last executing test programs: 2.336700617s ago: executing program 4 (id=4134): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ea}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x2b, &(0x7f0000000300)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) 1.568364693s ago: executing program 4 (id=4137): r0 = socket(0x11, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x20, 0x10}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xffffffffffffffff, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x2, 0x0, 0x7, 0x0, 0x0, 0xfffffffc}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 1.332515663s ago: executing program 4 (id=4141): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x6, [@enum64={0xa, 0x6, 0x0, 0x13, 0x1, 0x0, [{0x8, 0x3, 0x8}, {0x6, 0x1, 0xffffff7f}, {0x6, 0x3ff, 0x8cf}, {0xf, 0x5, 0x8}, {0x1, 0x6, 0x10}, {0xd, 0x6, 0x1ff}]}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x5f, 0x61, 0x30, 0x0]}}, &(0x7f0000000280)=""/230, 0x7e, 0xe6, 0x0, 0x7f}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000e2000000000000000072019a001a00000095005b00b8450000"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf, r1}, 0x94) 1.187785204s ago: executing program 3 (id=4144): r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x19, 0x1d, &(0x7f0000001700)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @tail_call, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}], &(0x7f0000000180)='GPL\x00', 0xfffffffb, 0xc0, &(0x7f0000001800)=""/192, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x4, 0x8, 0xffffffff, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001940)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000001980)=[{0x4, 0x2, 0x6, 0x9}, {0x4, 0x3, 0xf, 0x5}], 0x10, 0xff8}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f00000003c0)=r3, 0xfdba) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000016000f1000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000015c0)=@nat={'nat\x00', 0x19, 0x4, 0x620, [0x200000000f80, 0x0, 0x0, 0x200000000fb0, 0x200000000fe0], 0x0, &(0x7f0000000100), &(0x7f0000000f80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x1}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x58, 0xd, 'wlan1\x00', 'pim6reg1\x00', 'ip6_vti0\x00', 'ipvlan0\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, [0x0, 0x0, 0xff, 0xff, 0xff], 0x196, 0x216, 0x24e, [@comment={{'comment\x00', 0x0, 0x100}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xf1, 0x8, {0x1}}}}, @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x10}}}], @snat={'snat\x00', 0x10, {{@remote, 0x10}}}}, {0x5, 0x10, 0x6000, 'team_slave_0\x00', 'wg1\x00', 'hsr0\x00', 'gretap0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0x1d6, [], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0x0, 0x0, 'vlan0\x00', 'vlan1\x00', 'veth0_macvtap\x00', 'bridge_slave_0\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}, {0x9, 0x24, 0x88be, 'veth1_virt_wifi\x00', 'sit0\x00', 'ip6gre0\x00', 'team0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, [0x0, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x51}}}}]}]}, 0x698) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xff0a, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f00000000c0)={0x4, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff12}, 0x94) 1.104928675s ago: executing program 4 (id=4145): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x5f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000080)={{[0x7, 0x7, 0x10001, 0x3]}, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)=[{{@_ha_fsid={[0x0, 0x9d]}, {0x0, 0x5, 0x85, 0xfe71}}, 0xfffffff5, 0x0, '^{\x00'}, {{@align=0x9, {0x9, 0x0, 0x0, 0x7ff}}, 0x2, 0x0, '\xff\xff'}, {{@align=0x4, {0xb, 0x9ca4, 0xfc, 0xf4}}, 0xb, 0x0, '++([#\x00'}, {{@align=0xffffffffffff8001, {0x9a00, 0xb, 0x5, 0x1}}, 0x6, 0x0, '\x00'}, {{@align, {0x72ca, 0x7f, 0x0, 0x7}}, 0x9, 0x0, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x46, &(0x7f0000000380), 0x4) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@typed={0x4, 0x3b}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x48004) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r2, @ANYBLOB="04"], 0xc4}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x10001}}}}}, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f00000002c0)) 1.023988018s ago: executing program 3 (id=4147): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1c, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x193, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 952.303972ms ago: executing program 2 (id=4148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240), 0x4) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r1, 0x89e1, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async, rerun: 64) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x400a801) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYRES32=r5], 0x6f4}}, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async, rerun: 64) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0x24) (async) unshare(0x6a040000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) 951.892441ms ago: executing program 4 (id=4149): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r1, 0xc, 0x1, 0x3, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0]}, 0x40) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 924.569917ms ago: executing program 1 (id=4150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fdbedf250500000014b73b47bb088b2ad47c867436a724516a998f280001800d0001007564703a73798c5c40d488e04ad9ffa050e4a9c7a6daceea18b32613f1fb4865a97a15ee7d9085626e672a30ad38a429046fdb6792197e06037c826d44304de0f967edb12313bb8c0f2b8efc2478a5bf4ce3ba82deec702f1c7b45510ede2af37293a24e615c875c7252d6f7ca22f4bb1ee9bff7b8b9c8458352bee6ce83fffc652bd7321a92c355e9af9c4bcf3105c22fd986dba33dd25cb4"], 0x28}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r11, 0x6, 0x9, 0xfffffffffffffffd, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0xffe0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb, [{0x7, 0x3, 0x4, 0x0, 0xfffffff5, 0x4}]}, [{0x2, 0x9c, 0x81, 0x8, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x3, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x42}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0xffffffff, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x5, 0x3, 0x6, 0xe, 0x0, 0x20080}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1978, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0x4e, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff14, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xb}, {0x6, 0x6, 0x1ff, 0x8, 0x200, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x9, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x4fc, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x8003}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x5917}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x6, 0x1, 0x8, 0x66a}, {0xffb, 0x6, 0x4, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x100000, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe7}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0xe, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x1, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52a, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x0, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x2, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x0, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0x102, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd213, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0xfd}, {0x1c00000, 0x3, 0x8, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed3, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0xfffffffe, 0x5, 0x3, 0x8}, {0x0, 0x1, 0x1, 0x2, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x3, 0x0, 0x80000001}, {0x10001, 0x7be, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x3, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x400, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0x1, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0xfffffffd}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0xffe00000, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x2000004, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x9, 0x1, 0x0, 0x3}, {0x1, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x9, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0xffffffff, 0x9, 0x8, 0xfff, 0x4, 0x8000}, {0x8195, 0x2, 0x1000, 0x0, 0x0, 0xfffffffc}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x5, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7c0, 0x2, 0x6, 0x207f}, {0x10, 0x2, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x800, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x6bd67380fe3bd6e5}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0xa}, {0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6, 0x1}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) 860.126258ms ago: executing program 0 (id=4151): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) (async) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01eb2dbd7000fbdbdf2501000000140002007767310000000000000000000000000004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) r3 = socket(0x40000000015, 0x805, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x380000, @mcast1, 0x100}, 0x1c) getsockopt(r3, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) (async) socket$nl_generic(0x10, 0x3, 0x10) 777.056364ms ago: executing program 4 (id=4152): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xbc}}, &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "d61418f3"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000180)) 749.982385ms ago: executing program 2 (id=4153): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x9}, {0xf, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xf, 0xfff3}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440c6}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000002a40)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="af661c43813b7e0aa06193c407558bae479682b16d99ff5328f8d7272369849389b6f6faca9809ba5f6d7f3c534da46d99f8333d57d7a5673382df8beaa165eb7d57c6c35cfb7683bba0741febfbda9f648e901bea66247706cb28751d78b29b94b6c2e77eab094b8d66a7d26c950ee72c66e2dc1f390acb7d3e619819d9ece3b48f", 0x82}], 0x2, &(0x7f0000002ac0)=ANY=[@ANYBLOB="000100000000000029000000060000007cf4076039633478858386a74448b9248ee6d197546400d301ca26e063ae17823fba1a9f6f3baa293f34e2856e573962fd978cdf74c5b6c8961cd8893f4e2c04aa74d4c963aad1db8a31a41914f43f74a2ca0e5eec548ae8beca402c41f5f4f9ce47d5724c17f3db70e4e602ed6a4961b77bec29e31cce4802cefcacd2cc4b53be4c0e6172ab2972c7a51e7c19348363fe8d4ffdb0d39f777d13ba95d2b5b4223ba47785ee16c0306f653ad0460385c1e96d4b94e3b47c89c61b7af65c1297e643d7c9fc7a2933d08c6ad71a2c111656f5535e854e1436695332bdfcef9edc4c576ba56720e2ca405ac8dfb0301ef100f80000000000000018010000020000009d2c3e0d81c578021fb2fe7e1737bf8ad282cffec269a2a1db4b63d3a87183127fead8df693750fcf5b22ba85846d03039dddbeec74aa706b3b0cf61772362a793a4f9bb9493558402c3ac1d5481566c39807598b041b3091861f61e93617238f0b0dfc90824c5390bca6fb7b21965f4d1550972ff2bcd0001ef6c0ea6807247a7b99b373695b82f0b01ec75f984d4707270d074ecf6af07da1c81099b73a91ec6854789c9c262ec06c3874cd76910182d8f27a8378efb67b7ebf0b71fc74ff60863ab178aeca572d8d9d40329edbcb97137473f43cc1a95a9f30d7eb6a83e71edfe9c21819c0000101000000000000014010000090000004c09e41f592270d50d629f31b9ec85a0c7471b037dc35fa5116aaf0906537a48687db729afe7b0f559e5765a7a8eba7a2a46a1bbfa9d09062f6c664e39cde98adea75ff5581bd3e5b2b799a95362925d96e0af4884d632d46d958cee9b81eee0e5f43d139580770a13086e592a3ac2cf4554aedfc9a0bda811799b5a520be7f5be98f427822db3ac0ba31fd3ac851b2f1ab2b8b889816a881ba15fa7b8d0bfa72a2d28f270989250bbea76b22bc11bf148fbaf1fa0f1a124dba3802cda76fddbc3df9a3bc93d642dfa64b0dcd6c027da585ad01d9c315d433d2a3807abfb3733dd0b511560eba4205f02bdf0d171ef8bb61d0a148b978a66a40b66b8a7286fe38f6a18d0a5e59b52ed8885e3925f919e4be1dc99d47b5e144d9350b6f2e95cebdb978e1f893facccf1a54e63858f1a95c25fd9cac0952a88bf56609f8e4b1a25524472b2d150925c65b5ba7b85a2201b47da97fed2a5723f8a19d87c7494bc5a3c4711ce3990ee69461ec43a01b0688c0c2302bfd80d8297bd11878690eac49452155270486b4299f4754c43ccd61e67e096775d5fd329a9c79ca5604fd6750cf05e374b771a7cb5540cf6a17f0231881e39ea03d6cb1a77534b24e8bc86c61c95136707ca34822d5472bd94606154fbb985d2c2138d4dafee8ba3a9a2608f7770f86a1c62f63bb4f92f62ccd0496a315f32a938df881e43dfed784288ab191aaf224b77b675a6e161fc8791f60b3a9e64832514012b51473569d7f4e29308d2a21574d45d4ca277be2d73891428d0e316003e4b707d41e0654e86ae180b2eb184a5c5a8775141498ccc0a9e1c96db2bd37cccd41647cdbc0824ee66f44f96ed1d3274a8a28f0f346c252cfaf021427a80a22a4b9169f93483a2584a8f919836ffd3f527ca8e7cf9d009c44cb1a68903dc7c336c01144b64eedaf4d04d0d517271055bc38610b561fc0f408bd07933b8db60f8e09fd9adda4c35bc3e25563505f5b3c5d99e58bafa5c4788377d3cfed0309d81c03204f65273a9209d5d001ffc0d32202d141f75426d8680cb2cd0143b8213173ec8e7126bcface81a5551b4f34d009251f1af47c56d0c166bb3203e69d69998fea37890982a5daba732e8ac5e79080352ef78282c0a150313bd20f836cc06c551ab1d747dd018fe902645861321403946f66bb575be70a09c0f04af4e108662b67ae840cdffa9d61f29b42041cfdfe2847c3fb6b14c733cbe0cdaebe8daa6b8583a0220ae7f4e02c6cf6c7f56c814f2e03d7bc5e40f1a3077d4ce3d6527a52159ac5aa911bc2fe38e0d46d011c332ddd2fb4c2f71b6334da7a29d9faed727c0d6482931d0a8d7a63e5d75ec7343f53974553495071793478a78b6459e4c147800db4ec14707804a480f8bbf958d422507511cc98aa488fc90e5c842b9f0827e63f9ea3ddc2304fede2bfff9bd9ab95f8e58459d6777c64d681d86dad22c3704691c0b269a1191f4d2f1793dd47d3ea1623225a6e50ae8f20c0887e365e44cca16e03c2717b8aebea6734d97682e37232848e7d26ead33e4ceda9077e546cb7918ce15ae946336b22847281e5e715cfd192b21caa2c9863bcd2a645285c4f5f4e3b0cd86ec1a24671e5214ac8dfe4f7b15a5dd7adedcf2d716ee9f509557065f635e7e5c2a3395c949830280c10aed4e98aaeea335dec6ce0024e971a48d8f06f41ac8093895a49a41f6388abde14ccf6365585d9df6d4d2975f9ff06c156d40cadd4e6819a96fded61b11ec4471423c438f57489150cbcdfbee988f9b12c0af261c9d81b8659858499e373bb4be4b450473ae4c39eb6390ce575eb7d51e929aff68051fea9c330572be528ccf86f211a2c1d70683e29ac8720ff04a6e72ffffd3672878198e2a854f0d2884f0980479df35557f959d3879ea7688891a7c4575eb0f5a52a11b954e3a208e84c4e5d81c6ac715da1ca179a265498692f5f8095aa091bbb9f500752d6eb5d6c3cc8dc747e45cd9fa91021d37253e4a4b7994c3a12633195a4af7da83fd5b74b371d6904c55ce14f41a9ad432d94d325190486da3c981ebbca2dfb5e5f8b4442b40836f148233d17955abd163a61ce120646399a40a658506dcecf89ba104dff6b881084e7e45a3337834dae7b2a5597614ea929ce99d386904c13459db42beaa52cdef93aa724b0e38ebb23ffbe63de612db7f228e2da47ff41192a1ee4344d2fbca5706ef33fe0d377ee3be7d2803f0d8e4fef3ecf1831e0e042ce2d8fece86d7b0970750ef30b31da28abb6b184fe17572176872ca7332a29a9c17a4ea6f4523d4dbd4ce30adc2ca6868fd6bc1fa60b1fcea413976eeb0ecae954b94df875a0f33996c8cc637a1c4ddf28136f6993ca71858de272184f0b23fc0c3aa72d6b379b1b7ece90d0588077ddca95d8ed25af93c50a81b6b7da957514dfc79016c91c2ed4587cfea4c8e85291b82105c07caef357853c450b9be937912f0b6bbc96f1eb4deaf4ae7df64e3cfc30f894154754ebfe06badfda1ce670efe236ab523405f4f9596d5251b8102392b47d8406d48ca8f347ec4b46238e1d4e4ae737b83a3dd86f4363371fbc75eabe387e68b4276c9e32a018d34b1e7690b21e43e9c17b7a75cbada8f1548621b2042824439146fdad128d0708d6998985fbd23ee71e818b6fbd459a25304a0c1b81cdb2116ad1e062a6a6f03a14464b56fdb3cd450985efe6ddbbcbe4dcae6a30d8c03107d72928677085b8429f5cd0f326cd3b53f5130ee63428e5e7a89d4ab9137147da0198eebb8ab3932fbf030be27a2fc4460a7a39ccb16c9eb139740d158bb7030469a4ad0f3b3460093618acc47e6188ba4418efb578a38e61fd457b77d5cb09d4a4ac0b1b0372f00064303e25504e264412a5cbe52c16bfef4c54bde0c363ac1f1bc683c40d7709d06b663efa602ac3294e34dfdb087e9c3eff5e6a8f557177fecd12e75402d101854d65e6103b5480ded672e6f64842fe084ed32f0b789678772144b918e0f6033062a32f5b709dfbaae3dd5a334ad6b8f1be037882c0a306ffca9d4caf6f6ba978865e01fe3474a80a10bbeb1a818aeb3d59d0ebbbc5f0e3ae2871642bceb04bfaf26aee597fa7e862f8b76bf694f06290a01a56416835c03685cf3bba9ce5ade40effceb13040287b043b32a035d95a8781fc50c93f6d3a9062a0f0c9a37d7c34cc4932a1392325fe03248df1c8792cd5ba3942338d4ad502c681f817c8e80d123c7ecb096a47d348efd8a80745ba905b480f4bace3f12e8ec49a83867b0503d58ee029c8727a1b86a490db639bad8dd2fc9a3a87675edf9c11a0d6880c0e4f18ddf2b5efbbaa7d13d804b4065f6e8da87738a3c104d9d2871d036f27eeec58355d2ac125b64860955da2249b5f9c4864e872c6c20fee12028f60865d8b2721ff253c20c6cda7dacf3a0865abe2c292b9250c48c026a2dd5c317d5a1dba9a6e264bc061adda19daa529a2e72fd967a19081241ce27193fb79a9e6648e739c09493a39905223a71ceec8112ee8f0370aee2e0b0b508ef261835ce4ade95726037eddcd534e7cfcb244265287de856f6258e3368a1b616a2afd173b9bfe8770cbbc228b2c7900b89eca15c5782c30aedfa5bf8727ee8aa221e4e1ce9422bae8ea5f6e43f1b5dca84738f90e5744f309c64d599bf5a57f858e752b41a016980ba6c3eba95eb8f8f00913a501564f2b9a704c5e497a8bbab58f21cfd31fc7894f7ef1d8b56df41f3b1df52cd8f89b4e9edba49a1b1b948962578c5be1663212697ca3db177d26ecd31760376f4b8edc1756114d8fbb863835a6a7e2115c787cf457e01f0b1c7414b771b3cf2863a260b8a2bcf96acbda3442810bf9d2bbd815ec981443a07f8d807d4edf570429af652c8db74cb2bc60f53a96e77c04b08e4499bf914c30094fc5270c723f37ff2f6432535d4fc979193f60aadab58a8e569ec16a54b3c18ff9b349cd13b4832220eeea117bc688dc84bed0ff248951701501ee92dea58e48683ea32d2620246eca0c15707c5bbf1d21131748a9d9f9d80ac27f4e82868c3d3ec8a5839199a943688fc4d1610d3decdbf3cdf2dfa59d191f2738acacbb2952e4d39e0e7efa67ea658229aac6f1145241f54dc9d28fb06f63a052746a84b3d39e0e94e90c1d375501dfa03c793e05aed485bc6f29011de7479d1b202414037f7720b5597eac9627bbe70aaccf18c2dc214df73e9ec73e50528ec8edffe7ca808222a4d7eeae2e7e1b746e4180870a628f6ba27fde4fdd51a4c6872ba2e36d798a18cff9c0efe1b0a350e752d49d84f03fe2a2733dff8955b9b9d268af2da16753231a05c47dacba57be4061eb88c0b4019dbec3770a1901a5bcf8235ba566daf02bdbbfb735b83a704c1cdcc0d9b0dec75a90368a0ace0db5e00f844e39af0d8a1dc55b6f0c61d85d6a24c821b910979e98f3929acd25a7cae95b7103ec29b6ed84828818a51db959cdf6de6c23e307dd86f572e03d8e9aa54e6c79091ae2da3efa3c76c2e0d6f5627d669fcdf68a6953238d0a045dbd4dfd0d866418129cbe97c48ed0142a675d12e20d678e7d8e8f2a3cbfd71941cc6da0fb660c758476b6eb6c5bec6b77bfd9aee16a6d881af35f19e48a3133d014509074e1022ca804315f627302b73d8b6c3dcc2c987932aee3b1cfbf67dbe24c6a2da7a8c771efaa0914f764564266632bb6625c8f6219f98bab95b4160fa73984d0445654a59bf84e448eec8e2a8b23c866d24aaf700e61d7c02ac2b33bcbf6368f19fbae18f0e2f0a3ee671275c209ed71f8436cc407b2b83ceab8a010f98ab8671ec4898bf3491a5ae86617572def5696a50ac7478cc8be65ce83b7116a2522cb4850d583ea6c4b4680b42ba314ac4896babed8d4b82803ed4642e650bcb8d1b7d1cbe9265a23b931f8a71ea3ad9125ddb1eee77155ff68b265c76e75a14386844b8eaa12a7c06362c83b2ed1713c21efca963d0d99d6c8bc39263e6c1be71379f155d4e24bee916daecd865e6b35162030a16a402246d8b70bc1ac13c524d2f948fc40bc7ca2161467192e147219f851384477d034cbcb570c25f32d70b6b5ba7f505c673c9a8bae507da2c42e2544f93e95e6eba00e77b9e6febacdf7ecc88efdfdfd92dd87fbe0902483a31d7ca997666cd04bade112e34651a5120f17b3a74460f28a757f05eb56f08d1dbda3e276a770a0024cb75aa809bbdd11703f95038edf2b6351c61ae8dd7c2f66eac028567cbe67c8ea317e3aecc9a4957ed81521bf44c933a5e6b74e2661126238963efd1273c5b221b291b1e2b285064bdca9fda236e1c252259b41ebd9455c1f2932e2c39b0cecfd34fdd003836a9d448b29faddf5bfadfa684b2b6c600bd1605c439f47f06405c2e8afe92f43114990d08123db7cb541b4eab8d1d40ba92223b6a4b97cece0eead45dbe5c67b2247b506a07abe4b0bdc42d44e227fd0dfcae3b734c9fc56fbb727b2e8917add5a559724ece8776a8bb4603881b182e88eb5b9ea30b28eefe15dda3ce9b5f859641a84ab86772041c139bb9ff80075ef879a41402deecff5b7061a47ac940b753ade2603c3c30c83f11aabaf6d002457327426dcfc163bfa9afbd99497d6583548a6675e3e4854de8627f3acf4a9f6d30023af6a863e1292356d120cf93d00305e945a8c030304c53bf29cea52a2ab6d7aec25106625e0fb514cbab84cf26fcb2fec0119e08a7f9c5962ab70fc1f4a28a625e5a560bdd54a40f63ebe83ee3008b8a28c1f2518577004515c15cef095d824c92b5cc9b77e0f35e74a6c095c7f753176d4029e161f7c45935464a4418719f1b694deb3cf80ebc94694e7ef695c77d700c26f1faab941747dc3cd48f2f2c5b84abd10891bcbbafdca4c433e131e7fad3a6d9ea02587c2b27db256f0a55174051d3bc3299ac49e889dadde5d2d22b00143f7e72d3d8c28fa8dee9609fdc7dac29e53f95decc52a55424086f6414b0f3a6c1a70a0b5c563b38fe075e52532d20c9e5a57433db97ec08c8b705747b37dc2e74da339f866efe9557ce54258bacd49a8cd675ad170d61bd219bcd62e379a1a22d6d9cd13b70f29ebb00d05a6a661f2ba0d713aa7f7b3541b2db9615216e170e1abb78d768dff516d297da0f0e68ade217"], 0x1208}}, {{&(0x7f0000002680)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000000c0)="f9589f43253d31fa7e05df154bd51f0c456fcf9df3465fbf9533dced01cb80ebee66b4480e4c5b89869abd8f", 0x2c}, {&(0x7f0000002700)="c6d5370fc42e3d257e5a0d4be1c828fe7d8d295b80e138bb10e02304ada14c23af55d76602b0fa70faf6b2942312e499c3ba2bcb3d7c64a7254d2d84f65de350dc794554bc125dcca66c8183097c7637c978a1c4ac1ec03b528b373b20b3c27f405d8cb7e8d7873db17599d6770605f4fe183a5c068729846095676955e729f60336ae9605d38d755339419bbd8d8eece150dfac71ff2ae7df6dcf5fcba5f526ae138cb1c479c2d222603edc7a1b32aee60a5d54a7bfe5fc1881cd5ade535c4d140a016f561a11c5942d84244b7d4f1b7464", 0xd2}, {&(0x7f0000002800)="ec8d23cb8c6efa95f8fbf7d631bd9293c32c7e8d28090371097ce9b81a4e810c54be9a7b0d40c0fa2ebc5da22658b24c16dc5b465de3581af68bd64e16403fbba8dffbeaab9ef073ded524acb90175fb4551f32e8b0fad1b5a77f27d21a3a5ed7959b5b7fd7ecdac529bd0f5615e36f32b7a7985c81bc9e47bf325f92732adc7c02f7168606b028a6874f0dcdd7b7fb0ab79309cf706017bd8066f61a19ac9e7b11798e86b6c69d8bc7a2c366be8fbc0c630d842f9dee4cfd93bb35c7819931b53bcf0f48d098c3a2bbe9026d8f8428e9b2381b9ff3d6230ceabdf6c57d3bce110cc81fbf0066907", 0xe8}, {&(0x7f0000002900)="713810bfb2b774fac8c3069d81db055a0e25a909164fe0a7ef4b3d4518ed08b279cfba27b13d909d86b775acde9583852097240f180bc371934f85f90dcf8bc97b6de7e9f8ed471d0e22ced688f181d4cbe34f391343db36908ca828718c96a64082524c70e393c5e5328bd0eaad9d021d0558449b38774b71336b25f8f17a8438ecf1409933d8184aebda6ccf78d286be5b15a644408704ff2086aba2964ebafa3137f6db05e6aecb75ac4ccab266f17e0539fb61e8678911c0fbb3a3c8fbb5c439079d79e122128f9a008f7cbd563ee761372578246e5626707ed542b22a182d", 0xe1}], 0x4}}], 0x2, 0x34) 722.436973ms ago: executing program 0 (id=4154): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x10001, 0x0}, 0x8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex, 0x2b, 0x1, 0xbb54, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback=r1, 0xffffffffffffffff, 0x13, 0x602c, 0xffffffffffffffff, @void, @void, @value=r0, @void, r2}, 0x20) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="240000001c005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_SSIDS={0x54, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x1f, 0x0, @random="e83eb6f3ac52d3b4878c599445e99cb6d31b1e7e781dcda857b42c"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000000}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40808}, 0x48080) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f0000000200)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0x4048002, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x4004084, 0x0, 0x0) poll(&(0x7f0000000000)=[{r5, 0x1221}], 0x1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000806910a0000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 568.776547ms ago: executing program 1 (id=4155): r0 = socket$netlink(0x10, 0x3, 0x1f) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000001c0)=0x8, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r1, @ANYBLOB="f1ff00000040000000000200fd22000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="05000000010000000200"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r1, @ANYBLOB="f1ff00000040000000000200fd22000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="05000000010000000200"/28], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) r7 = socket(0x2d, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r6}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r6}, 0x48) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) 559.275124ms ago: executing program 2 (id=4156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) pselect6(0x40, &(0x7f0000000080)={0xa, 0xfffffffffffffc01, 0x1, 0x8, 0x2, 0x49, 0x2, 0x2}, 0x0, 0x0, 0x0, 0x0) 549.630364ms ago: executing program 0 (id=4157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000000)="54f7f0b886b983577f513730819023ed4d81a23f5dcce675c98c57dc4cc942d624e34ce014b0af26df3442614ec5e22ea05487554e613f86f047b7bbb5f670", &(0x7f0000000040)=""/187, &(0x7f0000000a40)="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", &(0x7f0000000100)="5c4ba7079119d568e37d24eca24e1881cc66ce99512072710ba1bf7a79b382b1a1faf0709cd2c676e36a3be8b60a0897de531549f868826f842c86824d57321be0901aff450c1c752d4b68429e0d92519d8536e3fe2af63aea59ccc9167dc275496a2de3d8c93496d5ae4af6a747a64ecec226f46569c572e4c446c865b1e172d71b604179f5fbe7aca92131fd9107e0f36f231ca7aeb7", 0x7fff, r0, 0x4}, 0x38) 440.808469ms ago: executing program 2 (id=4158): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0200010000e0ffff050000008000000002001000020004d5000004d600000000"], 0x20}, 0x1, 0x7}, 0x5000c040) 440.3529ms ago: executing program 1 (id=4159): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x78}}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 414.87847ms ago: executing program 0 (id=4160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x2, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x8001) 407.375207ms ago: executing program 2 (id=4161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7800, 0x80, 0x9, 0x8001, {{0x25, 0x4, 0x0, 0x2, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @broadcast, {[@generic={0x7, 0x6, "3510b68a"}, @generic={0x82, 0xc, "f594a08c0e93b19e22b4"}, @timestamp_prespec={0x44, 0x24, 0xdc, 0x3, 0x9, [{@local, 0xfc}, {@remote}, {@private=0xa010100, 0x92}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200000}]}, @generic={0x82, 0x4, "ed7c"}, @ssrr={0x89, 0x13, 0xe8, [@broadcast, @multicast2, @private=0xa010101, @local]}, @rr={0x7, 0xb, 0xd2, [@dev={0xac, 0x14, 0x14, 0x3e}, @multicast1]}, @rr={0x7, 0x17, 0x35, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x44, 0xe, "0e2c3e51a9d69db5039eee39"}]}}}}}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r3) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r9, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfab}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c040}, 0x40081) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x164, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20}, 0x8000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x34, r10, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000005e}, 0x0) 323.645396ms ago: executing program 1 (id=4162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000a40)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvfrom(r2, 0x0, 0x0, 0x3, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) write(r3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x1edfaa1963650027, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x40004) 321.243842ms ago: executing program 3 (id=4163): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc000, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x3a, 0x10, 0x70bd2d, 0x25dfdbfb, {0xe}, [@generic="0b0a254a10e275a33df69c7f77c5aae74a6ef2bd2625a9cc19d0"]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x8801) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18}], 0x18, 0x40040}], 0x1, 0x8040) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000280)={0x8, 'ip6gre0\x00', {'dummy0\x00'}}) sendmsg$netlink(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=ANY=[], 0x114}], 0x1}, 0x8040040) recvmsg$can_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/89, 0x59}], 0x2}, 0x5) sendto$l2tp6(r1, &(0x7f0000000000)="5d7a6e769010aa365d8f9b3d63686ce01818b1ef5155f667669be317a151a0298b5cf4ed190aa263ef788f3521bd593fba0c7f64cb00e2b5752a2f1c391a4fa6ca146b96fa454550f20845a521bfefb60f6e237cfda941", 0x57, 0x2001, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x5, 0x1}, 0x20) 299.886581ms ago: executing program 0 (id=4164): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x30}}, 0x0) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r2}, 0x94) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x34028800}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xb44, 0x6, 0x88a8}}, {0x14, 0x1, {0x101, 0x766, 0xb1a, 0x88a8}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r6) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050421bd7000fedbdf2501000008000100", @ANYRES32=r9, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d0000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_emit_ethernet(0x98, &(0x7f0000000340)={@local, @multicast, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @tipc={{0x15, 0x4, 0x1, 0x16, 0x86, 0x65, 0x2, 0x10, 0x6, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@lsrr={0x83, 0x23, 0x9d, [@dev={0xac, 0x14, 0x14, 0xb}, @remote, @local, @multicast1, @broadcast, @multicast1, @broadcast, @rand_addr=0x64010100]}, @generic={0x88, 0xe, "d8f6d6fc8941b15533506e43"}, @end, @timestamp_addr={0x44, 0xc, 0x94, 0x1, 0x7, [{@loopback, 0x81}]}]}}, @payload_named={{{{{0x32, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x2, 0x7f, 0x0, 0x3, 0x7, 0x3, 0x2, 0x7fff, 0x9, 0x1, 0x4e21, 0x4e24}, 0x1, 0x1}, 0x2, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) 155.983711ms ago: executing program 1 (id=4165): socket$kcm(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000810}, 0x24044010) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @loopback={0xffffffffffffff8d}, 0x16}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x40) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@private=0xa010100, @broadcast, @empty}, 0xc) 155.425216ms ago: executing program 3 (id=4166): syz_emit_ethernet(0x46d, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x437, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x300, 0x2000000, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x2f, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978547ea7739a2dc715cbb21129617b53797def6a22010f2413b533ab519e7265cbbd2c033dc8ba162745fd879ff599be4db0d63bf8e91ae5a6d235f66f08a0b3cee9f63289b3605c1f4d90b997fdbf71daeb1179d525c83e80f878cd669b4e83faee7679fc36ab484695915fae6406aa9cd5c0c6b9604f87493af51451452ccb4d7362ee39462009b4f7454ef30e0b6be461687d6c5d474ffd6e3455233463bba755555673c613ca814eb2b3260230664aa1319f2315fcb7"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 155.14164ms ago: executing program 0 (id=4167): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a27adf81000", "acef1a3a330723599e69856bf21ad6caf77c9a99b7bbebfa6dc371290d0e3808", "33681901", "ffa64e60d883ba99"}, 0x38) sendmmsg$alg(r1, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}], 0x1, 0x24041091) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/262, 0x106}], 0x1}, 0x3886d42165142a48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_newrule={0x4c, 0x20, 0x10, 0x70bd25, 0x25dfdbfb, {0x2, 0x14, 0x0, 0xaa, 0x7, 0x0, 0x0, 0x7, 0x4}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_FLOW={0x8, 0xb, 0x2a9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bond\x00'}]}, 0x4c}}, 0x40) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) (async) accept$alg(r0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a27adf81000", "acef1a3a330723599e69856bf21ad6caf77c9a99b7bbebfa6dc371290d0e3808", "33681901", "ffa64e60d883ba99"}, 0x38) (async) sendmmsg$alg(r1, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}], 0x1, 0x24041091) (async) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/262, 0x106}], 0x1}, 0x3886d42165142a48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_newrule={0x4c, 0x20, 0x10, 0x70bd25, 0x25dfdbfb, {0x2, 0x14, 0x0, 0xaa, 0x7, 0x0, 0x0, 0x7, 0x4}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_FLOW={0x8, 0xb, 0x2a9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bond\x00'}]}, 0x4c}}, 0x40) (async) 107.667613ms ago: executing program 2 (id=4168): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x6, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x1c, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xd, 0xc40, 0x7fffffff, 0x0, 0x10, 0x9, 0x16, 0x6, 0xca11, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 57.693746ms ago: executing program 3 (id=4169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040), 0x4) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x6, 0x0, 0x2000000) r4 = epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000480)={0xb}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x2, 0x8, 0xc5, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010101}, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}}, 0x0) 1.028376ms ago: executing program 1 (id=4170): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 0s ago: executing program 3 (id=4171): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001400290200000000000000000a000000"], 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f00000000c0)}, 0x10002) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0x3, 0x0, 0x10000]}, &(0x7f00000000c0)=0x44) r4 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) kernel console output (not intermixed with test programs): process `syz.2.2705'. [ 340.826569][T15765] netlink: 'syz.2.2705': attribute type 5 has an invalid length. [ 340.858992][T15739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.901232][T15739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 340.913488][T15769] ieee802154 phy0 wpan0: encryption failed: -22 [ 340.920591][T15739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 58827 - 0 [ 340.934316][T15739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 340.967930][T15765] geneve4: entered promiscuous mode [ 340.973278][T15765] geneve4: entered allmulticast mode [ 340.981090][ T77] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 340.990442][ T77] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 341.013497][ T77] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 341.022967][ T77] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 341.096490][ T146] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.114452][ T146] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 341.129049][ T146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.139047][ T146] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 58827 - 0 [ 341.147911][T15765] netlink: 'syz.2.2705': attribute type 12 has an invalid length. [ 341.169243][ T146] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.178309][ T146] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 341.188369][ T146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.197700][ T146] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 58827 - 0 [ 341.263456][ T77] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.273386][ T77] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 341.283188][ T77] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.292065][ T77] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 58827 - 0 [ 341.303265][ T77] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.311915][ T77] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 341.321362][ T77] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.330068][ T77] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 58827 - 0 [ 341.342025][T15784] A link change request failed with some changes committed already. Interface 26=a may have been left with an inconsistent configuration, please check. [ 341.363213][T15784] IPVS: set_ctl: invalid protocol: 103 172.30.0.4:20000 [ 341.502188][T15793] team0: No ports can be present during mode change [ 341.806610][T15813] SET target dimension over the limit! [ 342.545372][T15859] IPv6: sit2: Disabled Multicast RS [ 342.605651][T15859] netlink: 'syz.4.2737': attribute type 3 has an invalid length. [ 342.644165][T15859] netlink: 'syz.4.2737': attribute type 3 has an invalid length. [ 342.663239][T15868] netlink: 'syz.4.2737': attribute type 1 has an invalid length. [ 342.674184][T15868] netlink: 'syz.4.2737': attribute type 1 has an invalid length. [ 342.696925][T15870] netlink: 'syz.0.2739': attribute type 1 has an invalid length. [ 342.819922][T15870] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 343.002742][T15880] syzkaller0: entered promiscuous mode [ 343.050224][T15880] syzkaller0: entered allmulticast mode [ 343.497643][T15898] syzkaller0: entered promiscuous mode [ 343.503363][T15898] syzkaller0: entered allmulticast mode [ 343.523169][T15909] netlink: 'syz.4.2752': attribute type 1 has an invalid length. [ 343.838517][T15931] nftables ruleset with unbound set [ 343.989124][T15936] __nla_validate_parse: 12 callbacks suppressed [ 343.989147][T15936] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2757'. [ 344.192300][T15943] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2758'. [ 344.262469][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2758'. [ 345.497000][T15927] tipc: Enabling of bearer rejected, failed to enable media [ 345.506708][T15942] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2758'. [ 345.676811][T15956] syz.4.2760: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 345.723379][T15961] batadv_slave_1: entered promiscuous mode [ 345.730609][T15956] CPU: 0 UID: 0 PID: 15956 Comm: syz.4.2760 Not tainted syzkaller #0 PREEMPT(full) [ 345.730638][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 345.730651][T15956] Call Trace: [ 345.730659][T15956] [ 345.730667][T15956] dump_stack_lvl+0xe8/0x150 [ 345.730701][T15956] warn_alloc+0x249/0x340 [ 345.730723][T15956] ? stack_trace_save+0xa9/0x100 [ 345.730746][T15956] ? __pfx_warn_alloc+0x10/0x10 [ 345.730775][T15956] ? kasan_save_track+0x4f/0x80 [ 345.730793][T15956] ? kasan_save_track+0x3e/0x80 [ 345.730810][T15956] ? __kasan_kmalloc+0x93/0xb0 [ 345.730829][T15956] ? __kmalloc_cache_noprof+0x31c/0x660 [ 345.730848][T15956] ? xskq_create+0x56/0x170 [ 345.730866][T15956] ? xsk_setsockopt+0x54c/0x990 [ 345.730891][T15956] ? do_sock_setsockopt+0x17c/0x1b0 [ 345.730910][T15956] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 345.730927][T15956] ? do_syscall_64+0x14d/0xf80 [ 345.730952][T15956] __vmalloc_node_range_noprof+0x132/0x1730 [ 345.731006][T15956] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 345.731034][T15956] ? __kasan_kmalloc+0x93/0xb0 [ 345.731061][T15956] vmalloc_user_noprof+0xad/0xe0 [ 345.731081][T15956] ? xskq_create+0xbf/0x170 [ 345.731101][T15956] xskq_create+0xbf/0x170 [ 345.731122][T15956] xsk_init_queue+0x8a/0xe0 [ 345.731144][T15956] xsk_setsockopt+0x54c/0x990 [ 345.731174][T15956] ? __pfx_xsk_setsockopt+0x10/0x10 [ 345.731201][T15956] ? __pfx_aa_sk_perm+0x10/0x10 [ 345.731230][T15956] ? aa_sock_opt_perm+0xff/0x1a0 [ 345.731260][T15956] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 345.731280][T15956] ? __pfx_xsk_setsockopt+0x10/0x10 [ 345.731308][T15956] do_sock_setsockopt+0x17c/0x1b0 [ 345.731333][T15956] __x64_sys_setsockopt+0x13d/0x1b0 [ 345.731360][T15956] do_syscall_64+0x14d/0xf80 [ 345.731379][T15956] ? trace_irq_disable+0x3b/0x150 [ 345.731395][T15956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.731413][T15956] ? clear_bhb_loop+0x40/0x90 [ 345.731436][T15956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.731453][T15956] RIP: 0033:0x7ff28bf9c819 [ 345.731471][T15956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.731487][T15956] RSP: 002b:00007ff28a1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 345.731508][T15956] RAX: ffffffffffffffda RBX: 00007ff28c216090 RCX: 00007ff28bf9c819 [ 345.731532][T15956] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 345.731543][T15956] RBP: 00007ff28c032c91 R08: 0000000000000004 R09: 0000000000000000 [ 345.731554][T15956] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.731565][T15956] R13: 00007ff28c216128 R14: 00007ff28c216090 R15: 00007ffd2f2d74c8 [ 345.731596][T15956] [ 345.731603][T15956] Mem-Info: [ 346.010008][T15960] batadv_slave_1: left promiscuous mode [ 346.015333][T15956] active_anon:5803 inactive_anon:15 isolated_anon:0 [ 346.015333][T15956] active_file:2325 inactive_file:40635 isolated_file:0 [ 346.015333][T15956] unevictable:768 dirty:71 writeback:0 [ 346.015333][T15956] slab_reclaimable:12264 slab_unreclaimable:105573 [ 346.015333][T15956] mapped:29352 shmem:1365 pagetables:1529 [ 346.015333][T15956] sec_pagetables:0 bounce:0 [ 346.015333][T15956] kernel_misc_reclaimable:0 [ 346.015333][T15956] free:1316035 free_pcp:8763 free_cma:0 [ 346.061617][T15956] Node 0 active_anon:23200kB inactive_anon:60kB active_file:9300kB inactive_file:162336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117460kB dirty:284kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13592kB pagetables:6040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 346.069034][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'. [ 346.108049][T15956] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 346.140276][T15956] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.179559][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'. [ 346.254262][T15956] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 346.260205][T15956] Node 0 DMA32 free:1302956kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23300kB inactive_anon:60kB active_file:9300kB inactive_file:162336kB unevictable:1536kB writepending:284kB zspages:0kB present:3129332kB managed:2552660kB mlocked:0kB bounce:0kB free_pcp:35324kB local_pcp:17588kB free_cma:0kB [ 346.354511][T15956] lowmem_reserve[]: 0 0 0 0 0 [ 346.365729][T15956] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB [ 346.406400][T15956] lowmem_reserve[]: 0 0 0 0 0 [ 346.412802][T15956] Node 1 Normal free:3945820kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.458490][T15956] lowmem_reserve[]: 0 0 0 0 0 [ 346.463443][T15956] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 346.517698][T15956] Node 0 DMA32: 6895*4kB (UME) 4024*8kB (UM) 1797*16kB (UM) 149*32kB (UM) 589*64kB (UM) 462*128kB (UME) 371*256kB (UME) 274*512kB (UME) 205*1024kB (UM) 116*2048kB (UME) 105*4096kB (UM) = 1302956kB [ 346.585130][T15956] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 346.629587][T15956] Node 1 Normal: 3*4kB (U) 10*8kB (UM) 8*16kB (UM) 10*32kB (UM) 9*64kB (UM) 4*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945820kB [ 346.694164][T15956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.724144][T15956] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 346.763934][T15956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.805175][T15956] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 346.840959][T15956] 44321 total pagecache pages [ 346.880255][T15956] 0 pages in swap cache [ 346.888666][T15956] Free swap = 124996kB [ 346.913277][T15956] Total swap = 124996kB [ 346.920179][T15956] 2097051 pages RAM [ 346.936996][T15956] 0 pages HighMem/MovableOnly [ 346.942162][T15956] 427051 pages reserved [ 346.968700][T15956] 0 pages cma reserved [ 347.255081][T16034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2780'. [ 347.396038][T16044] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2783'. [ 347.454222][T16044] netlink: Unknown conntrack attr (0) [ 347.497740][T16047] netlink: 'syz.3.2783': attribute type 1 has an invalid length. [ 347.526802][T16044] netlink: 'syz.3.2783': attribute type 1 has an invalid length. [ 347.528510][T16055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2786'. [ 347.775216][T16061] netlink: zone id is out of range [ 347.780405][T16061] netlink: zone id is out of range [ 347.787206][T16061] netlink: zone id is out of range [ 347.792456][T16061] netlink: zone id is out of range [ 347.807838][T16061] netlink: zone id is out of range [ 347.813104][T16061] netlink: zone id is out of range [ 347.844773][T16061] netlink: zone id is out of range [ 347.867247][T16061] netlink: zone id is out of range [ 347.898787][T16061] netlink: zone id is out of range [ 347.951842][T16083] syzkaller0: entered promiscuous mode [ 347.959368][T16083] syzkaller0: entered allmulticast mode [ 348.538091][T16112] netlink: 'syz.3.2800': attribute type 10 has an invalid length. [ 348.564440][T16112] team0: Device ipvlan1 failed to register rx_handler [ 349.337270][T16114] syzkaller0: entered promiscuous mode [ 349.342994][T16114] syzkaller0: entered allmulticast mode [ 349.669371][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'. [ 349.714832][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'. [ 349.916441][T16185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2819'. [ 350.017931][T16194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2819'. [ 350.032799][T16196] netlink: 'syz.4.2821': attribute type 1 has an invalid length. [ 350.043088][T16196] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2821'. [ 350.403134][ T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.462188][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.481595][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.504343][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.522907][T16223] netlink: 'syz.4.2826': attribute type 10 has an invalid length. [ 351.023296][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2833'. [ 351.352017][T16266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2837'. [ 351.379786][T16268] syzkaller1: entered promiscuous mode [ 351.388768][T16268] syzkaller1: entered allmulticast mode [ 351.402491][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2838'. [ 351.547803][T16279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2841'. [ 351.808222][T16286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2841'. [ 352.365478][T14433] udevd[14433]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 352.459883][T14433] udevd[14433]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 352.517629][T16341] netlink: 'syz.4.2854': attribute type 30 has an invalid length. [ 353.133252][T16388] Cannot find del_set index 49151 as target [ 353.214212][ C0] net_ratelimit: 190 callbacks suppressed [ 353.214234][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 353.368694][T16401] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 353.464693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.907135][T16382] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 353.943670][T16395] netlink: 'syz.1.2867': attribute type 4 has an invalid length. [ 354.184641][T16417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.193600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.254088][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.855544][T16449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.913598][T16418] veth1_vlan: left allmulticast mode [ 354.946281][T16451] __nla_validate_parse: 7 callbacks suppressed [ 354.946303][T16451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2885'. [ 354.993836][T16384] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.017183][T16451] netlink: 'syz.0.2885': attribute type 7 has an invalid length. [ 355.017201][T16384] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 256 - 0 [ 355.025656][T16451] netlink: 'syz.0.2885': attribute type 8 has an invalid length. [ 355.042009][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'. [ 355.052661][T16384] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.062305][T16384] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 58827 - 0 [ 355.089018][T16384] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.134136][T16384] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 256 - 0 [ 355.153074][T16384] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.162062][T16384] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 58827 - 0 [ 355.174762][T16465] netlink: 'syz.3.2889': attribute type 1 has an invalid length. [ 355.181798][T16384] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.191034][T16384] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 256 - 0 [ 355.234914][T16384] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.243420][T16384] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 58827 - 0 [ 355.294088][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.381260][T16474] netlink: 'syz.0.2890': attribute type 1 has an invalid length. [ 355.393196][T16466] bond0: (slave bridge10): making interface the new active one [ 355.410663][T16466] bond0: (slave bridge10): Enslaving as an active interface with an up link [ 355.423480][T16384] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.433169][T16384] netdevsim netdevsim1 eth3: unset [0, 1] type 1 family 0 port 256 - 0 [ 355.436651][T16476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.441630][T16384] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.462450][T16384] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 58827 - 0 [ 355.470966][T16476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2892'. [ 355.512750][T16474] 8021q: adding VLAN 0 to HW filter on device bond9 [ 355.528146][T16476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2892'. [ 355.556572][T16474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2890'. [ 355.737351][T16468] bond9: (slave veth11): Enslaving as an active interface with a down link [ 355.742845][T16491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2895'. [ 355.762987][T16491] netlink: 'syz.3.2895': attribute type 1 has an invalid length. [ 355.805814][T16491] 8021q: adding VLAN 0 to HW filter on device bond6 [ 355.829554][T16487] macvlan2: entered promiscuous mode [ 355.841880][T16487] macvlan2: entered allmulticast mode [ 355.852655][T16487] bond9: entered promiscuous mode [ 355.865511][T16487] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 355.873120][T16491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2895'. [ 355.885345][T16487] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 355.902378][T16491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2895'. [ 355.913891][T16487] bond9: left promiscuous mode [ 355.955973][T16493] bond6: (slave batadv1): Opening slave failed [ 356.350795][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 356.433978][T16529] "syz.1.2907" (16529) uses obsolete ecb(arc4) skcipher [ 356.446104][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 356.553220][T16529] bond6 (unregistering): Released all slaves [ 356.597751][T16533] dvmrp0: left allmulticast mode [ 357.043244][T16564] netlink: 'syz.0.2915': attribute type 11 has an invalid length. [ 357.058399][T16556] xt_CT: No such helper "snmp_trap" [ 357.111788][T16565] xt_l2tp: v2 tid > 0xffff: 1114244 [ 357.325303][T16580] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 357.346946][T16580] bond2: (slave lo): Enslaving as an active interface with an up link [ 357.517664][T16586] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 357.723797][T16592] bond6: ARP target 1.0.0.0 is already present [ 357.730513][T16592] bond6: option arp_ip_target: invalid value (1) [ 357.740722][T16592] bond6 (unregistering): Released all slaves [ 358.333076][T16631] netlink: 'syz.1.2940': attribute type 7 has an invalid length. [ 358.378513][T16631] erspan0: entered promiscuous mode [ 358.411905][T16631] gretap0: entered promiscuous mode [ 358.414195][ C0] net_ratelimit: 5 callbacks suppressed [ 358.414212][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 358.433614][T16631] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 358.472908][T16631] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 359.454089][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 359.504895][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.523126][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.541025][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.550609][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.561230][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.653311][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.660536][T16706] netlink: 'syz.1.2960': attribute type 1 has an invalid length. [ 359.681336][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.689863][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.698862][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.707445][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.870571][T16706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 359.931765][T16710] veth9: entered promiscuous mode [ 360.077788][T16724] __nla_validate_parse: 19 callbacks suppressed [ 360.077812][T16724] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2964'. [ 360.175178][T16726] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 360.486951][T16743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2968'. [ 360.496008][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.658389][T16742] syzkaller0: entered promiscuous mode [ 360.691295][T16742] syzkaller0: entered allmulticast mode [ 360.727936][T16697] chnl_net:caif_netlink_parms(): no params data found [ 360.773667][T16758] netlink: 'syz.0.2975': attribute type 1 has an invalid length. [ 360.832970][T16755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2974'. [ 360.889788][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2975'. [ 360.940875][T16763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2976'. [ 360.993853][T16758] bond10: (slave veth13): Enslaving as an active interface with a down link [ 361.011438][T16761] 8021q: adding VLAN 0 to HW filter on device bond10 [ 361.032159][T16764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2976'. [ 361.205629][T16777] netlink: 'syz.0.2979': attribute type 1 has an invalid length. [ 361.266171][T16784] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2981'. [ 361.270988][T16384] bridge_slave_0: left allmulticast mode [ 361.281703][T16384] bridge_slave_0: left promiscuous mode [ 361.290650][T16384] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.484813][T16384] erspan0 (unregistering): left allmulticast mode [ 361.491290][T16384] erspan0 (unregistering): left promiscuous mode [ 361.534208][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 361.633557][T16384] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 361.774292][ T5843] Bluetooth: hci5: command tx timeout [ 362.042348][T16384] bond0 (unregistering): (slave bridge10): Releasing active interface [ 362.108041][T16384] bond1 (unregistering): Released all slaves [ 362.122787][T16384] bond2 (unregistering): Released all slaves [ 362.138038][T16384] bond3 (unregistering): Released all slaves [ 362.151660][T16384] bond4 (unregistering): Released all slaves [ 362.167106][T16384] bond5 (unregistering): Released all slaves [ 362.181833][T16384] bond0 (unregistering): Released all slaves [ 362.208247][T16384] bond6 (unregistering): Released all slaves [ 362.233712][T16784] 8021q: VLANs not supported on gre0 [ 362.267564][T16787] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2982'. [ 362.307505][T16697] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.339853][T16697] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.365912][T16697] bridge_slave_0: entered allmulticast mode [ 362.399717][T16697] bridge_slave_0: entered promiscuous mode [ 362.428282][T16697] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.450584][T16697] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.464392][T16697] bridge_slave_1: entered allmulticast mode [ 362.488443][T16697] bridge_slave_1: entered promiscuous mode [ 362.493890][T16803] netlink: 'syz.1.2987': attribute type 30 has an invalid length. [ 362.533258][T16384] tipc: Left network mode [ 362.574254][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.657831][T16697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.671909][T16697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.747760][T16697] team0: Port device team_slave_0 added [ 362.773274][T16815] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 362.783097][T16697] team0: Port device team_slave_1 added [ 362.792009][T16816] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 362.822320][T16697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.833675][T16697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.863154][T16697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.907039][T16697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.932239][T16697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.025021][T16697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.045971][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2994'. [ 363.090144][T16829] netlink: 'syz.0.2995': attribute type 2 has an invalid length. [ 363.104794][T16829] netlink: 'syz.0.2995': attribute type 11 has an invalid length. [ 363.136951][T16829] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2995'. [ 363.270346][T16834] : renamed from vxcan1 [ 363.573628][T16697] hsr_slave_0: entered promiscuous mode [ 363.591795][T16697] hsr_slave_1: entered promiscuous mode [ 363.602073][T16859] sctp: [Deprecated]: syz.4.3001 (pid 16859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.602073][T16859] Use struct sctp_sack_info instead [ 363.614232][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 363.630939][T16697] debugfs: 'hsr0' already exists in 'hsr' [ 363.641840][T16697] Cannot create hsr debugfs directory [ 363.714740][T16864] netlink: 'syz.1.3002': attribute type 2 has an invalid length. [ 363.856617][ T5843] Bluetooth: hci5: command tx timeout [ 364.118449][T16888] netlink: 'syz.4.3007': attribute type 10 has an invalid length. [ 364.190225][T16867] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 364.654105][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 364.880713][T16384] hsr_slave_0: left promiscuous mode [ 364.917125][T16384] hsr_slave_1: left promiscuous mode [ 364.933653][T16384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.042610][T16922] netlink: 'syz.2.3014': attribute type 1 has an invalid length. [ 365.140167][T16384] pim6reg (unregistering): left allmulticast mode [ 365.374629][T16947] __nla_validate_parse: 1 callbacks suppressed [ 365.374655][T16947] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3016'. [ 365.559359][T16384] team0 (unregistering): Port device team_slave_1 removed [ 365.583175][T16384] team0 (unregistering): Port device team_slave_0 removed [ 365.694116][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 365.760483][T16384] smc: removing net device team0 with user defined pnetid SYZ2 [ 365.934607][ T5843] Bluetooth: hci5: command tx timeout [ 366.007699][T16959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3018'. [ 366.442331][T16384] IPVS: stop unused estimator thread 0... [ 366.591333][T16981] syzkaller0: entered promiscuous mode [ 366.614313][T16981] syzkaller0: entered allmulticast mode [ 366.617036][ T5912] IPVS: starting estimator thread 0... [ 366.621070][T16988] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 366.714284][T16994] IPVS: using max 28 ests per chain, 67200 per kthread [ 366.734119][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 367.033586][T17015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3032'. [ 367.047352][T17020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3031'. [ 367.056771][T17020] netlink: 'syz.4.3031': attribute type 8 has an invalid length. [ 367.182440][T16697] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 367.237631][T16697] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 367.258025][T17029] netlink: 'syz.0.3033': attribute type 1 has an invalid length. [ 367.267385][T17029] netlink: 'syz.0.3033': attribute type 1 has an invalid length. [ 367.269041][T16697] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 367.275908][T17029] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.3033'. [ 367.471357][T16697] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 367.483537][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3033'. [ 367.766487][T16697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.774219][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 367.848731][T16697] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.881017][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.888338][ T7094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.934833][ T7094] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.942060][ T7094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.015323][ T5843] Bluetooth: hci5: command tx timeout [ 368.295471][T17083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3043'. [ 368.425162][T17088] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.467254][T17083] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 368.814359][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.841167][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'. [ 368.847512][T16697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.920147][T17106] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3048'. [ 368.979195][T16697] veth0_vlan: entered promiscuous mode [ 369.038029][T16697] veth1_vlan: entered promiscuous mode [ 369.107466][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 369.159861][T17116] sctp: [Deprecated]: syz.2.3049 (pid 17116) Use of int in maxseg socket option. [ 369.159861][T17116] Use struct sctp_assoc_value instead [ 369.371315][T16697] veth0_macvtap: entered promiscuous mode [ 369.409227][T16697] veth1_macvtap: entered promiscuous mode [ 369.480827][T16697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.498599][T16697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.534432][T16383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.551664][T16383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.586555][T16383] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.609681][T16383] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.854461][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 369.903929][ T7094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.932338][ T7094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.118161][ T5923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.156800][ T5923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.188574][T17166] netlink: 'syz.4.3061': attribute type 9 has an invalid length. [ 370.204899][T17166] netlink: 'syz.4.3061': attribute type 11 has an invalid length. [ 370.269713][T17166] netlink: 'syz.4.3061': attribute type 12 has an invalid length. [ 370.485798][ T5885] hid-generic 0005:0458:5505.0001: item fetching failed at offset 0/1 [ 370.496075][ T5885] hid-generic 0005:0458:5505.0001: probe with driver hid-generic failed with error -22 [ 370.564755][T17183] __nla_validate_parse: 3 callbacks suppressed [ 370.564777][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'. [ 370.803308][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.812379][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.826833][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.830488][T17203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3069'. [ 370.878863][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.888778][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.894235][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 370.904185][T17204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.245813][T17215] netlink: 'syz.3.3070': attribute type 1 has an invalid length. [ 371.311890][T17215] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 371.692867][T17195] chnl_net:caif_netlink_parms(): no params data found [ 371.694560][T17233] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3072'. [ 371.793283][T17239] netlink: 'syz.1.3072': attribute type 10 has an invalid length. [ 371.853980][T17239] smc: removing net device team0 with user defined pnetid SYZ2 [ 371.910640][T17233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3072'. [ 371.934165][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.973227][T17239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3072'. [ 372.207134][T17195] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.247397][T17195] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.284490][T17195] bridge_slave_0: entered allmulticast mode [ 372.293124][T17195] bridge_slave_0: entered promiscuous mode [ 372.319027][T17195] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.340639][T17195] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.359094][T17195] bridge_slave_1: entered allmulticast mode [ 372.383834][T17195] bridge_slave_1: entered promiscuous mode [ 372.531170][T17278] syzkaller0: entered promiscuous mode [ 372.536968][T17278] syzkaller0: entered allmulticast mode [ 372.634351][T17195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.706462][T17195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.974131][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 372.989315][ T5832] Bluetooth: hci2: command tx timeout [ 373.289041][T17195] team0: Port device team_slave_0 added [ 373.312112][T17195] team0: Port device team_slave_1 added [ 373.429108][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3090'. [ 373.441620][T17195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.451204][T17195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.477972][T17195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.487527][T17330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3090'. [ 373.578139][T17195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.589783][T17195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.634111][T17195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.934475][T17337] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 374.014162][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.619011][T17352] sctp: [Deprecated]: syz.1.3096 (pid 17352) Use of int in maxseg socket option. [ 374.619011][T17352] Use struct sctp_assoc_value instead [ 375.055916][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 375.062989][ T5832] Bluetooth: hci2: command tx timeout [ 375.405819][T17348] =a: renamed from lo (while UP) [ 375.532725][T17195] hsr_slave_0: entered promiscuous mode [ 375.558460][T17195] hsr_slave_1: entered promiscuous mode [ 375.602707][T17366] netlink: 'syz.2.3101': attribute type 1 has an invalid length. [ 375.603503][T17362] netlink: 'syz.3.3098': attribute type 21 has an invalid length. [ 375.645570][T17362] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.740174][T17366] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.800108][T17380] x_tables: unsorted underflow at hook 2 [ 375.809097][T17368] vlan2: entered promiscuous mode [ 375.815567][T17368] bond7: entered promiscuous mode [ 375.821109][T17368] vlan2: entered allmulticast mode [ 375.835085][T17368] bond7: entered allmulticast mode [ 375.966049][T17392] xt_cgroup: invalid path, errno=-2 [ 376.000249][T17392] netlink: 'syz.1.3105': attribute type 10 has an invalid length. [ 376.067848][T17392] xt_ecn: cannot match TCP bits for non-tcp packets [ 376.077722][T17392] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 376.094102][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 376.137313][T17394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3105'. [ 376.153313][T17394] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3105'. [ 376.185083][T17399] netlink: 'syz.3.3107': attribute type 10 has an invalid length. [ 376.258733][T17195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.278217][T17195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.342608][T17399] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 376.359893][T17404] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3108'. [ 376.375759][T16383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.393400][T16383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.528575][T17195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.562913][T17195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.718253][T17195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.769149][T17195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.979725][T17195] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.990395][T17195] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.014289][T17445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3118'. [ 377.039710][T17449] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3120'. [ 377.068380][T17444] lo speed is unknown, defaulting to 1000 [ 377.086953][T17444] lo speed is unknown, defaulting to 1000 [ 377.106173][T17444] lo speed is unknown, defaulting to 1000 [ 377.134122][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 377.147594][T17444] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 377.152655][ T5832] Bluetooth: hci2: command tx timeout [ 377.249850][T17195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.281489][T17195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.308102][T17195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.328884][T17444] lo speed is unknown, defaulting to 1000 [ 377.329303][T17195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.368486][T17444] lo speed is unknown, defaulting to 1000 [ 377.407971][T17444] lo speed is unknown, defaulting to 1000 [ 377.445270][T17444] lo speed is unknown, defaulting to 1000 [ 377.453413][T17444] lo speed is unknown, defaulting to 1000 [ 377.545607][T17444] lo speed is unknown, defaulting to 1000 [ 377.626751][T17195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.718370][T17195] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.756545][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.763884][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.893912][T17482] syzkaller0: entered promiscuous mode [ 377.900199][T17482] syzkaller0: entered allmulticast mode [ 377.918548][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.925779][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.174205][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.198162][T17506] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3133'. [ 378.296230][T17514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3136'. [ 378.299756][T17515] wireguard0: entered promiscuous mode [ 378.311604][T17515] wireguard0: entered allmulticast mode [ 378.350550][T17514] sctp: [Deprecated]: syz.3.3136 (pid 17514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.350550][T17514] Use struct sctp_sack_info instead [ 378.398287][T17515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.407062][T17514] sctp: [Deprecated]: syz.3.3136 (pid 17514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.407062][T17514] Use struct sctp_sack_info instead [ 378.453355][T17515] bond0: (slave rose0): Enslaving as an active interface with an up link [ 378.742629][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.767694][T17542] block nbd1: Unsupported socket: should be TCP or UNIX. [ 378.817819][T17542] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3141'. [ 378.846194][T17195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.985726][T17549] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3143'. [ 379.086115][T17549] syzkaller0: entered promiscuous mode [ 379.092042][T17549] syzkaller0: entered allmulticast mode [ 379.099357][T17558] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 379.168538][T17549] tc action pedit offset must be on 32 bit boundaries [ 379.175856][T17549] tc action pedit offset must be on 32 bit boundaries [ 379.182660][T17549] tc action pedit offset must be on 32 bit boundaries [ 379.189584][T17549] tc action pedit offset must be on 32 bit boundaries [ 379.196387][T17549] tc action pedit offset must be on 32 bit boundaries [ 379.203237][T17549] tc action pedit offset must be on 32 bit boundaries [ 379.210012][T17549] tc action pedit offset must be on 32 bit boundaries [ 379.216825][T17549] tc action pedit offset must be on 32 bit boundaries [ 379.223633][T17549] tc action pedit offset must be on 32 bit boundaries [ 379.230457][T17549] tc action pedit offset must be on 32 bit boundaries [ 379.237356][T17549] 0: reclassify loop, rule prio 0, protocol 800 [ 379.244322][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.245910][ T5832] Bluetooth: hci2: command tx timeout [ 379.307691][T17558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3146'. [ 379.648174][T17579] : entered promiscuous mode [ 379.690904][T17581] netlink: 'syz.1.3151': attribute type 2 has an invalid length. [ 379.794683][T17587] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 379.957570][T17195] veth0_vlan: entered promiscuous mode [ 380.050817][T17195] veth1_vlan: entered promiscuous mode [ 380.254113][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 380.268211][T17609] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.357660][T17609] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.385620][T17626] syzkaller0: entered promiscuous mode [ 380.391363][T17626] syzkaller0: entered allmulticast mode [ 380.411029][T17626] netlink: 'syz.2.3159': attribute type 1 has an invalid length. [ 380.437922][T17195] veth0_macvtap: entered promiscuous mode [ 380.490380][T17609] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.541471][T17195] veth1_macvtap: entered promiscuous mode [ 380.590086][T17609] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.651694][T17195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.784934][T17195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.822951][ T7094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.877363][ T7094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.896840][ T7094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.946521][ T7094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.990300][T17648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.023134][T17650] netlink: 'syz.1.3162': attribute type 1 has an invalid length. [ 381.035305][T17642] bridge7: port 1(veth13) entered blocking state [ 381.054268][T17642] bridge7: port 1(veth13) entered disabled state [ 381.062627][T17642] veth13: entered allmulticast mode [ 381.075560][T17642] veth13: entered promiscuous mode [ 381.100166][ T7076] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.181362][ T7076] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.265604][ T7076] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.294595][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.336048][ T7094] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.490316][ T7076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.534303][ T7076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.630254][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.639440][T17673] netlink: 'syz.0.3170': attribute type 4 has an invalid length. [ 381.655550][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.773090][T17687] __nla_validate_parse: 4 callbacks suppressed [ 381.773112][T17687] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3172'. [ 381.924678][T17689] tunl0: left promiscuous mode [ 381.945088][T17689] 0{X: left allmulticast mode [ 382.024565][T17689] ipvlan1: left promiscuous mode [ 382.055575][T17689] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 382.065911][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 382.075362][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 382.110542][T17689] veth5: left allmulticast mode [ 382.110874][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 382.130819][T17689] team1: left promiscuous mode [ 382.162899][T17689] team1: left allmulticast mode [ 382.213513][T17689] bond1: left allmulticast mode [ 382.233743][T17689] bond1: left promiscuous mode [ 382.275927][T17689] macvlan2: left promiscuous mode [ 382.281092][T17689] macvlan2: left allmulticast mode [ 382.314560][T17689] A link change request failed with some changes committed already. Interface macvlan2 may have been left with an inconsistent configuration, please check. [ 382.334094][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.383412][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3175'. [ 382.584829][T17717] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3178'. [ 382.696317][T17721] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3181'. [ 383.029972][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.061335][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.066096][T17743] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3184'. [ 383.077722][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.097713][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.105795][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.176346][T17743] bond11 (unregistering): Released all slaves [ 383.276312][T17750] netlink: 'syz.3.3186': attribute type 9 has an invalid length. [ 383.378516][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.436068][T17753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3187'. [ 383.521759][T17742] lo speed is unknown, defaulting to 1000 [ 384.004817][T17783] x_tables: duplicate underflow at hook 1 [ 384.036995][T17783] SET target dimension over the limit! [ 384.076638][T17786] netlink: 'syz.4.3195': attribute type 1 has an invalid length. [ 384.099475][T17786] netlink: 'syz.4.3195': attribute type 1 has an invalid length. [ 384.124288][T17783] veth0_to_bridge: entered promiscuous mode [ 384.222127][T17795] sctp: [Deprecated]: syz.4.3198 (pid 17795) Use of int in maxseg socket option. [ 384.222127][T17795] Use struct sctp_assoc_value instead [ 384.371890][T17782] veth0_to_bridge: left promiscuous mode [ 384.414109][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 384.426603][T17800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.426667][T17742] chnl_net:caif_netlink_parms(): no params data found [ 384.497419][T17804] netlink: 'syz.0.3201': attribute type 1 has an invalid length. [ 384.517265][ T7094] veth13: left allmulticast mode [ 384.527761][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3201'. [ 384.541811][ T7094] veth13: left promiscuous mode [ 384.547671][ T7094] bridge7: port 1(veth13) entered disabled state [ 384.798823][ T7094] erspan0 (unregistering): left promiscuous mode [ 384.823336][ T7094] gretap0 (unregistering): left promiscuous mode [ 385.106556][ T7094] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 385.115292][ T7094] bridge2 (unregistering): left promiscuous mode [ 385.121943][ T7094] bridge2 (unregistering): left allmulticast mode [ 385.134499][ T5843] Bluetooth: hci1: command tx timeout [ 385.171242][ T7094] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 385.179793][ T7094] bridge3 (unregistering): left promiscuous mode [ 385.388629][ T7094] bond0 (unregistering): Released all slaves [ 385.402842][ T7094] bond1 (unregistering): Released all slaves [ 385.421518][ T7094] bond2 (unregistering): Released all slaves [ 385.442301][ T7094] bond3 (unregistering): Released all slaves [ 385.454100][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.467572][ T7094] bond4 (unregistering): Released all slaves [ 385.485162][ T7094] bond5 (unregistering): Released all slaves [ 385.502214][ T7094] bond6 (unregistering): Released all slaves [ 385.522674][ T7094] bond7 (unregistering): Released all slaves [ 385.775446][T17742] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.783792][T17742] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.791779][T17742] bridge_slave_0: entered allmulticast mode [ 385.800302][T17742] bridge_slave_0: entered promiscuous mode [ 385.809429][T17742] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.817027][T17742] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.825278][T17742] bridge_slave_1: entered allmulticast mode [ 385.833463][T17742] bridge_slave_1: entered promiscuous mode [ 385.904596][ T7094] tipc: Left network mode [ 385.909852][T17742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.949616][T17742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.233198][T17849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.267920][T17742] team0: Port device team_slave_0 added [ 386.335124][T17742] team0: Port device team_slave_1 added [ 386.494100][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 386.546862][T17742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.575350][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.591244][T17876] nbd: must specify at least one socket [ 386.647041][T17742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.709416][T17742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.721891][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.786106][T17742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.089777][T17742] hsr_slave_0: entered promiscuous mode [ 387.121844][T17742] hsr_slave_1: entered promiscuous mode [ 387.141919][T17742] debugfs: 'hsr0' already exists in 'hsr' [ 387.153047][T17742] Cannot create hsr debugfs directory [ 387.214302][ T5843] Bluetooth: hci1: command tx timeout [ 387.306144][T17910] netlink: 'syz.3.3220': attribute type 12 has an invalid length. [ 387.400106][T17917] netlink: 'syz.4.3223': attribute type 10 has an invalid length. [ 387.412659][T17915] netlink: 'syz.2.3221': attribute type 1 has an invalid length. [ 387.413413][T17917] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.430400][T17917] bridge_slave_1: left allmulticast mode [ 387.437469][T17917] bridge_slave_1: left promiscuous mode [ 387.443621][T17917] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.486650][T17917] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 387.530082][T17910] bond1: option primary_reselect: invalid value (255) [ 387.534964][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.545754][T17910] bond1 (unregistering): Released all slaves [ 387.733604][T17930] __nla_validate_parse: 1 callbacks suppressed [ 387.733629][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'. [ 387.771343][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'. [ 387.794016][T17914] syzkaller0: entered promiscuous mode [ 387.800395][T17914] syzkaller0: entered allmulticast mode [ 387.970597][T17945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3230'. [ 388.057137][T17949] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3229'. [ 388.578282][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.299064][ T5843] Bluetooth: hci1: command tx timeout [ 389.587829][T17945] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 389.615391][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 390.039398][T17980] netlink: 'syz.2.3234': attribute type 11 has an invalid length. [ 390.067437][ T7094] hsr_slave_0: left promiscuous mode [ 390.082320][ T7094] hsr_slave_1: left promiscuous mode [ 390.173817][ T7094] pim6reg527 (unregistering): left allmulticast mode [ 390.212107][T17988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3237'. [ 390.243116][T17988] netlink: 'syz.0.3237': attribute type 3 has an invalid length. [ 390.286619][T17992] netlink: 'syz.4.3238': attribute type 1 has an invalid length. [ 390.654132][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 390.820015][T17988] macsec0: entered promiscuous mode [ 390.831932][T17994] veth1_macvtap: entered promiscuous mode [ 390.840094][T17994] macsec0: left promiscuous mode [ 390.847364][T17994] veth1_macvtap: left promiscuous mode [ 390.853175][T17994] macsec0: left allmulticast mode [ 391.099196][T18006] syzkaller0: entered promiscuous mode [ 391.119010][T18006] syzkaller0: entered allmulticast mode [ 391.218155][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3239'. [ 391.375142][ T5843] Bluetooth: hci1: command tx timeout [ 391.442490][T18027] xt_cgroup: xt_cgroup: no path or classid specified [ 391.694231][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.904396][T18045] netlink: 'syz.3.3250': attribute type 1 has an invalid length. [ 391.933285][T17742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 391.958418][ T7094] IPVS: stop unused estimator thread 0... [ 391.959454][T17742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 392.006862][T17742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 392.065391][T17742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 392.351588][T18070] sctp: [Deprecated]: syz.4.3254 (pid 18070) Use of int in maxseg socket option. [ 392.351588][T18070] Use struct sctp_assoc_value instead [ 392.375520][T18072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 392.419890][T17742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.643276][T18087] bond11: option all_slaves_active: invalid value (222) [ 392.699407][T18087] bond11 (unregistering): Released all slaves [ 392.734205][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.854109][T17742] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.926949][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.934185][ T7076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.995772][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.002961][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.337121][T18072] netlink: 'syz.3.3255': attribute type 16 has an invalid length. [ 393.355152][T18072] netlink: 'syz.3.3255': attribute type 17 has an invalid length. [ 393.399483][T18072] eql: remember to turn off Van-Jacobson compression on your slave devices [ 393.428593][T18122] netlink: 264 bytes leftover after parsing attributes in process `syz.4.3264'. [ 393.476664][T18072] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 393.577093][T18134] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.774470][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 393.960991][T18150] syzkaller1: entered promiscuous mode [ 393.980965][T18150] syzkaller1: entered allmulticast mode [ 394.013139][T17742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.120830][T18157] netlink: 'syz.4.3271': attribute type 24 has an invalid length. [ 394.294169][T17742] veth0_vlan: entered promiscuous mode [ 394.355766][T17742] veth1_vlan: entered promiscuous mode [ 394.418706][T18166] openvswitch: netlink: EtherType 50a is less than min 600 [ 394.506477][T17742] veth0_macvtap: entered promiscuous mode [ 394.553501][T17742] veth1_macvtap: entered promiscuous mode [ 394.647961][T17742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.690648][T17742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.744922][T16376] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.771769][T16376] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.814391][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.922459][T16376] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.969398][T16376] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.156592][T16376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.185723][T16376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.250521][ T7094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.271063][ T7094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.461880][T18200] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3179'. [ 395.487489][T18200] netlink: 'syz.1.3179': attribute type 1 has an invalid length. [ 395.499816][T18200] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3179'. [ 395.520337][T18200] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3179'. [ 395.571192][T18200] netlink: 'syz.1.3179': attribute type 1 has an invalid length. [ 395.620218][T18200] netlink: 634 bytes leftover after parsing attributes in process `syz.1.3179'. [ 395.854132][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.019131][T18224] sctp: [Deprecated]: syz.3.3290 (pid 18224) Use of int in max_burst socket option deprecated. [ 396.019131][T18224] Use struct sctp_assoc_value instead [ 396.145269][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.168833][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.188331][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.227647][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.288437][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.894258][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.101415][T18266] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 397.176288][T18268] bond2: (slave 26=a): Releasing backup interface [ 397.196703][T18268] bond2: (slave 26=a): last VLAN challenged slave left bond - VLAN blocking is removed [ 397.227273][T18268] A link change request failed with some changes committed already. Interface 26=a may have been left with an inconsistent configuration, please check. [ 397.305926][T18228] chnl_net:caif_netlink_parms(): no params data found [ 397.438426][T18283] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 397.649328][T18228] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.688860][T18228] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.712370][T18228] bridge_slave_0: entered allmulticast mode [ 397.752915][T18228] bridge_slave_0: entered promiscuous mode [ 397.779226][T18228] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.795006][T18228] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.805517][T18228] bridge_slave_1: entered allmulticast mode [ 397.816572][T18228] bridge_slave_1: entered promiscuous mode [ 397.826282][T18309] bond2: (slave 26=a): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 397.870225][T18309] bond2: (slave 26=a): Enslaving as an active interface with an up link [ 397.899676][T18309] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 397.934600][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 398.023626][T18228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.070665][T18228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.181590][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3307'. [ 398.317732][T18317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3307'. [ 398.336224][ T5843] Bluetooth: hci4: command tx timeout [ 398.527658][T18228] team0: Port device team_slave_0 added [ 398.555005][T18228] team0: Port device team_slave_1 added [ 398.639115][T18343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3310'. [ 398.648648][T18228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.681920][T18228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.719201][T18348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3310'. [ 398.732903][T18228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.797705][T18228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.805375][T18228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.839033][T18228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.974095][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.163305][T18228] hsr_slave_0: entered promiscuous mode [ 399.174377][T18228] hsr_slave_1: entered promiscuous mode [ 399.180925][T18228] debugfs: 'hsr0' already exists in 'hsr' [ 399.212776][T18228] Cannot create hsr debugfs directory [ 399.276292][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3313'. [ 399.418789][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3314'. [ 399.442644][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3314'. [ 399.497217][T18370] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3315'. [ 399.698605][T18383] netlink: 'syz.4.3317': attribute type 4 has an invalid length. [ 399.787944][T18385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3318'. [ 399.818666][T18392] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3319'. [ 399.824786][T18385] tipc: Invalid UDP bearer configuration [ 399.827983][T18385] tipc: Enabling of bearer rejected, failed to enable media [ 400.014157][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.080716][T18228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.119882][T18228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.144366][T18228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 400.217894][T18413] tipc: Failed to remove unknown binding: 66,0,0/0:385361126/385361127 [ 400.242044][T18411] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 400.251847][T18413] tipc: Failed to remove unknown binding: 66,0,0/0:385361126/385361127 [ 400.300321][T18228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.322736][T18228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.342435][T18417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3322'. [ 400.353481][T18417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3322'. [ 400.371766][T18228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 400.415920][ T5843] Bluetooth: hci4: command tx timeout [ 400.439782][T18409] syzkaller0: entered allmulticast mode [ 400.499425][T18429] Cannot find map_set index 65533 as target [ 400.546369][T18431] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 400.636154][T18228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.656245][T18228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.681898][T18228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 400.708177][T18436] netlink: 'syz.0.3329': attribute type 1 has an invalid length. [ 400.728083][T18436] netlink: 'syz.0.3329': attribute type 1 has an invalid length. [ 400.815691][T18228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.849630][T18228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.881987][T18228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 401.054706][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.233729][T18466] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 401.413256][T18475] syzkaller0: entered allmulticast mode [ 401.439443][T18475] syzkaller0 (unregistering): left allmulticast mode [ 401.913492][T18458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.950290][T18228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 402.094101][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.208186][T18228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 402.240737][T18228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 402.380637][T18228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 402.494400][ T5843] Bluetooth: hci4: command tx timeout [ 402.552767][T18520] netlink: 'syz.0.3346': attribute type 1 has an invalid length. [ 402.616470][T18228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.658944][T18228] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.690326][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.697572][ T7094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.749250][T16376] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.756593][T16376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.134137][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.482558][T18228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.658539][T18228] veth0_vlan: entered promiscuous mode [ 403.682859][T18228] veth1_vlan: entered promiscuous mode [ 403.725067][T18568] netlink: 'syz.1.3357': attribute type 1 has an invalid length. [ 403.836775][T18228] veth0_macvtap: entered promiscuous mode [ 403.869518][T18228] veth1_macvtap: entered promiscuous mode [ 403.956096][T18228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.009935][T18228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.120163][ T7094] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.129275][T18583] openvswitch: netlink: IPv4 tun info is not correct [ 404.171357][ T7094] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.180280][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.205037][T18583] openvswitch: netlink: IPv4 tun info is not correct [ 404.227669][ T7094] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.242280][ T7094] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.575325][ T5843] Bluetooth: hci4: command tx timeout [ 405.217632][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.255189][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.340394][T18626] __nla_validate_parse: 6 callbacks suppressed [ 406.340416][T18626] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3367'. [ 406.368569][ T7094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.405384][ T7094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.533098][ T5923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.561288][ T5923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.654119][ T5843] Bluetooth: hci4: command tx timeout [ 406.771637][T18641] netlink: 'syz.2.3283': attribute type 10 has an invalid length. [ 406.839475][T18644] A link change request failed with some changes committed already. Interface 26=a may have been left with an inconsistent configuration, please check. [ 406.879281][T18641] team0: Device vxcan1 is of different type [ 406.905339][T18649] netlink: 'syz.4.3372': attribute type 21 has an invalid length. [ 406.964155][T18649] netlink: 'syz.4.3372': attribute type 6 has an invalid length. [ 406.971958][T18649] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3372'. [ 407.177624][T18661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3376'. [ 407.272483][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3376'. [ 407.294225][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.403373][T18661] vxcan2: entered allmulticast mode [ 407.494386][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.503788][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.515007][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.516810][T18661] vxcan3: entered promiscuous mode [ 407.561626][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.584492][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.602873][T18674] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20003 [ 407.892857][T18677] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3379'. [ 407.903635][T18677] netlink: 'syz.4.3379': attribute type 2 has an invalid length. [ 407.955838][T18679] xt_hashlimit: size too large, truncated to 1048576 [ 408.069976][T18687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3383'. [ 408.081502][T18687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3383'. [ 408.334091][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 408.454681][T18671] chnl_net:caif_netlink_parms(): no params data found [ 408.865576][T18671] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.872792][T18671] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.957230][T18671] bridge_slave_0: entered allmulticast mode [ 408.976548][T18671] bridge_slave_0: entered promiscuous mode [ 408.999312][T18671] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.999577][T18730] netlink: 'syz.4.3392': attribute type 8 has an invalid length. [ 409.007700][T18671] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.029032][T18671] bridge_slave_1: entered allmulticast mode [ 409.038093][T18671] bridge_slave_1: entered promiscuous mode [ 409.050696][T18731] netlink: 'syz.4.3392': attribute type 3 has an invalid length. [ 409.187457][T18671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.208887][T18671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.217991][T18744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3394'. [ 409.263208][T18742] veth0: entered promiscuous mode [ 409.360805][T18671] team0: Port device team_slave_0 added [ 409.374137][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 409.386201][T18741] veth0: left promiscuous mode [ 409.408317][T18671] team0: Port device team_slave_1 added [ 409.553358][T18671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.571061][T18671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.631220][T18671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.693042][T18671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.705921][ T5832] Bluetooth: hci3: command tx timeout [ 409.734118][T18671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.772237][T18758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.922703][T18671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.098662][ T5928] IPVS: starting estimator thread 0... [ 410.107390][T18785] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 410.170539][T18671] hsr_slave_0: entered promiscuous mode [ 410.188088][T18671] hsr_slave_1: entered promiscuous mode [ 410.220273][T18671] debugfs: 'hsr0' already exists in 'hsr' [ 410.233147][T18671] Cannot create hsr debugfs directory [ 410.239143][T18787] IPVS: using max 27 ests per chain, 64800 per kthread [ 410.370637][T18795] netlink: 'syz.1.3406': attribute type 2 has an invalid length. [ 410.414141][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 410.424086][T18796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.473226][T18795] 9: entered promiscuous mode [ 410.481745][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3405'. [ 410.502929][T18796] bridge_slave_1: left allmulticast mode [ 410.509001][T18796] bridge_slave_1: left promiscuous mode [ 410.517966][T18796] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.529388][T18796] bridge_slave_0: left allmulticast mode [ 410.535653][T18796] bridge_slave_0: left promiscuous mode [ 410.543790][T18796] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.932816][T18819] macvlan0: entered promiscuous mode [ 410.983156][T18671] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.071918][T18819] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3412'. [ 411.081373][T18819] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 411.147086][T18671] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.331781][T18671] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.410168][T18843] __nla_validate_parse: 1 callbacks suppressed [ 411.410192][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3418'. [ 411.454291][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 411.503587][T18849] netlink: 'syz.3.3421': attribute type 10 has an invalid length. [ 411.513058][T18851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3422'. [ 411.543972][T18671] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.612673][T18849] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 411.784265][ T5832] Bluetooth: hci3: command tx timeout [ 412.070219][T18671] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 412.132292][T18671] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 412.147162][T18879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3426'. [ 412.163535][T18671] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 412.193275][T18671] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 412.288170][T18883] xt_limit: Overflow, try lower: 271964/0 [ 412.449946][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3428'. [ 412.494248][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.587616][T18671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.679056][T18671] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.711639][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.719351][ T7071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.783310][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.790616][ T7071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.859537][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3433'. [ 412.969529][T18925] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 412.989636][T18925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.446577][T18950] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3440'. [ 413.534207][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 413.675542][T18963] netlink: 'syz.1.3444': attribute type 3 has an invalid length. [ 413.683495][T18963] netlink: 'syz.1.3444': attribute type 3 has an invalid length. [ 413.699166][T18960] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3443'. [ 413.731748][T18963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3444'. [ 413.757103][T18966] netlink: 'syz.2.3445': attribute type 4 has an invalid length. [ 413.761508][T18671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.854515][ T5832] Bluetooth: hci3: command tx timeout [ 414.111021][T18671] veth0_vlan: entered promiscuous mode [ 414.153705][T18671] veth1_vlan: entered promiscuous mode [ 414.318708][T18992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3451'. [ 414.353939][T18671] veth0_macvtap: entered promiscuous mode [ 414.387049][T18992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3451'. [ 414.413221][T18671] veth1_macvtap: entered promiscuous mode [ 414.570639][T18671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.574465][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 414.622756][T18671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.704927][T16384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.732005][T16384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.791309][T19015] bond1: entered promiscuous mode [ 414.800072][T19026] netlink: 'syz.1.3455': attribute type 3 has an invalid length. [ 414.810236][T19015] bond1: entered allmulticast mode [ 414.827196][T19015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.865329][T16384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.960070][T16384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.111756][T19035] sctp: [Deprecated]: syz.3.3459 (pid 19035) Use of int in max_burst socket option deprecated. [ 415.111756][T19035] Use struct sctp_assoc_value instead [ 415.150737][ T7094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.160690][ T7094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.259744][ T7071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.270960][ T7071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.614105][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 415.938520][ T5832] Bluetooth: hci3: command tx timeout [ 416.152206][T19074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.195111][T19074] netlink: 'syz.1.3471': attribute type 4 has an invalid length. [ 416.287672][T19079] netlink: 'syz.3.3473': attribute type 3 has an invalid length. [ 416.316218][T19049] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 416.333162][T19049] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 416.436372][T19085] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 416.455786][T19085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.504395][T19049] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 416.523727][T19049] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 416.611483][T19090] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 416.654129][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 416.660779][T19049] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 416.668380][T19049] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 416.843370][T19049] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 416.866803][T19049] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 416.998639][T19049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 417.044050][T19049] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 417.506606][T19142] netlink: 'syz.4.3489': attribute type 20 has an invalid length. [ 417.538175][T19142] IPv6: NLM_F_CREATE should be specified when creating new route [ 417.592449][T19145] netlink: 'syz.1.3490': attribute type 1 has an invalid length. [ 417.632905][T19147] __nla_validate_parse: 8 callbacks suppressed [ 417.632927][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3492'. [ 417.694161][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 417.717868][T19145] bond1: entered promiscuous mode [ 417.725695][T19145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.917204][T19169] Cannot find add_set index 0 as target [ 417.956376][T19155] bond1: (slave bridge2): making interface the new active one [ 417.964325][T19155] bridge2: entered promiscuous mode [ 417.971259][T19155] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 418.137142][T19173] netlink: 'syz.2.3496': attribute type 1 has an invalid length. [ 418.142470][T19176] openvswitch: netlink: Flow actions attr not present in new flow. [ 418.325145][T19184] netlink: 'syz.3.3500': attribute type 4 has an invalid length. [ 418.515791][T19198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3505'. [ 418.528764][T19198] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3505'. [ 418.728739][T19213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3511'. [ 418.734165][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 418.756498][T19205] validate_nla: 1 callbacks suppressed [ 418.756522][T19205] netlink: 'syz.3.3508': attribute type 4 has an invalid length. [ 418.960046][T19225] netlink: 'syz.1.3514': attribute type 2 has an invalid length. [ 419.069835][T19235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3517'. [ 419.110557][T19238] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 419.117060][T19238] syzkaller1: linktype set to 823 [ 419.159052][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3520'. [ 419.325400][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3521'. [ 419.327661][T19251] pim6reg: entered allmulticast mode [ 419.374584][T19251] pim6reg: left allmulticast mode [ 419.595211][T19268] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3527'. [ 419.631689][T19272] sctp: [Deprecated]: syz.2.3528 (pid 19272) Use of int in maxseg socket option. [ 419.631689][T19272] Use struct sctp_assoc_value instead [ 419.632561][T19268] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3527'. [ 419.774100][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 419.887320][T19277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.895687][T19279] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 419.904922][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3533'. [ 419.928010][T19285] bridge0: entered promiscuous mode [ 419.933289][T19285] bridge0: entered allmulticast mode [ 419.943460][T19285] team0: Port device bridge0 added [ 419.976023][T19285] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 419.996242][T19285] syzkaller1: linktype set to 823 [ 420.024416][T19285] syzkaller1: tun_chr_ioctl cmd 3224918120 [ 420.047694][T19285] bridge0: port 1(team0) entered blocking state [ 420.065967][T19285] bridge0: port 1(team0) entered disabled state [ 420.072481][T19285] team0: entered allmulticast mode [ 420.083204][T19285] team_slave_0: entered allmulticast mode [ 420.089896][T19285] team_slave_1: entered allmulticast mode [ 420.121071][T19285] team0: left allmulticast mode [ 420.136271][T19285] team_slave_0: left allmulticast mode [ 420.156253][T19285] team_slave_1: left allmulticast mode [ 420.324885][T19311] sctp: [Deprecated]: syz.1.3540 (pid 19311) Use of int in max_burst socket option. [ 420.324885][T19311] Use struct sctp_assoc_value instead [ 420.365666][T19312] netlink: 'syz.2.3539': attribute type 1 has an invalid length. [ 420.393770][T19314] netlink: 'syz.3.3541': attribute type 1 has an invalid length. [ 420.405709][T19314] netlink: 'syz.3.3541': attribute type 2 has an invalid length. [ 420.435895][T19317] ieee802154 phy0 wpan0: encryption failed: -22 [ 420.814088][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 420.829844][T19351] bond0: entered promiscuous mode [ 420.835214][T19351] bond_slave_0: entered promiscuous mode [ 420.841159][T19351] bond_slave_1: entered promiscuous mode [ 420.866335][T19351] x_tables: duplicate underflow at hook 1 [ 420.912754][T19354] 8021q: VLANs not supported on ip6tnl0 [ 421.169075][T19367] : entered promiscuous mode [ 421.658797][T19391] netlink: 'syz.2.3568': attribute type 26 has an invalid length. [ 421.664718][T19400] IPv6: NLM_F_REPLACE set, but no existing node found! [ 421.821611][T19399] syzkaller0: entered promiscuous mode [ 421.828137][T19399] syzkaller0: entered allmulticast mode [ 421.854090][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 422.399118][ T5912] IPVS: starting estimator thread 0... [ 422.405605][T19440] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20004 [ 422.524978][T19441] IPVS: using max 27 ests per chain, 64800 per kthread [ 422.642714][T19458] __nla_validate_parse: 8 callbacks suppressed [ 422.642736][T19458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3582'. [ 422.701295][T19470] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3582'. [ 422.896371][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 423.935770][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 424.715633][T19493] netlink: 'syz.4.3588': attribute type 1 has an invalid length. [ 424.812744][T19484] IPVS: Scheduler module ip_vs_sip not found [ 424.958708][T19495] bond2: (slave bridge4): Enslaving as a backup interface with an up link [ 424.969599][T19500] syzkaller1: entered promiscuous mode [ 424.975252][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 424.975536][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3591'. [ 425.004089][T19500] syzkaller1: entered allmulticast mode [ 425.189730][T19525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3596'. [ 425.210739][T19524] netlink: 'syz.3.3595': attribute type 1 has an invalid length. [ 425.428087][T19537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3601'. [ 425.511901][T19537] netlink: 'syz.2.3601': attribute type 38 has an invalid length. [ 425.939055][T19555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.004090][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3607'. [ 426.014110][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.139973][T19560] netlink: 'syz.4.3609': attribute type 8 has an invalid length. [ 426.154282][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3609'. [ 426.212730][T19560] bond0: entered promiscuous mode [ 426.235428][T19560] bond_slave_0: entered promiscuous mode [ 426.249582][T19560] bond_slave_1: entered promiscuous mode [ 426.261311][T19560] bridge_slave_1: entered promiscuous mode [ 426.271343][T19560] gretap0: entered promiscuous mode [ 426.304298][T19560] bond0: left promiscuous mode [ 426.315911][T19560] bond_slave_0: left promiscuous mode [ 426.326778][T19560] bond_slave_1: left promiscuous mode [ 426.334998][T19560] bridge_slave_1: left promiscuous mode [ 426.349594][T19560] gretap0: left promiscuous mode [ 426.723641][T19590] syzkaller0: entered promiscuous mode [ 426.755031][T19590] syzkaller0: entered allmulticast mode [ 426.906840][T19602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3622'. [ 426.930982][T19604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3622'. [ 426.942628][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3624'. [ 426.964739][T19606] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 426.972539][T19606] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 427.014880][T19606] netlink: 'syz.2.3624': attribute type 8 has an invalid length. [ 427.054081][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 427.710085][T19636] bond3 (unregistering): Released all slaves [ 428.094068][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 428.222816][T19669] __nla_validate_parse: 9 callbacks suppressed [ 428.222840][T19669] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3644'. [ 428.691317][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3650'. [ 428.725139][T19705] bridge_slave_1: left allmulticast mode [ 428.732624][T19705] bridge_slave_1: left promiscuous mode [ 428.764381][T19705] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.796962][T19705] bridge_slave_0: left allmulticast mode [ 428.803000][T19705] bridge_slave_0: left promiscuous mode [ 428.819318][T19705] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.932768][T19718] netlink: 'syz.0.3655': attribute type 29 has an invalid length. [ 428.970064][T19720] netlink: 'syz.0.3655': attribute type 29 has an invalid length. [ 429.118969][T19731] netlink: 'syz.0.3659': attribute type 32 has an invalid length. [ 429.134131][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 429.142287][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'. [ 429.190803][T19731] bond1: option coupled_control: invalid value (192) [ 429.255668][T19731] bond1 (unregistering): Released all slaves [ 429.488308][T19750] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3665'. [ 429.526859][T19750] NCSI netlink: No device for ifindex 0 [ 429.580975][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3666'. [ 429.590740][T19760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3666'. [ 429.600192][T19760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3666'. [ 429.886275][T19780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3672'. [ 429.897789][T19780] validate_nla: 1 callbacks suppressed [ 429.897811][T19780] netlink: 'syz.3.3672': attribute type 11 has an invalid length. [ 429.983428][T19783] netlink: 'syz.2.3673': attribute type 4 has an invalid length. [ 430.001295][T19783] netlink: 'syz.2.3673': attribute type 1 has an invalid length. [ 430.014901][T19783] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3673'. [ 430.174092][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 430.178634][T19792] xt_bpf: check failed: parse error [ 430.518011][T19808] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3680'. [ 430.559420][T19811] Bluetooth: MGMT ver 1.23 [ 430.877522][T19826] syzkaller0: entered promiscuous mode [ 430.895910][T19826] syzkaller0: entered allmulticast mode [ 431.159602][T19841] netlink: 'syz.0.3691': attribute type 5 has an invalid length. [ 431.190858][T19838] netlink: 'syz.2.3692': attribute type 1 has an invalid length. [ 431.215534][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 431.393134][T19852] netlink: 'syz.3.3695': attribute type 1 has an invalid length. [ 431.639766][T19871] netlink: 'syz.2.3699': attribute type 10 has an invalid length. [ 431.649941][T19871] bond0: (slave wlan1): Opening slave failed [ 432.101771][T19901] bond2: entered promiscuous mode [ 432.107369][T19901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.254087][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 432.355766][T19910] xt_l2tp: v2 tid > 0xffff: 1114244 [ 432.419165][T19918] Cannot find add_set index 1 as target [ 432.799608][T19938] netlink: 'syz.1.3717': attribute type 21 has an invalid length. [ 432.807159][T19935] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 432.829450][T19935] bond1: (slave lo): Enslaving as an active interface with an up link [ 432.846195][T19935] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 432.864223][T19938] netlink: 'syz.1.3717': attribute type 6 has an invalid length. [ 433.124673][T19960] block nbd1: Unsupported socket: should be TCP or UNIX. [ 433.294125][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 433.429159][T19979] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 433.611266][T19995] Bluetooth: MGMT ver 1.23 [ 433.692510][T20002] netlink: 'syz.1.3737': attribute type 9 has an invalid length. [ 433.725668][T20005] sctp: [Deprecated]: syz.3.3740 (pid 20005) Use of int in max_burst socket option deprecated. [ 433.725668][T20005] Use struct sctp_assoc_value instead [ 433.746669][T20001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.771488][T20001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.981721][T20020] __nla_validate_parse: 9 callbacks suppressed [ 433.981745][T20020] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.3746'. [ 434.118445][T20026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.141617][T20029] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3748'. [ 434.326532][T20036] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3752'. [ 434.335799][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 434.370127][T20034] bridge0: port 1(veth0_to_bridge) entered blocking state [ 434.380621][T20034] bridge0: port 1(veth0_to_bridge) entered disabled state [ 434.385719][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3753'. [ 434.394747][T20034] veth0_to_bridge: entered allmulticast mode [ 434.425900][T20045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3750'. [ 434.441290][T20034] veth0_to_bridge: entered promiscuous mode [ 434.448722][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'. [ 434.460750][T20034] bridge0: port 1(veth0_to_bridge) entered blocking state [ 434.468487][T20034] bridge0: port 1(veth0_to_bridge) entered listening state [ 434.502599][T20046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.509933][T20046] IPv6: NLM_F_CREATE should be set when creating new route [ 434.537355][T20034] x_tables: duplicate underflow at hook 3 [ 434.717321][T20056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3755'. [ 434.726117][T20060] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3757'. [ 434.936171][T20074] validate_nla: 5 callbacks suppressed [ 434.936195][T20074] netlink: 'syz.3.3761': attribute type 1 has an invalid length. [ 434.992885][T20074] bridge0: Device is already in use. [ 435.062575][T20082] nbd: couldn't find a device at index 0 [ 435.098111][T20084] netlink: 'syz.0.3762': attribute type 3 has an invalid length. [ 435.181975][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3765'. [ 435.235892][T20095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3765'. [ 435.374075][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 435.592324][T20111] bond1: (slave ip6gretap1): making interface the new active one [ 435.627425][T20111] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 435.722149][T20124] wireguard0: entered promiscuous mode [ 435.735247][T20124] wireguard0: entered allmulticast mode [ 435.749690][T20124] team0: Device wireguard0 is of different type [ 435.790382][T20131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.997452][T20139] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 436.080680][T20143] syzkaller0: entered promiscuous mode [ 436.086400][T20143] syzkaller0: entered allmulticast mode [ 436.283569][T20152] netlink: 'syz.1.3786': attribute type 10 has an invalid length. [ 436.305209][T20158] netlink: 'syz.3.3787': attribute type 24 has an invalid length. [ 436.414079][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 436.631839][T20168] netlink: 'syz.1.3790': attribute type 1 has an invalid length. [ 436.663765][T20175] netlink: 'syz.2.3792': attribute type 1 has an invalid length. [ 436.665092][T20168] bond2: entered promiscuous mode [ 436.673373][T20175] netlink: 'syz.2.3792': attribute type 2 has an invalid length. [ 436.685065][T20175] netlink: 'syz.2.3792': attribute type 1 has an invalid length. [ 436.685264][T20168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.750630][T20175] bond2: option miimon: invalid value (18446744073709551585) [ 436.758958][T20175] bond2: option miimon: allowed values 0 - 2147483647 [ 436.769286][T20175] bond2 (unregistering): Released all slaves [ 436.816114][T20168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.824841][T20168] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 436.835757][T20168] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 436.861684][T20168] bond2: (slave ip6gre1): making interface the new active one [ 436.869466][T20168] ip6gre1: entered promiscuous mode [ 436.877712][T20168] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 437.000761][T20181] netlink: 'syz.1.3794': attribute type 2 has an invalid length. [ 437.144687][T20191] netlink: 'syz.0.3798': attribute type 1 has an invalid length. [ 437.288834][T20202] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 437.454082][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 437.659320][T20223] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:0 [ 437.681792][T20225] vlan2: entered allmulticast mode [ 437.687317][T20225] bond0: entered allmulticast mode [ 437.691898][T20222] xt_connbytes: Forcing CT accounting to be enabled [ 437.692638][T20225] bond_slave_0: entered allmulticast mode [ 437.705826][T20225] bond_slave_1: entered allmulticast mode [ 437.754558][T20227] veth3: entered promiscuous mode [ 437.764149][T20227] veth3: entered allmulticast mode [ 437.835978][T20225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.885295][T20225] bond_slave_0: left allmulticast mode [ 437.924436][T20225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.941632][T20225] bond_slave_1: left allmulticast mode [ 437.967603][T20225] bond0 (unregistering): Released all slaves [ 438.494070][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 438.538326][T20274] IPv6: Can't replace route, no match found [ 438.758959][T20259] bridge0: port 1(veth0_to_bridge) entered disabled state [ 438.863350][T20259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.892992][T20259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.072939][T20065] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.089945][T20065] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.097023][T20273] __nla_validate_parse: 15 callbacks suppressed [ 439.097042][T20273] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3824'. [ 439.114580][T20065] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.140121][T20065] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.168107][T20273] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3824'. [ 439.185198][T20273] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3824'. [ 439.236766][T20273] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3824'. [ 439.265028][T20273] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3824'. [ 439.294574][T20273] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3824'. [ 439.484436][T20295] nbd1: detected capacity change from 0 to 63 [ 439.500214][T20304] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3829'. [ 439.535810][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 439.547937][T20315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3835'. [ 439.575556][ T5832] block nbd1: Receive control failed (result -104) [ 439.582674][T20315] xt_hashlimit: size too large, truncated to 1048576 [ 439.585900][ T5843] block nbd1: Receive control failed (result -32) [ 439.676221][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3836'. [ 439.769283][T20317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.996823][T20338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3841'. [ 440.048658][T20338] bond3 (unregistering): Released all slaves [ 440.180856][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.193379][T20345] syzkaller0: entered promiscuous mode [ 440.215088][T20345] syzkaller0: entered allmulticast mode [ 440.258807][T20345] openvswitch: netlink: Flow actions attr not present in new flow. [ 440.269925][T20351] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 440.574124][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 440.651458][T20372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.742824][T20379] IPVS: set_ctl: invalid protocol: 8 172.30.1.2:20004 [ 440.753337][T20377] chnl_net:caif_netlink_parms(): no params data found [ 440.908735][T20391] validate_nla: 6 callbacks suppressed [ 440.908757][T20391] netlink: 'syz.1.3859': attribute type 2 has an invalid length. [ 440.952495][T20391] 9: entered promiscuous mode [ 441.216497][T20410] pim6reg: entered allmulticast mode [ 441.229948][T20410] pim6reg: left allmulticast mode [ 441.243013][T20412] netlink: 'syz.4.3865': attribute type 2 has an invalid length. [ 441.614076][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 441.747183][T20434] tipc: Started in network mode [ 441.753730][T20434] tipc: Node identity ee887c67524f, cluster identity 4711 [ 441.761469][T20434] tipc: Enabled bearer , priority 0 [ 441.874193][T20434] syzkaller0: entered promiscuous mode [ 441.879854][T20434] syzkaller0: entered allmulticast mode [ 441.887008][T20434] tipc: Resetting bearer [ 441.937531][T20433] tipc: Resetting bearer [ 442.654102][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 443.694869][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 443.766410][T20433] tipc: Disabling bearer [ 443.810520][ T7502] tipc: Node number set to 3167190119 [ 444.108825][T20477] __nla_validate_parse: 45 callbacks suppressed [ 444.108847][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3885'. [ 444.267426][T20491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3887'. [ 444.293095][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3886'. [ 444.734113][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 445.038033][T20496] vcan1: entered promiscuous mode [ 445.043176][T20496] vcan1: entered allmulticast mode [ 445.323575][T20527] netlink: 'syz.3.3895': attribute type 29 has an invalid length. [ 445.384731][T20527] netlink: 'syz.3.3895': attribute type 29 has an invalid length. [ 445.446154][T20536] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3898'. [ 445.529242][T20544] netlink: 'syz.4.3900': attribute type 1 has an invalid length. [ 445.657054][T20544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.727330][T20558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3902'. [ 445.774081][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 445.802064][T20548] bond3: (slave veth3): Enslaving as an active interface with a down link [ 445.847577][T20550] bond3: (slave gretap1): making interface the new active one [ 445.867894][T20550] gretap1: entered promiscuous mode [ 445.875459][T20550] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 445.900907][T20544] macvlan2: entered promiscuous mode [ 445.907707][T20544] macvlan2: entered allmulticast mode [ 445.915216][T20544] bond3: entered promiscuous mode [ 445.921761][T20544] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 445.956213][T20544] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 445.989094][T20544] bond3: left promiscuous mode [ 446.043275][T20564] macvtap1: entered promiscuous mode [ 446.073489][T20564] macvtap1: entered allmulticast mode [ 446.090496][T20564] veth1_vlan: entered allmulticast mode [ 446.171965][T20567] macvtap2: entered promiscuous mode [ 446.186883][T20567] macvtap2: entered allmulticast mode [ 446.564714][T20605] netlink: 'syz.3.3911': attribute type 2 has an invalid length. [ 446.613820][T20605] netlink: 'syz.3.3911': attribute type 2 has an invalid length. [ 446.678003][T20609] syzkaller0: entered promiscuous mode [ 446.814080][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 446.873928][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'. [ 446.903599][T20620] netlink: 'syz.4.3919': attribute type 5 has an invalid length. [ 446.906723][T20622] IPv6: sit1: Disabled Multicast RS [ 446.917023][T20620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3919'. [ 447.158732][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3925'. [ 447.182119][T20637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3925'. [ 447.205239][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3925'. [ 447.856358][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 448.894165][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 449.934138][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 450.974144][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 452.014112][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 453.054147][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 454.094165][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 455.134142][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 456.174489][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 456.934328][ T7080] gretap1: left promiscuous mode [ 457.214133][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 458.254145][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 459.294158][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 460.334133][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 461.374123][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 462.414150][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 463.454158][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 464.494752][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 465.534164][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 466.574132][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 467.614140][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 468.654234][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 469.694175][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 470.734153][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 470.992966][T20653] syzkaller0: entered promiscuous mode [ 471.000889][T20653] syzkaller0: entered allmulticast mode [ 471.040793][T20653] __nla_validate_parse: 2 callbacks suppressed [ 471.040815][T20653] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3931'. [ 471.121886][T20668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3935'. [ 471.160396][T20670] netlink: 'syz.0.3936': attribute type 1 has an invalid length. [ 471.190729][T20670] netlink: 'syz.0.3936': attribute type 4 has an invalid length. [ 471.220551][T20670] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3936'. [ 471.363396][T20677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3938'. [ 471.496425][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3938'. [ 471.526729][T20681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3938'. [ 471.776760][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 471.839863][T20692] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3941'. [ 471.841129][T20691] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3941'. [ 471.981337][T20694] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3942'. [ 472.815328][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 473.312080][T20710] netlink: 'syz.0.3946': attribute type 1 has an invalid length. [ 473.369559][T20710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.410082][T20710] vlan2: entered allmulticast mode [ 473.435437][T20710] bond3: entered allmulticast mode [ 473.489510][T20710] bond3: (slave geneve2): making interface the new active one [ 473.517661][T20710] geneve2: entered allmulticast mode [ 473.548182][T20710] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 473.735715][T20734] ip6t_srh: unknown srh invflags 4000 [ 473.854059][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 474.439557][T20757] netlink: 'syz.1.3959': attribute type 10 has an invalid length. [ 474.474144][T20757] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 474.474819][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3962'. [ 474.505547][T20757] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 474.520218][T20757] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 474.894130][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 475.225054][T20812] netlink: 'syz.3.3979': attribute type 29 has an invalid length. [ 475.500478][T20830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.934064][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 476.067246][T20868] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 476.133641][T20869] TC_ACT_REPEAT abuse ? [ 476.234676][T20877] __nla_validate_parse: 10 callbacks suppressed [ 476.234700][T20877] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3999'. [ 476.291507][T20882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3999'. [ 476.550298][T20893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3999'. [ 476.567358][T20882] bond3: entered promiscuous mode [ 476.572871][T20882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.596660][T20877] bridge2: entered promiscuous mode [ 476.603139][T20877] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 476.635430][T20891] macvlan3: entered promiscuous mode [ 476.655648][T20891] macvlan3: entered allmulticast mode [ 476.661600][T20891] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 476.957618][T20909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4004'. [ 476.974148][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 477.034291][T20914] block nbd2: server does not support multiple connections per device. [ 477.074980][T20914] block nbd2: shutting down sockets [ 477.259306][T20925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4010'. [ 477.356395][T20932] netlink: 'syz.0.4011': attribute type 1 has an invalid length. [ 477.508685][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4014'. [ 477.538173][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4014'. [ 477.546249][T20943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4016'. [ 477.604418][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4014'. [ 477.615970][T20943] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.641766][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4014'. [ 477.676849][T20943] bridge_slave_0 (unregistering): left allmulticast mode [ 477.709908][T20943] bridge_slave_0 (unregistering): left promiscuous mode [ 477.725559][T20943] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.752538][ T7085] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.768465][T20064] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.781206][T20064] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.797998][T20964] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 477.826568][T20963] netlink: zone id is out of range [ 477.852092][T20963] netlink: zone id is out of range [ 477.865633][T20960] netlink: 'syz.4.4018': attribute type 32 has an invalid length. [ 477.882517][T20963] netlink: zone id is out of range [ 477.894732][T20963] netlink: zone id is out of range [ 477.899911][T20963] netlink: zone id is out of range [ 477.944235][T20963] netlink: zone id is out of range [ 477.949858][T20963] netlink: zone id is out of range [ 478.014132][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 478.028155][T20963] netlink: zone id is out of range [ 478.031849][T20952] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.033339][T20963] netlink: zone id is out of range [ 478.066655][T20064] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.131742][T20960] bond4: Setting coupled_control to off (0) [ 478.153592][T20973] bond0: (slave bond_slave_0): Releasing backup interface [ 478.163915][T20973] bond_slave_0: left promiscuous mode [ 478.179102][T20973] bond0: (slave bond_slave_1): Releasing backup interface [ 478.188776][T20973] bond_slave_1: left promiscuous mode [ 478.207688][T20973] team0: Port device team_slave_0 removed [ 478.217702][T20973] team0: Port device team_slave_1 removed [ 478.228386][T20973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.238069][T20973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.247251][T20973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.256389][T20973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.268988][T20976] team0: Mode changed to "random" [ 478.309856][T20952] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.440365][T20952] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.486505][T21001] ip6tnl0: Caught tx_queue_len zero misconfig [ 478.548272][T20952] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.867014][T20065] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.875838][T20065] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.952667][T20065] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.976691][T20065] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.117395][T21038] nbd: couldn't find a device at index 0 [ 479.158050][T21040] mac80211_hwsim hwsim37 wlan0: Caught tx_queue_len zero misconfig [ 479.164388][T21043] tipc: Failed to remove unknown binding: 66,0,0/0:2006945200/2006945201 [ 479.176727][T21043] tipc: Failed to remove unknown binding: 66,0,0/0:2006945200/2006945201 [ 479.289664][T21050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.328310][T21050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.450410][T21064] sctp: [Deprecated]: syz.1.4049 (pid 21064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.450410][T21064] Use struct sctp_sack_info instead [ 479.471965][T21064] sctp: [Deprecated]: syz.1.4049 (pid 21064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.471965][T21064] Use struct sctp_sack_info instead [ 479.749983][T21080] syzkaller0: entered promiscuous mode [ 479.756930][T21080] syzkaller0: entered allmulticast mode [ 479.821364][T21086] xt_ecn: cannot match TCP bits for non-tcp packets [ 479.830544][T21086] sctp: [Deprecated]: syz.2.4055 (pid 21086) Use of int in maxseg socket option. [ 479.830544][T21086] Use struct sctp_assoc_value instead [ 479.878408][T21087] blkio.reset_stats is deprecated [ 479.991468][T21091] vlan2: entered allmulticast mode [ 479.997354][T21091] hsr0: entered allmulticast mode [ 480.002514][T21091] hsr_slave_0: entered allmulticast mode [ 480.009537][T21091] hsr_slave_1: entered allmulticast mode [ 480.078142][T21095] "syz.1.4060" (21095) uses obsolete ecb(arc4) skcipher [ 480.127717][T21100] netlink: 'syz.1.4062': attribute type 1 has an invalid length. [ 480.893934][T21138] : entered promiscuous mode [ 481.252846][T21156] sctp: [Deprecated]: syz.0.4080 (pid 21156) Use of int in max_burst socket option. [ 481.252846][T21156] Use struct sctp_assoc_value instead [ 481.263823][T21157] __nla_validate_parse: 16 callbacks suppressed [ 481.263844][T21157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4078'. [ 481.283494][T21157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4078'. [ 481.300559][T21157] syzkaller0: entered promiscuous mode [ 481.306812][T21157] syzkaller0: entered allmulticast mode [ 481.330926][T21159] syzkaller1: entered promiscuous mode [ 481.339198][T21159] syzkaller1: entered allmulticast mode [ 481.445418][T21168] netlink: 'syz.0.4084': attribute type 4 has an invalid length. [ 481.468415][T21168] netlink: 'syz.0.4084': attribute type 4 has an invalid length. [ 481.822184][T21190] pim6reg527: entered allmulticast mode [ 481.836508][T21190] netlink: 'syz.2.4092': attribute type 29 has an invalid length. [ 481.845502][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4092'. [ 481.868348][T21193] netlink: 'syz.1.4094': attribute type 1 has an invalid length. [ 481.902428][T21193] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.940608][T21193] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.955227][T21193] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 481.975731][T21193] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 481.988049][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4094'. [ 481.997554][T21199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4094'. [ 482.101371][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4098'. [ 482.369221][T21223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4103'. [ 482.527519][T21234] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4107'. [ 482.537358][T21234] netlink: 'syz.2.4107': attribute type 1 has an invalid length. [ 482.546100][T21234] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4107'. [ 482.591351][T21237] syzkaller0: entered promiscuous mode [ 482.597887][T21237] syzkaller0: entered allmulticast mode [ 482.613076][T21239] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4109'. [ 483.112000][T21263] netlink: 'syz.2.4119': attribute type 2 has an invalid length. [ 483.214080][ C0] net_ratelimit: 191 callbacks suppressed [ 483.214105][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 483.569496][T21286] netlink: 'syz.4.4127': attribute type 1 has an invalid length. [ 483.578042][T21289] tipc: Enabling of bearer rejected, media not registered [ 483.614854][T21290] erspan0: entered allmulticast mode [ 483.635237][T21292] macvlan0: entered promiscuous mode [ 483.792584][T21253] netlink: 'syz.3.4114': attribute type 26 has an invalid length. [ 483.801439][T21253] netlink: 'syz.3.4114': attribute type 26 has an invalid length. [ 484.150055][ T5843] block nbd2: Receive control failed (result -1) [ 484.254084][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 484.263431][T21313] veth0_macvtap: left promiscuous mode [ 484.804176][T21325] netlink: 'syz.3.4136': attribute type 12 has an invalid length. [ 485.294097][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 485.323730][T21360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.365793][T21366] sctp: [Deprecated]: syz.2.4148 (pid 21366) Use of int in max_burst socket option deprecated. [ 485.365793][T21366] Use struct sctp_assoc_value instead [ 485.422167][T21372] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 485.457389][T21371] syzkaller0: entered promiscuous mode [ 485.462956][T21371] syzkaller0: entered allmulticast mode [ 485.475486][T21376] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 486.194437][T21419] [ 486.196842][T21419] ====================================================== [ 486.204007][T21419] WARNING: possible circular locking dependency detected [ 486.211052][T21419] syzkaller #0 Not tainted [ 486.215496][T21419] ------------------------------------------------------ [ 486.222539][T21419] syz.0.4167/21419 is trying to acquire lock: [ 486.228633][T21419] ffffffff8ee9de90 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0 [ 486.238349][T21419] [ 486.238349][T21419] but task is already holding lock: [ 486.246075][T21419] ffff8880a10a6c60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 486.255405][T21419] [ 486.255405][T21419] which lock already depends on the new lock. [ 486.255405][T21419] [ 486.265844][T21419] [ 486.265844][T21419] the existing dependency chain (in reverse order) is: [ 486.274865][T21419] [ 486.274865][T21419] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 486.282692][T21419] lock_sock_nested+0x48/0x100 [ 486.288081][T21419] inet_shutdown+0x6a/0x390 [ 486.293125][T21419] nbd_mark_nsock_dead+0x2e9/0x560 [ 486.298768][T21419] recv_work+0x1c7f/0x1d90 [ 486.303717][T21419] process_scheduled_works+0xb6e/0x18c0 [ 486.309795][T21419] worker_thread+0xa53/0xfc0 [ 486.314916][T21419] kthread+0x388/0x470 [ 486.319688][T21419] ret_from_fork+0x51e/0xb90 [ 486.324903][T21419] ret_from_fork_asm+0x1a/0x30 [ 486.330289][T21419] [ 486.330289][T21419] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 486.334034][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 486.338033][T21419] __mutex_lock+0x19f/0x1300 [ 486.349999][T21419] nbd_queue_rq+0x37b/0x1100 [ 486.355207][T21419] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 486.361284][T21419] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 486.368228][T21419] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 486.374913][T21419] blk_mq_run_hw_queue+0x348/0x4f0 [ 486.380587][T21419] blk_mq_dispatch_list+0xd16/0xe10 [ 486.386320][T21419] blk_mq_flush_plug_list+0x48d/0x570 [ 486.392306][T21419] __blk_flush_plug+0x3ed/0x4d0 [ 486.397680][T21419] __submit_bio+0x28d/0x580 [ 486.402709][T21419] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 486.408864][T21419] block_read_full_folio+0x599/0x830 [ 486.414686][T21419] filemap_read_folio+0x137/0x3b0 [ 486.420253][T21419] do_read_cache_folio+0x358/0x590 [ 486.425926][T21419] read_part_sector+0xb6/0x2b0 [ 486.431216][T21419] adfspart_check_ICS+0xa5/0xa40 [ 486.436685][T21419] bdev_disk_changed+0x7ba/0x1550 [ 486.442244][T21419] blkdev_get_whole+0x380/0x510 [ 486.447629][T21419] bdev_open+0x31e/0xd30 [ 486.452410][T21419] blkdev_open+0x470/0x610 [ 486.457411][T21419] do_dentry_open+0x785/0x14e0 [ 486.462733][T21419] vfs_open+0x3b/0x340 [ 486.467370][T21419] path_openat+0x2e08/0x3860 [ 486.472504][T21419] do_file_open+0x23e/0x4a0 [ 486.477556][T21419] do_sys_openat2+0x113/0x200 [ 486.482770][T21419] __x64_sys_openat+0x138/0x170 [ 486.488154][T21419] do_syscall_64+0x14d/0xf80 [ 486.493275][T21419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.499696][T21419] [ 486.499696][T21419] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 486.506944][T21419] __mutex_lock+0x19f/0x1300 [ 486.512167][T21419] nbd_queue_rq+0xc6/0x1100 [ 486.517294][T21419] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 486.523395][T21419] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 486.530440][T21419] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 486.536955][T21419] blk_mq_run_hw_queue+0x348/0x4f0 [ 486.542608][T21419] blk_mq_dispatch_list+0xd16/0xe10 [ 486.548355][T21419] blk_mq_flush_plug_list+0x48d/0x570 [ 486.554277][T21419] __blk_flush_plug+0x3ed/0x4d0 [ 486.559677][T21419] __submit_bio+0x28d/0x580 [ 486.564713][T21419] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 486.570961][T21419] block_read_full_folio+0x599/0x830 [ 486.576777][T21419] filemap_read_folio+0x137/0x3b0 [ 486.582338][T21419] do_read_cache_folio+0x358/0x590 [ 486.587985][T21419] read_part_sector+0xb6/0x2b0 [ 486.593295][T21419] adfspart_check_ICS+0xa5/0xa40 [ 486.598844][T21419] bdev_disk_changed+0x7ba/0x1550 [ 486.604397][T21419] blkdev_get_whole+0x380/0x510 [ 486.609774][T21419] bdev_open+0x31e/0xd30 [ 486.614541][T21419] blkdev_open+0x470/0x610 [ 486.619583][T21419] do_dentry_open+0x785/0x14e0 [ 486.624875][T21419] vfs_open+0x3b/0x340 [ 486.629473][T21419] path_openat+0x2e08/0x3860 [ 486.634587][T21419] do_file_open+0x23e/0x4a0 [ 486.639616][T21419] do_sys_openat2+0x113/0x200 [ 486.644910][T21419] __x64_sys_openat+0x138/0x170 [ 486.650290][T21419] do_syscall_64+0x14d/0xf80 [ 486.655416][T21419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.661840][T21419] [ 486.661840][T21419] -> #5 (set->srcu){.+.+}-{0:0}: [ 486.668975][T21419] __synchronize_srcu+0xca/0x300 [ 486.674466][T21419] elevator_switch+0x1e8/0x7a0 [ 486.679765][T21419] elevator_change+0x2cc/0x450 [ 486.685146][T21419] elevator_set_default+0x36c/0x430 [ 486.690873][T21419] blk_register_queue+0x366/0x430 [ 486.696425][T21419] __add_disk+0x677/0xd50 [ 486.701380][T21419] add_disk_fwnode+0xfb/0x480 [ 486.706587][T21419] nbd_dev_add+0x72c/0xb50 [ 486.711557][T21419] nbd_init+0x168/0x1f0 [ 486.716430][T21419] do_one_initcall+0x250/0x8d0 [ 486.721741][T21419] do_initcall_level+0x104/0x190 [ 486.727228][T21419] do_initcalls+0x59/0xa0 [ 486.732089][T21419] kernel_init_freeable+0x2a6/0x3e0 [ 486.737815][T21419] kernel_init+0x1d/0x1d0 [ 486.742701][T21419] ret_from_fork+0x51e/0xb90 [ 486.747818][T21419] ret_from_fork_asm+0x1a/0x30 [ 486.753232][T21419] [ 486.753232][T21419] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 486.761240][T21419] __mutex_lock+0x19f/0x1300 [ 486.766360][T21419] elevator_change+0x1b3/0x450 [ 486.771662][T21419] elevator_set_none+0xb5/0x140 [ 486.777069][T21419] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 486.783421][T21419] nbd_start_device+0x17f/0xb10 [ 486.788800][T21419] nbd_genl_connect+0x165b/0x1cf0 [ 486.794356][T21419] genl_family_rcv_msg_doit+0x22a/0x330 [ 486.800430][T21419] genl_rcv_msg+0x61c/0x7a0 [ 486.805459][T21419] netlink_rcv_skb+0x232/0x4b0 [ 486.810755][T21419] genl_rcv+0x28/0x40 [ 486.815264][T21419] netlink_unicast+0x80f/0x9b0 [ 486.820561][T21419] netlink_sendmsg+0x813/0xb40 [ 486.825847][T21419] ____sys_sendmsg+0x972/0x9f0 [ 486.831395][T21419] ___sys_sendmsg+0x2a5/0x360 [ 486.836620][T21419] __x64_sys_sendmsg+0x1bd/0x2a0 [ 486.842123][T21419] do_syscall_64+0x14d/0xf80 [ 486.847260][T21419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.853774][T21419] [ 486.853774][T21419] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 486.862388][T21419] blk_alloc_queue+0x546/0x680 [ 486.867684][T21419] __blk_mq_alloc_disk+0x197/0x390 [ 486.873341][T21419] nbd_dev_add+0x499/0xb50 [ 486.878303][T21419] nbd_init+0x168/0x1f0 [ 486.883092][T21419] do_one_initcall+0x250/0x8d0 [ 486.888389][T21419] do_initcall_level+0x104/0x190 [ 486.893947][T21419] do_initcalls+0x59/0xa0 [ 486.898861][T21419] kernel_init_freeable+0x2a6/0x3e0 [ 486.904590][T21419] kernel_init+0x1d/0x1d0 [ 486.909547][T21419] ret_from_fork+0x51e/0xb90 [ 486.914664][T21419] ret_from_fork_asm+0x1a/0x30 [ 486.919977][T21419] [ 486.919977][T21419] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 486.927305][T21419] fs_reclaim_acquire+0x71/0x100 [ 486.932782][T21419] __kmalloc_cache_noprof+0x40/0x660 [ 486.938596][T21419] cryptomgr_notify+0x85/0x930 [ 486.943984][T21419] notifier_call_chain+0x1be/0x400 [ 486.949628][T21419] blocking_notifier_call_chain+0x6a/0x90 [ 486.955870][T21419] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 486.961692][T21419] crypto_alloc_tfm_node+0x13e/0x3f0 [ 486.967513][T21419] crypto_alloc_sync_skcipher+0x39/0xd0 [ 486.973594][T21419] rxkad_init+0x20/0xe0 [ 486.978302][T21419] rxrpc_init_security+0x72/0x120 [ 486.983950][T21419] af_rxrpc_init+0x13d/0x2e0 [ 486.989164][T21419] do_one_initcall+0x250/0x8d0 [ 486.994456][T21419] do_initcall_level+0x104/0x190 [ 486.999921][T21419] do_initcalls+0x59/0xa0 [ 487.004782][T21419] kernel_init_freeable+0x2a6/0x3e0 [ 487.010566][T21419] kernel_init+0x1d/0x1d0 [ 487.015424][T21419] ret_from_fork+0x51e/0xb90 [ 487.020555][T21419] ret_from_fork_asm+0x1a/0x30 [ 487.025850][T21419] [ 487.025850][T21419] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 487.034057][T21419] down_read+0x47/0x2e0 [ 487.038922][T21419] blocking_notifier_call_chain+0x54/0x90 [ 487.045184][T21419] __crypto_register_alg+0x32b/0x3c0 [ 487.050995][T21419] crypto_register_alg+0x447/0x810 [ 487.056627][T21419] do_one_initcall+0x250/0x8d0 [ 487.061931][T21419] do_initcall_level+0x104/0x190 [ 487.067398][T21419] do_initcalls+0x59/0xa0 [ 487.072269][T21419] kernel_init_freeable+0x2a6/0x3e0 [ 487.078000][T21419] kernel_init+0x1d/0x1d0 [ 487.082962][T21419] ret_from_fork+0x51e/0xb90 [ 487.088178][T21419] ret_from_fork_asm+0x1a/0x30 [ 487.093473][T21419] [ 487.093473][T21419] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 487.101037][T21419] __lock_acquire+0x15a5/0x2cf0 [ 487.106503][T21419] lock_acquire+0xf0/0x2e0 [ 487.111448][T21419] down_write+0x96/0x200 [ 487.116219][T21419] crypto_alg_mod_lookup+0x211/0x5f0 [ 487.122228][T21419] crypto_alloc_tfm_node+0x13e/0x3f0 [ 487.128078][T21419] tls_set_sw_offload+0xa33/0x1780 [ 487.133744][T21419] tls_setsockopt+0xef2/0x15c0 [ 487.139039][T21419] do_sock_setsockopt+0x17c/0x1b0 [ 487.144604][T21419] __x64_sys_setsockopt+0x13d/0x1b0 [ 487.150328][T21419] do_syscall_64+0x14d/0xf80 [ 487.155446][T21419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.161866][T21419] [ 487.161866][T21419] other info that might help us debug this: [ 487.161866][T21419] [ 487.172097][T21419] Chain exists of: [ 487.172097][T21419] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 487.172097][T21419] [ 487.185161][T21419] Possible unsafe locking scenario: [ 487.185161][T21419] [ 487.192706][T21419] CPU0 CPU1 [ 487.198260][T21419] ---- ---- [ 487.203624][T21419] lock(sk_lock-AF_INET6); [ 487.208134][T21419] lock(&nsock->tx_lock); [ 487.215090][T21419] lock(sk_lock-AF_INET6); [ 487.222321][T21419] lock(crypto_alg_sem); [ 487.226745][T21419] [ 487.226745][T21419] *** DEADLOCK *** [ 487.226745][T21419] [ 487.234892][T21419] 1 lock held by syz.0.4167/21419: [ 487.240097][T21419] #0: ffff8880a10a6c60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 487.249876][T21419] [ 487.249876][T21419] stack backtrace: [ 487.255771][T21419] CPU: 1 UID: 0 PID: 21419 Comm: syz.0.4167 Not tainted syzkaller #0 PREEMPT(full) [ 487.255792][T21419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.255801][T21419] Call Trace: [ 487.255809][T21419] [ 487.255816][T21419] dump_stack_lvl+0xe8/0x150 [ 487.255838][T21419] print_circular_bug+0x2e1/0x300 [ 487.255863][T21419] check_noncircular+0x12e/0x150 [ 487.255888][T21419] __lock_acquire+0x15a5/0x2cf0 [ 487.255917][T21419] lock_acquire+0xf0/0x2e0 [ 487.255935][T21419] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 487.255959][T21419] down_write+0x96/0x200 [ 487.255980][T21419] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 487.255999][T21419] ? __pfx_down_write+0x10/0x10 [ 487.256021][T21419] ? crypto_larval_alloc+0x1bf/0x290 [ 487.256040][T21419] crypto_alg_mod_lookup+0x211/0x5f0 [ 487.256061][T21419] crypto_alloc_tfm_node+0x13e/0x3f0 [ 487.256082][T21419] ? timer_init_key+0x161/0x2f0 [ 487.256100][T21419] tls_set_sw_offload+0xa33/0x1780 [ 487.256126][T21419] tls_setsockopt+0xef2/0x15c0 [ 487.256144][T21419] ? __pfx_tls_setsockopt+0x10/0x10 [ 487.256163][T21419] ? __fget_files+0x2a/0x420 [ 487.256185][T21419] ? aa_sock_opt_perm+0xff/0x1a0 [ 487.256208][T21419] ? sock_common_setsockopt+0x36/0xc0 [ 487.256231][T21419] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 487.256261][T21419] do_sock_setsockopt+0x17c/0x1b0 [ 487.256280][T21419] __x64_sys_setsockopt+0x13d/0x1b0 [ 487.256299][T21419] do_syscall_64+0x14d/0xf80 [ 487.256316][T21419] ? trace_irq_disable+0x3b/0x150 [ 487.256330][T21419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.256345][T21419] ? clear_bhb_loop+0x40/0x90 [ 487.256362][T21419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.256377][T21419] RIP: 0033:0x7fce9539c819 [ 487.256393][T21419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.256407][T21419] RSP: 002b:00007fce96273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 487.256423][T21419] RAX: ffffffffffffffda RBX: 00007fce95615fa0 RCX: 00007fce9539c819 [ 487.256435][T21419] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000005 [ 487.256444][T21419] RBP: 00007fce95432c91 R08: 0000000000000038 R09: 0000000000000000 [ 487.256454][T21419] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 487.256464][T21419] R13: 00007fce95616038 R14: 00007fce95615fa0 R15: 00007fff24fe3f48 [ 487.256482][T21419] [ 487.374038][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 487.510680][T21434] __nla_validate_parse: 22 callbacks suppressed [ 487.510701][T21434] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4171'. [ 488.414118][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 489.454204][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 490.494054][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 491.534087][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 492.574092][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 493.614036][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 494.654054][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 495.694057][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available