last executing test programs: 5.433008941s ago: executing program 3 (id=6731): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0xfc}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x9, &(0x7f0000000680)=@raw=[@alu={0x4, 0x1, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffeb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @ringbuf_query, @jmp={0x5, 0x1, 0x8, 0x4, 0x5, 0x2, 0xfffffffffffffffc}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) connect$bt_l2cap(r6, &(0x7f0000000200)={0x1f, 0xf561, @any, 0xf70, 0x2}, 0xe) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r7, 0x20, &(0x7f0000000180)={&(0x7f0000000100)=""/47, 0x2f, 0x0, &(0x7f00000003c0)=""/175, 0xaf}}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5b510f4a4fab5a62d5fa7e8ead851b01dbfdfe5823c2600"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.411771293s ago: executing program 3 (id=6742): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) connect$inet6(r1, &(0x7f0000000680)={0xa, 0x4e22, 0x3, @mcast1, 0x30}, 0x1c) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4014) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) write$tun(r2, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@mcast1}, &(0x7f0000000200)=0x14) r9 = socket$netlink(0x10, 0x3, 0xf) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001332564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r9) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r11, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x20000000) 2.327412905s ago: executing program 0 (id=6744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000009c0)={{r0, &(0x7f0000000080)='+\'\x00', 0x408000, &(0x7f00000000c0)={@align=0x2, {0x7, 0x6, 0xe81, 0x1}}, 0xe, &(0x7f0000000100), &(0x7f0000000180)=0x1}, 0x6, &(0x7f0000000900)=[{0x3, 0x7f, &(0x7f00000001c0)='tunl0\x00', &(0x7f00000002c0)="8ccd1631754c75df80b431691fd407a853ceefd1519e73bb73426e7f436dd497ec066e35d54458c1f09120d4636efa90edb013ec0e889bdf4a30d371d96437cce37374694289e000c52c6f0826ad886a349b8c0c4bab79320c826af24d68bbe6d4c8ba830ef66b1e3a5724b87af35027c7dda550072c69e2ed7ec521335448f3932ee3a0b4e9ff06582b77bee492a9020c3d207cfc98112bb99a7dd5b7d8fb47060ff01469b00c36a65c3bf5cdc8cce6be15c73af90e54f5144a2a4f0282312d197d441f6a5387f132f8bb956e9007", 0xcf, 0x10}, {0x1, 0x80007, &(0x7f0000000200)='%\x00', &(0x7f00000003c0)="47870e1314ca518fda5e894795c2cce1638d24039da72d2ad7ef2ffb5e1d60947676c957b8ea9cbf919ae8254c6fa6485a886d16c60903906dc524d3e225d14af75b99189f8480462f1469c24e13d335fa01a6c59ab3a20a1c074ca8a40ec2c47304c9a0d08dd8e6aae71d3be228e4a25298537b3cb8acf838d3df6d64465af75ce010724bbdfaa866b6cefde2ff5a3341c4e749fc0b87475e427dabdb1d695e0cc50dbda9a674c6a78a36314921219711e2bd8658f27c6ed8277c9d20e26357397461506f686a652593b138f4d26064ed7269c3c9973af6f0e2e18642b5693011724443c878377784a4a34f91bd18ecc8913ad1", 0xf4, 0x10}, {0x1, 0x2, &(0x7f0000000240)='-#\r\x00', &(0x7f0000000640)="fa6028f1e71fcad0d720174a3fb800535e2c6cef98e09ddc0e99048aa3d52029b4b219d37b428e0b1723f801a32393582ca82f27a84fd519a6e657aa02e6b4a5f53be51a00df4fde530fabb84d2f1f8596a3ffd329bbb4f219b473b5e8b95df9c11370e9d5a3a7649e7973eb52149d3018321908aca6d78100e027ad5d3697f86b175453e1ca01687cfea3d56c18d59f8c02b5796ad16ff541ee302ebec72bf1f9eb103e911b7fd9fd736da9a6b264ab7812a7eaf5601829f7435b18292c2e0ed16b81e4bb62b5d3210c6879f378e157d00cadc1e782122e4718a9be2b93bd969af45fc209e9ac8bbf7837d132327202eccfe9664840fb903c7a6d25d585", 0xfe}, {0x2, 0xd, &(0x7f00000004c0)='\\%\x00', &(0x7f0000000740)="ec939cbede2d1179b10ea85340b619e7e21f0d3cb381cec23f74b1a5e4118f11b01f128f88f21fe32d3d16fe7e763afe585387e35c429a13dafc2c034ef9e5526f2a3cdd57407b1a118213bba79c7a57e58be148b0d1d3494dd46f8a6b29d4716338fe879fc05af85cf7b98548e011b036454724b409d32e808f540430f3d76110317ce6c0f1e83f4ed0a032c74f2c0cdb8bfd8e96d53c818b9ff6c28be0cb6a0229c01bae50d28a55b643cc8de4a2a25950fdd7b1c05e83248befe1decca1b60a1c89ef094b794eab221bb856a9cd6eca7070c5c384db95f1c95ca7", 0xdc}, {0x2, 0x3ff, &(0x7f0000000500)='tunl0\x00', &(0x7f0000000840)="4158c4afd4b8b8178d0839dda4bd524fd7b01605994ebe93ab4b5d384b5c74f3d11c68d3dd757e4521e27baac381ec97092f505f67c3b18b453fe7af0805eb7667298da42780fb459161d0c200ebc42c49321c106b", 0x55}, {0x2, 0x555, &(0x7f0000000540)='\x00', &(0x7f00000008c0)="96f97b6e6faf7faa407d1833f425e5d253a7f4730186895ee66b637d7b5cf78842e3ee51889fe8", 0x27, 0x20}]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000a40)={r0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) 2.162647984s ago: executing program 0 (id=6746): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000002000010000000000000000000a00100000000001000000001400110076657446305f746f5f6873720000000014000100fc01000000000007000000000000000008000a000700000008000f00ffffffff140002"], 0x7c}}, 0x4000080) 1.952363271s ago: executing program 0 (id=6750): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d800000018", 0x5}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000002000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 1.82521408s ago: executing program 3 (id=6752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.734227883s ago: executing program 4 (id=6753): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'pim6reg1\x00'}) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x7}}, 0x1c}}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async) recvfrom(r4, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r8, @ANYRES64=r2, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xa2df8c8ae642ade6) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940), 0x8040) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0xd}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x0, 0x1, {0x4, 0x9, 0x8de3, 0x56b, 0x3}}]}]}}}]}, 0x90}}, 0x0) 1.576585011s ago: executing program 0 (id=6756): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000400)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmmsg(r5, 0x0, 0x0, 0x44000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000020000100000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000050a01020000000000000000020000000900010073797a30000000000c0002400000000000000001"], 0x80}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x2}, 0x8) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 1.503977486s ago: executing program 3 (id=6757): socket$isdn(0x22, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30004081) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000280)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x400c800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x70bd26, 0x8, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x8}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x60}}, 0x0) 1.456619014s ago: executing program 4 (id=6758): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x92}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0x2f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x514a3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x4c}}, 0x8040) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x208, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x3de}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x20010) 1.349141435s ago: executing program 3 (id=6759): r0 = socket$kcm(0x10, 0x2, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xfffffffffffffffd) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xfffffffffffffffd) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) (async) listen(r2, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b0400000000000000000200ffff5c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000001608000240000000100900010073797a30000000000900020073797a32"], 0x240}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) (async) accept(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000001340)=""/4051, 0xfd3}, {&(0x7f0000000040)=""/105, 0x69}], 0x3}, 0x1}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.279141895s ago: executing program 1 (id=6760): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x5b, 0xd, 0xd4, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x1, 0x10000, 0x7f}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', r2, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10, r1}, 0x94) 1.267513207s ago: executing program 4 (id=6761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004f00000008000300", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x895c6b3526c3b929}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @rand_addr=0x64010102}, 0x2, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f00000015c0)="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", 0x5a9, 0x20008120, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 1.252669805s ago: executing program 2 (id=6762): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000240)=0x80000000, 0x4) (async) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000100)={0x7, 0xc}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210000000000000000000400000014000200fc000000000000000000000000000000140006006e72300000000000270000000000000014000300fe880000000000000000000000000001"], 0x50}}, 0x0) 1.197168205s ago: executing program 0 (id=6763): bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70200000100000085000000a0000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x141001, 0x0) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000140)=0x1) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.136135959s ago: executing program 1 (id=6764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9c1908000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r2, 0x8) r5 = accept4(r2, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={r8, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001980)={0x9, 0x4, 0x200, 0x3, 0x6, 0x32e35e75, 0x7, 0x80000001}, &(0x7f00000019c0)=0x20) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x214, r9, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf9ce}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b60}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb495}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b32}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x33}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffef1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4048881}, 0x4) 1.101547717s ago: executing program 2 (id=6765): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x28, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000b80)=@ringbuf, &(0x7f0000000580)='syzkaller\x00', 0x5, 0x20, &(0x7f00000000c0)=""/32, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x28, 0x2, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000b80)=@ringbuf, &(0x7f0000000580)='syzkaller\x00', 0x5, 0x20, &(0x7f00000000c0)=""/32, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) 1.056361952s ago: executing program 4 (id=6766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a00010000000000000000000a010101000000000000000000000000ac1414aa000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="fe8000000000000000000000000000aa000000013c000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bfae00000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e"], 0x104}}, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.026979721s ago: executing program 0 (id=6767): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, 0x0, 0x0, 0x48094) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000440)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async) connect$rose(r1, &(0x7f0000000440)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) connect$rose(r1, &(0x7f00000001c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async) connect$rose(r1, &(0x7f00000001c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0x85, &(0x7f0000000180)=""/133, 0x0, 0x11, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="110000000000000009e2e4da00000000", @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="110000000000000009e2e4da00000000", @ANYRES64=0x0], 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c0000000300000090780064000700000000000000000000004c4102b901e6a31ea110f6a89058cefaae143461690250dc69d15b8056ced982a79aeadc55da1aad4d4c02e1d63d1099ffff0935cbe064ed7f45a81707ea"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x3, 0x8000}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000280)={r10, @in6={{0xa, 0x4e20, 0xb, @remote, 0x6fd1}}, 0x6, 0xff}, &(0x7f0000000380)=0x90) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) r11 = socket$inet(0xa, 0x801, 0x84) connect$inet(r11, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r11, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r11, 0xfffffffd) (async) listen(r11, 0xfffffffd) accept4(r11, 0x0, 0x0, 0x0) 983.068041ms ago: executing program 1 (id=6768): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x2c, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/137, 0x89, 0x0, &(0x7f00000000c0)=""/120, 0x78}, &(0x7f00000001c0)=0x40) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) 908.276881ms ago: executing program 2 (id=6769): r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000311bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d0090000060011000700000008000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20048014}, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r3, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) recvmmsg(r0, &(0x7f0000009640)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000009840)=""/186, 0xba}, {&(0x7f0000000240)=""/162, 0xa2}], 0x3}, 0x4}, {{&(0x7f0000000340)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/76, 0x4c}, {&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f00000006c0)=""/96, 0x60}], 0x3, &(0x7f0000000740)=""/219, 0xdb}, 0xfff}, {{&(0x7f0000000840)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000005c0)=""/59, 0x3b}, {&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001a00)=""/190, 0xbe}, 0x6}, {{&(0x7f0000001ac0)=@caif=@dbg, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/74, 0x4a}, {&(0x7f0000002bc0)=""/83, 0x53}], 0x3, &(0x7f0000002c80)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000003c80)=@rc, 0x80, &(0x7f0000007300)=[{&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/223, 0xdf}, {&(0x7f0000004e00)=""/4096, 0x1000}], 0x3, &(0x7f0000005e40)=""/81, 0x51}, 0x3}, {{&(0x7f0000005ec0)=@generic, 0x80, &(0x7f0000007080)=[{&(0x7f0000005f40)=""/118, 0x76}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/82, 0x52}, {&(0x7f0000007040)=""/32, 0x20}], 0x4, &(0x7f00000070c0)=""/168, 0xa8}, 0x7ff}, {{&(0x7f0000007180)=@ethernet={0x0, @local}, 0x80, &(0x7f00000095c0)=[{&(0x7f0000007200)=""/238, 0xee}, {&(0x7f0000007300)}, {&(0x7f0000007340)=""/4096, 0x1000}, {&(0x7f0000008340)=""/205, 0xcd}, {&(0x7f0000008440)=""/235, 0xeb}, {&(0x7f0000008540)=""/123, 0x7b}, {&(0x7f00000085c0)=""/4096, 0x1000}], 0x7}, 0x4}], 0x7, 0x42, &(0x7f0000009800)={0x0, 0x989680}) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000020000007110230024864448dfbf007700000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000311bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d0090000060011000700000008000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20048014}, 0x4) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) write(r3, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) (async) recvmmsg(r0, &(0x7f0000009640)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000009840)=""/186, 0xba}, {&(0x7f0000000240)=""/162, 0xa2}], 0x3}, 0x4}, {{&(0x7f0000000340)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/76, 0x4c}, {&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f00000006c0)=""/96, 0x60}], 0x3, &(0x7f0000000740)=""/219, 0xdb}, 0xfff}, {{&(0x7f0000000840)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000005c0)=""/59, 0x3b}, {&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001a00)=""/190, 0xbe}, 0x6}, {{&(0x7f0000001ac0)=@caif=@dbg, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/74, 0x4a}, {&(0x7f0000002bc0)=""/83, 0x53}], 0x3, &(0x7f0000002c80)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000003c80)=@rc, 0x80, &(0x7f0000007300)=[{&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/223, 0xdf}, {&(0x7f0000004e00)=""/4096, 0x1000}], 0x3, &(0x7f0000005e40)=""/81, 0x51}, 0x3}, {{&(0x7f0000005ec0)=@generic, 0x80, &(0x7f0000007080)=[{&(0x7f0000005f40)=""/118, 0x76}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/82, 0x52}, {&(0x7f0000007040)=""/32, 0x20}], 0x4, &(0x7f00000070c0)=""/168, 0xa8}, 0x7ff}, {{&(0x7f0000007180)=@ethernet={0x0, @local}, 0x80, &(0x7f00000095c0)=[{&(0x7f0000007200)=""/238, 0xee}, {&(0x7f0000007300)}, {&(0x7f0000007340)=""/4096, 0x1000}, {&(0x7f0000008340)=""/205, 0xcd}, {&(0x7f0000008440)=""/235, 0xeb}, {&(0x7f0000008540)=""/123, 0x7b}, {&(0x7f00000085c0)=""/4096, 0x1000}], 0x7}, 0x4}], 0x7, 0x42, &(0x7f0000009800)={0x0, 0x989680}) (async) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000020000007110230024864448dfbf007700000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) (async) socket$netlink(0x10, 0x3, 0x10) (async) 877.865182ms ago: executing program 1 (id=6770): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x20, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe0}, 0x48) 820.07592ms ago: executing program 4 (id=6771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000f00)={'team0\x00', @ifru_ivalue=0x6}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x6, 0xa, 0x0, 0x0, @str='$\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000f40)={{r2, 0x9, 0x7, 0x8, 0x7f, 0x40, 0x7028, 0x6, 0x2, 0xb70b, 0x10, 0x8, 0xdb, 0x0, 0x2}}) 681.16082ms ago: executing program 2 (id=6772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xa9f}, @device_b, @broadcast, @initial, {0x8, 0x4}}, 0x2b, @val={0x8c, 0x10, {0xbea, "e4f72d1fe06d", @short="824cd3e7965d9653"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 680.772199ms ago: executing program 4 (id=6773): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xf, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x4, 0xfffffff7, 0x157, 0x3, 0x2, 0x3, 0x10000, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000000000000000000001000000024e2100020a0000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000080000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000300000000000000000000002cbd7000003500000a00040050000000000000001c00040007004e2405000000000000000000000000000000000000aa60001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0000000000"], 0x16c}}, 0x48080) 550.450983ms ago: executing program 2 (id=6774): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f00000001c0)='\x00', 0x161003, &(0x7f0000000280)={@_ha_fsid={[0x6, 0xff4]}, {0xff80, 0x3ff, 0x9, 0x2}}, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0xb5e3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xfffffffffffffde6, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x7d, &(0x7f0000000700)={r3, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r3, 0xd3, "332afddd4aa586ec1927794c046d6c963e63e145f5a9080b0cb03e8308d1d3203cc67885e5caedf951d5ea176c8a2759f34bbe988756c84280be0e2d558362448d998c57b56e8790c05f5885f93351c4f2bbfd9395b2c5d3cd7b82badd0fb0a73a94b311bf284fc9d9905fffe5ec9d3b71225966f9e75a3cac57dc665082290bd07aa43b6bf071c44c1df38bff6f9fb3a67fb7e285c7bd45db936efff260657e9aefaef20eb66493f913e13be2c0c6d720af10136074420214022fb24e91b1dfa3c15f2b5581465341951ea5034bd2d6ce6124"}, &(0x7f0000000000)=0xdb) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)=0xffd2) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000400)="fe", 0x1}], 0x1}}], 0x1, 0x4c040) 144.393349ms ago: executing program 2 (id=6775): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) 80.998009ms ago: executing program 1 (id=6776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x20}}, @RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x40}}, 0x0) 56.707642ms ago: executing program 3 (id=6777): syz_emit_ethernet(0x16, &(0x7f0000000340)={@broadcast, @remote, @val, {@generic={0x88fb}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x4000000) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x16, &(0x7f0000000340)={@broadcast, @remote, @val, {@generic={0x88fb}}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x4000000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) 0s ago: executing program 1 (id=6778): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x0, 0x8001, {{0x6, 0x4, 0x1, 0x11, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@lsrr={0x83, 0x3, 0xfc}]}}}}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@getlink={0x24, 0x12, 0x2fa9ccd93d5c0297, 0x70bd28, 0x0, {0x7, 0x0, 0x0, r12}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) kernel console output (not intermixed with test programs): 539'. [ 658.911267][T26340] netlink: 'syz.0.5542': attribute type 1 has an invalid length. [ 659.635208][T26357] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5544'. [ 659.762855][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 659.997873][T26377] netlink: 'syz.2.5549': attribute type 5 has an invalid length. [ 660.019811][T26376] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5550'. [ 660.029930][T26380] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5551'. [ 660.046360][T26379] netlink: 'syz.2.5549': attribute type 5 has an invalid length. [ 660.049729][T26376] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5550'. [ 660.067059][T26381] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 660.336783][T26395] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 660.362081][T26396] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 660.789047][ T6552] bridge_slave_0: left promiscuous mode [ 660.801070][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.808411][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 660.882456][ T6552] veth0_to_bond: left allmulticast mode [ 660.905731][ T6552] veth0_to_bond: left promiscuous mode [ 660.917192][ T6552] bridge5: port 2(veth0_to_bond) entered disabled state [ 660.939009][ T6552] veth9: left allmulticast mode [ 660.944702][ T6552] veth9: left promiscuous mode [ 660.956263][ T6552] bridge5: port 1(veth9) entered disabled state [ 661.627095][ T6552] dvmrp6 (unregistering): left allmulticast mode [ 661.636624][ T6552] dvmrp0 (unregistering): left allmulticast mode [ 661.842943][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 661.946832][ T6552] bond7 (unregistering): (slave bridge6): Releasing active interface [ 662.208433][ T6552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.220237][ T6552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.231684][ T6552] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 662.242639][ T6552] bond0 (unregistering): Released all slaves [ 662.255043][ T6552] bond1 (unregistering): Released all slaves [ 662.270899][ T6552] bond2 (unregistering): (slave veth5): Releasing active interface [ 662.280927][ T6552] bond2 (unregistering): Released all slaves [ 662.296779][ T6552] bond3 (unregistering): Released all slaves [ 662.311269][ T6552] bond4 (unregistering): Released all slaves [ 662.327521][ T6552] bond5 (unregistering): Released all slaves [ 662.345037][ T6552] bond6 (unregistering): Released all slaves [ 662.375483][ T6552] bond7 (unregistering): Released all slaves [ 662.389423][ T6552] bond8 (unregistering): Released all slaves [ 662.404918][ T6552] bond9 (unregistering): Released all slaves [ 662.576733][ T6552] tipc: Disabling bearer [ 662.596494][ T6552] tipc: Left network mode [ 662.666294][ T6552] IPVS: stopping backup sync thread 15253 ... [ 662.782540][T26453] Bluetooth: hci2: Opcode 0x0c1a failed: -22 [ 662.819812][T26451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5565'. [ 662.882864][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 663.592424][T26499] netlink: 'syz.4.5577': attribute type 1 has an invalid length. [ 663.602299][T26499] netlink: 'syz.4.5577': attribute type 2 has an invalid length. [ 663.616129][T26499] netlink: 'syz.4.5577': attribute type 1 has an invalid length. [ 663.625747][T26499] netlink: 'syz.4.5577': attribute type 3 has an invalid length. [ 663.636809][T26499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5577'. [ 663.922906][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 664.111823][T26521] syzkaller0: entered promiscuous mode [ 664.134439][T26521] syzkaller0: entered allmulticast mode [ 664.286985][T26529] netlink: 'syz.0.5586': attribute type 22 has an invalid length. [ 664.296270][T26529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5586'. [ 664.315672][ T6552] hsr_slave_0: left promiscuous mode [ 664.333783][ T6552] hsr_slave_1: left promiscuous mode [ 664.355569][ T6552] veth1_macvtap: left promiscuous mode [ 664.377244][ T6552] veth1_vlan: left promiscuous mode [ 664.392321][ T6552] veth0_vlan: left promiscuous mode [ 664.692077][ T6552] pimreg (unregistering): left allmulticast mode [ 664.743950][T26545] Bluetooth: MGMT ver 1.23 [ 664.920783][T26549] sctp: [Deprecated]: syz.4.5590 (pid 26549) Use of int in max_burst socket option deprecated. [ 664.920783][T26549] Use struct sctp_assoc_value instead [ 664.962893][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 664.998608][ T6552] team0 (unregistering): Port device team_slave_1 removed [ 665.025508][T26542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5588'. [ 665.036141][ T6552] team0 (unregistering): Port device team_slave_0 removed [ 665.495321][T26570] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5593'. [ 665.545211][T26570] netlink: 'syz.0.5593': attribute type 1 has an invalid length. [ 665.564101][T26570] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5593'. [ 665.584755][T26570] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5593'. [ 665.594983][T26570] netlink: 'syz.0.5593': attribute type 1 has an invalid length. [ 665.607342][T26570] netlink: 634 bytes leftover after parsing attributes in process `syz.0.5593'. [ 665.857578][T26584] bond0: entered promiscuous mode [ 665.874391][T26584] bond0: left promiscuous mode [ 666.002857][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 666.048901][T26590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5598'. [ 666.050523][T26577] nbd: must specify a size in bytes for the device [ 666.059082][T26590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5598'. [ 666.152059][ T6552] IPVS: stop unused estimator thread 0... [ 666.288781][T26605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.345885][T26609] netlink: 'syz.3.5606': attribute type 1 has an invalid length. [ 666.415383][T26613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.451906][T26609] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 666.452548][ T769] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.513279][ T769] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.521623][ T769] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.549206][ T769] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.603651][T26627] 8021q: VLANs not supported on ip_vti0 [ 666.648462][T26631] netlink: 'syz.3.5612': attribute type 1 has an invalid length. [ 666.657994][T26631] netlink: 'syz.3.5612': attribute type 1 has an invalid length. [ 666.842602][T26640] pim6reg1: entered allmulticast mode [ 666.992991][T26645] openvswitch: netlink: Missing key (keys=40, expected=80) [ 667.042868][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 667.459677][T26654] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.576226][T26654] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.750653][T26654] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.956424][T26654] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.048310][T26677] ip6gretap0: entered promiscuous mode [ 668.087845][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 668.299983][ T60] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.301758][T26690] __nla_validate_parse: 10 callbacks suppressed [ 668.301777][T26690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5627'. [ 668.308956][ T60] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.337025][ T769] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.352995][ T769] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.414542][T26696] netlink: zone id is out of range [ 668.434114][T26696] netlink: zone id is out of range [ 668.439312][T26696] netlink: zone id is out of range [ 668.453991][T26696] netlink: zone id is out of range [ 668.462964][T26696] netlink: zone id is out of range [ 668.481241][T26696] netlink: zone id is out of range [ 668.489197][T26696] netlink: zone id is out of range [ 668.593667][T26703] bond9: ARP target 1.0.0.0 is already present [ 668.608142][T26703] bond9: option arp_ip_target: invalid value (1) [ 668.635705][T26703] bond9 (unregistering): Released all slaves [ 668.789049][T26722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5633'. [ 668.941628][T26731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5640'. [ 669.217472][T26731] veth0_to_team: entered promiscuous mode [ 669.237692][T26731] veth0_to_team: left promiscuous mode [ 669.474093][T26749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5641'. [ 669.694740][T26725] lec:lec_atm_send: lec0: Unknown message type 5001287 [ 669.719723][T26725] lo: Caught tx_queue_len zero misconfig [ 669.728225][T26724] lec:lec_atm_close: lec0: Shut down! [ 670.279152][T26778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5652'. [ 670.730831][T26802] validate_nla: 2 callbacks suppressed [ 670.730854][T26802] netlink: 'syz.4.5657': attribute type 1 has an invalid length. [ 670.821289][T26808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5657'. [ 670.859819][T26811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5660'. [ 670.863065][T26808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5657'. [ 671.041459][T26816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5662'. [ 671.051825][T26816] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5662'. [ 671.072033][T26816] netlink: 'syz.2.5662': attribute type 5 has an invalid length. [ 671.184249][T26819] only policy match revision 0 supported [ 671.184274][T26819] unable to load match [ 671.298880][T26828] Cannot find add_set index 2 as target [ 671.584716][T26841] dvmrp6: entered allmulticast mode [ 671.722708][T26843] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 671.815777][T26851] netlink: 'syz.1.5671': attribute type 5 has an invalid length. [ 672.127970][T26857] net_ratelimit: 10 callbacks suppressed [ 672.127991][T26857] openvswitch: netlink: Flow key attr not present in new flow. [ 672.242863][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 673.173937][T26902] netlink: 'syz.1.5688': attribute type 29 has an invalid length. [ 673.282857][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 673.355127][T26909] netlink: 'syz.0.5689': attribute type 10 has an invalid length. [ 673.684285][T26934] __nla_validate_parse: 6 callbacks suppressed [ 673.684306][T26934] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5701'. [ 673.708303][T26936] netlink: 'syz.4.5702': attribute type 1 has an invalid length. [ 673.790082][T26939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5703'. [ 674.190714][T26965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5709'. [ 674.311880][T26968] lo speed is unknown, defaulting to 1000 [ 674.312626][T26974] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5713'. [ 674.322895][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 674.328762][T26973] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5713'. [ 674.354132][T26974] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5713'. [ 674.373717][T26975] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5713'. [ 674.734150][T26968] wg1 speed is unknown, defaulting to 1000 [ 675.123028][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms [ 675.131184][ C1] lec:lec_tx_timeout: lec0 [ 675.362869][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 675.447148][T27029] ip6tnl2: entered promiscuous mode [ 675.460713][T27029] ip6tnl2: entered allmulticast mode [ 675.634492][T27035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5727'. [ 675.749662][T27044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5729'. [ 675.754708][T27046] openvswitch: netlink: Unknown key attributes 2 [ 675.782284][T27046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.937734][T27054] netlink: 'syz.2.5733': attribute type 1 has an invalid length. [ 675.977083][T27057] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 675.995059][T27050] netlink: 'syz.4.5732': attribute type 1 has an invalid length. [ 676.018453][T27054] gtp1: entered promiscuous mode [ 676.029889][T27054] gtp1: entered allmulticast mode [ 676.300262][T27069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 676.331490][T27072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5741'. [ 676.402872][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 676.725170][T27095] netlink: 'syz.0.5747': attribute type 1 has an invalid length. [ 676.862584][T27100] delete_channel: no stack [ 677.442856][ C1] net_ratelimit: 1 callbacks suppressed [ 677.442877][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 677.609245][T27140] netlink: 'syz.3.5761': attribute type 1 has an invalid length. [ 678.482940][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 678.592077][T27157] netlink: 'syz.0.5768': attribute type 32 has an invalid length. [ 678.644822][T27157] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 679.522895][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 680.562856][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 680.576170][T27210] syzkaller1: entered promiscuous mode [ 680.581695][T27210] syzkaller1: entered allmulticast mode [ 680.868485][T27227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 680.879861][T27227] tipc: Enabled bearer , priority 0 [ 680.914867][T27225] syzkaller0: entered promiscuous mode [ 680.921122][T27225] syzkaller0: entered allmulticast mode [ 681.027882][T27231] netlink: 'syz.3.5786': attribute type 10 has an invalid length. [ 681.045093][T27231] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 681.078067][T27225] __nla_validate_parse: 7 callbacks suppressed [ 681.078086][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5786'. [ 681.213866][T27226] tipc: Disabling bearer [ 681.421073][T27251] tipc: Started in network mode [ 681.447559][T27251] tipc: Node identity 7e10efabe22a, cluster identity 4711 [ 681.474324][T27251] tipc: Enabled bearer , priority 0 [ 681.602856][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 681.606612][T27259] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5795'. [ 682.150303][T27275] netlink: 'syz.3.5797': attribute type 21 has an invalid length. [ 682.174413][T27275] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5797'. [ 682.322070][T27254] netlink: 'syz.0.5794': attribute type 1 has an invalid length. [ 682.395479][T27283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5799'. [ 682.415185][T27261] syzkaller0: entered promiscuous mode [ 682.420954][T27261] syzkaller0: entered allmulticast mode [ 682.473736][ T6401] tipc: Node number set to 2621108139 [ 682.515370][T27251] tipc: Disabling bearer [ 682.612378][T27295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5802'. [ 682.617660][T27297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5804'. [ 682.632178][T27297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5804'. [ 682.642842][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 682.773956][T27302] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5805'. [ 682.899947][T27311] netlink: 'syz.4.5807': attribute type 1 has an invalid length. [ 682.909123][T27311] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5807'. [ 683.688675][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 684.712204][T27295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5802'. [ 684.722854][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 684.765824][T27326] syz_tun: left allmulticast mode [ 684.934369][T27337] netlink: 'syz.1.5813': attribute type 1 has an invalid length. [ 685.724624][T27388] netlink: 'syz.2.5831': attribute type 1 has an invalid length. [ 685.762907][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 685.828061][T27381] lo speed is unknown, defaulting to 1000 [ 686.109137][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 686.209070][T27412] __nla_validate_parse: 4 callbacks suppressed [ 686.209092][T27412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5839'. [ 686.331318][T27381] wg1 speed is unknown, defaulting to 1000 [ 686.409263][T27420] xt_policy: output policy not valid in PREROUTING and INPUT [ 686.428920][T27425] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5844'. [ 686.450913][T27425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5844'. [ 686.802836][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 686.830040][T27435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5848'. [ 686.901138][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 686.924742][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 686.936204][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 686.947926][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 686.964540][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 686.995298][T22273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 687.006098][T22273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 687.014217][T22273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 687.026319][T22273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 687.037401][T22273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 687.116311][T27437] lo speed is unknown, defaulting to 1000 [ 687.465468][T27452] netlink: 'syz.3.5852': attribute type 6 has an invalid length. [ 687.726800][T27466] bridge0: port 3(ipvlan2) entered blocking state [ 687.733853][T27466] bridge0: port 3(ipvlan2) entered disabled state [ 687.740568][T27466] ipvlan2: entered allmulticast mode [ 687.747305][T27466] bridge0: entered allmulticast mode [ 687.769304][T27466] ipvlan2: left allmulticast mode [ 687.783271][T27466] bridge0: left allmulticast mode [ 687.812371][T27437] wg1 speed is unknown, defaulting to 1000 [ 687.842862][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 688.214331][T27437] chnl_net:caif_netlink_parms(): no params data found [ 688.269527][T27488] netlink: 'syz.1.5860': attribute type 1 has an invalid length. [ 688.285999][T27488] netlink: 'syz.1.5860': attribute type 1 has an invalid length. [ 688.426749][ T6552] bridge_slave_1: left promiscuous mode [ 688.432810][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.477999][ T6552] bridge_slave_0: left allmulticast mode [ 688.496428][ T6552] bridge_slave_0: left promiscuous mode [ 688.527194][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.870345][T27520] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5867'. [ 688.882845][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 688.934400][ T6552] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 689.017140][ T6552] dvmrp6 (unregistering): left allmulticast mode [ 689.048215][ T6552] bond4 (unregistering): (slave geneve3): Releasing active interface [ 689.116163][ T6552] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 689.133478][T22273] Bluetooth: hci0: command tx timeout [ 689.378960][ T6552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.389196][ T6552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.398934][ T6552] bond0 (unregistering): Released all slaves [ 689.409704][ T6552] bond1 (unregistering): Released all slaves [ 689.426931][ T6552] bond2 (unregistering): (slave bond3): Releasing backup interface [ 689.435909][ T6552] bond2 (unregistering): Released all slaves [ 689.451586][ T6552] bond3 (unregistering): Released all slaves [ 689.472432][ T6552] bond4 (unregistering): Released all slaves [ 689.488438][ T6552] bond5 (unregistering): Released all slaves [ 689.508114][ T6552] bond6 (unregistering): Released all slaves [ 689.522265][ T6552] bond7 (unregistering): Released all slaves [ 689.536866][ T6552] bond8 (unregistering): Released all slaves [ 689.557372][T27494] netem: change failed [ 689.768127][T27437] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.795069][T27437] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.807364][T27437] bridge_slave_0: entered allmulticast mode [ 689.829708][T27437] bridge_slave_0: entered promiscuous mode [ 689.852704][ T6552] tipc: Left network mode [ 689.879532][T27437] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.887545][T27542] netlink: 'syz.4.5871': attribute type 1 has an invalid length. [ 689.910034][T27437] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.921822][T27542] netlink: 'syz.4.5871': attribute type 2 has an invalid length. [ 689.930061][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 689.956393][T27437] bridge_slave_1: entered allmulticast mode [ 689.989009][T27437] bridge_slave_1: entered promiscuous mode [ 690.098297][T27542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5871'. [ 690.129306][ T6552] IPVS: stopping master sync thread 19082 ... [ 690.311268][T27437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.351258][T27566] netlink: 'syz.1.5874': attribute type 1 has an invalid length. [ 690.365926][T27437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.511167][T27566] 8021q: adding VLAN 0 to HW filter on device bond9 [ 690.606710][T27557] bond0: (slave veth0_to_bond): Releasing active interface [ 690.652623][T27557] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 690.734273][T27566] bond9: entered promiscuous mode [ 690.742860][T27566] bond9: entered allmulticast mode [ 690.935807][T27437] team0: Port device team_slave_0 added [ 690.972861][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 690.996679][T27437] team0: Port device team_slave_1 added [ 691.058712][T27593] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5880'. [ 691.122944][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 691.127890][T27437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.131149][ C1] lec:lec_tx_timeout: lec0 [ 691.144204][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 691.146733][T27437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.203512][T22273] Bluetooth: hci0: command tx timeout [ 691.255384][T27437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.271510][T27595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5881'. [ 691.286530][T27437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.310838][T27437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.377219][T27437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.440708][T27606] veth1_macvtap: left promiscuous mode [ 691.909640][T27437] hsr_slave_0: entered promiscuous mode [ 691.931269][T27437] hsr_slave_1: entered promiscuous mode [ 692.002842][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 692.078225][ T6552] hsr_slave_1: left promiscuous mode [ 692.087206][T27638] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5893'. [ 692.107603][T27638] netlink: 'syz.1.5893': attribute type 21 has an invalid length. [ 692.118052][ T6552] pim6reg527 (unregistering): left allmulticast mode [ 692.119874][T27638] netlink: 'syz.1.5893': attribute type 22 has an invalid length. [ 692.133902][T27638] netlink: 'syz.1.5893': attribute type 23 has an invalid length. [ 692.142326][T27638] netlink: 'syz.1.5893': attribute type 25 has an invalid length. [ 692.155702][T27638] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5893'. [ 692.246937][T27646] block nbd0: NBD_DISCONNECT [ 692.251882][T27646] block nbd0: Send disconnect failed -32 [ 692.258501][T27646] block nbd0: shutting down sockets [ 692.751207][T27660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5899'. [ 692.783753][T27660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5899'. [ 692.874371][T27654] bond9: option fail_over_mac: invalid value (16) [ 692.897201][T27654] bond9 (unregistering): Released all slaves [ 692.988011][T27665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 693.005710][T27673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5902'. [ 693.052847][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 693.072441][ T30] audit: type=1804 audit(1773067293.271:43): pid=27673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5902" name="/newroot/546/cgroup.controllers" dev="tmpfs" ino=2791 res=1 errno=0 [ 693.129668][ T30] audit: type=1800 audit(1773067293.271:44): pid=27673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5902" name="cgroup.controllers" dev="tmpfs" ino=2791 res=0 errno=0 [ 693.177695][T27681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5903'. [ 693.182087][ T6552] IPVS: stop unused estimator thread 0... [ 693.289386][T22273] Bluetooth: hci0: command tx timeout [ 693.539059][T27696] xfrm0: entered allmulticast mode [ 693.634963][T27696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5904'. [ 693.679802][T27696] team0 (unregistering): Port device virt_wifi0 removed [ 693.915388][T27707] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5906'. [ 693.925112][T27707] unsupported nlmsg_type 40 [ 694.082891][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 695.122881][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 695.364223][T22273] Bluetooth: hci0: command tx timeout [ 695.852610][T27668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 695.981044][T27437] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 695.988821][T27763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5907'. [ 696.022409][T27437] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 696.035217][T27764] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20001 [ 696.106956][T27437] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 696.150222][T27770] netlink: 'syz.4.5909': attribute type 29 has an invalid length. [ 696.162881][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 696.170116][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 696.178154][ C1] lec:lec_tx_timeout: lec0 [ 696.210388][T27437] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 696.398734][T27797] netlink: 'syz.4.5914': attribute type 4 has an invalid length. [ 696.430267][T27797] netlink: 'syz.4.5914': attribute type 4 has an invalid length. [ 696.485507][T27437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.540800][T27437] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.576058][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.583372][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.627595][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.634971][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.657346][T27809] __nla_validate_parse: 3 callbacks suppressed [ 696.657367][T27809] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5918'. [ 696.681650][T27809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5918'. [ 696.692165][T27809] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5918'. [ 697.009499][T27822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.062515][T27822] : entered promiscuous mode [ 697.202881][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 697.286140][T27835] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5928'. [ 697.354502][T27437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.479300][T27437] veth0_vlan: entered promiscuous mode [ 697.563333][T27437] veth1_vlan: entered promiscuous mode [ 697.637630][T27437] veth0_macvtap: entered promiscuous mode [ 697.678790][T27437] veth1_macvtap: entered promiscuous mode [ 697.720988][T27860] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5935'. [ 697.736970][T27437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.781457][T27437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.807020][T27865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5937'. [ 697.835624][ T6366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.847141][T27868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5937'. [ 697.856553][ T6366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.884581][ T6366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.904011][ T6366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.944606][T27873] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 698.071109][T27875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5940'. [ 698.096915][ T6377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.129164][ T6377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.234729][ T6366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.243216][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 698.256358][ T6366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.348368][T27888] ip6t_srh: unknown srh invflags 4000 [ 698.500903][T27897] netlink: 'syz.2.5846': attribute type 1 has an invalid length. [ 698.974391][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 698.985416][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 699.005306][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 699.015485][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 699.030035][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 699.190006][T27919] lo speed is unknown, defaulting to 1000 [ 699.283013][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 699.295095][T27934] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5957'. [ 699.616958][T27940] netlink: 'syz.4.5960': attribute type 1 has an invalid length. [ 699.770547][ T43] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.821478][T27919] wg1 speed is unknown, defaulting to 1000 [ 699.822476][T27931] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5955'. [ 700.096057][ T43] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.249912][ T43] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.320932][T27971] netlink: 'syz.4.5968': attribute type 32 has an invalid length. [ 700.332870][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 700.334699][ T43] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.426045][T27971] bond10: Setting coupled_control to off (0) [ 700.611290][T27991] nbd: socks must be embedded in a SOCK_ITEM attr [ 700.658725][T27988] netlink: 'syz.4.5974': attribute type 1 has an invalid length. [ 701.008291][T27919] chnl_net:caif_netlink_parms(): no params data found [ 701.123349][ T43] bridge_slave_1: left allmulticast mode [ 701.129220][T22273] Bluetooth: hci4: command tx timeout [ 701.141072][ T43] bridge_slave_1: left promiscuous mode [ 701.159761][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.216779][ T43] bridge_slave_0: left allmulticast mode [ 701.238431][ T43] bridge_slave_0: left promiscuous mode [ 701.259313][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.362834][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 701.707511][ T43] bond4 (unregistering): (slave gretap1): Releasing active interface [ 701.948885][ T43] bond1 (unregistering): (slave bridge1): Releasing active interface [ 702.087444][ T43] bond5 (unregistering): (slave bridge4): Releasing active interface [ 702.256935][ T43] bond1 (unregistering): Released all slaves [ 702.274383][ T43] bond0 (unregistering): Released all slaves [ 702.289107][ T43] bond2 (unregistering): (slave veth3): Releasing active interface [ 702.306127][ T43] bond2 (unregistering): Released all slaves [ 702.321082][ T43] bond3 (unregistering): (slave vlan0): Releasing backup interface [ 702.330723][ T43] bond3 (unregistering): Released all slaves [ 702.345630][ T43] bond4 (unregistering): Released all slaves [ 702.364848][ T43] bond5 (unregistering): Released all slaves [ 702.379515][ T43] bond6 (unregistering): (slave veth5): Releasing active interface [ 702.389158][ T43] bond6 (unregistering): Released all slaves [ 702.402880][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 702.415843][ T43] bond7 (unregistering): Released all slaves [ 702.431211][ T43] bond8 (unregistering): Released all slaves [ 702.746819][ T43] vþ: left promiscuous mode [ 702.852449][T28046] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 702.879601][T27919] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.927359][T27919] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.946496][T27919] bridge_slave_0: entered allmulticast mode [ 702.964909][T27919] bridge_slave_0: entered promiscuous mode [ 703.013849][T27919] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.021786][T28054] __nla_validate_parse: 4 callbacks suppressed [ 703.021806][T28054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5985'. [ 703.043284][T27919] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.050748][T27919] bridge_slave_1: entered allmulticast mode [ 703.064134][T27919] bridge_slave_1: entered promiscuous mode [ 703.071868][ T43] tipc: Left network mode [ 703.163536][T28054] lo: entered allmulticast mode [ 703.209134][T22273] Bluetooth: hci4: command tx timeout [ 703.250213][T28066] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5987'. [ 703.299583][T27919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.369476][T27919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.442836][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 703.462359][ T43] IPVS: stopping master sync thread 19778 ... [ 703.829318][T27919] team0: Port device team_slave_0 added [ 703.871398][T27919] team0: Port device team_slave_1 added [ 704.105879][T27919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.123055][T27919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.201245][T27919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.251218][T28108] x_tables: duplicate underflow at hook 2 [ 704.254047][T27919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.273536][T27919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.351981][T27919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.397585][T28104] pimreg: entered allmulticast mode [ 704.462329][T28111] vlan2: entered promiscuous mode [ 704.482832][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 704.517050][T28111] geneve1: entered promiscuous mode [ 704.522532][T28111] vlan2: entered allmulticast mode [ 704.531609][T28124] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5997'. [ 704.553333][T28111] geneve1: entered allmulticast mode [ 704.827816][T27919] hsr_slave_0: entered promiscuous mode [ 704.852083][T27919] hsr_slave_1: entered promiscuous mode [ 704.863027][T27919] debugfs: 'hsr0' already exists in 'hsr' [ 704.881189][T27919] Cannot create hsr debugfs directory [ 704.906916][T28135] netlink: get zone limit has 4 unknown bytes [ 705.290322][T22273] Bluetooth: hci4: command tx timeout [ 705.319169][T28155] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6003'. [ 705.353314][ T43] hsr_slave_0: left promiscuous mode [ 705.367149][ T43] hsr_slave_1: left promiscuous mode [ 705.374543][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.388857][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.522839][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 705.758826][T28177] nbd: must specify at least one socket [ 705.864163][ T43] team0 (unregistering): Port device team_slave_1 removed [ 705.867988][T28177] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6007'. [ 705.891326][ T43] team0 (unregistering): Port device team_slave_0 removed [ 706.208020][T28188] nbd: must specify at least one socket [ 706.563060][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 706.857134][T28219] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6016'. [ 707.368512][T22273] Bluetooth: hci4: command tx timeout [ 707.612858][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 707.815702][T28265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6023'. [ 707.966233][T28279] netlink: 'syz.4.6023': attribute type 61 has an invalid length. [ 707.975147][T28279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6023'. [ 708.652840][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 709.684988][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 710.362665][ T43] IPVS: stop unused estimator thread 0... [ 710.681131][T28330] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 710.706615][T28330] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 710.722840][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 710.730257][T28330] gretap1: entered promiscuous mode [ 710.735727][T28330] gretap1: entered allmulticast mode [ 710.900977][T27919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 710.949587][T27919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 711.034311][T27919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 711.064481][T28357] Bluetooth: MGMT ver 1.23 [ 711.170163][T27919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 711.456650][T28377] netlink: 'syz.3.6042': attribute type 1 has an invalid length. [ 711.469551][T28382] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6043'. [ 711.479953][T28382] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6043'. [ 711.491248][T28382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6043'. [ 711.664230][T27919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.743555][T27919] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.762830][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 711.775440][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.782590][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.863986][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.871416][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.979628][T28397] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6046'. [ 712.057711][T27919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 712.386383][T28419] batadv1: entered allmulticast mode [ 712.623472][T28434] netlink: 'syz.3.6053': attribute type 1 has an invalid length. [ 712.765194][ T30] audit: type=1804 audit(1773067312.871:45): pid=28438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6052" name="/newroot/571/memory.events" dev="tmpfs" ino=2923 res=1 errno=0 [ 712.789599][ T30] audit: type=1800 audit(1773067312.871:46): pid=28438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6052" name="memory.events" dev="tmpfs" ino=2923 res=0 errno=0 [ 712.812959][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 712.843464][ T30] audit: type=1804 audit(1773067312.871:47): pid=28438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6052" name="/newroot/571/memory.events" dev="tmpfs" ino=2923 res=1 errno=0 [ 712.963906][T28449] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6056'. [ 713.008002][T28449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6056'. [ 713.031790][T28449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6056'. [ 713.128762][T27919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.318264][T27919] veth0_vlan: entered promiscuous mode [ 713.356840][T27919] veth1_vlan: entered promiscuous mode [ 713.432514][T28470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.487914][T28473] netlink: 153208 bytes leftover after parsing attributes in process `syz.3.6061'. [ 713.597261][T27919] veth0_macvtap: entered promiscuous mode [ 713.685732][T27919] veth1_macvtap: entered promiscuous mode [ 713.720350][T28481] batadv0: entered allmulticast mode [ 713.842900][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 713.846726][T27919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.957572][T27919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.990779][T28494] syzkaller1: entered promiscuous mode [ 714.017890][T28494] syzkaller1: entered allmulticast mode [ 714.070726][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.089236][T28499] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6070'. [ 714.136168][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.152081][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.178302][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.585135][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.605133][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.693749][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.713151][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.795766][T28530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6078'. [ 714.883043][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 715.382409][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 715.396209][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 715.406039][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 715.427911][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 715.443754][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 715.546319][T28552] lo speed is unknown, defaulting to 1000 [ 715.932911][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 716.026938][T28585] delete_channel: no stack [ 716.109414][ T1159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.173442][ T1159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 716.337968][ T1159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.350601][T28599] netlink: 'syz.2.6096': attribute type 62 has an invalid length. [ 716.353087][ T1159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 716.379361][T28552] wg1 speed is unknown, defaulting to 1000 [ 716.487054][ T1159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.523003][ T1159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 716.590041][T28609] gre0: entered promiscuous mode [ 716.596756][T28609] gre0: entered allmulticast mode [ 716.628845][T28615] netlink: 'syz.3.6101': attribute type 12 has an invalid length. [ 716.662097][T28615] delete_channel: no stack [ 716.685011][T28615] __nla_validate_parse: 13 callbacks suppressed [ 716.685032][T28615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6101'. [ 716.733729][ T1159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.754155][ T1159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 716.882196][T28606] syzkaller0: entered promiscuous mode [ 716.888590][T28606] syzkaller0: entered allmulticast mode [ 716.898011][T28620] netlink: 'syz.3.6101': attribute type 12 has an invalid length. [ 716.961677][T28620] delete_channel: no stack [ 716.966306][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 717.524464][T22273] Bluetooth: hci5: command tx timeout [ 718.004150][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 719.052894][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 719.287618][T28654] syzkaller0: entered promiscuous mode [ 719.294432][T28654] syzkaller0: entered allmulticast mode [ 719.332478][T28665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6110'. [ 719.396897][T28665] xt_l2tp: invalid flags combination: 8 [ 719.608657][T22273] Bluetooth: hci5: command tx timeout [ 719.925735][T28699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6115'. [ 719.953430][T28700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6115'. [ 719.975767][T28700] openvswitch: netlink: Flow key attr not present in new flow. [ 720.011654][T28706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6118'. [ 720.021191][T28706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6118'. [ 720.089246][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 720.179966][T28712] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6118'. [ 721.132876][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 721.684028][T22273] Bluetooth: hci5: command tx timeout [ 722.135446][T28725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6122'. [ 722.162840][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 722.571398][ T1159] bond4 (unregistering): (slave gretap1): Releasing active interface [ 722.635679][ T1159] dvmrp1 (unregistering): left allmulticast mode [ 722.665212][ T1159] bond1 (unregistering): (slave geneve2): Releasing active interface [ 722.734962][ T1159] bond4 (unregistering): (slave bridge1): Releasing active interface [ 723.203225][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 723.773358][T22273] Bluetooth: hci5: command tx timeout [ 724.242933][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 724.389145][ T1159] bond1 (unregistering): Released all slaves [ 724.402652][ T1159] bond2 (unregistering): Released all slaves [ 724.418230][ T1159] bond3 (unregistering): (slave veth3): Releasing active interface [ 724.428567][ T1159] bond3 (unregistering): Released all slaves [ 724.442685][ T1159] bond4 (unregistering): Released all slaves [ 724.467093][ T1159] bond5 (unregistering): Released all slaves [ 724.491575][ T1159] bond0 (unregistering): left allmulticast mode [ 724.501659][ T1159] bond0 (unregistering): left promiscuous mode [ 724.515782][ T1159] team0: Port device macvlan2 removed [ 724.529189][ T1159] bond0 (unregistering): Released all slaves [ 724.542186][ T1159] bond6 (unregistering): Released all slaves [ 724.557337][ T1159] bond7 (unregistering): Released all slaves [ 724.571343][ T1159] bond8 (unregistering): Released all slaves [ 724.590736][ T1159] bond9 (unregistering): Released all slaves [ 724.607171][ T1159] bond10 (unregistering): Released all slaves [ 724.739244][T28751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6127'. [ 724.797475][T28755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6128'. [ 724.902618][T28755] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 724.958205][ T1159] tipc: Disabling bearer [ 724.976418][ T1159] tipc: Left network mode [ 725.034980][T28552] chnl_net:caif_netlink_parms(): no params data found [ 725.081273][T28763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6129'. [ 725.139171][T28763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6129'. [ 725.198307][T28760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6129'. [ 725.234787][T28760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6129'. [ 725.287545][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 725.582465][T28791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.606418][T28794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.671785][T28794] bond0: entered promiscuous mode [ 725.686194][T28794] bond_slave_0: entered promiscuous mode [ 725.699964][T28794] bond_slave_1: entered promiscuous mode [ 725.725827][T28794] batadv0: entered promiscuous mode [ 725.742233][T28794] hsr1: entered promiscuous mode [ 725.742239][T28801] netlink: 'syz.3.6139': attribute type 13 has an invalid length. [ 725.760516][T28794] hsr1: entered allmulticast mode [ 725.774923][T28794] bond0: entered allmulticast mode [ 725.780284][T28794] bond_slave_0: entered allmulticast mode [ 725.787148][T28794] bond_slave_1: entered allmulticast mode [ 725.793083][T28794] batadv0: entered allmulticast mode [ 725.805453][T28794] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 725.815204][T28794] bond0: left promiscuous mode [ 725.820881][T28794] bond_slave_0: left promiscuous mode [ 725.827183][T28794] bond_slave_1: left promiscuous mode [ 725.834381][T28794] batadv0: left promiscuous mode [ 725.904759][T28791] bond0: entered promiscuous mode [ 725.910169][T28791] bond_slave_0: entered promiscuous mode [ 725.916692][T28791] bond_slave_1: entered promiscuous mode [ 725.925331][T28791] batadv0: entered promiscuous mode [ 725.932460][T28791] hsr1: entered promiscuous mode [ 725.938394][T28791] hsr1: entered allmulticast mode [ 725.945454][T28791] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 725.953743][T28791] bond0: left promiscuous mode [ 725.958670][T28791] bond_slave_0: left promiscuous mode [ 725.964605][T28791] bond_slave_1: left promiscuous mode [ 725.971125][T28791] batadv0: left promiscuous mode [ 726.016492][T28806] gre0: left promiscuous mode [ 726.021421][T28806] gre0: left allmulticast mode [ 726.145609][T28806] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.153531][T28806] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.322836][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 726.341332][T28806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.374479][T28806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.471932][T28806] vlan2: left promiscuous mode [ 726.484357][T28806] geneve1: left promiscuous mode [ 726.489666][T28806] vlan2: left allmulticast mode [ 726.495255][T28806] geneve1: left allmulticast mode [ 726.500777][T28806] gretap1: left promiscuous mode [ 726.510020][T28806] gretap1: left allmulticast mode [ 726.518278][T28552] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.530566][T28552] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.538631][T28552] bridge_slave_0: entered allmulticast mode [ 726.555472][T28552] bridge_slave_0: entered promiscuous mode [ 726.679759][T28830] syzkaller0: entered promiscuous mode [ 726.687512][T28830] syzkaller0: entered allmulticast mode [ 726.695040][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.713574][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.720908][T28838] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6145'. [ 726.722655][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.742907][T28838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6145'. [ 726.753127][T28838] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6145'. [ 726.755595][T28552] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.773399][T28552] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.780838][T28552] bridge_slave_1: entered allmulticast mode [ 726.817260][T28552] bridge_slave_1: entered promiscuous mode [ 727.366215][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 728.412858][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 728.849842][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.990732][T28552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.062427][T28552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.289188][T28552] team0: Port device team_slave_0 added [ 729.340016][T28552] team0: Port device team_slave_1 added [ 729.452837][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 729.546702][T28552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.570446][T28552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.634758][T28552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.664071][T28552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.679888][T28552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.712717][T28552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.744032][T28889] __nla_validate_parse: 3 callbacks suppressed [ 729.744057][T28889] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6160'. [ 729.768425][T28889] netlink: Conntrack attr has 4 unknown bytes [ 729.778363][T28896] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6162'. [ 729.802974][T28896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6162'. [ 729.822932][T28896] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6162'. [ 729.842469][T28896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6162'. [ 729.872129][T28896] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6162'. [ 730.340386][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 730.364347][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 730.482822][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 730.692698][T28552] hsr_slave_0: entered promiscuous mode [ 730.700540][T28552] hsr_slave_1: entered promiscuous mode [ 730.709761][T28552] debugfs: 'hsr0' already exists in 'hsr' [ 730.727844][T28552] Cannot create hsr debugfs directory [ 731.222965][T28943] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6169'. [ 731.265171][T28943] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.6169'. [ 731.302562][T28943] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.6169'. [ 731.523027][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 731.689078][T28958] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6173'. [ 731.911897][T28965] vlan2: entered promiscuous mode [ 731.925844][T28965] gretap0: entered promiscuous mode [ 732.030787][ T1159] IPVS: stop unused estimator thread 0... [ 732.344443][ T1159] veth0_to_bond: left allmulticast mode [ 732.348291][T28985] FAULT_INJECTION: forcing a failure. [ 732.348291][T28985] name failslab, interval 1, probability 0, space 0, times 0 [ 732.357122][ T1159] veth0_to_bond: left promiscuous mode [ 732.374308][ T1159] bridge1: port 1(veth0_to_bond) entered disabled state [ 732.382164][T28988] SET target dimension over the limit! [ 732.396076][T28985] CPU: 0 UID: 0 PID: 28985 Comm: syz.2.6181 Not tainted syzkaller #0 PREEMPT(full) [ 732.396106][T28985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.396119][T28985] Call Trace: [ 732.396128][T28985] [ 732.396138][T28985] dump_stack_lvl+0xe8/0x150 [ 732.396173][T28985] should_fail_ex+0x412/0x560 [ 732.396207][T28985] should_failslab+0xa8/0x100 [ 732.396236][T28985] __kmalloc_noprof+0xe8/0x760 [ 732.396260][T28985] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 732.396296][T28985] tomoyo_realpath_from_path+0xe3/0x5d0 [ 732.396337][T28985] ? tomoyo_path_number_perm+0x219/0x630 [ 732.396362][T28985] tomoyo_path_number_perm+0x246/0x630 [ 732.396389][T28985] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 732.396417][T28985] ? __lock_acquire+0x6b5/0x2cf0 [ 732.396459][T28985] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 732.396504][T28985] ? __fget_files+0x2a/0x420 [ 732.396539][T28985] ? __fget_files+0x2a/0x420 [ 732.396567][T28985] ? __fget_files+0x3a0/0x420 [ 732.396593][T28985] ? __fget_files+0x2a/0x420 [ 732.396628][T28985] security_file_ioctl+0xc3/0x2a0 [ 732.396660][T28985] __se_sys_ioctl+0x47/0x170 [ 732.396688][T28985] do_syscall_64+0x14d/0xf80 [ 732.396718][T28985] ? trace_irq_disable+0x3b/0x150 [ 732.396745][T28985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.396767][T28985] ? clear_bhb_loop+0x40/0x90 [ 732.396794][T28985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.396814][T28985] RIP: 0033:0x7f4f5459c799 [ 732.396835][T28985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.396853][T28985] RSP: 002b:00007f4f553bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.396876][T28985] RAX: ffffffffffffffda RBX: 00007f4f54815fa0 RCX: 00007f4f5459c799 [ 732.396891][T28985] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 732.396904][T28985] RBP: 00007f4f553bd090 R08: 0000000000000000 R09: 0000000000000000 [ 732.396917][T28985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.396929][T28985] R13: 00007f4f54816038 R14: 00007f4f54815fa0 R15: 00007ffe4e3593d8 [ 732.396964][T28985] [ 732.399385][T28985] ERROR: Out of memory at tomoyo_realpath_from_path. [ 732.431603][ T1159] veth7: left allmulticast mode [ 732.570270][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 732.655121][ T1159] veth7: left promiscuous mode [ 732.660519][ T1159] bridge9: port 1(veth7) entered disabled state [ 732.914589][ T1159] erspan0 (unregistering): left allmulticast mode [ 732.921330][ T1159] erspan0 (unregistering): left promiscuous mode [ 733.056155][ T1159] dvmrp6 (unregistering): left allmulticast mode [ 733.080578][ T1159] bond0 (unregistering): (slave geneve2): Releasing active interface [ 733.233266][ T1159] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 733.602946][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 733.660618][ T1159]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.671931][ T1159]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.682266][ T1159]  (unregistering): Released all slaves [ 733.696702][ T1159] bond1 (unregistering): Released all slaves [ 733.721908][ T1159] bond2 (unregistering): (slave veth3): Releasing active interface [ 733.732118][ T1159] bond2 (unregistering): Released all slaves [ 733.764326][ T1159] bond3 (unregistering): (slave lo): Releasing backup interface [ 733.775197][ T1159] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 733.787398][ T1159] bond3 (unregistering): Released all slaves [ 733.801820][ T1159] bond4 (unregistering): Released all slaves [ 733.817634][ T1159] bond5 (unregistering): (slave veth5): Releasing active interface [ 733.827035][ T1159] bond5 (unregistering): Released all slaves [ 733.841387][ T1159] bond0 (unregistering): Released all slaves [ 733.863669][ T1159] bond6 (unregistering): Released all slaves [ 733.877554][ T1159] bond7 (unregistering): Released all slaves [ 733.896447][ T1159] bond8 (unregistering): (slave vcan0): Releasing backup interface [ 733.905860][ T1159] vcan0: left promiscuous mode [ 733.913021][ T1159] bond8 (unregistering): Released all slaves [ 733.927418][ T1159] bond9 (unregistering): Released all slaves [ 734.170463][T28552] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 734.236374][T28552] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 734.288439][T28552] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 734.414663][T29032] syzkaller0: entered promiscuous mode [ 734.437552][T29032] syzkaller0: entered allmulticast mode [ 734.502993][T28552] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 734.643076][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 734.852676][T29069] __nla_validate_parse: 10 callbacks suppressed [ 734.852700][T29069] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6196'. [ 735.682867][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 736.732912][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 737.426244][T29124] netlink: 'syz.1.6200': attribute type 10 has an invalid length. [ 737.492206][T28552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.674839][T29139] syzkaller0: entered promiscuous mode [ 737.680626][T29139] syzkaller0: entered allmulticast mode [ 737.772990][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 738.812896][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 739.853490][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 739.927984][T28552] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.949661][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.956951][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.980081][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.987431][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.016371][T29183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6211'. [ 740.058239][T29187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6212'. [ 740.186740][T29197] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 740.205688][T29197] team0: Device macvlan3 is already an upper device of the team interface [ 740.376774][T29209] syzkaller0: entered promiscuous mode [ 740.382478][T29209] syzkaller0: entered allmulticast mode [ 740.415285][T28552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.625325][T29153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.658651][T29189] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6213'. [ 740.783959][T29221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6218'. [ 740.814282][T29220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6218'. [ 740.883028][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 740.892359][T28552] veth0_vlan: entered promiscuous mode [ 740.910481][T29227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6219'. [ 740.926521][T28552] veth1_vlan: entered promiscuous mode [ 740.941856][T29231] tipc: Enabling of bearer rejected, failed to enable media [ 741.001738][T28552] veth0_macvtap: entered promiscuous mode [ 741.029988][T28552] veth1_macvtap: entered promiscuous mode [ 741.047772][T29235] netlink: 'syz.0.6221': attribute type 3 has an invalid length. [ 741.066700][T29234] netlink: 'syz.3.6222': attribute type 1 has an invalid length. [ 741.105201][T28552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.131933][T29237] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.6223'. [ 741.148978][T29234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6222'. [ 741.152555][T28552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.175831][T29234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6222'. [ 741.201071][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.228252][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.248339][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.286562][T29241] netlink: 'syz.3.6222': attribute type 10 has an invalid length. [ 741.325326][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.336463][T29234] netlink: 'syz.3.6222': attribute type 10 has an invalid length. [ 741.387913][T29234] netlink: 396 bytes leftover after parsing attributes in process `syz.3.6222'. [ 741.447778][T29243] netlink: 'syz.0.6224': attribute type 7 has an invalid length. [ 741.461516][T29243] netlink: 'syz.0.6224': attribute type 8 has an invalid length. [ 741.598245][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.598330][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.728652][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.741029][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.832228][T29256] netlink: 'syz.3.6229': attribute type 32 has an invalid length. [ 741.923066][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 741.952494][T29256] bond9: option coupled_control: invalid value (255) [ 741.975207][T29267] netlink: 'syz.2.6231': attribute type 1 has an invalid length. [ 741.988982][T29256] bond9 (unregistering): Released all slaves [ 742.059005][T29267] tipc: Invalid UDP bearer configuration [ 742.059060][T29267] tipc: Enabling of bearer rejected, failed to enable media [ 742.079534][T29274] TCP: TCP_TX_DELAY enabled [ 742.439506][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 742.452975][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 742.461730][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 742.473755][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 742.481647][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 742.579814][T29284] lo: left allmulticast mode [ 742.963038][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 743.061048][T29284] team_slave_0: left allmulticast mode [ 743.105867][T29284] xfrm0: left allmulticast mode [ 743.307792][T29284] bond4: left promiscuous mode [ 743.313258][T29284] bridge2: left promiscuous mode [ 743.335105][T29284] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 743.370549][T29281] lo speed is unknown, defaulting to 1000 [ 743.494283][ T43] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.533503][ T43] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.542663][ T43] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.558474][T29303] ipt_ECN: cannot use operation on non-tcp rule [ 743.584408][ T43] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.597478][T29306] FAULT_INJECTION: forcing a failure. [ 743.597478][T29306] name failslab, interval 1, probability 0, space 0, times 0 [ 743.643185][T29306] CPU: 1 UID: 0 PID: 29306 Comm: syz.3.6241 Not tainted syzkaller #0 PREEMPT(full) [ 743.643216][T29306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 743.643230][T29306] Call Trace: [ 743.643238][T29306] [ 743.643248][T29306] dump_stack_lvl+0xe8/0x150 [ 743.643284][T29306] should_fail_ex+0x412/0x560 [ 743.643318][T29306] should_failslab+0xa8/0x100 [ 743.643345][T29306] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 743.643369][T29306] ? __alloc_skb+0x186/0x7d0 [ 743.643397][T29306] ? __alloc_skb+0x1d0/0x7d0 [ 743.643421][T29306] ? __local_bh_enable_ip+0xd0/0x130 [ 743.643453][T29306] __alloc_skb+0x1d0/0x7d0 [ 743.643482][T29306] ? __mutex_trylock_common+0x158/0x260 [ 743.643515][T29306] alloc_skb_with_frags+0xca/0x890 [ 743.643561][T29306] sock_alloc_send_pskb+0x878/0x990 [ 743.643604][T29306] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 743.643643][T29306] ? __pfx__copy_from_iter+0x10/0x10 [ 743.643683][T29306] l2cap_sock_alloc_skb_cb+0xef/0x490 [ 743.643722][T29306] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 743.643757][T29306] ? skb_put+0x11b/0x210 [ 743.643789][T29306] l2cap_chan_send+0xe87/0x25a0 [ 743.643815][T29306] ? lockdep_hardirqs_on+0x7a/0x110 [ 743.643850][T29306] ? l2cap_sock_sendmsg+0x340/0x4e0 [ 743.643879][T29306] ? __pfx_l2cap_chan_send+0x10/0x10 [ 743.643908][T29306] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 743.643935][T29306] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 743.643962][T29306] ? __local_bh_enable_ip+0xd0/0x130 [ 743.643992][T29306] l2cap_sock_sendmsg+0x33d/0x4e0 [ 743.644022][T29306] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 743.644052][T29306] ? aa_sock_msg_perm+0xf1/0x1b0 [ 743.644080][T29306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 743.644106][T29306] ____sys_sendmsg+0x972/0x9f0 [ 743.644134][T29306] ? __lock_acquire+0x6b5/0x2cf0 [ 743.644168][T29306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 743.644207][T29306] ? import_iovec+0x73/0xa0 [ 743.644239][T29306] ___sys_sendmsg+0x2a5/0x360 [ 743.644264][T29306] ? __pfx____sys_sendmsg+0x10/0x10 [ 743.644289][T29306] ? kstrtouint+0x6e/0xe0 [ 743.644341][T29306] ? __fget_files+0x2a/0x420 [ 743.644370][T29306] ? __fget_files+0x3a0/0x420 [ 743.644409][T29306] __sys_sendmmsg+0x27c/0x4e0 [ 743.644435][T29306] ? __pfx___sys_sendmmsg+0x10/0x10 [ 743.644452][T29306] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 743.644499][T29306] ? ksys_write+0x242/0x270 [ 743.644523][T29306] ? __pfx_ksys_write+0x10/0x10 [ 743.644553][T29306] __x64_sys_sendmmsg+0xa0/0xc0 [ 743.644577][T29306] do_syscall_64+0x14d/0xf80 [ 743.644606][T29306] ? trace_irq_disable+0x3b/0x150 [ 743.644646][T29306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.644668][T29306] ? clear_bhb_loop+0x40/0x90 [ 743.644693][T29306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.644714][T29306] RIP: 0033:0x7f281f79c799 [ 743.644734][T29306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.644752][T29306] RSP: 002b:00007f2820692028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 743.644780][T29306] RAX: ffffffffffffffda RBX: 00007f281fa15fa0 RCX: 00007f281f79c799 [ 743.644794][T29306] RDX: 0000000000000001 RSI: 0000200000000d40 RDI: 0000000000000004 [ 743.644806][T29306] RBP: 00007f2820692090 R08: 0000000000000000 R09: 0000000000000000 [ 743.644819][T29306] R10: 000000002004c840 R11: 0000000000000246 R12: 0000000000000002 [ 743.644830][T29306] R13: 00007f281fa16038 R14: 00007f281fa15fa0 R15: 00007ffebbd4e3d8 [ 743.644862][T29306] [ 743.645100][T29303] netlink: 'syz.4.6243': attribute type 1 has an invalid length. [ 744.012806][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 744.039487][T29316] ip6gre1: entered promiscuous mode [ 744.050740][T29316] ip6gre1: entered allmulticast mode [ 744.070803][T29281] wg1 speed is unknown, defaulting to 1000 [ 744.084649][T29317] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 744.152417][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 744.173774][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 744.182387][ T6409] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 744.197277][T29324] netlink: 'syz.0.6249': attribute type 8 has an invalid length. [ 744.385324][T29333] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 744.574309][ T5842] Bluetooth: hci3: command tx timeout [ 744.667799][T29281] chnl_net:caif_netlink_parms(): no params data found [ 744.885263][ T6409] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 744.984037][T29281] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.991936][T29281] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.001166][T29374] nbd: socks must be embedded in a SOCK_ITEM attr [ 745.011187][T29281] bridge_slave_0: entered allmulticast mode [ 745.019870][T29281] bridge_slave_0: entered promiscuous mode [ 745.041153][T29281] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.050622][T19226] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 745.052986][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 745.066165][T29281] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.075373][T29281] bridge_slave_1: entered allmulticast mode [ 745.084156][T29281] bridge_slave_1: entered promiscuous mode [ 745.096037][T29374] __nla_validate_parse: 8 callbacks suppressed [ 745.096056][T29374] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6262'. [ 745.160671][T29380] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6265'. [ 745.195506][T29281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.212261][T29281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.309141][T29281] team0: Port device team_slave_0 added [ 745.322956][T29281] team0: Port device team_slave_1 added [ 745.323781][T29384] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6267'. [ 745.357430][T29281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.379073][T29281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.407990][T29281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.421839][T29384] syzkaller0: entered promiscuous mode [ 745.427466][T29384] syzkaller0: entered allmulticast mode [ 745.437329][T29387] netlink: 'syz.3.6268': attribute type 1 has an invalid length. [ 745.447016][T29387] netlink: 'syz.3.6268': attribute type 2 has an invalid length. [ 745.449173][T29281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.456199][T29387] netlink: 'syz.3.6268': attribute type 1 has an invalid length. [ 745.464625][T29281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.471219][T29387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6268'. [ 745.496747][T29281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.553199][T29387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6268'. [ 745.682201][T29281] hsr_slave_0: entered promiscuous mode [ 745.690192][T29281] hsr_slave_1: entered promiscuous mode [ 745.709583][T29281] debugfs: 'hsr0' already exists in 'hsr' [ 745.733589][T29281] Cannot create hsr debugfs directory [ 745.761974][T29392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6269'. [ 745.836697][T29392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.865004][T29392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.914617][T29399] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6273'. [ 745.952650][T29399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6273'. [ 745.997581][T29395] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 746.082873][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 746.291233][T29413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6277'. [ 746.387712][T29411] bond1: option mode: invalid value (133) [ 746.407857][T29411] bond1 (unregistering): Released all slaves [ 746.557636][T29281] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.592917][T29281] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 41221 - 0 [ 746.611862][T29428] netlink: 264 bytes leftover after parsing attributes in process `syz.3.6284'. [ 746.643458][ T5842] Bluetooth: hci3: command tx timeout [ 746.691324][T29281] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.703454][T29281] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 41221 - 0 [ 746.737677][T29434] gretap1: entered promiscuous mode [ 746.775141][T29281] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.795303][T29281] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 41221 - 0 [ 746.874223][T29281] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.897752][T29281] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 41221 - 0 [ 746.913394][T29443] FAULT_INJECTION: forcing a failure. [ 746.913394][T29443] name failslab, interval 1, probability 0, space 0, times 0 [ 746.928098][T29443] CPU: 0 UID: 0 PID: 29443 Comm: syz.3.6289 Not tainted syzkaller #0 PREEMPT(full) [ 746.928128][T29443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 746.928142][T29443] Call Trace: [ 746.928150][T29443] [ 746.928160][T29443] dump_stack_lvl+0xe8/0x150 [ 746.928196][T29443] should_fail_ex+0x412/0x560 [ 746.928228][T29443] should_failslab+0xa8/0x100 [ 746.928257][T29443] __kvmalloc_node_noprof+0x178/0x8a0 [ 746.928283][T29443] ? page_pool_create_percpu+0x2dd/0xb80 [ 746.928308][T29443] ? page_pool_create_percpu+0xaf/0xb80 [ 746.928335][T29443] page_pool_create_percpu+0x2dd/0xb80 [ 746.928370][T29443] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 746.928401][T29443] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 746.928437][T29443] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 746.928480][T29443] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 746.928513][T29443] ? __pfx_autoremove_wake_function+0x10/0x10 [ 746.928541][T29443] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 746.928591][T29443] ? 0xffffffffa0201894 [ 746.928609][T29443] ? 0xffffffffa0201950 [ 746.928627][T29443] ? 0xffffffffa020198c [ 746.928652][T29443] ? 0xffffffffa0201a14 [ 746.928670][T29443] ? 0xffffffffa0201a54 [ 746.928714][T29443] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 746.928755][T29443] ? _copy_from_user+0x94/0xb0 [ 746.928784][T29443] ? bpf_test_init+0x113/0x150 [ 746.928807][T29443] ? xdp_convert_md_to_buff+0x5b/0x330 [ 746.928835][T29443] bpf_prog_test_run_xdp+0x81c/0x1160 [ 746.928877][T29443] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 746.928907][T29443] ? __fget_files+0x2a/0x420 [ 746.928942][T29443] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 746.928969][T29443] bpf_prog_test_run+0x2c7/0x340 [ 746.929006][T29443] __sys_bpf+0x643/0x950 [ 746.929040][T29443] ? __pfx___sys_bpf+0x10/0x10 [ 746.929091][T29443] ? ksys_write+0x242/0x270 [ 746.929117][T29443] ? __pfx_ksys_write+0x10/0x10 [ 746.929148][T29443] __x64_sys_bpf+0x7c/0x90 [ 746.929177][T29443] do_syscall_64+0x14d/0xf80 [ 746.929205][T29443] ? trace_irq_disable+0x3b/0x150 [ 746.929233][T29443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.929254][T29443] ? clear_bhb_loop+0x40/0x90 [ 746.929277][T29443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.929307][T29443] RIP: 0033:0x7f281f79c799 [ 746.929326][T29443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.929344][T29443] RSP: 002b:00007f2820692028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 746.929368][T29443] RAX: ffffffffffffffda RBX: 00007f281fa15fa0 RCX: 00007f281f79c799 [ 746.929383][T29443] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 746.929397][T29443] RBP: 00007f2820692090 R08: 0000000000000000 R09: 0000000000000000 [ 746.929410][T29443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.929423][T29443] R13: 00007f281fa16038 R14: 00007f281fa15fa0 R15: 00007ffebbd4e3d8 [ 746.929458][T29443] [ 746.931873][T29443] page_pool_create_percpu() gave up with errno -12 [ 747.133025][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 747.529205][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 747.557727][T29462] netlink: 'syz.4.6294': attribute type 25 has an invalid length. [ 747.563227][T29460] SET target dimension over the limit! [ 747.647748][T29281] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 747.684772][T29281] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 747.704781][T29281] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 747.720947][T29281] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 747.798172][T29480] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 747.970822][T29281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.017494][T29281] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.044457][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.051738][ T6822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.082935][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 748.112382][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.119855][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.173305][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 748.430562][T29513] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 748.638277][T29281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.726137][ T5842] Bluetooth: hci3: command tx timeout [ 748.781792][T29281] veth0_vlan: entered promiscuous mode [ 748.800379][T29281] veth1_vlan: entered promiscuous mode [ 748.875398][T29281] veth0_macvtap: entered promiscuous mode [ 748.888083][T29281] veth1_macvtap: entered promiscuous mode [ 748.973662][T29281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.015482][T29281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.094088][ T6548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.113451][ T6548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.146808][ T6548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.164791][ T6548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.203005][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 749.440909][T29541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 749.537690][ T6548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.573161][ T6548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.623390][ T6377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.643576][ T6377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.243004][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 750.803062][ T5842] Bluetooth: hci3: command tx timeout [ 751.282988][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 751.510226][T29616] __nla_validate_parse: 13 callbacks suppressed [ 751.510249][T29616] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6328'. [ 752.007398][T29635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.323044][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 752.406143][T29638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6334'. [ 752.883236][ T5842] Bluetooth: hci3: command tx timeout [ 752.953415][T29281] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 752.968734][T29281] CPU: 1 UID: 0 PID: 29281 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 752.968764][T29281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 752.968778][T29281] Call Trace: [ 752.968788][T29281] [ 752.968809][T29281] dump_stack_lvl+0xe8/0x150 [ 752.968843][T29281] dump_header+0xd3/0x4c0 [ 752.968871][T29281] oom_kill_process+0x3ab/0x970 [ 752.968898][T29281] out_of_memory+0x106c/0x1410 [ 752.968919][T29281] ? percpu_ref_put+0x19/0x180 [ 752.968945][T29281] ? __pfx___mutex_lock+0x10/0x10 [ 752.968974][T29281] ? __pfx_out_of_memory+0x10/0x10 [ 752.968992][T29281] ? do_raw_spin_unlock+0xf5/0x210 [ 752.969024][T29281] try_charge_memcg+0xc53/0x1560 [ 752.969050][T29281] ? __lock_acquire+0x6b5/0x2cf0 [ 752.969089][T29281] ? __pfx_try_charge_memcg+0x10/0x10 [ 752.969112][T29281] ? xa_load+0x60/0x210 [ 752.969143][T29281] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 752.969173][T29281] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 752.969202][T29281] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 752.969230][T29281] __swap_cache_prepare_and_add+0x52a/0x700 [ 752.969283][T29281] swap_cache_alloc_folio+0xf1/0x240 [ 752.969318][T29281] swap_cluster_readahead+0x369/0x690 [ 752.969354][T29281] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 752.969401][T29281] ? get_vma_policy+0x27b/0x3c0 [ 752.969430][T29281] swapin_readahead+0x196/0xc50 [ 752.969461][T29281] ? filemap_map_pages+0x185/0x2050 [ 752.969498][T29281] ? __pfx_swapin_readahead+0x10/0x10 [ 752.969530][T29281] ? swap_table_get+0x1e/0x260 [ 752.969557][T29281] ? swap_table_get+0x1e/0x260 [ 752.969581][T29281] ? swap_table_get+0x1e/0x260 [ 752.969608][T29281] ? swap_table_get+0x216/0x260 [ 752.969637][T29281] ? swap_cache_get_folio+0x513/0x520 [ 752.969672][T29281] do_swap_page+0x54f/0x58d0 [ 752.969700][T29281] ? __lock_acquire+0x6b5/0x2cf0 [ 752.969746][T29281] ? do_swap_page+0x12c/0x58d0 [ 752.969772][T29281] ? __pfx_do_swap_page+0x10/0x10 [ 752.969805][T29281] ? __pte_offset_map+0x1ae/0x240 [ 752.969841][T29281] ? pte_offset_map_rw_nolock+0xea/0x160 [ 752.969875][T29281] handle_mm_fault+0x12d2/0x3310 [ 752.969922][T29281] ? handle_mm_fault+0xee/0x3310 [ 752.969963][T29281] ? __pfx_handle_mm_fault+0x10/0x10 [ 752.969990][T29281] ? lock_vma_under_rcu+0x45a/0x500 [ 752.970045][T29281] do_user_addr_fault+0xa73/0x1340 [ 752.970080][T29281] ? rcu_is_watching+0x15/0xb0 [ 752.970108][T29281] ? trace_page_fault_user+0x84/0x210 [ 752.970136][T29281] exc_page_fault+0x6a/0xc0 [ 752.970168][T29281] asm_exc_page_fault+0x26/0x30 [ 752.970187][T29281] RIP: 0033:0x7f9c4e06a7b7 [ 752.970209][T29281] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 39 7c 24 [ 752.970228][T29281] RSP: 002b:00007ffeade7a300 EFLAGS: 00010202 [ 752.970249][T29281] RAX: 0000001b32724000 RBX: 0000000000000012 RCX: 00000000000b7980 [ 752.970264][T29281] RDX: 000000000acacd40 RSI: 00007ffeade7a390 RDI: 0000000000000007 [ 752.970278][T29281] RBP: 00007ffeade7a33c R08: 7fffffffffffffff R09: 3fffffffffffffff [ 752.970292][T29281] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 752.970307][T29281] R13: 00000000000927c0 R14: 00000000000b7bbd R15: 00007ffeade7a390 [ 752.970345][T29281] [ 752.970355][T29281] memory: usage 307200kB, limit 307200kB, failcnt 581 [ 753.126422][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 753.126458][ C1] lec:lec_tx_timeout: lec0 [ 753.136962][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 753.339719][T29281] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 753.362945][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 753.428000][T29658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6342'. [ 753.500192][T29281] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 753.596703][T29281] Memory cgroup stats for /syz1: [ 753.597036][T29281] cache 0 [ 753.653299][T29281] rss 0 [ 753.679637][T29281] rss_huge 0 [ 753.718430][T29281] shmem 0 [ 753.721459][T29281] mapped_file 0 [ 753.753115][T29664] syzkaller0: entered promiscuous mode [ 753.774876][T29664] syzkaller0: entered allmulticast mode [ 753.793402][T29281] dirty 0 [ 753.827755][T29281] writeback 0 [ 753.852868][T29281] workingset_refault_anon 14 [ 753.880262][T29281] workingset_refault_file 0 [ 753.942212][T29281] swap 176128 [ 753.952439][T29281] swapcached 212992 [ 753.988980][T29281] pgpgin 107919 [ 753.997198][T29281] pgpgout 107910 [ 754.000805][T29281] pgfault 205029 [ 754.052779][T29281] pgmajfault 7 [ 754.072783][T29281] inactive_anon 24576 [ 754.115911][T29281] active_anon 12288 [ 754.130406][T29281] inactive_file 0 [ 754.165061][T29281] active_file 0 [ 754.222116][T29281] unevictable 0 [ 754.276018][T29281] hierarchical_memory_limit 314572800 [ 754.281463][T29281] hierarchical_memsw_limit 9223372036854771712 [ 754.363353][T29281] total_cache 0 [ 754.366890][T29281] total_rss 0 [ 754.370232][T29281] total_rss_huge 0 [ 754.402972][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 754.443357][T29281] total_shmem 0 [ 754.446897][T29281] total_mapped_file 0 [ 754.450911][T29281] total_dirty 0 [ 754.483463][T29281] total_writeback 0 [ 754.487428][T29281] total_workingset_refault_anon 14 [ 754.508241][T22273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 754.510051][T29281] total_workingset_refault_file 0 [ 754.522289][T22273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 754.532024][T22273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 754.543760][T22273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 754.553698][T22273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 754.575244][T29281] total_swap 176128 [ 754.613935][T29281] total_swapcached 212992 [ 754.671294][T29690] lo speed is unknown, defaulting to 1000 [ 754.693412][T29281] total_pgpgin 108623 [ 754.715618][T29281] total_pgpgout 108614 [ 754.790301][T29281] total_pgfault 205754 [ 754.810604][T29281] total_pgmajfault 7 [ 754.841018][T29281] total_inactive_anon 24576 [ 754.861453][T29281] total_active_anon 12288 [ 754.881525][T29281] total_inactive_file 0 [ 754.903227][T29281] total_active_file 0 [ 754.922125][T29281] total_unevictable 0 [ 754.956984][T29281] anon_cost 0 [ 754.971181][T29281] file_cost 0 [ 754.983560][T29281] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6332,pid=29628,uid=0 [ 755.040943][T29281] Memory cgroup out of memory: Killed process 29628 (syz.1.6332) total-vm:102416kB, anon-rss:1232kB, file-rss:22936kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 755.084084][T29700] netlink: zone id is out of range [ 755.089369][T29700] netlink: zone id is out of range [ 755.133335][T29700] netlink: zone id is out of range [ 755.153426][T29700] netlink: zone id is out of range [ 755.158735][T29700] netlink: zone id is out of range [ 755.309168][T29700] net_ratelimit: 48 callbacks suppressed [ 755.309195][T29700] netlink: set zone limit has 4 unknown bytes [ 755.331172][T29690] wg1 speed is unknown, defaulting to 1000 [ 755.442877][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 755.496643][T29709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6357'. [ 755.526325][T29707] syzkaller0: entered promiscuous mode [ 755.532247][T29707] syzkaller0: entered allmulticast mode [ 755.565036][T29707] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.594576][T29709] bridge_slave_1: left allmulticast mode [ 755.600331][T29709] bridge_slave_1: left promiscuous mode [ 755.638606][T29709] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.654562][T29712] netlink: 'syz.2.6357': attribute type 21 has an invalid length. [ 755.665795][T29709] bridge_slave_0: left allmulticast mode [ 755.672133][T29709] bridge_slave_0: left promiscuous mode [ 755.679938][T29709] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.842944][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 756.185792][T29729] team_slave_0: entered allmulticast mode [ 756.483136][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 756.652527][T22273] Bluetooth: hci1: command tx timeout [ 757.165788][ T5940] IPVS: starting estimator thread 0... [ 757.242052][T29690] chnl_net:caif_netlink_parms(): no params data found [ 757.272863][T29745] IPVS: using max 26 ests per chain, 62400 per kthread [ 757.337206][T29746] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 757.352038][T29748] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 757.522985][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 757.569467][T29690] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.587425][T29690] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.610789][T29690] bridge_slave_0: entered allmulticast mode [ 757.629042][T29690] bridge_slave_0: entered promiscuous mode [ 757.674166][T29776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6371'. [ 757.703638][T29690] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.711841][T29690] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.720207][T29690] bridge_slave_1: entered allmulticast mode [ 757.729418][T29690] bridge_slave_1: entered promiscuous mode [ 757.822488][T29690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.841474][T29690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.919398][T29690] team0: Port device team_slave_0 added [ 757.930476][T29690] team0: Port device team_slave_1 added [ 757.979807][T29690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.994975][T29690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.024809][T29690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.047262][T29690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.054416][T29690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.081734][T29690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.096174][T29783] netlink: 'syz.1.6373': attribute type 10 has an invalid length. [ 758.122385][T29783] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 758.162931][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 758.171335][ C1] lec:lec_tx_timeout: lec0 [ 758.364662][T29690] hsr_slave_0: entered promiscuous mode [ 758.393678][T29690] hsr_slave_1: entered promiscuous mode [ 758.443881][T29690] debugfs: 'hsr0' already exists in 'hsr' [ 758.449687][T29690] Cannot create hsr debugfs directory [ 758.562874][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 758.723387][T22273] Bluetooth: hci1: command tx timeout [ 758.812244][T29800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6378'. [ 759.129388][T29806] syzkaller0: entered promiscuous mode [ 759.135217][T29806] syzkaller0: entered allmulticast mode [ 759.285196][T29813] netlink: 'syz.2.6382': attribute type 1 has an invalid length. [ 759.301513][T29813] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6382'. [ 759.336038][T29809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6380'. [ 759.365030][T29801] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6380'. [ 759.469453][T29690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.602998][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 759.628167][T29690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.765427][T29690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.803965][T29837] netlink: 'syz.1.6388': attribute type 1 has an invalid length. [ 759.857307][T29690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.902326][T29840] netlink: 83 bytes leftover after parsing attributes in process `syz.1.6389'. [ 759.998243][T29845] syzkaller1: entered promiscuous mode [ 760.020247][T29845] syzkaller1: entered allmulticast mode [ 760.344801][T29864] FAULT_INJECTION: forcing a failure. [ 760.344801][T29864] name failslab, interval 1, probability 0, space 0, times 0 [ 760.360041][T29864] CPU: 1 UID: 0 PID: 29864 Comm: syz.2.6395 Not tainted syzkaller #0 PREEMPT(full) [ 760.360072][T29864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 760.360086][T29864] Call Trace: [ 760.360095][T29864] [ 760.360105][T29864] dump_stack_lvl+0xe8/0x150 [ 760.360141][T29864] should_fail_ex+0x412/0x560 [ 760.360175][T29864] should_failslab+0xa8/0x100 [ 760.360204][T29864] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 760.360228][T29864] ? __alloc_skb+0x186/0x7d0 [ 760.360255][T29864] ? __alloc_skb+0x1d0/0x7d0 [ 760.360281][T29864] ? __local_bh_enable_ip+0xd0/0x130 [ 760.360314][T29864] __alloc_skb+0x1d0/0x7d0 [ 760.360342][T29864] ? __mutex_trylock_common+0x158/0x260 [ 760.360376][T29864] alloc_skb_with_frags+0xca/0x890 [ 760.360423][T29864] sock_alloc_send_pskb+0x878/0x990 [ 760.360467][T29864] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 760.360493][T29864] ? __pfx__copy_from_iter+0x10/0x10 [ 760.360535][T29864] l2cap_sock_alloc_skb_cb+0xef/0x490 [ 760.360574][T29864] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 760.360609][T29864] ? skb_put+0x11b/0x210 [ 760.360642][T29864] l2cap_chan_send+0xe87/0x25a0 [ 760.360669][T29864] ? lockdep_hardirqs_on+0x7a/0x110 [ 760.360705][T29864] ? l2cap_sock_sendmsg+0x340/0x4e0 [ 760.360748][T29864] ? __pfx_l2cap_chan_send+0x10/0x10 [ 760.360777][T29864] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 760.360806][T29864] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 760.360834][T29864] ? __local_bh_enable_ip+0xd0/0x130 [ 760.360872][T29864] l2cap_sock_sendmsg+0x33d/0x4e0 [ 760.360904][T29864] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 760.360937][T29864] ? aa_sock_msg_perm+0xf1/0x1b0 [ 760.360966][T29864] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 760.360992][T29864] ____sys_sendmsg+0x972/0x9f0 [ 760.361022][T29864] ? __lock_acquire+0x6b5/0x2cf0 [ 760.361058][T29864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 760.361100][T29864] ? import_iovec+0x73/0xa0 [ 760.361129][T29864] ___sys_sendmsg+0x2a5/0x360 [ 760.361157][T29864] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.361184][T29864] ? kstrtouint+0x6e/0xe0 [ 760.361239][T29864] ? __fget_files+0x2a/0x420 [ 760.361268][T29864] ? __fget_files+0x3a0/0x420 [ 760.361310][T29864] __sys_sendmmsg+0x27c/0x4e0 [ 760.361337][T29864] ? __pfx___sys_sendmmsg+0x10/0x10 [ 760.361356][T29864] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 760.361407][T29864] ? ksys_write+0x242/0x270 [ 760.361432][T29864] ? __pfx_ksys_write+0x10/0x10 [ 760.361462][T29864] __x64_sys_sendmmsg+0xa0/0xc0 [ 760.361485][T29864] do_syscall_64+0x14d/0xf80 [ 760.361515][T29864] ? trace_irq_disable+0x3b/0x150 [ 760.361543][T29864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.361565][T29864] ? clear_bhb_loop+0x40/0x90 [ 760.361591][T29864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.361611][T29864] RIP: 0033:0x7f4f5459c799 [ 760.361633][T29864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.361651][T29864] RSP: 002b:00007f4f553bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 760.361675][T29864] RAX: ffffffffffffffda RBX: 00007f4f54815fa0 RCX: 00007f4f5459c799 [ 760.361691][T29864] RDX: 0000000000000001 RSI: 0000200000000d40 RDI: 0000000000000004 [ 760.361704][T29864] RBP: 00007f4f553bd090 R08: 0000000000000000 R09: 0000000000000000 [ 760.361718][T29864] R10: 000000002004c840 R11: 0000000000000246 R12: 0000000000000002 [ 760.361741][T29864] R13: 00007f4f54816038 R14: 00007f4f54815fa0 R15: 00007ffe4e3593d8 [ 760.361776][T29864] [ 760.707683][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 760.802392][T29690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 760.810081][T22273] Bluetooth: hci1: command tx timeout [ 760.821585][T29690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 760.922469][T29690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 760.957495][T29690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 761.082354][T29881] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 761.279046][T29892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6399'. [ 761.319261][T29888] syzkaller0: entered promiscuous mode [ 761.327492][T29892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6399'. [ 761.352167][T29900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6399'. [ 761.382667][T29888] syzkaller0: entered allmulticast mode [ 761.392562][T29900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6399'. [ 761.772976][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 762.804713][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 762.886539][T22273] Bluetooth: hci1: command tx timeout [ 763.710310][T29919] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 763.739845][T29915] kthread_run failed with err -4 [ 763.853023][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 763.914877][T29690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.968300][T29690] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.995611][T29939] __nla_validate_parse: 3 callbacks suppressed [ 763.995632][T29939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6410'. [ 764.018202][T29941] netlink: 'syz.1.6410': attribute type 4 has an invalid length. [ 764.030983][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.038361][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.051861][T29941] netlink: 'syz.1.6410': attribute type 1 has an invalid length. [ 764.064865][T29940] netlink: zone id is out of range [ 764.065961][T29939] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6410'. [ 764.071137][T29940] netlink: zone id is out of range [ 764.088216][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.095457][ T6822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.107989][T29941] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6410'. [ 764.128605][T29940] netlink: zone id is out of range [ 764.136753][T29940] netlink: zone id is out of range [ 764.144976][T29940] netlink: zone id is out of range [ 764.180722][T29940] netlink: zone id is out of range [ 764.293995][T29945] lo speed is unknown, defaulting to 1000 [ 764.361494][T29958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6413'. [ 764.372662][T29958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6413'. [ 764.383764][T29958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6413'. [ 764.394476][T29958] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.6413'. [ 764.709255][T29968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6415'. [ 764.771894][T29945] wg1 speed is unknown, defaulting to 1000 [ 764.818069][T29967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6416'. [ 764.821309][T29690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.978075][T29978] netlink: 'syz.0.6420': attribute type 10 has an invalid length. [ 765.077582][T29978] team0: Device ipvlan1 failed to register rx_handler [ 765.109382][T29690] veth0_vlan: entered promiscuous mode [ 765.141612][T29978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6420'. [ 765.291015][T29690] veth1_vlan: entered promiscuous mode [ 765.345517][T29984] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 765.375856][T29984] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 765.443122][T29690] veth0_macvtap: entered promiscuous mode [ 765.480957][T29690] veth1_macvtap: entered promiscuous mode [ 765.582588][T29690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.626309][T29690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.676667][ T6548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.713437][ T6548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.745465][ T6548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.768881][ T6548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.923126][ C1] net_ratelimit: 138 callbacks suppressed [ 765.923150][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 766.035642][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.053304][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.198263][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.213737][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.547345][T30015] netlink: 'syz.0.6428': attribute type 18 has an invalid length. [ 766.962958][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 767.610362][T30041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.004734][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 768.925993][T30062] infiniband syz1: set active [ 768.930987][T30062] infiniband syz1: added bond_slave_0 [ 768.971772][T30091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.983264][T30091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.064291][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 769.115489][T30062] RDS/IB: syz1: added [ 769.119673][T30062] smc: adding ib device syz1 with port count 1 [ 769.144932][T30093] netlink: 'syz.2.6451': attribute type 1 has an invalid length. [ 769.165940][T30062] smc: ib device syz1 port 1 has no pnetid [ 769.219129][T30097] __nla_validate_parse: 3 callbacks suppressed [ 769.219150][T30097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6450'. [ 769.314707][T30098] bond1: (slave bridge0): making interface the new active one [ 769.345674][T30093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6451'. [ 769.367651][T30098] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 769.510851][T30093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 769.811518][T30109] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6453'. [ 769.835754][T30109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6453'. [ 770.083749][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 770.310365][T30117] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6457'. [ 770.352322][T30118] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6457'. [ 770.594578][T30132] netlink: 'syz.0.6459': attribute type 4 has an invalid length. [ 770.623088][T30132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6459'. [ 770.816716][T30135] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 770.914771][T30140] syzkaller1: entered promiscuous mode [ 770.940976][T30140] syzkaller1: entered allmulticast mode [ 770.964259][T30140] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6461'. [ 771.123143][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 771.491070][T29967] Set syz1 is full, maxelem 65536 reached [ 771.714354][T30162] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6466'. [ 771.742483][T30162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6466'. [ 771.843000][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 772.172922][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 772.180104][T30171] netlink: set zone limit has 4 unknown bytes [ 773.203028][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 773.343027][T30217] ipt_REJECT: TCP_RESET invalid for non-tcp [ 774.046389][T30251] Cannot find set identified by id 1 to match [ 774.066510][ T5940] IPVS: starting estimator thread 0... [ 774.085418][T30257] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 774.182892][T30255] IPVS: using max 25 ests per chain, 60000 per kthread [ 774.243040][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 774.621913][T30276] netlink: 'syz.2.6499': attribute type 1 has an invalid length. [ 774.685147][T30276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.826292][T30283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.842346][T30283] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 774.848784][T30288] __nla_validate_parse: 11 callbacks suppressed [ 774.848804][T30288] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6502'. [ 774.869225][T30283] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 774.902879][T30288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6502'. [ 774.921397][T30288] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6502'. [ 774.932494][T30288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6502'. [ 774.958230][T30288] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6502'. [ 775.124034][T30287] veth7: entered promiscuous mode [ 775.209725][T30301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6505'. [ 775.226098][T30301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6505'. [ 775.283071][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 775.975673][T30330] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 776.204211][T30346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6519'. [ 776.324338][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 776.624694][T30374] netlink: 'syz.2.6526': attribute type 1 has an invalid length. [ 776.636590][T30374] netlink: 'syz.2.6526': attribute type 1 has an invalid length. [ 776.910125][T30390] x_tables: duplicate underflow at hook 1 [ 777.023634][T30397] netlink: 'syz.4.6533': attribute type 4 has an invalid length. [ 777.298595][T30411] ip6gre1: entered allmulticast mode [ 777.363014][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 778.226368][T30422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6539'. [ 778.389998][T30426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6540'. [ 778.403169][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 778.653286][T30436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 778.660775][T30436] IPv6: NLM_F_CREATE should be set when creating new route [ 779.308943][T30485] pim6reg1: entered promiscuous mode [ 779.352391][T30485] pim6reg1: entered allmulticast mode [ 779.442944][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 779.625068][T30504] bridge0: port 3(batadv1) entered blocking state [ 779.642082][T30504] bridge0: port 3(batadv1) entered disabled state [ 779.662617][T30504] batadv1: entered allmulticast mode [ 779.674832][T30504] batadv1: entered promiscuous mode [ 779.681483][T30507] xt_CT: No such helper "pptp" [ 779.698805][T30513] netlink: 'syz.0.6563': attribute type 3 has an invalid length. [ 780.123119][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 780.133339][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 780.483156][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 780.529582][T30518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 780.649517][T30533] netlink: 'syz.0.6569': attribute type 1 has an invalid length. [ 781.077948][T30541] Cannot find map_set index 65533 as target [ 781.442611][T30544] syzkaller0: entered promiscuous mode [ 781.512961][T30544] syzkaller0: entered allmulticast mode [ 781.522915][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 781.911342][T30564] __nla_validate_parse: 1 callbacks suppressed [ 781.911363][T30564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6581'. [ 781.924721][T30563] geneve2: entered promiscuous mode [ 781.936203][T30563] geneve2: entered allmulticast mode [ 781.960194][T30560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6582'. [ 782.137177][T30568] bond1: (slave bond_slave_1): Device is not our slave [ 782.144485][T30568] bond1: option active_slave: invalid value (bond_slave_1) [ 782.161623][T30568] bond1 (unregistering): Released all slaves [ 782.202041][T30577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.215560][T30577] openvswitch: netlink: IP tunnel TTL not specified. [ 782.310787][T30569] bond1: (slave bond_slave_1): Device is not our slave [ 782.324588][T30569] bond1: option active_slave: invalid value (bond_slave_1) [ 782.337548][T30569] bond1 (unregistering): Released all slaves [ 782.563016][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 782.713314][T30599] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 782.968925][T30612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6596'. [ 783.125861][T30615] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6587'. [ 783.270130][T30612] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 783.504861][T30622] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6598'. [ 783.531688][T30622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6598'. [ 783.574336][T30622] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6598'. [ 783.600007][T30628] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 783.609665][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 783.632841][T30622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6598'. [ 783.642193][T30622] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6598'. [ 784.088542][T30658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6607'. [ 784.494453][T30680] netlink: 'syz.0.6614': attribute type 12 has an invalid length. [ 784.533125][T30680] netlink: 'syz.0.6614': attribute type 11 has an invalid length. [ 784.643165][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 785.012327][T30718] veth2: entered allmulticast mode [ 785.032224][T30718] veth3: entered promiscuous mode [ 785.037642][T30718] veth3: entered allmulticast mode [ 785.500678][T30744] netlink: 'syz.3.6634': attribute type 17 has an invalid length. [ 785.565060][T30744] gretap0: entered promiscuous mode [ 785.587476][T30744] gretap0: left promiscuous mode [ 785.682995][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 785.821464][T30761] geneve2: entered promiscuous mode [ 785.933953][T30758] nbd0: detected capacity change from 0 to 127 [ 786.072476][T22273] block nbd0: Receive control failed (result -104) [ 786.111653][T30783] netlink: 'syz.1.6648': attribute type 1 has an invalid length. [ 786.168964][T30784] erspan0: entered promiscuous mode [ 786.416844][ T6422] IPVS: starting estimator thread 0... [ 786.417837][T30795] lo speed is unknown, defaulting to 1000 [ 786.534010][T30804] IPVS: using max 30 ests per chain, 72000 per kthread [ 786.723112][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 786.811887][T30795] wg1 speed is unknown, defaulting to 1000 [ 787.773163][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 788.803066][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 789.375655][T30801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 789.529019][T30833] __nla_validate_parse: 19 callbacks suppressed [ 789.529045][T30833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6662'. [ 789.611754][T30833] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 789.644571][T30833] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 789.653289][T30833] gretap1: entered promiscuous mode [ 789.659325][T30833] gretap1: entered allmulticast mode [ 789.683851][T30844] netlink: 'syz.0.6666': attribute type 4 has an invalid length. [ 789.843459][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 789.939748][T30859] xt_socket: unknown flags 0x50 [ 790.448348][T30877] syzkaller0: entered promiscuous mode [ 790.454847][T30868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6672'. [ 790.470207][T30877] syzkaller0: entered allmulticast mode [ 790.497574][T30881] dvmrp0: entered allmulticast mode [ 790.601153][T30888] netlink: 'syz.2.6680': attribute type 2 has an invalid length. [ 790.883032][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 791.093241][T30916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6691'. [ 791.104364][T30916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6691'. [ 791.213334][T30922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 791.440198][T30936] vcan1: entered promiscuous mode [ 791.455643][T30936] vcan1: entered allmulticast mode [ 791.534674][T30947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6700'. [ 791.923049][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 792.006781][T30974] netlink: 'syz.4.6708': attribute type 1 has an invalid length. [ 792.100083][T30966] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 792.100646][T30968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6707'. [ 792.233323][T30983] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 792.268141][T30976] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 792.280392][T30976] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 792.408092][T30979] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 792.465747][T30976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6708'. [ 792.492989][T30976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6708'. [ 792.570646][T30982] bond1: (slave gretap2): making interface the new active one [ 792.614436][T30982] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 792.698424][T30990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6711'. [ 792.935224][T31012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6716'. [ 792.963305][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 793.064831][T31015] x_tables: duplicate underflow at hook 1 [ 793.280976][T31021] smc: net device team0 applied user defined pnetid SYZ2 [ 793.440757][T31030] netlink: 'syz.3.6721': attribute type 5 has an invalid length. [ 793.625303][T31034] syzkaller0: entered promiscuous mode [ 793.632041][T31034] syzkaller0: entered allmulticast mode [ 793.720614][T31044] netlink: 'syz.4.6727': attribute type 21 has an invalid length. [ 793.729555][T31044] IPv6: NLM_F_CREATE should be specified when creating new route [ 793.763092][T31044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 793.770601][T31044] IPv6: NLM_F_CREATE should be set when creating new route [ 793.778282][T31044] IPv6: NLM_F_CREATE should be set when creating new route [ 793.785721][T31044] IPv6: NLM_F_CREATE should be set when creating new route [ 793.898564][T31044] syzkaller0: entered promiscuous mode [ 793.913330][T31044] syzkaller0: entered allmulticast mode [ 793.957597][T31051] tipc: Started in network mode [ 793.962545][T31051] tipc: Node identity da00b91bf08c, cluster identity 4711 [ 793.970535][T31051] tipc: Enabled bearer , priority 0 [ 794.003015][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 794.058985][T31051] syzkaller0: entered promiscuous mode [ 794.065246][T31051] syzkaller0: entered allmulticast mode [ 794.071517][T31051] tipc: Resetting bearer [ 794.091110][T31058] xfrm1: entered promiscuous mode [ 794.096629][T31058] xfrm1: entered allmulticast mode [ 794.130024][T31057] syzkaller0: entered promiscuous mode [ 794.138425][T31057] syzkaller0: entered allmulticast mode [ 794.163745][ T6822] wlan1: Trigger new scan to find an IBSS to join [ 794.201279][T31050] tipc: Resetting bearer [ 794.918068][T31081] x_tables: duplicate underflow at hook 1 [ 795.045627][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 795.947377][T31088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.092950][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 796.100719][T22273] Bluetooth: hci1: command tx timeout [ 796.761767][T31050] tipc: Disabling bearer [ 796.827448][ T6422] tipc: Node number set to 713865499 [ 797.049708][T31100] netlink: 'syz.0.6744': attribute type 58 has an invalid length. [ 797.058342][T31100] __nla_validate_parse: 9 callbacks suppressed [ 797.058364][T31100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6744'. [ 797.123081][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 797.203389][ T6382] wlan1: Trigger new scan to find an IBSS to join [ 797.257832][T31112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6746'. [ 797.403688][T31119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6748'. [ 797.448239][T31119] openvswitch: netlink: Flow actions attr not present in new flow. [ 797.482150][T31125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6750'. [ 797.512897][T31125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6750'. [ 797.537721][T31125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6750'. [ 797.583878][T31125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6750'. [ 797.594643][T31133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6752'. [ 797.628148][T31125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6750'. [ 798.144972][T31165] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6761'. [ 798.163135][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 798.559947][T31196] openvswitch: netlink: IP tunnel dst address not specified [ 799.057420][T31210] syzkaller0: entered promiscuous mode [ 799.064863][T31210] syzkaller0: entered allmulticast mode [ 799.202972][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 799.298576][T31181] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 799.310795][T31181] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 799.319341][T31181] CPU: 0 UID: 0 PID: 31181 Comm: syz.0.6767 Not tainted syzkaller #0 PREEMPT(full) [ 799.328760][T31181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 799.338837][T31181] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 799.344576][T31181] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 e9 db 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 799.364292][T31181] RSP: 0018:ffffc900051b7768 EFLAGS: 00010207 [ 799.370382][T31181] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88802906bd00 [ 799.378596][T31181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888051823280 [ 799.386659][T31181] RBP: ffff888051823280 R08: ffff88802906bd00 R09: 0000000000000008 [ 799.394725][T31181] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 799.403028][T31181] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000a36f0c [ 799.411017][T31181] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 799.419972][T31181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 799.426559][T31181] CR2: 0000200000000040 CR3: 00000000278b8000 CR4: 00000000003526f0 [ 799.434542][T31181] Call Trace: [ 799.437827][T31181] [ 799.440767][T31181] ? __alloc_skb+0x4e5/0x7d0 [ 799.445370][T31181] ? skb_put+0x11b/0x210 [ 799.449627][T31181] rose_write_internal+0x1256/0x1b60 [ 799.454919][T31181] ? lockdep_hardirqs_on+0x7a/0x110 [ 799.460133][T31181] ? __pfx_rose_write_internal+0x10/0x10 [ 799.465769][T31181] ? timer_delete+0x245/0x340 [ 799.470552][T31181] rose_release+0x25b/0x510 [ 799.475067][T31181] sock_close+0xc3/0x240 [ 799.479583][T31181] ? __pfx_sock_close+0x10/0x10 [ 799.484436][T31181] __fput+0x44f/0xa70 [ 799.488440][T31181] task_work_run+0x1d9/0x270 [ 799.493042][T31181] ? __pfx_task_work_run+0x10/0x10 [ 799.498165][T31181] ? do_raw_spin_unlock+0xf5/0x210 [ 799.503315][T31181] do_exit+0x70f/0x23c0 [ 799.507517][T31181] ? __pfx_do_exit+0x10/0x10 [ 799.512107][T31181] ? cgroup1_freezing+0x20/0x350 [ 799.517074][T31181] ? cgroup1_freezing+0x20/0x350 [ 799.522032][T31181] do_group_exit+0x21b/0x2d0 [ 799.526641][T31181] ? _raw_spin_unlock_irq+0x23/0x50 [ 799.531852][T31181] get_signal+0x1284/0x1330 [ 799.536373][T31181] arch_do_signal_or_restart+0xbc/0x830 [ 799.542019][T31181] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 799.547218][T31181] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 799.553386][T31181] exit_to_user_mode_loop+0x86/0x480 [ 799.558694][T31181] ? rcu_is_watching+0x15/0xb0 [ 799.563475][T31181] do_syscall_64+0x32d/0xf80 [ 799.568079][T31181] ? trace_irq_disable+0x3b/0x150 [ 799.573112][T31181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.579442][T31181] ? clear_bhb_loop+0x40/0x90 [ 799.584159][T31181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.590102][T31181] RIP: 0033:0x7fd07c79c799 [ 799.594522][T31181] Code: Unable to access opcode bytes at 0x7fd07c79c76f. [ 799.601623][T31181] RSP: 002b:00007fd07d5f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 799.610051][T31181] RAX: 0000000000000024 RBX: 00007fd07ca16090 RCX: 00007fd07c79c799 [ 799.618028][T31181] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000f [ 799.626018][T31181] RBP: 00007fd07c832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 799.633995][T31181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.642066][T31181] R13: 00007fd07ca16128 R14: 00007fd07ca16090 R15: 00007ffe02771c18 [ 799.650483][T31181] [ 799.653502][T31181] Modules linked in: [ 799.659554][T31181] ---[ end trace 0000000000000000 ]--- [ 799.676499][T31181] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 799.686201][T31181] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 e9 db 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 799.708556][T31181] RSP: 0018:ffffc900051b7768 EFLAGS: 00010207 [ 799.715365][T31181] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88802906bd00 [ 799.747753][T31181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888051823280 [ 799.756572][T31181] RBP: ffff888051823280 R08: ffff88802906bd00 R09: 0000000000000008 [ 799.778509][T31181] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 799.787171][T31181] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000a36f0c [ 799.795903][T31181] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 799.806407][T31181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 799.813380][T31181] CR2: 00007fb85f72de9c CR3: 00000000278de000 CR4: 00000000003526f0 [ 799.821549][T31181] Kernel panic - not syncing: Fatal exception [ 799.827963][T31181] Kernel Offset: disabled [ 799.832289][T31181] Rebooting in 86400 seconds..