last executing test programs: 5.720566102s ago: executing program 1 (id=2759): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r2, 0x0, 0x0, 0x20000010, &(0x7f0000000200)=@ax25={{0x3, @null, 0x1}, [@null, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) close(r1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002801000178004000f8008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) read(r1, &(0x7f0000000a00)=""/4096, 0x1000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b27, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}]}, 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0009"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) write$nci(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="400128003d000000a5d91edc71c421987791eb5edd4fb233351237faf0586379dfc1d0d501d4b7625c94ed66b46b5168e816a513d565c8be85fa6694258ff621679cc2eac125170f4904067486dcaa0bfd38e9de1fbae1dc5753c284c8a69a7ea4262038b959ee8492ef9cd8ab95de58342637f6a705aa68d53b1fc7b04dcf4014260433bf87b0b1592b5703cdb42af8888e856e172213b0f479a664f7dbad9ca3b69fe4ca6abe4445f656f339be05000400f800f809000000"], 0xb9) r10 = epoll_create(0xa67) read(r8, &(0x7f0000000140), 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f00000000c0)={0x10000000}) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) poll(&(0x7f0000000240)=[{r10, 0x110}], 0x1, 0x100) 5.399680098s ago: executing program 3 (id=2763): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1884c84cee00"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000003801000020696c2500000000002020207f1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f00000003c0)={0x3, 0x9, 0x8e, &(0x7f0000000300)=""/142}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@loopback]}}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) 5.14439496s ago: executing program 3 (id=2766): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x400002, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004"], 0x4c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r7, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r8, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r4) r9 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000180)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000980)}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1b, 0x8}}) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0xfffffffe}], 0x1, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x21, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000000000100000000e43249aac7f04b733316472ea842a5170822019089dd8e89f5b489844aa351d374fd0f69715e3d03d9c96ed8d5bc36749ac33330b7741642deb49c3b1bc28981", @ANYRES32=0x0, @ANYBLOB="00940000400000001800128009000100697069700000000008000280040013001400030074756e6c3000"/52], 0x4c}}, 0x1060) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000010000006d05000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000001f80), 0xfffffffb, r11}, 0x38) 4.889049912s ago: executing program 1 (id=2769): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 4.77480413s ago: executing program 1 (id=2771): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0xc, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x40c1) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="14a05ba25a8931c3f150f99d01aa019f4d3bd6c138260b44d9ffd0a7324995460921b3bb1d889141a461646d0742bda45dc66623468b251c68c8458f5dc3af32102a4da85d65910b6d9150709522bda062a27b8b93bddba4fce752b65aa9ee1a32f6127e78e4801ef8c40d4971dcfe4849ef72b3ea488af7b0f3d36e1dbaadd3bc721fee", 0x84}, {&(0x7f0000000240)="dcbfd618b56886ad2365f36a7975d47a0d15bf9f85c17e69cda603466abb11719ef7f4b494ba8d50da1271a4c4799d9cc17d", 0x32}], 0x2}}], 0x1, 0x4001) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', r2, 0x0, 0xff, 0x80, 0x7, 0x20, @rand_addr=' \x01\x00', @private0, 0x8, 0x0, 0x8000, 0xf9}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x84}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048000}, 0x81) r6 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000640)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000c80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000680)={0x5a0, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf8e}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0xf0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x10, 0x0, 0x2, 0x1ff}, {0xfff9, 0x8, 0x4, 0x10000000}, {0x1, 0xba, 0x7, 0xffff7fff}, {0x6, 0x3, 0x4, 0x7f}, {0xb, 0x5, 0x0, 0x1}, {0xd, 0x1, 0x30, 0x4}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1800, 0xdc, 0x5, 0x9}]}}}]}}, {{0x8, 0x1, r3}, {0x1a0, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x6, 0xff, 0x0, 0xfffffffe}, {0x1, 0xba, 0x4, 0x5}, {0x400, 0x0, 0x7, 0x8}, {0x94, 0xf, 0x9, 0x7}, {0x1000, 0x4, 0xe7, 0x2}, {0x2, 0x3, 0x6e, 0x10}, {0x7fff, 0x5, 0xad, 0x800}, {0xfffa, 0x3, 0x9, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r3}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}]}}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x20004000}, 0x1000) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000cc0)={{0x88, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x2, 'none\x00', 0x8, 0x9a5, 0x1e}, {@multicast1, 0x4e23, 0x0, 0x3, 0x9, 0x4}}, 0x44) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x1, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0xc00) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_buf(r9, 0x0, 0x26, &(0x7f0000000e80)="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", 0x1000) syz_80211_inject_frame(&(0x7f0000001e80)=@broadcast, &(0x7f0000001ec0)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x2}, @device_a, @broadcast, @random="7702165cba73", {0x5, 0x93}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x68}, @void, @val={0x72, 0x6}, [{0xdd, 0x2a, "62a9892603e01c2fecd93fa3b57ad51a772ce4bd368bc74555697016b4bebee1935972049ca1fb210b2b"}]}, 0x57) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000001f40), 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x110, r10, 0xbee20000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$alg(0x26, 0x5, 0x0) bind$inet(r0, &(0x7f0000002080)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002100)=@ipv6_deladdr={0x9c, 0x15, 0x800, 0x70bd29, 0x25dfdbfd, {0xa, 0x3f, 0x8, 0x0, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x6}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x1, 0x3, 0x28c588b8}}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x2, 0x9, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_RT_PRIORITY={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44841) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, 0x1410, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x30}}, 0x4004) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000002340), r11) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fc, &(0x7f0000002380)="a9906a014caab20d184f4cefb7391b3255b115026743f4f0e2b76585ca274c2fb75fbf719166ae4011fc04eed3230547636a1a22dfdc86b79601a7a77f2d75fd92d27d12918641aa805c1ae3647118f1fc9ba6140380841979286ca2417c459ff88dba65fa7b2863363e4467bcad54a2126c97d1fb24539cb929f8956be1932a56b71dcde5c9f045c9b3379f6600786222c90ce83a6dae4cb187ebcaded0ad9ebea9d9ac451985ea23977102f3110cf6249d39806a71699bd79cd2") r12 = socket$netlink(0x10, 0x3, 0x13) sendmsg$MPTCP_PM_CMD_GET_ADDR(r12, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0xbc, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0xbc}, 0x1, 0x0, 0x0, 0x54}, 0x20000009) 3.802043125s ago: executing program 3 (id=2778): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x76, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x68, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x1, 0x2, 0x0, 0xe7, {[@window={0x3, 0x3, 0x10}, @exp_fastopen={0xfe, 0x11, 0xf989, "4cd7aa429a88aea5638bf5579b"}, @md5sig={0x13, 0x12, "8d04ff892fba80178764e8e67254fe1d"}, @sack={0x5, 0x2}, @eol, @generic={0x3, 0xd, "75447c776f2659d823cd63"}, @fastopen={0x22, 0x3, "be"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x5, 0x7, 0xa, 0x40000003, 0xfffffffc, 0x6}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff7, 0x5, 0xffffe056, 0x9}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000200)=0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x46aa03, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 3.710610465s ago: executing program 2 (id=2780): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x28040680) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x0) 3.457695013s ago: executing program 2 (id=2781): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.389897109s ago: executing program 1 (id=2783): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYBLOB="041e97"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000010080)=[{0x50, 0x1, 0x3, 0x3}, {0x6, 0x0, 0x3}]}) write$ppp(r1, &(0x7f0000000400)='k\'', 0x2) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000640)=""/103, 0x67}], 0x3}, 0xc}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x90200, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x7, 0xe, 0x41, 0x7}, {0x79, 0x7, 0x0, 0x100}, {0xfffe, 0x5, 0x3, 0xb1f}, {0xe5, 0x1, 0xff, 0x9}]}) 3.085201134s ago: executing program 2 (id=2784): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000061020202020202010882848b960c121824"], 0x36) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000061020202020202010882848b960c121824"], 0x36) (async) 2.602539405s ago: executing program 1 (id=2785): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="cb", 0x1}], 0x1, 0x0, 0xe0}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000021c0)={'syztnl2\x00', &(0x7f0000002140)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x1, 0x5, 0x18, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7800, 0x8, 0x8c7}}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x12}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003f80)={'ip_vti0\x00', &(0x7f0000003e80)={'sit0\x00', 0x0, 0x10, 0x1, 0x10, 0x7, {{0x2d, 0x4, 0x1, 0x4, 0xb4, 0x67, 0x0, 0x4, 0x4, 0x0, @empty, @rand_addr=0x64010102, {[@generic={0x83, 0x7, "9c3e435fa3"}, @lsrr={0x83, 0x7, 0x46, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1f, 0x26, [@local, @loopback, @multicast2, @remote, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010101]}, @cipso={0x86, 0x18, 0x2, [{0x0, 0x12, "72246c63d1b0e32d7322daf04f3a5cbf"}]}, @timestamp_addr={0x44, 0x34, 0x77, 0x1, 0x3, [{@multicast2, 0x2}, {@remote, 0x5}, {@multicast2, 0x400}, {@multicast2, 0x80000001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2800}]}, @lsrr={0x83, 0x27, 0x19, [@local, @local, @rand_addr=0x64010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @private=0xa010101, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="ec8883a5a5044b12404dbda4854fad142b58007cff9c01aed8190acce1cb490aa0e640a1414dc82c162139dbce", 0x2d}, {&(0x7f0000000080)="39466f7b0b0c7f56c6e7d0e1a913558a82cd0a41def273a721196035d82cb4e10580c4438195eeb718cb2da3e29334f2d88356a609256f5aadf0c84db170f1802e62ee48c43c1ffba30a781c426ec86962807ef4e545ab6577b48a3ca1f2c5565ae06c83cfe7818531249e8726c80729a96d32c2c07b7c3217718ee6ae4b768de999b4f45b897bb2db0bce6fac5b412fbfa72e71e164d1e2fbfaba533ec7186c9854b511", 0xa4}, {&(0x7f0000000240)="535b843360efeb68244d54fcd9625f035caf54e0f83630f80f2b5c4ba51359dc94eb8a18b4616bce397069554ad669f9328f572b887649a686dc912ca71aee6f051396a8d9254198d30a85bb94cec7253c2c487b82d70078337a11fe22ce540e4c9950272061f6bb5890a621c5273857098586dec66c851458299371d5d2a42016e4f2e5063506ed0911c461bd2e20bae08145316076cb7fca3fb07bfc487fb2a9e08004bf4677761e81a102", 0xac}, {&(0x7f0000000300)="4c06f7acb9f6876251838a2d623f20e334af93fe110db4f9637707c55b63d5aeb3363011f2f9db9e8d02d50ce6de89b1429cd14796c5a7cb1f46f7befd1f97c39a9a288c46c660b294011937dc4442de12d7a9aa771e38e6efa4d13b09c63ba841998467d8adc0987f9b5c97bc85a1f285e51458df508b83d497fff304899bae92e3732e615b6d94a9e2eb717d067f2811f00150062f50dda105", 0x9a}, {&(0x7f00000003c0)="c138bf78f1b19c2814c7526baf7dde7193c70730e46d06f89a571d372e8893aaa163e224f1f14f2429bf2b6c75053cab0ca94405248c", 0x36}], 0x5}}, {{&(0x7f0000000540)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000580)="976a56e31a19611141605a2fcf92f98b11122bbfd620b18052bd4911abc9ca195cd3469e1bb065f01d0de371f113edc78e630addedd450956f4132948a56c8f333e93969db69f8cb08dcf9c465cb015db5d48c109166862bb3ef03f90cef8c9a944835994b4ea8e506c25cb7bf3ea5a0a98835281bf781982bc18aed438a8c34e71910fd3c4a853ebfd9adbc2d73be22efff75c7c228098e597d001d259c56a33e", 0xa1}, {&(0x7f0000000640)="10be", 0x2}, {&(0x7f0000000680)="5f1216616eef429d0eb6aec3688a19e35f6b510b0cebbca345f7694a3a59dc626828e512d376e5fd18002f77b90379b8d4f2cb63e0394dfe2fcb502c638ad338bdfb3f760f7c0a0486958e64dcde5b878276a376957cb73eb3ad2f7b8f910d5453054923caf70c7abcabefb6259f1da60f287f6bfbdb740de913a4f25131afa32012575d4419f23abdc901f7ac5686b644463a7b7799cc8efbe91e361767c26a42e653aa6e49adfa69ef2772ec2e598836fdb3a4e71033bd2ba00bdbd1170128fc6eb6a2ec70915adbbfacb7ccf0abbcf85da8bdb7eb5e9730eb87aba624e4d74ba5bf9dd7899d", 0xe7}, {&(0x7f0000000780)="74754410e0a1958761f25d84b01cca9d03c9", 0x12}, {&(0x7f00000007c0)="6ce32e42baf7e3ed68e658bb49077c2ed27f23acb189fb3509fdc04bafdc9f665d253d7e28b4b763dbdc2ce70d1b7563a39d106a7f973b4e92bdb180cad351c0fe5ac778b07739199d8ab2a0e82b568e5cd46c8d22ea3ddd65711a3e704f4e5c6106ab879478e583e78e914e34a2e0c8cf8d127e3bd5672020410f179e330411b06d165964d801d40f65064ad27ae4dc51060336494f943e1bfae93576fce902935f884c5f072dd62f16ef9c1e17c4a0d945609db40e10e017514c0a41d3fd6fbae266cc469e732246e8ea772b8c5169bf710d1a806d06cc64a07ada5c1cbc0db99f6a4ebbab7e79c1a10ed85bfb3c", 0xef}, {&(0x7f0000000900)="df2f1565cbbd867a04ee", 0xa}, {&(0x7f0000000940)="19bd9b59ed2df3bb3a85a8db2e6950", 0xf}], 0x7, &(0x7f0000000a40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @ssrr={0x89, 0xb, 0x1e, [@private=0xa010102, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5ebe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x68}}, {{&(0x7f0000000ac0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000000b00)="3dfe78ec14071a78a6388dc25e1adf3eee6eebcefc112cdaec1c20dda6fb6931bbcd58b7947f3589c9def7db898e7f4231f8732552b1bb6438217186d0a2acbce6a339793a9e260003dbb633ad5d4e1d994c457a45c55999c4b0884d12545770850902ffe1dcbf6b8adc456a2bb02519f3df8e8368ac1a8b9dc340032fe0f1a37fe262d2c82113810b598ddcc85d3bf58ad1c96b5f995f408a2da17187b3a27251ffdae6c655770c75aabf", 0xab}, {&(0x7f0000000bc0)="bea6d60c5d8a9e5e13c62776a276da0cc69750bb4ffed43e27796525b4b7ff8051ebe44d277e27a2d7eb53f54a3770f99da97b4ed7f49ad6b5c1d5aac5d18367154d16cda7b058925229398f604ead4274fbcac4b24b9c63eed6f5eb0c4e0bdfc3ce8e6c4132e3f8f4825efff3d6c9da48b2be111b9d58f74736d8ad68d0ba4562c757f84b816b4be21065f5c605f7fef222e04162f2bc8d004d21e9a13c592162ab17ad1ce9f173b7c48bb57b9e5f04ebaaf106da686482a3bf0adeeef99d61b0b9", 0xc2}, {&(0x7f0000000cc0)="9677c75fa6fa1b2b7a0d0b79f5a6065dca59cfcc3bcdacdadf3633f2a211953bc6abcaf522e711a45f57ad3a8dfb8d0713baf4d87b3a7363186d70b536d2d94c39eef32ca6236546de5cb46397eb36aa1299af3f2a177480e349d87b817ab688959c48606d624f9de04351ea105df267a7eb2e6f3c8ccdd0a6532d075749e69d939f19507763e48221cdbffb3b57f6fdbd", 0x91}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="17ad285ed074e8", 0x7}, {&(0x7f0000001fc0)="bc88744e78b48462480dc01054fd240b424ae23b2e27b0ba2dc80612422de1a0a11107c223a73ed539d346ac38bdbe0aeb92d8e9236c7404a73056b3fd8cd3f15383285fd7fee6e754a866f2f43f36e284f52dc67f948926ce515dfc4c0ed3b25b2c7704f5265c2fa68234854bfd68125d53c1e026ad9eb080c69e9dc88ba21021912f886d7a0d0761cb78b663d1336f20c6e4183e800fcd5ef5794c8ac3da1a9746ef19ab4b621158dece4925193cab9361d2cc32c882652d31106b8f62e03c4ff99088b5ee7b5b6da42649d5a9ccfb933eb6f89df4b916ec8b3a88", 0xdc}], 0x6, &(0x7f0000002200)=[@ip_retopts={{0x68, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0x6e, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @private=0xa010102]}, @end, @timestamp={0x44, 0xc, 0xea, 0x0, 0x5, [0xcc53, 0x8]}, @lsrr={0x83, 0x1b, 0x1e, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000003780)='>>', 0x2}, {&(0x7f00000037c0)="198c9c960e81739702930eb09502fa85520974dd50ce70d2ace78bd0193e23215a279d7f6cd90a1943cbf22b49e111275af46d34589c9544199e398fd47cc4cd9780e92d96a887ca84932b5b40d3021b4d801a2ad69a22447c2d7cd20ed321c456cb311a4f7e301a2f848af8a9e0379855745b2e7f77530194c692e3d330f8f57d3d4820e5f9d3c015cb7d2fde3788dc3ce75efa9ea58f72d3c1765576f4efba49159dbc4fbb99f852d6dce9b8160d3bcb74", 0xb2}, {&(0x7f0000003880)="31e6dd5a600be1fb8e6b0c50b1215c971f147b69f6ab2b125f879ed5a80f7df5c8a359eec5c6d77aa012ac263f7715e4f7634c61c588b55b7be96b4b90cd1509b95b77ae3c9d26b4a38c143a27b781982d0e9504b35896c4969bab432d08433e203fc1a06ee954a0d95575693867a5108208f0a4a2c8e83c667c3823f3acdcad96c74e8e", 0x84}, {&(0x7f0000003940)="f7e0348abdbd71957f475c53272fddde0cfb97006f46d1bca9db43a5b402917711fffaf4dbfda44f860540fc2bd94ad3d3d1a34ab8f25845700f386dd13bb10cc1c2fdcf9a2542b042f67f0d0627349e4efbc3738d435b687a014f6bf44851392d121aa53d60d4051034ba2e7afd0bbc259ce312e786c55b9464c3f011d8ec1b705eed2aea303b69df7aa7c97de9562daedf5c52b657defa1add85de8b2de3a6b25200b072bc740fa5698f81e55d6eddd741f0b40afafdc5a21995ea3bf209818699b34eaf526fd6d0cfdcbe488c0d83e21314c79e2950ce146175eae1528e4508e4db5f2b", 0xe5}, {&(0x7f0000003a40)="88c173f5e2c6fa", 0x7}, {&(0x7f0000003a80)="2a3dfcd7c0f078df7f348b766cb8911aed134868f40fe8132b03ce96a42dba08cf2a4cf1da07e59607785f2a6e1b3a79adb08d0bdce03e1d724638c3b2277a", 0x3f}], 0x7, &(0x7f0000003b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}, {{&(0x7f0000003b80)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000003c00)=[{&(0x7f0000003bc0)="c466faeed2e958c3085a9a4dd73b98ac40b6091b13c85af47771f11102cbd4fe1fa3910c302d6725588aaba03379375bf6d01990466039dd", 0x38}], 0x1, &(0x7f0000003c40)=[@ip_retopts={{0x64, 0x0, 0x7, {[@cipso={0x86, 0x46, 0x0, [{0x6, 0x7, "bae1327b3b"}, {0x1, 0x2}, {0x5, 0x5, "3c97d0"}, {0x7, 0x7, "5cb3e5d2c6"}, {0x1, 0x12, "3c12e8c017dbc19894d47ec31de0f407"}, {0x2, 0x4, "dee1"}, {0x5, 0x9, "073b70bed02b1b"}, {0x6, 0xa, "eb507c73eca4e7db"}, {0x0, 0x2}]}, @lsrr={0x83, 0x3, 0x5a}, @rr={0x7, 0xb, 0x5b, [@empty, @remote]}]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0xd5, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x2}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x1000}, {@local, 0x3}, {@local, 0x2}, {@multicast1, 0x10001}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x3}, {@loopback, 0x3}]}, @noop, @lsrr={0x83, 0x17, 0x44, [@private=0xa010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}]}}}], 0xe0}}, {{&(0x7f0000003d40)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003e40)=[{&(0x7f0000003d80)="614e19d881b5d8e3bf8e034bb1452d23c0ad324b1f85bebeaffe87bf6fae802a1f74821ce86d9fd7bd56baa0c57307680bc43230f3a540f46e7c4b16275fad01c0288675b6f6d2f64b79388fbe7dc567d30396b261", 0x55}, {&(0x7f0000003e00)="8b13eb4ecda502d3664dee9f6ce60dbb33a1d287d4aade0e5ebafdca168e3551e3a79cd7dc7472c1dab08823912c0c7dc545556d", 0x34}], 0x2, &(0x7f0000003fc0)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x2c, 0x0, 0x4, [0x5, 0x0, 0x8, 0x2790]}, @lsrr={0x83, 0x13, 0xb3, [@remote, @remote, @multicast1, @multicast1]}, @timestamp={0x44, 0xc, 0x5f, 0x0, 0x7, [0x6, 0xb]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xd8, [@private=0xa010100, @loopback, @private=0xa010102, @loopback]}, @timestamp={0x44, 0x18, 0xae, 0x0, 0x3, [0x4, 0x10001, 0x538, 0x80, 0xa]}, @generic={0x7, 0xb, "103bec9ee0c4bc4730"}, @timestamp={0x44, 0x10, 0x83, 0x0, 0xe, [0x3, 0x9, 0x7fffffff]}, @timestamp={0x44, 0x18, 0x19, 0x0, 0x9, [0x3ff, 0x0, 0x2, 0xe, 0x2]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010102, @remote}}}], 0x130}}], 0x6, 0x4000008) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) 2.524626585s ago: executing program 1 (id=2786): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf2502", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2504000000140001800800050000000000060001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) connect$llc(r3, &(0x7f0000000100)={0x1a, 0xf, 0x89, 0x6, 0x6, 0xf, @random="000000001df4"}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r7 = socket$netlink(0x10, 0x3, 0x8) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) listen(r8, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000408010400000000000000000a0000080600024000f50000050003003a000000504e155ffb525a05b16d4d89b134ed2bfdd7c4ae37685167db7be6a7da4261c9a542e55012b3c7b1eaccb57921d923a978fdf01c9903b6cd03066a95a59b7defddbb7cd1347c8812c8f49687ca5107a80a82f24484699ac008a5b86fb07307d33525cd04eee513314925a53781d72911d89d2481f45f22993ce708f4fc8b7c996da19cbe95556819699714d99923d03552ee70ed55b3313516ab2b11008f11ee37fc99045447c3a76c09f1ef5c734c54992bbac85c1d44803cdfbb495bc9a3eb6649915527f8308217c349f715a561dd6c3b6a09c44ea6470b66ec6dbd041e2af480c48f1e4b0786616664428037cab5e7bfbbc4a0e528f1b28f8be6cbd1fcc7aab67208054c46525325db7ea747cf53ac35582e3986639b271569f2d4858ae9aa389119e4c9d176f5"], 0x24}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) 2.261373192s ago: executing program 4 (id=2790): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000011000000180100002020732500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000540)='GPL\x00', 0x9, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mmap(&(0x7f00009c6000/0x2000)=nil, 0x2000, 0x3, 0x28012, r0, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000011000000180100002020732500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000540)='GPL\x00', 0x9, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) mmap(&(0x7f00009c6000/0x2000)=nil, 0x2000, 0x3, 0x28012, r0, 0x1000) (async) 2.06475328s ago: executing program 2 (id=2792): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002000)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc1f5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000300)=0x10000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x6, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r3, @ANYRES8], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x38, 0xe, 0x0, &(0x7f0000000240)="9f1051d9d75b2bbc2fc4ff030000", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r9, @ANYBLOB="2bdd753a0d6279d93b5c21c03953f1f385e55ac888c7b8583c9bff8b6f1e06a8ed53d7924532", @ANYRES64], 0x128}, 0xc810) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4101, 0x1005}, 0x0) socket(0x27, 0x80000, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) 2.062737699s ago: executing program 4 (id=2793): getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000181a0000", @ANYRES32=r0, @ANYBLOB="00000000000000005d93000000000000b503020000000000850000000c000000ce00fdff0000000095"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008100)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bdaa, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x2, 0x5}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xffea, 0xa9, 0xffffff00}, 0x91, 0x10001, 0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000001780)=[{&(0x7f0000000240)=@in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000280)="3d5eead455ede946e9a1990d8ea68486", 0x10}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000000000000000000000000118"], 0x38}], 0x1, 0x810) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x50}, 0x4048010) write$tun(r2, &(0x7f0000000140)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @multicast, @rand_addr=' \x01\x00', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x34) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r12 = socket(0x10, 0x803, 0x0) tee(r11, r12, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.5532622s ago: executing program 0 (id=2795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x24, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 1.333504011s ago: executing program 4 (id=2796): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket(0x10, 0x803, 0x7) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r5 = socket(0x1e, 0x80000, 0x1) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e22, 0x4, @empty, 0x2}, 0x1c) listen(r4, 0x80000003) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r7, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048800}, 0x4000010) sendto$packet(r0, &(0x7f0000000580)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r7, 0x1, 0xe9, 0x6, @local}, 0x14) 1.243213839s ago: executing program 4 (id=2797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xd, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x24040004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x7f62c4469923ede5}, 0x14}}, 0x0) 1.192470587s ago: executing program 4 (id=2798): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x28, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x82b71f51}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb50f}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfcd6}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2004) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x6}, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$unix(0x1, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 1.08133236s ago: executing program 0 (id=2799): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000047fd5a381ce9399f08a3190ea73b9c00001800000018000000040000000200000000000efc000c020000e2d131b9eba256a9bf912fef1942eb3fab0934c7c3607d9e3b32e4c7b76ad77de6bcd8875e455f5d6e4141bcba6ab45c678aa023e363be525f4b92caba"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000040f8d2e0ff86f6ac620cf5221bba2e9459c942a3cf425759bb5db952c7c7a7c35785fe504b38b702b6530b37a4095e7270eb878eb2ce91d39963fbf468cbf4fb12d65c124406c35099bfed4c4313f3170ca7b8eb1832caccbe59999a5604945d25f91f5b013ea5d4c09597b31297021fc082a1483742ff9fc7ab418d740cb19c5df5ae9c6819653d396f29bf2f75d0cc0e2b11edc613aa34c965b7fc2bf93c4be446ec752cfb4855e89"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x3, 0x0, 0x23, 0x0, 0x0, 0x2}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000980)={{{@in=@remote, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x81000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x6e6bb1, 0x1}, {{@in=@remote, 0x4d5, 0x6c}, 0xa, @in6=@mcast2, 0x3501, 0x4, 0x8, 0x0, 0x9072, 0xc, 0x7}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r4, 0x0, 0x2b, &(0x7f00000003c0)=""/78, &(0x7f0000000440)=0x4e) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002240)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140005800f0001"], 0x4c}}, 0x0) 885.928744ms ago: executing program 4 (id=2800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480)=0xffffffff, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073697a320000000008004100736977001400330073797a6b616c6c657230000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) recvmmsg(r7, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xff0}], 0x3, 0x0, 0xfffffc5a}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r5, 0x4, 0x81}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = epoll_create(0xea3) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000380)={0xb0000001}) connect$inet(r10, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) bind$llc(r9, &(0x7f00000000c0)={0x1a, 0x206, 0x2, 0x8, 0x8, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0fe00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x54}, 0x48) 840.248455ms ago: executing program 0 (id=2801): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x5, 0x610, 0x1, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "a539762859e11a17"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x54, 0x1403, 0x1, 0x70bd2a, 0x3, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x20000806) 688.926738ms ago: executing program 0 (id=2802): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) 612.953627ms ago: executing program 0 (id=2803): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r3}, 0xc) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1900000004"], 0x50) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000a40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20040084}, 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, 0x0, 0x25, 0x0, @val=@tcx={@void, @value=r7}}, 0x1c) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0xff}, {0x3, 0x0, {0x0, 0x1, 0x6}, {0x0, 0xf0, 0x1}, 0x0, 0x1}], 0x40) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf25150000001800018014000200776c616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r10, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000088) r11 = accept4(r2, 0x0, 0x0, 0x800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0x2f, [0x7fefffff, 0xffffffff, 0x3, 0x1, 0x3, 0x5, 0x7, 0x0, 0xa4d, 0x0, 0x7, 0x4, 0xe, 0x4, 0x5, 0x2, 0xa8, 0x10001, 0xb, 0xc2, 0x0, 0x6, 0x7, 0xa4, 0xfdff, 0x2a, 0x4, 0x5, 0x5, 0x6, 0x0, 0x0, 0xfffffffd, 0x3, 0x4, 0xcb, 0x401, 0x8000, 0x7fff, 0x9, 0x80000001, 0xd, 0xe82, 0xffffffff, 0x28b5, 0xfffffffa, 0x2, 0xfffffffe, 0x6, 0x7, 0xff, 0x3, 0x80000001, 0x1, 0x100, 0x8, 0x4, 0xa0, 0x3335a578, 0x800, 0x6, 0x0, 0xff, 0x4, 0x400, 0x3, 0x5, 0x10, 0x90, 0x7, 0x38, 0xffff0000, 0xfffffffe, 0x6, 0xd09, 0x2, 0x3, 0xfff, 0x2, 0x4, 0x2, 0x3, 0x9, 0x5, 0x2, 0xc55b, 0xc, 0x62, 0x8, 0xfffffff8, 0x3, 0x4, 0x4, 0x583, 0xef5, 0x0, 0x0, 0x1, 0x8, 0x0, 0xfffffffc, 0x1000, 0x3, 0xfff, 0x7, 0x3, 0x9, 0x9, 0x8, 0x1, 0x2, 0x7, 0xd, 0x7ff, 0x0, 0x0, 0x0, 0xb53, 0xff, 0xfffffffd, 0x5, 0x3, 0x101, 0x2, 0xe17, 0x5]}}) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r13, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r14, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0xa8, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5f0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5d8c9978}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 240.144748ms ago: executing program 2 (id=2804): r0 = socket$packet(0x11, 0xa, 0x300) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40080c0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0xa7251000) 206.822381ms ago: executing program 3 (id=2805): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) 206.300087ms ago: executing program 0 (id=2806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000000)='\xa1]!/[@/))#,*\x00', 0x1, &(0x7f0000000100)={@_ha_fsid={[0xaa, 0x1]}, {0x2a9, 0x101, 0x0, 0x3}}, 0x800, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x80000000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)="cd202b1cfb0142d3df5ec00614e30523ee3315096749b87b021f7423230cdd8e49ff78d20fd05446fd664ea2da53b5e720c50a9bab89ef0592a8cddb5579b7", 0x3f, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0x700, {0x0, 0x0, 0x0, r7, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48084}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000b000236c5b301b2fb0c7400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x1, 0x80, 0xb0b, 0x8, {{0xe, 0x4, 0x2, 0x8, 0x38, 0x65, 0x0, 0x2, 0x29, 0x0, @loopback, @private=0xa010101, {[@timestamp_prespec={0x44, 0x24, 0xe6, 0x3, 0x4, [{@local, 0x800}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xffff9090}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x401}]}]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xde09c06f801dc930}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r14 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1001a29d}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004094}, 0x42) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x8001, 0x10001, {{0xa, 0x4, 0x3, 0x2e, 0x28, 0x65, 0x0, 0xd, 0x2f, 0x0, @private=0xa010101, @loopback, {[@rr={0x7, 0x7, 0xf7, [@multicast1]}, @ssrr={0x89, 0xb, 0x48, [@private=0xa010102, @private=0xa010100]}, @end]}}}}}) 130.266475ms ago: executing program 3 (id=2807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xfff, 0x3}, 0x50) syz_emit_ethernet(0x72, &(0x7f0000000440)={@multicast, @random="fd137b07daa7", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "8d0022eb00000000d9dedb35"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 32.79243ms ago: executing program 2 (id=2808): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) poll(&(0x7f0000000240), 0x0, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400080005000000007f7b000000dfb3abc3776368172758964df5b89393bff06dfad5973366adec27d459d4fbef29cde2a20535eaca08a24357a7c23ed48135254ccfaa979952875310d86e34d6ac7b46d8fa9b6efcfa7508808d4fcad2597515ac390853a6886aed95e6042be4abb9ad9c3b441c0e0000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000fcffffff0200"/28], 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan3\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001f00)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80a0}, 0x4048800) unshare(0x8000400) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40845}, 0x8404) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e055ea6b381339df60d4a35faa951e8348a47dd45ef5756622cc0eecc8124134f95f", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac1414aa"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r3, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="38000000f0ff040025c27000137b9be200000080", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b0000000000080029000000010008000d0080000000"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 0s ago: executing program 3 (id=2809): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0541000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f81a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4540c0", 0xda}], 0x1}, 0x894) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0541000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f81a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4540c0", 0xda}], 0x1}, 0x894) kernel console output (not intermixed with test programs): h. [ 360.283549][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 360.535542][T11855] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 360.638145][T11858] tap0: tun_chr_ioctl cmd 1074025676 [ 360.690177][T11858] tap0: owner set to 0 [ 360.833289][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 361.106139][T11874] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1540'. [ 361.119702][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'. [ 361.214358][T11886] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1544'. [ 361.410574][T11892] syzkaller0: entered promiscuous mode [ 361.422502][T11892] syzkaller0: entered allmulticast mode [ 361.433350][T11893] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 361.451473][T11893] syzkaller0: entered promiscuous mode [ 361.460210][T11893] syzkaller0: entered allmulticast mode [ 361.611565][T11892] tipc: Enabled bearer , priority 0 [ 361.618626][T11901] IPVS: length: 176 != 8 [ 361.662545][T11901] dvmrp8: entered allmulticast mode [ 361.872974][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 362.504720][T11890] tipc: Resetting bearer [ 362.712313][T11936] wlan0: left promiscuous mode [ 362.717422][T11936] wlan0: left allmulticast mode [ 362.776144][T11936] geneve2: left promiscuous mode [ 362.781513][T11936] geneve2: left allmulticast mode [ 362.791031][T11936] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 362.799844][T11936] ip6gre1: left allmulticast mode [ 362.813425][T11936] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.820887][T11936] bond2: entered allmulticast mode [ 362.826184][T11936] macvtap1: left allmulticast mode [ 362.852996][T11936] bond2: left allmulticast mode [ 362.858469][T11936] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 362.869877][T11936] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 362.879871][T11936] hsr1: left promiscuous mode [ 362.913757][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 362.951667][ T139] tipc: Resetting bearer [ 363.069760][ T3337] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.080749][ T3337] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.093370][ T5625] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.182556][ T3337] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 363.198239][ T3337] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 363.206422][ T5625] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 363.220487][ T5625] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.413915][ T189] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.886518][ T3368] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.932892][ T3368] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.941706][ T3368] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.953321][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.954860][ T189] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 363.955183][ T189] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 364.146101][ T3368] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.993391][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.852904][T12049] __nla_validate_parse: 1 callbacks suppressed [ 365.852952][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 366.033042][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.047475][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 366.186034][T12060] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1586'. [ 366.195978][T12060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.229866][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 366.240073][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 366.277636][T12067] siw: device registration error -23 [ 366.718131][T12086] SET target dimension over the limit! [ 366.913753][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 367.073780][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 367.450532][T12114] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 367.492291][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'. [ 367.676956][T12120] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 367.695037][T12120] bond11 (unregistering): Released all slaves [ 367.721154][T12122] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1603'. [ 367.805155][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1603'. [ 367.839986][T12104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1600'. [ 367.866559][T12106] bridge4: entered promiscuous mode [ 367.915484][T12106] bond10: (slave bridge4): making interface the new active one [ 367.924413][T12106] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 368.112876][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 368.589758][T12164] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 368.829955][T12172] syzkaller1: entered promiscuous mode [ 368.892891][T12172] syzkaller1: entered allmulticast mode [ 369.073173][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.080470][T12185] bridge0: port 1(() entered disabled state [ 369.153517][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.211149][T12185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.353618][T12185] bond2: left promiscuous mode [ 369.358487][T12185] bridge3: left promiscuous mode [ 369.363780][T12185] bond2: left allmulticast mode [ 369.368672][T12185] bridge3: left allmulticast mode [ 369.380841][T12185] bridge5: left promiscuous mode [ 369.387085][T12185] bridge5: left allmulticast mode [ 369.408329][T12185] tipc: Resetting bearer [ 369.415462][T12185] syzkaller0: left promiscuous mode [ 369.420721][T12185] syzkaller0: left allmulticast mode [ 369.957513][T12241] netlink: 'syz.4.1628': attribute type 9 has an invalid length. [ 369.965317][T12241] netlink: 'syz.4.1628': attribute type 5 has an invalid length. [ 370.030773][T12241] IPVS: rr: FWM 3 0x00000003 - no destination available [ 370.193001][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.304358][T12244] syzkaller0: entered promiscuous mode [ 370.318470][T12244] syzkaller0: entered allmulticast mode [ 370.328766][T12253] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 371.233253][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.011575][T12277] Unsupported ieee802154 address type: 0 [ 372.021227][T12277] __nla_validate_parse: 5 callbacks suppressed [ 372.021248][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 372.038074][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 372.048730][T12277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1639'. [ 372.049079][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1639'. [ 372.280091][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 373.313235][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 373.621825][T12253] lo speed is unknown, defaulting to 1000 [ 374.197341][T12310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1648'. [ 374.353374][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.771310][T12342] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1656'. [ 375.374018][T12360] macvlan0: entered promiscuous mode [ 375.393274][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.632318][T12372] netlink: 'syz.4.1663': attribute type 1 has an invalid length. [ 375.640259][T12372] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1663'. [ 375.649584][T12372] netlink: 'syz.4.1663': attribute type 1 has an invalid length. [ 375.657345][T12372] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.1663'. [ 375.679419][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 375.708763][T12357] syzkaller0: entered promiscuous mode [ 375.757120][T12357] syzkaller0: entered allmulticast mode [ 376.273586][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 376.273616][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 376.432958][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.921575][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 377.483407][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.512849][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.843392][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.553219][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.592865][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.399099][T12386] tipc: Enabled bearer , priority 0 [ 381.549287][T12386] tipc: Disabling bearer [ 381.603725][T12420] netlink: 'syz.3.1673': attribute type 41 has an invalid length. [ 381.633581][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.645308][T12420] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1673'. [ 381.705689][T12356] macvlan0: left promiscuous mode [ 381.874648][T12429] xt_hl: Unknown TTL match mode: 237 [ 381.939171][T12431] netlink: 'syz.3.1677': attribute type 9 has an invalid length. [ 381.970495][T12425] bridge6: entered promiscuous mode [ 381.975790][T12425] bridge6: entered allmulticast mode [ 382.057862][T12425] team0: Port device bridge6 added [ 382.166936][T12437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1678'. [ 382.210902][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1678'. [ 382.229136][T12423] bridge7: entered promiscuous mode [ 382.262192][T12423] bridge7: entered allmulticast mode [ 382.272791][T12423] team0: Port device bridge7 added [ 382.342539][T12439] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 382.646750][T12455] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1683'. [ 382.672984][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.707593][T12458] sctp: [Deprecated]: syz.4.1686 (pid 12458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.707593][T12458] Use struct sctp_sack_info instead [ 382.751557][T12462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1685'. [ 383.144526][T12474] syzkaller0: entered promiscuous mode [ 383.180623][T12474] syzkaller0: entered allmulticast mode [ 383.573912][T12483] lo speed is unknown, defaulting to 1000 [ 383.713631][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.066088][T12494] netlink: 'syz.2.1695': attribute type 1 has an invalid length. [ 384.093827][T12494] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1695'. [ 384.272927][T12509] netlink: 'syz.4.1697': attribute type 1 has an invalid length. [ 384.281073][T12505] netlink: 'syz.4.1697': attribute type 1 has an invalid length. [ 384.561258][T12512] macvlan0: entered promiscuous mode [ 384.752849][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.956955][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 385.172442][T12513] syzkaller0: entered promiscuous mode [ 385.188804][T12513] syzkaller0: entered allmulticast mode [ 385.206038][T12518] macvlan0: entered allmulticast mode [ 385.214193][T12518] veth1_vlan: entered allmulticast mode [ 385.244219][T12524] veth1_vlan: left allmulticast mode [ 385.793213][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.832841][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.850477][T12536] netlink: 'syz.3.1705': attribute type 1 has an invalid length. [ 387.873240][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.923265][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.953458][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.478525][T12536] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 390.993299][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.124593][T12555] syzkaller0: entered promiscuous mode [ 391.130903][T12555] syzkaller0: entered allmulticast mode [ 391.170404][T12555] tipc: Enabled bearer , priority 0 [ 391.179254][T12553] tipc: Resetting bearer [ 391.206084][T12553] tipc: Disabling bearer [ 391.415716][T12563] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1713'. [ 391.433128][T12563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1713'. [ 391.449151][T12563] geneve0: entered allmulticast mode [ 391.897104][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1716'. [ 391.983581][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1717'. [ 392.033623][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.213412][T12588] macvtap2: entered promiscuous mode [ 392.218797][T12588] dummy0: entered promiscuous mode [ 392.224907][T12588] macvtap2: entered allmulticast mode [ 392.230347][T12588] dummy0: entered allmulticast mode [ 392.503496][T12608] syzkaller0: entered promiscuous mode [ 392.519446][T12608] syzkaller0: entered allmulticast mode [ 392.551880][T12608] tipc: Enabled bearer , priority 0 [ 392.560449][T12607] tipc: Resetting bearer [ 392.630595][T12607] tipc: Disabling bearer [ 392.709197][T12601] tipc: Enabling of bearer rejected, failed to enable media [ 392.872244][T12616] lo speed is unknown, defaulting to 1000 [ 392.899862][T12618] lo speed is unknown, defaulting to 1000 [ 393.072983][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 393.264944][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1728'. [ 393.332149][T12636] ip6_vti0: Master is either lo or non-ether device [ 393.357490][T12634] lo speed is unknown, defaulting to 1000 [ 393.528325][T12646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1731'. [ 393.553170][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 393.785557][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1733'. [ 394.115045][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.208906][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 394.393495][T12679] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1741'. [ 394.475598][T12683] netlink: 'syz.3.1742': attribute type 16 has an invalid length. [ 394.833006][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 394.900848][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1746'. [ 395.152861][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.300746][T12688] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.818942][T12688] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.193586][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.300108][T12732] vlan2: entered allmulticast mode [ 396.305507][T12732] bond0: entered allmulticast mode [ 396.329543][T12688] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.592669][T12688] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.683877][T12746] __nla_validate_parse: 2 callbacks suppressed [ 396.683897][T12746] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1757'. [ 396.855789][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1760'. [ 396.942892][T12756] lo speed is unknown, defaulting to 1000 [ 397.000826][ T6833] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.075390][ T6833] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.127468][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.176206][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.232903][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.614477][T12772] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1764'. [ 398.049453][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 398.273159][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.341764][T12784] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 398.492426][T12784] bond11 (unregistering): Released all slaves [ 398.598271][T12760] ip6gretap0: left promiscuous mode [ 398.607480][T12760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.615961][T12760] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.625543][T12760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.717040][T12760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.729430][T12760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.739837][T12760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.755559][T12760] veth1_vlan: left promiscuous mode [ 398.762155][T12760] veth0_vlan: left promiscuous mode [ 398.769202][T12760] veth0_vlan: entered promiscuous mode [ 398.790062][T12760] veth1_vlan: entered promiscuous mode [ 398.805945][T12760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.814354][T12760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.822657][T12760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.831608][T12760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.857131][T12760] veth0_to_team: entered promiscuous mode [ 398.866082][T12760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.875958][T12760] ip6gretap0: entered promiscuous mode [ 398.876554][T12802] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20002 [ 398.882654][T12760] 8021q: adding VLAN 0 to HW filter on device bond2 [ 398.916176][T12760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 398.927744][T12760] 8021q: adding VLAN 0 to HW filter on device bond4 [ 398.936568][T12760] 8021q: adding VLAN 0 to HW filter on device bond5 [ 398.946434][T12760] tipc: Resetting bearer [ 398.957799][ T13] bridge0: port 1(() entered blocking state [ 398.963948][ T13] bridge0: port 1(() entered forwarding state [ 398.977730][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.984934][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.087880][T12807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1769'. [ 399.153811][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.186073][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.205106][T12798] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1767'. [ 399.255008][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.269394][T12815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1771'. [ 399.281736][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.313500][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.315154][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1769'. [ 399.437558][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.447284][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.464247][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.473960][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.632812][T12824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.879468][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1778'. [ 400.353294][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.981824][T12867] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 401.174115][T12871] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1784'. [ 401.257189][T12883] bond8: entered promiscuous mode [ 401.263626][T12883] 8021q: adding VLAN 0 to HW filter on device bond8 [ 401.289624][T12883] ipvlan2: entered allmulticast mode [ 401.295001][T12883] bond8: entered allmulticast mode [ 401.311671][T12883] ipvlan3: entered allmulticast mode [ 401.378567][T12890] netlink: 'syz.1.1785': attribute type 1 has an invalid length. [ 401.392845][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.434541][T12890] 8021q: adding VLAN 0 to HW filter on device bond5 [ 401.561737][T12890] bond5: (slave veth7): Enslaving as an active interface with a down link [ 401.643795][T12890] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 401.654514][T12890] bond5: (slave batadv1): making interface the new active one [ 401.664599][T12890] batadv1: entered promiscuous mode [ 401.672053][T12890] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 402.055034][T12913] __nla_validate_parse: 6 callbacks suppressed [ 402.055080][T12913] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1796'. [ 402.102431][T12914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1796'. [ 402.297279][T12922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1798'. [ 402.433525][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.495308][T12921] syzkaller0: entered promiscuous mode [ 402.501022][T12921] syzkaller0: entered allmulticast mode [ 402.524287][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 402.535707][T12909] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20002 [ 402.547983][T12909] netlink: 'syz.4.1795': attribute type 21 has an invalid length. [ 402.557261][T12909] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1795'. [ 402.715560][T12909] netlink: 'syz.4.1795': attribute type 5 has an invalid length. [ 402.736485][T12909] netlink: 'syz.4.1795': attribute type 6 has an invalid length. [ 402.758070][T12909] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1795'. [ 402.825292][T12928] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 402.866981][T12929] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 403.472934][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.544516][T12948] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 403.673508][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 403.688438][T12929] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.697098][ T10] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 403.887248][T12948] 8021q: adding VLAN 0 to HW filter on device bond11 [ 403.982340][T12951] bridge0: left promiscuous mode [ 404.010583][T12951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.040034][T12951] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.070572][T12951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.188060][T12951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.215127][T12951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.244078][T12951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.292157][T12951] veth1_vlan: left promiscuous mode [ 404.306696][T12951] veth0_vlan: left promiscuous mode [ 404.327358][T12951] veth0_vlan: entered promiscuous mode [ 404.370550][T12951] veth1_vlan: entered promiscuous mode [ 404.432385][T12951] veth1_macvtap: left promiscuous mode [ 404.433398][ T5626] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 404.458084][T12951] veth0_macvtap: left promiscuous mode [ 404.500091][T12951] veth0_macvtap: entered promiscuous mode [ 404.513270][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.538760][T12951] veth1_macvtap: entered promiscuous mode [ 404.673394][ T5626] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 404.826242][T12951] ip6gre1: left promiscuous mode [ 404.835782][T12951] ip6gre1: left allmulticast mode [ 404.845254][T12951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.887944][T12951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.902618][T12951] gretap1: left allmulticast mode [ 404.918468][T12951] bond3: left promiscuous mode [ 404.931685][T12951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.957252][T12951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 404.976484][T12951] bond5: left promiscuous mode [ 404.987587][T12951] bond5: left allmulticast mode [ 404.993821][T12951] 8021q: adding VLAN 0 to HW filter on device bond5 [ 405.035494][T12951] 8021q: adding VLAN 0 to HW filter on device bond8 [ 405.050544][T12951] 8021q: adding VLAN 0 to HW filter on device bond10 [ 405.059193][T12951] bridge4: left promiscuous mode [ 405.071360][T12951] 8021q: adding VLAN 0 to HW filter on device eth0 [ 405.086612][T12951] 8021q: adding VLAN 0 to HW filter on device eth1 [ 405.098365][T12951] 8021q: adding VLAN 0 to HW filter on device eth2 [ 405.108946][T12951] 8021q: adding VLAN 0 to HW filter on device eth3 [ 405.128440][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.135737][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.176494][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.183764][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.346258][T12975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1809'. [ 405.457104][ T3368] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.457740][ T10] lo speed is unknown, defaulting to 1000 [ 405.475004][ T3368] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 405.503574][ T10] syz2: Port: 1 Link ACTIVE [ 405.510262][ T3368] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.522682][ T3368] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 405.552974][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.589062][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 405.680486][ T3368] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.702866][ T3368] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 405.711507][ T3368] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.719793][ T3368] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 405.728491][T12974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.773756][T12994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1810'. [ 405.796836][T12974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.878277][T12963] lo speed is unknown, defaulting to 1000 [ 405.910058][T12993] x_tables: duplicate underflow at hook 1 [ 406.017102][T13001] netlink: 18 bytes leftover after parsing attributes in process `syz.0.1813'. [ 406.120923][T12981] : option downdelay: invalid value (18446744073709547007) [ 406.128379][T12981] : option downdelay: allowed values 0 - 2147483647 [ 406.136955][T12981]  (unregistering): Released all slaves [ 406.593360][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.411278][T13049] __nla_validate_parse: 1 callbacks suppressed [ 407.411299][T13049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1821'. [ 407.622309][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 407.631441][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 407.632935][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.664336][T13052] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 407.730775][T13035] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1819'. [ 407.747161][T13051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1819'. [ 407.766057][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 407.819724][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 407.829032][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 407.838503][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 408.071008][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 408.400606][T13070] tc_dump_action: action bad kind [ 408.584712][T13076] macvtap0: entered promiscuous mode [ 408.590074][T13076] bond0: entered promiscuous mode [ 408.595127][T13076] bond_slave_0: entered promiscuous mode [ 408.601021][T13076] bond_slave_1: entered promiscuous mode [ 408.607334][T13076] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 408.625233][T13076] macvtap0: entered allmulticast mode [ 408.630843][T13076] bond0: entered allmulticast mode [ 408.636200][T13076] bond_slave_0: entered allmulticast mode [ 408.641950][T13076] bond_slave_1: entered allmulticast mode [ 408.647729][T13076] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 408.656580][T13076] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 408.673406][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.675316][T13076] macvtap0: left promiscuous mode [ 408.730566][T13076] bond0: left promiscuous mode [ 408.736311][T13076] macvtap0: left allmulticast mode [ 408.741482][T13076] bond0: left allmulticast mode [ 408.746373][T13076] bond_slave_0: left allmulticast mode [ 408.751877][T13076] bond_slave_1: left allmulticast mode [ 408.757396][T13076] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 409.104341][T13095] netlink: 'syz.0.1832': attribute type 4 has an invalid length. [ 409.164824][T13097] netlink: 'syz.0.1832': attribute type 4 has an invalid length. [ 409.503713][T13108] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 409.539235][T13111] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 409.570928][T13112] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 409.626446][T13119] siw: device registration error -23 [ 409.653596][T13108] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 409.656536][T13111] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 409.665564][T13119] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.712844][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.722650][T13112] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 409.834145][T13127] syzkaller0: entered promiscuous mode [ 409.848044][T13127] syzkaller0: entered allmulticast mode [ 409.884790][T13127] tipc: Enabled bearer , priority 0 [ 409.910265][T13126] tipc: Resetting bearer [ 409.953917][T13126] tipc: Disabling bearer [ 410.295725][T13146] netlink: 'syz.1.1845': attribute type 21 has an invalid length. [ 410.326440][T13146] IPv6: NLM_F_CREATE should be specified when creating new route [ 410.346070][T13146] netlink: 'syz.1.1845': attribute type 1 has an invalid length. [ 410.753787][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 411.792836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.427531][T13198] netlink: 'syz.1.1860': attribute type 13 has an invalid length. [ 412.469191][T13200] __nla_validate_parse: 9 callbacks suppressed [ 412.469233][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1861'. [ 412.667391][T13207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1862'. [ 412.789507][T13210] xt_hashlimit: invalid rate [ 412.833283][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.967141][T13216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1865'. [ 412.968304][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 413.069498][T13218] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1865'. [ 413.154247][T13218] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1865'. [ 413.179161][T13218] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1865'. [ 413.203499][T13218] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1865'. [ 413.223827][T13218] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1865'. [ 413.243645][T13218] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1865'. [ 413.872834][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.493358][ T12] batadv1: left promiscuous mode [ 414.838034][T13274] netlink: 'syz.1.1878': attribute type 58 has an invalid length. [ 414.913136][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.159681][T13287] openvswitch: netlink: Flow key attr not present in new flow. [ 415.310896][T13297] atomic_op ffff888032b6b998 conn xmit_atomic 0000000000000000 [ 415.820396][T13314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.831506][T13314] IPv6: NLM_F_CREATE should be set when creating new route [ 415.841106][T13315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.943521][T13317] x_tables: duplicate entry at hook 1 [ 415.953476][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.281759][T13333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.294668][T13307] tipc: Resetting bearer [ 416.692191][T13307] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 416.703711][T13307] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 416.710464][T13307] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 416.718144][T13307] veth3: left promiscuous mode [ 416.723340][T13307] bridge3: left allmulticast mode [ 416.734476][T13307] vlan2: left promiscuous mode [ 416.743043][T13307] bridge0: left promiscuous mode [ 416.755072][T13307] bond4: left promiscuous mode [ 416.769927][T13307] bridge8: left promiscuous mode [ 416.774933][T13307] bridge8: left allmulticast mode [ 416.984747][T13336] bond4 (unregistering): Released all slaves [ 416.993408][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.185429][T13355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.278019][ T3337] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.303509][ T3337] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.393691][ T3337] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.413644][ T3337] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.443424][T13369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.887955][T13394] netlink: 'syz.4.1909': attribute type 1 has an invalid length. [ 417.922701][T13394] __nla_validate_parse: 41 callbacks suppressed [ 417.952066][T13394] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1909'. [ 417.974259][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 418.032832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.051345][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 418.303375][ T5285] veth0_vlan: left promiscuous mode [ 418.496234][T13428] netlink: 'syz.1.1915': attribute type 1 has an invalid length. [ 418.543953][T13413] bond4 (unregistering): Released all slaves [ 418.576571][ T5625] veth0_vlan: entered promiscuous mode [ 418.900684][T13428] 8021q: adding VLAN 0 to HW filter on device bond6 [ 418.970416][T13435] 8021q: adding VLAN 0 to HW filter on device bond6 [ 418.977803][T13435] bond6: (slave ipip1): The slave device specified does not support setting the MAC address [ 418.988797][T13435] bond6: (slave ipip1): Error -95 calling set_mac_address [ 419.070281][T13429] syzkaller0: entered promiscuous mode [ 419.076714][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.111176][T13429] syzkaller0: entered allmulticast mode [ 419.132674][T13434] tipc: Enabled bearer , priority 0 [ 419.197423][T13456] netlink: 'syz.3.1922': attribute type 4 has an invalid length. [ 419.215271][T13456] netlink: 'syz.3.1922': attribute type 4 has an invalid length. [ 419.312230][T13326] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 419.320415][T13326] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 419.453651][T13459] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 419.468341][T13467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1925'. [ 419.529370][T13425] tipc: Resetting bearer [ 419.626253][T13425] tipc: Disabling bearer [ 419.714446][T13472] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1927'. [ 419.723559][T13472] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 420.070627][ T810] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 420.078389][ T810] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 420.112933][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.460994][T13474] tipc: Resetting bearer [ 420.566991][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1934'. [ 420.593450][T13504] netlink: 'syz.2.1934': attribute type 5 has an invalid length. [ 420.656767][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1934'. [ 420.665715][T13506] netlink: 'syz.2.1934': attribute type 5 has an invalid length. [ 420.681109][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1934'. [ 420.739103][T13506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1934'. [ 420.850870][T13509] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1935'. [ 421.082421][T13521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.153707][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.195614][T13526] netlink: 'syz.3.1941': attribute type 27 has an invalid length. [ 421.211525][T13526] veth4: entered allmulticast mode [ 421.228582][T13528] syzkaller0: entered promiscuous mode [ 421.234991][T13528] syzkaller0: entered allmulticast mode [ 421.872350][T13543] netlink: 'syz.0.1947': attribute type 10 has an invalid length. [ 422.138921][T13547] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 422.192957][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.199206][T13547] bond12 (unregistering): Released all slaves [ 422.515053][T13565] netlink: 'syz.0.1952': attribute type 62 has an invalid length. [ 422.646544][T13573] netlink: 'syz.3.1955': attribute type 10 has an invalid length. [ 422.845412][T13582] netlink: 'syz.2.1959': attribute type 1 has an invalid length. [ 422.885000][T13582] 8021q: adding VLAN 0 to HW filter on device bond12 [ 423.036051][T13589] bond12: (slave veth9): Enslaving as an active interface with a down link [ 423.235038][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.262031][T13612] netlink: 'syz.1.1968': attribute type 1 has an invalid length. [ 423.267386][T13614] __nla_validate_parse: 6 callbacks suppressed [ 423.267406][T13614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1967'. [ 423.286456][T13614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1967'. [ 423.318907][T13612] 8021q: adding VLAN 0 to HW filter on device bond7 [ 423.416157][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1969'. [ 423.425185][T13622] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1969'. [ 423.434074][T13622] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1969'. [ 423.442971][T13622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1969'. [ 423.451954][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1969'. [ 423.460962][T13622] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1969'. [ 423.469834][T13622] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1969'. [ 423.478709][T13622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1969'. [ 423.631571][T13626] netlink: 'syz.0.1971': attribute type 1 has an invalid length. [ 423.673919][T13624] hsr0: entered promiscuous mode [ 423.687272][T13624] hsr_slave_0: left promiscuous mode [ 423.697846][T13624] hsr0 (unregistering): left promiscuous mode [ 423.712773][T13626] 8021q: adding VLAN 0 to HW filter on device bond4 [ 423.748316][T13626] 8021q: adding VLAN 0 to HW filter on device bond4 [ 423.760505][T13626] bond4: (slave geneve3): making interface the new active one [ 423.769721][T13626] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 423.782133][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 423.790994][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 423.802244][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 423.816620][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 423.938723][T13635] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 424.023432][T13635] bond5 (unregistering): Released all slaves [ 424.023971][T13643] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 424.087431][T13645] syzkaller1: entered promiscuous mode [ 424.092979][T13645] syzkaller1: entered allmulticast mode [ 424.197953][T13650] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 424.197953][T13650] Please contact the netfilter-devel mailing list or update your nftables rules. [ 424.273408][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 424.413038][T13655] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 424.492557][T13662] netlink: 'syz.3.1983': attribute type 1 has an invalid length. [ 424.647489][T13662] 8021q: adding VLAN 0 to HW filter on device bond6 [ 424.670292][T13662] tipc: Enabled bearer , priority 10 [ 424.869754][T13676] lo speed is unknown, defaulting to 1000 [ 424.896809][T13678] syzkaller0: entered promiscuous mode [ 424.902440][T13678] syzkaller0: entered allmulticast mode [ 424.965971][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 425.313582][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.412192][T13692] 8021q: adding VLAN 0 to HW filter on device bond9 [ 425.629359][T13703] bond9: (slave veth7): Enslaving as a backup interface with a down link [ 426.352825][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.849299][T13759] validate_nla: 1 callbacks suppressed [ 426.849401][T13759] netlink: 'syz.0.2007': attribute type 1 has an invalid length. [ 426.873200][T13759] netlink: 'syz.0.2007': attribute type 6 has an invalid length. [ 426.896220][T13759] netlink: 'syz.0.2007': attribute type 3 has an invalid length. [ 427.393486][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.473072][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 427.688775][T13791] netlink: 'syz.4.2017': attribute type 4 has an invalid length. [ 427.722353][T13791] netlink: 'syz.4.2017': attribute type 4 has an invalid length. [ 427.927842][T13799] ip6erspan0: entered allmulticast mode [ 428.432835][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.921715][T13828] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 428.998276][T13828] syzkaller0: entered promiscuous mode [ 429.049804][T13828] syzkaller0: entered allmulticast mode [ 429.163995][T13852] __nla_validate_parse: 13 callbacks suppressed [ 429.164017][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'. [ 429.393085][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 429.464239][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 429.474058][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.508242][T13871] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2039'. [ 429.570276][T13875] netlink: 'syz.2.2039': attribute type 10 has an invalid length. [ 429.607247][T13871] vlan3: entered allmulticast mode [ 429.628119][T13871] erspan0: entered allmulticast mode [ 429.695555][T13875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.734587][T13875] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 429.840499][T13886] syzkaller0: entered promiscuous mode [ 429.846044][T13886] syzkaller0: entered allmulticast mode [ 430.036348][T13901] raw_sendmsg: syz.4.2042 forgot to set AF_INET. Fix it! [ 430.043799][T13886] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 430.249161][T13910] tipc: Resetting bearer [ 430.261095][T13910] syzkaller0: entered promiscuous mode [ 430.267622][T13910] syzkaller0: entered allmulticast mode [ 430.315053][T13909] tipc: Resetting bearer [ 430.513143][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.874795][T13945] bridge0: port 3(macvlan1) entered blocking state [ 430.898444][T13945] bridge0: port 3(macvlan1) entered disabled state [ 430.906230][T13945] macvlan1: entered allmulticast mode [ 430.911676][T13945] veth1_vlan: entered allmulticast mode [ 430.965404][T13945] macvlan1: entered promiscuous mode [ 430.981382][T13945] bridge0: port 3(macvlan1) entered blocking state [ 430.988402][T13945] bridge0: port 3(macvlan1) entered forwarding state [ 431.400840][ T3368] tipc: Resetting bearer [ 431.453810][T13978] FAULT_INJECTION: forcing a failure. [ 431.453810][T13978] name fail_futex, interval 1, probability 0, space 0, times 1 [ 431.475801][T13978] CPU: 1 UID: 0 PID: 13978 Comm: syz.3.2059 Not tainted syzkaller #0 PREEMPT(full) [ 431.475831][T13978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 431.475888][T13978] Call Trace: [ 431.475919][T13978] [ 431.475960][T13978] dump_stack_lvl+0xe8/0x150 [ 431.476027][T13978] should_fail_ex+0x40c/0x560 [ 431.476123][T13978] get_futex_key+0x1b3/0x1580 [ 431.476238][T13978] ? perf_lock_task_context+0x79b/0x850 [ 431.476294][T13978] ? perf_lock_task_context+0xfe/0x850 [ 431.476325][T13978] ? __pfx_get_futex_key+0x10/0x10 [ 431.476352][T13978] ? __lock_acquire+0x683/0x2cf0 [ 431.476391][T13978] futex_wake+0x119/0x5f0 [ 431.476421][T13978] ? __pfx_futex_wake+0x10/0x10 [ 431.476455][T13978] ? exit_mm_release+0x1a/0x30 [ 431.476483][T13978] do_futex+0x458/0x4e0 [ 431.476522][T13978] ? __pfx_do_futex+0x10/0x10 [ 431.476558][T13978] ? __might_fault+0xaf/0x130 [ 431.476587][T13978] mm_release+0x101/0x290 [ 431.476627][T13978] exit_mm+0x4d/0x2d0 [ 431.476661][T13978] do_exit+0x6cd/0x2360 [ 431.476696][T13978] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 431.476774][T13978] ? __pfx_do_exit+0x10/0x10 [ 431.476807][T13978] ? do_raw_spin_lock+0x12b/0x2f0 [ 431.476842][T13978] do_group_exit+0x22d/0x2f0 [ 431.476870][T13978] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.476928][T13978] get_signal+0x121b/0x12c0 [ 431.476975][T13978] arch_do_signal_or_restart+0xbb/0x860 [ 431.477007][T13978] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 431.477057][T13978] exit_to_user_mode_loop+0x104/0x730 [ 431.477084][T13978] ? rcu_is_watching+0x15/0xb0 [ 431.477116][T13978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.477139][T13978] do_syscall_64+0x353/0x580 [ 431.477185][T13978] ? trace_irq_disable+0x3b/0x140 [ 431.477211][T13978] ? clear_bhb_loop+0x40/0x90 [ 431.477236][T13978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.477259][T13978] RIP: 0033:0x7f4c8ed9de99 [ 431.477305][T13978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.477323][T13978] RSP: 002b:00007f4c8cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 431.477354][T13978] RAX: fffffffffffffe00 RBX: 00007f4c8f026180 RCX: 00007f4c8ed9de99 [ 431.477370][T13978] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 431.477383][T13978] RBP: 00007f4c8cff6090 R08: 0000000000000080 R09: 0000000000000008 [ 431.477395][T13978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.477405][T13978] R13: 00007f4c8f026218 R14: 00007f4c8f026180 R15: 00007ffc88b2d428 [ 431.477439][T13978] [ 431.553263][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.750183][T13991] syzkaller0: entered promiscuous mode [ 431.755795][T13991] syzkaller0: entered allmulticast mode [ 432.149264][T14010] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2068'. [ 432.308331][T14014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2069'. [ 432.592951][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.633278][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.672820][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 435.713290][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.752830][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 437.793287][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.832820][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.873282][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 440.275699][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.912854][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 441.953348][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.992829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.033266][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.072829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.113373][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 447.152820][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.193262][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 449.232892][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.273291][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 451.312830][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.353255][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 453.392827][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.433270][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 455.472823][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.513300][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 457.553510][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 458.593285][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 459.632828][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 460.673270][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 461.712855][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 462.753265][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 463.792822][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 464.833286][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 465.873332][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.913271][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 467.952824][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 468.993265][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 470.032832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 471.073314][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 472.112820][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 473.153305][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.193167][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 475.233276][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.272817][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 477.313282][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 478.352793][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 479.393293][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 480.432814][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 481.473276][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 482.512905][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 483.553319][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 484.592799][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 485.633271][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 486.672806][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 487.713260][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 488.752813][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 489.793254][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 490.832923][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 491.873285][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 492.914601][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 493.953262][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 494.992797][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 496.033255][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 497.072800][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 498.113315][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 499.152809][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 500.193298][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 501.232800][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 501.714348][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 501.722166][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 501.733634][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.273261][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 503.312820][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 503.635842][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2076'. [ 503.800326][T14067] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2076'. [ 503.912070][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 503.922352][T14076] netlink: 'syz.0.2078': attribute type 11 has an invalid length. [ 503.964404][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 504.018191][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2079'. [ 504.353293][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 504.462736][T14104] lo speed is unknown, defaulting to 1000 [ 505.179224][T14114] dvmrp0: entered allmulticast mode [ 505.249498][T14138] syzkaller0: entered promiscuous mode [ 505.273299][T14138] syzkaller0: entered allmulticast mode [ 505.319672][T14138] tipc: Enabled bearer , priority 0 [ 505.392963][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 505.776999][T14136] tipc: Resetting bearer [ 505.834217][T14136] tipc: Disabling bearer [ 505.834791][T14155] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2090'. [ 505.886153][T14158] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2090'. [ 505.934064][T14150] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2090'. [ 505.948553][T14155] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.956113][T14155] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.980648][T14148] syzkaller0: entered promiscuous mode [ 505.986943][T14148] syzkaller0: entered allmulticast mode [ 506.433415][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 506.518817][T14179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2095'. [ 506.603070][T14185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2097'. [ 506.696730][T14184] ipvlan2: entered promiscuous mode [ 506.720907][T14184] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 506.762594][T14184] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 506.799076][T14184] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 507.225376][T14209] netlink: 'syz.0.2100': attribute type 1 has an invalid length. [ 507.316697][T14209] 8021q: adding VLAN 0 to HW filter on device bond5 [ 507.472882][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 507.734943][T14234] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 507.743149][T14234] netlink: 'syz.1.2105': attribute type 2 has an invalid length. [ 507.771743][T14232] bond8: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 507.785881][T14232] bond8 (unregistering): Released all slaves [ 507.955396][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 507.976571][ T10] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 508.297808][T14268] geneve1: entered allmulticast mode [ 508.303613][T12976] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 508.376298][T14269] netlink: zone id is out of range [ 508.381483][T14269] netlink: zone id is out of range [ 508.386628][T14269] netlink: zone id is out of range [ 508.391779][T14269] netlink: zone id is out of range [ 508.396921][T14269] netlink: zone id is out of range [ 508.402057][T14269] netlink: zone id is out of range [ 508.486780][T14246] nbd4: detected capacity change from 0 to 127 [ 508.504685][ T5631] block nbd4: Receive control failed (result -104) [ 508.878083][T14290] syzkaller0: entered promiscuous mode [ 508.883631][T14290] syzkaller0: entered allmulticast mode [ 508.995723][ T10] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 509.396336][T14316] __nla_validate_parse: 4 callbacks suppressed [ 509.396360][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2126'. [ 509.552940][ C0] net_ratelimit: 96 callbacks suppressed [ 509.553036][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 509.956138][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2130'. [ 510.289025][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 510.324690][T14352] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2136'. [ 510.484983][T14359] netlink: 'syz.0.2138': attribute type 1 has an invalid length. [ 510.527463][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2138'. [ 510.547055][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'. [ 510.555999][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2138'. [ 510.574936][T14364] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2139'. [ 510.584365][T14365] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2139'. [ 510.593309][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 510.741859][T14372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2141'. [ 510.828096][T14376] netlink: 'syz.1.2143': attribute type 10 has an invalid length. [ 511.192287][T14392] netlink: 'syz.4.2150': attribute type 1 has an invalid length. [ 511.355517][T14399] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.366037][T14399] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.632943][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 511.698353][T14399] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.709812][T14399] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.882992][ T1663] block nbd4: Connection timed out, retrying (0/1 alive) [ 511.891433][ T1663] block nbd4: Connection timed out, retrying (0/1 alive) [ 511.898818][ T1663] block nbd4: Connection timed out, retrying (0/1 alive) [ 511.908408][ T1663] block nbd4: Connection timed out, retrying (0/1 alive) [ 511.916165][ T1663] block nbd4: Dead connection, failed to find a fallback [ 511.923844][ T1663] block nbd4: shutting down sockets [ 511.929917][ T1663] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 511.940204][ T1663] Buffer I/O error on dev nbd4, logical block 3, async page read [ 511.950592][ T1663] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 511.959753][ T1663] Buffer I/O error on dev nbd4, logical block 2, async page read [ 511.967709][ T1663] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 511.995713][ T1663] Buffer I/O error on dev nbd4, logical block 1, async page read [ 512.003524][ T1663] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.012658][ T1663] Buffer I/O error on dev nbd4, logical block 0, async page read [ 512.023450][ T1663] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.034016][ T1663] Buffer I/O error on dev nbd4, logical block 0, async page read [ 512.042341][ T1663] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 512.051481][ T1663] Buffer I/O error on dev nbd4, logical block 1, async page read [ 512.059294][ T1663] Buffer I/O error on dev nbd4, logical block 2, async page read [ 512.067119][ T1663] Buffer I/O error on dev nbd4, logical block 3, async page read [ 512.079878][ T1663] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 512.089034][ T1663] Buffer I/O error on dev nbd4, logical block 0, async page read [ 512.112646][ T1663] Buffer I/O error on dev nbd4, logical block 1, async page read [ 512.117623][T14427] lo speed is unknown, defaulting to 1000 [ 512.120915][ T1663] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 512.135860][ T1663] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 512.147952][ T1663] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.166330][T14120] ldm_validate_partition_table(): Disk read failed. [ 512.176867][T14120] Dev nbd4: unable to read RDB block 0 [ 512.185353][T14120] nbd4: unable to read partition table [ 512.206169][T14432] FAULT_INJECTION: forcing a failure. [ 512.206169][T14432] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 512.244646][T14120] ldm_validate_partition_table(): Disk read failed. [ 512.253935][T14120] Dev nbd4: unable to read RDB block 0 [ 512.262214][T14120] nbd4: unable to read partition table [ 512.281189][T14432] CPU: 0 UID: 0 PID: 14432 Comm: syz.0.2161 Not tainted syzkaller #0 PREEMPT(full) [ 512.281208][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 512.281217][T14432] Call Trace: [ 512.281222][T14432] [ 512.281229][T14432] dump_stack_lvl+0xe8/0x150 [ 512.281254][T14432] should_fail_ex+0x40c/0x560 [ 512.281272][T14432] _copy_from_iter+0x4ff/0x1660 [ 512.281371][T14432] ? sock_wmalloc+0xb2/0x130 [ 512.281401][T14432] ? __pfx__copy_from_iter+0x10/0x10 [ 512.281419][T14432] ? skb_set_owner_w+0x263/0x3d0 [ 512.281433][T14432] ? skb_put+0x112/0x210 [ 512.281468][T14432] pppol2tp_sendmsg+0x3cf/0x610 [ 512.281518][T14432] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 512.281532][T14432] sock_sendmsg_nosec+0x13a/0x180 [ 512.281563][T14432] sock_write_iter+0x2de/0x3e0 [ 512.281579][T14432] ? __pfx_sock_write_iter+0x10/0x10 [ 512.281605][T14432] do_iter_readv_writev+0x612/0x8c0 [ 512.281620][T14432] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 512.281635][T14432] ? bpf_lsm_file_permission+0x9/0x20 [ 512.281648][T14432] ? security_file_permission+0x75/0x260 [ 512.281684][T14432] ? rw_verify_area+0x203/0x4c0 [ 512.281703][T14432] vfs_writev+0x343/0x990 [ 512.281724][T14432] ? __pfx_vfs_writev+0x10/0x10 [ 512.281746][T14432] ? __fget_files+0x2a/0x420 [ 512.281764][T14432] ? __fget_files+0x3a2/0x420 [ 512.281778][T14432] ? __fget_files+0x2a/0x420 [ 512.281798][T14432] do_writev+0x154/0x2e0 [ 512.281813][T14432] ? __pfx_do_writev+0x10/0x10 [ 512.281832][T14432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.281845][T14432] do_syscall_64+0x174/0x580 [ 512.281858][T14432] ? trace_irq_disable+0x3b/0x140 [ 512.281881][T14432] ? clear_bhb_loop+0x40/0x90 [ 512.281895][T14432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.281907][T14432] RIP: 0033:0x7f29ed39de99 [ 512.281920][T14432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.281930][T14432] RSP: 002b:00007f29ee2eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 512.281946][T14432] RAX: ffffffffffffffda RBX: 00007f29ed625fa0 RCX: 00007f29ed39de99 [ 512.281954][T14432] RDX: 0000000000000003 RSI: 0000200000002680 RDI: 0000000000000003 [ 512.281962][T14432] RBP: 00007f29ee2eb090 R08: 0000000000000000 R09: 0000000000000000 [ 512.281969][T14432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.281976][T14432] R13: 00007f29ed626038 R14: 00007f29ed625fa0 R15: 00007fff49fb9f48 [ 512.281994][T14432] [ 512.673325][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 512.850290][T14399] bond0: (slave netdevsim1): Releasing backup interface [ 512.864758][T14399] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.876045][T14399] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.069722][T14443] ip6gre2: entered promiscuous mode [ 513.082412][T14443] ip6gre2: entered allmulticast mode [ 513.105196][T14430] x_tables: duplicate underflow at hook 3 [ 513.301068][T14399] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.374452][T14399] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.712916][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 513.821882][T14480] syzkaller0: entered promiscuous mode [ 513.827967][T14480] syzkaller0: entered allmulticast mode [ 513.837274][T14480] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 514.416668][T14488] FAULT_INJECTION: forcing a failure. [ 514.416668][T14488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.444809][T14488] CPU: 0 UID: 0 PID: 14488 Comm: syz.0.2173 Not tainted syzkaller #0 PREEMPT(full) [ 514.444838][T14488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 514.444850][T14488] Call Trace: [ 514.444858][T14488] [ 514.444867][T14488] dump_stack_lvl+0xe8/0x150 [ 514.444901][T14488] should_fail_ex+0x40c/0x560 [ 514.444930][T14488] _copy_from_iter+0x4ff/0x1660 [ 514.444969][T14488] ? sock_wmalloc+0xb2/0x130 [ 514.444991][T14488] ? __pfx__copy_from_iter+0x10/0x10 [ 514.445022][T14488] ? skb_set_owner_w+0x263/0x3d0 [ 514.445045][T14488] ? skb_put+0x112/0x210 [ 514.445077][T14488] pppol2tp_sendmsg+0x3cf/0x610 [ 514.445111][T14488] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 514.445134][T14488] sock_sendmsg_nosec+0x13a/0x180 [ 514.445163][T14488] sock_write_iter+0x2de/0x3e0 [ 514.445189][T14488] ? __pfx_sock_write_iter+0x10/0x10 [ 514.445234][T14488] do_iter_readv_writev+0x612/0x8c0 [ 514.445259][T14488] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 514.445285][T14488] ? bpf_lsm_file_permission+0x9/0x20 [ 514.445306][T14488] ? security_file_permission+0x75/0x260 [ 514.445340][T14488] ? rw_verify_area+0x203/0x4c0 [ 514.445382][T14488] vfs_writev+0x343/0x990 [ 514.445415][T14488] ? __pfx_vfs_writev+0x10/0x10 [ 514.445455][T14488] ? __fget_files+0x2a/0x420 [ 514.445484][T14488] ? __fget_files+0x3a2/0x420 [ 514.445506][T14488] ? __fget_files+0x2a/0x420 [ 514.445540][T14488] do_writev+0x154/0x2e0 [ 514.445566][T14488] ? __pfx_do_writev+0x10/0x10 [ 514.445598][T14488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.445620][T14488] do_syscall_64+0x174/0x580 [ 514.445640][T14488] ? trace_irq_disable+0x3b/0x140 [ 514.445665][T14488] ? clear_bhb_loop+0x40/0x90 [ 514.445689][T14488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.445709][T14488] RIP: 0033:0x7f29ed39de99 [ 514.445728][T14488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.445744][T14488] RSP: 002b:00007f29ee2eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 514.445766][T14488] RAX: ffffffffffffffda RBX: 00007f29ed625fa0 RCX: 00007f29ed39de99 [ 514.445781][T14488] RDX: 0000000000000003 RSI: 0000200000002680 RDI: 0000000000000003 [ 514.445793][T14488] RBP: 00007f29ee2eb090 R08: 0000000000000000 R09: 0000000000000000 [ 514.445806][T14488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.445817][T14488] R13: 00007f29ed626038 R14: 00007f29ed625fa0 R15: 00007fff49fb9f48 [ 514.445847][T14488] [ 514.452985][T14490] syzkaller0: entered promiscuous mode [ 514.751845][T14490] syzkaller0: entered allmulticast mode [ 514.753418][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 514.768683][T14504] __nla_validate_parse: 21 callbacks suppressed [ 514.768705][T14504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2178'. [ 514.897077][T14506] x_tables: duplicate underflow at hook 3 [ 514.911118][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2179'. [ 515.099500][ T3337] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.108717][ T3337] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.137361][ T76] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.222729][ T76] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.274472][ T76] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.283681][ T76] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.334830][ T76] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.354680][ T76] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.365290][T14527] FAULT_INJECTION: forcing a failure. [ 515.365290][T14527] name failslab, interval 1, probability 0, space 0, times 0 [ 515.393892][T14527] CPU: 1 UID: 0 PID: 14527 Comm: syz.2.2186 Not tainted syzkaller #0 PREEMPT(full) [ 515.393923][T14527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 515.393955][T14527] Call Trace: [ 515.393963][T14527] [ 515.393972][T14527] dump_stack_lvl+0xe8/0x150 [ 515.394010][T14527] should_fail_ex+0x40c/0x560 [ 515.394037][T14527] should_failslab+0xa8/0x100 [ 515.394066][T14527] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 515.394089][T14527] ? xfrm_policy_get_afinfo+0x30/0x1b0 [ 515.394196][T14527] ? dst_alloc+0x105/0x170 [ 515.394242][T14527] ? dst_alloc+0x105/0x170 [ 515.394271][T14527] dst_alloc+0x105/0x170 [ 515.394297][T14527] xfrm_lookup_with_ifid+0x7c8/0x1b40 [ 515.394350][T14527] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 515.394380][T14527] ? lock_acquire+0x106/0x350 [ 515.394416][T14527] xfrm_lookup_route+0x3c/0x1c0 [ 515.394435][T14527] ? inet6_csk_route_socket+0x489/0xf10 [ 515.394508][T14527] inet6_csk_route_socket+0x68d/0xf10 [ 515.394545][T14527] inet6_csk_xmit+0x4af/0x660 [ 515.394580][T14527] l2tp_xmit_skb+0x1065/0x1890 [ 515.394621][T14527] ? pppol2tp_sendmsg+0x3f2/0x610 [ 515.394643][T14527] pppol2tp_sendmsg+0x40c/0x610 [ 515.394672][T14527] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 515.394695][T14527] sock_sendmsg_nosec+0x13a/0x180 [ 515.394723][T14527] sock_write_iter+0x2de/0x3e0 [ 515.394748][T14527] ? __pfx_sock_write_iter+0x10/0x10 [ 515.394791][T14527] do_iter_readv_writev+0x612/0x8c0 [ 515.394816][T14527] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 515.394842][T14527] ? bpf_lsm_file_permission+0x9/0x20 [ 515.394863][T14527] ? security_file_permission+0x75/0x260 [ 515.394893][T14527] ? rw_verify_area+0x203/0x4c0 [ 515.394927][T14527] vfs_writev+0x343/0x990 [ 515.394962][T14527] ? __pfx_vfs_writev+0x10/0x10 [ 515.395002][T14527] ? __fget_files+0x2a/0x420 [ 515.395033][T14527] ? __fget_files+0x3a2/0x420 [ 515.395055][T14527] ? __fget_files+0x2a/0x420 [ 515.395089][T14527] do_writev+0x154/0x2e0 [ 515.395114][T14527] ? __pfx_do_writev+0x10/0x10 [ 515.395145][T14527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.395166][T14527] do_syscall_64+0x174/0x580 [ 515.395184][T14527] ? trace_irq_disable+0x3b/0x140 [ 515.395204][T14527] ? clear_bhb_loop+0x40/0x90 [ 515.395224][T14527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.395242][T14527] RIP: 0033:0x7f0b8859de99 [ 515.395264][T14527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.395281][T14527] RSP: 002b:00007f0b89518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 515.395304][T14527] RAX: ffffffffffffffda RBX: 00007f0b88825fa0 RCX: 00007f0b8859de99 [ 515.395320][T14527] RDX: 0000000000000003 RSI: 0000200000002680 RDI: 0000000000000003 [ 515.395332][T14527] RBP: 00007f0b89518090 R08: 0000000000000000 R09: 0000000000000000 [ 515.395345][T14527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.395367][T14527] R13: 00007f0b88826038 R14: 00007f0b88825fa0 R15: 00007fffdc8c9618 [ 515.395403][T14527] [ 515.461762][T14534] netlink: 'syz.2.2190': attribute type 5 has an invalid length. [ 515.606671][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'. [ 515.676299][T14545] tipc: Resetting bearer [ 515.792891][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 515.858734][T14545] tipc: Enabling of bearer rejected, already enabled [ 515.907632][T14545] tipc: Resetting bearer [ 515.926345][T14545] tipc: Resetting bearer [ 516.077455][T14559] pim6reg1: entered promiscuous mode [ 516.082822][T14559] pim6reg1: entered allmulticast mode [ 516.191135][ T76] tipc: Resetting bearer [ 516.227961][T14556] syzkaller0: entered promiscuous mode [ 516.233501][T14556] syzkaller0: entered allmulticast mode [ 516.300260][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'. [ 516.365893][T14574] FAULT_INJECTION: forcing a failure. [ 516.365893][T14574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.382680][T14574] CPU: 0 UID: 0 PID: 14574 Comm: syz.2.2200 Not tainted syzkaller #0 PREEMPT(full) [ 516.382712][T14574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 516.382725][T14574] Call Trace: [ 516.382733][T14574] [ 516.382742][T14574] dump_stack_lvl+0xe8/0x150 [ 516.382781][T14574] should_fail_ex+0x40c/0x560 [ 516.382810][T14574] _copy_from_user+0x2d/0xb0 [ 516.382912][T14574] kstrtouint_from_user+0xd6/0x180 [ 516.382935][T14574] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 516.382972][T14574] proc_fail_nth_write+0x8e/0x210 [ 516.382995][T14574] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 516.383025][T14574] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 516.383047][T14574] vfs_write+0x296/0xba0 [ 516.383083][T14574] ? __pfx_vfs_write+0x10/0x10 [ 516.383109][T14574] ? __fget_files+0x2a/0x420 [ 516.383133][T14574] ? __fget_files+0x3a2/0x420 [ 516.383155][T14574] ? __fget_files+0x2a/0x420 [ 516.383187][T14574] ksys_write+0x150/0x270 [ 516.383219][T14574] ? __pfx_ksys_write+0x10/0x10 [ 516.383255][T14574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.383277][T14574] do_syscall_64+0x174/0x580 [ 516.383298][T14574] ? trace_irq_disable+0x3b/0x140 [ 516.383322][T14574] ? clear_bhb_loop+0x40/0x90 [ 516.383345][T14574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.383365][T14574] RIP: 0033:0x7f0b8855e6ce [ 516.383384][T14574] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 516.383400][T14574] RSP: 002b:00007f0b89517fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.383422][T14574] RAX: ffffffffffffffda RBX: 00007f0b895186c0 RCX: 00007f0b8855e6ce [ 516.383436][T14574] RDX: 0000000000000001 RSI: 00007f0b895180a0 RDI: 0000000000000005 [ 516.383448][T14574] RBP: 00007f0b89518090 R08: 0000000000000000 R09: 0000000000000000 [ 516.383460][T14574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.383471][T14574] R13: 00007f0b88826038 R14: 00007f0b88825fa0 R15: 00007fffdc8c9618 [ 516.383503][T14574] [ 516.606938][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2202'. [ 516.616276][T14578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2202'. [ 516.833634][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.877316][T14593] netlink: 'syz.2.2208': attribute type 1 has an invalid length. [ 516.942792][T14593] bond13: entered promiscuous mode [ 516.967027][T14601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2208'. [ 516.973124][T14593] 8021q: adding VLAN 0 to HW filter on device bond13 [ 517.079120][T14605] netlink: 'syz.3.2211': attribute type 4 has an invalid length. [ 517.531181][T14622] netlink: 'syz.1.2214': attribute type 2 has an invalid length. [ 517.539069][T14622] netlink: 'syz.1.2214': attribute type 8 has an invalid length. [ 517.546820][T14622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2214'. [ 517.667466][T14618] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 517.724934][T14618] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 517.725329][T14627] netlink: 'syz.3.2215': attribute type 1 has an invalid length. [ 517.738656][T14618] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 517.817729][T14630] x_tables: duplicate underflow at hook 2 [ 517.842002][T14628] netlink: 'syz.3.2215': attribute type 1 has an invalid length. [ 517.872919][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 517.941238][T14627] bond7: entered promiscuous mode [ 517.947771][T14627] 8021q: adding VLAN 0 to HW filter on device bond7 [ 517.986509][T14627] 8021q: adding VLAN 0 to HW filter on device bond7 [ 517.993629][T14627] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 518.004026][T14627] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 518.050904][T14627] bond7: (slave ip6gre1): making interface the new active one [ 518.051337][T14641] xt_hashlimit: invalid rate [ 518.058431][T14627] ip6gre1: entered promiscuous mode [ 518.069031][T14627] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 518.292164][T14646] syzkaller0: entered promiscuous mode [ 518.297707][T14646] syzkaller0: entered allmulticast mode [ 518.322170][T14648] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2222'. [ 518.337925][T14646] tipc: Enabled bearer , priority 0 [ 518.373162][T14645] tipc: Resetting bearer [ 518.445178][T14645] tipc: Disabling bearer [ 518.662406][T14669] netlink: 'syz.1.2224': attribute type 2 has an invalid length. [ 518.786498][T14669] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 518.913428][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 519.111261][T14692] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2231'. [ 519.942218][T14720] netlink: 'syz.4.2235': attribute type 1 has an invalid length. [ 519.953037][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 520.016710][T14735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2236'. [ 520.037807][T14720] 8021q: adding VLAN 0 to HW filter on device bond11 [ 520.049206][T14735] netlink: 'syz.1.2236': attribute type 1 has an invalid length. [ 520.057712][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2236'. [ 520.226481][T14739] netlink: 'syz.4.2241': attribute type 1 has an invalid length. [ 520.265672][T14739] 8021q: adding VLAN 0 to HW filter on device bond12 [ 520.355702][T14747] bond12: (slave veth9): Enslaving as an active interface with a down link [ 520.404865][T14739] bond12: (slave veth11): Enslaving as an active interface with a down link [ 520.788803][T14767] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2247'. [ 520.798397][T14772] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 520.901347][T14782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2251'. [ 520.930483][T14786] Bluetooth: MGMT ver 1.23 [ 520.993383][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 521.077553][T14795] sctp: [Deprecated]: syz.1.2255 (pid 14795) Use of int in max_burst socket option. [ 521.077553][T14795] Use struct sctp_assoc_value instead [ 521.148409][T14798] openvswitch: netlink: IPv4 tun info is not correct [ 521.815334][T14820] team0: Mode changed to "broadcast" [ 521.924714][T14830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2265'. [ 521.942258][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 521.985081][T14830] bond13: option packets_per_slave: invalid value (592314378) [ 521.993005][T14830] bond13: option packets_per_slave: allowed values 0 - 65535 [ 522.004574][T14830] bond13 (unregistering): Released all slaves [ 522.032915][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 522.261371][T14843] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 522.848073][T14880] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2277'. [ 522.857391][T14880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.073065][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 523.667152][T14902] netlink: 'syz.1.2283': attribute type 6 has an invalid length. [ 523.895496][T14913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2288'. [ 524.113157][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 524.981504][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2300'. [ 525.039057][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2300'. [ 525.153284][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 525.217054][T14963] netlink: 'syz.2.2304': attribute type 361 has an invalid length. [ 525.283167][T14965] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 525.313986][T14965] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 525.346566][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2303'. [ 525.424052][T14965] bridge8: port 1(dummy0) entered blocking state [ 525.448836][T14965] bridge8: port 1(dummy0) entered disabled state [ 525.473471][T14965] dummy0: entered allmulticast mode [ 525.492475][T14980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2308'. [ 525.495562][T14965] dummy0: entered promiscuous mode [ 525.502900][T14981] netlink: 'syz.0.2303': attribute type 10 has an invalid length. [ 525.533369][T14981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2303'. [ 525.565412][T14981] bridge8: port 1(dummy0) entered blocking state [ 525.574600][T14981] bridge8: port 1(dummy0) entered forwarding state [ 525.599304][T14981] dummy0: left allmulticast mode [ 525.604711][T14981] bridge8: port 1(dummy0) entered disabled state [ 525.854783][T14996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2314'. [ 526.023446][T15011] netlink: 'syz.4.2318': attribute type 3 has an invalid length. [ 526.043642][T15011] netlink: 'syz.4.2318': attribute type 1 has an invalid length. [ 526.051469][T15011] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2318'. [ 526.061490][T15011] NCSI netlink: No device for ifindex 2147483648 [ 526.193182][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 526.725532][T15044] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2329'. [ 526.739549][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 526.764235][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 526.788768][T15051] syzkaller0: entered promiscuous mode [ 526.794835][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 526.804427][T15051] syzkaller0: entered allmulticast mode [ 527.233518][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 528.272796][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 528.566781][T15104] netlink: 'syz.3.2339': attribute type 1 has an invalid length. [ 529.313309][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 530.356239][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 530.871355][T15079] lo speed is unknown, defaulting to 1000 [ 531.042930][T15121] netlink: 'syz.1.2343': attribute type 21 has an invalid length. [ 531.050987][T15121] __nla_validate_parse: 31 callbacks suppressed [ 531.051008][T15121] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2343'. [ 531.071689][T15121] netlink: 'syz.1.2343': attribute type 4 has an invalid length. [ 531.079467][T15121] netlink: 'syz.1.2343': attribute type 5 has an invalid length. [ 531.089907][T15121] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2343'. [ 531.201718][T15123] syzkaller0: entered promiscuous mode [ 531.207262][T15123] syzkaller0: entered allmulticast mode [ 531.393427][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 531.916540][T15152] netlink: 'syz.4.2353': attribute type 4 has an invalid length. [ 531.927867][T15155] netlink: 'syz.0.2352': attribute type 1 has an invalid length. [ 531.931595][T15152] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2353'. [ 531.968673][T15150] dummy0: left promiscuous mode [ 531.981466][T15150] bond6: (slave dummy0): making interface the new active one [ 532.004632][T15150] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 532.027639][T15155] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20003 [ 532.189826][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2357'. [ 532.285252][T15169] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 532.435408][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 532.963194][T15186] syzkaller0: entered promiscuous mode [ 532.982065][T15186] syzkaller0: entered allmulticast mode [ 533.032513][T15191] netlink: 'syz.3.2365': attribute type 75 has an invalid length. [ 533.057036][T15189] syzkaller0: entered promiscuous mode [ 533.062571][T15189] syzkaller0: entered allmulticast mode [ 533.096863][T15189] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2364'. [ 533.171740][T15191] tunl0: entered promiscuous mode [ 533.176945][T15191] tunl0: entered allmulticast mode [ 533.473860][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 533.636533][T15206] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 533.717513][T15206] 8021q: adding VLAN 0 to HW filter on device bond14 [ 533.815013][T15199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2368'. [ 533.881992][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 533.896821][T15221] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 534.080101][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2377'. [ 534.512851][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 534.524236][T15256] rdma_op ffff88807e0d11f0 conn xmit_rdma 0000000000000000 [ 534.561119][T15259] netlink: 'syz.4.2385': attribute type 2 has an invalid length. [ 534.627538][T15260] lo speed is unknown, defaulting to 1000 [ 535.180284][T15277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2387'. [ 535.183032][T15270] ip6gretap0: entered promiscuous mode [ 535.206169][T15270] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.220961][T15270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.328399][T15270] veth1_vlan: left promiscuous mode [ 535.335218][T15270] veth0_vlan: left promiscuous mode [ 535.349497][T15270] veth0_vlan: entered promiscuous mode [ 535.381072][T15270] veth1_vlan: entered promiscuous mode [ 535.397729][T15270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.406635][T15270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 535.420204][T15270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 535.428630][T15270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.438947][T15270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.449007][T15270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.459351][T15270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.487771][T15270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 535.513954][T15270] batadv0: entered promiscuous mode [ 535.520569][T15270] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 535.528600][T15270] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.554379][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 535.558539][T15270] 8021q: adding VLAN 0 to HW filter on device bond5 [ 535.571172][T15270] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 535.582912][T15270] 8021q: adding VLAN 0 to HW filter on device bond6 [ 535.651843][ T76] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 535.659669][ T76] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 535.724383][T13328] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 535.759839][ T3337] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.760920][T15307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2394'. [ 535.779419][ T3337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.788465][ T3337] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.797412][ T3337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.854232][T15301] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 535.856479][T15303] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 535.866666][ T3337] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.883668][ T3337] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.917733][ T3337] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.966315][ T3337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.975581][T15296] lo speed is unknown, defaulting to 1000 [ 536.002093][T15305] lo speed is unknown, defaulting to 1000 [ 536.057624][ T5736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 536.071705][ T76] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 536.171580][ T5736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 536.411511][T15323] __nla_validate_parse: 1 callbacks suppressed [ 536.411534][T15323] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2398'. [ 536.593283][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 537.095850][T15328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2399'. [ 537.106867][T15328] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2399'. [ 537.117005][T15328] openvswitch: netlink: Message has 512 unknown bytes. [ 537.232154][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2401'. [ 537.507239][T15344] gretap3: entered promiscuous mode [ 537.612360][T15341] lo speed is unknown, defaulting to 1000 [ 537.633350][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 537.654664][T15342] lo speed is unknown, defaulting to 1000 [ 537.915237][T15356] Unknown options in mask 6 [ 537.915909][T15358] Unknown options in mask 6 [ 538.342597][T15362] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 538.368781][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.524970][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'. [ 538.570194][T15368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 538.648780][T15368] A link change request failed with some changes committed already. Interface gre4 may have been left with an inconsistent configuration, please check. [ 538.673059][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 538.994400][T15389] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2417'. [ 539.154212][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.355612][T15398] openvswitch: netlink: Message has 4 unknown bytes. [ 539.355698][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.364114][T15398] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 539.416298][T15398] batman_adv: batadv0: Adding interface: vlan5 [ 539.423448][T15398] batman_adv: batadv0: Not using interface vlan5 (retrying later): interface not active [ 539.566031][T15402] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2422'. [ 539.592254][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2423'. [ 539.620165][T15405] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2422'. [ 539.637974][T15402] ip6gre2: entered promiscuous mode [ 539.643528][T15402] ip6gre2: entered allmulticast mode [ 539.668854][ T30] audit: type=1804 audit(1784777961.409:5): pid=15407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2424" name="/newroot/486/cgroup.controllers" dev="tmpfs" ino=2505 res=1 errno=0 [ 539.756939][ T30] audit: type=1800 audit(1784777961.409:6): pid=15407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2424" name="cgroup.controllers" dev="tmpfs" ino=2505 res=0 errno=0 [ 539.778707][ T30] audit: type=1800 audit(1784777961.409:7): pid=15408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2424" name="cgroup.controllers" dev="tmpfs" ino=2505 res=0 errno=0 [ 539.850676][T15412] netlink: 'syz.0.2427': attribute type 21 has an invalid length. [ 539.864606][T15412] netlink: 'syz.0.2427': attribute type 21 has an invalid length. [ 539.904171][T15416] x_tables: duplicate underflow at hook 2 [ 540.138746][ T30] audit: type=1804 audit(1784777961.879:8): pid=15429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2431" name="/newroot/493/cgroup.controllers" dev="tmpfs" ino=2549 res=1 errno=0 [ 540.212949][ T30] audit: type=1800 audit(1784777961.879:9): pid=15429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2431" name="cgroup.controllers" dev="tmpfs" ino=2549 res=0 errno=0 [ 540.360066][T15438] syzkaller0: entered promiscuous mode [ 540.365620][T15438] syzkaller0: entered allmulticast mode [ 540.753891][ C0] net_ratelimit: 2 callbacks suppressed [ 540.753914][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 540.885307][T15449] syzkaller0: entered promiscuous mode [ 540.891021][T15449] syzkaller0: entered allmulticast mode [ 540.963194][T15454] syzkaller0: entered promiscuous mode [ 540.969757][T15454] syzkaller0: entered allmulticast mode [ 541.253910][T15466] netlink: 'syz.0.2443': attribute type 10 has an invalid length. [ 541.312285][T15469] C: renamed from veth1_to_team (while UP) [ 541.320720][T15469] netlink: 'syz.3.2441': attribute type 8 has an invalid length. [ 541.329010][T15469] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 541.425895][T15473] sch_fq: defrate 0 ignored. [ 541.434681][T15473] syzkaller0: entered promiscuous mode [ 541.440247][T15473] syzkaller0: entered allmulticast mode [ 541.794065][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 542.132371][T15493] IPv6: addrconf: prefix option has invalid lifetime [ 542.139359][T15492] IPv6: addrconf: prefix option has invalid lifetime [ 542.257027][T15500] syzkaller0: entered promiscuous mode [ 542.292308][T15499] __nla_validate_parse: 4 callbacks suppressed [ 542.292331][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2454'. [ 542.293860][T15500] syzkaller0: entered allmulticast mode [ 542.620492][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2456'. [ 542.642184][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2455'. [ 542.832910][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 543.392355][T15520] netlink: 'syz.3.2458': attribute type 1 has an invalid length. [ 543.432804][T15520] bond8: entered promiscuous mode [ 543.438589][T15520] 8021q: adding VLAN 0 to HW filter on device bond8 [ 543.560126][T15542] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2462'. [ 543.569547][T15539] lo speed is unknown, defaulting to 1000 [ 543.577948][T15541] netlink: 'syz.2.2462': attribute type 4 has an invalid length. [ 543.604033][ T5625] lo speed is unknown, defaulting to 1000 [ 543.609858][ T5625] syz2: Port: 1 Link DOWN [ 543.873520][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 544.120301][T15564] tipc: Resetting bearer [ 544.141757][T15563] tipc: Resetting bearer [ 544.300622][T15570] syzkaller0: entered promiscuous mode [ 544.306793][T15570] syzkaller0: entered allmulticast mode [ 544.384771][T15574] tipc: Resetting bearer [ 544.412089][T15574] tipc: Enabling of bearer rejected, already enabled [ 544.912769][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 545.092105][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'. [ 545.144188][T15565] tipc: Resetting bearer [ 545.285358][T15592] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2477'. [ 545.325259][T15592] netlink: 'syz.2.2477': attribute type 1 has an invalid length. [ 545.343643][T15592] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2477'. [ 545.545202][T15603] sctp: [Deprecated]: syz.3.2478 (pid 15603) Use of int in max_burst socket option deprecated. [ 545.545202][T15603] Use struct sctp_assoc_value instead [ 545.667483][T15613] tipc: Resetting bearer [ 545.718926][T15611] tipc: Resetting bearer [ 545.812934][T15620] bond0: Device is already in use. [ 545.953443][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 545.993388][ T83] tipc: Resetting bearer [ 546.040845][T15631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2484'. [ 546.051445][T15634] xt_TCPMSS: Only works on TCP SYN packets [ 546.242561][T15644] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2486'. [ 546.265235][T15644] syzkaller0: entered promiscuous mode [ 546.271029][T15644] syzkaller0: entered allmulticast mode [ 546.284260][T15644] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2486'. [ 546.340265][T15644] syzkaller1: entered promiscuous mode [ 546.346447][T15644] syzkaller1: entered allmulticast mode [ 546.522636][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 546.674208][T15655] netlink: 'syz.2.2490': attribute type 15 has an invalid length. [ 546.783482][T15662] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 546.794933][T15662] netlink: 'syz.1.2491': attribute type 21 has an invalid length. [ 546.804199][T15660] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 546.811636][T15660] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 546.992980][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 547.050975][T15670] netlink: 'syz.0.2496': attribute type 1 has an invalid length. [ 547.139702][T15670] veth5: entered allmulticast mode [ 547.149390][T15670] bond7: (slave veth5): Enslaving as an active interface with a down link [ 547.169152][T15670] bond7: (slave veth0_to_bond): making interface the new active one [ 547.215895][T15670] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 547.271056][T15679] IPVS: Unknown mcast interface: vxcan1 [ 547.390234][T15690] netlink: 'syz.1.2503': attribute type 21 has an invalid length. [ 547.431189][T15690] __nla_validate_parse: 6 callbacks suppressed [ 547.431209][T15690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2503'. [ 547.473863][T15692] syzkaller0: entered promiscuous mode [ 547.480994][T15690] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 547.481096][T15692] syzkaller0: entered allmulticast mode [ 547.544634][T15704] netlink: 'syz.0.2506': attribute type 2 has an invalid length. [ 547.734402][T15710] netlink: 'syz.0.2507': attribute type 10 has an invalid length. [ 547.781276][T15716] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2503'. [ 547.811024][T15710] bond7: (slave veth0_to_bond): Releasing active interface [ 547.848163][T15710] veth0_to_bond: entered promiscuous mode [ 547.872012][T15710] veth0_to_bond: entered allmulticast mode [ 547.881333][T15720] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2510'. [ 547.897432][T15710] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 548.033559][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 548.054384][T15731] netlink: 'syz.1.2513': attribute type 1 has an invalid length. [ 548.062268][T15731] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2513'. [ 548.106305][T15731] NCSI netlink: No device for ifindex 0 [ 548.119168][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 548.457576][T15755] syzkaller0: entered promiscuous mode [ 548.464812][T15755] syzkaller0: entered allmulticast mode [ 548.464916][T15753] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2522'. [ 548.652430][T15767] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2525'. [ 548.665222][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2525'. [ 548.708986][T15769] netlink: 1696 bytes leftover after parsing attributes in process `syz.2.2526'. [ 548.720707][T15769] netlink: 1696 bytes leftover after parsing attributes in process `syz.2.2526'. [ 549.073972][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 550.113281][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 551.152777][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 552.193219][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 553.232879][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 554.273313][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 555.312894][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 556.353241][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 557.392949][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 558.433166][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 559.472796][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 560.513247][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 561.233071][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 561.552856][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 562.593241][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 563.154900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.155396][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.632875][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 564.673248][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 565.713778][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 566.753247][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 567.792782][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 568.833240][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 569.872828][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 570.913154][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 571.952867][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 572.993275][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 574.032938][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 575.073231][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 576.112786][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 577.153282][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 578.192870][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 579.233319][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 580.272775][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 581.267872][T15791] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 581.313305][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 581.700848][T15812] __nla_validate_parse: 3 callbacks suppressed [ 581.700872][T15812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2536'. [ 581.788461][T15818] syzkaller0: entered promiscuous mode [ 581.819994][T15818] syzkaller0: entered allmulticast mode [ 581.952481][T15822] netlink: 'syz.1.2537': attribute type 4 has an invalid length. [ 582.050083][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2532'. [ 582.070444][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2532'. [ 582.353400][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 583.063891][T15853] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2547'. [ 583.091371][T15853] : option downdelay: invalid value (18446744073709547007) [ 583.098890][T15853] : option downdelay: allowed values 0 - 2147483647 [ 583.106751][T15853]  (unregistering): Released all slaves [ 583.388280][T15864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2549'. [ 583.398179][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 583.497014][T15865] netlink: del zone limit has 8 unknown bytes [ 583.953086][T15877] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 584.029565][T15881] netlink: 'syz.1.2555': attribute type 1 has an invalid length. [ 584.038038][T15882] netlink: 'syz.1.2555': attribute type 1 has an invalid length. [ 584.139018][T15881] bond8: entered promiscuous mode [ 584.144687][T15881] 8021q: adding VLAN 0 to HW filter on device bond8 [ 584.172698][T15885] tipc: Enabled bearer , priority 0 [ 584.208718][T15885] tipc: Resetting bearer [ 584.231191][T15881] bond8: (slave bridge9): making interface the new active one [ 584.259718][T15881] bridge9: entered promiscuous mode [ 584.266447][T15881] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 584.313784][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2558'. [ 584.432946][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 584.549255][T15910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'. [ 584.549647][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'. [ 584.559695][T15910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2563'. [ 584.567128][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2563'. [ 584.567156][T15911] netlink: 'syz.0.2563': attribute type 18 has an invalid length. [ 584.600431][T15910] netlink: 'syz.0.2563': attribute type 18 has an invalid length. [ 584.650525][T15911] netlink: 'syz.0.2563': attribute type 18 has an invalid length. [ 584.679441][ T139] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 584.688489][ T139] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 584.701708][ T139] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 584.721473][ T139] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 584.947785][T15929] SET target dimension over the limit! [ 585.064475][T15935] block nbd0: NBD_DISCONNECT [ 585.070071][T15935] block nbd0: Send disconnect failed -104 [ 585.079275][T15935] block nbd0: shutting down sockets [ 585.179342][T15948] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 585.389794][T15956] netlink: 'syz.4.2577': attribute type 1 has an invalid length. [ 585.473430][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 585.507849][T15956] bond13: entered promiscuous mode [ 585.523255][T15956] 8021q: adding VLAN 0 to HW filter on device bond13 [ 585.541996][T15952] bond6: (slave dummy0): Releasing active interface [ 585.552677][T15952] batman_adv: batadv0: Adding interface: dummy0 [ 585.559112][T15952] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.613136][T15952] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 585.642608][T15960] bond13: entered allmulticast mode [ 585.733750][T15961] bond13: (slave bridge11): making interface the new active one [ 585.752640][T15961] bridge11: entered promiscuous mode [ 585.760435][T15961] bridge11: entered allmulticast mode [ 585.777281][T15961] bond13: (slave bridge11): Enslaving as an active interface with an up link [ 585.990531][T15966] netlink: 'syz.0.2580': attribute type 2 has an invalid length. [ 586.512792][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 586.519969][T15995] netlink: 'syz.2.2585': attribute type 1 has an invalid length. [ 586.527753][T15995] netlink: 'syz.2.2585': attribute type 1 has an invalid length. [ 587.128431][T16026] __nla_validate_parse: 16 callbacks suppressed [ 587.128450][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2590'. [ 587.143670][T16026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.151082][T16026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.553270][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 587.670711][T16026] tipc: Resetting bearer [ 587.845015][T16026] tipc: Disabling bearer [ 587.984258][T16053] tipc: Enabling of bearer rejected, already enabled [ 587.993827][T16056] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 588.403031][T16072] lo speed is unknown, defaulting to 1000 [ 588.538036][T16067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2599'. [ 588.592774][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 588.851234][T16088] sctp: [Deprecated]: syz.2.2603 (pid 16088) Use of int in maxseg socket option. [ 588.851234][T16088] Use struct sctp_assoc_value instead [ 588.920256][T16089] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2603'. [ 589.300621][T16102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2610'. [ 589.450980][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 589.633157][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 589.664689][T16119] syzkaller0: entered promiscuous mode [ 589.670375][T16119] syzkaller0: entered allmulticast mode [ 589.693601][T16109] validate_nla: 1 callbacks suppressed [ 589.693622][T16109] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 589.769596][T16109] 8021q: adding VLAN 0 to HW filter on device bond15 [ 589.854310][T16109] tipc: Resetting bearer [ 589.959159][T16109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.118759][T16137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2619'. [ 590.170639][T16137] netlink: 'syz.3.2619': attribute type 10 has an invalid length. [ 590.205532][T16109] ip6erspan0: left allmulticast mode [ 590.211037][T16109] vlan3: left allmulticast mode [ 590.215900][T16109] erspan0: left allmulticast mode [ 590.224072][T16109] bond13: left promiscuous mode [ 590.228196][T16138] netlink: 'syz.3.2619': attribute type 1 has an invalid length. [ 590.237541][T16138] netlink: 'syz.3.2619': attribute type 2 has an invalid length. [ 590.273116][T16109] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 590.280508][T16109] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 590.299446][ T3337] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.313137][ T3337] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.321689][ T3337] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 590.331464][ T3337] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.340810][ T3337] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.349866][ T3337] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 590.359056][ T3337] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.368504][ T3337] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.377557][ T3337] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 590.387832][ T3337] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.396928][ T3337] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.405965][ T3337] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 590.672826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 591.352060][T16168] xt_CONNSECMARK: invalid mode: 254 [ 591.422380][T16171] syzkaller0: entered promiscuous mode [ 591.427927][T16171] syzkaller0: entered allmulticast mode [ 591.453628][T16178] netlink: 'syz.2.2633': attribute type 10 has an invalid length. [ 591.519025][T16178] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.528514][T16178] bond0: (slave team0): Enslaving as an active interface with a down link [ 591.713403][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 591.791764][T16202] netlink: 'syz.3.2637': attribute type 9 has an invalid length. [ 591.881533][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2637'. [ 591.960028][T16207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2639'. [ 592.008175][T16202] macvlan5: entered promiscuous mode [ 592.014408][T16202] macvlan5: entered allmulticast mode [ 592.020200][T16202] gretap0: entered allmulticast mode [ 592.194767][T16219] 8021q: adding VLAN 0 to HW filter on device bond16 [ 592.207271][T16219] team0: Port device bond16 added [ 592.430959][T16236] xt_hashlimit: size too large, truncated to 1048576 [ 592.752869][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 592.911085][T16250] syzkaller0: entered promiscuous mode [ 592.916631][T16250] syzkaller0: entered allmulticast mode [ 593.006855][T16254] bridge7: entered promiscuous mode [ 593.012155][T16254] bridge7: entered allmulticast mode [ 593.020340][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'. [ 593.020513][ T810] dummy0: entered promiscuous mode [ 593.031585][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2647'. [ 593.089360][T16254] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2647'. [ 593.127450][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2648'. [ 593.137032][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'. [ 593.147097][ T5625] dummy0: left promiscuous mode [ 593.167642][T16258] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 593.199827][T16259] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2650'. [ 593.793140][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 594.408395][T16322] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2658'. [ 594.699550][T16330] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 594.732894][T16330] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 594.745788][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2659'. [ 594.828042][T16288] netlink: 'syz.4.2655': attribute type 1 has an invalid length. [ 594.836102][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 594.893213][T16288] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2655'. [ 595.874955][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 595.903940][T16364] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2668'. [ 596.146071][T16374] tipc: Resetting bearer [ 596.156027][T16373] tipc: Resetting bearer [ 596.498354][T16385] xt_TCPMSS: Only works on TCP SYN packets [ 596.723384][ T1172] tipc: Resetting bearer [ 596.912866][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 597.729516][T16438] syzkaller0: entered promiscuous mode [ 597.782007][T16438] syzkaller0: entered allmulticast mode [ 597.953440][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 598.082493][T16452] __nla_validate_parse: 3 callbacks suppressed [ 598.082518][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2691'. [ 598.128872][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2690'. [ 598.338737][T16466] IPv6: Can't replace route, no match found [ 598.472123][T16465] lo speed is unknown, defaulting to 1000 [ 598.811369][T16484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2699'. [ 598.994496][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 599.024128][T16490] netlink: 'syz.4.2701': attribute type 9 has an invalid length. [ 599.098465][T16499] syzkaller0: entered promiscuous mode [ 599.104809][T16499] syzkaller0: entered allmulticast mode [ 599.241331][T16511] netlink: 'syz.4.2706': attribute type 61 has an invalid length. [ 599.249782][T16511] netlink: 'syz.4.2706': attribute type 62 has an invalid length. [ 599.271236][T16513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2707'. [ 599.284406][T16511] tipc: Enabled bearer , priority 0 [ 599.423954][T16513] 8021q: adding VLAN 0 to HW filter on device bond17 [ 599.734609][T16532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2711'. [ 600.033508][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 600.075273][T16545] nbd: couldn't find device at index 1510014976 [ 600.120308][T16501] tipc: Disabling bearer [ 600.412079][T16560] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 600.450337][T16560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2716'. [ 600.722341][T16582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2722'. [ 600.851217][T16588] geneve3: entered promiscuous mode [ 600.957218][T16594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2727'. [ 601.054427][T16599] syzkaller0: entered promiscuous mode [ 601.059970][T16599] syzkaller0: entered allmulticast mode [ 601.072887][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 601.088889][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'. [ 601.414069][T16619] sctp: [Deprecated]: syz.2.2730 (pid 16619) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.414069][T16619] Use struct sctp_sack_info instead [ 601.490405][T16624] sctp: [Deprecated]: syz.4.2734 (pid 16624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.490405][T16624] Use struct sctp_sack_info instead [ 601.509073][T16623] sctp: [Deprecated]: syz.4.2734 (pid 16623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.509073][T16623] Use struct sctp_sack_info instead [ 601.835587][T16639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.866616][T16641] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2741'. [ 602.049462][T16641] netlink: 'syz.3.2741': attribute type 11 has an invalid length. [ 602.113299][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 602.551778][T16686] netlink: 'syz.4.2754': attribute type 3 has an invalid length. [ 602.571034][T16686] netlink: 'syz.4.2754': attribute type 4 has an invalid length. [ 602.905948][T16701] openvswitch: netlink: Duplicate or invalid key (type 0). [ 602.913250][T16701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.954242][ T30] audit: type=1107 audit(1784778024.689:10): pid=16705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 603.014773][T16701] openvswitch: netlink: Flow key attribute not present in set flow. [ 603.152882][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 603.187980][T16718] __nla_validate_parse: 8 callbacks suppressed [ 603.188000][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2764'. [ 603.367955][T16722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2765'. [ 603.403589][T16724] netlink: 'syz.3.2766': attribute type 1 has an invalid length. [ 603.411480][T16724] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2766'. [ 603.441908][T16724] sctp: [Deprecated]: syz.3.2766 (pid 16724) Use of int in max_burst socket option. [ 603.441908][T16724] Use struct sctp_assoc_value instead [ 603.786743][T16733] lo speed is unknown, defaulting to 1000 [ 604.193617][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 604.483136][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'. [ 604.515395][T16755] batman_adv: batadv0: Removing interface: dummy0 [ 604.552331][T16760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2773'. [ 604.561698][T16760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2773'. [ 604.594317][T16763] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2775'. [ 604.603409][T16763] netlink: 'syz.4.2775': attribute type 1 has an invalid length. [ 604.680529][T16765] netlink: 'syz.4.2776': attribute type 32 has an invalid length. [ 604.689783][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2776'. [ 604.898230][T16774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.943453][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2779'. [ 605.074974][T16769] lo speed is unknown, defaulting to 1000 [ 605.123140][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2779'. [ 605.232791][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 606.273427][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 606.454144][T16807] lo speed is unknown, defaulting to 1000 [ 607.065329][T16825] lo speed is unknown, defaulting to 1000 [ 607.312835][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 607.491538][T16772] tipc: Resetting bearer [ 607.520524][T16850] sctp: [Deprecated]: syz.4.2798 (pid 16850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.520524][T16850] Use struct sctp_sack_info instead [ 607.654382][T16772] tipc: Enabling of bearer rejected, already enabled [ 607.751753][T16771] tipc: Resetting bearer [ 608.074603][T16863] smbdirect: ib_dev[siz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 608.095199][T16863] smbdirect: ib_dev[siz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 608.112354][T16863] smbdirect: ib_dev[siz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 608.155297][T16863] infiniband siz2: RDMA CMA: cma_listen_on_dev, error -98 [ 608.353226][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 608.504748][T16876] bond8 (unregistering): Released all slaves [ 608.629404][ T48] [ 608.631815][ T48] ====================================================== [ 608.638878][ T48] WARNING: possible circular locking dependency detected [ 608.646015][ T48] syzkaller #0 Not tainted [ 608.650716][ T48] ------------------------------------------------------ [ 608.657809][ T48] kworker/u8:3/48 is trying to acquire lock: [ 608.663813][ T48] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 608.674334][ T48] [ 608.674334][ T48] but task is already holding lock: [ 608.681726][ T48] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 608.692748][ T48] [ 608.692748][ T48] which lock already depends on the new lock. [ 608.692748][ T48] [ 608.703184][ T48] [ 608.703184][ T48] the existing dependency chain (in reverse order) is: [ 608.712233][ T48] [ 608.712233][ T48] -> #12 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 608.721165][ T48] down_read+0x4a/0x330 [ 608.725880][ T48] kernfs_remove_by_name_ns+0x3f/0x140 [ 608.731904][ T48] internal_create_group+0x58e/0x1180 [ 608.737833][ T48] sysfs_update_groups+0x60/0x130 [ 608.743422][ T48] pmu_dev_alloc+0x29b/0x300 [ 608.748552][ T48] perf_event_sysfs_init+0x76/0x100 [ 608.754385][ T48] do_one_initcall+0x250/0x870 [ 608.759685][ T48] do_initcall_level+0x10a/0x1a0 [ 608.765195][ T48] do_initcalls+0x59/0xa0 [ 608.770048][ T48] kernel_init_freeable+0x29d/0x3e0 [ 608.775766][ T48] kernel_init+0x1d/0x1d0 [ 608.780624][ T48] ret_from_fork+0x514/0xb70 [ 608.785740][ T48] ret_from_fork_asm+0x1a/0x30 [ 608.791021][ T48] [ 608.791021][ T48] -> #11 (pmus_lock){+.+.}-{4:4}: [ 608.798241][ T48] __mutex_lock+0x19d/0x1550 [ 608.803355][ T48] perf_event_init_cpu+0x1d1/0x7a0 [ 608.808990][ T48] cpuhp_invoke_callback+0x434/0x810 [ 608.814800][ T48] cpuhp_thread_fun+0x362/0x780 [ 608.820175][ T48] smpboot_thread_fn+0x57c/0xa80 [ 608.825636][ T48] kthread+0x388/0x470 [ 608.830232][ T48] ret_from_fork+0x514/0xb70 [ 608.835347][ T48] ret_from_fork_asm+0x1a/0x30 [ 608.840630][ T48] [ 608.840630][ T48] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 608.848279][ T48] cpuhp_thread_fun+0x127/0x780 [ 608.853653][ T48] smpboot_thread_fn+0x57c/0xa80 [ 608.859112][ T48] kthread+0x388/0x470 [ 608.863705][ T48] ret_from_fork+0x514/0xb70 [ 608.868830][ T48] ret_from_fork_asm+0x1a/0x30 [ 608.874116][ T48] [ 608.874116][ T48] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 608.881852][ T48] cpus_read_lock+0x42/0x160 [ 608.887050][ T48] static_key_slow_inc+0x12/0x30 [ 608.892609][ T48] setup_udp_tunnel_sock+0x2df/0x4f0 [ 608.898526][ T48] l2tp_tunnel_register+0xe77/0x1570 [ 608.904362][ T48] pppol2tp_connect+0x8e3/0x18b0 [ 608.909828][ T48] __sys_connect+0x323/0x460 [ 608.914994][ T48] __x64_sys_connect+0x7a/0x90 [ 608.920286][ T48] do_syscall_64+0x174/0x580 [ 608.925397][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.931821][ T48] [ 608.931821][ T48] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 608.939643][ T48] lock_sock_nested+0x41/0x100 [ 608.944934][ T48] tls_sw_sendmsg+0x161/0x2860 [ 608.950262][ T48] sock_sendmsg_nosec+0x90/0x180 [ 608.955728][ T48] sock_write_iter+0x2de/0x3e0 [ 608.961014][ T48] do_iter_readv_writev+0x612/0x8c0 [ 608.966743][ T48] vfs_writev+0x343/0x990 [ 608.971596][ T48] do_writev+0x154/0x2e0 [ 608.976363][ T48] do_syscall_64+0x174/0x580 [ 608.981481][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.988033][ T48] [ 608.988033][ T48] -> #7 (&ctx->tx_lock){+.+.}-{4:4}: [ 608.995532][ T48] __mutex_lock+0x19d/0x1550 [ 609.000663][ T48] tls_sw_sendmsg+0x13c/0x2860 [ 609.005966][ T48] sock_sendmsg_nosec+0x90/0x180 [ 609.011432][ T48] sock_sendmsg+0x1ca/0x2d0 [ 609.016458][ T48] __sock_xmit+0x245/0x4f0 [ 609.021462][ T48] nbd_disconnect+0x3ad/0x560 [ 609.026660][ T48] nbd_disconnect_and_put+0x32/0x280 [ 609.032470][ T48] nbd_genl_disconnect+0x4af/0x590 [ 609.038153][ T48] genl_family_rcv_msg_doit+0x233/0x340 [ 609.044277][ T48] genl_rcv_msg+0x614/0x7a0 [ 609.049405][ T48] netlink_rcv_skb+0x226/0x4a0 [ 609.054692][ T48] genl_rcv+0x28/0x40 [ 609.059201][ T48] netlink_unicast+0x7bb/0x940 [ 609.064492][ T48] netlink_sendmsg+0x813/0xb40 [ 609.069812][ T48] sock_sendmsg_nosec+0x13a/0x180 [ 609.075362][ T48] ____sys_sendmsg+0x54e/0x850 [ 609.080648][ T48] ___sys_sendmsg+0x2a5/0x360 [ 609.085847][ T48] __x64_sys_sendmsg+0x1b1/0x290 [ 609.091303][ T48] do_syscall_64+0x174/0x580 [ 609.096417][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.102831][ T48] [ 609.102831][ T48] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 609.110479][ T48] __mutex_lock+0x19d/0x1550 [ 609.115609][ T48] nbd_queue_rq+0x373/0x1150 [ 609.120737][ T48] blk_mq_dispatch_rq_list+0x499/0x1990 [ 609.126875][ T48] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 609.133767][ T48] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 609.140280][ T48] blk_mq_run_work_fn+0x16c/0x300 [ 609.145827][ T48] process_scheduled_works+0xa8e/0x14e0 [ 609.151906][ T48] worker_thread+0xa47/0xfb0 [ 609.157072][ T48] kthread+0x388/0x470 [ 609.161669][ T48] ret_from_fork+0x514/0xb70 [ 609.166784][ T48] ret_from_fork_asm+0x1a/0x30 [ 609.172073][ T48] [ 609.172073][ T48] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 609.179457][ T48] __mutex_lock+0x19d/0x1550 [ 609.184572][ T48] nbd_queue_rq+0xc1/0x1150 [ 609.189641][ T48] blk_mq_dispatch_rq_list+0x499/0x1990 [ 609.196060][ T48] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 609.202913][ T48] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 609.209419][ T48] blk_mq_run_work_fn+0x16c/0x300 [ 609.214982][ T48] process_scheduled_works+0xa8e/0x14e0 [ 609.221048][ T48] worker_thread+0xa47/0xfb0 [ 609.226164][ T48] kthread+0x388/0x470 [ 609.230757][ T48] ret_from_fork+0x514/0xb70 [ 609.235879][ T48] ret_from_fork_asm+0x1a/0x30 [ 609.241182][ T48] [ 609.241182][ T48] -> #4 (set->srcu){.+.+}-{0:0}: [ 609.248329][ T48] __synchronize_srcu+0xc9/0x2f0 [ 609.253808][ T48] elevator_switch+0x1e8/0x7b0 [ 609.259165][ T48] elevator_change+0x2fa/0x480 [ 609.264452][ T48] elevator_set_default+0x375/0x440 [ 609.270175][ T48] blk_register_queue+0x3f3/0x4e0 [ 609.275805][ T48] __add_disk+0x6cb/0xe30 [ 609.280687][ T48] add_disk_fwnode+0x100/0x3a0 [ 609.285968][ T48] nbd_dev_add+0x733/0xb60 [ 609.290916][ T48] nbd_init+0x15f/0x1e0 [ 609.295666][ T48] do_one_initcall+0x250/0x870 [ 609.300956][ T48] do_initcall_level+0x10a/0x1a0 [ 609.306427][ T48] do_initcalls+0x59/0xa0 [ 609.311285][ T48] kernel_init_freeable+0x29d/0x3e0 [ 609.317112][ T48] kernel_init+0x1d/0x1d0 [ 609.321968][ T48] ret_from_fork+0x514/0xb70 [ 609.327084][ T48] ret_from_fork_asm+0x1a/0x30 [ 609.332370][ T48] [ 609.332370][ T48] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 609.340205][ T48] __mutex_lock+0x19d/0x1550 [ 609.345322][ T48] elevator_change+0x1af/0x480 [ 609.350612][ T48] elevator_set_none+0xb5/0x140 [ 609.355988][ T48] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 609.362324][ T48] nbd_start_device+0x189/0xb30 [ 609.367716][ T48] nbd_genl_connect+0x1597/0x1c10 [ 609.373296][ T48] genl_family_rcv_msg_doit+0x233/0x340 [ 609.379426][ T48] genl_rcv_msg+0x614/0x7a0 [ 609.384456][ T48] netlink_rcv_skb+0x226/0x4a0 [ 609.389741][ T48] genl_rcv+0x28/0x40 [ 609.392714][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 609.394243][ T48] netlink_unicast+0x7bb/0x940 [ 609.406372][ T48] netlink_sendmsg+0x813/0xb40 [ 609.411748][ T48] sock_sendmsg_nosec+0x13a/0x180 [ 609.417355][ T48] ____sys_sendmsg+0x54e/0x850 [ 609.422638][ T48] ___sys_sendmsg+0x2a5/0x360 [ 609.427846][ T48] __x64_sys_sendmsg+0x1b1/0x290 [ 609.433317][ T48] do_syscall_64+0x174/0x580 [ 609.438431][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.444845][ T48] [ 609.444845][ T48] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 609.453458][ T48] blk_alloc_queue+0x544/0x690 [ 609.458752][ T48] __blk_mq_alloc_disk+0x194/0x390 [ 609.464392][ T48] nbd_dev_add+0x494/0xb60 [ 609.469334][ T48] nbd_init+0x15f/0x1e0 [ 609.474016][ T48] do_one_initcall+0x250/0x870 [ 609.479318][ T48] do_initcall_level+0x10a/0x1a0 [ 609.484866][ T48] do_initcalls+0x59/0xa0 [ 609.489729][ T48] kernel_init_freeable+0x29d/0x3e0 [ 609.495535][ T48] kernel_init+0x1d/0x1d0 [ 609.500492][ T48] ret_from_fork+0x514/0xb70 [ 609.505608][ T48] ret_from_fork_asm+0x1a/0x30 [ 609.510902][ T48] [ 609.510902][ T48] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 609.518135][ T48] fs_reclaim_acquire+0x71/0x100 [ 609.523603][ T48] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 609.529849][ T48] alloc_inode+0xb8/0x1b0 [ 609.534707][ T48] iget_locked+0x131/0x6a0 [ 609.539645][ T48] kernfs_get_inode+0x4f/0x770 [ 609.544951][ T48] kernfs_get_tree+0x5cd/0x980 [ 609.550243][ T48] vfs_get_tree+0x92/0x2a0 [ 609.555179][ T48] do_new_mount+0x319/0xdc0 [ 609.560221][ T48] __se_sys_mount+0x31d/0x420 [ 609.565448][ T48] do_syscall_64+0x174/0x580 [ 609.570563][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.576978][ T48] [ 609.576978][ T48] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 609.584975][ T48] __lock_acquire+0x1520/0x2cf0 [ 609.590360][ T48] lock_acquire+0x106/0x350 [ 609.595394][ T48] down_write+0x96/0x200 [ 609.600162][ T48] kernfs_remove_by_name_ns+0x4e/0x140 [ 609.606148][ T48] sysfs_unmerge_group+0xd3/0x140 [ 609.611697][ T48] dpm_sysfs_remove+0x5f/0xd0 [ 609.616964][ T48] device_del+0x250/0x8f0 [ 609.621849][ T48] srp_remove_one+0x81/0x280 [ 609.627008][ T48] remove_client_context+0xb9/0x1e0 [ 609.632755][ T48] disable_device+0x137/0x330 [ 609.637963][ T48] __ib_unregister_device+0x2c9/0x400 [ 609.643853][ T48] ib_unregister_work+0x19/0x30 [ 609.649230][ T48] process_scheduled_works+0xa8e/0x14e0 [ 609.655389][ T48] worker_thread+0xa47/0xfb0 [ 609.660504][ T48] kthread+0x388/0x470 [ 609.665099][ T48] ret_from_fork+0x514/0xb70 [ 609.670217][ T48] ret_from_fork_asm+0x1a/0x30 [ 609.675503][ T48] [ 609.675503][ T48] other info that might help us debug this: [ 609.675503][ T48] [ 609.685736][ T48] Chain exists of: [ 609.685736][ T48] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 609.685736][ T48] [ 609.699557][ T48] Possible unsafe locking scenario: [ 609.699557][ T48] [ 609.707053][ T48] CPU0 CPU1 [ 609.712467][ T48] ---- ---- [ 609.717830][ T48] rlock(&root->kernfs_supers_rwsem); [ 609.723291][ T48] lock(pmus_lock); [ 609.729712][ T48] lock(&root->kernfs_supers_rwsem); [ 609.737603][ T48] lock(&root->kernfs_rwsem); [ 609.742370][ T48] [ 609.742370][ T48] *** DEADLOCK *** [ 609.742370][ T48] [ 609.750517][ T48] 4 locks held by kworker/u8:3/48: [ 609.755635][ T48] #0: ffff88801b1f4940 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 609.767078][ T48] #1: ffffc90000b87c40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 609.780300][ T48] #2: ffff8880777886f8 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x279/0x400 [ 609.791712][ T48] #3: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 609.803030][ T48] [ 609.803030][ T48] stack backtrace: [ 609.808938][ T48] CPU: 1 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 609.808957][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 609.808968][ T48] Workqueue: ib-unreg-wq ib_unregister_work [ 609.808986][ T48] Call Trace: [ 609.808994][ T48] [ 609.809001][ T48] dump_stack_lvl+0xe8/0x150 [ 609.809025][ T48] print_circular_bug+0x2e1/0x300 [ 609.809041][ T48] check_noncircular+0x12e/0x150 [ 609.809067][ T48] __lock_acquire+0x1520/0x2cf0 [ 609.809088][ T48] ? __lock_acquire+0x13e8/0x2cf0 [ 609.809113][ T48] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 609.809136][ T48] lock_acquire+0x106/0x350 [ 609.809154][ T48] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 609.809181][ T48] down_write+0x96/0x200 [ 609.809199][ T48] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 609.809220][ T48] ? __pfx_down_write+0x10/0x10 [ 609.809241][ T48] kernfs_remove_by_name_ns+0x4e/0x140 [ 609.809264][ T48] sysfs_unmerge_group+0xd3/0x140 [ 609.809284][ T48] dpm_sysfs_remove+0x5f/0xd0 [ 609.809304][ T48] device_del+0x250/0x8f0 [ 609.809327][ T48] ? xa_load+0x60/0x210 [ 609.809392][ T48] ? __pfx_device_del+0x10/0x10 [ 609.809407][ T48] ? remove_client_context+0x79/0x1e0 [ 609.809423][ T48] ? __pfx_srp_remove_one+0x10/0x10 [ 609.809445][ T48] srp_remove_one+0x81/0x280 [ 609.809467][ T48] ? __pfx_srp_remove_one+0x10/0x10 [ 609.809488][ T48] remove_client_context+0xb9/0x1e0 [ 609.809506][ T48] disable_device+0x137/0x330 [ 609.809523][ T48] ? __pfx_disable_device+0x10/0x10 [ 609.809541][ T48] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 609.809557][ T48] ? process_scheduled_works+0xa20/0x14e0 [ 609.809575][ T48] __ib_unregister_device+0x2c9/0x400 [ 609.809592][ T48] ? rcu_is_watching+0x15/0xb0 [ 609.809614][ T48] ? process_scheduled_works+0xa20/0x14e0 [ 609.809630][ T48] ib_unregister_work+0x19/0x30 [ 609.809643][ T48] process_scheduled_works+0xa8e/0x14e0 [ 609.809669][ T48] ? __pfx_process_scheduled_works+0x10/0x10 [ 609.809687][ T48] ? assign_work+0x3cf/0x5d0 [ 609.809704][ T48] worker_thread+0xa47/0xfb0 [ 609.809730][ T48] kthread+0x388/0x470 [ 609.809750][ T48] ? __pfx_worker_thread+0x10/0x10 [ 609.809766][ T48] ? __pfx_kthread+0x10/0x10 [ 609.809786][ T48] ret_from_fork+0x514/0xb70 [ 609.809809][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 609.809830][ T48] ? __switch_to+0xc89/0x1420 [ 609.809847][ T48] ? __pfx_kthread+0x10/0x10 [ 609.809867][ T48] ret_from_fork_asm+0x1a/0x30 [ 609.809887][ T48] [ 610.142469][ T3368] tipc: Resetting bearer [ 610.150020][ T48] smbdirect: ib_dev[siz2] removed [ 610.159324][T16894] erspan0: entered promiscuous mode [ 610.165335][T16894] __nla_validate_parse: 1 callbacks suppressed [ 610.165349][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2809'. [ 610.433024][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 611.472731][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 612.512985][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 613.552743][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 614.592989][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 615.632735][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 616.673011][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 617.712715][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available