] netlink: 'syz.2.5119': attribute type 4 has an invalid length. [ 660.817371][T25977] netlink: 'syz.2.5119': attribute type 4 has an invalid length. [ 660.996981][T25988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 661.279043][T26004] __nla_validate_parse: 24 callbacks suppressed [ 661.279068][T26004] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5130'. [ 661.365608][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 661.389634][T26001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5129'. [ 661.593805][T26016] syzkaller0: left promiscuous mode [ 661.593832][T26016] syzkaller0: left allmulticast mode [ 661.858002][T26035] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5140'. [ 661.863046][T26032] syzkaller0: entered promiscuous mode [ 661.863067][T26032] syzkaller0: entered allmulticast mode [ 661.968880][T26039] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5141'. [ 662.081656][T26047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 662.405714][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 662.414190][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5146'. [ 662.414217][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5146'. [ 662.524606][T26076] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5151'. [ 662.834239][T26084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 662.887509][T25082] wlan1: Trigger new scan to find an IBSS to join [ 663.445606][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.554038][T26121] openvswitch: netlink: IP tunnel dst address not specified [ 663.628601][T26123] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5163'. [ 663.847288][T26103] xt_CT: No such helper "snmp_trap" [ 664.036875][T26138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 664.485614][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 664.598871][T26164] batadv_slave_0: entered promiscuous mode [ 664.602517][T26163] batadv_slave_0: left promiscuous mode [ 664.832369][T26180] IPVS: set_ctl: invalid protocol: 7 0.0.0.0:20004 [ 665.525589][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 665.560794][T26211] ip_tables: iptables: counters copy to user failed while replacing table [ 666.252893][T26244] FAULT_INJECTION: forcing a failure. [ 666.252893][T26244] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 666.252940][T26244] CPU: 0 UID: 0 PID: 26244 Comm: syz.3.5203 Not tainted syzkaller #0 PREEMPT(full) [ 666.252966][T26244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 666.252989][T26244] Call Trace: [ 666.253003][T26244] [ 666.253013][T26244] dump_stack_lvl+0xe8/0x150 [ 666.253050][T26244] should_fail_ex+0x410/0x560 [ 666.253083][T26244] _copy_from_user+0x2d/0xb0 [ 666.253114][T26244] ___sys_sendmsg+0x1c6/0x360 [ 666.253145][T26244] ? __lock_acquire+0x747/0x2de0 [ 666.253174][T26244] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.253254][T26244] ? __fget_files+0x2a/0x420 [ 666.253286][T26244] ? __fget_files+0x3a2/0x420 [ 666.253328][T26244] __x64_sys_sendmsg+0x1b1/0x290 [ 666.253364][T26244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.253424][T26244] do_syscall_64+0x166/0x520 [ 666.253453][T26244] ? trace_irq_disable+0x3b/0x140 [ 666.253475][T26244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.253498][T26244] ? clear_bhb_loop+0x70/0xc0 [ 666.253526][T26244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.253548][T26244] RIP: 0033:0x7f536b79e159 [ 666.253569][T26244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.253588][T26244] RSP: 002b:00007f536c724028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.253618][T26244] RAX: ffffffffffffffda RBX: 00007f536ba25fa0 RCX: 00007f536b79e159 [ 666.253635][T26244] RDX: 000000000000c044 RSI: 0000200000000080 RDI: 0000000000000004 [ 666.253650][T26244] RBP: 00007f536c724090 R08: 0000000000000000 R09: 0000000000000000 [ 666.253665][T26244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.253679][T26244] R13: 00007f536ba26038 R14: 00007f536ba25fa0 R15: 00007ffd88dcebf8 [ 666.253716][T26244] [ 666.566166][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 666.643935][T26248] sctp: [Deprecated]: syz.4.5204 (pid 26248) Use of struct sctp_assoc_value in delayed_ack socket option. [ 666.643935][T26248] Use struct sctp_sack_info instead [ 666.674311][T26251] __nla_validate_parse: 4 callbacks suppressed [ 666.674331][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5205'. [ 667.431978][T26288] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5214'. [ 667.516710][T26290] FAULT_INJECTION: forcing a failure. [ 667.516710][T26290] name failslab, interval 1, probability 0, space 0, times 1 [ 667.517098][T26290] CPU: 1 UID: 0 PID: 26290 Comm: syz.0.5215 Not tainted syzkaller #0 PREEMPT(full) [ 667.517126][T26290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 667.517140][T26290] Call Trace: [ 667.517153][T26290] [ 667.517162][T26290] dump_stack_lvl+0xe8/0x150 [ 667.517202][T26290] should_fail_ex+0x410/0x560 [ 667.517233][T26290] ? __alloc_skb+0x1db/0x7a0 [ 667.517262][T26290] should_failslab+0xa8/0x100 [ 667.517292][T26290] ? __alloc_skb+0x1db/0x7a0 [ 667.517318][T26290] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 667.517354][T26290] ? __alloc_skb+0x18d/0x7a0 [ 667.517383][T26290] ? __alloc_skb+0x1db/0x7a0 [ 667.517419][T26290] __alloc_skb+0x1db/0x7a0 [ 667.517452][T26290] netlink_sendmsg+0x5d4/0xb40 [ 667.517496][T26290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.517528][T26290] ? apparmor_socket_sendmsg+0x98/0x360 [ 667.517558][T26290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.517579][T26290] sock_sendmsg_nosec+0x13a/0x180 [ 667.517608][T26290] ____sys_sendmsg+0x54e/0x850 [ 667.517647][T26290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.517690][T26290] ? import_iovec+0x73/0xa0 [ 667.517724][T26290] ___sys_sendmsg+0x2a5/0x360 [ 667.517756][T26290] ? __lock_acquire+0x747/0x2de0 [ 667.517784][T26290] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.517857][T26290] ? __fget_files+0x2a/0x420 [ 667.517889][T26290] ? __fget_files+0x3a2/0x420 [ 667.517932][T26290] __x64_sys_sendmsg+0x1b1/0x290 [ 667.517968][T26290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.518024][T26290] do_syscall_64+0x166/0x520 [ 667.518055][T26290] ? trace_irq_disable+0x3b/0x140 [ 667.518078][T26290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.518102][T26290] ? clear_bhb_loop+0x70/0xc0 [ 667.518130][T26290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.518153][T26290] RIP: 0033:0x7f35ea99e159 [ 667.518175][T26290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.518195][T26290] RSP: 002b:00007f35eb920028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.518218][T26290] RAX: ffffffffffffffda RBX: 00007f35eac25fa0 RCX: 00007f35ea99e159 [ 667.518235][T26290] RDX: 000000000000c044 RSI: 0000200000000080 RDI: 0000000000000004 [ 667.518250][T26290] RBP: 00007f35eb920090 R08: 0000000000000000 R09: 0000000000000000 [ 667.518265][T26290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.518278][T26290] R13: 00007f35eac26038 R14: 00007f35eac25fa0 R15: 00007ffe348a2c88 [ 667.518315][T26290] [ 667.616358][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 667.851307][T25091] wlan1: Trigger new scan to find an IBSS to join [ 668.405159][T26310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5220'. [ 668.510596][T26316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5221'. [ 668.510623][T26316] openvswitch: netlink: Flow key attr not present in new flow. [ 668.645572][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 668.669821][T26316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5221'. [ 668.737080][T25073] wlan1: Creating new IBSS network, BSSID 46:17:cf:cb:ae:05 [ 668.789044][T26326] pimreg: entered allmulticast mode [ 669.073860][T26333] syzkaller0: left promiscuous mode [ 669.073887][T26333] syzkaller0: left allmulticast mode [ 669.154319][T26339] netlink: 'syz.3.5225': attribute type 1 has an invalid length. [ 669.685486][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 669.918158][T26365] openvswitch: netlink: Flow actions attr not present in new flow. [ 669.920299][T26364] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5230'. [ 669.969787][T26361] openvswitch: netlink: Message has 8 unknown bytes. [ 669.970121][T26361] openvswitch: netlink: Message has 8 unknown bytes. [ 669.970430][T26361] openvswitch: netlink: Message has 8 unknown bytes. [ 669.970732][T26361] openvswitch: netlink: Message has 8 unknown bytes. [ 669.971045][T26361] openvswitch: netlink: Message has 8 unknown bytes. [ 670.119467][T26371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5232'. [ 670.135250][T26371] veth0_to_bond: entered allmulticast mode [ 670.899394][T26402] netlink: 'syz.0.5238': attribute type 30 has an invalid length. [ 670.993906][T26407] netlink: 'syz.3.5240': attribute type 12 has an invalid length. [ 670.993934][T26407] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5240'. [ 671.309221][T26422] FAULT_INJECTION: forcing a failure. [ 671.309221][T26422] name failslab, interval 1, probability 0, space 0, times 0 [ 671.309259][T26422] CPU: 1 UID: 0 PID: 26422 Comm: syz.1.5242 Not tainted syzkaller #0 PREEMPT(full) [ 671.309284][T26422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 671.309298][T26422] Call Trace: [ 671.309307][T26422] [ 671.309316][T26422] dump_stack_lvl+0xe8/0x150 [ 671.309355][T26422] should_fail_ex+0x410/0x560 [ 671.309387][T26422] should_failslab+0xa8/0x100 [ 671.309416][T26422] ? skb_clone+0x212/0x3a0 [ 671.309450][T26422] kmem_cache_alloc_noprof+0xa1/0x600 [ 671.309488][T26422] ? skb_clone+0x212/0x3a0 [ 671.309529][T26422] skb_clone+0x212/0x3a0 [ 671.309566][T26422] __netlink_deliver_tap+0x413/0x860 [ 671.309602][T26422] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.309626][T26422] netlink_deliver_tap+0x19c/0x1b0 [ 671.309650][T26422] netlink_unicast+0x781/0x940 [ 671.309696][T26422] netlink_sendmsg+0x813/0xb40 [ 671.309729][T26422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.309761][T26422] ? apparmor_socket_sendmsg+0x98/0x360 [ 671.309801][T26422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.309822][T26422] sock_sendmsg_nosec+0x13a/0x180 [ 671.309850][T26422] ____sys_sendmsg+0x54e/0x850 [ 671.309889][T26422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.309932][T26422] ? import_iovec+0x73/0xa0 [ 671.309967][T26422] ___sys_sendmsg+0x2a5/0x360 [ 671.309998][T26422] ? __lock_acquire+0x747/0x2de0 [ 671.310027][T26422] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.310100][T26422] ? __fget_files+0x2a/0x420 [ 671.310132][T26422] ? __fget_files+0x3a2/0x420 [ 671.310174][T26422] __x64_sys_sendmsg+0x1b1/0x290 [ 671.310210][T26422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.310265][T26422] do_syscall_64+0x166/0x520 [ 671.310294][T26422] ? trace_irq_disable+0x3b/0x140 [ 671.310319][T26422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.310342][T26422] ? clear_bhb_loop+0x70/0xc0 [ 671.310371][T26422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.310395][T26422] RIP: 0033:0x7ff09619e159 [ 671.310417][T26422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.310436][T26422] RSP: 002b:00007ff0943f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.310460][T26422] RAX: ffffffffffffffda RBX: 00007ff096425fa0 RCX: 00007ff09619e159 [ 671.310477][T26422] RDX: 000000000000c044 RSI: 0000200000000080 RDI: 0000000000000004 [ 671.310492][T26422] RBP: 00007ff0943f6090 R08: 0000000000000000 R09: 0000000000000000 [ 671.310506][T26422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.310520][T26422] R13: 00007ff096426038 R14: 00007ff096425fa0 R15: 00007ffd89f42ef8 [ 671.310556][T26422] [ 671.717257][T26437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5245'. [ 671.960809][T26454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5248'. [ 672.205164][T26459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5249'. [ 672.232786][T26461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5250'. [ 672.271132][T26466] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5252'. [ 672.304637][T26462] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5251'. [ 672.409466][T26469] nbd: couldn't find device at index 15663104 [ 672.524593][T26475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5254'. [ 672.551995][T26481] FAULT_INJECTION: forcing a failure. [ 672.551995][T26481] name failslab, interval 1, probability 0, space 0, times 0 [ 672.552032][T26481] CPU: 0 UID: 0 PID: 26481 Comm: syz.0.5257 Not tainted syzkaller #0 PREEMPT(full) [ 672.552057][T26481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 672.552071][T26481] Call Trace: [ 672.552080][T26481] [ 672.552090][T26481] dump_stack_lvl+0xe8/0x150 [ 672.552127][T26481] should_fail_ex+0x410/0x560 [ 672.552160][T26481] should_failslab+0xa8/0x100 [ 672.552188][T26481] ? skb_clone+0x212/0x3a0 [ 672.552222][T26481] kmem_cache_alloc_noprof+0xa1/0x600 [ 672.552260][T26481] ? skb_clone+0x212/0x3a0 [ 672.552300][T26481] skb_clone+0x212/0x3a0 [ 672.552336][T26481] __netlink_deliver_tap+0x413/0x860 [ 672.552373][T26481] ? netlink_deliver_tap+0x2e/0x1b0 [ 672.552397][T26481] netlink_deliver_tap+0x19c/0x1b0 [ 672.552421][T26481] netlink_unicast+0x781/0x940 [ 672.552467][T26481] netlink_sendmsg+0x813/0xb40 [ 672.552501][T26481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.552533][T26481] ? apparmor_socket_sendmsg+0x98/0x360 [ 672.552563][T26481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.552585][T26481] sock_sendmsg_nosec+0x13a/0x180 [ 672.552613][T26481] ____sys_sendmsg+0x54e/0x850 [ 672.552651][T26481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.552695][T26481] ? import_iovec+0x73/0xa0 [ 672.552732][T26481] ___sys_sendmsg+0x2a5/0x360 [ 672.552763][T26481] ? __lock_acquire+0x747/0x2de0 [ 672.552792][T26481] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.552865][T26481] ? __fget_files+0x2a/0x420 [ 672.552896][T26481] ? __fget_files+0x3a2/0x420 [ 672.552939][T26481] __x64_sys_sendmsg+0x1b1/0x290 [ 672.552975][T26481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.553040][T26481] do_syscall_64+0x166/0x520 [ 672.553069][T26481] ? trace_irq_disable+0x3b/0x140 [ 672.553092][T26481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.553116][T26481] ? clear_bhb_loop+0x70/0xc0 [ 672.553144][T26481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.553167][T26481] RIP: 0033:0x7f35ea99e159 [ 672.553187][T26481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.553207][T26481] RSP: 002b:00007f35eb920028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.553232][T26481] RAX: ffffffffffffffda RBX: 00007f35eac25fa0 RCX: 00007f35ea99e159 [ 672.553249][T26481] RDX: 000000000000c044 RSI: 0000200000000080 RDI: 0000000000000004 [ 672.553265][T26481] RBP: 00007f35eb920090 R08: 0000000000000000 R09: 0000000000000000 [ 672.553279][T26481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.553292][T26481] R13: 00007f35eac26038 R14: 00007f35eac25fa0 R15: 00007ffe348a2c88 [ 672.553330][T26481] [ 672.809243][ C1] net_ratelimit: 6 callbacks suppressed [ 672.809266][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 672.973322][T26495] dvmrp0: entered allmulticast mode [ 673.081746][T26499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5261'. [ 673.085074][T26500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5261'. [ 673.134231][T26497] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 673.240854][T26509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5264'. [ 673.438675][T26519] netlink: 'syz.3.5267': attribute type 21 has an invalid length. [ 673.465972][T26523] netlink: 'syz.2.5269': attribute type 1 has an invalid length. [ 673.845565][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 673.902920][T26549] dvmrp8: entered allmulticast mode [ 674.041588][T26564] FAULT_INJECTION: forcing a failure. [ 674.041588][T26564] name failslab, interval 1, probability 0, space 0, times 0 [ 674.041625][T26564] CPU: 1 UID: 0 PID: 26564 Comm: syz.0.5281 Not tainted syzkaller #0 PREEMPT(full) [ 674.041650][T26564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 674.041663][T26564] Call Trace: [ 674.041672][T26564] [ 674.041682][T26564] dump_stack_lvl+0xe8/0x150 [ 674.041719][T26564] should_fail_ex+0x410/0x560 [ 674.041752][T26564] should_failslab+0xa8/0x100 [ 674.041781][T26564] ? skb_clone+0x212/0x3a0 [ 674.041825][T26564] kmem_cache_alloc_noprof+0xa1/0x600 [ 674.041864][T26564] ? skb_clone+0x212/0x3a0 [ 674.041904][T26564] skb_clone+0x212/0x3a0 [ 674.041944][T26564] __netlink_deliver_tap+0x413/0x860 [ 674.041980][T26564] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.042004][T26564] netlink_deliver_tap+0x19c/0x1b0 [ 674.042030][T26564] netlink_sendskb+0x68/0x140 [ 674.042066][T26564] netlink_rcv_skb+0x2a4/0x4a0 [ 674.042103][T26564] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.042134][T26564] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.042187][T26564] ? down_read+0x2be/0x330 [ 674.042226][T26564] genl_rcv+0x28/0x40 [ 674.042251][T26564] netlink_unicast+0x7bd/0x940 [ 674.042296][T26564] netlink_sendmsg+0x813/0xb40 [ 674.042331][T26564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.042363][T26564] ? apparmor_socket_sendmsg+0x98/0x360 [ 674.042392][T26564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.042414][T26564] sock_sendmsg_nosec+0x13a/0x180 [ 674.042442][T26564] ____sys_sendmsg+0x54e/0x850 [ 674.042481][T26564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.042525][T26564] ? import_iovec+0x73/0xa0 [ 674.042560][T26564] ___sys_sendmsg+0x2a5/0x360 [ 674.042590][T26564] ? __lock_acquire+0x747/0x2de0 [ 674.042619][T26564] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.042692][T26564] ? __fget_files+0x2a/0x420 [ 674.042724][T26564] ? __fget_files+0x3a2/0x420 [ 674.042768][T26564] __x64_sys_sendmsg+0x1b1/0x290 [ 674.042814][T26564] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.042870][T26564] do_syscall_64+0x166/0x520 [ 674.042899][T26564] ? trace_irq_disable+0x3b/0x140 [ 674.042922][T26564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.042946][T26564] ? clear_bhb_loop+0x70/0xc0 [ 674.042973][T26564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.042996][T26564] RIP: 0033:0x7f35ea99e159 [ 674.043018][T26564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.043037][T26564] RSP: 002b:00007f35eb920028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.043062][T26564] RAX: ffffffffffffffda RBX: 00007f35eac25fa0 RCX: 00007f35ea99e159 [ 674.043079][T26564] RDX: 000000000000c044 RSI: 0000200000000080 RDI: 0000000000000004 [ 674.043094][T26564] RBP: 00007f35eb920090 R08: 0000000000000000 R09: 0000000000000000 [ 674.043109][T26564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.043123][T26564] R13: 00007f35eac26038 R14: 00007f35eac25fa0 R15: 00007ffe348a2c88 [ 674.043160][T26564] [ 674.243606][T26574] netlink: 'syz.2.5277': attribute type 9 has an invalid length. [ 674.885699][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.914392][T26605] ip_tables: iptables: counters copy to user failed while replacing table [ 675.105041][T26613] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 675.430319][T26631] team0: Cannot enslave team device to itself [ 675.501516][T19775] block nbd1: Receive control failed (result -32) [ 675.525589][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.612473][T26640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.612857][T26639] netlink: 'syz.2.5303': attribute type 29 has an invalid length. [ 675.935693][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 676.965492][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 678.005558][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 678.522187][T26638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.741204][T26685] __nla_validate_parse: 12 callbacks suppressed [ 678.741242][T26685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5314'. [ 678.741582][T26685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5314'. [ 679.055472][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 679.187451][T26706] openvswitch: netlink: Duplicate key (type 0). [ 679.292170][T26714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5325'. [ 679.292204][T26714] netlink: 'syz.1.5325': attribute type 8 has an invalid length. [ 679.294342][T26716] netlink: 'syz.3.5326': attribute type 5 has an invalid length. [ 679.330429][T26719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5325'. [ 679.330464][T26719] netlink: 'syz.1.5325': attribute type 8 has an invalid length. [ 679.492842][T26723] tap0: tun_chr_ioctl cmd 1074025676 [ 679.492867][T26723] tap0: owner set to 0 [ 679.564477][T26738] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5328'. [ 679.565105][T26738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5328'. [ 679.581117][T26738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5328'. [ 679.581381][T26738] bridge_slave_0: left allmulticast mode [ 679.581477][T26738] bridge_slave_0: left promiscuous mode [ 679.583073][T26738] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.656487][T26740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5328'. [ 679.691621][T19775] Bluetooth: hci3: ISO packet too small [ 679.753131][T26730] syz.2.5330 (26730) used greatest stack depth: 17312 bytes left [ 679.868547][T26750] Bluetooth: hci0: unsupported parameter 5135 [ 679.868571][T26750] Bluetooth: hci0: unsupported parameter 8192 [ 679.868585][T26750] Bluetooth: hci0: unsupported parameter 5135 [ 679.868598][T26750] Bluetooth: hci0: unsupported parameter 8192 [ 680.011409][T26758] mac80211_hwsim hwsim46 : renamed from wlan1 (while UP) [ 680.085559][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 680.153820][T26763] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5343'. [ 681.126338][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 681.158149][T26808] v: renamed from veth0_vlan (while UP) [ 681.464527][T26805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.607163][T26829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5359'. [ 681.638310][T26831] openvswitch: netlink: Message has 4 unknown bytes. [ 681.689524][T26833] sctp: [Deprecated]: syz.2.5361 (pid 26833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 681.689524][T26833] Use struct sctp_sack_info instead [ 681.802412][T26838] netlink: 'syz.0.5362': attribute type 39 has an invalid length. [ 681.932904][T26847] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 681.932945][T26847] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 681.933001][T26847] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 682.041026][T26847] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 682.117369][T26847] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 682.165588][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 682.508499][T26873] pimreg: entered allmulticast mode [ 682.510989][T26875] netlink: 'syz.2.5375': attribute type 1 has an invalid length. [ 682.511009][T26875] netlink: 'syz.2.5375': attribute type 4 has an invalid length. [ 682.511364][T26875] netlink: 'syz.2.5375': attribute type 1 has an invalid length. [ 682.511380][T26875] netlink: 'syz.2.5375': attribute type 4 has an invalid length. [ 683.206190][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.634386][T26938] netlink: 'syz.4.5395': attribute type 21 has an invalid length. [ 683.930389][T26959] __nla_validate_parse: 13 callbacks suppressed [ 683.930411][T26959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5401'. [ 684.245587][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 684.560732][T26987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5410'. [ 684.599810][T26988] netlink: 'syz.4.5409': attribute type 7 has an invalid length. [ 684.599839][T26988] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5409'. [ 685.189662][T27011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5417'. [ 685.285638][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 685.295029][T27016] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 685.398705][T19775] Bluetooth: hci5: unexpected cc 0x2003 length: 0 < 9 [ 685.400017][T19775] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 685.747020][T27037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5424'. [ 685.933876][T27049] IPVS: Unknown mcast interface: caif0 [ 686.018051][T27053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5428'. [ 686.039473][T27053] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.129787][T27053] bridge_slave_1 (unregistering): left allmulticast mode [ 686.130622][T27053] bridge_slave_1 (unregistering): left promiscuous mode [ 686.130713][T27053] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.325596][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 686.823451][T27091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5438'. [ 686.823483][T27091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5438'. [ 686.823696][T27093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5438'. [ 686.823719][T27093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5438'. [ 687.365543][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 687.973607][T27148] ip_tables: iptables: counters copy to user failed while replacing table [ 688.251261][T27163] tipc: Resetting bearer [ 688.406366][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 688.445952][T27181] netlink: 'syz.1.5460': attribute type 4 has an invalid length. [ 689.445593][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 689.451258][T19775] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 689.451340][T19775] Bluetooth: hci5: Injecting HCI hardware error event [ 689.452753][T19775] Bluetooth: hci5: hardware error 0x00 [ 690.239243][T27125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 690.246766][T27137] netlink: 'syz.4.5450': attribute type 9 has an invalid length. [ 690.485487][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 690.531487][T27195] __nla_validate_parse: 10 callbacks suppressed [ 690.531510][T27195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5468'. [ 690.926704][T27224] syzkaller0: entered promiscuous mode [ 690.926730][T27224] syzkaller0: entered allmulticast mode [ 691.525766][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 691.526077][T19775] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 691.591352][T27242] batadv_slave_0: entered promiscuous mode [ 691.679030][T27245] openvswitch: netlink: Actions may not be safe on all matching packets [ 691.681247][T27245] xt_socket: unknown flags 0x4 [ 691.863307][T27242] batadv_slave_0: left promiscuous mode [ 691.884452][T27261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5483'. [ 692.034044][T27270] netlink: 'syz.3.5488': attribute type 1 has an invalid length. [ 692.079614][T27269] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5485'. [ 692.080148][T27272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5485'. [ 692.123785][T27270] bond9: option mode: invalid value (8) [ 692.129425][T27270] bond9 (unregistering): Released all slaves [ 692.279889][T27291] x_tables: duplicate underflow at hook 3 [ 692.474132][T27305] syz_tun: left allmulticast mode [ 692.565614][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.636538][T27313] netlink: 'syz.1.5497': attribute type 1 has an invalid length. [ 692.636563][T27313] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5497'. [ 692.636580][T27313] netlink: 'syz.1.5497': attribute type 1 has an invalid length. [ 692.682326][T27317] netlink: 'syz.1.5497': attribute type 1 has an invalid length. [ 692.682352][T27317] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5497'. [ 692.682370][T27317] netlink: 'syz.1.5497': attribute type 1 has an invalid length. [ 693.179676][T27351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5507'. [ 693.217040][T27351] bond8: Invalid ad_actor_system MAC address. [ 693.217064][T27351] bond8: option ad_actor_system: invalid value (1) [ 693.218684][T27351] bond8 (unregistering): Released all slaves [ 693.265167][T27357] syz_tun: entered allmulticast mode [ 693.322997][T27349] syz_tun: left allmulticast mode [ 693.407701][T27360] batman_adv: batadv0: Adding interface: syzkaller0 [ 693.407721][T27360] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.407755][T27360] batman_adv: batadv0: Interface activated: syzkaller0 [ 693.408314][T21161] syz2: Port: 1 Link ACTIVE [ 693.481398][T27367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5510'. [ 693.605639][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 693.632428][T27377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5513'. [ 693.646442][T27367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5510'. [ 694.114758][T27397] veth1_macvtap: left promiscuous mode [ 694.525121][T27414] IPVS: set_ctl: invalid protocol: 47 172.20.20.48:20000 [ 694.646311][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 694.887865][T27402] ip_tables: iptables: counters copy to user failed while replacing table [ 694.976166][T27406] tipc: Resetting bearer [ 695.203781][T27406] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 695.203811][T27406] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 695.377625][T27406] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 695.377651][T27406] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 695.409406][T27443] ip6t_srh: unknown srh match flags 5F28 [ 695.442512][T27406] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 695.442539][T27406] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 695.564849][T27443] 8021q: adding VLAN 0 to HW filter on device bond11 [ 695.685681][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 695.825179][T27454] __nla_validate_parse: 8 callbacks suppressed [ 695.825201][T27454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5533'. [ 695.930628][T27458] ip_tables: iptables: counters copy to user failed while replacing table [ 696.154647][T27466] vlan4: entered promiscuous mode [ 696.154674][T27466] geneve1: entered promiscuous mode [ 696.154894][T27466] vlan4: entered allmulticast mode [ 696.154909][T27466] geneve1: entered allmulticast mode [ 696.188254][T27466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5537'. [ 696.230153][T27474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5540'. [ 696.258345][T27470] netlink: 'syz.3.5539': attribute type 1 has an invalid length. [ 696.258368][T27470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5539'. [ 696.287984][T27470] bond0: option mode: unable to set because the bond device has slaves [ 696.735570][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 697.020791][T27517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5547'. [ 697.182810][T27522] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5549'. [ 697.202350][T27525] xt_TCPMSS: Only works on TCP SYN packets [ 697.634051][T27556] netlink: 'syz.1.5559': attribute type 10 has an invalid length. [ 697.775641][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 697.841457][T27566] pim6reg: entered allmulticast mode [ 697.842892][T27566] pim6reg: left allmulticast mode [ 697.856688][T27569] netlink: 'syz.0.5562': attribute type 1 has an invalid length. [ 697.856714][T27569] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5562'. [ 697.904067][T27569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5562'. [ 698.013403][T27577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5562'. [ 698.068025][T27569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5562'. [ 698.410827][T27594] sit1: entered promiscuous mode [ 698.410850][T27594] sit1: entered allmulticast mode [ 698.539574][T27598] netlink: 'syz.4.5568': attribute type 5 has an invalid length. [ 698.573393][T27606] netlink: 'syz.4.5568': attribute type 5 has an invalid length. [ 698.805719][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 698.913927][T27610] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 699.042628][T27613] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 699.042888][T27627] sit0: entered promiscuous mode [ 699.153299][T27627] netlink: 'syz.0.5572': attribute type 1 has an invalid length. [ 699.479268][T27651] tipc: Enabled bearer , priority 10 [ 699.846143][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 700.073627][T27682] xt_socket: unknown flags 0xc [ 700.138210][T27689] netlink: 'syz.1.5587': attribute type 10 has an invalid length. [ 700.201445][T27691] netlink: 'syz.2.5586': attribute type 62 has an invalid length. [ 700.204008][T27689] syz_tun: entered promiscuous mode [ 700.324951][T27691] openvswitch: netlink: Flow actions attr not present in new flow. [ 700.885609][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 701.233207][T27730] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 701.919095][T27756] tipc: Enabling of bearer rejected, already enabled [ 701.920280][T27756] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 701.925462][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 702.074430][T27760] netlink: 'syz.0.5599': attribute type 1 has an invalid length. [ 702.074456][T27760] __nla_validate_parse: 9 callbacks suppressed [ 702.074470][T27760] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5599'. [ 702.118998][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5601'. [ 702.186998][T27764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5603'. [ 702.368226][T27774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5605'. [ 702.470882][T27779] netlink: 101 bytes leftover after parsing attributes in process `syz.4.5606'. [ 702.965473][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 703.053035][T27797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 703.157479][T27805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5613'. [ 703.163594][T27805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5613'. [ 703.450591][T27818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5615'. [ 703.450621][T27818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5615'. [ 703.464659][T27818] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5615'. [ 704.005509][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 704.073308][T27858] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 704.561343][T27881] netlink: 'syz.0.5625': attribute type 3 has an invalid length. [ 704.561554][T27881] netlink: 'syz.0.5625': attribute type 3 has an invalid length. [ 704.697891][T27888] netlink: 'syz.0.5625': attribute type 3 has an invalid length. [ 704.698087][T27888] netlink: 'syz.0.5625': attribute type 3 has an invalid length. [ 704.960069][T27895] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 704.963461][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 705.008323][T27901] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 705.012820][T27895] bond8 (unregistering): Released all slaves [ 705.013890][T27901] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 705.032019][T27901] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.047648][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 705.059896][T27901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.128589][T19775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 705.128944][T19775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 705.133282][T19775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 705.134290][T19775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.134949][T19775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.860298][T27929] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 705.877907][T25069] IPVS: starting estimator thread 0... [ 705.928491][T27925] wg0: Caught tx_queue_len zero misconfig [ 705.977831][T27932] IPVS: using max 27 ests per chain, 64800 per kthread [ 706.095676][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 706.872127][T27973] x_tables: duplicate underflow at hook 3 [ 707.125580][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 707.158375][T27980] __nla_validate_parse: 12 callbacks suppressed [ 707.158400][T27980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5643'. [ 707.158416][T27980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5643'. [ 707.285787][T19775] Bluetooth: hci1: command tx timeout [ 707.453053][T27991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5646'. [ 707.823634][T28006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5649'. [ 708.067558][T28012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.165616][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 708.261344][T28023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5651'. [ 708.647353][T27898] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.651385][T27898] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.651578][T27898] bridge_slave_0: entered allmulticast mode [ 708.678583][T27898] bridge_slave_0: entered promiscuous mode [ 708.695642][T27898] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.695763][T27898] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.695930][T27898] bridge_slave_1: entered allmulticast mode [ 708.728602][T27898] bridge_slave_1: entered promiscuous mode [ 708.807629][T27898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.854598][T27898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.903838][T27898] team0: Port device team_slave_0 added [ 708.913230][T27898] team0: Port device team_slave_1 added [ 708.951445][T27898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.951466][T27898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.951495][T27898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.953597][T27898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.953613][T27898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.953639][T27898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.110555][T28043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.205523][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 709.261689][T28043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.310689][T28051] block nbd0: NBD_DISCONNECT [ 709.332423][T28051] block nbd0: Send disconnect failed -32 [ 709.332458][T28051] block nbd0: Send disconnect failed -32 [ 709.332481][T28051] block nbd0: shutting down sockets [ 709.353270][T28050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5658'. [ 709.365749][T19775] Bluetooth: hci1: command tx timeout [ 709.370170][T27898] hsr_slave_0: entered promiscuous mode [ 709.371308][T27898] hsr_slave_1: entered promiscuous mode [ 709.372067][T27898] debugfs: 'hsr0' already exists in 'hsr' [ 709.372087][T27898] Cannot create hsr debugfs directory [ 709.554327][T28058] netlink: 193 bytes leftover after parsing attributes in process `syz.2.5659'. [ 709.646697][T28059] netlink: 'syz.0.5657': attribute type 1 has an invalid length. [ 709.646725][T28059] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5657'. [ 709.647199][ T1399] pim6reg: left allmulticast mode [ 709.958747][T28071] xt_CT: No such helper "pptp" [ 709.962234][T28071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5662'. [ 709.993497][ T1399] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 710.069439][ T1399] team0: Port device xfrm0 removed [ 710.237434][ T1399] bond6 (unregistering): (slave geneve3): Releasing active interface [ 710.242662][ T1399] bond5 (unregistering): (slave geneve2): Releasing active interface [ 710.245577][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 710.367886][ T1399] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 710.367919][ T1399] bridge6 (unregistering): left promiscuous mode [ 710.421902][ T1399] .` (unregistering): Released all slaves [ 710.433093][ T1399] bond1 (unregistering): Released all slaves [ 710.450233][ T1399] bond2 (unregistering): Released all slaves [ 710.472090][ T1399] bond3 (unregistering): Released all slaves [ 710.490397][ T1399] bond4 (unregistering): Released all slaves [ 710.520837][ T1399] bond5 (unregistering): Released all slaves [ 710.549193][ T1399] bond6 (unregistering): Released all slaves [ 710.587835][ T1399] bond7 (unregistering): Released all slaves [ 710.606710][ T1399] bond8 (unregistering): Released all slaves [ 710.623766][ T1399] bond9 (unregistering): Released all slaves [ 710.671030][ T1399] bond0 (unregistering): Released all slaves [ 710.692286][ T1399] bond10 (unregistering): Released all slaves [ 710.922975][ T1399] tipc: Disabling bearer [ 710.923251][ T1399] tipc: Disabling bearer [ 710.923382][ T1399] tipc: Disabling bearer [ 710.923857][ T1399] tipc: Left network mode [ 711.142721][T28079] sctp: [Deprecated]: syz.0.5664 (pid 28079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 711.142721][T28079] Use struct sctp_sack_info instead [ 711.147517][T28082] x_tables: duplicate underflow at hook 3 [ 711.200419][T28081] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5665'. [ 711.232739][T28085] x_tables: duplicate underflow at hook 3 [ 711.295895][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 711.468343][T19775] Bluetooth: hci1: command tx timeout [ 711.470899][T27898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.470936][T27898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.470965][T27898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 711.774567][ T1399] IPVS: stopping master sync thread 9605 ... [ 711.775084][ T1399] IPVS: stopping backup sync thread 8457 ... [ 712.079558][T27898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.079598][T27898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.079624][T27898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 712.337822][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 712.776819][T27898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.776860][T27898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.776890][T27898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 713.079181][T27898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.079225][T27898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.079255][T27898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 713.375582][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 713.525824][T19775] Bluetooth: hci1: command tx timeout [ 713.759548][T28180] __nla_validate_parse: 4 callbacks suppressed [ 713.759573][T28180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5689'. [ 713.843220][T28182] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5688'. [ 714.046277][T28189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5690'. [ 714.239362][ T1399] hsr_slave_0: left promiscuous mode [ 714.240299][ T1399] hsr_slave_1: left promiscuous mode [ 714.244477][T28199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 714.308218][ T1399] veth1_macvtap: left promiscuous mode [ 714.308261][ T1399] veth0_macvtap: left promiscuous mode [ 714.405748][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 714.572057][T28206] netlink: 344 bytes leftover after parsing attributes in process `syz.0.5694'. [ 715.446654][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 715.544022][T27898] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 715.574941][T27898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.598232][T27898] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 715.641536][T27898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.648271][T27898] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 715.684107][T28242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5696'. [ 715.722416][T27898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.734648][T27898] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 715.771469][T27898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 716.282552][T27898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.354667][T27898] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.376405][T28269] netlink: 1464 bytes leftover after parsing attributes in process `syz.4.5700'. [ 716.440081][T25068] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.440195][T25068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.488878][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 716.532033][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.532184][ T8181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.717147][T28279] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5703'. [ 716.717194][T28279] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5703'. [ 716.717220][T28279] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5703'. [ 717.172367][T28288] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5705'. [ 717.525543][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 717.978719][T28325] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode [ 717.978797][T28325] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode [ 718.309566][T27898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.441053][T27898] veth0_vlan: entered promiscuous mode [ 718.467448][T27898] veth1_vlan: entered promiscuous mode [ 718.553015][T27898] veth0_macvtap: entered promiscuous mode [ 718.565435][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 718.624537][T27898] veth1_macvtap: entered promiscuous mode [ 718.713862][T27898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.752709][T28352] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 718.783897][T27898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.840305][T25087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.840356][T25087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.946003][T25073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.946058][T25073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.053429][T28359] bridge0: port 1(veth1_to_bridge) entered blocking state [ 719.053602][T28359] bridge0: port 1(veth1_to_bridge) entered disabled state [ 719.053779][T28359] veth1_to_bridge: entered allmulticast mode [ 719.088581][T28359] veth1_to_bridge: entered promiscuous mode [ 719.101698][T28359] bridge0: port 1(veth1_to_bridge) entered blocking state [ 719.101779][T28359] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 719.479973][T25084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.479997][T25084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.575917][T25072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.575943][T25072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.606160][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 719.807858][T28392] ip_tables: iptables: counters copy to user failed while replacing table [ 719.827678][T28394] ip_tables: iptables: counters copy to user failed while replacing table [ 720.645446][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 720.699260][T28430] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 720.699447][T28430] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 720.699629][T28430] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 720.699798][T28430] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 720.699965][T28430] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 720.700135][T28430] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 720.700310][T28430] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 720.700474][T28430] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 720.700630][T28430] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 720.768286][T28430] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 721.001725][T28441] netlink: 'syz.3.5733': attribute type 10 has an invalid length. [ 721.021694][T28441] netlink: 'syz.3.5733': attribute type 10 has an invalid length. [ 721.314916][T28454] wg2: Caught tx_queue_len zero misconfig [ 721.685568][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 722.099767][T28489] __nla_validate_parse: 5 callbacks suppressed [ 722.099790][T28489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5743'. [ 722.130276][T28490] ip6tnl0: Caught tx_queue_len zero misconfig [ 722.221019][T28484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.442947][T28498] netlink: 'syz.1.5745': attribute type 1 has an invalid length. [ 722.561403][T28505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5746'. [ 722.580216][T28503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5746'. [ 722.580658][T28503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5746'. [ 722.581449][T28503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5746'. [ 722.594824][T28503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5746'. [ 722.646533][T28503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5746'. [ 722.652153][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5747'. [ 722.664386][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5747'. [ 722.699939][T28502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5747'. [ 722.725668][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 723.765718][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 723.840258][T28558] batman_adv: batadv0: Adding interface: syzkaller0 [ 723.840292][T28558] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.840346][T28558] batman_adv: batadv0: Interface activated: syzkaller0 [ 724.294698][T28544] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 724.294914][T28548] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 724.376419][T28586] netlink: 'syz.4.5771': attribute type 1 has an invalid length. [ 724.647285][T28593] netlink: 'syz.3.5774': attribute type 9 has an invalid length. [ 724.714632][T28603] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 724.805501][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 725.066174][T28620] netlink: 'syz.0.5782': attribute type 1 has an invalid length. [ 725.176330][T28616] openvswitch: netlink: Duplicate key (type 0). [ 725.200100][T28626] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.845478][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 726.134517][T28645] netlink: 'syz.1.5788': attribute type 1 has an invalid length. [ 726.134541][T28645] netlink: 'syz.1.5788': attribute type 2 has an invalid length. [ 726.452370][T28655] netlink: 'syz.2.5792': attribute type 16 has an invalid length. [ 726.452410][T28655] veth0_macvtap: entered allmulticast mode [ 726.895481][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 727.123405][T28686] __nla_validate_parse: 24 callbacks suppressed [ 727.123433][T28686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5800'. [ 727.172637][T28688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5800'. [ 727.362602][T28686] xfrm1: entered promiscuous mode [ 727.362628][T28686] xfrm1: entered allmulticast mode [ 727.442091][T28698] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 727.925462][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 728.222421][T28727] vlan2: entered allmulticast mode [ 728.222446][T28727] bond0: entered allmulticast mode [ 728.222460][T28727] bond_slave_0: entered allmulticast mode [ 728.222478][T28727] bond_slave_1: entered allmulticast mode [ 728.729800][T28747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5814'. [ 728.829972][T28743] netlink: 'syz.4.5814': attribute type 30 has an invalid length. [ 728.944857][T28764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.966637][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 729.284329][T28775] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5817'. [ 729.448625][ T5281] veth1_vlan: left promiscuous mode [ 729.666292][T28787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5820'. [ 729.667749][T28781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5819'. [ 729.667803][T28781] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 729.870462][T28750] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.870506][T28750] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.005477][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 730.010046][T28787] 8021q: adding VLAN 0 to HW filter on device team1 [ 730.036096][T28794] C: entered promiscuous mode [ 730.044547][T28794] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 730.207949][T28750] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.207991][T28750] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.299659][T28807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5825'. [ 730.386582][T28812] netlink: 'syz.1.5824': attribute type 1 has an invalid length. [ 730.464650][T28816] netlink: 'syz.4.5825': attribute type 2 has an invalid length. [ 730.464676][T28816] netlink: 'syz.4.5825': attribute type 2 has an invalid length. [ 730.464691][T28816] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5825'. [ 730.664647][T28807] 8021q: adding VLAN 0 to HW filter on device bond13 [ 730.828549][T28750] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.828593][T28750] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.871674][T28811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.968650][T28811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.046119][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 731.071060][T28816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5825'. [ 731.546636][ T8177] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.546675][ T8177] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.624529][T25068] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.624568][T25068] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.661364][T25073] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.661403][T25073] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.691698][T25087] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.691735][T25087] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.736267][T28849] netlink: 'syz.1.5830': attribute type 10 has an invalid length. [ 732.085503][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 733.125846][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 733.304454][T28901] syzkaller0: entered promiscuous mode [ 733.304479][T28901] syzkaller0: entered allmulticast mode [ 733.363774][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880578e8c00: rx timeout, send abort [ 733.364000][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880578e8c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 733.959381][T28924] geneve2: entered promiscuous mode [ 733.959408][T28924] geneve2: entered allmulticast mode [ 733.978524][T25069] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 733.978577][T25069] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 733.978613][T25069] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 733.978648][T25069] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 734.028659][T28925] netlink: 'syz.1.5849': attribute type 1 has an invalid length. [ 734.077327][T28930] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 734.165449][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 734.294590][T28934] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5851'. [ 734.294867][T28934] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5851'. [ 734.314205][T28938] netlink: 'syz.3.5853': attribute type 11 has an invalid length. [ 734.533840][T28946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5856'. [ 734.640822][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880349f5800: rx timeout, send abort [ 734.641079][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880349f5800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 734.793792][T28960] netlink: 'syz.0.5863': attribute type 1 has an invalid length. [ 734.862300][T28960] 8021q: adding VLAN 0 to HW filter on device bond7 [ 734.902219][T28960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5863'. [ 734.919622][T25073] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 734.962510][T28959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5859'. [ 735.010510][T28980] netlink: 'syz.4.5864': attribute type 1 has an invalid length. [ 735.097378][T28982] 0XD: left allmulticast mode [ 735.128753][T28982] wg1: left allmulticast mode [ 735.133911][T28982] veth0_to_bond: left allmulticast mode [ 735.172966][T28982] veth0_macvtap: left allmulticast mode [ 735.174936][T28982] veth1_macvtap: entered promiscuous mode [ 735.204402][T28982] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 735.206315][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 735.251000][T28983] bond14: (slave bridge5): making interface the new active one [ 735.263788][T28983] bond14: (slave bridge5): Enslaving as an active interface with an up link [ 735.467787][T28993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5868'. [ 735.508480][T28993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5868'. [ 735.663967][T29004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5870'. [ 736.245645][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 737.285604][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 737.752067][T28957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 737.753921][T28966] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.5860'. [ 737.754039][T28966] netlink: 'syz.1.5860': attribute type 1 has an invalid length. [ 738.088712][T29025] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 738.164239][T29031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5879'. [ 738.325540][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 738.698683][T29054] syzkaller0: entered promiscuous mode [ 738.698710][T29054] syzkaller0: entered allmulticast mode [ 738.995177][T25073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.995204][T25073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.070301][T29060] bond15: entered promiscuous mode [ 739.070330][T29060] bond15: entered allmulticast mode [ 739.094444][T29060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.214371][T29075] xt_l2tp: missing protocol rule (udp|l2tpip) [ 739.262897][T29060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.364062][T29070] lo: Caught tx_queue_len zero misconfig [ 739.366497][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 739.752622][T29085] __nla_validate_parse: 4 callbacks suppressed [ 739.752648][T29085] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5894'. [ 739.833919][T29090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5896'. [ 739.850042][T29090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5896'. [ 739.895140][T29091] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5897'. [ 740.368580][T29097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5898'. [ 740.387037][T29097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5898'. [ 740.405585][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 740.453617][T29097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5898'. [ 740.461281][T29097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5898'. [ 740.491279][T29097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5898'. [ 740.494661][T29097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5898'. [ 740.794380][T29126] netlink: 'syz.0.5904': attribute type 1 has an invalid length. [ 741.043702][T29132] ip_tables: iptables: counters copy to user failed while replacing table [ 741.274459][T29134] macsec3: entered promiscuous mode [ 741.274490][T29134] bridge0: entered promiscuous mode [ 741.274701][T29134] macsec3: entered allmulticast mode [ 741.274717][T29134] bridge0: entered allmulticast mode [ 741.318010][T29134] bridge0: port 2(macsec3) entered blocking state [ 741.318219][T29134] bridge0: port 2(macsec3) entered disabled state [ 741.400079][T29134] bridge0: left allmulticast mode [ 741.443911][ T990] bridge0: left promiscuous mode [ 741.445700][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 741.864108][T29150] bond10 (unregistering): Released all slaves [ 742.230200][T29176] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 742.495682][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 742.628314][T29176] batman_adv: batadv0: Removing interface: syzkaller0 [ 742.720821][ T8177] smbdirect: ib_dev[syz2] removed [ 742.741482][ T5852] syz2: Port: 1 Link DOWN [ 742.996820][T29203] syzkaller1: entered promiscuous mode [ 742.996847][T29203] syzkaller1: entered allmulticast mode [ 743.467163][T29235] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 743.527699][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 743.783778][T29245] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 743.783820][T29245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.102752][T29254] syzkaller1: entered promiscuous mode [ 744.102778][T29254] syzkaller1: entered allmulticast mode [ 744.565657][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 744.612340][T29287] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 744.612521][T29287] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 744.612675][T29287] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 744.612854][T29287] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 744.613012][T29287] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 744.613159][T29287] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 744.613309][T29287] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 744.613475][T29287] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 744.613628][T29287] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 744.613786][T29287] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 744.742354][T29291] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 745.120212][T29319] __nla_validate_parse: 93 callbacks suppressed [ 745.120238][T29319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5940'. [ 745.216100][T29314] C: entered allmulticast mode [ 745.216342][T29314] C: left allmulticast mode [ 745.563642][T29331] netlink: 4648 bytes leftover after parsing attributes in process `syz.2.5946'. [ 745.605539][ C1] net_ratelimit: 1 callbacks suppressed [ 745.605562][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 745.671766][T29338] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5947'. [ 745.761143][T29344] syzkaller0: entered promiscuous mode [ 745.761178][T29344] syzkaller0: entered allmulticast mode [ 746.655512][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 746.713883][T29389] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5957'. [ 746.715204][T29390] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5957'. [ 747.691519][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 748.734125][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 749.776077][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 750.071580][T29358] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 750.072810][T29359] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 750.327735][T29403] validate_nla: 16 callbacks suppressed [ 750.327758][T29403] netlink: 'syz.0.5960': attribute type 10 has an invalid length. [ 750.514710][T29418] netlink: 'syz.3.5964': attribute type 1 has an invalid length. [ 750.534044][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5962'. [ 750.634523][T29418] bond10: entered promiscuous mode [ 750.635118][T29418] 8021q: adding VLAN 0 to HW filter on device bond10 [ 750.694057][T29418] openvswitch: netlink: Message has 4 unknown bytes. [ 750.785008][T29418] 8021q: adding VLAN 0 to HW filter on device bond10 [ 750.794696][T29418] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 750.794724][T29418] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 750.809267][T29427] IPv6: NLM_F_CREATE should be specified when creating new route [ 750.816062][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 750.892617][T29418] bond10: (slave ip6gre2): making interface the new active one [ 750.892646][T29418] ip6gre2: entered promiscuous mode [ 750.933625][T29418] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 751.191914][T29427] bond8: option min_links: invalid value (18446744073709551614) [ 751.191942][T29427] bond8: option min_links: allowed values 0 - 2147483647 [ 751.231341][T29427] bond8 (unregistering): Released all slaves [ 751.268870][T29449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5968'. [ 751.474373][T29435] bond8: option min_links: invalid value (18446744073709551614) [ 751.474400][T29435] bond8: option min_links: allowed values 0 - 2147483647 [ 751.539324][T29435] bond8 (unregistering): Released all slaves [ 751.741071][T29433] syzkaller0: entered promiscuous mode [ 751.741099][T29433] syzkaller0: entered allmulticast mode [ 751.776945][T29464] netlink: 'syz.2.5972': attribute type 1 has an invalid length. [ 751.845481][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 751.938548][T29465] 8021q: VLANs not supported on pimreg [ 751.994386][T29462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5972'. [ 751.998733][T29470] syzkaller0: entered promiscuous mode [ 751.998798][T29470] syzkaller0: entered allmulticast mode [ 752.017807][T29472] team_slave_1: mtu less than device minimum [ 752.017944][T29473] team_slave_1: mtu less than device minimum [ 752.219322][T29470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5973'. [ 752.287242][T29470] bond11: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 752.320510][T29470] bond11 (unregistering): Released all slaves [ 752.440973][T29482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5975'. [ 752.442268][T29489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5977'. [ 752.717576][T29498] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5979'. [ 752.718163][T29498] netlink: 'syz.4.5979': attribute type 32 has an invalid length. [ 752.807189][T29495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5980'. [ 752.851188][T29495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5980'. [ 752.873376][T29495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5980'. [ 752.873419][T29495] netlink: 'syz.2.5980': attribute type 13 has an invalid length. [ 752.888005][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 753.049108][T25069] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.049167][T25069] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.049209][T25069] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.049249][T25069] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.050629][T29505] hsr0: entered allmulticast mode [ 753.050650][T29505] hsr_slave_0: entered allmulticast mode [ 753.050669][T29505] hsr_slave_1: entered allmulticast mode [ 753.117324][T29505] hsr_slave_0: left promiscuous mode [ 753.127164][T29505] hsr_slave_1: left promiscuous mode [ 753.248186][T29505] hsr0 (unregistering): left allmulticast mode [ 753.667265][T29507] 8021q: adding VLAN 0 to HW filter on device bond11 [ 753.670420][T29507] bridge0: port 1(bond11) entered blocking state [ 753.674032][T29507] bridge0: port 1(bond11) entered disabled state [ 753.674196][T29507] bond11: entered allmulticast mode [ 753.759977][T29507] bond11: entered promiscuous mode [ 753.930249][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 754.868753][T29564] lo: Caught tx_queue_len zero misconfig [ 754.868785][T29564] netlink: 'syz.2.5990': attribute type 14 has an invalid length. [ 754.965897][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 756.010565][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 756.125071][T29598] __nla_validate_parse: 5 callbacks suppressed [ 756.125092][T29598] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6000'. [ 756.237589][T29604] addrtype_mt_checkentry_v1: 23 callbacks suppressed [ 756.237624][T29604] xt_addrtype: ipv6 does not support BROADCAST matching [ 756.837076][T29615] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6005'. [ 757.053007][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 757.327007][T29631] xt_hashlimit: size too large, truncated to 1048576 [ 757.820702][T29644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6013'. [ 757.820747][T29644] netlink: 'syz.2.6013': attribute type 8 has an invalid length. [ 757.820763][T29644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6013'. [ 758.089549][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 758.213070][T29647] netlink: 'syz.4.6014': attribute type 2 has an invalid length. [ 758.213099][T29647] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 758.444807][T29657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6017'. [ 758.445235][T29657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6017'. [ 758.446560][T29657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6017'. [ 758.446930][T29657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6017'. [ 758.447230][T29657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6017'. [ 758.447608][T29657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6017'. [ 759.125904][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 760.175620][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 761.071783][ T8177] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 761.139448][T29715] __nla_validate_parse: 14 callbacks suppressed [ 761.139472][T29715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6029'. [ 761.209376][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 761.249339][T29707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 761.470466][T29722] netlink: 'syz.3.6031': attribute type 1 has an invalid length. [ 762.246339][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 762.440553][T29726] bond1 (unregistering): Released all slaves [ 762.922085][T29751] netlink: 'syz.2.6038': attribute type 1 has an invalid length. [ 763.056678][T29752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6038'. [ 763.285594][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 764.325991][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 764.776312][T29786] netlink: 'syz.1.6044': attribute type 1 has an invalid length. [ 764.829193][T29791] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6044'. [ 765.375543][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 766.406144][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 766.768960][T29773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.445700][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 768.485542][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 768.550226][T29851] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6055'. [ 768.708325][T27901] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 768.732524][T27901] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 768.743425][T27901] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 768.761033][T27901] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 768.779742][T27901] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 769.265533][T29861] netlink: 'syz.2.6057': attribute type 1 has an invalid length. [ 769.377272][T29859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6057'. [ 769.398763][T29864] netlink: 'syz.0.6058': attribute type 1 has an invalid length. [ 769.429841][T29864] netlink: 'syz.0.6058': attribute type 4 has an invalid length. [ 769.529223][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 769.576045][T29861] 8021q: adding VLAN 0 to HW filter on device bond10 [ 769.820861][T29870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6060'. [ 770.368835][T29889] netlink: 'syz.1.6062': attribute type 1 has an invalid length. [ 770.370698][T29885] netlink: 'syz.1.6062': attribute type 1 has an invalid length. [ 770.417405][T29888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6063'. [ 770.565548][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 770.637720][T29889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 770.784255][T29900] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6064'. [ 770.816428][T27901] Bluetooth: hci5: command tx timeout [ 771.031546][T29885] 8021q: adding VLAN 0 to HW filter on device bond3 [ 771.110270][T29912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6065'. [ 771.343692][T29910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6065'. [ 771.343732][T29910] netlink: 'syz.4.6065': attribute type 32 has an invalid length. [ 771.343970][T29910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6065'. [ 771.343991][T29910] netlink: 'syz.4.6065': attribute type 32 has an invalid length. [ 771.452754][T29917] netlink: 'syz.0.6066': attribute type 1 has an invalid length. [ 771.615520][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 772.645526][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 772.885987][T27901] Bluetooth: hci5: command tx timeout [ 773.685506][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 774.726098][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 774.965544][T27901] Bluetooth: hci5: command tx timeout [ 775.570288][T29912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6065'. [ 775.590581][T29910] netlink: 'syz.4.6065': attribute type 12 has an invalid length. [ 775.765549][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 775.838368][T29917] bond8: entered promiscuous mode [ 775.838868][T29917] 8021q: adding VLAN 0 to HW filter on device bond8 [ 775.879372][T29923] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 776.084401][T29921] 8021q: adding VLAN 0 to HW filter on device bond11 [ 776.360106][ T31] audit: type=1107 audit(1790741650.580:8): pid=29937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 776.805574][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 777.058641][T27901] Bluetooth: hci5: command tx timeout [ 777.142646][T29959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6072'. [ 777.710202][T29964] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 777.855515][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 778.275008][T29972] netlink: 'syz.0.6076': attribute type 1 has an invalid length. [ 778.367994][T29977] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6076'. [ 778.439738][T29980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6076'. [ 778.499683][T29978] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6078'. [ 778.499893][T29978] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6078'. [ 778.885444][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 779.933711][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 780.965472][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 781.235577][T30024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6086'. [ 781.913746][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6083'. [ 782.021066][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 782.439412][T29853] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.439618][T29853] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.439773][T29853] bridge_slave_0: entered allmulticast mode [ 782.441900][T29853] bridge_slave_0: entered promiscuous mode [ 782.473863][T29853] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.474062][T29853] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.474242][T29853] bridge_slave_1: entered allmulticast mode [ 782.499615][T29853] bridge_slave_1: entered promiscuous mode [ 782.546837][T29853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.550729][T29853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.607456][T29853] team0: Port device team_slave_0 added [ 782.610648][T29853] team0: Port device team_slave_1 added [ 782.764416][T29853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.764456][T29853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.764486][T29853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.853992][T29853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.854013][T29853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.854043][T29853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.050164][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 783.389643][T29853] hsr_slave_0: entered promiscuous mode [ 783.393181][T29853] hsr_slave_1: entered promiscuous mode [ 783.800507][T30054] vlan3: entered allmulticast mode [ 783.800534][T30054] bond0: entered allmulticast mode [ 783.800549][T30054] bond_slave_0: entered allmulticast mode [ 783.800568][T30054] bond_slave_1: entered allmulticast mode [ 784.085913][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 784.453857][T30083] netlink: 'syz.0.6098': attribute type 1 has an invalid length. [ 784.534861][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6098'. [ 784.727173][T30083] 8021q: adding VLAN 0 to HW filter on device bond9 [ 785.135528][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 785.154396][T30089] bond9: (slave bridge11): making interface the new active one [ 785.186877][T30089] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 785.874005][T30119] netlink: 75 bytes leftover after parsing attributes in process `syz.0.6103'. [ 786.176533][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 786.680657][T29853] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.680698][T29853] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.680727][T29853] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 786.901095][T30136] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6104'. [ 787.208654][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 787.223971][T30136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6104'. [ 787.583002][T29853] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.583044][T29853] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.583073][T29853] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 787.956721][T30147] netlink: 576 bytes leftover after parsing attributes in process `syz.4.6109'. [ 788.255433][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 788.826493][T30168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6111'. [ 789.012996][T30175] netlink: 'syz.2.6113': attribute type 17 has an invalid length. [ 789.013023][T30175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6113'. [ 789.013053][T30175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6113'. [ 789.073414][T29853] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.073454][T29853] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.073485][T29853] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 789.168115][T30177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 789.285455][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 789.366890][T30182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6114'. [ 789.398079][T30175] 0XD: entered promiscuous mode [ 789.418967][T30175] 0XD: left promiscuous mode [ 789.907306][T29853] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.907347][T29853] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.907375][T29853] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 790.323779][T30193] netlink: 'syz.2.6118': attribute type 1 has an invalid length. [ 790.325547][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 790.342799][T30199] netlink: 'syz.2.6118': attribute type 1 has an invalid length. [ 791.133835][T30224] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6122'. [ 791.365909][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 791.877138][T29853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 791.930171][T29853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 791.934135][T29853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 791.993348][T29853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 792.172585][T29853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 792.213906][T29853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 792.237600][T29853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 792.415444][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 792.502965][T30245] ip_tables: iptables: counters copy to user failed while replacing table [ 793.455961][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 794.485844][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 794.650676][T29853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 795.546917][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 796.052786][ C1] sched: DL replenish lagged too much [ 796.595169][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 797.616268][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 798.647359][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 799.694545][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 800.744354][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 801.784901][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 802.810346][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 803.543431][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 803.867359][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 804.895282][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 805.967335][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 807.046517][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 808.091864][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 809.131398][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 810.199792][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 811.217713][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 812.271917][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 813.293412][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 814.368136][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 815.447108][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 816.500498][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 817.543923][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 818.582535][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 819.632710][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 820.660186][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 821.695454][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 822.729436][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 823.782376][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 824.819064][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 825.864120][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 826.906453][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 827.956500][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 828.982053][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 830.012726][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 831.072142][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 832.088270][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 833.140490][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 834.169283][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 835.222703][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 836.257333][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 837.306875][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 838.334036][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 839.263920][T19775] Bluetooth: hci1: command 0x0405 tx timeout [ 839.421642][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 840.493255][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 841.547994][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 842.583277][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 843.615423][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 844.653285][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 845.692822][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 846.736024][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 847.809929][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 848.898741][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 849.961324][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 850.971402][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 852.017678][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 853.073030][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 854.092126][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 855.144077][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 856.180130][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 857.221796][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 858.294685][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 859.371220][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 860.414526][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 861.446567][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 862.517644][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 863.531786][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 864.566429][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 865.609292][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 866.655187][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 867.700767][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 868.760391][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 869.777166][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 870.809804][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 871.861312][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 872.896826][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 873.941466][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 874.968091][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 876.033428][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 877.052622][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 878.089245][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 879.152499][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 880.178644][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 881.211810][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 882.257420][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 883.303252][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 884.336580][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 885.391890][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 886.413444][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 887.464871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 888.516858][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 889.527819][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 890.584549][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 891.620452][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 892.660691][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 893.687824][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 894.733265][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 895.787163][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 896.821587][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 897.858704][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 898.890813][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 899.927336][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 900.979565][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 902.019970][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 903.055931][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 904.086241][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 905.130663][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 906.182852][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 907.224792][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 908.258669][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 909.194559][ T5622] Bluetooth: hci5: command 0x0406 tx timeout [ 909.295139][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 910.360469][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 911.380260][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 912.430297][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 913.471378][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 914.491564][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 915.546317][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 916.587809][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 917.634694][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 918.657115][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 919.691871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 920.728806][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 921.771291][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 922.822411][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 923.848284][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 924.925573][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 925.946878][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 926.969197][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 928.026591][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 929.057518][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 930.097260][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 931.142969][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 932.172840][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 933.222996][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 934.251110][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 935.291525][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 936.328842][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 937.392269][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 938.424925][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 939.447876][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 940.501538][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 941.531365][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 942.567143][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 943.605802][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 944.676185][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 945.700329][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 946.728986][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 947.794582][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 948.818388][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 949.865037][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 950.913329][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 951.946383][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 952.968110][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 954.011552][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 955.045749][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 956.100300][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 957.161139][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 958.190493][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 959.213920][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 960.260860][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 961.308531][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 962.350384][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 963.387420][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 964.422175][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 965.449640][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 966.521605][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 967.540118][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 968.603347][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 969.622649][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 970.661074][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 971.712294][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 972.744967][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 973.786572][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 974.806941][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 975.864913][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 976.897362][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 977.941031][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 979.015746][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 980.093530][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 981.131220][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 982.177760][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 983.206690][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 984.283715][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 985.307364][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 986.312887][ T32] INFO: task kworker/u9:3:27901 blocked for more than 141 seconds. [ 986.312916][ T32] Not tainted syzkaller #0 [ 986.312929][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 986.312939][ T32] task:kworker/u9:3 state:D stack:26696 pid:27901 tgid:27901 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 986.313025][ T32] Workqueue: hci1 hci_cmd_sync_work [ 986.313056][ T32] Call Trace: [ 986.313064][ T32] [ 986.313080][ T32] __schedule+0x17db/0x58f0 [ 986.313142][ T32] ? __pfx___schedule+0x10/0x10 [ 986.313180][ T32] ? schedule+0x90/0x2b0 [ 986.313211][ T32] schedule+0x164/0x2b0 [ 986.313241][ T32] schedule_preempt_disabled+0x13/0x30 [ 986.313268][ T32] __mutex_lock+0x7c1/0x1550 [ 986.313304][ T32] ? __mutex_lock+0x5d4/0x1550 [ 986.313339][ T32] ? synchronize_rcu_expedited+0x38d/0x770 [ 986.313373][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 986.313405][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 986.313447][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 986.313484][ T32] synchronize_rcu_expedited+0x38d/0x770 [ 986.313527][ T32] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 986.313563][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 986.313620][ T32] hci_chan_del+0x114/0x1d0 [ 986.313659][ T32] l2cap_conn_del+0x3c8/0x550 [ 986.313703][ T32] l2cap_connect_cfm+0x12b/0x1620 [ 986.313736][ T32] ? hci_conn_failed+0x17f/0x370 [ 986.313775][ T32] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 986.313809][ T32] ? lock_acquire+0x115/0x350 [ 986.313841][ T32] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 986.313876][ T32] hci_conn_failed+0x1e8/0x370 [ 986.313908][ T32] ? hci_abort_conn_sync+0xa7b/0x1190 [ 986.313940][ T32] hci_abort_conn_sync+0xdd0/0x1190 [ 986.313980][ T32] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 986.314016][ T32] ? abort_conn_sync+0x26/0x210 [ 986.314055][ T32] ? abort_conn_sync+0x26/0x210 [ 986.314087][ T32] ? abort_conn_sync+0x19c/0x210