last executing test programs: 54.650400665s ago: executing program 3 (id=2714): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x26, 0xffffffffffffff34) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 54.161537933s ago: executing program 3 (id=2719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x2166, 0x2, {{0x2e, 0x4, 0x0, 0x2c, 0xb8, 0x68, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@ssrr={0x89, 0x2b, 0x4c, [@private=0xa010102, @local, @empty, @local, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010101, @broadcast, @loopback, @empty, @remote]}, @timestamp_addr={0x44, 0x14, 0x93, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x25}, 0xb9}]}, @timestamp_prespec={0x44, 0xc, 0x62, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}]}, @noop, @noop, @lsrr={0x83, 0x13, 0xef, [@remote, @multicast2, @rand_addr=0x64010102, @local]}, @timestamp_prespec={0x44, 0x44, 0x8b, 0x3, 0x4, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0xf}, {@broadcast, 0xffff}, {@empty}, {@empty, 0x6}, {@remote, 0xc0000000}, {@multicast2, 0x4}]}]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd4, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xde}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc810}, 0x20008800) syz_genetlink_get_family_id$team(&(0x7f0000000680), r0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000740)=0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@bridge_getlink={0x80, 0x12, 0x1, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x60eab, 0x10000}, [@IFLA_VFINFO_LIST={0x24, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4401, 0x1}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x4}}]}]}, @IFLA_MAP={0x24, 0xe, {0xca6, 0x0, 0x1, 0x2, 0x2, 0x8}}, @IFLA_LINKMODE={0x5, 0x11, 0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xf1279f2}, @IFLA_NET_NS_PID={0x8, 0x13, r6}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0xc008) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @none}, &(0x7f00000008c0)=0xe, 0x80000) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000900)='veth0_macvtap\x00', 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x18014}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x88, r5, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80, 0x7b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r9, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x33}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x253}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x2}]}]}, 0x34}}, 0x45) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r9, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008081) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x13, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8f3, 0x0, 0x0, 0x0, 0x1e5c}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ldst={0x2, 0x1, 0x0, 0x5, 0xa, 0xffffffffffffffff, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6edf6326}}]}, &(0x7f0000000f00)='GPL\x00', 0x9a4e, 0xb7, &(0x7f0000000f40)=""/183, 0x41100, 0x4c, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001000)={0x0, 0x4, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001040)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000001080)=[{0x3, 0x2, 0x2, 0x5}, {0x5, 0x5, 0xc, 0x5}, {0x2, 0x1, 0x3, 0x1}, {0x0, 0x4, 0x5}, {0x4, 0x4, 0x8, 0x6}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{r10}, &(0x7f0000000e00), &(0x7f00000011c0)=r11}, 0x20) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xb4, r5, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5c}}}}, [@NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1ebf8a8a953fc5fe089c094374b124fabfd2f350b78d3f6d90402f40c8e17b75"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="094d846fd8727f817a92a8073428ef855e9b9cbd7d2906cce936dfb5e498d29c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bd4778aca1ecd98f"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7d9cff6d642c479376907533606c741dab6a87aedaf3fe5ffe42c7b627164daa"}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) write(r10, &(0x7f00000013c0)="59ef2cfe7a91ba3dd30784645ecf2fa3077a8e14208477d8ef25be85bca9d0af205265c85bff71e7c0693c438017a946461e2bb8fa6eec8efc7346f0d27c4bcf19438dc24c3bcb6ac8d19e82c15e554b9392b808fab40385759b39e6e8e58d075b8b1c574c9cf65a22765e13628afd2715f3d1e7f63997c14e80c0f9849585ceaeba75286c1022910abccea64786b3", 0x8f) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000015c0)={'tunl0\x00', &(0x7f0000001480)={'ip_vti0\x00', r2, 0x7, 0x1, 0x1, 0x1000, {{0x3f, 0x4, 0x3, 0x6, 0xfc, 0x64, 0x0, 0x5, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0xfd, 0x1, 0x3, [{@empty, 0xfec}, {@multicast2, 0x8001}, {@loopback, 0x2}, {@remote, 0xffffffff}, {@local, 0x10}]}, @timestamp_prespec={0x44, 0x54, 0x3a, 0x3, 0x4, [{@empty, 0xf0}, {@private=0xa010100, 0x3}, {@empty, 0x750d}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@loopback, 0x65}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x5}, {@local, 0x4}, {@remote, 0x2}, {@broadcast, 0x60}]}, @rr={0x7, 0x13, 0x1d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010101, @remote]}, @rr={0x7, 0x1f, 0x2c, [@loopback, @remote, @local, @loopback, @private=0xa010102, @loopback, @empty]}, @cipso={0x86, 0x15, 0x0, [{0xddea14b488af01e2, 0xf, "24772d286e900a202ae828509b"}]}, @lsrr={0x83, 0x13, 0x6c, [@remote, @broadcast, @remote, @remote]}, @end, @ssrr={0x89, 0xb, 0x44, [@dev={0xac, 0x14, 0x14, 0x1b}, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'syztnl1\x00', r12, 0x29, 0x0, 0x5, 0x200, 0x48, @dev={0xfe, 0x80, '\x00', 0x20}, @private1, 0x8, 0x7800, 0x400, 0x3}}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r0) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0x6, 0x9, &(0x7f0000001700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x657}, @exit, @jmp={0x5, 0x1, 0xa, 0xa, 0xa, 0xffffffffffffffc0, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}]}, &(0x7f0000001780)='GPL\x00', 0x3, 0xf3, &(0x7f00000017c0)=""/243, 0x40f00, 0x51, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x0, 0x10, 0x28}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001940)=[r10, r10, 0xffffffffffffffff], &(0x7f0000001980)=[{0x2, 0x2, 0x7, 0x9}, {0x5, 0x1, 0xc}, {0x4, 0x1, 0xc, 0x4}], 0x10, 0x1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001a80)={r14, r12, 0x25, 0x11, @void}, 0x10) ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000001ac0)) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x4c, r13, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x63}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 53.888081629s ago: executing program 3 (id=2722): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x88000) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x88000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) sendmsg$netlink(r1, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2}}}], 0x20}, 0x80000) (async) sendmsg$netlink(r1, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2}}}], 0x20}, 0x80000) sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x4800}, 0x54) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 53.261509077s ago: executing program 3 (id=2725): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 52.903078353s ago: executing program 3 (id=2729): socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000001200000000005f"], 0x0, 0x4f}, 0x20) 51.482410676s ago: executing program 2 (id=2739): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x10000}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x47, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x1, 0x54, 0x0, 0x1}, 0x9c) (fail_nth: 8) 50.898286701s ago: executing program 2 (id=2741): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt(r0, 0xffffffff, 0x80, &(0x7f0000000240)="b193b8f71adb14ee3afb357950e97a4ea6ff27501930dc524220813fc9b6b3b608266cc72e60d09fa7f6a920ba32276076efb03af32653a6bc4a1dc32c08aac8f2b76d3da7e4a0efe8401cbedbebe432f291249b9fc920a674231c02ad75323011bb4dbe8944fdc96c1e7d69e0d46b114a645e89abcbaf6d82fea7513a910130c31009c69ea7c853ae00b8723eaa3e7052cb525fdac3fbf97f14df64b9d20a5ce6fe9f168a909d24e08207c06dd6d78d", 0xb0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000010000000000000005000100070000000900020073797a30000000000c00078008000b000000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x58}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r3, 0x223, 0x70bd2b, 0x25dfdbfb, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @dev, @private}, &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syz_tun\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r9, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x224, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x224}}, 0x4) 50.728374325s ago: executing program 0 (id=2744): r0 = socket$packet(0x11, 0x2, 0x300) getsockname(r0, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="03d30d6660af13bc83591b8c7455e11a5988eceb51a33f988226784ee166224dab6604fd2503bbaac87de3ad34da547ccf8eb5a29d31612ee6d2d8a8062c17b7f445536f5a113dc2396792054f80cecc9d10f00bb260c261b6049cfe5dbd9fc6521d79d2e3d8bfc0db51d8c3b9655a221fdd7cda4b1ff3c2ea31", @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0}}], 0x1, 0x20008080) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491717916deb4", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$unix(0x1, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) (async) getsockname(r0, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="03d30d6660af13bc83591b8c7455e11a5988eceb51a33f988226784ee166224dab6604fd2503bbaac87de3ad34da547ccf8eb5a29d31612ee6d2d8a8062c17b7f445536f5a113dc2396792054f80cecc9d10f00bb260c261b6049cfe5dbd9fc6521d79d2e3d8bfc0db51d8c3b9655a221fdd7cda4b1ff3c2ea31", @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0}}], 0x1, 0x20008080) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000040)=0x1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491717916deb4", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socket$unix(0x1, 0x2, 0x0) (async) 50.575927247s ago: executing program 0 (id=2745): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x800}) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) (rerun: 32) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r4, 0x4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xa, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0x9}, {0xb, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x90, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x2000c810) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000000008581895b2e73e47833f2183417661555dd50b76c7c0581c7b0e18b00873a63baa17cb385a08855082e72a5eb8529d216fa7fb2a415c4ac6265399902c7d6abd2ddf371d0791df01dd1cd2f3ea6e6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c2b98c4b", @ANYRES16=0x0, @ANYBLOB="00082abd7000fcdbdf255c00000008006b00bf05000008006b000a00000008006b00e001000008006b00e0010000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040000) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYRES64, @ANYRES16=r13, @ANYBLOB="01002abd7000000000003900000008000300", @ANYRES32=r12, @ANYBLOB="14005a80100001800400010005000200080000000cdf6f8ab5e1a81ee8df5220ab4c87529c17a81bf289be39a3180b2934c75d69edf9fb29af85ea4b05ffd0f887a84cb8ea4ddae78febd649927bbea4a8a2b0a95d374a8397d2675ce4a83d1c5ee12aff956e6e0f69bbbb"], 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async) r14 = socket$kcm(0x2d, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r15, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) close(r16) (async) sendmsg$kcm(r14, &(0x7f0000000700)={&(0x7f0000000380)=@tipc=@id={0x2d, 0x3, 0x3, {0x4e24, 0x3}}, 0x80, 0x0}, 0x850) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newtclass={0x40, 0x28, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x7, 0xc}, {0x7, 0x2}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xb1, 0x8}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 50.133918361s ago: executing program 4 (id=2747): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_emit_ethernet(0xae, &(0x7f0000000200)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x78, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x78, 0x0, @opaque="0e5603edfff2dea1b769c93d19fafc3882fa8861c758c55fe70b8328963f60bbb352976e4993f4b789ff0b6dc1e685736b0405ffdcd568dba26d99eb350c95ef3b602b9638186588fdb6f9d02a7443e62ee0ef156a87d48327934ccfc4c98eb27389db561962cb3182102e4bdc1cc983"}}}}}}, 0x0) 50.12929295s ago: executing program 2 (id=2748): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8d80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x6, 0x0, &(0x7f0000000180)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x0, 0x0, 0x8003}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="760a000000000000611154000000000018000000fbffffff0000000000000000fa4c2d0ace7e372df999ad820e183a00181200"/65, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 49.894551488s ago: executing program 0 (id=2749): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf2505000000080002000570"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20081000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x420, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 49.702416404s ago: executing program 4 (id=2750): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x12142) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x10, 0x1, 0x3, 0x7, {{0x1e, 0x4, 0x1, 0x1c, 0x78, 0x65, 0x0, 0xff, 0x2b, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xe3, [@broadcast, @empty, @loopback, @empty, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x44, 0xeb, 0x3, 0x3, [{@local, 0x80}, {@empty, 0x7}, {@rand_addr=0x64010100, 0x7}, {@empty, 0x3}, {@remote, 0x11dd}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x922}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}}}}) r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r4, 0x3}, 0x8) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000040)={0x0, {{0x2, 0x4e22, @loopback}}}, 0x88) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb48e0, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x12, &(0x7f0000000240)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) 49.603632943s ago: executing program 1 (id=2751): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x10000}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x47, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x1, 0x54, 0x0, 0x1}, 0x9c) (fail_nth: 9) 49.466486543s ago: executing program 0 (id=2752): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0x0, 0x25dfdbfd, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x80, 0x80}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d4, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, {0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f7424}, 0x0, 0x1b0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@loopback}}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$netlink(0x10, 0x3, 0xb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES16, @ANYRES32, @ANYRES8], 0x120}}, 0x0) 49.463712579s ago: executing program 2 (id=2753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001840000010203040506070800000c00020006002000080000000c0003000800170004"]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001440)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400809c}, 0x40010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r7, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) connect$netlink(r0, &(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x53, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x14) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r10, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x787c, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000002}, 0x1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a27d63bafecec14b3dff2f921dfe2b"], &(0x7f0000000000)='GPL\x00'}, 0x80) 48.149024932s ago: executing program 1 (id=2754): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x10048800, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a7ba430f747e"}, 0xffffffffffffffa4) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000290001000000000000000000fc020000000000000000000000000001fe8000000000000000000000000000200000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="be6b6e000000000050001100ac1414aa000000000000000000000000ffffffff0000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000080000000a000a0028001e"], 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 47.965068977s ago: executing program 0 (id=2755): r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r0, 0x84, 0x71, &(0x7f0000000080)=""/4059, &(0x7f0000000040)=0xffed) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073777a300000000014000480080001400000000008000240521deb0b68000000060a010400000000000000000500000008000b400000000040000480240001800b00010074756e6e656c000014000280080001400000000108000240000000091800018008000100667764ae31a10938f2dbf940000000090900010073797a3000000000140000001100010000000000000000000000000a"], 0xf0}}, 0x0) 47.87820977s ago: executing program 4 (id=2756): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x30, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x7}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 47.689340097s ago: executing program 1 (id=2757): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000680)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x2, 0x27}}], 0x48}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010200000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000074000000090a010400000000000000000200fffe08000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000094300009802c0002801c0001800800014000000004080001400000000308000140000000030c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0x100}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000100000008000500", @ANYRES32=r3, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) 47.436588996s ago: executing program 3 (id=2758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="2d6d656d6f72792067a0db3f5e0805a8c277816ca5aa846cf7696c64388c392cc68271dff243b820b755084446d42f09bc51fba1760884997d2ce1c3f102c156f6f1747421a7f5132dacf55b364aad099832a0cb5077a5f439fd35852f5f9a20019379d407edf46dfe"], 0x8) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblcr\x00', 0x0, 0x80005, 0x6f}, 0x2c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000300)={r2, &(0x7f0000000200)='[\x00', 0x400, &(0x7f0000000240)={@align, {0x80, 0x6, 0x1000000, 0xe0}}, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x5}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 47.383177865s ago: executing program 4 (id=2759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ea63fb9eaf2588479e49522929c100000000000000bd7bf786e896"], 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7100800000"], 0x25) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05080000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180070001007274000014000280080001400000000a080002400000002408000b40000000000900010073797a30"], 0xd4}}, 0x0) (async) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r6 = socket(0x1, 0x800, 0xe) vmsplice(r6, &(0x7f00000003c0)=[{&(0x7f0000000200)}], 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000240)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f00000002c0)={0x2}, 0x1) (async) listen(r7, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000000a0000040900010073797a3100000000200004801c0001800a00010072656469720000004c00028008000340000000720900020073797a2200000000140000001100010000000000000000000000000a87391c8b66ed562613c2e83b5cc348f66e87aa7d04db17cdee411ab76d5480c1e49122ed9545b5c62b3902ffd4271fff5d00d91ad433dd9a96e1d4c406720e26adc651a46a7f5d4ac86866af32"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 46.780284366s ago: executing program 1 (id=2760): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003b0001031bbd7002fadbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) 46.638731516s ago: executing program 4 (id=2761): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b04000000000000000400000002000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r5], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bind$tipc(r1, 0x0, 0x0) close(r1) 46.537589227s ago: executing program 0 (id=2762): socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000017c0)=""/8203, 0x1016000, 0x800}, 0x20) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x1, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xacd}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x2, r5, 0x0, 0x0}, 0x10) (async) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r6) (async) readv(r6, &(0x7f0000000440)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x14) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r13, 0x0, 0xf3a, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000380)={0x9, 0x2, 0x2, 0x8, 0x0, 0x0, 0x7f, 0x6, 0x5, 0x9f, 0x0, 0x0, 0x6, 0xff}, 0xe) (async) write$cgroup_pid(r13, &(0x7f0000000000), 0xffffff98) (async) splice(r8, 0x0, r13, 0x0, 0x80, 0x4) (async) write(r10, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) 46.536382276s ago: executing program 2 (id=2763): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0xa, 0x0, "1cf2510504fe14aedbd7ca5535f7f81764e304022b5886ca6d9a5887ad9cfeb6f4c0ea2e5f930db84e74738ad5b168221b8b36a81235f14893fa66261749906ed24b6047086bc73423397058de978a96"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0x42}}}]}, 0x38}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000001300)=""/4096, &(0x7f0000002300)=0x1000) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000a40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x51) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) sendmmsg$inet(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000980)="8c89abe4dd4d362c76062dfeb027a0123621d1d7c7b18bd905a3ef32ecbfa58ef6054affad6d06ab200c4d2b0faadaae9eba12ad629c6c2221eedbe0bad29d4174072308ba19acadd9c78f42e8657604302c5c3a0d4741b424867d694fa400dc824f1ac5848dc3f9b84ee05dcfbefdf697ce7f2231702f9a975ba6550e5f3124d67436c09e770817a3db05b6cf70bd13c7d885ff5c3e1199518cda0808639ec4b5ab69cd2d62c7c0e1171ba16a80d58c07f61fd141bbdba57bdd862743cae98d599d7fbc52066fd1e3b35893c552d6179d4ba9e574ae5122a5d51d312d2af72bd38cf19cc62894b111a06acaffe98aa6a1f455fec444b4dff5e4c7d5ba5515d09a44c283cb7bf3f5867418a33f349d62f5db22ef6b67e3a9d95f9530f395198ae3ba479b8beaa756313dee535660500682af847192e75b68c64effa80f9c4f64c78ad49776c7a16bc887a698f68d78479b9c33fcfca667beb467aef59dc3c59677f710e2bd30813dc1c998de57d6ce0dd9040065d529299584a5e316669ebfe5fbf894d2a11b230eea4829fab3fc85b4463cda9417cf474f2a383618c18a34808db16710c5ecc0211858ceda639f2cd3909749a6ae98955bbb5f02da80f3f06b989e30f8e96d6ba6cbc91f461f3f8e947e00c911e6b0866f061f31f286b9bafe98f73e5c2e1beee1634d90935ed6b9bb662aa645fc213644ff40ec89212892207e33680b010cf48ea9c1130d1648e93117e029634a56f2da3641b524464b14d9022904deedbf2168ddcf9582b64eb16ab34670e2510779b27d4a85660ff9184935689533987259332395dea39537c9f9dcf4487885359aa401b395b76954cb04d14780104a33d2dec4e1665f1d3dd5fbb848ced793490a87e1b1fb849efc65c4132303add2dbd44aa1d2d0f3c0414d5e9f0da6f66e0d3e44fdc629e4cc513dfabb694594aec47c2016ba7b1f7e378f64ace9ec755707a1e4a896c21d7e637bae22ab5ccd3371914ea99cbdd1987eea883a17c0616919070302721f2da550646509b4c06789efc8294b0cd6006243cc81d71df79b9b3fb43f6e3d5599f6fc9a6e67cff8d4a7c4e2175c1ae25609f7b499179d04a9c6ddb16f6c2fe957d8ffd643cf969c7c69b927d58e8ed57a771d63b124ac0e788d3fe1c73dfa00c3acad7a85f7a4e3360ae6b88b52e71584509a9fb93e8a6659784d514f18ea6b99f9ab08633e9f7713f3792a21181a56d5eb07b7c0dff436eb772ddcac3d59125af437c8b9b600e45ac13b9f3cc4cf0452e4ee02e873979496942e449b98a17be08f10a614e974a51cbe107807cba35e1f714499d996ef65423a15823088c5b018e243ce065cbdcba9a5d94462ad407519f44c7055b3231032f75d0616f38db2246f5863e581cee9627c8c28f24c2c6cd32a2b05aba1e349d837d03ef3628124978b96c359333e2ebc885c61cd983c17b83823d02a05b175a66c3d1f9e775ef4624afa634c374796ee1732847d398b7608976694544499a8832cf0282ef5bf805b33311bfba962093d947b204414ce8e5f996668e0af9deadf58402ab7cc3e7036ade2ba1eeda69568656cdcfb112cf781e2e3dd1f446803c26ae6546063ce3e9d2100e0bae9e4d224aa9995ba7bd3dcc8a9a6a17bff26e236613bed1c864a36144cfd38375109cb2d08ee62673177451017590a830932ec2b5159b57aba615ac8743c496a201700af750df34712ee24cd56b83e874e2a945ff3af612513a9c513155a108378b7d0e30ecca8a7e8c4817366bcb602f327c5586fbbd125b9751038246725c114e778f89cb3f055aedda1a3ce1afb70431fb385c3294009645a5a951cb4d2f3d5627ea917fe8bc93a34308de035829d64f8a8ff081f3587f059b91c59fccb9d0904003172f519733acbc0e29e00b2f219a1fda47d49ba8f826a68855c34d4cfb0a87192a43b5887d2ae957a2d617bd1bcf2505c4617dc482bfb83d081b826acb6e0e46c7c92bce2ef3848b6ba84b20466f85d60638c60d3b57c968976232b9920e25dec1c1ac640039bce86afebb776c2b762437a5a3e7a519c113ebb20bd48228146e0a47c7bcd94113646cf2cfd295f560278dd52ba31a1254919041f71f5873384569b92eb26f518fcaa021842841b0d4d64115268414964a411830cd1a07798448369e8c29cc81794827dbd41bcb07a29b30e1ee3791a5ef683e69d21572d0fc8595f088cee4ad9734ee28d098516e69476071d147f57ec59a0e5441b046b4d5a258c301181b35c2ce3475ea76d8152dc3702b0e87bf55f624c79625ae530475e8600de1653cb9923a1a82d5fd980264edecfc3d9cfe6c711e07490aeb31853e1678eca9516d4a1031a37150c6b455e64115da5c0b1a26f937ce7d5805c676f36f1db84d075a243dc30efde04db370ac2b52d47d2927e74d17c68690aa41d5820c7af565550a6491ef321983f01b02543b0c6f8ddde9bd2af5846b0e6e60e317bad11720c35057deef2bfa69b711b6969e69188ae72702b2d48a73b50938de63b565373ba9ab98e75bc6a8d8fdad263c396dd1e627dfe23df09bfc72861d4b02a9fc00266f6683f2c4c3b25246f82c16ebc08c02ea0980fed89a9f211823ce6c9a243b0c5fd43d85fc05d9c460e2b30a6cae05d55cbf6c495504b6d1fbc55fa4b79ebf30596599602316774d29e04e4cd22af41e87bad252f3f567b20353cffd065dc5b8d13041654f215f72d12abc152e987c352856f8dbd5d1603b316704690d6067619fa7d6352327d99c799fd6513b33a961352df0bc83865c3aeb483a99c66f085cea44114eeffdde43bc6966db466df8c9f804b2a1a9fac4845f5e29492bf4282dbcc16e4896adcf8b44cdf6b91de397246c1b29c076415eb40bb547856850057c9b20d3fb1dc345eb2134bf029b6b092ee0c36cbcc30dc27d6b25b1843681358ebf68f3569af35bcf187b8d62907f17b34071bb158306cad1aaca30617094ef4e623b994b9efa2eb772c8f8a4bdbf5abf10e61e8e9e3cc2e3cbea670b40fb2a3fa1ee28b46130e8c2ad0367ead5998ce6c20f44f1ae8cf88ccffadcd3d2c2a3b2f3255217411cd6000371bd176d783f0dae4005eb73a3630fb996006e6de19994405e29b7105bbbd7034684d7e9387eef20e59e0b0cb94d77ff8e15ceb149251e9dfec03ac7166c49d2fdbd1876c2aca55b46b53f4628f8b97541977d5433174a273214f4451b5b8b38a5446a5ef6402347e3caa6070405d551cbc155c6d630ae8e8058ecdf6431ac677c6162e83cdd2ea4826dfbb1a463e02cf6b6cb8d90c05e2945655bfeec91c2886d79ec80a61f03687c93f8daf5f1ba2ffb933843b7afeb1398509a318d7071e36160ceda992fd67564fe6dd602af37f0513cae19f4eb045aa9dd6a553715b080e216a06922d1421f841c29405db36eefe81611e6e5bfec5d55f209c560df4f84ec11b8946ec58dcc84242ab1d04dee23d1ee474b98749ed1ebd5f1e15d67d3e27ca06d0c73c6f643bc978ecbd73db7ac52eb4c669868c844ca55b111740667683ddae7e9b557bcc97051c4303ec86f9da2fab3763c7b8dd5acbc0460a59bd9e43156c615c0683f91101dfac5b5469cf23d1e51cac667efcb1e18edcdd0a07f75381d0c99603775dc7f4cec732baf2ce4a20637d1f099b762c5c15de98ff8205993d1fd39765ac862dbe70f56b370f110a1b6a5e0a8d3dbd4d6b52a96aa81468826a4a12beadc0c063d68c6eb90317c372ae6c92ed005caf759501c311bfdd06cbf53c8191313dbc7c766a07817b470d642665d21aeb190bb02daa72cac1ccbda6d5aa690fe98f06e086b851080328a09c55d925d73bd37c955dfb324e097c0a72c86ac0696479584f06a743ea43123be5977f15826b368e46c6108cfa4a9dacb044dc0d5e38f3ac799bc044e1a00c6623511bdaa9d785ad21b9792d1063edbe15aba582bb54a29cddb883fb7c3b5457fe49fc4b7bf54b89dcad72e46819c59d38714f78a39a598c5591915a71b58900d8af6de45ce7ed5649cba0402ef75821a91ba7cfa7e95e50e27f51786e2496d71f111262050b071fa77d03c1aa24ea9a6551c159c30dc1bbfaf8ccc2e9c7fe302498c7b876c896a9c6f2a382b1d3ca8e8989ddef60bfeba4d654501b0a50c1ac7138ad158d9713d112d13558d19da4cde503ef6f340b22a0d4efba5ad1e564cc76da59e5e30e9ac98bea2ad02910225eb6a94282b8d5a32acb7b3a5c5d4189811d3da9090e1aaa24f525acfbb4464c215d509e1143978c2ecf095b156731389c2d12624a695dfdc80c9a381652d5995a283fda62c702b34def64649732ee462bdcfa1f5f0a0442c15a3dd698d1fa7a7c210419c487ea598753549a305743938accec37b8ff301fa532b1a3a99ad82b0cde862d083ad7b4845b650ea32db5f1325154530b975fc6b91ca3c55bd12cc2d9ed8b726e698805192087295f1513f30e6b4b6d6dc04109739d88d4aaccf1be51b2f5615dbbed255e9e94bad53da3a214afec06fcf9fc361701ec33e91a8c555be9910b457b3a1d419082c6a08fe0afaee94f61fafc71c86f0c27992403e64ee636c1ec1893a4cefe9f1758e4d440d3940d223b2f83148518", 0xcc7}], 0x1}}], 0x1, 0x4002091) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@private0, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000300)=@newqdisc={0x7c, 0x24, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffe0, 0x4}, {0x8, 0x9}, {0xfff1, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2c924a5f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xfffffffc}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffa}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0xf9, 0x7}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r6 = socket(0x24, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000fbff0000050000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000258d114422fdaf9100"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r7}, 0x38) sendmsg$nl_crypto(r6, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)=@alg={0xf0, 0x10, 0x2, 0x70bd2b, 0x25dfdbfe, {{'morus640\x00'}, '\x00', '\x00', 0x2000, 0x2400}, [{0x8, 0x1, 0xffffffff}, {0x8, 0x1, 0x40}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1c0}, 0x40000) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000000)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000080)="7eadac2df2a2b939b400c807751a", 0xe}, {&(0x7f0000000200)="2ad1ced8fdacb1d9e36e8aaf40ec5e183620fd2c500b82a87fac564ae81b1aa38ecad1bf6f854ea1ba035f35961f7063a875994f175791a89cd52bb83fe20f754843cc10a1690d70b93fd85b327bb7779345b6fb68fb65b2870163d34d55619f8627077ddf5776d930e472845d094577b0aacc44d578054a0fae68d0eae6c47540ad7c6b6c36530418602631e8e3bb1b22f6a1eb26decc4c0964cbcd602562703e55ec2ee62b92b82801df293cc6763e910c9cca94662b9ea3825e", 0xbb}, {&(0x7f0000000400)="016fd1c1b58e929b0820e2a47779ac3ae1bbc7cecb054c30d2b3559554cbe0292a63e0aa6f80d3acac2ef2d01d40a8e227309b25b6af71154cf636c2effceeee28f1ad7f82a3e886c23ea59846ecc1b6812457fb14ccd636bcc8e5f0052e4285e1f744bca739b1e64049131fd67662528919e205586b24f0abef0ccd98fee19010cb0a5e97ff97c8e3c3295af5a3ef27a10003bf311d45aacd415c85364c9d257c745d46ab4f6e9f6c9adcbf529409834d7c7487fdcd151ded5ca6bead655d964f539959d64feb0699da25badd840af9a3685ce059508a72f5df26ccee640341de732f554d3be01e0b49f8819cdd3f05c95a58ec62f278c7d7", 0xf9}, {&(0x7f0000000600)="814c934f088ebc4fb7980c6e1da9b40137795ad8291c5dc9ce5bb36887c736fa940f3e51c0b5648724bcd8ad52cb8b7cb020bf32210b7b4309a5dffc31aece8c0c99c20ac9cea464ac2f450946c3fb1924eb3b688af6fae1c3598e1e0a7bc416cea97168b23789c10cb2839086c3580c781ab8ba422015c943f554822d6d5a580994577aa6bb53303a94c82e35801ac658a7fcf00ebe7838503ab9d07de48b30cf1092d1e2cbd1d1982fcaf784b1b0e7347739fb3eb3945b73fb5af147ec4633093aaf2327db4645466c5363bea85f05f44385cefaf7c933a8eea77caf", 0xdd}, {&(0x7f0000000700)="721d67196eecab28f0fab997e3ae1eff2821e0bbb972b8e550b63646d1924b5b55e933a1a450815f69414aefa107008b62de56d8c6b83889948d1112b92d571dd122601e4d6acada343b91066d9f285c", 0x50}, {&(0x7f0000000780)="fa6de3ac06734a9ba4f95b30564a104522a25f616872f0d071b459b0aeb5486038495bda402e409571a8ea45596c70e53dd85cb7af7056f5963fed1f3b8f7ae45324790555c758e25544db59add85943e31e22ca854917a201b1203d7899b1767fab42e00adfacaa14246b430ac2479524e2bc3dfadb39c17b0f227cd21d91c614f63ac7e59d6f6686c069a2b51577fc1af382703b9424e29a3b5b0b1daa6c8d393d09e09eb06b5cff53cb75f803d5d4959a055561323fb78a3fd990a5f46244081971acdd4636a587d93f34554cc5465d2f16b96434bf55a3e0ad529ef05e6d801d18d77e2d7f5e384b47c6adf0c075a52c5f", 0xf3}], 0x6, &(0x7f0000000900)=[@mark={{0x14, 0x1, 0x24, 0x81}}], 0x18}, 0x880) 46.07236326s ago: executing program 1 (id=2764): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x10000}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x47, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x80000}}}, 0x100, 0x0, 0x0, 0x1, 0x54, 0x0, 0x1}, 0x9c) 45.720643054s ago: executing program 2 (id=2765): r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000440)={'ipvs\x00'}, &(0x7f0000000480)=0x1e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 45.670184108s ago: executing program 4 (id=2766): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaad4730666f612234caaa9aa08004510001c00660000070290780a010102ac14149612ff907800000000"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x81b21000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000cea96aa0e138e7512362011f9cd36c2a00000000008800000645b84dbd49e67805dac416610adb946580ad059ee8e17bc82dac3407f3ca0649e6e9bb4abc749a0da62153668c3eb98a9d7ed197563ef96bc8ae9a41fa490f0de7cd2de5ed8d5d04087651afac969d2c03e4a74e34444c000e73d1524566c493c355e8e5b079bd6aedc6121de775013bfe8c281a67387c68da0bf32d334b7f4fd73599d5"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x3, 0x0, 0x5}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000", @ANYRES32=r6, @ANYBLOB="28000e00800000000802110000010802110000010802110000000000000000000000000064000000080026006c09000008000c006400000008000d"], 0x5c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r7 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9d1ba1f848110000005e140602000000000e000a00100000000290edbf0000121f", 0x67}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x2c, r10, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8825}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24000815) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1ffffffffffffff4, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x2, 0x9, 0x7, 0x20, 0xfffffffffffffff0}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000000)='GPL\x00', 0xfffffffc}, 0xffffffffffffff6f) 45.668871221s ago: executing program 1 (id=2767): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000e50100000000000000040000000000e036fc87adb3ddd6259afbc4b7eb38b12d6c2e9bbed772c9768f22575fc47f6b5b6d93d1e845", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104d000000000063012d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x30}}], 0x1, 0x4000084) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b7030000df04000056000000060000003c32000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x7, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x3, 0x2}, {0x8, 0x2}, {0x10, 0x3}, {0xd, 0x1}, {0xe, 0x2}, {0x4}, {0xe, 0x3}, {0x3}, {0x10, 0x3}]}, @var={0x5, 0x0, 0x0, 0xe, 0x3, 0x1}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x22, 0x0, 0x1a, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x3fe3}}]}, {0x0, [0x2e, 0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f00000006c0)=""/182, 0xcf, 0xb6, 0x0, 0x40}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1c, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1ff}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x3f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x3, 0x2, 0xb, 0x9, 0x30c}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfdc7, 0x0, 0x0, 0x0, 0x9}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @ldst={0x2, 0x2, 0x6, 0x2, 0x8, 0x100, 0x8}]}, &(0x7f0000000500)='GPL\x00', 0x2, 0x69, &(0x7f0000000540)=""/105, 0x41000, 0x11, '\x00', r4, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x5, 0x4, 0x6facce52, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0x1}, 0x94) 0s ago: executing program 32 (id=2762): socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000017c0)=""/8203, 0x1016000, 0x800}, 0x20) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x1, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xacd}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x2, r5, 0x0, 0x0}, 0x10) (async) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r6) (async) readv(r6, &(0x7f0000000440)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x14) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r13, 0x0, 0xf3a, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000380)={0x9, 0x2, 0x2, 0x8, 0x0, 0x0, 0x7f, 0x6, 0x5, 0x9f, 0x0, 0x0, 0x6, 0xff}, 0xe) (async) write$cgroup_pid(r13, &(0x7f0000000000), 0xffffff98) (async) splice(r8, 0x0, r13, 0x0, 0x80, 0x4) (async) write(r10, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) kernel console output (not intermixed with test programs): RWARD/POSTROUTING chains [ 207.416431][ T6278] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.416502][ T6278] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.416558][ T6278] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.416695][ T6278] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.453174][ T9481] 0·: renamed from hsr0 (while UP) [ 207.475992][ T9481] 0·: entered allmulticast mode [ 207.481235][ T9481] hsr_slave_0: entered allmulticast mode [ 207.489188][ T9481] hsr_slave_1: entered allmulticast mode [ 207.505963][ T9481] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 207.613306][ T9481] netlink: 'syz.0.946': attribute type 2 has an invalid length. [ 207.617948][ T9481] trusted_key: syz.0.946 sent an empty control message without MSG_MORE. [ 207.897564][ T9498] IPVS: set_ctl: invalid protocol: 2 172.30.0.1:20000 [ 207.930503][ T9496] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 207.991740][ T9498] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 208.172841][ T9508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.228428][ T9516] netlink: 'syz.0.958': attribute type 5 has an invalid length. [ 208.242587][ T9516] netlink: 'syz.0.958': attribute type 9 has an invalid length. [ 210.744209][ T9560] __nla_validate_parse: 5 callbacks suppressed [ 210.744264][ T9560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.971'. [ 210.777310][ T9561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.969'. [ 210.950246][ T9570] netlink: 'syz.3.974': attribute type 26 has an invalid length. [ 210.950290][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 210.960370][ T9570] netlink: 'syz.3.974': attribute type 26 has an invalid length. [ 210.960465][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 211.057639][ T9577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.974'. [ 211.176261][ T9589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.974'. [ 211.308614][ T9592] Bluetooth: MGMT ver 1.23 [ 211.748412][ T9611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.979'. [ 211.847563][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 211.983281][ T9619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.983'. [ 212.011927][ T9620] netlink: 20 bytes leftover after parsing attributes in process `syz.3.983'. [ 212.799108][ T9674] x_tables: duplicate entry at hook 4 [ 213.256003][ T9692] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 213.274438][ T9692] bond3 (unregistering): Released all slaves [ 213.517702][ T9701] IPVS: length: 119537724 != 8 [ 213.637571][ T9712] unsupported nlmsg_type 40 [ 213.862508][ T9728] IPVS: length: 4096 != 24 [ 213.989165][ T9735] netlink: 'syz.0.1012': attribute type 4 has an invalid length. [ 214.281150][ T9746] 8021q: VLANs not supported on gre0 [ 216.541669][ T9706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.725754][ T9764] __nla_validate_parse: 3 callbacks suppressed [ 216.734930][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 216.843772][ T9773] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1023'. [ 216.937570][ T9764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.943291][ T9772] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1021'. [ 216.943374][ T9772] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1021'. [ 216.975001][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.237416][ T9787] vlan0: entered promiscuous mode [ 217.243006][ T9787] vlan0: entered allmulticast mode [ 217.268011][ T9787] veth0_vlan: entered allmulticast mode [ 217.417872][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 217.616035][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 217.795259][ T9802] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1028'. [ 217.988504][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 218.033151][ T9833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1035'. [ 218.048358][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.050021][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.232976][ T9839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.262103][ T9837] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1036'. [ 218.555234][ T9853] IPVS: length: 77 != 24 [ 219.359204][ T9892] syzkaller0: entered promiscuous mode [ 219.359255][ T9892] syzkaller0: entered allmulticast mode [ 219.461829][ T9899] netlink: 'syz.2.1052': attribute type 11 has an invalid length. [ 219.785998][ T6631] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.786088][ T6631] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.786193][ T6631] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.786322][ T6631] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.012143][ T9918] xt_hashlimit: max too large, truncated to 1048576 [ 220.021154][ T9918] No such timeout policy "syz1" [ 220.032240][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 220.054998][ T9918] xt_hashlimit: max too large, truncated to 1048576 [ 220.063422][ T9918] No such timeout policy "syz1" [ 220.089882][ T9913] tap0: tun_chr_ioctl cmd 2148553947 [ 220.210866][ T9925] ip6t_hbh: too many supported opts specified [ 220.219099][ T9923] syzkaller1: entered promiscuous mode [ 220.219143][ T9923] syzkaller1: entered allmulticast mode [ 220.238098][ T9925] netlink: 'syz.3.1061': attribute type 29 has an invalid length. [ 220.247189][ T9925] netlink: 'syz.3.1061': attribute type 29 has an invalid length. [ 220.457117][ T9930] netlink: 'syz.2.1062': attribute type 1 has an invalid length. [ 220.488883][ T9932] bond0: entered promiscuous mode [ 220.488941][ T9932] bond_slave_0: entered promiscuous mode [ 220.493860][ T9932] bond_slave_1: entered promiscuous mode [ 220.512090][ T9932] batadv0: entered promiscuous mode [ 220.526339][ T9932] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 220.551591][ T9932] bond0: left promiscuous mode [ 220.551636][ T9932] bond_slave_0: left promiscuous mode [ 220.552190][ T9932] bond_slave_1: left promiscuous mode [ 220.601054][ T9932] batadv0: left promiscuous mode [ 220.684403][ T9943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.109460][ T9963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.275390][ T9975] sctp: [Deprecated]: syz.2.1076 (pid 9975) Use of int in maxseg socket option. [ 221.275390][ T9975] Use struct sctp_assoc_value instead [ 221.321998][ T9979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.409178][ T9986] veth0: entered promiscuous mode [ 221.410656][ T9986] veth0: left promiscuous mode [ 221.510000][ T9988] netlink: 'syz.3.1077': attribute type 11 has an invalid length. [ 221.831258][T10001] __nla_validate_parse: 15 callbacks suppressed [ 221.831317][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1081'. [ 221.979323][T10001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1081'. [ 222.086994][T10006] xt_l2tp: invalid flags combination: 8 [ 222.251298][T10026] bond3: option fail_over_mac: invalid value (16) [ 222.260133][T10026] bond3 (unregistering): Released all slaves [ 224.216630][ T9968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.245957][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 224.246006][T10024] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1087'. [ 224.246024][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 224.442389][T10040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1089'. [ 224.551954][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1091'. [ 224.601919][T10045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.700652][ T1340] bond0: (slave bond_slave_0): interface is now down [ 224.700707][ T1340] bond0: (slave bond_slave_1): interface is now down [ 224.749134][ T1340] bond0: now running without any active interface! [ 224.840395][ T1340] bond2: (slave bond0): link status definitely down, disabling slave [ 224.869897][ T1340] bond2: now running without any active interface! [ 224.921076][T10064] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1096'. [ 225.405068][T10090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1100'. [ 225.474832][T10093] tipc: Enabling of bearer rejected, failed to enable media [ 225.590207][T10100] Cannot find add_set index 0 as target [ 225.693475][T10102] vlan2: entered allmulticast mode [ 225.693539][T10102] bond0: entered allmulticast mode [ 225.698767][T10102] bond_slave_0: entered allmulticast mode [ 225.698792][T10102] bond_slave_1: entered allmulticast mode [ 225.777928][T10107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1106'. [ 226.070732][ T6278] nci: nci_rsp_packet: unknown rsp opcode 0x23 [ 226.234883][T10136] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 226.273966][T10136] veth5: entered allmulticast mode [ 226.282941][T10136] bond3: (slave veth5): Enslaving as an active interface with a down link [ 226.291928][T10136] veth0_to_bond: left allmulticast mode [ 226.302399][T10136] bond3: (slave veth0_to_bond): making interface the new active one [ 226.311765][T10136] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 226.329443][T10136] macvlan4: entered promiscuous mode [ 226.329488][T10136] macvlan4: entered allmulticast mode [ 226.333113][T10136] bond3: entered promiscuous mode [ 226.333164][T10136] veth0_to_bond: entered promiscuous mode [ 226.345796][T10136] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 226.350103][T10136] bond3: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 226.350469][T10136] bond3: left promiscuous mode [ 226.350526][T10136] veth0_to_bond: left promiscuous mode [ 226.675289][T10112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.978617][T10166] xt_connbytes: Forcing CT accounting to be enabled [ 226.978694][T10166] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.052671][T10166] __nla_validate_parse: 2 callbacks suppressed [ 227.052782][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 227.515346][T10195] netlink: 'syz.1.1128': attribute type 10 has an invalid length. [ 227.527083][T10195] syz_tun: entered promiscuous mode [ 227.559676][T10195] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 227.561263][T10197] bridge0: port 3(syz_tun) entered blocking state [ 227.563767][T10197] bridge0: port 3(syz_tun) entered disabled state [ 227.571655][T10197] syz_tun: entered allmulticast mode [ 227.598451][T10197] syz_tun: entered promiscuous mode [ 227.620623][T10197] bridge0: port 3(syz_tun) entered blocking state [ 227.621164][T10197] bridge0: port 3(syz_tun) entered forwarding state [ 227.666197][T10199] xt_hashlimit: size too large, truncated to 1048576 [ 227.710189][T10203] netlink: 'syz.1.1131': attribute type 2 has an invalid length. [ 227.721610][T10203] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 227.771798][T10203] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.802076][T10203] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1131'. [ 227.830123][T10203] bond4: (slave geneve2): making interface the new active one [ 227.841684][T10203] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 227.999492][T10211] tunl0: entered promiscuous mode [ 228.010155][T10211] netlink: 'syz.1.1133': attribute type 4 has an invalid length. [ 228.010201][T10211] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1133'. [ 228.022931][T10211] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 228.050020][T10211] erspan1: entered allmulticast mode [ 228.211071][T10216] ip_tables: iptables: counters copy to user failed while replacing table [ 230.129248][T10175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.348970][T10226] x_tables: ip_tables: osf match: only valid for protocol 6 [ 230.533982][T10234] ip6t_rt: unknown flags 36 [ 230.559038][T10249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.718977][T10253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1146'. [ 231.434827][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 231.435037][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 231.850675][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 233.772635][T10256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.942286][T10297] SET target dimension over the limit! [ 234.191006][T10310] nbd: must specify an index to disconnect [ 234.229238][T10310] syzkaller0: entered promiscuous mode [ 234.235520][T10310] syzkaller0: entered allmulticast mode [ 234.442568][T10325] smc: net device team0 applied user defined pnetid SYZ2 [ 235.266436][T10359] netlink: 'syz.2.1170': attribute type 2 has an invalid length. [ 235.290974][T10359] batadv_slave_0: Caught tx_queue_len zero misconfig [ 235.450292][T10371] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1171'. [ 235.474674][T10373] netlink: 'syz.1.1172': attribute type 1 has an invalid length. [ 235.474737][T10373] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1172'. [ 235.737214][T10388] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 235.881236][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 235.881281][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 235.982834][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 235.984914][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 236.008452][ T6631] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.008520][ T6631] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.008587][ T6631] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.008678][ T6631] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.179171][T10402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.314043][T10407] xt_HMARK: proto mask must be zero with L3 mode [ 236.330711][T10407] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1182'. [ 236.392247][T10411] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1182'. [ 236.517859][T10422] openvswitch: netlink: Tunnel attr 30 out of range max 16 [ 236.526705][T10422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.583899][T10416] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1187'. [ 236.597149][T10424] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 237.161332][T10446] netlink: 'syz.3.1194': attribute type 1 has an invalid length. [ 237.197950][T10446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1194'. [ 237.245042][T10450] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 237.872936][T10478] netlink: 'syz.1.1205': attribute type 17 has an invalid length. [ 237.912772][T10478] erspan0: entered promiscuous mode [ 237.931060][T10478] gretap0: entered promiscuous mode [ 237.968145][T10484] Bluetooth: hci0: unsupported parameter 5135 [ 237.975584][T10484] Bluetooth: hci0: unsupported parameter 8192 [ 237.975629][T10484] Bluetooth: hci0: unsupported parameter 5135 [ 237.975646][T10484] Bluetooth: hci0: unsupported parameter 8192 [ 237.997245][T10485] netlink: 'syz.1.1205': attribute type 17 has an invalid length. [ 238.369062][T10505] ip6t_rt: too many addresses specified [ 238.569461][T10503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.582397][T10503] bond_slave_0: left allmulticast mode [ 238.613720][T10503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.626957][T10503] bond_slave_1: left allmulticast mode [ 238.648347][T10503] bond0 (unregistering): Released all slaves [ 238.833641][T10520] syzkaller0: entered promiscuous mode [ 238.840114][T10520] syzkaller0: entered allmulticast mode [ 239.088257][T10528] syzkaller0: entered promiscuous mode [ 239.088308][T10528] syzkaller0: entered allmulticast mode [ 239.121361][T10531] C: renamed from lo [ 239.141840][T10531] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 241.619085][T10556] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 241.636415][T10556] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 241.755416][T10566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.277667][T10598] __nla_validate_parse: 9 callbacks suppressed [ 242.277722][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'. [ 242.295115][T10598] netlink: 'syz.2.1236': attribute type 12 has an invalid length. [ 242.295137][T10598] netlink: 'syz.2.1236': attribute type 29 has an invalid length. [ 242.295150][T10598] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1236'. [ 242.295168][T10598] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1236'. [ 242.399356][T10602] vlan0: entered promiscuous mode [ 242.399404][T10602] bridge0: entered promiscuous mode [ 242.399870][T10602] vlan0: entered allmulticast mode [ 242.414829][T10602] bridge0: entered allmulticast mode [ 242.813451][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'. [ 242.813509][T10614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.145072][T10631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1245'. [ 243.218560][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1248'. [ 243.219457][T10642] 8021q: VLANs not supported on vxcan0 [ 243.342189][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1249'. [ 243.353164][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1249'. [ 243.353747][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1249'. [ 243.372199][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1249'. [ 243.383336][T10652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.597850][T10660] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 243.678777][T10665] openvswitch: netlink: Flow key attr not present in new flow. [ 244.071325][T10687] bond5: Removing last arp target with arp_interval on [ 244.124155][T10685] syzkaller0: entered promiscuous mode [ 244.124212][T10685] syzkaller0: entered allmulticast mode [ 244.199961][T10685] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 244.767116][T10726] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 244.767157][T10726] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 244.923913][T10736] tipc: Enabled bearer , priority 10 [ 245.011211][T10741] syzkaller1: entered promiscuous mode [ 245.017178][T10741] syzkaller1: entered allmulticast mode [ 245.914445][T10787] bridge0: port 4(ipvlan2) entered blocking state [ 245.914915][T10787] bridge0: port 4(ipvlan2) entered disabled state [ 245.915381][T10787] ipvlan2: entered allmulticast mode [ 245.921103][T10787] bridge0: entered allmulticast mode [ 245.961244][T10787] ipvlan2: left allmulticast mode [ 245.961298][T10787] bridge0: left allmulticast mode [ 247.446033][T10833] __nla_validate_parse: 78 callbacks suppressed [ 247.447581][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 247.528734][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 247.599904][ T6643] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.605001][ T6278] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.605211][ T6278] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.605314][ T6278] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.762672][T10859] veth0_to_bond: entered allmulticast mode [ 247.945983][T10867] syzkaller0: entered promiscuous mode [ 247.946023][T10867] syzkaller0: entered allmulticast mode [ 248.075150][T10874] netlink: 'syz.1.1310': attribute type 1 has an invalid length. [ 248.183855][T10878] netlink: 'syz.2.1311': attribute type 11 has an invalid length. [ 248.325057][T10874] bond5: entered promiscuous mode [ 248.331464][T10874] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.349985][T10875] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 248.362978][T10875] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 248.373617][T10875] bond5: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 248.915884][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1317'. [ 249.144236][T10915] Bluetooth: hci0: unsupported parameter 5161 [ 249.151833][T10915] Bluetooth: hci0: unsupported parameter 8192 [ 249.158273][T10915] Bluetooth: hci0: unsupported parameter 5161 [ 249.164538][T10915] Bluetooth: hci0: unsupported parameter 8192 [ 249.305959][T10921] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1323'. [ 249.318058][T10922] netlink: 'syz.0.1323': attribute type 83 has an invalid length. [ 249.572037][T10936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1326'. [ 249.966522][T10932] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 249.986597][T10932] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 250.055681][T10946] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 250.172919][T10954] netlink: 'syz.4.1333': attribute type 15 has an invalid length. [ 250.172969][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 250.291767][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 250.299313][T10954] netlink: 'syz.4.1333': attribute type 15 has an invalid length. [ 250.299374][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 250.366753][T10966] netlink: 'syz.4.1333': attribute type 7 has an invalid length. [ 250.366811][T10966] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1333'. [ 250.452576][T10946] veth3: entered allmulticast mode [ 250.458847][ T6637] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 250.540863][T10952] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 250.550374][ T13] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 250.554125][ T6279] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 250.554268][ T6279] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 250.627416][T10961] macvlan0: entered promiscuous mode [ 250.627466][T10961] macvlan0: entered allmulticast mode [ 250.658249][T10961] bond6: entered promiscuous mode [ 250.668200][T10961] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 250.676544][T10961] bond6: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 250.692882][T10961] bond6: left promiscuous mode [ 250.932036][T10983] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1337'. [ 251.012237][T10983] netlink: 'syz.4.1337': attribute type 1 has an invalid length. [ 251.412947][T11007] x_tables: duplicate underflow at hook 3 [ 251.557402][T11012] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.622534][T11022] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 251.778588][T11030] bridge0: port 3(vlan2) entered blocking state [ 251.779029][T11030] bridge0: port 3(vlan2) entered disabled state [ 251.779497][T11030] vlan2: entered allmulticast mode [ 251.779540][T11030] geneve0: entered allmulticast mode [ 251.803880][T11030] vlan2: entered promiscuous mode [ 251.803924][T11030] geneve0: entered promiscuous mode [ 252.018489][T11043] veth1_to_team: Caught tx_queue_len zero misconfig [ 252.130345][T11045] bond7 (unregistering): Released all slaves [ 252.265683][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.522795][T11064] __nla_validate_parse: 38 callbacks suppressed [ 252.522852][T11064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1359'. [ 252.522895][T11064] bond0: ARP target 8.4.0.0 is already present [ 252.522919][T11064] bond0: option arp_ip_target: invalid value (1032) [ 252.767078][ T13] tipc: Subscription rejected, illegal request [ 252.877807][T11057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.877880][T11057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.970375][T11083] sit2: entered promiscuous mode [ 252.970417][T11083] sit2: entered allmulticast mode [ 253.140139][T11057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.140200][T11057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.305630][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.345005][T11099] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 253.443140][T11057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.443233][T11057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.735037][T11057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.756864][T11057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.863169][T11114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1370'. [ 253.873138][T11114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1370'. [ 253.886307][T11108] tipc: New replicast peer: 0.0.0.0 [ 253.886569][T11108] tipc: Enabled bearer , priority 10 [ 253.984653][T11125] openvswitch: netlink: Unknown key attributes 1 [ 254.067959][T11125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1374'. [ 254.077259][T11125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1374'. [ 254.346292][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.526742][T11134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.736872][T11147] netlink: 'syz.3.1377': attribute type 2 has an invalid length. [ 254.766692][ T6642] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.766749][ T6642] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.766835][ T6642] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.766927][ T6642] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.767038][ T6642] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.767114][ T6642] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.867950][T11147] : entered promiscuous mode [ 254.998426][ T6642] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.998487][ T6642] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.386307][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.429898][T11178] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 255.461579][T11178] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.473582][T11178] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 255.499374][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.499736][ T6635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.702455][T11187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1389'. [ 255.702581][T11187] nbd: couldn't find a device at index 458752 [ 255.708030][T11187] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 255.855273][T11192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1391'. [ 255.869602][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.103132][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 256.272636][T11205] x_tables: duplicate underflow at hook 4 [ 256.426587][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.609854][T11218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1400'. [ 256.692479][T11221] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1401'. [ 256.804265][ T6640] IPVS: starting estimator thread 0... [ 256.887393][T11225] IPVS: using max 27 ests per chain, 64800 per kthread [ 257.031277][T11231] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 257.465741][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.586463][ T6641] tipc: Subscription rejected, illegal request [ 257.618165][T11253] macvtap1: entered promiscuous mode [ 257.625403][T11253] macvtap1: entered allmulticast mode [ 257.731218][T11269] __nla_validate_parse: 5 callbacks suppressed [ 257.741061][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 257.797819][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'. [ 257.823514][T11270] bridge0: port 3(ipvlan0) entered blocking state [ 257.833403][T11270] bridge0: port 3(ipvlan0) entered disabled state [ 257.833814][T11270] ipvlan0: entered allmulticast mode [ 257.900362][T11270] ipvlan0: left allmulticast mode [ 258.057945][T11288] Cannot find set identified by id 4 to match [ 258.159575][T11274] bridge0: port 3(ipvlan0) entered blocking state [ 258.159764][T11274] bridge0: port 3(ipvlan0) entered disabled state [ 258.167563][T11274] ipvlan0: entered allmulticast mode [ 258.187329][T11274] ipvlan0: left allmulticast mode [ 258.438802][T11300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1416'. [ 258.505795][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.717722][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1421'. [ 258.741079][T11319] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1421'. [ 258.868605][T11323] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 258.903643][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1422'. [ 258.928427][T11323] bond7 (unregistering): Released all slaves [ 259.008940][T11329] vlan4: entered allmulticast mode [ 259.008989][T11329] bond0: entered allmulticast mode [ 259.009016][T11329] bond_slave_0: entered allmulticast mode [ 259.009039][T11329] bond_slave_1: entered allmulticast mode [ 259.147235][T11339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1427'. [ 259.274112][T11343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1429'. [ 259.334753][T11343] bond7: entered promiscuous mode [ 259.335386][T11343] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.363720][T11346] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.369701][T11346] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 259.372153][T11346] bond7: (slave sit1): Error -95 calling set_mac_address [ 259.518948][T11357] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1432'. [ 259.545481][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.920296][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 260.007215][T11376] netlink: 'syz.2.1437': attribute type 23 has an invalid length. [ 260.318637][T11383] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 260.361050][T11383] bond7 (unregistering): Released all slaves [ 260.586050][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.813911][T11413] netlink: 'syz.2.1443': attribute type 21 has an invalid length. [ 260.813961][T11413] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.952498][T11421] bond7: option all_slaves_active: invalid value (144) [ 260.964338][T11421] bond7 (unregistering): Released all slaves [ 261.290958][T11436] xt_LOG: prefix is not null-terminated [ 261.399070][T11437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.618435][T11449] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 261.635574][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.752319][ T4934] block nbd0: Receive control failed (result -32) [ 261.752765][ T5618] block nbd0: Receive control failed (result -32) [ 262.148160][T11489] netlink: 'syz.2.1458': attribute type 2 has an invalid length. [ 262.148565][T11489] netlink: 'syz.2.1458': attribute type 8 has an invalid length. [ 262.515972][T11479] syzkaller0: entered promiscuous mode [ 262.516022][T11479] syzkaller0: entered allmulticast mode [ 262.667516][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.332108][ T12] IPVS: starting estimator thread 0... [ 263.437632][T11533] IPVS: using max 29 ests per chain, 69600 per kthread [ 263.715628][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.306008][T11545] ip6t_REJECT: ECHOREPLY is not supported [ 264.748917][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.957574][T11505] __nla_validate_parse: 4 callbacks suppressed [ 264.957635][T11505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1465'. [ 265.374746][T11563] netlink: 'syz.4.1484': attribute type 4 has an invalid length. [ 265.461664][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 265.574755][T11565] netlink: 'syz.2.1485': attribute type 2 has an invalid length. [ 265.574815][T11565] netlink: 'syz.2.1485': attribute type 11 has an invalid length. [ 265.574831][T11565] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1485'. [ 265.603836][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 265.603888][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 265.664864][T11576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.785539][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.835342][T11588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1490'. [ 265.859880][T11590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.867746][T11590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.881864][T11574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1489'. [ 266.164990][T11599] netlink: 'syz.0.1494': attribute type 6 has an invalid length. [ 266.373878][ T6635] tipc: Subscription rejected, illegal request [ 266.504429][ T6279] IPVS: starting estimator thread 0... [ 266.515261][T11620] set match dimension is over the limit! [ 266.595534][T11622] IPVS: using max 30 ests per chain, 72000 per kthread [ 266.825856][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 266.908286][T11645] netlink: 'syz.2.1506': attribute type 11 has an invalid length. [ 266.918267][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 266.931601][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 266.941392][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 267.082573][T11649] xt_TPROXY: Can be used only with -p tcp or -p udp [ 267.865826][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.042062][T11690] syzkaller0: entered promiscuous mode [ 268.042108][T11690] syzkaller0: entered allmulticast mode [ 268.062093][T11691] netlink: 'syz.0.1521': attribute type 5 has an invalid length. [ 268.243163][T11700] veth1_macvtap: left promiscuous mode [ 268.407531][T11705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.407565][T11705] IPv6: NLM_F_CREATE should be set when creating new route [ 268.779691][T11734] netlink: 'syz.0.1532': attribute type 12 has an invalid length. [ 268.906695][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.145028][T11746] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 269.267673][T11749] syzkaller0: entered promiscuous mode [ 269.267713][T11749] syzkaller0: entered allmulticast mode [ 269.651641][T11760] netlink: 'syz.4.1544': attribute type 1 has an invalid length. [ 269.651677][T11760] netlink: 'syz.4.1544': attribute type 2 has an invalid length. [ 269.652551][T11760] netlink: 'syz.4.1544': attribute type 1 has an invalid length. [ 269.945788][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.275221][T11786] __nla_validate_parse: 5 callbacks suppressed [ 270.282109][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 270.414407][T11786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1552'. [ 270.474002][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 270.506401][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 270.584621][T11794] validate_nla: 1 callbacks suppressed [ 270.584688][T11794] netlink: 'syz.0.1554': attribute type 3 has an invalid length. [ 270.584706][T11794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1554'. [ 270.584724][T11794] netlink: 'syz.0.1554': attribute type 3 has an invalid length. [ 270.584735][T11794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1554'. [ 270.621583][T11796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1556'. [ 270.640980][T11801] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1555'. [ 270.711963][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1554'. [ 270.752375][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 270.928617][T11810] syzkaller0: entered promiscuous mode [ 270.928663][T11810] syzkaller0: entered allmulticast mode [ 270.996336][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.025539][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.249137][T11865] netlink: 'syz.1.1572': attribute type 1 has an invalid length. [ 272.269903][T11863] tipc: Enabled bearer , priority 0 [ 272.366672][T11869] syzkaller0: entered promiscuous mode [ 272.372475][T11869] syzkaller0: entered allmulticast mode [ 272.605172][T11858] tipc: Disabling bearer [ 273.024899][T11896] netlink: 'syz.2.1581': attribute type 10 has an invalid length. [ 273.047249][T11896] vlan0: left promiscuous mode [ 273.065659][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.222336][T11907] syzkaller0: entered promiscuous mode [ 273.228676][T11907] syzkaller0: entered allmulticast mode [ 273.236761][T11908] netlink: 'syz.2.1581': attribute type 10 has an invalid length. [ 274.105741][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.146376][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.626835][T11931] xt_TPROXY: Can be used only with -p tcp or -p udp [ 276.092556][T11898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.185547][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.578537][T11956] __nla_validate_parse: 132 callbacks suppressed [ 276.579210][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 276.886148][ T9] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 277.125912][ T9] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 277.235819][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.279011][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.033883][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 279.306276][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.346446][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.826505][ T6641] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 280.848131][ T6641] bond0: now running without any active interface! [ 281.100082][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 281.108932][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 281.386406][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.774897][T12022] netlink: 'syz.0.1610': attribute type 2 has an invalid length. [ 281.940573][T12027] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.1612'. [ 281.953949][T12027] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:20004 [ 281.957392][T12028] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:20004 [ 281.999842][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'. [ 282.000188][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'. [ 282.425737][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 283.465666][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 283.869487][T11994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.174346][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1618'. [ 284.213388][T12046] tipc: Failed to remove unknown binding: 66,1,1/0:3111265310/3111265312 [ 284.213447][T12046] tipc: Failed to remove unknown binding: 66,1,1/0:3111265310/3111265312 [ 284.491300][T12053] syzkaller0: entered promiscuous mode [ 284.491348][T12053] syzkaller0: entered allmulticast mode [ 284.495898][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1616'. [ 284.515697][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.798986][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'. [ 284.857663][T12086] xt_ecn: cannot match TCP bits for non-tcp packets [ 285.555732][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.589600][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.916206][T12084] veth0: Caught tx_queue_len zero misconfig [ 287.170746][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'. [ 287.180751][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'. [ 287.213435][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'. [ 287.221799][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'. [ 287.591452][T12144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1635'. [ 287.627318][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.022253][T12160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 288.171677][T12165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1642'. [ 288.181108][T12163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1642'. [ 288.194416][T12165] tipc: Enabled bearer , priority 11 [ 288.206871][T12163] tipc: Enabling of bearer rejected, already enabled [ 288.232890][T12164] netlink: 'syz.2.1643': attribute type 14 has an invalid length. [ 288.232934][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'. [ 288.240049][T12164] netlink: 'syz.2.1643': attribute type 14 has an invalid length. [ 288.240109][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'. [ 288.275003][T12164] lo: entered promiscuous mode [ 288.289140][T12164] netlink: 'syz.2.1643': attribute type 2 has an invalid length. [ 288.289179][T12164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.599712][T12179] SET target dimension over the limit! [ 288.665616][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.697921][T12182] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1649'. [ 288.801742][T12189] netlink: 'syz.2.1651': attribute type 1 has an invalid length. [ 288.910692][T12190] ip6_vti0: entered allmulticast mode [ 288.910850][T12190] ip6_vti0: entered promiscuous mode [ 289.053024][T12188] ip6_vti0: left promiscuous mode [ 289.061089][T12188] ip6_vti0: left allmulticast mode [ 289.187486][T12199] netlink: 'syz.2.1654': attribute type 15 has an invalid length. [ 289.255795][ T12] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 289.256306][ T12] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 289.257470][ T6641] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 289.257654][ T6641] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 289.614572][T12220] netlink: 'syz.0.1662': attribute type 2 has an invalid length. [ 289.705697][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.533668][T12264] netlink: 'syz.4.1673': attribute type 1 has an invalid length. [ 290.745655][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.951662][T12283] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 291.335320][T12300] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 291.345790][T12300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.408803][T12293] macsec2: entered promiscuous mode [ 291.434821][T12305] netlink: 'syz.3.1686': attribute type 10 has an invalid length. [ 291.524868][T12312] netlink: 'syz.4.1684': attribute type 12 has an invalid length. [ 291.537117][T12302] ipvlan0: Caught tx_queue_len zero misconfig [ 291.573210][T12305] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 291.633961][T12307] bond8: invalid ARP target 0.0.0.0 specified for addition [ 291.641485][T12307] bond8: option arp_ip_target: invalid value (0) [ 291.650360][T12307] bond8 (unregistering): Released all slaves [ 291.785789][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 291.895723][T12312] netlink: 'syz.4.1684': attribute type 12 has an invalid length. [ 291.961797][T12325] team0: Port device dummy0 added [ 292.379302][T12336] __nla_validate_parse: 10 callbacks suppressed [ 292.379352][T12336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1692'. [ 292.602800][T12347] team0: Device vxcan1 is of different type [ 292.835537][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 293.230029][T12371] IPv6: NLM_F_REPLACE set, but no existing node found! [ 293.240728][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 293.373837][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 293.410598][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 293.419883][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 293.441689][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 293.450859][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 293.541057][T12388] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1707'. [ 293.668396][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1710'. [ 293.716497][T12400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.725353][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 293.866356][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 294.089762][T12416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.190853][T12418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.903069][T12460] syzkaller1: entered promiscuous mode [ 294.903110][T12460] syzkaller1: entered allmulticast mode [ 294.916171][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 295.395902][T12455] validate_nla: 2 callbacks suppressed [ 295.403408][T12455] netlink: 'syz.4.1722': attribute type 1 has an invalid length. [ 295.598811][T12493] veth1_to_bond: entered allmulticast mode [ 295.602183][T12494] veth1_to_bond: entered promiscuous mode [ 295.619140][T12493] veth1_to_bond: left promiscuous mode [ 295.619634][T12493] veth1_to_bond: left allmulticast mode [ 295.954081][T12504] netlink: 'syz.0.1732': attribute type 3 has an invalid length. [ 295.956270][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.986909][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.668149][T12450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.689657][T12519] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1736'. [ 297.968014][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'. [ 298.025648][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.087582][T12531] syzkaller0: entered promiscuous mode [ 298.087623][T12531] syzkaller0: entered allmulticast mode [ 298.361457][T12549] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 298.405255][T12543] netlink: 'syz.1.1744': attribute type 22 has an invalid length. [ 298.405306][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 298.569012][T12543] netlink: 'syz.1.1744': attribute type 22 has an invalid length. [ 298.569062][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 298.940078][ T31] audit: type=1804 audit(1788078238.224:4): pid=12576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1755" name="/newroot/355/cgroup.controllers" dev="tmpfs" ino=1834 res=1 errno=0 [ 298.971011][ T31] audit: type=1800 audit(1788078238.254:5): pid=12576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1755" name="cgroup.controllers" dev="tmpfs" ino=1834 res=0 errno=0 [ 299.075662][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 299.399066][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'. [ 299.422171][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'. [ 299.940963][T12617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1768'. [ 300.059953][T12618] netlink: 5824 bytes leftover after parsing attributes in process `syz.2.1765'. [ 300.060991][T12619] bridge_slave_0: Caught tx_queue_len zero misconfig [ 300.106437][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 300.137863][T12619] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1768'. [ 300.152944][T12627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1769'. [ 300.514275][T12643] sctp: [Deprecated]: syz.3.1772 (pid 12643) Use of int in maxseg socket option. [ 300.514275][T12643] Use struct sctp_assoc_value instead [ 300.549577][T12643] sctp: [Deprecated]: syz.3.1772 (pid 12643) Use of int in max_burst socket option deprecated. [ 300.549577][T12643] Use struct sctp_assoc_value instead [ 300.598814][T12643] vlan3: entered promiscuous mode [ 301.010050][T12666] ieee802154 phy1 wpan1: encryption failed: -22 [ 301.145723][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.274170][T12679] sctp: [Deprecated]: syz.4.1779 (pid 12679) Use of int in max_burst socket option. [ 301.274170][T12679] Use struct sctp_assoc_value instead [ 301.427171][T12687] netlink: 'syz.1.1782': attribute type 1 has an invalid length. [ 301.436397][T12687] netlink: 'syz.1.1782': attribute type 1 has an invalid length. [ 301.880058][T12706] netlink: 'syz.0.1787': attribute type 1 has an invalid length. [ 301.950762][T12706] 8021q: adding VLAN 0 to HW filter on device bond7 [ 302.092722][T12706] bond7: (slave geneve3): making interface the new active one [ 302.110064][T12706] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 302.195748][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.318555][T12717] netlink: 'syz.0.1793': attribute type 22 has an invalid length. [ 302.340709][T12720] netlink: 'syz.1.1792': attribute type 1 has an invalid length. [ 302.397769][T12717] netlink: 'syz.0.1793': attribute type 22 has an invalid length. [ 302.406341][T12720] 8021q: adding VLAN 0 to HW filter on device bond8 [ 302.838928][T12738] __nla_validate_parse: 7 callbacks suppressed [ 302.855513][T12738] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1797'. [ 302.875281][T12742] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1799'. [ 302.886004][T12742] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1799'. [ 302.898126][T12742] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1799'. [ 302.905898][T12743] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1799'. [ 302.921115][T12744] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1799'. [ 303.069929][T12750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1800'. [ 303.225706][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 303.310952][T12764] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1804'. [ 303.663737][T12750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1800'. [ 303.758788][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1807'. [ 303.914175][T12789] vlan2: entered allmulticast mode [ 304.265684][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 304.631360][T12822] netlink: 'syz.2.1815': attribute type 1 has an invalid length. [ 304.841467][T12829] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 304.956259][T12822] veth1: entered promiscuous mode [ 304.972069][T12822] bond4: (slave veth1): Enslaving as a backup interface with a down link [ 305.170606][T12848] netlink: 'syz.2.1823': attribute type 4 has an invalid length. [ 305.305666][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 305.376746][T12867] netlink: 'syz.1.1825': attribute type 10 has an invalid length. [ 305.397233][T12868] netlink: 'syz.0.1826': attribute type 46 has an invalid length. [ 305.544575][T12867] team0: Device veth0_macvtap failed to register rx_handler [ 305.647562][ T4934] block nbd1: Receive control failed (result -32) [ 306.030568][T12876] ipip1: entered promiscuous mode [ 306.347896][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 307.024201][T12909] validate_nla: 1 callbacks suppressed [ 307.024254][T12909] netlink: 'syz.3.1841': attribute type 4 has an invalid length. [ 307.395578][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 307.604942][T12943] ip6t_hbh: Not strict - not implemented [ 307.833403][T12943] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 307.863109][T12943] bond6 (unregistering): Released all slaves [ 307.964045][ T31] audit: type=1804 audit(1788078247.244:6): pid=12954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1855" name="/newroot/376/cgroup.controllers" dev="tmpfs" ino=1944 res=1 errno=0 [ 307.964130][ T31] audit: type=1800 audit(1788078247.244:7): pid=12954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1855" name="cgroup.controllers" dev="tmpfs" ino=1944 res=0 errno=0 [ 308.172214][T12966] __nla_validate_parse: 11 callbacks suppressed [ 308.179131][T12966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1861'. [ 308.340833][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'. [ 308.412881][T12976] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1865'. [ 308.425619][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 308.485280][T12981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1864'. [ 308.523299][T12979] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 308.552901][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1864'. [ 308.824315][T12996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1869'. [ 308.968355][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 309.010026][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 309.019664][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1872'. [ 309.157853][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1872'. [ 309.335979][ T6274] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.336053][ T6274] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.465676][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 309.795206][T13042] ipvlan2: entered allmulticast mode [ 309.802474][T13042] syz_tun: entered allmulticast mode [ 310.071331][T13050] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 310.130408][T13050] netlink: 'syz.4.1886': attribute type 2 has an invalid length. [ 310.515740][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.560488][T13069] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 310.774491][T13081] syzkaller0: entered promiscuous mode [ 310.774539][T13081] syzkaller0: entered allmulticast mode [ 310.832160][T13073] tipc: Enabled bearer , priority 0 [ 310.882008][T13092] sctp: [Deprecated]: syz.1.1897 (pid 13092) Use of int in max_burst socket option. [ 310.882008][T13092] Use struct sctp_assoc_value instead [ 310.906646][T13072] tipc: Resetting bearer [ 310.983946][T13072] tipc: Disabling bearer [ 311.213256][T13103] netlink: 'syz.3.1899': attribute type 11 has an invalid length. [ 311.494566][T13112] tipc: Enabling of bearer rejected, failed to enable media [ 311.545703][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 311.835040][T13126] 8021q: VLANs not supported on ip6gre0 [ 312.353946][T13159] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 312.585624][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 313.034350][T13184] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 313.133109][T13191] vlan0: entered promiscuous mode [ 313.518812][T13212] netlink: 'syz.0.1926': attribute type 2 has an invalid length. [ 313.625568][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 313.735983][T13220] __nla_validate_parse: 16 callbacks suppressed [ 313.736035][T13220] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1927'. [ 314.173774][T13233] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1931'. [ 314.175051][T13233] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 314.259428][T13234] xt_l2tp: invalid flags combination: 8 [ 314.355554][T13240] netlink: 'syz.0.1934': attribute type 1 has an invalid length. [ 314.355596][T13240] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1934'. [ 314.378255][T13240] netlink: 'syz.0.1934': attribute type 3 has an invalid length. [ 314.665582][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 314.707976][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1935'. [ 314.717577][T13256] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 314.728158][T13256] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1935'. [ 315.124075][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 315.705576][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 316.745585][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.308454][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.623662][T13252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.785562][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.918407][T13316] 0: reclassify loop, rule prio 0, protocol 03 [ 318.059870][T13328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1954'. [ 318.150116][T13336] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 318.232128][T13340] netlink: 'syz.3.1957': attribute type 33 has an invalid length. [ 318.418484][T13354] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1955'. [ 318.418819][T13352] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1955'. [ 318.562141][T13356] tap0: tun_chr_ioctl cmd 2148553947 [ 318.562506][T13348] tap0: tun_chr_ioctl cmd 2148553947 [ 318.564397][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1955'. [ 318.634300][T13364] syzkaller0: entered promiscuous mode [ 318.634351][T13364] syzkaller0: entered allmulticast mode [ 318.825760][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.081564][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 319.091237][T13379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1964'. [ 319.318365][T13387] batman_adv: batadv0: Adding interface: gretap1 [ 319.325124][T13387] batman_adv: batadv0: The MTU of interface gretap1 is too small (1412) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.325167][T13387] batman_adv: batadv0: Interface activated: gretap1 [ 319.867152][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 320.905960][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 321.226762][T13340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.232001][T13354] netlink: 'syz.2.1955': attribute type 23 has an invalid length. [ 321.293237][T13352] netlink: 'syz.2.1955': attribute type 23 has an invalid length. [ 321.576902][T13402] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 321.588582][T13402] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1969'. [ 321.619821][T13415] tunl0: entered promiscuous mode [ 321.667535][T13415] netlink: 'syz.2.1971': attribute type 4 has an invalid length. [ 321.667579][T13415] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1971'. [ 321.761660][T13421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1974'. [ 321.809244][T13421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1974'. [ 321.821437][T13421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1974'. [ 321.854357][T13421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1974'. [ 321.870018][T13421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1974'. [ 321.880938][T13421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1974'. [ 321.945461][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 321.978318][T13415] ipt_REJECT: TCP_RESET invalid for non-tcp [ 322.706683][T13461] wg0 speed is unknown, defaulting to 1000 [ 322.985611][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 323.184201][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803201b000: rx timeout, send abort [ 323.278898][T13480] erspan0: entered allmulticast mode [ 323.684347][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880339ed400: rx timeout, send abort [ 323.688485][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803201b000: abort rx timeout. Force session deactivation [ 324.021382][T13513] netlink: 'syz.2.1996': attribute type 11 has an invalid length. [ 324.029420][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.030359][T13513] netlink: 'syz.2.1996': attribute type 4 has an invalid length. [ 324.155961][T13515] __nla_validate_parse: 35 callbacks suppressed [ 324.156018][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 324.184424][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880339ed400: abort rx timeout. Force session deactivation [ 324.393470][T13520] IPv6: sit3: Disabled Multicast RS [ 324.402153][T13520] sit3: entered allmulticast mode [ 324.679851][T13525] bond8: option fail_over_mac: invalid value (16) [ 324.690389][T13525] bond8 (unregistering): Released all slaves [ 324.732192][T13532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2003'. [ 325.065486][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 325.188031][T13541] netlink: 'syz.4.2005': attribute type 5 has an invalid length. [ 325.465757][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'. [ 325.476473][T13545] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 325.752390][T13560] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 326.105463][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.560138][T13598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2020'. [ 326.580263][T13604] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2020'. [ 326.658348][T13595] bond6 (unregistering): Released all slaves [ 326.786578][T13597] veth0: Caught tx_queue_len zero misconfig [ 327.055103][T13586] syzkaller1: entered promiscuous mode [ 327.061307][T13586] syzkaller1: entered allmulticast mode [ 327.070333][T13617] wg0: entered allmulticast mode [ 327.078120][T13618] pim6reg: left allmulticast mode [ 327.083589][T13618] wg0: left allmulticast mode [ 327.105661][T13616] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 327.147302][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 327.233429][T13617] : renamed from dummy0 (while UP) [ 327.310161][T13623] vlan5: entered promiscuous mode [ 327.315609][T13623] bridge0: entered promiscuous mode [ 327.315813][T13623] vlan5: entered allmulticast mode [ 327.315831][T13623] bridge0: entered allmulticast mode [ 327.382321][T13630] IPv4: Oversized IP packet from 127.202.26.0 [ 327.919597][T13655] netlink: 'syz.2.2032': attribute type 10 has an invalid length. [ 327.937966][T13639] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.001391][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 328.011399][T13657] netlink: 'syz.0.2034': attribute type 10 has an invalid length. [ 328.019616][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2034'. [ 328.185641][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 328.304030][T13672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'. [ 328.323155][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 328.390883][T13675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.824454][T13692] ip6gre0: Master is either lo or non-ether device [ 329.063469][T13705] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2047'. [ 329.225553][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 329.297669][T13721] xt_IDLETIMER: label is empty or not nul-terminated [ 329.391715][T13728] __nla_validate_parse: 1 callbacks suppressed [ 329.391768][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'. [ 329.427792][T13721] netlink: 'syz.0.2054': attribute type 21 has an invalid length. [ 329.714807][T13732] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2058'. [ 329.733450][T13732] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.779213][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2059'. [ 329.876285][T13738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2058'. [ 330.265549][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 330.612583][ T6640] tipc: Subscription rejected, illegal request [ 330.678122][T13793] x_tables: duplicate underflow at hook 1 [ 330.800384][T13800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2076'. [ 330.823507][T13799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2077'. [ 330.848931][T13799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2077'. [ 331.248662][T13813] openvswitch: netlink: VLAN attribute unexpected. [ 331.305470][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 331.308135][T13820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2086'. [ 331.308234][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'. [ 331.431655][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2087'. [ 331.442518][T13828] netlink: 'syz.2.2087': attribute type 8 has an invalid length. [ 331.453348][T13828] netlink: 'syz.2.2087': attribute type 8 has an invalid length. [ 331.461836][T13828] netlink: 'syz.2.2087': attribute type 8 has an invalid length. [ 331.471111][T13828] netlink: 'syz.2.2087': attribute type 8 has an invalid length. [ 331.481420][T13828] netlink: 'syz.2.2087': attribute type 8 has an invalid length. [ 331.481692][T13828] netlink: 'syz.2.2087': attribute type 8 has an invalid length. [ 332.345564][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 332.364769][T13878] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 332.928198][T13894] Bluetooth: hci0: unsupported parameter 5135 [ 332.928245][T13894] Bluetooth: hci0: unsupported parameter 8192 [ 332.928281][T13894] Bluetooth: hci0: unsupported parameter 5135 [ 332.928300][T13894] Bluetooth: hci0: unsupported parameter 8192 [ 333.385562][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 333.492542][T13918] lo: left promiscuous mode [ 333.778500][T13931] validate_nla: 9 callbacks suppressed [ 333.787879][T13931] netlink: 'syz.4.2117': attribute type 2 has an invalid length. [ 333.942561][T13931] : entered promiscuous mode [ 333.956730][T13939] xt_REDIRECT: bad MAP_IPS. [ 334.032902][T13940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.242993][T13952] netlink: 'syz.4.2124': attribute type 3 has an invalid length. [ 334.278678][T13954] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 334.278777][T13954] gretap0: entered promiscuous mode [ 334.278812][T13954] gretap0: entered allmulticast mode [ 334.425466][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.829508][ T6642] bond0: (slave bond_slave_1): link status definitely up [ 334.883426][T13984] bond_slave_0: Caught tx_queue_len zero misconfig [ 334.977069][T13993] syzkaller1: entered promiscuous mode [ 335.465574][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 335.807666][T14022] __nla_validate_parse: 21 callbacks suppressed [ 335.814428][T14022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2143'. [ 335.836978][T14022] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2143'. [ 336.039456][T14024] syzkaller1: entered promiscuous mode [ 336.046286][T14024] syzkaller1: entered allmulticast mode [ 336.505572][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.595821][T14052] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 336.725745][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2151'. [ 336.926324][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 337.290766][T14087] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2161'. [ 337.322399][T14087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2161'. [ 337.335141][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 337.545512][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 337.880737][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2171'. [ 337.880803][T14114] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 338.098171][T14123] syzkaller0: entered promiscuous mode [ 338.104481][T14123] syzkaller0: entered allmulticast mode [ 338.121842][T14123] netlink: 198796 bytes leftover after parsing attributes in process `syz.3.2173'. [ 338.131690][T14123] netlink: 'syz.3.2173': attribute type 2 has an invalid length. [ 338.424812][T14138] netlink: 'syz.3.2177': attribute type 4 has an invalid length. [ 338.433494][T14138] Bluetooth: hci0: unsupported parameter 5135 [ 338.433519][T14138] Bluetooth: hci0: unsupported parameter 8192 [ 338.433543][T14138] Bluetooth: hci0: unsupported parameter 5135 [ 338.433557][T14138] Bluetooth: hci0: unsupported parameter 8192 [ 338.442267][T14138] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2177'. [ 338.595664][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.798520][T14148] netlink: 'syz.3.2178': attribute type 4 has an invalid length. [ 339.625708][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.084930][T14189] netlink: 'syz.4.2186': attribute type 1 has an invalid length. [ 340.243813][T14189] 8021q: adding VLAN 0 to HW filter on device bond7 [ 340.319213][T14200] netlink: 'syz.2.2187': attribute type 2 has an invalid length. [ 340.490983][T14200] bond5: option all_slaves_active: invalid value (222) [ 340.534822][T14200] bond5 (unregistering): Released all slaves [ 340.665542][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.741282][T14207] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 340.762615][T14189] bond7: entered promiscuous mode [ 340.762660][T14189] gretap1: entered promiscuous mode [ 340.763218][T14189] bond7: entered allmulticast mode [ 340.763261][T14189] gretap1: entered allmulticast mode [ 340.872794][T14210] __nla_validate_parse: 2 callbacks suppressed [ 340.872851][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'. [ 341.069911][T14219] dvmrp0: entered allmulticast mode [ 341.119275][T14230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.175284][T14231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.372878][T14244] netlink: 'syz.0.2196': attribute type 7 has an invalid length. [ 341.453220][T14248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2197'. [ 341.483490][T14252] netlink: 'syz.4.2186': attribute type 1 has an invalid length. [ 341.705559][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.011036][T14272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.048052][T14277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.492673][T14300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2210'. [ 342.492756][T14300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2210'. [ 342.740760][T14309] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.747336][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.870949][T14312] wg0 speed is unknown, defaulting to 1000 [ 343.231793][T14330] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2222'. [ 343.231849][T14330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2222'. [ 343.363217][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 343.413685][T14333] openvswitch: netlink: Tunnel attr 3 has unexpected len 9 expected 1 [ 343.492737][T14339] mac80211_hwsim hwsim9 wlan1: Caught tx_queue_len zero misconfig [ 343.634922][T14347] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2226'. [ 343.785564][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.822879][T14354] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2228'. [ 343.822934][T14354] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2228'. [ 344.231930][T14369] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 344.343188][T14373] vxcan1: tx drop: invalid da for name 0x0000000000000004 [ 345.865695][ C1] net_ratelimit: 1 callbacks suppressed [ 345.865756][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 346.070869][T14454] netlink: 'syz.0.2264': attribute type 4 has an invalid length. [ 346.224704][T14459] netlink: 'syz.0.2266': attribute type 1 has an invalid length. [ 346.312576][T14459] bond8 (unregistering): Released all slaves [ 346.486296][T14472] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 346.622920][T14470] syzkaller1: entered promiscuous mode [ 346.622963][T14470] syzkaller1: entered allmulticast mode [ 346.738882][T14481] __nla_validate_parse: 9 callbacks suppressed [ 346.738943][T14481] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2270'. [ 346.738965][T14481] nbd: illegal input index -8454144 [ 346.905470][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 346.949213][T14490] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2275'. [ 346.960330][T14490] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2275'. [ 346.980216][T14486] xt_NETMAP: bad MAP_IPS. [ 347.052490][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2276'. [ 347.145153][T14498] netlink: 'syz.0.2278': attribute type 1 has an invalid length. [ 347.237584][T14503] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 347.259448][T14501] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 [ 347.310656][T14507] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 347.424939][T14511] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2283'. [ 347.438588][T14511] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 347.463813][T14509] netlink: 'syz.4.2281': attribute type 3 has an invalid length. [ 347.712283][T14524] xt_REDIRECT: bad rangesize 26624. [ 347.750346][T14524] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2286'. [ 347.780345][T14524] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2286'. [ 347.852318][T14519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2284'. [ 347.852382][T14519] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 347.945666][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 347.983663][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2291'. [ 348.028024][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 348.222151][T14543] ip6t_rpfilter: unknown options [ 348.394528][T14547] netlink: 'syz.3.2297': attribute type 32 has an invalid length. [ 348.394572][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2297'. [ 348.459598][T14556] netlink: 'syz.3.2297': attribute type 32 has an invalid length. [ 348.486837][T14547] bond4: Setting coupled_control to off (0) [ 348.499336][T14552] nbd: nbd1 already in use [ 348.547582][T14556] bond5: Setting coupled_control to off (0) [ 348.879033][T14577] --map-set only usable from mangle table [ 348.985608][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.225222][T14595] SET target dimension over the limit! [ 350.025472][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 350.422557][T14650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.694405][T14663] openvswitch: netlink: Message has 1 unknown bytes. [ 350.910069][T14658] netlink: Failed to add ¦â—k\ helper -22 [ 350.926591][T14658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.065585][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.329223][T14694] IPVS: set_ctl: invalid protocol: 12 172.30.0.2:20004 [ 351.740743][T14706] syzkaller0: left promiscuous mode [ 351.740781][T14706] syzkaller0: left allmulticast mode [ 352.105550][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 352.123277][T14724] vlan6: entered promiscuous mode [ 352.393907][T14743] __nla_validate_parse: 7 callbacks suppressed [ 352.393963][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 352.949661][T14764] Bluetooth: hci0: unsupported parameter 5135 [ 352.949722][T14764] Bluetooth: hci0: unsupported parameter 8192 [ 352.949738][T14764] Bluetooth: hci0: unsupported parameter 5135 [ 352.949751][T14764] Bluetooth: hci0: unsupported parameter 8192 [ 353.145780][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.251003][T14774] Bluetooth: hci0: unsupported parameter 5135 [ 353.251047][T14774] Bluetooth: hci0: unsupported parameter 8192 [ 353.251084][T14774] Bluetooth: hci0: unsupported parameter 5135 [ 353.251103][T14774] Bluetooth: hci0: unsupported parameter 8192 [ 353.394253][T14778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2352'. [ 353.869418][T14795] netlink: 'syz.4.2356': attribute type 1 has an invalid length. [ 353.869460][T14795] netlink: 'syz.4.2356': attribute type 2 has an invalid length. [ 353.889048][T14796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2357'. [ 353.935041][T14797] netlink: 'syz.4.2356': attribute type 1 has an invalid length. [ 353.944007][T14797] netlink: 'syz.4.2356': attribute type 2 has an invalid length. [ 353.944074][T14797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2356'. [ 354.185600][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.695763][T14826] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2370'. [ 354.800148][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2368'. [ 355.211762][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2374'. [ 355.222649][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2374'. [ 355.232504][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 355.461880][T14855] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 355.791668][T14861] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2379'. [ 355.791806][T14861] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2379'. [ 356.065233][T14876] netlink: 'syz.0.2385': attribute type 3 has an invalid length. [ 356.265467][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 356.403924][T14892] netlink: 'syz.0.2390': attribute type 1 has an invalid length. [ 357.305464][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.932842][T14946] syzkaller0: entered promiscuous mode [ 357.932894][T14946] syzkaller0: entered allmulticast mode [ 357.988038][T14946] __nla_validate_parse: 5 callbacks suppressed [ 357.989135][T14946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2401'. [ 357.989224][T14946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2401'. [ 358.345689][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 358.800159][T14974] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2410'. [ 359.238710][T14997] netlink: 'syz.3.2413': attribute type 1 has an invalid length. [ 359.248510][T14997] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2413'. [ 359.385517][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.136960][T15025] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 360.369983][T15028] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2424'. [ 360.370035][T15028] nbd: illegal input index -8454144 [ 360.407681][T15030] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2425'. [ 360.425621][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.470700][T15034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2425'. [ 360.795298][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2429'. [ 360.938303][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2431'. [ 361.411774][T15067] tipc: New replicast peer: 0.0.0.0 [ 361.436701][T15067] tipc: Enabled bearer , priority 10 [ 361.465832][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 361.960624][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2438'. [ 362.071520][T15096] netlink: 'syz.1.2440': attribute type 1 has an invalid length. [ 362.117618][T15097] bond6: (slave veth0_to_bond): Releasing active interface [ 362.443919][T15100] wg0 speed is unknown, defaulting to 1000 [ 362.505486][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.216209][T15129] __nla_validate_parse: 1 callbacks suppressed [ 363.216275][T15129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2448'. [ 363.376305][T15132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2448'. [ 363.419181][T15129] 8021q: adding VLAN 0 to HW filter on device bond8 [ 363.431020][T15131] bond8: entered promiscuous mode [ 363.437766][T15131] bond8: entered allmulticast mode [ 363.519500][T15134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2449'. [ 363.545457][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.987165][T15145] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2451'. [ 363.987210][T15145] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2451'. [ 364.006478][T15145] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2451'. [ 364.006519][T15145] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2451'. [ 364.014821][T15145] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2451'. [ 364.014897][T15145] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2451'. [ 364.030093][T15145] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2451'. [ 364.517903][T15160] nbd: must specify at least one socket [ 364.585533][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.625551][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.301782][T15258] ieee802154 phy1 wpan1: encryption failed: -22 [ 366.665458][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.774189][T15246] lapbether: lapb_data_request error - 4 [ 367.274876][T15281] netlink: 'syz.3.2469': attribute type 2 has an invalid length. [ 367.593372][T15294] bond2: option mode: unable to set because the bond device has slaves [ 367.595684][T15292] syzkaller0: entered promiscuous mode [ 367.595741][T15292] syzkaller0: entered allmulticast mode [ 367.705546][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 367.915567][T15298] tipc: Enabling of bearer rejected, failed to enable media [ 368.380872][T15314] __nla_validate_parse: 125 callbacks suppressed [ 368.380933][T15314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2480'. [ 368.745556][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.021900][T15299] Cannot find add_set index 65532 as target [ 369.208679][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2486'. [ 369.208810][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2486'. [ 369.419957][T15342] syzkaller0: entered promiscuous mode [ 369.428111][T15342] syzkaller0: entered allmulticast mode [ 369.450657][T15350] netlink: 'syz.3.2488': attribute type 2 has an invalid length. [ 369.465153][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2486'. [ 369.466176][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2486'. [ 369.785557][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.402885][T15382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2498'. [ 370.476245][T15360] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 370.825563][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.932420][T15397] netlink: 'syz.1.2502': attribute type 4 has an invalid length. [ 371.572107][T15413] FAULT_INJECTION: forcing a failure. [ 371.572107][T15413] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 371.591723][T15413] CPU: 0 UID: 0 PID: 15413 Comm: syz.4.2507 Not tainted syzkaller #0 PREEMPT(full) [ 371.591756][T15413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.591778][T15413] Call Trace: [ 371.591791][T15413] [ 371.591801][T15413] dump_stack_lvl+0xe8/0x150 [ 371.591840][T15413] should_fail_ex+0x410/0x560 [ 371.591879][T15413] _copy_from_user+0x2d/0xb0 [ 371.591902][T15413] kstrtouint_from_user+0xd6/0x180 [ 371.591937][T15413] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 371.591978][T15413] ? lock_acquire+0x115/0x350 [ 371.592006][T15413] proc_fail_nth_write+0x8e/0x210 [ 371.592041][T15413] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 371.592085][T15413] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 371.592123][T15413] vfs_write+0x296/0xba0 [ 371.592165][T15413] ? __pfx_vfs_write+0x10/0x10 [ 371.592199][T15413] ? __fget_files+0x2a/0x420 [ 371.592235][T15413] ? __fget_files+0x3a2/0x420 [ 371.592262][T15413] ? __fget_files+0x2a/0x420 [ 371.592309][T15413] ksys_write+0x150/0x270 [ 371.592343][T15413] ? __pfx_ksys_write+0x10/0x10 [ 371.592390][T15413] do_syscall_64+0x166/0x520 [ 371.592420][T15413] ? trace_irq_disable+0x3b/0x140 [ 371.592442][T15413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.592466][T15413] ? clear_bhb_loop+0x70/0xc0 [ 371.592494][T15413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.592517][T15413] RIP: 0033:0x7f954435e98e [ 371.592544][T15413] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 371.592564][T15413] RSP: 002b:00007f95425f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.592590][T15413] RAX: ffffffffffffffda RBX: 00007f95425f66c0 RCX: 00007f954435e98e [ 371.592607][T15413] RDX: 0000000000000001 RSI: 00007f95425f60a0 RDI: 0000000000000005 [ 371.592621][T15413] RBP: 00007f95425f6090 R08: 0000000000000000 R09: 0000000000000000 [ 371.592635][T15413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.592649][T15413] R13: 00007f9544626038 R14: 00007f9544625fa0 R15: 00007ffc144b3018 [ 371.592686][T15413] [ 371.865479][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.120870][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2504'. [ 372.890896][T15453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2520'. [ 372.905630][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 373.337286][T15462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.371751][T15462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.386420][T15462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2522'. [ 373.945539][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.682410][T15518] vlan3: entered allmulticast mode [ 374.682453][T15518] bond0: entered allmulticast mode [ 374.985564][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.738232][T15556] netlink: 'syz.2.2542': attribute type 21 has an invalid length. [ 375.738288][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2542'. [ 375.742480][T15556] netlink: 'syz.2.2542': attribute type 21 has an invalid length. [ 375.742545][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2542'. [ 375.799611][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2544'. [ 376.035565][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.124071][T15573] syzkaller1: entered promiscuous mode [ 376.130336][T15573] syzkaller1: entered allmulticast mode [ 376.619629][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'. [ 376.634351][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'. [ 376.800422][T15594] xt_policy: output policy not valid in PREROUTING and INPUT [ 376.921292][T15595] netlink: 'syz.1.2550': attribute type 1 has an invalid length. [ 376.921366][T15595] netlink: 'syz.1.2550': attribute type 2 has an invalid length. [ 376.921922][T15595] netlink: 'syz.1.2550': attribute type 1 has an invalid length. [ 376.921966][T15595] netlink: 'syz.1.2550': attribute type 2 has an invalid length. [ 376.922505][T15595] netlink: 'syz.1.2550': attribute type 1 has an invalid length. [ 376.922542][T15595] netlink: 'syz.1.2550': attribute type 2 has an invalid length. [ 377.023981][T15601] bond12: option arp_all_targets: invalid value (18446744073709551613) [ 377.035224][T15601] bond12 (unregistering): Released all slaves [ 377.065560][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.277502][T15497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.289003][T15531] netlink: 'syz.4.2537': attribute type 1 has an invalid length. [ 377.298294][T15531] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2537'. [ 377.747706][T15621] netlink: 'syz.4.2555': attribute type 21 has an invalid length. [ 377.747749][T15621] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2555'. [ 377.843627][T15621] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2555'. [ 378.105713][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.225144][T15627] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2559'. [ 378.344399][T15631] tunl0: left promiscuous mode [ 378.391126][T15631] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.391306][T15631] bridge0: port 2(bridge_slave_1) entered listening state [ 378.391717][T15631] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.391818][T15631] bridge0: port 1(bridge_slave_0) entered listening state [ 378.505104][T15631] vlan0: left promiscuous mode [ 378.536148][T15631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.577326][T15631] gretap1: left promiscuous mode [ 378.577407][T15631] gretap1: left allmulticast mode [ 378.623226][T15631] gretap0: entered promiscuous mode [ 378.694618][T15631] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 378.883030][T15652] openvswitch: netlink: VLAN attribute unexpected. [ 378.958879][T15643] __nla_validate_parse: 1 callbacks suppressed [ 378.958930][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2563'. [ 378.958955][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2563'. [ 379.145624][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.582438][T15676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2566'. [ 379.917573][T15689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2571'. [ 379.917628][T15689] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 380.185575][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.343894][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 380.344168][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 380.344402][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 380.352386][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 380.396046][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 380.407182][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 381.225778][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.363399][T15742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.392194][T15742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.454801][T15742] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 381.483475][T15742] bond0 (unregistering): Released all slaves [ 381.747848][T15748] bridge0: port 4(veth1_to_bridge) entered blocking state [ 381.747957][T15765] netlink: 'syz.3.2586': attribute type 11 has an invalid length. [ 381.747966][T15748] bridge0: port 4(veth1_to_bridge) entered disabled state [ 381.748120][T15748] veth1_to_bridge: entered allmulticast mode [ 381.779125][T15748] veth1_to_bridge: entered promiscuous mode [ 381.784559][T15748] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 381.790763][T15748] bridge0: port 4(veth1_to_bridge) entered blocking state [ 381.791089][T15748] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 381.861341][T15768] validate_nla: 6 callbacks suppressed [ 381.861465][T15768] netlink: 'syz.2.2587': attribute type 2 has an invalid length. [ 382.153960][T15768] : entered promiscuous mode [ 382.266102][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.299015][T15786] netlink: 'syz.0.2590': attribute type 8 has an invalid length. [ 382.592457][T15792] bond0: option min_links: invalid value (18446744073709551614) [ 382.592517][T15792] bond0: option min_links: allowed values 0 - 2147483647 [ 382.640031][T15792] bond0 (unregistering): Released all slaves [ 383.103634][T15816] netlink: 'syz.2.2596': attribute type 1 has an invalid length. [ 383.305531][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 383.439960][T15822] veth5: entered allmulticast mode [ 383.482900][T15822] bond5: (slave veth5): Enslaving as an active interface with a down link [ 383.564561][T15816] bond5: (slave veth0_to_bond): making interface the new active one [ 383.578633][T15816] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 383.632921][T15832] macvlan2: entered promiscuous mode [ 383.632973][T15832] macvlan2: entered allmulticast mode [ 383.647921][T15832] bond5: entered promiscuous mode [ 383.647972][T15832] veth0_to_bond: entered promiscuous mode [ 383.667862][T15832] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 383.678386][T15832] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 383.678755][T15832] bond5: left promiscuous mode [ 383.678809][T15832] veth0_to_bond: left promiscuous mode [ 383.855206][T15836] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 384.280370][T15855] netlink: 'syz.2.2606': attribute type 4 has an invalid length. [ 384.345544][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.994847][T15890] xt_IDLETIMER: timeout value is too big [ 385.027312][T15885] wg0 speed is unknown, defaulting to 1000 [ 385.130801][T15898] __nla_validate_parse: 69 callbacks suppressed [ 385.130887][T15898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2616'. [ 385.153665][T15900] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2617'. [ 385.193412][T15901] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2615'. [ 385.270838][T15893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2615'. [ 385.378750][T15911] netlink: 'syz.1.2618': attribute type 23 has an invalid length. [ 385.386818][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.430206][T15909] netlink: 'syz.4.2619': attribute type 2 has an invalid length. [ 385.980161][T15933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2623'. [ 386.269587][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 386.315751][T15937] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 386.327810][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 386.425448][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.472057][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'. [ 386.564195][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2628'. [ 387.465439][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.542095][T15981] syzkaller0: entered promiscuous mode [ 387.542148][T15981] syzkaller0: entered allmulticast mode [ 388.505599][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.555473][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.860448][T15962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.880993][T15962] nci: nci_start_poll: failed to set local general bytes [ 389.942561][T15959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.172383][T15995] netlink: 'syz.1.2640': attribute type 1 has an invalid length. [ 390.172430][T15995] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2640'. [ 390.214462][T15999] netlink: 'syz.3.2639': attribute type 1 has an invalid length. [ 390.237610][T16000] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2640'. [ 390.259230][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2640'. [ 390.443284][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 390.499545][T16012] netlink: 'syz.1.2641': attribute type 2 has an invalid length. [ 390.585473][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.615000][T16017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 391.242926][T15999] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 391.252388][T16003] bond3: (slave veth0_to_bond): Releasing active interface [ 391.509696][T16027] netlink: 'syz.4.2643': attribute type 10 has an invalid length. [ 391.521492][T16006] syzkaller0: entered promiscuous mode [ 391.527390][T16006] syzkaller0: entered allmulticast mode [ 391.626230][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.902247][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'. [ 391.912317][T16035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2645'. [ 391.926898][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'. [ 391.936515][T16035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2645'. [ 391.946713][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'. [ 392.671060][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 393.706935][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.196540][T16027] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 394.562757][T16043] xt_REDIRECT: bad MAP_IPS. [ 394.745669][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.771604][T16053] sctp: [Deprecated]: syz.1.2650 (pid 16053) Use of int in maxseg socket option. [ 394.771604][T16053] Use struct sctp_assoc_value instead [ 394.887194][T16060] syzkaller0: entered promiscuous mode [ 394.892986][T16060] syzkaller0: entered allmulticast mode [ 395.130952][T16069] veth1_macvtap: left promiscuous mode [ 395.247762][T16086] FAULT_INJECTION: forcing a failure. [ 395.247762][T16086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.247823][T16086] CPU: 1 UID: 0 PID: 16086 Comm: syz.1.2656 Not tainted syzkaller #0 PREEMPT(full) [ 395.247854][T16086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.247868][T16086] Call Trace: [ 395.247876][T16086] [ 395.247886][T16086] dump_stack_lvl+0xe8/0x150 [ 395.248014][T16086] should_fail_ex+0x410/0x560 [ 395.248104][T16086] _copy_from_user+0x2d/0xb0 [ 395.248180][T16086] ___sys_sendmsg+0x1c6/0x360 [ 395.248243][T16086] ? __lock_acquire+0x6df/0x2e50 [ 395.248310][T16086] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.248468][T16086] ? __fget_files+0x2a/0x420 [ 395.248546][T16086] ? __fget_files+0x3a2/0x420 [ 395.248649][T16086] __x64_sys_sendmsg+0x1b1/0x290 [ 395.248722][T16086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.248819][T16086] do_syscall_64+0x166/0x520 [ 395.248894][T16086] ? trace_irq_disable+0x3b/0x140 [ 395.248949][T16086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.249005][T16086] ? clear_bhb_loop+0x70/0xc0 [ 395.249082][T16086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.249145][T16086] RIP: 0033:0x7f0f81d9e159 [ 395.249211][T16086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.249273][T16086] RSP: 002b:00007f0f82c8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.249338][T16086] RAX: ffffffffffffffda RBX: 00007f0f82025fa0 RCX: 00007f0f81d9e159 [ 395.249382][T16086] RDX: 0000000020000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 395.249436][T16086] RBP: 00007f0f82c8a090 R08: 0000000000000000 R09: 0000000000000000 [ 395.249497][T16086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.249544][T16086] R13: 00007f0f82026038 R14: 00007f0f82025fa0 R15: 00007fff76908948 [ 395.249633][T16086] [ 395.614610][T16094] netlink: 'syz.3.2660': attribute type 3 has an invalid length. [ 395.624910][T16094] __nla_validate_parse: 4 callbacks suppressed [ 395.625605][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2660'. [ 395.642944][T16094] netlink: 'syz.3.2660': attribute type 3 has an invalid length. [ 395.651725][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2660'. [ 395.652413][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2660'. [ 395.757455][T16105] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2659'. [ 395.785491][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.822127][T16105] netlink: 'syz.1.2659': attribute type 16 has an invalid length. [ 395.822175][T16105] netlink: 'syz.1.2659': attribute type 3 has an invalid length. [ 395.822209][T16105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2659'. [ 396.082023][T16111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.121375][T16090] wg0 speed is unknown, defaulting to 1000 [ 396.203204][T16119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2662'. [ 396.203291][T16119] openvswitch: netlink: Missing key (keys=40, expected=100) [ 396.251170][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2664'. [ 396.307006][T16123] netlink: 'syz.3.2665': attribute type 32 has an invalid length. [ 396.321036][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2665'. [ 396.583575][T16133] netlink: NAT attribute has 5 unknown bytes [ 396.583643][T16133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.591460][T16133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.835546][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.883267][T16133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.047980][T16134] erspan0: entered promiscuous mode [ 397.080839][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2672'. [ 397.108680][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2673'. [ 397.310995][T16160] Cannot find add_set index 4 as target [ 397.460008][T16165] xt_IDLETIMER: label is empty or not nul-terminated [ 397.478895][T16166] netlink: 'syz.3.2675': attribute type 3 has an invalid length. [ 397.562088][T16168] netlink: 'syz.0.2678': attribute type 12 has an invalid length. [ 397.562142][T16168] netlink: 'syz.0.2678': attribute type 11 has an invalid length. [ 397.847619][T16173] pim6reg: entered allmulticast mode [ 397.865573][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.010452][T16188] xt_hashlimit: size too large, truncated to 1048576 [ 398.442110][ T5279] veth1_macvtap: entered promiscuous mode [ 398.905504][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.139536][T16228] tipc: Enabling of bearer rejected, failed to enable media [ 399.415869][T16236] wg1: entered promiscuous mode [ 399.415922][T16236] wg1: entered allmulticast mode [ 399.945652][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.271651][T16266] veth0_macvtap: entered allmulticast mode [ 400.285605][T16266] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 400.853375][T16295] netlink: 'syz.0.2708': attribute type 1 has an invalid length. [ 400.941524][T16295] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 400.985553][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.053427][T16305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.064815][T16302] netlink: 'syz.0.2708': attribute type 1 has an invalid length. [ 401.152478][T16295] veth8: entered promiscuous mode [ 401.170079][T16295] bond10: (slave veth8): Enslaving as a backup interface with a down link [ 401.196489][T16311] __nla_validate_parse: 7 callbacks suppressed [ 401.207379][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2712'. [ 401.207425][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2712'. [ 401.268559][T16309] 8021q: adding VLAN 0 to HW filter on device bond9 [ 401.490635][T16311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.537227][T16311] bond9: (slave bond0): making interface the new active one [ 401.560809][T16311] bond9: (slave bond0): Enslaving as an active interface with an up link [ 401.683873][T16323] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2715'. [ 402.025105][T16337] netlink: 'syz.0.2717': attribute type 2 has an invalid length. [ 402.035528][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.268304][T16355] FAULT_INJECTION: forcing a failure. [ 402.268304][T16355] name failslab, interval 1, probability 0, space 0, times 0 [ 402.281461][T16355] CPU: 0 UID: 0 PID: 16355 Comm: syz.0.2723 Not tainted syzkaller #0 PREEMPT(full) [ 402.281492][T16355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.281507][T16355] Call Trace: [ 402.281516][T16355] [ 402.281526][T16355] dump_stack_lvl+0xe8/0x150 [ 402.281565][T16355] should_fail_ex+0x410/0x560 [ 402.281604][T16355] should_failslab+0xa8/0x100 [ 402.281633][T16355] __kmalloc_noprof+0xfe/0x720 [ 402.281669][T16355] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 402.281703][T16355] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 402.281745][T16355] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 402.281788][T16355] genl_family_rcv_msg_doit+0xda/0x340 [ 402.281835][T16355] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 402.281876][T16355] ? apparmor_capable+0x126/0x170 [ 402.281906][T16355] ? bpf_lsm_capable+0x9/0x20 [ 402.281936][T16355] ? security_capable+0x7e/0x2c0 [ 402.281977][T16355] genl_rcv_msg+0x614/0x7a0 [ 402.282016][T16355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.282046][T16355] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 402.282081][T16355] ? __pfx_nl80211_start_ap+0x10/0x10 [ 402.282111][T16355] ? __pfx_nl80211_post_doit+0x10/0x10 [ 402.282146][T16355] ? __pfx_ref_tracker_free+0x10/0x10 [ 402.282191][T16355] netlink_rcv_skb+0x226/0x4a0 [ 402.282218][T16355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.282251][T16355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.282293][T16355] ? down_read+0x2be/0x330 [ 402.282330][T16355] genl_rcv+0x28/0x40 [ 402.282359][T16355] netlink_unicast+0x7bd/0x940 [ 402.282394][T16355] netlink_sendmsg+0x813/0xb40 [ 402.282431][T16355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.282466][T16355] ? apparmor_socket_sendmsg+0x18b/0x360 [ 402.282500][T16355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.282525][T16355] sock_sendmsg_nosec+0x13a/0x180 [ 402.282559][T16355] ____sys_sendmsg+0x54e/0x850 [ 402.282588][T16355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.282620][T16355] ? import_iovec+0x73/0xa0 [ 402.282659][T16355] ___sys_sendmsg+0x2a5/0x360 [ 402.282680][T16355] ? __lock_acquire+0x6df/0x2e50 [ 402.282708][T16355] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.282767][T16355] ? __fget_files+0x2a/0x420 [ 402.282802][T16355] ? __fget_files+0x3a2/0x420 [ 402.282842][T16355] __x64_sys_sendmsg+0x1b1/0x290 [ 402.282868][T16355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.282913][T16355] do_syscall_64+0x166/0x520 [ 402.282943][T16355] ? trace_irq_disable+0x3b/0x140 [ 402.282965][T16355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.282988][T16355] ? clear_bhb_loop+0x70/0xc0 [ 402.283017][T16355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.283041][T16355] RIP: 0033:0x7f5e2b19e159 [ 402.283063][T16355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.283083][T16355] RSP: 002b:00007f5e2c0e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.283108][T16355] RAX: ffffffffffffffda RBX: 00007f5e2b425fa0 RCX: 00007f5e2b19e159 [ 402.283125][T16355] RDX: 0000000020000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 402.283140][T16355] RBP: 00007f5e2c0e1090 R08: 0000000000000000 R09: 0000000000000000 [ 402.283155][T16355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.283169][T16355] R13: 00007f5e2b426038 R14: 00007f5e2b425fa0 R15: 00007ffd4d374948 [ 402.283205][T16355] [ 403.065670][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.173705][T16375] netlink: 'syz.1.2728': attribute type 16 has an invalid length. [ 403.184464][T16375] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2728'. [ 403.326762][T16374] wg0 speed is unknown, defaulting to 1000 [ 403.917126][T16378] wg0 speed is unknown, defaulting to 1000 [ 404.105523][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.205162][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2735'. [ 404.406074][T16411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2738'. [ 404.424661][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2735'. [ 404.591618][T16409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2738'. [ 404.613901][T16418] FAULT_INJECTION: forcing a failure. [ 404.613901][T16418] name failslab, interval 1, probability 0, space 0, times 0 [ 404.628128][T16418] CPU: 0 UID: 0 PID: 16418 Comm: syz.2.2739 Not tainted syzkaller #0 PREEMPT(full) [ 404.628162][T16418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.628177][T16418] Call Trace: [ 404.628186][T16418] [ 404.628197][T16418] dump_stack_lvl+0xe8/0x150 [ 404.628236][T16418] should_fail_ex+0x410/0x560 [ 404.628275][T16418] should_failslab+0xa8/0x100 [ 404.628301][T16418] ? skb_ext_add+0x148/0x8e0 [ 404.628335][T16418] kmem_cache_alloc_noprof+0xa1/0x600 [ 404.628372][T16418] ? skb_ext_add+0x148/0x8e0 [ 404.628413][T16418] skb_ext_add+0x148/0x8e0 [ 404.628457][T16418] secpath_set+0x58/0x1d0 [ 404.628490][T16418] xfrm_output+0x4e4/0x1a60 [ 404.628529][T16418] __xfrm6_output+0x302/0x1020 [ 404.628557][T16418] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 404.628802][T16418] ? __pfx___xfrm6_output+0x10/0x10 [ 404.628857][T16418] ? xfrm6_output+0x250/0x520 [ 404.628887][T16418] xfrm6_output+0x1ca/0x520 [ 404.628910][T16418] ? __flow_hash_from_keys+0x431/0x6c0 [ 404.628934][T16418] ? xfrm6_output+0x250/0x520 [ 404.628959][T16418] ? __pfx_xfrm6_output+0x10/0x10 [ 404.628986][T16418] ? __pfx___xfrm6_output+0x10/0x10 [ 404.629016][T16418] ? ip6_xmit+0x273/0x1a60 [ 404.629048][T16418] ? __pfx_xfrm6_output+0x10/0x10 [ 404.629072][T16418] ip6_xmit+0x1981/0x1a60 [ 404.629113][T16418] ? ip6_xmit+0x273/0x1a60 [ 404.629146][T16418] ? __pfx_ip6_xmit+0x10/0x10 [ 404.629225][T16418] ? sctp_v6_xmit+0x63f/0x13a0 [ 404.629255][T16418] sctp_v6_xmit+0xa85/0x13a0 [ 404.629306][T16418] ? __pfx_sctp_v6_xmit+0x10/0x10 [ 404.629337][T16418] ? crc32c+0x18a/0x470 [ 404.629371][T16418] ? skb_crc32c+0x76b/0x890 [ 404.629397][T16418] ? sctp_packet_transmit+0x14c9/0x2bb0 [ 404.629427][T16418] ? consume_skb+0x89/0xb0 [ 404.629467][T16418] sctp_packet_transmit+0x25d0/0x2bb0 [ 404.629529][T16418] ? sctp_outq_flush+0x2be4/0x3380 [ 404.629564][T16418] ? sctp_outq_flush+0x2be4/0x3380 [ 404.629601][T16418] sctp_outq_flush+0x2ec6/0x3380 [ 404.629650][T16418] ? sctp_make_heartbeat+0x3b2/0x4b0 [ 404.629675][T16418] ? lock_acquire+0x115/0x350 [ 404.629705][T16418] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 404.629736][T16418] ? __pfx_sctp_outq_flush+0x10/0x10 [ 404.629781][T16418] ? sctp_do_8_2_transport_strike+0x43c/0x8d0 [ 404.629807][T16418] ? sctp_outq_uncork+0x4d/0xa0 [ 404.629845][T16418] sctp_do_sm+0x55a1/0x5dd0 [ 404.629866][T16418] ? arch_stack_walk+0xfb/0x150 [ 404.629907][T16418] ? __pfx_sctp_do_sm+0x10/0x10 [ 404.629925][T16418] ? __lock_acquire+0x6df/0x2e50 [ 404.629992][T16418] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 404.630024][T16418] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 404.630053][T16418] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 404.630086][T16418] ? sctp_v6_addr_to_user+0x217/0x420 [ 404.630118][T16418] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 404.630156][T16418] sctp_apply_peer_addr_params+0xd4/0x1880 [ 404.630196][T16418] sctp_setsockopt_peer_addr_params+0x622/0x980 [ 404.630243][T16418] sctp_setsockopt+0x759/0x12c0 [ 404.630271][T16418] ? sock_common_setsockopt+0x36/0xc0 [ 404.630302][T16418] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 404.630336][T16418] do_sock_setsockopt+0x17c/0x1b0 [ 404.630377][T16418] __x64_sys_setsockopt+0x13d/0x1b0 [ 404.630419][T16418] do_syscall_64+0x166/0x520 [ 404.630449][T16418] ? trace_irq_disable+0x3b/0x140 [ 404.630471][T16418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.630494][T16418] ? clear_bhb_loop+0x70/0xc0 [ 404.630523][T16418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.630546][T16418] RIP: 0033:0x7f2120b9e159 [ 404.630568][T16418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.630587][T16418] RSP: 002b:00007f212198e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 404.630612][T16418] RAX: ffffffffffffffda RBX: 00007f2120e25fa0 RCX: 00007f2120b9e159 [ 404.630640][T16418] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 404.630654][T16418] RBP: 00007f212198e090 R08: 000000000000009c R09: 0000000000000000 [ 404.630668][T16418] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 404.630683][T16418] R13: 00007f2120e26038 R14: 00007f2120e25fa0 R15: 00007ffece90d058 [ 404.630721][T16418] [ 405.145477][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.323525][T16428] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2744'. [ 405.419458][T16434] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2741'. [ 406.198349][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.814257][T16471] openvswitch: netlink: Duplicate or invalid key (type 0). [ 406.824840][T16468] FAULT_INJECTION: forcing a failure. [ 406.824840][T16468] name failslab, interval 1, probability 0, space 0, times 0 [ 406.824893][T16468] CPU: 0 UID: 0 PID: 16468 Comm: syz.1.2751 Not tainted syzkaller #0 PREEMPT(full) [ 406.824920][T16468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.824933][T16468] Call Trace: [ 406.824941][T16468] [ 406.824951][T16468] dump_stack_lvl+0xe8/0x150 [ 406.824988][T16468] should_fail_ex+0x410/0x560 [ 406.825029][T16468] ? __alloc_skb+0x1db/0x7a0 [ 406.825061][T16468] should_failslab+0xa8/0x100 [ 406.825088][T16468] ? __alloc_skb+0x1db/0x7a0 [ 406.825117][T16468] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 406.825152][T16468] ? __alloc_skb+0x18d/0x7a0 [ 406.825183][T16468] ? __alloc_skb+0x1db/0x7a0 [ 406.825221][T16468] __alloc_skb+0x1db/0x7a0 [ 406.825256][T16468] sctp_packet_transmit+0x2f2/0x2bb0 [ 406.825305][T16468] ? sctp_outq_flush+0x2be4/0x3380 [ 406.825346][T16468] ? sctp_outq_flush+0x2be4/0x3380 [ 406.825379][T16468] ? sctp_outq_flush+0x2be4/0x3380 [ 406.825421][T16468] sctp_outq_flush+0x2ec6/0x3380 [ 406.825459][T16468] ? sctp_make_heartbeat+0x3b2/0x4b0 [ 406.825493][T16468] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 406.825524][T16468] ? __pfx_sctp_outq_flush+0x10/0x10 [ 406.825568][T16468] ? sctp_do_8_2_transport_strike+0x43c/0x8d0 [ 406.825594][T16468] ? sctp_outq_uncork+0x4d/0xa0 [ 406.825631][T16468] sctp_do_sm+0x55a1/0x5dd0 [ 406.825657][T16468] ? finish_task_switch+0x40e/0xc60 [ 406.825696][T16468] ? __pfx_sctp_do_sm+0x10/0x10 [ 406.825716][T16468] ? __lock_acquire+0x6df/0x2e50 [ 406.825778][T16468] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 406.825811][T16468] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 406.825840][T16468] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 406.825872][T16468] ? sctp_v6_addr_to_user+0x217/0x420 [ 406.825904][T16468] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 406.825942][T16468] sctp_apply_peer_addr_params+0xd4/0x1880 [ 406.825969][T16468] ? __pfx_autoremove_wake_function+0x10/0x10 [ 406.826007][T16468] sctp_setsockopt_peer_addr_params+0x622/0x980 [ 406.826052][T16468] sctp_setsockopt+0x759/0x12c0 [ 406.826080][T16468] ? sock_common_setsockopt+0x36/0xc0 [ 406.826109][T16468] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 406.826141][T16468] do_sock_setsockopt+0x17c/0x1b0 [ 406.826180][T16468] __x64_sys_setsockopt+0x13d/0x1b0 [ 406.826221][T16468] do_syscall_64+0x166/0x520 [ 406.826251][T16468] ? trace_irq_disable+0x3b/0x140 [ 406.826273][T16468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.826296][T16468] ? clear_bhb_loop+0x70/0xc0 [ 406.826324][T16468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.826347][T16468] RIP: 0033:0x7f0f81d9e159 [ 406.826369][T16468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.826388][T16468] RSP: 002b:00007f0f82c69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 406.826412][T16468] RAX: ffffffffffffffda RBX: 00007f0f82026090 RCX: 00007f0f81d9e159 [ 406.826436][T16468] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 406.826450][T16468] RBP: 00007f0f82c69090 R08: 000000000000009c R09: 0000000000000000 [ 406.826464][T16468] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 406.826479][T16468] R13: 00007f0f82026128 R14: 00007f0f82026090 R15: 00007fff76908948 [ 406.826515][T16468] [ 407.231201][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.182340][T16478] netlink: 'syz.1.2754': attribute type 30 has an invalid length. [ 408.182385][T16478] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2754'. [ 408.274641][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.385320][T16480] netlink: 'syz.4.2756': attribute type 1 has an invalid length. [ 408.399348][T16480] nbd: error processing sock list [ 408.450083][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'. [ 408.450183][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'. [ 408.829536][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 408.830206][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 409.116118][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2759'. [ 409.892892][T16503] netlink: 'syz.4.2761': attribute type 2 has an invalid length. [ 409.904941][T16503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2761'. [ 409.945053][T16514] tipc: Failed to remove unknown binding: 66,0,0/1028385650:1047664553/1047664555 [ 409.963046][T16514] tipc: Failed to remove unknown binding: 66,0,0/1028385650:1047664553/1047664554 [ 409.997178][T16514] tipc: Failed to remove unknown binding: 66,0,0/1028385650:1047664553/1047664555 [ 409.997235][T16514] tipc: Failed to remove unknown binding: 66,0,0/1028385650:1047664553/1047664554 [ 418.673329][ C0] sched: DL replenish lagged too much [ 438.908779][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.908832][ C0] bridge0: topology change detected, propagating [ 438.909197][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.909220][ C0] bridge0: topology change detected, propagating [ 487.669955][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 573.310803][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 160s! [ 573.310924][ C0] Showing busy workqueues and worker pools: [ 573.310939][ C0] workqueue events: flags=0x100 [ 573.310982][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=9 refcnt=10 [ 573.311032][ C0] in-flight: 5755:drain_vmap_area_work for 11s ,5742:switchdev_deferred_process_work for 33s switchdev_deferred_process_work [ 573.311158][ C0] pending: delayed_vfree_work, 2*nsim_dev_hwstats_traffic_work, vmstat_shepherd, psi_avgs_work, ovs_dp_masks_rebalance [ 573.311303][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=18 refcnt=19 [ 573.311351][ C0] pending: ovs_dp_masks_rebalance, psi_avgs_work, 3*nsim_dev_hwstats_traffic_work, 4*psi_avgs_work, 4*ovs_dp_masks_rebalance, delayed_vfree_work, 4*rht_deferred_worker [ 573.311544][ C0] workqueue events_long: flags=0x100 [ 573.311561][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=9 refcnt=10 [ 573.311607][ C0] pending: 4*br_fdb_cleanup, 4*br_multicast_gc_work, br_fdb_cleanup [ 573.311711][ C0] workqueue events_unbound: flags=0x2 [ 573.311727][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=11 refcnt=12 [ 573.311786][ C0] in-flight: 6626:nsim_dev_trap_report_work for 2s ,6640:linkwatch_event for 0s ,6633:fsnotify_mark_destroy_workfn for 118s ,12:call_usermodehelper_exec_work for 162s ,6643:fsnotify_connector_destroy_workfn for 125s [ 573.311997][ C0] pending: nsim_dev_trap_report_work, toggle_allocation_gate, flush_memcg_stats_dwork, 3*nsim_dev_trap_report_work [ 573.312102][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=4 refcnt=5 [ 573.312143][ C0] in-flight: 59:idle_cull_fn for 11s [ 573.312199][ C0] pending: idle_cull_fn, 2*macvlan_process_broadcast [ 573.312271][ C0] workqueue events_freezable: flags=0x104 [ 573.312294][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 573.312341][ C0] pending: update_balloon_stats_func [ 573.312386][ C0] workqueue events_power_efficient: flags=0x180 [ 573.312403][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=7 refcnt=8 [ 573.312449][ C0] in-flight: 9:reg_check_chans_work for 33s ,5727:neigh_periodic_work for 162s [ 573.312550][ C0] pending: gc_worker, hash_mac4_gc, htable_gc, neigh_managed_work, do_cache_clean [ 573.312666][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=17 refcnt=18 [ 573.312715][ C0] in-flight: 5719:wg_ratelimiter_gc_entries for 160s [ 573.312764][ C0] pending: 3*nf_flow_offload_work_gc, hash_net6_gc, 2*hash_mac4_gc, hash_netnet6_gc, neigh_managed_work, hash_ipport6_gc, neigh_periodic_work, 6*check_lifetime [ 573.312972][ C0] workqueue events_dfl_long: flags=0x2 [ 573.312988][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=6 refcnt=7 [ 573.313029][ C0] pending: 6*defense_work_handler [ 573.313071][ C0] workqueue rcu_gp: flags=0x108 [ 573.313085][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2