last executing test programs: 4m0.821535861s ago: executing program 2 (id=12767): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, r2, 0x852dd6c070cd7e4d, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) 4m0.21701689s ago: executing program 2 (id=12773): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000021401000000000000000000090062007379070000000000"], 0x1c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) gettid() (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r4, @ANYBLOB="40002f800c0002000000000000000000080001"], 0x5c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) 4m0.051703013s ago: executing program 2 (id=12775): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xfc41}], 0x1}, 0x40000) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000810}], 0x1, 0x40800) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000005c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r4 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r4, 0x0, 0x0, 0x40080, 0x0, 0x0) bind$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) close(r3) (async) recvmmsg$unix(r2, &(0x7f0000001f40)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000000440)=""/101, 0x65}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000600)=""/199, 0xc7}, {&(0x7f0000000700)=""/100, 0x64}, {&(0x7f0000000780)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/145, 0x91}], 0x6}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/164, 0xa4}, {&(0x7f00000009c0)=""/220, 0xdc}, {&(0x7f0000002000)=""/143, 0x8f}], 0x3, &(0x7f0000000bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000c80)=""/57, 0x39}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/121, 0x79}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)=""/241, 0xf1}], 0x5, &(0x7f0000001f00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x3, 0x40000020, 0x0) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000280)) (async) write(r2, &(0x7f0000000240)="72a0b6b0d9dac2362de0766067221a4e2850c6210c834655facecd1357d4caf93e8635f09e1acd212308272178283087c8", 0x31) (async) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) socket$unix(0x1, 0x1, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000200)) 3m59.805179446s ago: executing program 2 (id=12779): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB='\x00'/28], 0x48) socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000)="2688f52760236f1bbe30f87e44533e140b03abf2b8c6f9bfbdf1af3dbec34ee4835d96b3e6302877c319c05591b73644c113f5117eb6c1e48bc8896ae3d3d6a5ccce562c22f935fd4f71497b6e7f50622ab6918428a918fe", &(0x7f0000000240)=@buf="0606c55082dec070b005e2564b33ba19512b18d5fa1ef88720b3ed296cc8bc753b99fa35e42e00e737608d60468ac4764dea117d636e1294444eeb5bb40819a32ae642781f0a45b8e34344708ea6709002cede5f2bc72c1868b7b137c4825f77902421c679132d83ba8a48d7e3acccd79cc55482fdbb481590607fd0f814669ca512f4aee028421fc0fbfc0256902c2747a7d992de1ee7c6c4c4a7840f63ed73266efda9745dcbd18dd69a2e34838b8299d3d4e1de528d3b7a3cf4bc9c2c71071ab0d4506f5006d2b8beaf684cff4b619efd7ee7b3380d946de97a12b9f0312b7aada876a36caa29b4b78471c3f51e66a09e31df", 0x2}, 0x20) 3m59.686999083s ago: executing program 2 (id=12782): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0xc, 0x2, 0x9a, 0xa9, 0x9, 0x9]}}]}]}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x400000}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000003b80)={{r4, &(0x7f0000000000)='\x00', 0x4000, &(0x7f00000000c0)={@_ha_fsid={[0x6bd5, 0xbc22]}, {0xf801, 0x7f, 0x10001}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)}, 0x5, &(0x7f0000003ac0)=[{0x2, 0x1, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="f766329fea48cccd4d7f57dc40106f89cdc5374218597c376d96", 0x1a, 0x8}, {0x1, 0x9, &(0x7f0000000200)='[@\xec\x00', &(0x7f0000000980)="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", 0x1000, 0x10}, {0x2, 0x101, &(0x7f0000001980), &(0x7f00000019c0)="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", 0x1000, 0x38}, {0x1, 0xc546, &(0x7f00000029c0)='\x00', &(0x7f0000002a00)="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", 0x1000}, {0x1, 0x200, &(0x7f0000003a00)='\x00', &(0x7f0000003a40)="105350a919fdb32f939672859de5c163030c1fb648aa36ee995917c2632e6cedba6e5bcea680101a47e286defe5e8d061d7d024d8ba2893d48be221f913779e74c4ea77ce8710d17b7caae55cb4d56b16b9da8d5e4af08343991d1a40b5bcba163c9", 0x62, 0x3a}]}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYBLOB="140007"], 0x2c}}, 0x0) 3m59.546173124s ago: executing program 2 (id=12785): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 3m44.247076135s ago: executing program 32 (id=12785): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 2m25.181289244s ago: executing program 3 (id=13874): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x3, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x205, 0x5f, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) socket(0x2b, 0x80801, 0x1) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x3, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x205, 0x5f, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) (async) 2m24.58604429s ago: executing program 3 (id=13880): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) (async, rerun: 64) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 2m24.427609115s ago: executing program 3 (id=13882): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x41}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000e40)=""/242, 0xf2}, {&(0x7f0000000600)=""/260, 0xf6}, {&(0x7f0000003bc0)=""/4080, 0xff0}, {&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000880)=""/253, 0xfd}, {&(0x7f0000000300)=""/163, 0xa3}], 0x6, 0x0, 0xfffffffffffffea7}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x4}}, {{0x8}, {0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004010}, 0x4) close(r1) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfffffffffffffcb7}, 0x1, 0x0, 0x0, 0x40}, 0x24002040) 2m23.436356728s ago: executing program 3 (id=13892): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x80001, 0x0) (async) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r3, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) (async) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r3, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0xa, 0x0, {0x0, 0x1000000}}]}}, &(0x7f00000006c0)=""/184, 0x32, 0xb8, 0x1}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000090c000000eb00000000000000007c50bc6a24da9763ec81fd71adee52a94ecfb34c03080e151abfdb73c8c5300d608ffc8ebf455c9f8b3b03613369db7b0b17f17b516502470e91564f61fa84e5109996964d6b6135be5f665360ab904b3154b16f86b076fcf770ef87c8b41a64af5349d22e0ab973e4499e96d0acafb562f510db0920d59c3f1d63a3ab5794564437189f380dde8e7ac228af5eb2cabce2c5dac63acdd55e131ec837c49e95fcf8baa0bed0271b6d4377737279b77b41274dc32c", @ANYRES32=0x0, @ANYBLOB="81000500000000003c0012800b00010062617461647600002c0002800c0001004241544d414e5f560d0001004241544d414e5f49560000000c0001004241544d414e5f56"], 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m23.177136542s ago: executing program 3 (id=13894): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f88a8", 0xe}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)="658ff76f49fcee590a325f5975b9ef520a1d05", 0x13}, {&(0x7f0000000140)="f88057f07cf28cdfbd1f14e1281bed4d40ea7c0da2269e2b796270a0bac976a35f86d2331e0464a99c6ec197a7ab1f8cc439d6a631c202c5432b6727aff1654c02198dcd53e60c27ed452014e55a33079f19e317e20c252c509a6676b463187794abe7cc1e40", 0x66}, {&(0x7f00000002c0)="5d35ef1999beab90519b06d5e54e5ab4968ac21a72ebd70a5e674becd4d344dd2a86a1dffd67b5", 0x27}, {&(0x7f0000000300)="cf9f6427b6277800c15a717ec800bf9d", 0x10}, {&(0x7f0000000340)="167dfa633fc98ce05b9e3ec655c3a09d39d1f99704cefd28c9b559444268a9f94c5f8d05bff61568706e5618d7282fa60dbb3ed02cb10e58782d9da1f9651f60d86b62f0def947485f7601abdb", 0x4d}, {&(0x7f00000003c0)="59881998da807bd612b916c6ea2bfccd7d5c05d453a6c37ec9f896b2b139428c31f6ef77453f4ee97ee61765dc5ebb55d10faf20b2a7c490fd99c40784cad1f596373815fd0696aac3bd1fdccd2f9dc5918231ac1883c9d5693e4a5fc8be938c9bb1d817ed82122790755f73251661c271b76dd7f1ae890c46d4dc15211a616931570b5ce968d126f2543791797e6ac5caa870efaccf0166d6e9c6dfc5931ade843d178e452fe38cd05bf13513a3575bc75d33cdccb87f705bdb0313de38c43466", 0xc1}, {&(0x7f00000004c0)="a29b18547d3538498397c5da2f7f0603390254080d68c98fd8129c543bc6583fae384b1041df5f9fd1f5c90f72ee455acd234ea76bf40d30f0a63dcde46fedac57633dc90b13d3e14d138cf2ff12918d533a02e6546304554170d929edaec319aed294102077a0e8a072ad00a7936bc7041091b7", 0x74}], 0x7, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xb}}}}], 0x20}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x757d64f033f3bd07, &(0x7f0000000980)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x40048a4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a31000000000500010007000000050005000a0000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2m22.552689507s ago: executing program 3 (id=13901): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) 2m7.377376244s ago: executing program 33 (id=13901): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) 2.756445421s ago: executing program 5 (id=15204): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a006da800000000000000001c6f"], 0x24}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c050) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x98, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x50}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10800}, 0x2004c0c4) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000227bd7000fd239fdbdf250400000004000280102ab83f4f12f9e49b0000004e4d000004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x8400}, 0x24000800) (async) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x20040810) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001ac0)={'wlan1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r3, 0x0, 0x2004000d) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x1c, r6, 0xe97cdccc169c2ad, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef98b", @ANYRES8], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x88c4}, 0xc000) 2.401079807s ago: executing program 5 (id=15211): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000b5ef98835f8601442927", @ANYRES16=r4, @ANYBLOB="4d7e00000000000000002a00000005003600000000000c0005000000000200000000050037000200000008002f00ff0000000500370000000000"], 0x40}, 0x4, 0x700000000000000, 0x0, 0x4000080}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000300), 0xfdb3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r8, &(0x7f0000000500)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0xe5, 0x0, 0x6, 0x4, 0x6, 0x0, 0xf, 0x8}, 0xe) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000100)={r9, 0x5, 0x0, 0xfffffffffffffffb, 0x5}, &(0x7f00000001c0)=0x18) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="830b04446a07ca7b3ebfc4d4b20b40ff00003d101ae57594c56430aa2c68ecf8dd941d8da4ab3e6ab869f6cf7476d724fc22ecea084c0c401faab99918fe892abd90e14f581fab815e62f489ef6062500fcb0defdafe2eb1c259d92d78aa64257cc9a6a02a7469f0cd1e1a3d59e417aea132959beeebaa5679bb4cb42df970f8588c18f41819af3c4733138300e9720f2141930ceb278cde63307fdc61c9b72c59d536f787ae0676185a02b1c25730cd1984714584b7a26179b2542419238dabd76ba830992bc8dfcaba8e66d03c56d5b68934e26a", @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf2507000000080001004f00000008000300", @ANYRES32=r10, @ANYBLOB="1400040065727370616e30000000000000000000080005000b000000", @ANYRES16=r6], 0x40}, 0x1, 0x0, 0x0, 0x4091}, 0x24044884) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) 2.092495646s ago: executing program 1 (id=15216): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {}, {0xd, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_EMATCHES={0x8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080005"], 0x8c}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async, rerun: 32) r4 = socket(0x10, 0x80002, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2.02921719s ago: executing program 0 (id=15217): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x5c, &(0x7f0000000040)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x400}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000180)={r1, 0xa}, 0x8) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200890000003c0001800c00010062697477697365002c0002800800034000000004080001400000001408000240000000671700000000000080080001006eee7e000900010073797a30"], 0x110}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@private}}, 0xe8) 1.958328286s ago: executing program 5 (id=15218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xe4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="79ee7ca42eeaaaaaaaaaaabb86dd6a000002000711"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket(0x18, 0x800, 0x7) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x44, r1, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xdf, 0x66}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000040)={r12, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000004c0)={r12, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r11, 0x107, 0x2, &(0x7f0000000100)={r12, 0x1, 0x6, @multicast}, 0x10) 1.93769567s ago: executing program 1 (id=15219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x1e0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x1bc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xfb, 0x0, 0x6, 0x0, 0xd, 0x8d, 0x1}}, {0x6, 0x2, [0x52]}}, {{0x1c, 0x1, {0x0, 0xff, 0x200, 0x5, 0x4, 0x4, 0x4, 0x3}}, {0xa, 0x2, [0x5, 0x0, 0x0]}}, {{0x1c, 0x1, {0x1, 0x81, 0x0, 0x4, 0x0, 0x4, 0x400, 0x6}}, {0x10, 0x2, [0x7, 0x4, 0x6, 0x5, 0x2, 0x2164]}}, {{0x1c, 0x1, {0x0, 0x6, 0x5, 0x7ff, 0x2, 0xe, 0x7fff, 0xa}}, {0x18, 0x2, [0x401, 0x101, 0x17, 0x1, 0x2, 0x4, 0x1, 0x6, 0x8, 0xcd4d]}}, {{0x1c, 0x1, {0x0, 0x5, 0x101, 0x35, 0x3, 0x3ff, 0x1000, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x6, 0x7, 0x21, 0x4, 0x2, 0x200, 0x80020002, 0x7}}, {0x12, 0x2, [0x2, 0x2, 0xb, 0x108, 0x3, 0x1, 0x400]}}, {{0x1c, 0x1, {0x8, 0x29, 0x7, 0x80, 0x0, 0x0, 0xfffffffe, 0x6}}, {0x10, 0x2, [0x2, 0x0, 0x7f, 0x9, 0x7, 0x9]}}, {{0x1c, 0x1, {0x5, 0x1, 0x10, 0x10, 0x1, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0xb, 0x6, 0x2, 0x5, 0x0, 0x89c, 0x5, 0x2]}}, {{0x1c, 0x1, {0x0, 0xc, 0x3, 0x9, 0x0, 0xf, 0x2, 0x7}}, {0x12, 0x2, [0x8001, 0x6, 0x8, 0x97, 0x4, 0x3, 0x9]}}, {{0x1c, 0x1, {0xfd, 0x8, 0x32, 0x1a, 0x0, 0x7, 0x2, 0x6}}, {0x10, 0x2, [0xff, 0x800, 0x25f, 0x4, 0x3, 0x2]}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x200400d4) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r3 = socket$kcm(0x11, 0x3, 0x0) (rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0x9}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) (async, rerun: 64) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000040, 0x0) (async, rerun: 64) r9 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r11 = socket(0x2e, 0x3, 0xffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) 1.86103527s ago: executing program 4 (id=15221): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) (async) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="f80100"}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 1.86047007s ago: executing program 0 (id=15222): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "a418677b458acc7314b528ed5308778a8994cb84383611c0ee6b030b63a8dedd", "d1bb4da57c30cd497a0e00b6dbc41a2db117a710c7de150f1ce79a63780614fa", "b409faa2df8a73767748c3f3fa48240569f98e06451be5d6b06171321d22d40f", "f8ce98c8de29835ba3eb8e51c18946d8ce0d7e5c2bbb15eed2091c4b8606ea0c", "e77196ba0032b7265147ccafa506fdc700", "67ad31fff1906765610a2a06", 0xffffffff, 0x4, 0x4, 0x1fe, 0x4}}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) 1.657298825s ago: executing program 0 (id=15223): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x1, 0x1000000, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x400, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r2, 0x0, 0x0, 0x9, 0x5, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x7}}) 1.293567691s ago: executing program 6 (id=15224): syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x43}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x20, 0x72, 0x333, 0x6, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}}, 0x20000050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8b}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.157372948s ago: executing program 1 (id=15225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40080) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x2, 'ip_vti0\x00', {0x6}, 0x1}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x20, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x7b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f00000002c0)=0x100) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.156970758s ago: executing program 0 (id=15226): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48874}, 0x4800) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) 1.156576607s ago: executing program 4 (id=15227): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @rand_addr=0x64010101}}, {{0x2, 0x0, @local}}}, 0x108) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000040000000000", @ANYRES32=0x0, @ANYBLOB="00910000028000002800128009000100766c616e000000001800028006000100020000000c0002002a0000000700000008000500", @ANYRES32=r1, @ANYBLOB], 0x50}}, 0x0) 1.139148556s ago: executing program 6 (id=15228): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x2c565e7ddb736e6a, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@call={0x85, 0x0, 0x0, 0x9d}, @generic={0x3, 0x3, 0x6, 0xcb, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0xb7, &(0x7f0000000340)=""/183, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x4, 0x2, 0x7fffffff}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000480)=[{0x4, 0x4, 0xe, 0x2}, {0x1, 0x2, 0x2, 0x1}, {0x2, 0x5, 0x0, 0x2}, {0x3, 0x4, 0xa, 0x6}, {0x4, 0x3, 0x7, 0xa}]}, 0x94) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40001010}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40804) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000005c0)=r5, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x2b3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, 0x400}) (async) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x2b3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, 0x400}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x4c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x881) 1.077548528s ago: executing program 0 (id=15229): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x48, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x12, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0x4e20, 0x12, 0x0, @gue={{0x2, 0x1, 0x2, 0x4, 0x2af8e7a50f582d9a, @val=0x80}, "3cec"}}}}}}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/17, 0x11, 0x1, &(0x7f0000000080)=""/233, 0xe9}, &(0x7f0000000200)=0x40) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/117, 0x75, 0x0, &(0x7f0000000300)=""/38, 0x26}, &(0x7f0000000380)=0x40) sendmmsg$inet6(r1, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8c7f93a965", 0xfffffe47}], 0x1}}], 0x1, 0x0) 889.690758ms ago: executing program 5 (id=15230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) 889.356949ms ago: executing program 4 (id=15231): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x1, 0x2, 0x802, 0x0, 0x0, {0x6, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x9c}}, 0x4) r7 = socket(0x2, 0x3, 0x1) getsockopt$MRT(r7, 0x0, 0xd0, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 717.206478ms ago: executing program 1 (id=15232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000000)=@raw=[@alu={0x4, 0x1, 0x6, 0x5, 0xb, 0xc, 0xffffffffffffffff}, @map_val={0x18, 0x1, 0x2, 0x0, r0}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) 681.890015ms ago: executing program 6 (id=15233): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000380)="3418", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, 0x0, &(0x7f00000002c0)=""/26}, 0x20) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x519fd189, 0x4) listen(r2, 0x8) 609.244642ms ago: executing program 5 (id=15234): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0x0, 0xff000000], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0xbc529153b073ce1e, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x40}, @empty, [0x0, 0xffffff00], [0x0, 0xff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000340)) r3 = socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x4c}}, 0x2000a100) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'ipvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'ipvlan1\x00'}) 538.9352ms ago: executing program 4 (id=15235): r0 = socket(0x22, 0x2, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x8080) sendmmsg$alg(r0, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="44a1875a5e3d432dcbd9322fe266e97ed85814d7de3153f0fffb10bd114fbf3e5bc03bc37484d585b7205d00769c1c267f3ac18dd8cc3accc00a8fa92ca6adabcbd4108531ee8a52672d2bcae39c277f33cea3", 0x53}, {&(0x7f0000000080)="efd3dda37596f3484a62570222dd961d1a7d8cf33ec14ee86026cd65f40f89b5cca9fb37c5ed32ab473f7710fd4237afbcc8b56882e0be7733e0b19036509c27bdc43f08a4339e63d7cd6f2a8a344164f56037617180ee9b8ff7279a3b042521fe952101479db6", 0x67}, {&(0x7f0000000100)="37e374d851d6f8c2b98af1ad4b2925e8a1cc6aa60d8281100c47ee369a9da3ec4e962f7726891780c00b457153640a26830aed", 0x33}], 0x3, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x20000004) 492.184137ms ago: executing program 6 (id=15236): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="f51cd12150816a2ba4e93c70d3ab9251d011a119c0a0bd", 0x17}, {&(0x7f0000000040)="2321fd251640680e0722dcaec284fae45fd5c283cf1e6d3b3b46f5a735d1f8a711b14865707257c158e9896d6e557bcc1920", 0x32}, {&(0x7f00000000c0)="f1a9ad35b3c771d20c8ea152002a996f8c88bff86701c572467ace190c1da1c009582d76f18b3625117011524ad108dd524159b94751ab47cc11603d5cca6d554b49a98ce552f6dc0c2a01655dfff2a25398d3bbf8e56a3fd9adab0c7cf8a4d04e9c4a6b5e69864481d1e0c219af659b40615364169058b44f717f790262b7b5ebd274811ad58a44c5ffa35a38c569fe06f9180cd0267aea3b493f05798af2dfda0e9580895e1ff02e94afed108d57d4ade0b7c74a69c5cf7cdb98f8422ebef7f66e554f9c", 0xc5}, {&(0x7f00000022c0)="ccd14d667a379245ad18210cb3811662cb41bda64c221f5f63940ed5484fbf6549b540935a8c38ecf7df4ab5089365e6108ad6619cd32997b49d57c62c2fd744254689a2a959d26c0478baa9da5d908117af89ee2b42ae2025f6311003dd31feb466264a7eb16aaf4b5e4164cc2360d494fe5551c4802172ec1a128154cb8bae8a5a8b598bb9bf66c61cca42df91fee89ab2dd65ea553acb6a5f3f6e1fd790b803bed568f99a152da6a470a1efcbdfa5f7ac7d97d135d040bc5b472953e62971399b839fa7c7d999e5d60a69dabd13", 0xcf}], 0x4, 0x0, 0x0, 0x400c080}], 0x1, 0x8080) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000640)=""/35, 0x23}], 0x3}, 0x5}], 0x1, 0x2001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_bridge\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 401.401766ms ago: executing program 1 (id=15237): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x5}}, 0x19) connect$tipc(r1, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xf8, 0x4, 0x64, 0x8, 0x0, 0xb, 0x1, 0x34, 0x7, 0x8, 0x87, 0x4, 0x0, 0x8}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @loopback}]}, &(0x7f0000000000)=0x10) socketpair(0x26, 0x6, 0x7, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) close(0x4) close(r9) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x5, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 316.813118ms ago: executing program 4 (id=15238): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="f6fe83482a3a92dafa56d20e284fd3bd5f88046b2a47c61a3bb47171a374dd", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1}, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="fff50000140003000700000000000000000000000000000014000100ff"], 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000f7dbdf253a00000008000300", @ANYRES32=r5, @ANYBLOB="011061686cdedbe719dc0103504acebc9ec8a05400b7153f64b4e2591d3a8ba746cba9a0aaf8cc53db9e539469eea05acaebe45c0de702cf25f5f38ea34133024d0eddb9ec132a490380b46b271c2d13343e24e47ee3e3e5f30d1658e270465053b8cda12695b6660f16291c44e591b386d43185fa86e8"], 0x20}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x8905, &(0x7f0000000100)) (async) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) (async) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r10, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r11, 0x4) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r12, r9, 0x0, r8}, 0x10) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x8]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x3}, {}, {}, {}, {0x3}, {0x0, 0xe3bf}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 262.172509ms ago: executing program 0 (id=15239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x5}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01040000000002000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000734000000180a0101000b000000000000010000000900020073797a30144577022bdf087f88a15112146c00000000090001e60073797a30000000000800038004000380140000001000010000000000000000000000000a"], 0xbc}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000002c0)=@nfc={0x27, r5, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)="590590176fb1d871a795c575527eecf0a4e56cf0dc8f012ce85aece614fb", 0x1e}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)}], 0x3, &(0x7f0000001400)=[{0xf0, 0x111, 0x1, "82c17d92fa0c8fefc9ef881a4fdcef3de4aa2f28643e82f06634bd5ee9adf45d9e1745aee061760f487576fe7042030c406650fffac7612c05eb447bf01a93700bd23c2d8346beea9ee28c4b71b502ecec852dfeed9a06e48f616633b282b0343dbdd73874c2dc985ac35e69ff1321c634781361f040e79c8a035ba299e34fef3163a545e0754f837bc0e15e794b3b56adf26751bc772a24fd304ae15911b22f66478d3ca0900f5b3a260e9665b16877273f8cb002f63373ed1f6cda696c2c031b7afc6d1c9ad3ed35b166e02fe9aa4f253ce4bea3e4c482602fe266"}, {0x20, 0x103, 0x37f, "96925d0ea2c82230f655fcf730"}, {0x28, 0x102, 0x3, "e9fcfe9fd6da30ed93a69af4b7ea8e63e141cc1cdd"}, {0x48, 0x10c, 0x8, "6f8fb640a7c027bf480fdf1a00fad2292d64d30f5c73b3323c23cc7d7638d04894c3d5ca3619749a5e63c7142425df3f74"}], 0x180}, 0x20044090) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x6, 0x1, ']\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001780)=0x0) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000001a00)={&(0x7f0000001740), 0xc, &(0x7f00000019c0)={&(0x7f00000017c0)={0x1fc, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_VENDOR_DATA={0x100, 0x1f, "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"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_VENDOR_DATA={0xbd, 0x1f, "d511f9c018b0493006365b732f255bff48f27552729dd3d5c239da25ef26284c6dd90e224575ecf56dd9f9c9bcf49dde4bb35e7721a1343fee5b45316a034cf6e181d5fb306a3c5c7d85b1dea5332f1c402d1df28b7f991d4494fde991445891ca515dda7d6a6e7eeb62786f56abb982244a3bcdd3e989c9ea0afcda6a4a7d32ee2e1eb00ef81d161abe4ae31a3454a006d115b27e05c772f6cee249bec255f36153aad72ade83f60ef765d3fbfbb53980ce1a00e4ddcdeefd"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x80000001}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, "a0"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0x58, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=@newqdisc={0x3c, 0x24, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x9, 0xa}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0xff, 0xce}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 165.442467ms ago: executing program 6 (id=15240): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000240)={0x1, 0x2}, 0x8) pipe(&(0x7f0000000600)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01"], 0x1c}}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000002}}], 0x18}}], 0x1, 0x8854) sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@can_delroute={0x3c, 0x19, 0x1, 0x1000, 0x0, {0x1d, 0x1, 0x1}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "89543896f10eee1e"}, 0x2}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0x0, 0xfffffffffffffff8}}]}, 0x3c}}, 0x0) 146.565465ms ago: executing program 5 (id=15241): syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6015690900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be0800633f8018"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x4}, {0x6}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0xc0000) syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6015690900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be0800633f8018"], 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x4}, {0x6}]}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) listen(r1, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0xc0000) (async) 68.509693ms ago: executing program 1 (id=15242): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)="8414a2ce64638a509900a9a74bb01c", 0xf) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000a00000005"], 0x1c}}, 0x0) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x9, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dvmrp1\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 937.016µs ago: executing program 4 (id=15243): r0 = socket$inet(0x10, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)}, 0x12141) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)}, 0x12141) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4814a84dee498b7f71f5cd480104000000035598000000", @ANYRES32=0x0, @ANYBLOB="0000000200000000200012800c0001006d6163766c616e00100002800a0009000180c20000030000080005002f6e04644b09195fbea144d7db770437ff54ed6ec61e1b8fccfc285f506601d9040dd09361ab9b92d6b3d3", @ANYRES32=r2, @ANYBLOB="45d0d16979aa9b11827f3216dee6b442b93e193d53ac6b2b65375755873bbec2ba506b254ec6fba3616ef79e5236bfa6bfb2ef8e3bf65eb4f7afdccd49102bbb170176226bceadbb5121163ba65ccbd54993134febe2c200202c93c8dfee5e6c38b4eeeb0814e850769a772744ce20ecd4a62e4be80ed2378c5798610ea693b76fe5b04a3adef1d50d3b7647f568ed8795176388f417256d6585ab9b880c827b20ff1701bb2784f7ad"], 0x48}}, 0x0) socket$inet(0xa, 0x801, 0x84) (async) r4 = socket$inet(0xa, 0x801, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r6) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1d3200000000990c00001000000008000400ac1414aa0500010010000000"], 0x24}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1d3200000000990c00001000000008000400ac1414aa0500010010000000"], 0x24}}, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r8 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$bt_hci(r8, 0x84, 0x7d, &(0x7f00000010c0)=""/4100, &(0x7f0000000200)=0x1004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073116f00000000008510ffff02000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 6 (id=15244): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000000)=r2}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x5, &(0x7f0000001300)=@raw=[@ldst={0x3, 0x0, 0x2, 0x5, 0x6, 0x20}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}], &(0x7f0000001340)='GPL\x00', 0x3, 0x15, &(0x7f0000001380)=""/21, 0xb621a5927ac5a90f, 0x34, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001400)={0x3, 0xb, 0x2, 0x401}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001440)=[{0x5, 0x4, 0x5, 0x9}, {0x2, 0x1, 0x0, 0x17}, {0x4, 0x3, 0xf, 0xa}, {0x1, 0x2, 0x3, 0xb}, {0x4, 0x3, 0x0, 0x1}, {0x1, 0x5, 0x6}, {0x2, 0x3, 0xb, 0x1}], 0x10, 0x1}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={0xffffffffffffffff, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000014c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001500)=[0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0], 0x0, 0x2f, &(0x7f0000001580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000001640)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001900)={'syztnl2\x00', &(0x7f0000001880)={'ip6tnl0\x00', 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7, 0xfff, 0x6}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000019c0)={0xffffffffffffffff, 0x58, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001ac0)={@private, @empty, 0x0}, &(0x7f0000001b00)=0xc) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)=0x4) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x1c, r13, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) (async) r16 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r14) sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r15, @ANYBLOB="5200028040000100240001006c625f686173685f73746174730000000000000000000000000000000000000005fd02000b000000cbff0400010000000800070000000000244f78a808"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c40)={0x1, 0x58, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f00)={&(0x7f0000001c80)=ANY=[@ANYBLOB="74020000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf25020000002400018008000300020000000800030001000000080003000100000008000300020000004c000180140002006c6f000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="4400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140000006970766c6101310000000000000044e28627a4126000003c", @ANYRES32=0x0, @ANYBLOB="140002006970366772653000000000000000000014000200766972745f776966693000000000000008000100", @ANYRES32=0x0, @ANYBLOB="6800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006361696630000000000000000000000014000200776c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="140002006970365f76746930000000000000000040000180140002007665746831000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0800030000000000080003000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="2c00018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000100000008000100", @ANYRES32=r11, @ANYBLOB="6c000180140002006272696467655f736c6176655f3100001400020076657468315f766c616e000000000000080003000100000008000100", @ANYRES32=r15, @ANYBLOB="0800030001000000140002006c6f0000000000000000000000000000140002006272696467655f736c6176655f300000300001800800030002000000080003000100000008000100", @ANYRES32=r17, @ANYBLOB="1400020076657468315f746f5f7465616d000000"], 0x274}, 0x1, 0x0, 0x0, 0x800}, 0x2004c804) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) r18 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): available [ 1465.740404][T23681] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.13399'. [ 1466.107090][T23699] syzkaller0: entered promiscuous mode [ 1466.114430][T23699] syzkaller0: entered allmulticast mode [ 1466.152896][T23704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13409'. [ 1466.167448][T23704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13409'. [ 1466.387524][T23714] syzkaller0: entered promiscuous mode [ 1466.397238][T23714] syzkaller0: entered allmulticast mode [ 1466.555416][T23721] syzkaller0: entered promiscuous mode [ 1466.576712][T23721] syzkaller0: entered allmulticast mode [ 1466.709854][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1467.755135][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1468.799250][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1469.195543][T23736] bridge0: port 1(macsec1) entered blocking state [ 1469.203497][T23736] bridge0: port 1(macsec1) entered disabled state [ 1469.210766][T23736] macsec1: entered allmulticast mode [ 1469.218383][T23736] macsec1: left allmulticast mode [ 1469.664651][T23765] syzkaller0: entered promiscuous mode [ 1469.676349][T23765] syzkaller0: entered allmulticast mode [ 1469.839257][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1470.149084][T23789] xt_policy: output policy not valid in PREROUTING and INPUT [ 1470.248921][T23794] syz_tun: entered allmulticast mode [ 1470.460861][T23806] x_tables: duplicate underflow at hook 1 [ 1470.490915][T23806] netlink: 'syz.0.13437': attribute type 3 has an invalid length. [ 1470.542538][T23806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13437'. [ 1470.626841][T23811] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1470.648646][T23811] bond4 (unregistering): Released all slaves [ 1470.692470][T23812] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13438'. [ 1470.862356][T23821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13440'. [ 1470.879528][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1470.933600][T23826] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.13441'. [ 1470.955537][T23826] netlink: ct family unspecified [ 1471.112882][T23837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13443'. [ 1471.307780][T23843] dvmrp0 speed is unknown, defaulting to 1000 [ 1471.350156][T22708] Bluetooth: hci1: command 0x0405 tx timeout [ 1471.623273][T23855] netlink: 27 bytes leftover after parsing attributes in process `syz.3.13447'. [ 1471.820431][T23859] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13449'. [ 1471.919261][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1472.026025][T23863] x_tables: duplicate underflow at hook 2 [ 1472.959254][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1473.100154][T23900] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13462'. [ 1473.115058][T23899] netlink: 'syz.1.13463': attribute type 64 has an invalid length. [ 1473.125475][T23899] netlink: 5 bytes leftover after parsing attributes in process `syz.1.13463'. [ 1473.489935][T23911] openvswitch: netlink: Key type 346 is out of range max 32 [ 1473.604096][T23918] netlink: 'syz.3.13468': attribute type 3 has an invalid length. [ 1473.633391][T23918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13468'. [ 1473.651348][T23918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1473.658709][T23918] IPv6: NLM_F_CREATE should be set when creating new route [ 1473.698473][T23918] netlink: 'syz.3.13468': attribute type 3 has an invalid length. [ 1473.799501][T14766] lec:lec_start_xmit: lec0:No lecd attached [ 1473.990909][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1474.038544][T23944] Bluetooth: MGMT ver 1.23 [ 1474.178696][T23946] ÿ: renamed from bond_slave_1 [ 1474.354979][T23963] gtp0: entered promiscuous mode [ 1474.361418][T23963] gtp0: entered allmulticast mode [ 1474.411073][T23964] syzkaller1: entered promiscuous mode [ 1474.416634][T23964] syzkaller1: entered allmulticast mode [ 1475.039932][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1475.286877][T24007] netlink: 'syz.5.13493': attribute type 62 has an invalid length. [ 1475.574080][T24016] __nla_validate_parse: 3 callbacks suppressed [ 1475.574105][T24016] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13497'. [ 1475.594075][T24014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13494'. [ 1475.633935][T24014] "syz.1.13494" (24014) uses obsolete ecb(arc4) skcipher [ 1475.825549][T24040] netlink: 'syz.1.13494': attribute type 11 has an invalid length. [ 1475.862083][T24039] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1476.069417][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1476.403587][T24066] netlink: 164 bytes leftover after parsing attributes in process `syz.1.13508'. [ 1476.728756][T24088] netlink: 'syz.4.13512': attribute type 1 has an invalid length. [ 1476.737638][T24088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13512'. [ 1476.751643][T24088] netlink: 'syz.4.13512': attribute type 1 has an invalid length. [ 1476.763267][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1476.773117][T24092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1476.773156][T24092] netlink: 'syz.0.13514': attribute type 1 has an invalid length. [ 1476.773172][T24092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1476.773317][T24092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1476.773337][T24092] netlink: 'syz.0.13514': attribute type 1 has an invalid length. [ 1476.773352][T24092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1476.792684][T24092] netlink: 'syz.0.13514': attribute type 10 has an invalid length. [ 1476.838737][T24091] netlink: 'syz.0.13514': attribute type 1 has an invalid length. [ 1476.848401][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1476.876634][T24088] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1477.071937][T24111] Set syz1 is full, maxelem 8 reached [ 1477.109302][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1477.282067][T24116] veth0_macvtap: left promiscuous mode [ 1477.428441][T24130] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1478.159242][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1478.191523][T24174] netlink: 'syz.1.13538': attribute type 9 has an invalid length. [ 1478.191523][T24175] netlink: 'syz.1.13538': attribute type 9 has an invalid length. [ 1478.191552][T24174] netlink: 'syz.1.13538': attribute type 11 has an invalid length. [ 1478.281664][T24183] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1478.481996][T24188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.949361][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5150 ms [ 1478.957462][ C1] lec:lec_tx_timeout: lec0 [ 1479.024911][T24223] xt_hashlimit: invalid interval [ 1479.189834][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1479.334797][T24241] vlan4: entered promiscuous mode [ 1479.355627][T24241] vlan4: entered allmulticast mode [ 1479.364645][T24246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1479.417938][T24241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1479.672647][T24264] Cannot find set identified by id 65534 to match [ 1479.948172][ T6056] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1479.976563][ T6056] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.014875][ T6056] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.033104][ T6056] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.108950][T24274] bond7: entered promiscuous mode [ 1480.116706][T24274] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1480.167776][T24280] bond0: (slave wlan1): Opening slave failed [ 1480.235128][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1480.283070][T24297] sctp: [Deprecated]: syz.1.13573 (pid 24297) Use of int in max_burst socket option deprecated. [ 1480.283070][T24297] Use struct sctp_assoc_value instead [ 1480.603660][ T6056] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.614528][ T6056] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.624804][ T6056] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.642265][ T6056] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.698072][T24289] bond7: (slave bridge6): making interface the new active one [ 1480.708269][T24289] bridge6: entered promiscuous mode [ 1480.718854][T24289] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1480.840913][T24266] syzkaller0: entered promiscuous mode [ 1480.846548][T24266] syzkaller0: entered allmulticast mode [ 1481.279265][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1482.309965][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1483.184382][T24315] __nla_validate_parse: 16 callbacks suppressed [ 1483.184412][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13577'. [ 1483.349327][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1483.676601][T24343] netlink: 276 bytes leftover after parsing attributes in process `syz.5.13589'. [ 1483.856225][T24357] veth0_to_hsr: entered promiscuous mode [ 1483.870564][T24357] veth0_to_hsr: entered allmulticast mode [ 1483.888407][T24363] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1483.926266][T24363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1484.230547][T24381] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13599'. [ 1484.247483][T24387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13600'. [ 1484.399301][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1484.648816][ T1291] lec:lec_start_xmit: lec0:No lecd attached [ 1484.656534][ T1291] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1484.971319][T24420] validate_nla: 7 callbacks suppressed [ 1484.971344][T24420] netlink: 'syz.1.13607': attribute type 1 has an invalid length. [ 1485.003872][T24424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13609'. [ 1485.021067][T24423] tipc: Trying to set illegal importance in message [ 1485.032149][T24420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1485.429251][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1485.692292][T24458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13619'. [ 1485.916781][T24471] xt_cluster: node mask cannot exceed total number of nodes [ 1486.376903][T24503] netlink: 'syz.3.13633': attribute type 9 has an invalid length. [ 1486.420777][T24507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13633'. [ 1486.431849][T24507] netlink: 'syz.3.13633': attribute type 9 has an invalid length. [ 1486.440339][T24507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13633'. [ 1486.450476][T24503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13633'. [ 1486.479491][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1486.499619][T24503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13633'. [ 1486.509489][T31997] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1486.523290][T31997] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1486.540660][T24503] netlink: 'syz.3.13633': attribute type 9 has an invalid length. [ 1486.544926][T31997] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1486.580894][T31997] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1486.612591][T24503] netlink: 'syz.3.13633': attribute type 9 has an invalid length. [ 1486.633743][T24503] netlink: 'syz.3.13633': attribute type 9 has an invalid length. [ 1486.645916][T24503] netlink: 'syz.3.13633': attribute type 9 has an invalid length. [ 1486.661574][T24503] netlink: 'syz.3.13633': attribute type 9 has an invalid length. [ 1486.691581][T24503] netlink: 'syz.3.13633': attribute type 9 has an invalid length. [ 1486.709624][T22708] Bluetooth: hci3: command 0x0406 tx timeout [ 1486.732068][T24503] netlink: 'syz.3.13633': attribute type 9 has an invalid length. [ 1486.925334][T24526] openvswitch: netlink: Multiple metadata blocks provided [ 1487.509288][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1488.549374][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1489.176886][T24489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1489.436144][T24552] __nla_validate_parse: 66 callbacks suppressed [ 1489.436165][T24552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13647'. [ 1489.589235][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1489.729110][T24560] syzkaller1: entered promiscuous mode [ 1489.768868][T24560] syzkaller1: entered allmulticast mode [ 1489.791655][T24578] netlink: 88 bytes leftover after parsing attributes in process `syz.4.13653'. [ 1489.793431][T24570] dvmrp0 speed is unknown, defaulting to 1000 [ 1489.989280][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 1489.997386][ C1] lec:lec_tx_timeout: lec0 [ 1490.117191][T24591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13658'. [ 1490.191984][T24591] macvlan2: entered allmulticast mode [ 1490.218869][T24591] hsr0: entered allmulticast mode [ 1490.225721][T24591] hsr_slave_0: entered allmulticast mode [ 1490.244064][T24591] hsr_slave_1: entered allmulticast mode [ 1490.611618][T24611] validate_nla: 25 callbacks suppressed [ 1490.611639][T24611] netlink: 'syz.3.13664': attribute type 5 has an invalid length. [ 1490.629240][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1490.678462][T24617] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1490.709571][T24611] netlink: 140 bytes leftover after parsing attributes in process `syz.3.13664'. [ 1490.761564][T24611] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13664'. [ 1490.776309][T24617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13665'. [ 1490.897256][T24628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13667'. [ 1491.063201][T24633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13669'. [ 1491.084820][T24633] openvswitch: netlink: Flow key attr not present in new flow. [ 1491.101823][T24634] bond0: (slave gre0): refused to change device type [ 1491.277094][T24634] xt_CT: No such helper "snmp_trap" [ 1491.409046][T24648] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13673'. [ 1491.483508][T24651] lo: Caught tx_queue_len zero misconfig [ 1491.507248][T24651] netem: incorrect gi model size [ 1491.533432][T24651] netem: change failed [ 1491.663286][T24658] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1491.670019][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1491.680454][T24657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13677'. [ 1491.746973][T24660] bond0: Caught tx_queue_len zero misconfig [ 1491.793630][T24666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1491.945458][T24672] netlink: 'syz.1.13681': attribute type 2 has an invalid length. [ 1492.016658][T24676] openvswitch: netlink: IP tunnel dst address not specified [ 1492.266302][T24679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1492.709258][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1492.735318][T24709] veth0: entered promiscuous mode [ 1492.767797][T24709] veth0: left promiscuous mode [ 1492.919102][T24723] netlink: 'syz.5.13702': attribute type 1 has an invalid length. [ 1492.933907][T24725] x_tables: duplicate underflow at hook 2 [ 1492.946444][T24725] x_tables: duplicate underflow at hook 2 [ 1493.162499][T24723] bond3: entered promiscuous mode [ 1493.168262][T24723] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1493.759252][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1493.986659][T31998] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.084335][T31998] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.115610][T31998] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.152636][T31998] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.704171][T24805] __nla_validate_parse: 10 callbacks suppressed [ 1494.704194][T24805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13722'. [ 1494.742486][T24802] syzkaller0: entered promiscuous mode [ 1494.748038][T24802] syzkaller0: entered allmulticast mode [ 1494.789241][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1495.172310][T24815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13725'. [ 1495.222121][T24815] netlink: 'syz.4.13725': attribute type 1 has an invalid length. [ 1495.261180][T24815] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13725'. [ 1495.304367][T24819] bond4: entered promiscuous mode [ 1495.311085][T24799] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1495.335004][T24799] bond9: (slave lo): Enslaving as an active interface with an up link [ 1495.347874][T24799] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1495.839468][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1495.856454][T24850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13734'. [ 1495.877639][T24846] netlink: 'syz.1.13732': attribute type 10 has an invalid length. [ 1495.906650][T24850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13734'. [ 1495.926050][T24846] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1496.879233][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1497.006891][T24897] openvswitch: netlink: IP tunnel dst address not specified [ 1497.153991][T24901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13751'. [ 1497.205242][T24901] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1497.231221][T24901] bond9: (slave lo): Enslaving as an active interface with an up link [ 1497.275962][T24901] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1497.790656][T24928] netlink: 'syz.3.13759': attribute type 39 has an invalid length. [ 1497.909230][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1497.917747][T24933] xt_hashlimit: size too large, truncated to 1048576 [ 1498.020882][T24936] syzkaller0: entered promiscuous mode [ 1498.026427][T24936] syzkaller0: entered allmulticast mode [ 1498.165461][T24940] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13762'. [ 1498.213080][T24936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13762'. [ 1498.387866][T24951] bond0: entered promiscuous mode [ 1498.440735][T24951] bridge0: entered promiscuous mode [ 1498.492767][T24955] nbd: socks must be embedded in a SOCK_ITEM attr [ 1498.513986][T24955] tipc: Started in network mode [ 1498.518929][T24955] tipc: Node identity , cluster identity 4711 [ 1498.525830][T24955] tipc: Failed to obtain node identity [ 1498.535406][T24955] tipc: Enabling of bearer rejected, failed to enable media [ 1498.641793][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13770'. [ 1498.663080][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13770'. [ 1498.950182][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1499.783186][T25025] __nla_validate_parse: 4 callbacks suppressed [ 1499.783206][T25025] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13787'. [ 1499.974587][T25034] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13790'. [ 1499.990880][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1500.154273][T25040] x_tables: duplicate underflow at hook 2 [ 1500.169351][T25040] netlink: 'syz.3.13792': attribute type 1 has an invalid length. [ 1500.194385][T25040] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13792'. [ 1500.713198][T25055] netlink: 140 bytes leftover after parsing attributes in process `syz.3.13796'. [ 1501.029235][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1501.154937][T25075] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13799'. [ 1501.364938][T25084] pimreg3: entered allmulticast mode [ 1501.399406][T25086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13805'. [ 1501.452215][T25087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13805'. [ 1501.844962][ T4212] IPVS: starting estimator thread 0... [ 1501.964857][T25113] IPVS: using max 27 ests per chain, 64800 per kthread [ 1502.037447][T25126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13817'. [ 1502.046998][T25126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13817'. [ 1502.059374][T25126] netlink: 'syz.3.13817': attribute type 3 has an invalid length. [ 1502.069850][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1502.074585][T22708] Bluetooth: hci2: command 0x0405 tx timeout [ 1502.088692][T25122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13818'. [ 1502.144871][T25122] vlan7: entered promiscuous mode [ 1502.192985][T25122] syz_tun: entered promiscuous mode [ 1502.306948][T25132] tipc: Resetting bearer [ 1502.320423][T25132] tipc: Resetting bearer [ 1502.436996][T25132] netlink: 'syz.3.13821': attribute type 16 has an invalid length. [ 1502.449604][T25132] netlink: 'syz.3.13821': attribute type 17 has an invalid length. [ 1502.458059][T25132] lo: left promiscuous mode [ 1502.533179][T25132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1502.717006][T25142] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1502.763119][T25142] bond11 (unregistering): Released all slaves [ 1503.065059][T25169] netlink: 'syz.5.13829': attribute type 11 has an invalid length. [ 1503.109841][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1503.325633][T25183] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 1503.902438][T25206] syzkaller0: entered promiscuous mode [ 1503.923599][T25206] syzkaller0: entered allmulticast mode [ 1504.149251][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1504.150759][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 1504.531357][T25234] netlink: 'syz.1.13845': attribute type 1 has an invalid length. [ 1504.631382][T25240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.037157][T25263] netlink: 'syz.1.13854': attribute type 17 has an invalid length. [ 1505.066122][T25258] __nla_validate_parse: 5 callbacks suppressed [ 1505.066142][T25258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13853'. [ 1505.086930][T25264] netlink: 'syz.1.13854': attribute type 17 has an invalid length. [ 1505.107218][T25263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13854'. [ 1505.127951][T25258] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1505.154254][T25264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13854'. [ 1505.185945][T25263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13854'. [ 1505.195816][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1505.229870][T25264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13854'. [ 1505.883773][T25282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13859'. [ 1505.920388][T25282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13859'. [ 1506.132426][T25290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1506.135877][T25288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1506.229238][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1506.310796][T32001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.383582][T25303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13866'. [ 1506.513117][T25302] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13868'. [ 1506.574661][T25313] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1506.640791][T25313] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 1506.679879][T25302] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13868'. [ 1507.012391][T25327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.023650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.180323][T25339] sch_fq: defrate 0 ignored. [ 1507.269240][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1507.597350][T25354] netlink: 'syz.5.13879': attribute type 6 has an invalid length. [ 1507.846259][T25361] dvmrp0 speed is unknown, defaulting to 1000 [ 1508.319322][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1508.644120][T25395] netlink: 'syz.1.13889': attribute type 1 has an invalid length. [ 1508.803347][T25397] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1508.813303][T25397] bond10: (slave bond11): making interface the new active one [ 1508.823019][T25397] bond10: (slave bond11): Enslaving as an active interface with an up link [ 1508.873802][T25395] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1509.974733][T25459] dvmrp0 speed is unknown, defaulting to 1000 [ 1510.338863][T25485] __nla_validate_parse: 15 callbacks suppressed [ 1510.338884][T25485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13913'. [ 1510.389926][ C0] net_ratelimit: 1 callbacks suppressed [ 1510.389950][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1510.606445][T25493] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1510.623754][T25493] bond12 (unregistering): Released all slaves [ 1511.023710][T25514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13919'. [ 1511.144644][T25519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13921'. [ 1511.177540][T25522] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.13922'. [ 1511.326141][T25531] veth0_virt_wifi: entered promiscuous mode [ 1511.332978][T25531] veth0_virt_wifi: entered allmulticast mode [ 1511.439243][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1511.538072][T25544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13925'. [ 1511.668345][T25549] x_tables: duplicate underflow at hook 2 [ 1511.712803][T25544] syzkaller0: entered promiscuous mode [ 1511.974609][T25558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13931'. [ 1512.151938][T31999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.160843][ T4212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.170340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.481811][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1513.514166][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1514.295083][T25564] dvmrp0 speed is unknown, defaulting to 1000 [ 1514.333564][T25569] netlink: 'syz.1.13933': attribute type 2 has an invalid length. [ 1514.357304][T25569] netlink: 258 bytes leftover after parsing attributes in process `syz.1.13933'. [ 1514.380613][T25569] netlink: 'syz.1.13933': attribute type 2 has an invalid length. [ 1514.390937][T25569] netlink: 258 bytes leftover after parsing attributes in process `syz.1.13933'. [ 1514.411571][T25573] netlink: 'syz.0.13934': attribute type 16 has an invalid length. [ 1514.428870][T25573] netlink: 'syz.0.13934': attribute type 17 has an invalid length. [ 1514.491681][T25573] erspan0: left promiscuous mode [ 1514.535002][T25573] ip6_vti0: left promiscuous mode [ 1514.549828][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1514.583268][T25573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.593237][T25573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.604668][T25573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1515.089513][T25594] delete_channel: no stack [ 1515.589234][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1515.606291][T25615] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13948'. [ 1515.623173][T25615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13948'. [ 1515.633853][T25615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13948'. [ 1515.644978][T25615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13948'. [ 1515.723290][T25613] syzkaller0: entered promiscuous mode [ 1515.749581][T25613] syzkaller0: entered allmulticast mode [ 1516.043475][T25642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13957'. [ 1516.083774][T25642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13957'. [ 1516.145728][T25644] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1516.250884][T25646] veth1_macvtap: left promiscuous mode [ 1516.365748][T25656] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.13963'. [ 1516.629399][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1516.762367][T25673] syzkaller0: entered promiscuous mode [ 1516.767879][T25673] syzkaller0: entered allmulticast mode [ 1516.776808][T25673] netlink: 'syz.5.13968': attribute type 11 has an invalid length. [ 1516.788467][T25673] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13968'. [ 1517.185991][T25691] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1517.286433][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13977'. [ 1517.314158][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13977'. [ 1517.446437][T25704] : renamed from vlan0 (while UP) [ 1517.547608][T25711] tipc: Enabling of bearer rejected, failed to enable media [ 1517.582572][T25711] tipc: Enabling of bearer rejected, failed to enable media [ 1517.614718][T25715] netlink: 'syz.5.13983': attribute type 2 has an invalid length. [ 1517.670543][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1517.704998][T25720] netlink: 'syz.4.13984': attribute type 30 has an invalid length. [ 1517.921113][T32007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.074282][T25745] netlink: 'syz.1.13992': attribute type 1 has an invalid length. [ 1518.175510][T25755] bond12: (slave gretap2): making interface the new active one [ 1518.186654][T25755] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 1518.223352][T25758] x_tables: duplicate underflow at hook 2 [ 1518.230494][T25758] x_tables: duplicate underflow at hook 2 [ 1518.524022][T25776] syzkaller1: entered promiscuous mode [ 1518.529900][T25776] syzkaller1: entered allmulticast mode [ 1518.578078][T25776] can: request_module (can-proto-4) failed. [ 1518.678644][T25785] netlink: 'syz.0.14006': attribute type 1 has an invalid length. [ 1518.709226][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1518.718613][T25785] bond5: entered promiscuous mode [ 1518.724476][T25785] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1518.749885][T25785] ipvlan2: entered allmulticast mode [ 1518.755400][T25785] bond5: entered allmulticast mode [ 1518.780803][T25785] bond5: (slave bridge8): making interface the new active one [ 1518.788618][T25785] bridge8: entered promiscuous mode [ 1518.796603][T25785] bridge8: entered allmulticast mode [ 1518.804602][T25785] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 1519.110516][T25811] Cannot find add_set index 2 as target [ 1519.232336][T25817] x_tables: duplicate underflow at hook 1 [ 1519.441571][T25832] mac80211_hwsim hwsim137 wlan0: entered promiscuous mode [ 1519.461159][T25832] veth0: entered promiscuous mode [ 1519.480330][T25832] veth0 (unregistering): left promiscuous mode [ 1519.749227][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1520.789238][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1520.897155][T25887] __nla_validate_parse: 16 callbacks suppressed [ 1520.897175][T25887] netlink: 51 bytes leftover after parsing attributes in process `syz.1.14040'. [ 1521.090266][T25902] netlink: 'syz.0.14045': attribute type 2 has an invalid length. [ 1521.102624][T25897] syzkaller0: entered promiscuous mode [ 1521.108147][T25897] syzkaller0: entered allmulticast mode [ 1521.116851][T25899] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1521.147885][T25900] bridge7: entered promiscuous mode [ 1521.153363][T25900] bridge7: entered allmulticast mode [ 1521.176609][T25897] veth0: entered promiscuous mode [ 1521.194946][T25892] veth0: left promiscuous mode [ 1521.380801][T25924] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1521.839228][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1522.871940][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1523.670105][T32001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.847554][T25944] tipc: Enabling of bearer rejected, already enabled [ 1523.864403][T25944] syzkaller0: mtu less than device minimum [ 1523.909234][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1524.047097][T25956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14059'. [ 1524.317406][T25978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14066'. [ 1524.437020][T25986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14069'. [ 1524.502914][T25995] netlink: 1 bytes leftover after parsing attributes in process `syz.5.14071'. [ 1524.791694][T26010] netlink: 996 bytes leftover after parsing attributes in process `syz.4.14075'. [ 1524.794843][T26011] netlink: 'syz.0.14074': attribute type 13 has an invalid length. [ 1524.887441][T26012] mac80211_hwsim hwsim138 syzkaller0: Caught tx_queue_len zero misconfig [ 1524.959340][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1524.981437][T22708] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1524.996981][T22708] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1525.013679][T22708] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1525.024753][T22708] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1525.044538][T22708] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1525.147302][T26025] sit1: entered promiscuous mode [ 1525.160542][T26025] sit1: entered allmulticast mode [ 1525.242131][T26032] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14081'. [ 1525.257097][T26020] dvmrp0 speed is unknown, defaulting to 1000 [ 1525.274206][T26028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14078'. [ 1525.309970][T26029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14080'. [ 1525.989276][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1526.089044][T26069] ip6tnl0: Caught tx_queue_len zero misconfig [ 1526.168758][T26076] netlink: 'syz.0.14092': attribute type 5 has an invalid length. [ 1526.183104][T26066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1526.190434][T26066] IPv6: NLM_F_CREATE should be set when creating new route [ 1526.231266][T20206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.240111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.637000][T26020] chnl_net:caif_netlink_parms(): no params data found [ 1526.878204][T26108] netlink: 104 bytes leftover after parsing attributes in process `syz.5.14098'. [ 1527.024653][T26020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.039222][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1527.043315][T26020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.072964][T26020] bridge_slave_0: entered allmulticast mode [ 1527.092904][T26020] bridge_slave_0: entered promiscuous mode [ 1527.118645][T22708] Bluetooth: hci6: command tx timeout [ 1527.141218][T26020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.148474][T26020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.157841][T26020] bridge_slave_1: entered allmulticast mode [ 1527.167001][T26020] bridge_slave_1: entered promiscuous mode [ 1527.261098][T26020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1527.294608][T26020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1527.446406][T26020] team0: Port device team_slave_0 added [ 1527.478168][T26020] team0: Port device team_slave_1 added [ 1527.607688][T26020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.627130][T26020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.667954][T26020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.698501][T26138] veth0_to_team: entered allmulticast mode [ 1527.729001][T26020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.757367][T26020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.834501][T26020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.069225][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1528.131651][T26159] bond13: Unable to set up delay as MII monitoring is disabled [ 1528.141771][T26159] bond13 (unregistering): Released all slaves [ 1528.254613][T26020] hsr_slave_0: entered promiscuous mode [ 1528.266686][T26020] hsr_slave_1: entered promiscuous mode [ 1528.275946][T26020] debugfs: 'hsr0' already exists in 'hsr' [ 1528.282197][T26020] Cannot create hsr debugfs directory [ 1528.327359][T26179] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1528.790680][ T6065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.110042][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1529.201512][T22708] Bluetooth: hci6: command tx timeout [ 1530.149307][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1530.993008][T26167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1531.018492][T26020] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1531.103023][T26020] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1531.184973][T26020] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1531.191827][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1531.245121][T26020] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1531.275734][T22708] Bluetooth: hci6: command tx timeout [ 1531.414613][T26216] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14121'. [ 1531.563767][T26020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.623671][T26020] 8021q: adding VLAN 0 to HW filter on device team0 [ 1531.641007][T26229] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14125'. [ 1531.682006][T31999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.689275][T31999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1531.693941][T26229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14125'. [ 1531.762444][T31999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.769696][T31999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1531.954792][T22708] block nbd6: Receive control failed (result -32) [ 1532.121080][T26251] netlink: 'syz.4.14133': attribute type 8 has an invalid length. [ 1532.229235][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1532.323221][T26020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1532.373120][T26267] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14138'. [ 1532.450022][T26267] netlink: 'syz.5.14138': attribute type 1 has an invalid length. [ 1532.458517][T26267] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14138'. [ 1532.470974][T26267] NCSI netlink: No device for ifindex 0 [ 1532.521785][T26272] lo: Caught tx_queue_len zero misconfig [ 1532.707412][T26286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14142'. [ 1532.998971][T26300] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.14148'. [ 1533.047764][T26020] veth0_vlan: entered promiscuous mode [ 1533.086522][T26020] veth1_vlan: entered promiscuous mode [ 1533.147420][T26020] veth0_macvtap: entered promiscuous mode [ 1533.185060][T26020] veth1_macvtap: entered promiscuous mode [ 1533.237844][T26020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1533.263677][T26020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1533.271638][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1533.312836][ T6065] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.346085][ T6065] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.355294][T22708] Bluetooth: hci6: command tx timeout [ 1533.402825][ T6065] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.432253][ T6065] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.516482][T26318] sctp: [Deprecated]: syz.1.14153 (pid 26318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1533.516482][T26318] Use struct sctp_sack_info instead [ 1533.837885][T32001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.867690][T32001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.974761][T32001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.984538][T32001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.296843][T26341] ipvlan4: entered allmulticast mode [ 1534.309279][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1534.341764][T26341] batadv_slave_1: entered allmulticast mode [ 1534.387430][T26341] batman_adv: batadv0: Adding interface: ipvlan4 [ 1534.431729][T26361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14164'. [ 1534.442787][T26341] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.474430][T26341] batman_adv: batadv0: Interface activated: ipvlan4 [ 1534.551642][T31998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.615644][T26370] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14167'. [ 1534.687126][T26370] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14167'. [ 1534.888775][T26383] netlink: 332 bytes leftover after parsing attributes in process `syz.0.14170'. [ 1534.946958][T26395] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1534.965626][T26395] bond5 (unregistering): Released all slaves [ 1535.167937][T26410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14177'. [ 1535.326152][T26424] bpq0: entered allmulticast mode [ 1535.349218][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1535.646037][T26443] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1535.688802][T26443] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1535.978673][T26448] xt_hashlimit: size too large, truncated to 1048576 [ 1536.389263][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1536.434756][T26484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14196'. [ 1536.637497][T26492] netlink: 'syz.5.14198': attribute type 1 has an invalid length. [ 1536.699993][T26492] netlink: 'syz.5.14198': attribute type 1 has an invalid length. [ 1536.897252][T14766] lec:lec_start_xmit: lec0:No lecd attached [ 1537.027218][T26516] netlink: 'syz.1.14206': attribute type 10 has an invalid length. [ 1537.045239][T26512] syzkaller0: entered promiscuous mode [ 1537.051598][T26512] syzkaller0: entered allmulticast mode [ 1537.142537][T26521] netlink: 'syz.5.14208': attribute type 1 has an invalid length. [ 1537.429213][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1537.455835][T26521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1537.483360][T26525] bond5: (slave gretap1): making interface the new active one [ 1537.493729][T26525] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1537.564857][T26538] __nla_validate_parse: 6 callbacks suppressed [ 1537.564955][T26538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14211'. [ 1537.781069][T26554] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1537.998612][T26575] netlink: 'syz.6.14222': attribute type 10 has an invalid length. [ 1538.012998][T26575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.023934][T26575] bridge_slave_1: left allmulticast mode [ 1538.031003][T26575] bridge_slave_1: left promiscuous mode [ 1538.036938][T26575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.089798][T26575] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1538.261906][T26586] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14225'. [ 1538.272521][T26586] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14225'. [ 1538.288841][T26586] syz_tun: entered promiscuous mode [ 1538.297256][T26586] syz_tun: left promiscuous mode [ 1538.326484][T26589] syzkaller0: entered promiscuous mode [ 1538.333375][T26589] syzkaller0: entered allmulticast mode [ 1538.344006][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14225'. [ 1538.479222][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1538.526826][T26594] openvswitch: netlink: Multiple metadata blocks provided [ 1538.538942][T26594] openvswitch: netlink: Multiple metadata blocks provided [ 1538.548566][T26594] openvswitch: netlink: Multiple metadata blocks provided [ 1538.615188][T26601] netlink: 136 bytes leftover after parsing attributes in process `syz.1.14228'. [ 1539.509250][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1540.313515][ T9721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.321816][ T9721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.331060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.631932][T26544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1540.901070][T26616] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14233'. [ 1541.222007][T26632] netlink: 'syz.1.14238': attribute type 24 has an invalid length. [ 1541.253088][T26629] dvmrp0 speed is unknown, defaulting to 1000 [ 1541.568544][T26648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14243'. [ 1541.589182][T26630] dvmrp0 speed is unknown, defaulting to 1000 [ 1541.599425][ C0] net_ratelimit: 1 callbacks suppressed [ 1541.599445][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1541.710275][T26649] can: request_module (can-proto-0) failed. [ 1541.989347][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 1541.997517][ C1] lec:lec_tx_timeout: lec0 [ 1542.341627][T26668] team0: Port device wireguard1 added [ 1542.347155][T26671] netlink: 288 bytes leftover after parsing attributes in process `syz.6.14250'. [ 1542.583085][T26686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14254'. [ 1542.627613][T26691] netlink: 'syz.5.14252': attribute type 10 has an invalid length. [ 1542.639220][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1542.651401][T26686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14254'. [ 1542.752187][T26691] team0: Device dummy0 is of different type [ 1542.895994][T26699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1543.091521][T26708] netlink: 'syz.6.14259': attribute type 19 has an invalid length. [ 1543.107807][T26706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14258'. [ 1543.350635][T22708] Bluetooth: hci6: command tx timeout [ 1543.588900][T26728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1543.669226][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1543.726562][T26735] syzkaller1: entered promiscuous mode [ 1543.733201][T26735] syzkaller1: entered allmulticast mode [ 1543.844956][T26737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14268'. [ 1544.434604][T26764] netlink: 'syz.1.14277': attribute type 12 has an invalid length. [ 1544.465984][T26764] syzkaller1: entered promiscuous mode [ 1544.478741][T26765] netlink: 56 bytes leftover after parsing attributes in process `syz.6.14276'. [ 1544.492452][T26764] syzkaller1: entered allmulticast mode [ 1544.607095][T26767] netlink: 'syz.4.14278': attribute type 1 has an invalid length. [ 1544.709820][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1544.721782][T26767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14278'. [ 1544.744232][T26774] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1544.794635][T26767] bond11 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1544.830419][T26767] bond11 (unregistering): Released all slaves [ 1544.872991][T26782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14279'. [ 1544.924008][T26773] netlink: 27 bytes leftover after parsing attributes in process `syz.6.14279'. [ 1545.090880][T26792] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1545.252977][T26800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14287'. [ 1545.279017][T26800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14287'. [ 1545.558511][T26814] netlink: 'syz.6.14293': attribute type 13 has an invalid length. [ 1545.598691][T26814] veth0_macvtap: left promiscuous mode [ 1545.620755][T26814] macvtap0: entered allmulticast mode [ 1545.637909][T26814] macvtap0: refused to change device tx_queue_len [ 1545.749231][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1545.879904][T26829] veth3: entered promiscuous mode [ 1546.079984][ T1291] lec:lec_start_xmit: lec0:No lecd attached [ 1546.086482][ T1291] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1546.095739][T31999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.790004][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1547.829245][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1548.869287][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1549.155812][T26845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1549.424302][T26887] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1549.911252][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1550.027576][T26919] __nla_validate_parse: 8 callbacks suppressed [ 1550.027597][T26919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14324'. [ 1550.070851][T26919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14324'. [ 1550.257369][T26936] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14328'. [ 1550.422344][T26947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14332'. [ 1550.633238][T26952] syzkaller0: entered promiscuous mode [ 1550.638832][T26952] syzkaller0: entered allmulticast mode [ 1550.950487][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1550.989684][T26969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14342'. [ 1551.090157][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1551.098310][ C1] lec:lec_tx_timeout: lec0 [ 1551.153849][T26977] s5ÿÿø: renamed from vlan1 [ 1551.206908][T26982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14345'. [ 1551.251275][T26982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14345'. [ 1551.493775][T27005] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14351'. [ 1551.517058][T27005] F: renamed from gretap0 (while UP) [ 1551.544358][T27005] F: entered allmulticast mode [ 1551.557815][T27005] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14351'. [ 1551.773712][T27013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14356'. [ 1551.834168][T32007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.989254][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1552.015792][T27035] netlink: 'syz.5.14361': attribute type 10 has an invalid length. [ 1552.088166][T27035] team0 (unregistering): Port device wireguard1 removed [ 1552.211531][T27041] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1552.260126][T27041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1552.280925][T27044] ip6t_rpfilter: unknown options [ 1552.298258][T27049] netlink: 'syz.0.14366': attribute type 10 has an invalid length. [ 1552.748100][T27076] syzkaller0: entered promiscuous mode [ 1552.766662][T27076] syzkaller0: entered allmulticast mode [ 1552.800620][T27076] 0: reclassify loop, rule prio 0, protocol 800 [ 1552.832530][T27086] netlink: 'syz.5.14378': attribute type 4 has an invalid length. [ 1553.039215][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1553.242818][T27099] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1553.287108][T27099] bond6: (slave lo): Enslaving as an active interface with an up link [ 1553.301054][T27099] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1553.342864][T27103] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1553.811154][T27134] netlink: 'syz.0.14392': attribute type 1 has an invalid length. [ 1553.867374][T27134] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1553.959109][T27140] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1553.988798][T27140] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 1554.014666][T27140] bond7: (slave vcan1): Error -95 calling set_mac_address [ 1554.079205][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1554.177732][T27147] bond13: option resend_igmp: invalid value (32767) [ 1554.199742][T27147] bond13: option resend_igmp: allowed values 0 - 255 [ 1554.211010][T27147] bond13 (unregistering): Released all slaves [ 1554.222957][T32001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.254574][T27157] lo: entered promiscuous mode [ 1554.267503][T27157] tunl0: entered promiscuous mode [ 1554.293558][T27157] gre0: entered promiscuous mode [ 1554.316879][T27157] gretap0: entered promiscuous mode [ 1554.349713][T27157] erspan0: entered promiscuous mode [ 1554.387171][T27157] ip_vti0: entered promiscuous mode [ 1554.404317][ T9721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.444183][T27155] hsr_slave_0: left promiscuous mode [ 1554.637975][T27172] bond0: entered promiscuous mode [ 1554.698673][T27172] bond0: left promiscuous mode [ 1554.753593][T27178] netlink: 'syz.4.14405': attribute type 1 has an invalid length. [ 1554.793264][T27184] --map-set only usable from mangle table [ 1554.930167][T27193] x_tables: duplicate underflow at hook 2 [ 1554.945033][T27192] IPVS: ip_vs_add_dest(): server weight less than zero [ 1554.976651][T27196] netlink: 'syz.1.14410': attribute type 10 has an invalid length. [ 1554.994325][T27196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.033837][T27196] batadv0: entered promiscuous mode [ 1555.040768][T27196] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1555.096010][T27201] delete_channel: no stack [ 1555.172844][T27204] __nla_validate_parse: 14 callbacks suppressed [ 1555.172866][T27204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14413'. [ 1555.207179][T27204] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.14413'. [ 1555.234796][T32001] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1555.245440][T32001] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1555.264502][T32001] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1555.286082][T32001] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1555.306132][T27210] netlink: 44 bytes leftover after parsing attributes in process `syz.6.14416'. [ 1555.325182][T27210] bond0: Caught tx_queue_len zero misconfig [ 1555.350163][T27211] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.14416'. [ 1555.423206][T27210] syzkaller0: entered allmulticast mode [ 1555.506518][T27217] tipc: Enabled bearer , priority 0 [ 1555.637332][T27217] syzkaller0: entered promiscuous mode [ 1555.644667][T27217] syzkaller0: entered allmulticast mode [ 1555.652192][T27217] tipc: Resetting bearer [ 1555.698603][T27216] tipc: Resetting bearer [ 1557.192562][ C0] net_ratelimit: 6 callbacks suppressed [ 1557.192578][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1557.552225][T32003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.608131][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.030083][T27216] tipc: Disabling bearer [ 1558.074165][T27241] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1558.101336][ T8056] tipc: Node number set to 2284371387 [ 1558.169085][T27248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14428'. [ 1558.229270][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1558.580252][T27285] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14435'. [ 1558.591346][T27286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14435'. [ 1558.651346][T27285] ip6t_rpfilter: unknown options [ 1558.690861][T32001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.733452][T27292] xt_hashlimit: size too large, truncated to 1048576 [ 1558.802608][T27297] lo: entered promiscuous mode [ 1558.808886][T27297] tunl0: entered promiscuous mode [ 1558.832298][T27297] gre0: entered promiscuous mode [ 1558.837896][T27297] gretap0: entered promiscuous mode [ 1558.861924][T27297] erspan0: entered promiscuous mode [ 1558.867671][T27297] ip_vti0: entered promiscuous mode [ 1559.097421][T27254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1559.270663][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1559.332208][T27309] IPv6: NLM_F_CREATE should be specified when creating new route [ 1559.691240][T27327] lo: left promiscuous mode [ 1559.696569][T27327] tunl0: left promiscuous mode [ 1559.708897][T27327] gre0: left promiscuous mode [ 1559.733080][T27327] gretap0: left promiscuous mode [ 1559.738419][T27327] erspan0: left promiscuous mode [ 1559.746997][T27327] ip_vti0: left promiscuous mode [ 1559.777975][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14448'. [ 1559.819091][T27337] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14450'. [ 1559.820212][T31999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.071460][T27343] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14451'. [ 1560.173324][T27327] batadv0: left promiscuous mode [ 1560.183925][T27327] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1560.198998][T27327] mac80211_hwsim hwsim137 wlan0: left promiscuous mode [ 1560.207183][T27327] mac80211_hwsim hwsim138 syzkaller0: left promiscuous mode [ 1560.215358][T27327] mac80211_hwsim hwsim138 syzkaller0: left allmulticast mode [ 1560.224475][T27327] macvtap1: left promiscuous mode [ 1560.232193][T27327] macvtap1: left allmulticast mode [ 1560.284832][T27327] bond4: left promiscuous mode [ 1560.313403][T27327] bond5: left promiscuous mode [ 1560.319204][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1560.327865][T27327] bridge8: left promiscuous mode [ 1560.360012][T27327] ipvlan2: left allmulticast mode [ 1560.365122][T27327] bond5: left allmulticast mode [ 1560.387851][T27327] bridge8: left allmulticast mode [ 1560.574487][T27367] __nla_validate_parse: 1 callbacks suppressed [ 1560.574509][T27367] netlink: 92 bytes leftover after parsing attributes in process `syz.5.14454'. [ 1560.602051][T27367] netlink: 'syz.5.14454': attribute type 1 has an invalid length. [ 1560.824150][T27380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14461'. [ 1560.866871][T27380] vlan1 (unregistering): left allmulticast mode [ 1560.882868][T27380] veth0_vlan: left allmulticast mode [ 1560.990594][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.108543][T27391] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1561.189719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.217352][T27401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14468'. [ 1561.261194][T27402] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14469'. [ 1561.273126][ T8065] page_pool_release_retry() stalled pool shutdown: id 450, 1 inflight 60 sec [ 1561.340760][T27404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14471'. [ 1561.446774][T27411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14472'. [ 1561.558512][T27414] netlink: 'syz.1.14474': attribute type 12 has an invalid length. [ 1561.568025][T27414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14474'. [ 1561.626494][T27417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14473'. [ 1561.647078][T27418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14473'. [ 1561.717505][T27385] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1561.748784][T27385] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1561.814421][T27385] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1561.820610][T27385] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1561.877469][T27385] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1561.887616][T27430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1561.911615][T27385] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1561.954938][T27385] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1561.982536][T27385] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1562.026103][T27385] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1562.055978][T27385] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1562.137102][T27385] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1562.171748][T27385] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1562.318340][T27443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14481'. [ 1562.389219][ C0] net_ratelimit: 4 callbacks suppressed [ 1562.389241][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1562.711928][T31997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.766197][T27460] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 1562.892654][T27471] veth1_to_bond: entered allmulticast mode [ 1562.935721][T27474] veth1_to_bond: left allmulticast mode [ 1562.957964][T27473] syzkaller0: entered promiscuous mode [ 1562.978593][T27476] SET target dimension over the limit! [ 1563.128404][ T6056] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.160389][ T6056] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.219309][ T6056] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.232173][ T6056] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.259918][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.429221][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1563.482004][T27504] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1563.507651][T27508] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 1563.542605][T27507] bond9: option mode: unable to set because the bond device has slaves [ 1563.574971][T27512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.673463][T27517] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1563.885667][T27529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1563.946057][T27526] 8021q: VLANs not supported on ip_vti0 [ 1564.360903][ T6065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.469205][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1564.477038][T27557] lo: Caught tx_queue_len zero misconfig [ 1564.845441][T27584] netlink: 'syz.5.14518': attribute type 7 has an invalid length. [ 1564.927717][T27584] veth0_to_hsr: left promiscuous mode [ 1564.934022][T27584] veth0_to_hsr: left allmulticast mode [ 1564.988162][T27584] veth0_virt_wifi: left promiscuous mode [ 1564.999716][T27584] veth0_virt_wifi: left allmulticast mode [ 1565.017046][T27584] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1565.033497][T27584] mac80211_hwsim hwsim154 wlan1: left allmulticast mode [ 1565.043196][T27584] ip6gre1: left allmulticast mode [ 1565.057505][T27584] vlan2: left promiscuous mode [ 1565.063614][T27584] vlan2: left allmulticast mode [ 1565.068939][T27584] hsr_slave_1: left allmulticast mode [ 1565.091337][T27584] bond3: left promiscuous mode [ 1565.108001][T27584] sit1: left promiscuous mode [ 1565.113286][T27584] sit1: left allmulticast mode [ 1565.137740][T27584] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check. [ 1565.224096][T27585] bond8 (unregistering): Released all slaves [ 1565.590402][T27624] xt_l2tp: v2 doesn't support IP mode [ 1565.604273][T27624] __nla_validate_parse: 16 callbacks suppressed [ 1565.604292][T27624] netlink: 108 bytes leftover after parsing attributes in process `syz.1.14527'. [ 1565.909102][T27646] xt_cgroup: invalid path, errno=-2 [ 1565.921259][T27646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14536'. [ 1565.933082][T27646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14536'. [ 1565.983393][T27629] netlink: 120 bytes leftover after parsing attributes in process `syz.5.14532'. [ 1566.203471][T27658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14540'. [ 1566.269098][T27665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14544'. [ 1566.281966][T27665] netlink: 'syz.0.14544': attribute type 1 has an invalid length. [ 1566.337452][T27665] bond8: entered promiscuous mode [ 1566.342845][T27665] bond8: entered allmulticast mode [ 1566.348628][T27665] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1566.367222][T27668] macvlan3: entered promiscuous mode [ 1566.390679][T27668] macvlan3: entered allmulticast mode [ 1566.402306][T27668] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1566.448117][T27667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14543'. [ 1566.541027][T27674] ipt_rpfilter: unknown options [ 1566.572710][ T9721] IPVS: starting estimator thread 0... [ 1566.580296][T27675] lo: entered allmulticast mode [ 1566.592703][T27673] netlink: 'syz.6.14546': attribute type 2 has an invalid length. [ 1566.622189][T27674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14545'. [ 1566.663063][T27676] IPVS: using max 37 ests per chain, 88800 per kthread [ 1566.868454][T27684] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.14548'. [ 1566.898767][T27686] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14549'. [ 1566.984212][T27692] netlink: 'syz.0.14551': attribute type 9 has an invalid length. [ 1567.043586][T27694] netlink: 'syz.1.14552': attribute type 1 has an invalid length. [ 1567.146990][T27701] netlink: 'syz.6.14554': attribute type 10 has an invalid length. [ 1567.168278][T27703] ip6t_srh: unknown srh match flags 5F28 [ 1567.198553][T27705] sctp: [Deprecated]: syz.6.14554 (pid 27705) Use of int in max_burst socket option. [ 1567.198553][T27705] Use struct sctp_assoc_value instead [ 1567.333519][T27698] bond13: (slave gretap4): making interface the new active one [ 1567.361258][T27698] bond13: (slave gretap4): Enslaving as an active interface with an up link [ 1567.402255][T27701] team0 (unregistering): Port device team_slave_0 removed [ 1567.411348][T27707] netlink: 'syz.4.14556': attribute type 1 has an invalid length. [ 1567.420644][T27707] netlink: 'syz.4.14556': attribute type 1 has an invalid length. [ 1567.428519][T27707] netlink: 'syz.4.14556': attribute type 8 has an invalid length. [ 1567.474178][T27701] team0 (unregistering): Port device team_slave_1 removed [ 1567.565698][T27721] netlink: 'syz.0.14559': attribute type 11 has an invalid length. [ 1567.589221][ C0] net_ratelimit: 5 callbacks suppressed [ 1567.589241][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1567.685369][T27726] netlink: 'syz.4.14562': attribute type 23 has an invalid length. [ 1568.295850][T27761] Bluetooth: MGMT ver 1.23 [ 1568.480252][T31999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.490477][ T9721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.499086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.639203][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1568.863270][T27793] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1568.871375][T27793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1568.974239][T27797] netlink: 'syz.0.14580': attribute type 13 has an invalid length. [ 1569.235494][T27814] openvswitch: netlink: Key type 346 is out of range max 32 [ 1569.282253][T27816] openvswitch: netlink: Key type 346 is out of range max 32 [ 1569.669217][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1570.023954][T27859] vlan4: entered allmulticast mode [ 1570.050654][T27859] gretap0: entered allmulticast mode [ 1570.181603][T27860] syzkaller0: entered promiscuous mode [ 1570.187190][T27860] syzkaller0: entered allmulticast mode [ 1570.648925][T27895] __nla_validate_parse: 14 callbacks suppressed [ 1570.648947][T27895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14617'. [ 1571.012906][T27921] sctp_getsockopt_maxseg: 23 callbacks suppressed [ 1571.012936][T27921] sctp: [Deprecated]: syz.4.14623 (pid 27921) Use of int in maxseg socket option. [ 1571.012936][T27921] Use struct sctp_assoc_value instead [ 1571.248911][T27928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1571.256257][T27928] IPv6: NLM_F_CREATE should be set when creating new route [ 1571.465370][T27938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14627'. [ 1571.712189][T27954] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14631'. [ 1571.727249][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14631'. [ 1571.952566][T27971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14634'. [ 1572.303400][T27990] tipc: Enabling of bearer rejected, failed to enable media [ 1572.322393][T27996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14643'. [ 1572.532597][T28000] dvmrp0 speed is unknown, defaulting to 1000 [ 1572.676296][T28011] validate_nla: 3 callbacks suppressed [ 1572.676318][T28011] netlink: 'syz.5.14648': attribute type 30 has an invalid length. [ 1572.789281][ C0] net_ratelimit: 2 callbacks suppressed [ 1572.789303][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1572.836627][T28012] syzkaller0: entered promiscuous mode [ 1572.846450][T28012] syzkaller0: entered allmulticast mode [ 1572.855882][T28011] netlink: 7060 bytes leftover after parsing attributes in process `syz.5.14648'. [ 1573.211246][T28031] netlink: 516 bytes leftover after parsing attributes in process `syz.5.14651'. [ 1573.391640][T28018] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.14649'. [ 1573.590211][T32003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.678192][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1573.690922][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1573.701003][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1573.710398][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1573.718192][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1573.839206][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1573.894715][T22708] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1573.903559][T22708] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1573.914422][T22708] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1573.924986][T22708] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1573.955203][T22708] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1574.038386][T28042] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14654'. [ 1574.870830][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1575.915091][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1575.991397][T22708] Bluetooth: hci7: command tx timeout [ 1576.206365][T28048] __nla_validate_parse: 1 callbacks suppressed [ 1576.206388][T28048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14655'. [ 1576.237859][T28035] dvmrp0 speed is unknown, defaulting to 1000 [ 1576.329942][T28052] netlink: 256 bytes leftover after parsing attributes in process `syz.4.14656'. [ 1576.342366][T28053] syzkaller0: entered promiscuous mode [ 1576.348052][T28053] syzkaller0: entered allmulticast mode [ 1576.750792][T28066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14663'. [ 1576.949192][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1577.023552][T28076] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14667'. [ 1577.113371][T28086] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14668'. [ 1577.123552][T28086] block nbd7: Unsupported socket: should be TCP or UNIX. [ 1577.161952][T28082] bond6: option mode: unable to set because the bond device has slaves [ 1577.173523][T28083] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1577.304552][T28035] chnl_net:caif_netlink_parms(): no params data found [ 1577.344234][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14672'. [ 1577.356026][T28095] netlink: 'syz.5.14671': attribute type 3 has an invalid length. [ 1577.375554][T28095] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14671'. [ 1577.379290][T28093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14672'. [ 1577.395554][T28096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14672'. [ 1577.516009][T28102] "syz.6.14673" (28102) uses obsolete ecb(arc4) skcipher [ 1577.524980][T28103] "syz.6.14673" (28103) uses obsolete ecb(arc4) skcipher [ 1577.582039][T28103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1577.595614][T28102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1577.610774][T28035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.618184][T28035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.625791][T28035] bridge_slave_0: entered allmulticast mode [ 1577.636314][T28035] bridge_slave_0: entered promiscuous mode [ 1577.650759][T28035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.658135][T28035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.688099][T28035] bridge_slave_1: entered allmulticast mode [ 1577.706769][T28035] bridge_slave_1: entered promiscuous mode [ 1577.777357][T28035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.795232][T28035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1577.883526][T28115] tunl0: Caught tx_queue_len zero misconfig [ 1577.938757][T28035] team0: Port device team_slave_0 added [ 1577.945592][T28120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14678'. [ 1578.009271][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1578.048800][T28120] syz_tun (unregistering): left allmulticast mode [ 1578.071374][T22708] Bluetooth: hci7: command tx timeout [ 1578.111829][T28035] team0: Port device team_slave_1 added [ 1578.204018][T28035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.212117][T28035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.243613][T28035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.290026][T28035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.297423][T28035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.327752][T28035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.417858][T28035] hsr_slave_0: entered promiscuous mode [ 1578.427271][T28035] hsr_slave_1: entered promiscuous mode [ 1578.444965][T28035] debugfs: 'hsr0' already exists in 'hsr' [ 1578.454614][T28035] Cannot create hsr debugfs directory [ 1578.533049][T28143] syzkaller1: entered promiscuous mode [ 1578.539756][T28143] syzkaller1: entered allmulticast mode [ 1578.562379][T28143] netlink: 'syz.0.14685': attribute type 1 has an invalid length. [ 1578.815081][T28153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1578.898813][T28035] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1579.029196][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1579.107048][T28035] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1579.175262][T28168] netlink: 'syz.5.14691': attribute type 1 has an invalid length. [ 1579.185229][T28168] netlink: 'syz.5.14691': attribute type 1 has an invalid length. [ 1579.196557][T28168] netlink: 'syz.5.14691': attribute type 1 has an invalid length. [ 1579.208786][T28168] netlink: 'syz.5.14691': attribute type 1 has an invalid length. [ 1579.215137][T28170] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1579.250131][T28168] netlink: 'syz.5.14691': attribute type 1 has an invalid length. [ 1579.275317][T28168] netlink: 'syz.5.14691': attribute type 1 has an invalid length. [ 1579.344120][T28168] netlink: 'syz.5.14691': attribute type 1 has an invalid length. [ 1579.354996][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.380432][T28035] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1579.440128][T28168] netlink: 'syz.5.14691': attribute type 1 has an invalid length. [ 1579.494509][T28035] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1579.513743][T28168] netlink: 'syz.5.14691': attribute type 1 has an invalid length. [ 1579.884847][T28188] : entered promiscuous mode [ 1580.064564][T28035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1580.071417][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1580.150895][T22708] Bluetooth: hci7: command tx timeout [ 1580.163384][T28035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1580.187564][T28204] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1580.204741][T28035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1580.253399][T28035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1580.391070][T28224] tipc: Started in network mode [ 1580.398361][T28224] tipc: Node identity ac14140f, cluster identity 4711 [ 1580.406897][T28224] tipc: New replicast peer: 255.255.255.255 [ 1580.416149][T28224] tipc: Enabled bearer , priority 10 [ 1580.723197][T28231] bond11: option coupled_control: invalid value (192) [ 1580.734646][T28231] bond11 (unregistering): Released all slaves [ 1580.832945][T28035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.924582][T28241] tipc: Resetting bearer [ 1581.042054][T28035] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.063558][T31999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.070831][T31999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.109843][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1581.138322][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.145592][ T6065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.433072][T28268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1581.445966][ T8067] tipc: Node number set to 2886997007 [ 1581.494939][T28268] bond1: (slave gretap0): making interface the new active one [ 1581.506504][T28268] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 1581.753874][T28035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.822233][T28035] veth0_vlan: entered promiscuous mode [ 1581.838667][T28035] veth1_vlan: entered promiscuous mode [ 1581.881055][T28035] veth0_macvtap: entered promiscuous mode [ 1581.893867][T28035] veth1_macvtap: entered promiscuous mode [ 1581.922602][T28035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1581.938729][T28035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1581.962222][T32007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.974212][T32007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.986740][T32007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.997877][T32007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.151449][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1582.230781][T22708] Bluetooth: hci7: command tx timeout [ 1582.552247][ T4212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.561494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.189438][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1583.905309][T28248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1584.101601][T32003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.114632][T32003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.192273][T28298] __nla_validate_parse: 13 callbacks suppressed [ 1584.192293][T28298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14726'. [ 1584.196446][T28302] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1584.229207][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1584.268602][ T6065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.299865][ T6065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.464568][T28312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14652'. [ 1584.475590][T31999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.542108][T28313] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001 [ 1584.601413][T28313] validate_nla: 29 callbacks suppressed [ 1584.601434][T28313] netlink: 'syz.5.14731': attribute type 30 has an invalid length. [ 1585.006591][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1585.039078][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1585.060467][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1585.076414][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1585.092461][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1585.208755][T28339] vlan2: entered allmulticast mode [ 1585.231913][T28339] mac80211_hwsim hwsim177 wlan0: entered allmulticast mode [ 1585.279213][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1585.563185][T28332] dvmrp0 speed is unknown, defaulting to 1000 [ 1586.064262][T28379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14750'. [ 1586.142664][T28382] xt_hashlimit: size too large, truncated to 1048576 [ 1586.310330][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1586.406589][T28393] netlink: 'syz.4.14754': attribute type 1 has an invalid length. [ 1586.506333][T28391] netlink: 27 bytes leftover after parsing attributes in process `syz.5.14753'. [ 1586.537680][T28394] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1586.556881][T28395] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14753'. [ 1586.573150][T28394] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 1586.828815][ T6065] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 33377 - 0 [ 1586.934520][T28413] netlink: 'syz.1.14756': attribute type 64 has an invalid length. [ 1586.981680][ T6065] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 33377 - 0 [ 1587.005943][T28415] ip6t_srh: unknown srh invflags 4000 [ 1587.082573][T28417] geneve2: entered promiscuous mode [ 1587.087858][T28417] geneve2: entered allmulticast mode [ 1587.145636][ T6065] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 33377 - 0 [ 1587.182666][ T6065] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.201691][T22708] Bluetooth: hci4: command tx timeout [ 1587.267316][ T6065] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.310304][ T6065] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.319092][ T6065] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.348602][T32003] team0: left allmulticast mode [ 1587.357993][T32003] team_slave_0: left allmulticast mode [ 1587.359362][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1587.398163][T32003] team_slave_1: left allmulticast mode [ 1587.417576][T32003] bridge2: left allmulticast mode [ 1587.432881][T32003] bond3: left allmulticast mode [ 1587.437825][T32003] team0: left promiscuous mode [ 1587.443524][T32003] team_slave_0: left promiscuous mode [ 1587.450548][T32003] team_slave_1: left promiscuous mode [ 1587.456172][T32003] bridge2: left promiscuous mode [ 1587.462964][T32003] bond3: left promiscuous mode [ 1587.470256][T32003] bridge0: port 2(team0) entered disabled state [ 1587.480625][T28436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14765'. [ 1587.494757][T32003] bridge_slave_0: left allmulticast mode [ 1587.507569][T32003] bridge_slave_0: left promiscuous mode [ 1587.516046][T32003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.543902][T28438] netlink: 80 bytes leftover after parsing attributes in process `syz.6.14765'. [ 1587.653488][T32003] bond2 (unregistering): (slave ip6erspan1): Releasing active interface [ 1587.935541][T32003] team0: Port device bridge2 removed [ 1588.226531][T32003] bond5 (unregistering): (slave bridge8): Releasing backup interface [ 1588.390987][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1588.416316][T32003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1588.427804][T32003] bond0 (unregistering): (slave ÿ): Releasing backup interface [ 1588.437848][T32003] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1588.448364][T32003] bond0 (unregistering): Released all slaves [ 1588.462886][T32003] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 1588.474053][T32003] bond1 (unregistering): Released all slaves [ 1588.490870][T32003] bond2 (unregistering): Released all slaves [ 1588.506639][T32003] team0: Port device bond3 removed [ 1588.515461][T32003] bond3 (unregistering): Released all slaves [ 1588.536848][T32003] bond4 (unregistering): Released all slaves [ 1588.558639][T32003] bond5 (unregistering): Released all slaves [ 1588.579025][T32003] bond6 (unregistering): Released all slaves [ 1588.595393][T32003] bond7 (unregistering): Released all slaves [ 1588.612348][T32003] bond8 (unregistering): Released all slaves [ 1588.630782][ T6065] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 33377 - 0 [ 1588.711960][T28452] mac80211_hwsim hwsim148 syzkaller0: entered promiscuous mode [ 1588.721479][T28452] mac80211_hwsim hwsim148 syzkaller0: entered allmulticast mode [ 1588.865756][T28457] netlink: 'syz.6.14768': attribute type 1 has an invalid length. [ 1588.874893][T32003] : left promiscuous mode [ 1588.933686][T28458] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14768'. [ 1588.991054][T28457] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1588.999406][T28464] tipc: Enabling of bearer rejected, failed to enable media [ 1589.018696][T32003] tipc: Disabling bearer [ 1589.025189][T28456] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14768'. [ 1589.129941][T32003] tipc: Left network mode [ 1589.154477][T28332] chnl_net:caif_netlink_parms(): no params data found [ 1589.183287][T32003] IPVS: stopping master sync thread 19770 ... [ 1589.273007][T22708] Bluetooth: hci4: command tx timeout [ 1589.429205][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1589.876492][T28499] openvswitch: netlink: EtherType 0 is less than min 600 [ 1590.233121][ T6065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.458454][T28332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.470837][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1590.483553][T28332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.495457][T28332] bridge_slave_0: entered allmulticast mode [ 1590.521411][T28332] bridge_slave_0: entered promiscuous mode [ 1590.565447][T28535] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14782'. [ 1590.576330][T28332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.589737][T28332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.597830][T28535] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14782'. [ 1590.622203][T28332] bridge_slave_1: entered allmulticast mode [ 1590.630556][T28535] netlink: 'syz.1.14782': attribute type 8 has an invalid length. [ 1590.660080][T28332] bridge_slave_1: entered promiscuous mode [ 1590.708260][T28526] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14782'. [ 1590.874184][T28332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.947750][T28332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.185192][T28332] team0: Port device team_slave_0 added [ 1591.350398][T22708] Bluetooth: hci4: command tx timeout [ 1591.368932][T28332] team0: Port device team_slave_1 added [ 1591.460015][T28570] netlink: 196 bytes leftover after parsing attributes in process `syz.1.14794'. [ 1591.508133][T28570] netlink: 196 bytes leftover after parsing attributes in process `syz.1.14794'. [ 1591.517796][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1591.547033][T28570] netlink: 19 bytes leftover after parsing attributes in process `syz.1.14794'. [ 1591.637830][T28332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1591.657564][T28332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.726711][T28332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1591.781117][T28332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.826294][T28332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.902829][T28332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1592.283740][T28332] hsr_slave_0: entered promiscuous mode [ 1592.328240][T28332] hsr_slave_1: entered promiscuous mode [ 1592.353597][T28332] debugfs: 'hsr0' already exists in 'hsr' [ 1592.380107][T28332] Cannot create hsr debugfs directory [ 1592.416894][T32003] hsr_slave_0: left promiscuous mode [ 1592.440245][T28613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14804'. [ 1592.450679][T32003] hsr_slave_1: left promiscuous mode [ 1592.559222][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1592.750957][T28625] netlink: 'syz.6.14805': attribute type 1 has an invalid length. [ 1593.432485][T22708] Bluetooth: hci4: command tx timeout [ 1593.545029][T32003] team0 (unregistering): Port device team_slave_1 removed [ 1593.565735][T32003] team0 (unregistering): Port device team_slave_0 removed [ 1593.589747][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1593.746868][T28619] syzkaller0: entered promiscuous mode [ 1593.770385][T28619] syzkaller0: entered allmulticast mode [ 1593.904382][T28648] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1594.031319][T32007] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.113011][T28651] netlink: 'syz.4.14810': attribute type 1 has an invalid length. [ 1594.185740][T28651] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1594.232747][T28652] bond12: (slave geneve2): making interface the new active one [ 1594.246929][T28652] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 1594.340464][T28665] netlink: 100 bytes leftover after parsing attributes in process `syz.1.14812'. [ 1594.452291][T28667] xt_ecn: cannot match TCP bits for non-tcp packets [ 1594.498054][T28667] netlink: 92 bytes leftover after parsing attributes in process `syz.5.14814'. [ 1594.561109][T32003] IPVS: stop unused estimator thread 0... [ 1594.616234][T28332] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 33377 - 0 [ 1594.639198][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1594.695976][T28684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14817'. [ 1594.804572][T28678] macvlan2: entered promiscuous mode [ 1594.842964][T28678] macvlan2: entered allmulticast mode [ 1594.867613][T28332] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 33377 - 0 [ 1594.924662][T28679] dvmrp0 speed is unknown, defaulting to 1000 [ 1595.044519][T28332] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 33377 - 0 [ 1595.149076][T28702] sctp: [Deprecated]: syz.1.14820 (pid 28702) Use of int in max_burst socket option deprecated. [ 1595.149076][T28702] Use struct sctp_assoc_value instead [ 1595.216610][T28332] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 33377 - 0 [ 1595.516000][T22708] Bluetooth: hci4: command tx timeout [ 1595.669274][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1595.724762][T28332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1595.758819][T28332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1595.813804][T28332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1595.870419][T28724] __nla_validate_parse: 1 callbacks suppressed [ 1595.870439][T28724] netlink: 72 bytes leftover after parsing attributes in process `syz.5.14825'. [ 1595.904526][T28332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1595.958014][T28724] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14825'. [ 1595.992714][T28724] IPv6: NLM_F_CREATE should be specified when creating new route [ 1595.996085][T32003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.238314][T28746] netlink: 'syz.6.14828': attribute type 15 has an invalid length. [ 1596.473504][T28332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.577275][T28332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1596.603827][T28760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14831'. [ 1596.614919][T31998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.622186][T31998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1596.642975][T32001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.652728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.709451][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1596.746537][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.753964][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1597.557847][T28332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1597.621061][T28804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14841'. [ 1597.749292][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1597.932728][T28332] veth0_vlan: entered promiscuous mode [ 1597.993685][T28332] veth1_vlan: entered promiscuous mode [ 1598.137285][T28332] veth0_macvtap: entered promiscuous mode [ 1598.202203][T28332] veth1_macvtap: entered promiscuous mode [ 1598.224505][T28840] netlink: 'syz.6.14846': attribute type 1 has an invalid length. [ 1598.290980][T28844] netlink: 56 bytes leftover after parsing attributes in process `syz.6.14846'. [ 1598.392827][T28822] netlink: 76 bytes leftover after parsing attributes in process `syz.6.14846'. [ 1598.398297][T28840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1598.402295][T28822] netlink: 320 bytes leftover after parsing attributes in process `syz.6.14846'. [ 1598.543477][T28332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1598.624793][T28332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1598.701383][ T6056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.721350][ T6056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.777954][ T6056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.789818][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1598.823018][T32002] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.204659][T32003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.230736][T32003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.386497][T31999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.395670][T31999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.636517][T28911] netlink: 'syz.5.14864': attribute type 21 has an invalid length. [ 1599.694671][T28911] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14864'. [ 1599.829567][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1600.468299][T28946] netlink: 'syz.5.14873': attribute type 1 has an invalid length. [ 1600.468921][T28940] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1600.542702][T28951] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14873'. [ 1600.605127][T28954] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14873'. [ 1600.659619][T28955] lo: Caught tx_queue_len zero misconfig [ 1600.684266][T28954] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1600.834241][T28967] netlink: 'syz.6.14876': attribute type 1 has an invalid length. [ 1600.869196][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1600.885048][T28967] netlink: 'syz.6.14876': attribute type 3 has an invalid length. [ 1600.906104][T28967] netlink: 'syz.6.14876': attribute type 7 has an invalid length. [ 1600.932903][T28967] netlink: 'syz.6.14876': attribute type 8 has an invalid length. [ 1600.974751][T28967] netlink: 184 bytes leftover after parsing attributes in process `syz.6.14876'. [ 1601.010865][T28967] NCSI netlink: No device for ifindex 131092 [ 1601.336084][T28993] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14885'. [ 1601.713083][T29020] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14887'. [ 1601.752790][T32003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.882147][T14766] lec:lec_start_xmit: lec0:No lecd attached [ 1601.909187][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1601.988460][T29027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14893'. [ 1602.190569][T29037] netlink: 'syz.6.14894': attribute type 1 has an invalid length. [ 1602.211512][T29038] veth0: entered promiscuous mode [ 1602.272439][T29038] veth0: left promiscuous mode [ 1602.370969][T29010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14888'. [ 1602.390260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.399507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.411759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.508546][T29054] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14899'. [ 1602.666966][T29057] tipc: Enabling of bearer rejected, failed to enable media [ 1602.949234][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1603.203736][T29078] netlink: 'syz.1.14906': attribute type 3 has an invalid length. [ 1603.215161][T29078] netlink: 'syz.1.14906': attribute type 3 has an invalid length. [ 1603.339990][T29086] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1603.403134][T29084] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1603.421624][T29092] netlink: 408 bytes leftover after parsing attributes in process `syz.0.14909'. [ 1603.468464][T29096] netlink: 408 bytes leftover after parsing attributes in process `syz.0.14909'. [ 1603.491208][T29084] bond4: (slave lo): Enslaving as an active interface with an up link [ 1603.516743][T29100] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14910'. [ 1603.522021][T29061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14901'. [ 1603.617572][T29105] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 1603.989238][ C0] net_ratelimit: 1 callbacks suppressed [ 1603.989258][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1604.038520][T29131] netlink: 'syz.0.14919': attribute type 1 has an invalid length. [ 1604.090981][T29131] bond1: entered promiscuous mode [ 1604.096815][T29131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1604.154903][T29136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1604.183772][T29139] netlink: 'syz.4.14921': attribute type 14 has an invalid length. [ 1604.234668][T29139] netlink: 'syz.4.14921': attribute type 13 has an invalid length. [ 1604.537156][T29162] netlink: 'syz.6.14927': attribute type 1 has an invalid length. [ 1604.612452][T29166] bond9: option mode: unable to set because the bond device has slaves [ 1604.725050][T29166] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1604.748267][T29168] tipc: Enabled bearer , priority 5 [ 1604.877139][T29177] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1605.029224][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1605.046009][T29189] bond0: Caught tx_queue_len zero misconfig [ 1605.290535][T29192] netlink: 'syz.6.14937': attribute type 21 has an invalid length. [ 1605.337688][T29198] dvmrp0 speed is unknown, defaulting to 1000 [ 1606.069201][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1606.414696][T29250] __nla_validate_parse: 17 callbacks suppressed [ 1606.414743][T29250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14953'. [ 1606.674953][T29265] netlink: 'syz.6.14957': attribute type 1 has an invalid length. [ 1606.805863][T29273] syzkaller0: entered promiscuous mode [ 1606.813247][T29273] syzkaller0: entered allmulticast mode [ 1606.872901][T31998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.949161][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5070 ms [ 1606.957379][ C1] lec:lec_tx_timeout: lec0 [ 1607.109206][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1607.281258][T29301] netlink: 'syz.4.14966': attribute type 2 has an invalid length. [ 1607.430521][T31998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.438960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.516590][ T1291] lec:lec_start_xmit: lec0:No lecd attached [ 1607.524392][ T1291] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1607.625825][T29277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1607.956236][T29324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14971'. [ 1608.035137][T29343] openvswitch: netlink: IPv4 tun info is not correct [ 1608.057586][T29324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14971'. [ 1608.175140][T29351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14978'. [ 1608.206941][T29345] bridge_slave_0: left allmulticast mode [ 1608.217996][T29345] bridge_slave_0: left promiscuous mode [ 1608.240148][T29345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.304431][T29360] netlink: 'syz.0.14976': attribute type 1 has an invalid length. [ 1608.326223][T29345] bridge_slave_1: left allmulticast mode [ 1608.342433][T29345] bridge_slave_1: left promiscuous mode [ 1608.350568][T29364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14980'. [ 1608.361874][T29345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.404369][T29345] bond0: (slave bond_slave_0): Releasing backup interface [ 1608.421882][T29345] bond0: (slave bond_slave_1): Releasing backup interface [ 1608.450966][T29345] team0: Port device team_slave_0 removed [ 1608.465323][T29345] team0: Port device team_slave_1 removed [ 1608.476702][T29345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1608.502317][T29345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1608.527103][T29345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1608.535488][T29345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1608.592128][T29365] sit3: entered promiscuous mode [ 1608.597167][T29365] sit3: entered allmulticast mode [ 1608.872713][T29384] netlink: 'syz.4.14984': attribute type 7 has an invalid length. [ 1608.917777][T29388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14985'. [ 1608.974239][T29397] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14985'. [ 1609.010548][T29397] netlink: 576 bytes leftover after parsing attributes in process `syz.6.14985'. [ 1609.189217][ C0] net_ratelimit: 2 callbacks suppressed [ 1609.189239][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1609.352692][T29415] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14989'. [ 1609.367002][T29411] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1609.435839][T29402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14989'. [ 1609.782220][T29430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1610.229239][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1611.269257][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1612.309262][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1612.630066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.642836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.652124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.949226][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1612.957307][ C1] lec:lec_tx_timeout: lec0 [ 1613.272277][T32003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.389628][ C0] net_ratelimit: 2 callbacks suppressed [ 1614.389650][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1615.429991][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1616.471554][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1617.509257][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1618.390614][T31999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.549282][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1619.031323][T31999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.040589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.589334][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1620.629259][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1621.669283][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1622.709287][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1623.432764][T32001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.749257][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1624.790570][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1624.800648][T32001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.808987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.829255][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1626.869330][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1627.909302][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1628.949260][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1629.271426][T32002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.989303][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1630.552776][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.561567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.029280][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1632.069283][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1633.112011][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1633.897889][T29452] __nla_validate_parse: 1 callbacks suppressed [ 1633.897911][T29452] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15003'. [ 1633.933856][T29455] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1633.949959][T29452] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15003'. [ 1633.979428][T29456] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1634.124737][T29466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15008'. [ 1634.149178][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1634.215570][T29470] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1634.234451][T29470] bond10 (unregistering): Released all slaves [ 1634.292369][T29473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1634.348840][T29471] syzkaller0: entered promiscuous mode [ 1634.364848][T29471] syzkaller0: entered allmulticast mode [ 1634.392887][T29479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15011'. [ 1634.587809][T29471] bridge_slave_1: entered allmulticast mode [ 1634.743865][T29491] can: request_module (can-proto-5) failed. [ 1634.903742][T29509] netlink: 'syz.1.15019': attribute type 1 has an invalid length. [ 1634.936216][T29515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15020'. [ 1634.974920][T29520] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15022'. [ 1635.018268][T29520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15022'. [ 1635.031150][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.121336][T29517] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1635.133747][T29517] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1635.154509][T29517] bond1: (slave vxcan3): making interface the new active one [ 1635.164636][T29517] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 1635.190807][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1635.538810][T29559] openvswitch: netlink: Flow actions attr not present in new flow. [ 1635.617909][T29558] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.15032'. [ 1635.674420][T32002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.677555][T29564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15033'. [ 1635.683703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.036771][T29588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1636.141675][T29590] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15043'. [ 1636.239183][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1636.482568][T29602] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1636.517212][T29612] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1636.526177][T29612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1636.538021][T29602] bond5 (unregistering): Released all slaves [ 1636.628659][T29611] bond3: entered promiscuous mode [ 1636.638534][T29611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1636.730980][T29621] bridge0: entered promiscuous mode [ 1636.737239][T29621] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 1636.821462][T29611] macvlan2: entered promiscuous mode [ 1636.841697][T29611] macvlan2: entered allmulticast mode [ 1636.850688][T29611] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 1637.007732][T29628] dvmrp0 speed is unknown, defaulting to 1000 [ 1637.070614][T29641] syzkaller0: entered promiscuous mode [ 1637.076269][T29641] syzkaller0: entered allmulticast mode [ 1637.269173][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1637.468123][T29660] netlink: 'syz.5.15062': attribute type 1 has an invalid length. [ 1637.717955][T29672] netlink: 'syz.1.15066': attribute type 4 has an invalid length. [ 1637.766249][T29672] netlink: 'syz.1.15066': attribute type 4 has an invalid length. [ 1637.808870][T29667] bond10: (slave gretap2): making interface the new active one [ 1637.817679][T29667] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 1638.185129][T32003] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 1639.233899][T29763] __nla_validate_parse: 7 callbacks suppressed [ 1639.233924][T29763] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15090'. [ 1639.527653][T29772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15093'. [ 1639.544408][T29772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15093'. [ 1639.735616][T29780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15094'. [ 1639.943351][T29793] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15098'. [ 1640.071141][ T6065] net_ratelimit: 5 callbacks suppressed [ 1640.071164][ T6065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.153960][T29803] netlink: 'syz.0.15102': attribute type 1 has an invalid length. [ 1640.162542][T29803] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15102'. [ 1640.198211][T29803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15102'. [ 1640.246311][T29808] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 1640.267988][T29808] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1640.389185][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1640.552237][T29831] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15110'. [ 1640.604188][T29834] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1640.900168][T29854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15117'. [ 1641.082978][T29866] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15121'. [ 1641.429613][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1641.463606][ T1332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.472121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.203268][T29913] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1642.469188][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1642.538460][T29933] "syz.4.15141" (29933) uses obsolete ecb(arc4) skcipher [ 1642.547534][T29933] openvswitch: netlink: Flow actions attr not present in new flow. [ 1642.785110][T29953] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1642.821766][T29954] bond0: entered promiscuous mode [ 1642.827234][T29954] bond_slave_0: entered promiscuous mode [ 1642.853684][T29954] bond_slave_1: entered promiscuous mode [ 1642.884052][T29954] bond0: left promiscuous mode [ 1642.889971][T29954] bond_slave_0: left promiscuous mode [ 1642.895726][T29954] bond_slave_1: left promiscuous mode [ 1643.509257][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1644.549269][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1645.523507][T29931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1645.599161][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1645.735522][T29964] __nla_validate_parse: 12 callbacks suppressed [ 1645.735543][T29964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15147'. [ 1645.745202][T29967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15148'. [ 1645.801022][T29967] bond0: entered promiscuous mode [ 1645.806215][T29967] bond_slave_0: entered promiscuous mode [ 1645.813548][T29967] bond_slave_1: entered promiscuous mode [ 1645.823054][T29967] bond0: left promiscuous mode [ 1645.828057][T29967] bond_slave_0: left promiscuous mode [ 1645.845987][T29974] netlink: 104 bytes leftover after parsing attributes in process `syz.4.15149'. [ 1645.855460][T29967] bond_slave_1: left promiscuous mode [ 1645.916323][T32007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.988716][T29980] tipc: Started in network mode [ 1645.996407][T29980] tipc: Node identity 56f0549be56c, cluster identity 4711 [ 1646.005929][T29980] tipc: Enabled bearer , priority 0 [ 1646.016947][T29980] +: renamed from syzkaller0 [ 1646.038568][T29980] tipc: Disabling bearer [ 1646.282005][T29989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.289832][T29989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.360804][T30006] netlink: 'syz.0.15156': attribute type 3 has an invalid length. [ 1646.381354][T30006] netlink: 'syz.0.15156': attribute type 3 has an invalid length. [ 1646.465708][T29989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1646.481620][T29989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1646.632231][T29989] vlan2: left allmulticast mode [ 1646.637633][T29989] mac80211_hwsim hwsim177 wlan0: left allmulticast mode [ 1646.639510][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1646.672210][T30000] : renamed from hsr0 [ 1646.706202][T30010] gtp1: entered promiscuous mode [ 1646.713886][T30010] gtp1: entered allmulticast mode [ 1646.721727][T31998] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.808971][T29996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.845197][T31998] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.871654][T30018] x_tables: duplicate underflow at hook 2 [ 1646.888173][T30017] netlink: 'syz.4.15161': attribute type 21 has an invalid length. [ 1646.938060][T30017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15161'. [ 1646.957026][T30017] netlink: 'syz.4.15161': attribute type 21 has an invalid length. [ 1646.992594][T30017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15161'. [ 1647.194355][T31999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.203321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.366936][T30046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15168'. [ 1647.456258][T30052] mac80211_hwsim hwsim148 syzkaller0: left promiscuous mode [ 1647.491012][T30052] mac80211_hwsim hwsim148 syzkaller0: left allmulticast mode [ 1647.669166][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1647.745408][T30072] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1648.111602][T30093] pim6reg: entered allmulticast mode [ 1648.199962][T30096] syzkaller0: entered promiscuous mode [ 1648.205522][T30096] syzkaller0: entered allmulticast mode [ 1648.263751][T30096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15184'. [ 1648.274924][T30099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15184'. [ 1648.335515][T30103] bond0: (slave gre0): refused to change device type [ 1648.357142][T30105] Unsupported ieee802154 address type: 0 [ 1648.517669][T30113] netlink: 'syz.5.15189': attribute type 1 has an invalid length. [ 1648.565797][T30115] netlink: 'syz.4.15190': attribute type 11 has an invalid length. [ 1648.656951][T30113] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1648.709758][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1648.808097][T30128] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15193'. [ 1648.914717][T30128] netlink: 'syz.0.15193': attribute type 1 has an invalid length. [ 1648.931994][T30138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15196'. [ 1648.945884][T30128] dvmrp0: entered allmulticast mode [ 1649.408110][T30167] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1649.749514][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1649.974355][T30200] mac80211_hwsim hwsim148 syzkaller0: entered promiscuous mode [ 1650.038405][T30200] mac80211_hwsim hwsim148 syzkaller0: entered allmulticast mode [ 1650.066767][T30207] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29184 [ 1650.243129][T30217] xt_hashlimit: size too large, truncated to 1048576 [ 1650.301035][T30228] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1650.799233][ C0] net_ratelimit: 1 callbacks suppressed [ 1650.799252][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1650.849049][T30243] veth0: entered promiscuous mode [ 1650.871800][T30216] veth0: left promiscuous mode [ 1651.068468][T30253] bond2: entered allmulticast mode [ 1651.085199][T30265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1651.184796][T30253] bridge3: entered promiscuous mode [ 1651.196513][T30253] bridge3: entered allmulticast mode [ 1651.274186][T30270] sit0: entered promiscuous mode [ 1651.322453][T30270] netlink: 'syz.4.15231': attribute type 1 has an invalid length. [ 1651.384614][T30270] __nla_validate_parse: 2 callbacks suppressed [ 1651.384635][T30270] netlink: 1 bytes leftover after parsing attributes in process `syz.4.15231'. [ 1651.536653][T30279] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1651.623753][T30285] netlink: 14 bytes leftover after parsing attributes in process `syz.5.15234'. [ 1651.661639][T30279] netlink: 14 bytes leftover after parsing attributes in process `syz.5.15234'. [ 1651.672019][T31998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.723006][T30279] bond0 (unregistering): Released all slaves [ 1651.829164][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1651.880513][T30292] netlink: 'syz.4.15238': attribute type 3 has an invalid length. [ 1651.907715][T30293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15238'. [ 1651.938361][T30297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15239'. [ 1651.966356][T30299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15240'. [ 1652.115743][T30307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15242'. [ 1652.310782][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.319197][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.869259][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1653.592327][ T30] INFO: task syz.3.13901:25442 blocked for more than 143 seconds. [ 1653.600712][ T30] Not tainted syzkaller #0 [ 1653.605708][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1653.617444][ T30] task:syz.3.13901 state:D stack:26120 pid:25442 tgid:25441 ppid:19575 task_flags:0x400140 flags:0x00080002 [ 1653.629864][ T30] Call Trace: [ 1653.633410][ T30] [ 1653.636410][ T30] __schedule+0x15dd/0x52d0 [ 1653.643626][ T30] ? __pfx___schedule+0x10/0x10 [ 1653.649501][ T30] ? schedule+0x90/0x360 [ 1653.653845][ T30] schedule+0x164/0x360 [ 1653.658435][ T30] schedule_preempt_disabled+0x13/0x30 [ 1653.664152][ T30] __mutex_lock+0x7fe/0x1300 [ 1653.668808][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1653.675463][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1653.682258][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1653.687390][ T30] ? stack_trace_save+0xa9/0x100 [ 1653.692599][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1653.698034][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1653.705714][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1653.711473][ T30] ? kasan_save_track+0x4f/0x80 [ 1653.716380][ T30] ? kasan_save_track+0x3e/0x80 [ 1653.721495][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 1653.726333][ T30] ? __alloc_skb+0x2c1/0x7d0 [ 1653.732453][ T30] ? netlink_dump+0x1ef/0xe80 [ 1653.737272][ T30] ? __netlink_dump_start+0x5cb/0x7e0 [ 1653.743429][ T30] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 1653.749728][ T30] ? genl_rcv_msg+0x5e8/0x7a0 [ 1653.754479][ T30] ? netlink_rcv_skb+0x232/0x4b0 [ 1653.761018][ T30] ? genl_rcv+0x28/0x40 [ 1653.765219][ T30] ? netlink_unicast+0x80f/0x9b0 [ 1653.770416][ T30] ? netlink_sendmsg+0x813/0xb40 [ 1653.775491][ T30] ? ____sys_sendmsg+0x972/0x9f0 [ 1653.780562][ T30] ? ___sys_sendmsg+0x2a5/0x360 [ 1653.785550][ T30] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1653.792291][ T30] ? do_syscall_64+0x14d/0xf80 [ 1653.797136][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.803442][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1653.810269][ T30] ? rcu_is_watching+0x15/0xb0 [ 1653.815103][ T30] ? trace_kmalloc+0x2a/0x110 [ 1653.821212][ T30] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1653.828130][ T30] genl_dumpit+0x10b/0x1b0 [ 1653.834762][ T30] netlink_dump+0x722/0xe80 [ 1653.839511][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 1653.845217][ T30] ? genl_start+0x499/0x6c0 [ 1653.851358][ T30] __netlink_dump_start+0x5cb/0x7e0 [ 1653.856666][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1653.862566][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1653.869449][ T30] ? genl_get_cmd+0x4a8/0x930 [ 1653.874217][ T30] ? __pfx_genl_start+0x10/0x10 [ 1653.880467][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 1653.885457][ T30] ? __pfx_genl_done+0x10/0x10 [ 1653.890624][ T30] genl_rcv_msg+0x5e8/0x7a0 [ 1653.895208][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1653.900401][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1653.906971][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1653.912857][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1653.920691][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1653.925534][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1653.930766][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1653.936126][ T30] ? down_read+0x272/0x2e0 [ 1653.942348][ T30] ? genl_rcv+0xd/0x40 [ 1653.947214][ T30] genl_rcv+0x28/0x40 [ 1653.952458][ T30] netlink_unicast+0x80f/0x9b0 [ 1653.957393][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1653.963108][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1653.968162][ T30] ? skb_put+0x11b/0x210 [ 1653.974507][ T30] netlink_sendmsg+0x813/0xb40 [ 1653.979634][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1653.985160][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1653.992021][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1653.997481][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1654.003626][ T30] ? futex_unqueue+0x211/0x240 [ 1654.008608][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1654.014063][ T30] ? import_iovec+0x73/0xa0 [ 1654.018759][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1654.023774][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1654.030937][ T30] ? futex_wait+0x29a/0x380 [ 1654.035551][ T30] ? __fget_files+0x2a/0x420 [ 1654.040394][ T30] ? __fget_files+0x3a0/0x420 [ 1654.045219][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1654.051888][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1654.057480][ T30] ? rcu_is_watching+0x15/0xb0 [ 1654.064118][ T30] do_syscall_64+0x14d/0xf80 [ 1654.068813][ T30] ? trace_irq_disable+0x3b/0x150 [ 1654.074694][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.081815][ T30] ? clear_bhb_loop+0x40/0x90 [ 1654.086556][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.093956][ T30] RIP: 0033:0x7f64fdb9c819 [ 1654.098440][ T30] RSP: 002b:00007f64feaa2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1654.107172][ T30] RAX: ffffffffffffffda RBX: 00007f64fde15fa0 RCX: 00007f64fdb9c819 [ 1654.115605][ T30] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1654.125364][ T30] RBP: 00007f64fdc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1654.133585][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1654.142215][ T30] R13: 00007f64fde16038 R14: 00007f64fde15fa0 R15: 00007ffc86cdfdf8 [ 1654.152777][ T30] [ 1654.155927][ T30] [ 1654.155927][ T30] Showing all locks held in the system: [ 1654.164345][ T30] 1 lock held by khungtaskd/30: [ 1654.169404][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1654.180968][ T30] 2 locks held by getty/5583: [ 1654.185707][ T30] #0: ffff8880325ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1654.196103][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1654.206735][ T30] 3 locks held by kworker/u8:39/32007: [ 1654.213399][ T30] #0: ffff8880b863ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1654.223650][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1654.234372][ T30] #2: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: rds_queue_reconnect+0x213/0x8c0 [ 1654.245638][ T30] 2 locks held by syz.2.12785/21436: [ 1654.251293][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1654.260283][ T30] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1654.271920][ T30] 3 locks held by syz.3.13901/25442: [ 1654.277243][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1654.285666][ T30] #1: ffff88804e7ea6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1654.296262][ T30] #2: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1654.308468][ T30] 1 lock held by syz.0.15239/30294: [ 1654.314475][ T30] #0: ffff8880573bf148 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 1654.326099][ T30] 4 locks held by syz.0.15239/30297: [ 1654.332632][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1654.341179][ T30] #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1654.350335][ T30] #2: ffff8880573bf148 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3f/0x350 [ 1654.360956][ T30] #3: ffff8880983e4350 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdd0 [ 1654.370486][ T30] 2 locks held by syz.5.15241/30304: [ 1654.375910][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1654.384449][ T30] #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1654.394776][ T30] 2 locks held by syz.1.15242/30306: [ 1654.400329][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1654.408594][ T30] #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1654.417735][ T30] 2 locks held by syz.1.15242/30307: [ 1654.424745][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1654.434036][ T30] #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1654.443503][ T30] 2 locks held by syz.4.15243/30310: [ 1654.448835][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1654.458969][ T30] #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1654.468395][ T30] 2 locks held by syz.4.15243/30311: [ 1654.474536][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1654.484964][ T30] #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1654.494833][ T30] 2 locks held by syz.4.15243/30319: [ 1654.500410][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1654.508979][ T30] #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1654.522932][ T30] 2 locks held by syz.6.15244/30316: [ 1654.528275][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1654.536950][ T30] #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1654.547696][ T30] 2 locks held by syz.6.15244/30317: [ 1654.555524][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1654.565074][ T30] #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1654.575014][ T30] [ 1654.577395][ T30] ============================================= [ 1654.577395][ T30] [ 1654.587223][ T30] NMI backtrace for cpu 0 [ 1654.587243][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1654.587269][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1654.587283][ T30] Call Trace: [ 1654.587290][ T30] [ 1654.587299][ T30] dump_stack_lvl+0xe8/0x150 [ 1654.587328][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1654.587347][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1654.587372][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1654.587455][ T30] sys_info+0x135/0x170 [ 1654.587488][ T30] watchdog+0xfd9/0x1030 [ 1654.587517][ T30] ? watchdog+0x21a/0x1030 [ 1654.587555][ T30] kthread+0x388/0x470 [ 1654.587574][ T30] ? __pfx_watchdog+0x10/0x10 [ 1654.587588][ T30] ? __pfx_kthread+0x10/0x10 [ 1654.587606][ T30] ret_from_fork+0x51e/0xb90 [ 1654.587632][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1654.587653][ T30] ? __switch_to+0xc7d/0x1450 [ 1654.587676][ T30] ? __pfx_kthread+0x10/0x10 [ 1654.587693][ T30] ret_from_fork_asm+0x1a/0x30 [ 1654.587732][ T30] [ 1654.587739][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1654.707392][ C1] NMI backtrace for cpu 1 [ 1654.707412][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1654.707432][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1654.707444][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1654.707473][ C1] Code: ce 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f2 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1654.707489][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1654.707506][ C1] RAX: 0000000000553551 RBX: ffffffff819a91fa RCX: 0000000080000001 [ 1654.707519][ C1] RDX: 0000000000000001 RSI: ffffffff8defadf3 RDI: ffffffff8c27d100 [ 1654.707532][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 1654.707546][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 1654.707559][ C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000 [ 1654.707572][ C1] FS: 0000000000000000(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 1654.707587][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1654.707599][ C1] CR2: 00007f1516c42e9c CR3: 0000000076094000 CR4: 00000000003526f0 [ 1654.707616][ C1] Call Trace: [ 1654.707625][ C1] [ 1654.707632][ C1] default_idle+0x9/0x20 [ 1654.707658][ C1] default_idle_call+0x72/0xb0 [ 1654.707685][ C1] do_idle+0x36a/0x5f0 [ 1654.707720][ C1] ? __pfx_do_idle+0x10/0x10 [ 1654.707750][ C1] cpu_startup_entry+0x43/0x60 [ 1654.707775][ C1] start_secondary+0x101/0x110 [ 1654.707796][ C1] common_startup_64+0x13e/0x147 [ 1654.707824][ C1] [ 1654.882411][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1654.889365][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1654.898520][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1654.908627][ T30] Call Trace: [ 1654.911981][ T30] [ 1654.914945][ T30] vpanic+0x56c/0xa60 [ 1654.918974][ T30] ? __pfx___schedule+0x10/0x10 [ 1654.923897][ T30] ? __pfx_vpanic+0x10/0x10 [ 1654.928445][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1654.933686][ T30] panic+0xc5/0xd0 [ 1654.937447][ T30] ? __pfx_panic+0x10/0x10 [ 1654.941901][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1654.947309][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1654.953495][ T30] watchdog+0x1023/0x1030 [ 1654.957860][ T30] ? watchdog+0x21a/0x1030 [ 1654.962317][ T30] kthread+0x388/0x470 [ 1654.966418][ T30] ? __pfx_watchdog+0x10/0x10 [ 1654.971119][ T30] ? __pfx_kthread+0x10/0x10 [ 1654.975747][ T30] ret_from_fork+0x51e/0xb90 [ 1654.980548][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1654.985791][ T30] ? __switch_to+0xc7d/0x1450 [ 1654.990510][ T30] ? __pfx_kthread+0x10/0x10 [ 1654.995150][ T30] ret_from_fork_asm+0x1a/0x30 [ 1654.999974][ T30] [ 1655.003625][ T30] Kernel Offset: disabled [ 1655.007962][ T30] Rebooting in 86400 seconds..