last executing test programs: 4m42.196390324s ago: executing program 0 (id=1985): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="120000005400012c000000000000000007"], 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0xfffffffe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffb}]}}}]}, 0x40}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000640)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}}, 0x14}}, 0x0) 4m42.00333466s ago: executing program 0 (id=1991): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=@delchain={0x24, 0x26, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff3}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=@delchain={0x24, 0x26, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff3}}}, 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x3}], 0x2, 0x40002320, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4m41.946941422s ago: executing program 0 (id=1992): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000440), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003a0001032bbd7000fcffffff08000000032ed67f237a0d484e017857edc2db210cd798c07f4b4de15374eed7a7e94dda309e0d3910c206519ab2858773fdc3a4985676689abcdf619967fdddd555d68029fafbde35962ec3a151"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000440), 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003a0001032bbd7000fcffffff08000000032ed67f237a0d484e017857edc2db210cd798c07f4b4de15374eed7a7e94dda309e0d3910c206519ab2858773fdc3a4985676689abcdf619967fdddd555d68029fafbde35962ec3a151"], 0x14}}, 0x0) (async) 4m39.049657739s ago: executing program 0 (id=1996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/195, 0xc3}], 0x1) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f00000000c0)={@remote, @multicast1, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newchain={0x1800, 0x64, 0x8, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1}, {0x2, 0x8}, {0x0, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x17cc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x7d}, @TCA_U32_CLASSID={0x8, 0x1, {0x86cc2ad2746a361c, 0x10}}, @TCA_U32_SEL={0x6d4, 0x5, {0xf, 0x9, 0x4, 0x1, 0x9928, 0x7, 0x7fff, 0x1, [{0x5, 0x8f7, 0x200, 0x8158}, {0x81, 0x5a4d, 0x80000000, 0x10}, {0xa09, 0x7, 0x1, 0x90000000}, {0x4, 0x80, 0x6b53f946, 0x46e4291f}, {0x7, 0x2800000, 0x44e, 0x8}, {0x9, 0x6, 0x6, 0x7}, {0x7e, 0x200, 0x8, 0x1}, {0x7, 0x8, 0xfffffe01, 0x22}, {0x4, 0x78f, 0x1, 0x5}, {0x121d, 0x8, 0x2c, 0x6}, {0x2, 0x55, 0x3ff, 0x200}, {0x1, 0x7, 0x6, 0xe}, {0x7fff, 0x4, 0x9, 0x3}, {0x9, 0x0, 0x9, 0xcd2c}, {0xd, 0xffffff1e, 0x1}, {0x80000001, 0x7, 0x9, 0x4ab0d82b}, {0x5, 0x5, 0xda8, 0x6}, {0xffff0001, 0x8, 0x7}, {0xbf7e, 0x84, 0x80, 0x5}, {0xfffffff9, 0x7f, 0x9, 0x9597}, {0x8, 0xeb, 0x9, 0x7fffffff}, {0x64a78e43, 0xd, 0xe6a, 0x80}, {0x160b, 0x39e41a82, 0x6, 0x26}, {0x4, 0x5, 0x2, 0x20000000}, {0x7fff, 0x9, 0xf3ff, 0x10001}, {0x4, 0xffffffff, 0x3, 0x5}, {0x0, 0x14, 0x9, 0x1}, {0xfffffffa, 0x1, 0xfffffffe, 0xfffffffb}, {0x2, 0x3, 0x7, 0x1}, {0x1, 0x3e936b9b, 0xffffffff, 0xe4}, {0x3, 0xd, 0xe, 0x10d}, {0x2, 0x7, 0x85, 0x3}, {0x3, 0x1, 0x6}, {0x3, 0x7e7, 0x0, 0x1}, {0x80, 0x6, 0x7, 0x9}, {0x7, 0x55, 0xb, 0x80000001}, {0x8, 0x2, 0x2, 0x1}, {0x5, 0x8d, 0x2, 0x9}, {0x2, 0x3, 0x9, 0xfffffff0}, {0x4, 0x1, 0x0, 0x3}, {0x0, 0x8, 0x2, 0x1}, {0x6, 0xf78, 0x5, 0xd}, {0x10001, 0x7f, 0x4, 0x8}, {0x1, 0x4, 0x7ff, 0x8}, {0x8, 0x0, 0x2, 0x1}, {0x7, 0x1, 0x9, 0x2}, {0xee3, 0xffffffff, 0x1c19, 0x6}, {0x6, 0x10, 0xfffffffa, 0xff}, {0x10, 0x5, 0x3, 0xc}, {0x3, 0x2, 0x7ff, 0x4}, {0x400, 0x9, 0xd4, 0x4}, {0x0, 0x7fffffff, 0x5, 0x9}, {0x80, 0x9, 0x5}, {0x238b32cd, 0x4, 0x80, 0x6}, {0x9, 0x3, 0xc8, 0x7}, {0x7, 0x8000, 0x7, 0xffffffff}, {0x7ff, 0x7f, 0x10001, 0x10}, {0x5, 0x0, 0x334a, 0x3}, {0x3, 0x6, 0x564b, 0x1}, {0x4, 0x8, 0x100, 0x7383}, {0x0, 0x7f, 0x5, 0x5}, {0x4, 0xfc76, 0x8, 0x3}, {0x1ff, 0x4, 0x4, 0xc7}, {0x4, 0x9, 0x9, 0x1fec}, {0x6, 0x10001, 0x7, 0x9}, {0x2, 0x81, 0x3, 0x3}, {0x1, 0x637, 0x1, 0x4}, {0x4, 0x9b, 0x7, 0x18000}, {0x4, 0x43b1, 0xe5}, {0x4, 0x4a, 0x6, 0x1}, {0x8, 0x2, 0x7fffffff}, {0x3ff, 0x552, 0x7, 0x1000}, {0x9, 0x1, 0x3, 0x6}, {0xd, 0xfa9ac8ab, 0x1, 0x307}, {0xd9c6, 0xd85, 0xfffffff7, 0x1}, {0x0, 0x1c35, 0x3}, {0x7, 0x9, 0x80000001, 0x6}, {0x8001, 0x9a11, 0x1ff, 0x4}, {0x7, 0x1000, 0x8, 0x7}, {0x69a, 0x400, 0x6a0, 0x200}, {0x8, 0x9, 0x3, 0x1}, {0x63a, 0x5, 0x4, 0x8}, {0xf, 0x10, 0x1f19, 0x6}, {0xea8d, 0x6, 0x5, 0x7ff}, {0xc44, 0xfffffff7, 0x2, 0xffffff3e}, {0x8, 0x5d48, 0xf2f1, 0x8}, {0x4, 0x5, 0x3}, {0x7ff, 0x531800, 0x5, 0xff}, {0xfffffffe, 0x6, 0x961c, 0x40}, {0x8, 0x800, 0x9, 0x51}, {0xfffffffe, 0x8, 0x5, 0xd4}, {0xb, 0x6c1, 0x0, 0x8}, {0x0, 0x3, 0x18, 0x1}, {0x6, 0x191, 0x5, 0x401}, {0xb, 0x5, 0x9, 0xfff}, {0x6, 0x3, 0x1}, {0x4, 0xa7f, 0x7fffffff, 0x4}, {0x8, 0x1, 0x7ff, 0x1}, {0x3, 0x4, 0xc6, 0x8001}, {0x56, 0x3, 0xf8ed, 0xffffffdf}, {0x8, 0x0, 0xf}, {0x22e4, 0x4, 0x1, 0x80}, {0x7, 0x5, 0x2}, {0x0, 0x3, 0xb40}, {0x7fffffff, 0xfff, 0x3, 0x1}, {0xfffffffe, 0x2, 0x0, 0x8}, {0xa3, 0x5, 0x6, 0x1}, {0x7ff, 0x7, 0xa8, 0xffffffff}]}}, @TCA_U32_ACT={0x10e4, 0x7, [@m_tunnel_key={0x1058, 0x9, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x1, 0x0, 0x4, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x88, 0x18, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '(\'+:\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x0, 0x1, 0x9c, 0xe5bf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x1, 0x5, 0x6, 0x7ff}}]}, {0x9, 0x6, "0da6e1fba3"}, {0xc, 0x7, {0x1, 0xee9ebacb92b3e875}}, {0xc, 0x8, {0x4, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x4}}]}, 0x1800}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0xc014) 4m38.772614981s ago: executing program 0 (id=2000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d13}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000c40)={{r4}, "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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r6 = accept(r2, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c00)="d08c22a9424c4eb7ffcceebe7f5afa1a", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r6, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xd6) 4m35.749589862s ago: executing program 0 (id=2014): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff225}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}]}, 0x6c}}, 0x44002) syz_emit_ethernet(0x2a, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="74ed79be16f4", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast}, {0x17, 0x7c, 0x0, @broadcast}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002600010028bd7000fcdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x60048840}, 0x20000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 4m20.201006899s ago: executing program 32 (id=2014): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff225}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}]}, 0x6c}}, 0x44002) syz_emit_ethernet(0x2a, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="74ed79be16f4", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast}, {0x17, 0x7c, 0x0, @broadcast}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002600010028bd7000fcdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x60048840}, 0x20000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 2m10.864528094s ago: executing program 1 (id=3525): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000007440)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, '\x00', "cd178e27c9f2efcc95cfdcb7c5d6c030", "61fe1374", "55b60162d58b6bff"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="270000041000030400000000e5ff000100000000", @ANYRES32=0x0, @ANYBLOB="3502000081280000280012800e00010069703665727370616e0000001400028005000b00090000000500160002000000"], 0x48}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) 2m10.213332332s ago: executing program 1 (id=3532): socket$inet6(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="01002ebd7000fbdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000047fd0b0000180000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000500)="80f949b369c2b95970a4c1edfdb5b567a65762567d2946d5acc725281cec7ef6d0f256b383694b9e47139db0e825d87a650b9d8993199bbabe1fc4f6e92bc4e10b0051a69f44a194be55fd72f5e665510a3fcbd6c014465cd54b1f4dba31b7687f3404a22e41a5042e1b060ba161e841b718c59affaa4cff64e37400"/133, 0x85, 0x800, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000340)=0x14, 0x0) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffffffffffffff7f) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x14, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x80000002}, 0xc) 2m9.694986021s ago: executing program 1 (id=3537): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) (async) openat$cgroup_devices(r4, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040012) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r12, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) (async) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="7af7272e", @ANYRES16=r8, @ANYBLOB="7961fdffffff000000007e0000000c0099006c91000014000000"], 0x20}}, 0x4000054) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 2m9.336515255s ago: executing program 1 (id=3540): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70fd27, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x29, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) 2m8.841053395s ago: executing program 1 (id=3544): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="2c0000001600e5c89297010000000000fcffffff0a00a494dfb48b8dc3df95079dad9c", @ANYRES32=0x0, @ANYBLOB="140006000400000003000000ff7f0000ffffffff", @ANYRESHEX=r0], 0x2c}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000180)={{r0}, r1, 0x0, @inherit={0x50, &(0x7f0000001180)=ANY=[@ANYBLOB="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"]}, @name="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"}) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x4c}, {0x80000006}]}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) close(r4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) write$nci(r4, 0x0, 0xffffffa3) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000021401002abd700002dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_emit_ethernet(0x27, &(0x7f0000004740)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@generic={0x19, "c228ff42bf301600e60f7ef33af45bd4719fd94599d9e0a1a6"}}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd0, &(0x7f00000000c0)=0xb, 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xc, 0x0, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10) 2m8.450495212s ago: executing program 1 (id=3550): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x11, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="eca421ae94e45385ca"], 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x8, {{0xa, 0x4e24, 0x4, @mcast2, 0x99}}}, 0x88) 1m53.394961635s ago: executing program 33 (id=3550): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x11, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="eca421ae94e45385ca"], 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x8, {{0xa, 0x4e24, 0x4, @mcast2, 0x99}}}, 0x88) 1m44.857676101s ago: executing program 6 (id=3795): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000000100)="a9", 0x1}, {&(0x7f00000005c0)="55657ce3e8a34ccb7984beafe9f3ad456f68b1dff512d2796c39a377c3ed93f7e372bd7208cd36711f237b907857ae68f3b8868fc956a3e7e318e027fce1f76e082ffdd6c55c0bdd1a7f0e7ccdf667e8be5f4004f4ddc99f3cbf41b268df3e8a54f8135a34b698e12a3403c256adadafe833b7eb76282dba34823f6709540ea891f46613a8c5d04142081c76ddbbf19105eaf2c84e17263f6d86e9bd80b61b2091e2a7d2657db4342d2191d0da0c528859f292fe83b03a0fedb747ec506475ed12b16ec0642ea070aeebc00c551f0367eb7dd87abb4bd1a36e41c02455f845ff", 0xe0}, {&(0x7f0000000740)="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", 0x71f}], 0x3, 0x0, 0x0, 0x880}], 0x1, 0x80001) splice(r4, 0x0, r1, 0x0, 0x800, 0x0) 1m43.831720813s ago: executing program 6 (id=3811): r0 = socket(0x1d, 0x3, 0xfff) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (async) r3 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r3, 0x10f, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x25907ddc19b3493b, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_newvlan={0x4c, 0x70, 0x300, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8001}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 64) 1m43.66154704s ago: executing program 6 (id=3814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xb0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x1d, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xb0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x1d, &(0x7f0000000000), 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) (async) 1m43.293567014s ago: executing program 6 (id=3820): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 1m43.142237885s ago: executing program 6 (id=3823): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r0, &(0x7f0000000080)=""/22, 0x16) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) read(r0, &(0x7f0000000080)=""/22, 0x16) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) 1m43.021545168s ago: executing program 6 (id=3824): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061107e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) 1m27.948136179s ago: executing program 34 (id=3824): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061107e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) 3.009005292s ago: executing program 5 (id=4828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800000013"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.841188909s ago: executing program 5 (id=4829): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r1}) r2 = accept(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000100)=0x80) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000140)=0xfd, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000001c0)={0x7, 0x28, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) readv(r3, &(0x7f0000001600)=[{&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)}, {&(0x7f0000001280)=""/66, 0x42}, {&(0x7f0000001300)=""/58, 0x3a}, {&(0x7f0000001340)=""/32, 0x20}, {&(0x7f0000001380)=""/188, 0xbc}, {&(0x7f0000001440)=""/5, 0x5}, {&(0x7f0000001480)=""/75, 0x4b}, {&(0x7f0000001500)=""/196, 0xc4}], 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001780)={0x0, 0x88, &(0x7f00000016c0)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1000}, @in6={0xa, 0x4e22, 0xc851, @mcast1, 0x2}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f00000017c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000001800)={r4, 0x9, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000001840)={r4, 0x8001}, 0x8) write$cgroup_subtree(r0, &(0x7f0000001880)={[{0x2d, 'net_prio'}, {0x2b, 'freezer'}]}, 0x13) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000018c0)={r0}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000001900)) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000001980)='batadv0\x00') setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f00000019c0)=0xa44, 0x4) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000001a00)={@multicast1, @multicast1}, 0x8) setsockopt$MRT_ASSERT(r5, 0x0, 0xcf, &(0x7f0000001a40), 0x4) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000001ac0), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, r6, 0x200, 0x5, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000011}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000001bc0)={{0x84, @loopback, 0x4e24, 0x4, 'wrr\x00', 0xf, 0x0, 0x17}, {@rand_addr=0x64010100, 0x4e20, 0x3, 0xffff, 0x163, 0x1}}, 0x44) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)=@gettclass={0x24, 0x2a, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xf}, {}, {0xfff3, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000180) ioctl$FIONCLEX(r5, 0x5450) unshare(0x10000) bind$bt_rfcomm(r5, &(0x7f0000001d40)={0x1f, @any, 0x1}, 0xa) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000001d80)=""/34) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001dc0)=0x2, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000001e00)) r7 = accept$inet(r2, 0x0, &(0x7f0000001e40)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000001e80)={0x0, 'veth0_macvtap\x00', {0x4}, 0x31}) getsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000001ec0), &(0x7f0000001f00)=0x4) 2.673519969s ago: executing program 5 (id=4833): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x42, &(0x7f0000000940)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x69}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x2}) sendto$inet(r0, &(0x7f0000000300)="9e", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1c0000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x301, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) 1.910690615s ago: executing program 3 (id=4844): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x1170, 0x1170, 0x140, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x9, 0x7, 0x7, 0x100, 0x3, 0x9, 0x81}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xffffffff, 0x0, 0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 1.797509388s ago: executing program 7 (id=4845): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000afa7c7951a02db4646d60004eef29ee7544d30bc000000800000002c5b7708560945ca25c0ea1f49641d545b8dbd95a9f6fd903e33cd21683f9ee8d4168fda23785bd28fd60332d35be8c2c5696dea122a459dc0829f810e19fbdc15bbd1fdd09d06f165b5cb3eeea2e63ab2191ec733c298603f7510d8c5901d34b3efe82861e19bdeb63e17cebd7d51808cf5b5e8a1fbe3ec2d0980fce659abf2dbec2be9fba479aebfdcb2aab35ba780bc9ae1d379bb7aca22820a9ad59f5f06d7b9f727c17ba93c7d28df8adef3d61f150f24a2077a2eaccb6d71994b473397a185296ba0cd4ebedf57ad0053c19d0fe4fdae6737349791f494f8fc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 1.773992615s ago: executing program 2 (id=4846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r7, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0x0, 0x8, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)='\'', 0x1}, {&(0x7f0000000480)="19e84308dd2cfa55d3707d", 0xb}], 0x2}, 0x20004014) socket$inet6(0xa, 0x80000, 0x7) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.731544517s ago: executing program 5 (id=4847): r0 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)=r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0xa1c, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000200)=0x2, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000881) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r5, 0x1, 0x70bd25, 0x7ff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4088090}, 0x4000050) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000700)={r4, &(0x7f0000000600)='!#@\x00', 0x626400, &(0x7f0000000640)={@align=0xa, {0x200, 0x80, 0x0, 0x7c}}, 0x8, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x7fffffff}) sendmsg$nl_generic(r9, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x6d547d8cce89bc0}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x20, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x94, 0x0, 0x0, @str='nbd\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x1, '\x00', 0x0, r9, 0x2, 0x3, 0x1}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0xffffffffffffffff, 0x404}, 0xc) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x28, 0x26, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x750}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x39c000b7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb}, @alu={0x7, 0x1, 0x2, 0x0, 0x3, 0x20, 0x8}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0xbe, &(0x7f00000009c0)=""/190, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0x9, 0x0, 0xb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[r10, r9, r9, r11, r9], &(0x7f0000000bc0)=[{0x2, 0x2, 0x9, 0x1}, {0x5, 0x2, 0x5, 0x5}], 0x10, 0x1}, 0x94) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x4) sendmsg$nl_route(r4, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)=@ipv4_newroute={0x60, 0x18, 0x800, 0x70bd28, 0x25dfdbfc, {0x2, 0x80, 0x20, 0x6, 0xfd, 0x2, 0x0, 0x7, 0x2400}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0x1f, 0x1}}, @RTA_IIF={0x8, 0x3, r13}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_UID={0x8}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_MARK={0x8, 0x10, 0x4}, @RTA_SRC={0x8, 0x2, @local}, @RTA_MARK={0x8, 0x10, 0x3ff}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000000e80)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@fallback=r12, 0x15, 0x0, 0x2, &(0x7f0000000ec0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001040)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001000)={@map=r9, r9, 0x16, 0x20, 0x0, @void, @void, @void, @value=r15, r14}, 0x20) sendmsg$nl_route(r4, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000010c0)=@can_delroute={0x16c, 0x19, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x20, 0x63, 0x3c, 0x9, 0x6, "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", 0x0, "616b9d5fdd186d7c1c09767553b1b38554c8c83d"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "15415f25bb9a406c"}, 0x5}}, @CGW_LIM_HOPS={0x5, 0xd, 0x5}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "00739bc9777e9ec1"}, 0x4}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x10}, 0x8015) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000012c0)=0x7, 0x4) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000001300)=0xfffffe00, 0x4) 1.665029158s ago: executing program 3 (id=4849): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280"], 0x48}}, 0x40000) 1.66108541s ago: executing program 7 (id=4850): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=':', 0x1}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x242000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'veth1_to_bridge\x00', @broadcast}) 1.459697646s ago: executing program 3 (id=4852): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r4}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r7 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010003904000000100080000000000000", @ANYRES32=r10, @ANYBLOB="01980600000000002000128008000100677265001400028008000700ac14140206000e0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r7, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r10, 0x1, 0x4}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, r3, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x34}}, 0x0) 1.281351398s ago: executing program 7 (id=4853): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x80, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x1, 0x0, 0x0, {0x7, 0xc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x8, 0xc6}}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac06, 0xfac01, 0xfac0d, 0xfac09]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100000, {0x7ff, 0x1, 0x6, 0x3}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8040}, 0x5) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newlink={0xc0, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'vxcan0\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0147f3398f4fb4931076484b581085c2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "00000000000000000000000002abdfd3"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'ip6gre\x00'}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip6_vti0\x00'}]}, 0xc0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) 1.170521083s ago: executing program 5 (id=4855): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007100250428bd70507f00000007000000", @ANYRES32=r3, @ANYBLOB="0c0300800870fcb6eeefe9622b655a391f41"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) (async) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x8) (async) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0x9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007100250428bd70507f00000007000000", @ANYRES32=r3, @ANYBLOB="0c0300800870fcb6eeefe9622b655a391f41"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040000) (async) 1.145865838s ago: executing program 4 (id=4856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x1010, r2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x51fc, 0x6, 0x5}}}}]}, 0x40}}, 0x840) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x26, "bcfd472b277b9c22455d7c95ac96af3b64493f46c67a480de58073ee0800b0e71c114c912fd9"}, &(0x7f0000000340)=0x2e) mmap(&(0x7f0000947000/0xe000)=nil, 0xe000, 0x0, 0x12, r3, 0xd1383000) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000240)=0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r9, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r9, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_macvtap\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000001c0)={r10, r11/1000+60000}, 0x10) ioctl$PPPIOCSNPMODE(r9, 0x4008744b, &(0x7f0000000380)={0x2f}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x25ffdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {0x0, 0x9}, {0x9, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x2400800b) shutdown(r3, 0x0) 1.077124305s ago: executing program 2 (id=4857): r0 = socket$nl_generic(0x11, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 982.534454ms ago: executing program 7 (id=4858): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@union={0xe, 0x1, 0x0, 0x5, 0x0, 0x9, [{0x10, 0x3, 0x7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x30, 0x61]}}, 0x0, 0x4c, 0x0, 0x1, 0x7fffffff}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@generic="299a50bdc19377268b5707eafb"]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 875.627715ms ago: executing program 3 (id=4859): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000300)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18002266000000000600000018010000786c6cfb0000000000202020630af8ff000000f3bca100000000000026010000f8ffffffb702000008000000b70300000000000085000000080000009500"/88], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x10a2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000001e0000012c00000007000000c56fd99e0c000000000a8b7d42cd9074da4b00000000aff3d647a37ebf944d7d05736d6c3982c631e70bc6423f7a891f0625a7881eba2eaee2b5e505bf15c79f81d54b2447a3d28f926212c2a70879420b76fe", @ANYRES32=0x0, @ANYBLOB="0000000014010100"], 0x20}}, 0xc024) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r2, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r2, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000e7ffff07000340"], 0x88}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000380)={0x2, &(0x7f0000000780)=[{0xc5, 0x6, 0x1, 0x8}, {0x6, 0x5, 0x3}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000240)={0x0, 0x0}) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f0000000340)=0xfffffd6f) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) 781.31324ms ago: executing program 2 (id=4860): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = accept$unix(r1, &(0x7f0000000000), &(0x7f0000000140)=0x6e) bind$unix(r2, &(0x7f00000000c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14"], 0x18, 0x8800}}], 0x1, 0x40001) accept(r0, 0x0, 0x0) 780.767215ms ago: executing program 4 (id=4861): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001240)=@generic={&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) (async) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="e2", 0x1}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xfffffc01}}], 0x38, 0x4048800}, 0x10) 767.289374ms ago: executing program 7 (id=4862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xca, &(0x7f00000003c0)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x1d, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0xc, 0x44, 0x0, 0x4, [0x6, 0x7]}, @end, @noop, @timestamp_prespec={0x44, 0x14, 0x7a, 0x3, 0x2, [{@empty, 0x500000}, {@local, 0x6}]}, @noop, @end, @ssrr={0x89, 0x1f, 0xbd, [@loopback, @remote, @broadcast, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x43}, @loopback]}, @noop, @lsrr={0x83, 0x1b, 0x34, [@multicast1, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, @loopback]}]}}, {0x4e23, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "eed95425ef497343e285ee56ff9cd27f91306943185560d0", "424927f0b3a5b1a5bae583a55bca1d80986985716b5fe7237cbf62ea040ff7c4"}}}}}}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000040)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x29, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x15, 0x0, @gue={{0x1, 0x1, 0x2, 0x42, 0x0, @void}, "efc159f70f4ada3ed7"}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @fallback=0x28}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0xd}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000280)="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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r6, 0x0, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) tee(r1, r1, 0x4, 0x5) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, 0x0, 0x1) sendmsg$nl_route(r1, 0x0, 0x4054) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4020) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) 663.511176ms ago: executing program 2 (id=4863): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) (async) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, 0x0, 0x15) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r5, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r3, 0x71}, 0x8) (async, rerun: 64) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async, rerun: 64) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) (async) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 616.81043ms ago: executing program 4 (id=4864): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000300000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe80010000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e000000200000000000000000000000000000101200100000000f90000000000000000022b030000043500000a0002"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 469.85629ms ago: executing program 4 (id=4865): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffff7) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) 434.972736ms ago: executing program 3 (id=4866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 369.498102ms ago: executing program 2 (id=4867): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xfffffffffffffeb2, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000340), 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x4, 0x0, 0x3504, 0x2, 0x2}]}]}, 0xa0}}, 0x0) 277.504083ms ago: executing program 4 (id=4868): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x400000, 0x200}, 0x48) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xffbd}}, 0x26) syz_emit_ethernet(0x38, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffaadd5d63f8a0c15214f4fc5a50f9ffffffffaaaaaaaaaabb08004504002a0000000000119078000000000000000000004e2000169078c209000180000000dfcbbc0b8501"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa42123972"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x2b, 0x1, 0x1) 166.850693ms ago: executing program 3 (id=4869): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/1, 0x1}, {&(0x7f0000000700)=""/237, 0xed}], 0x2, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x40000020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc}}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f00000006c0)={&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/184, 0xb8}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES16=r3, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) 117.609576ms ago: executing program 2 (id=4870): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000840), 0x2, 0x0) r3 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa1}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 116.136126ms ago: executing program 7 (id=4871): r0 = socket(0x2a, 0x2, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0xbc0, 0xa90, 0xa90, 0x8c8, 0x9f8, 0xa90, 0xb28, 0xb28, 0xb28, 0xb28, 0xb28, 0x6, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {0xff}, 0x88, 0x3}, 0x0, 0x8a0, 0x8c8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x1, 0x3}, {0x8e7, 0x2}, {0xfffffffa, 0x3}, {0xd6, 0x2}, {0xe, 0x2}, {0x7fff, 0x3}, {0x4ecb}, {0xc, 0x1}, {0x9}, {0x7f, 0x1}, {0x1, 0x5e52da49e9971af3}], [{0x1000, 0x6}, {0x2, 0x8f5c}, {0x9, 0x28a}, {0x400, 0x5}, {0x9, 0x6}, {0xff, 0xf2f7}, {0x80, 0x7f80000}, {0xffffff81, 0x1}, {0x1, 0x9}, {0x7f, 0xffff7fff}, {0x5, 0x3}], 0x8, 0x3}, {[{0x40, 0x2}, {0xfff, 0x1}, {0x10, 0x1}, {0x1, 0x1}, {0x9, 0x3}, {0x7, 0x2}, {0x0, 0x3}, {0x8000, 0x2}, {0xfffe0000}, {0x54, 0x2}, {0xffff}], [{0x8, 0x7}, {0x9}, {0x5d5, 0x5}, {0x6, 0xfffffffa}, {0x1, 0x1cf08}, {0x8, 0x8}, {0x5, 0x1}, {0x14, 0x5}, {0xb, 0x8001}, {0x7, 0x5}, {0x1, 0x1000}], 0x7, 0xb}, {[{0xfffffff7, 0x2}, {0x5, 0x2}, {0xc369, 0x3}, {0x2, 0x1}, {0x7, 0x2}, {0xff, 0x1}, {0x4, 0x2}, {0x48}, {0x400}, {0xa0, 0x2}, {0x2, 0x1}], [{0x1bcb, 0xfffffffe}, {0x9, 0x1000}, {0x0, 0x10}, {0x6, 0x5}, {0x4, 0xb830}, {0x4, 0x7fffffff}, {0x3, 0x9c}, {0x71a0, 0x3}, {0xffff, 0xa7f1}, {0x5, 0x80000000}, {0x1, 0x9}], 0x4, 0x9}, {[{0x1000}, {0x340000, 0x1}, {0x544, 0x1}, {0x1, 0x2}, {0x6, 0x1}, {0x6, 0x1}, {0xb5}, {0x6, 0x3}, {0x1}, {0x6, 0x2}, {0x8843, 0x1}], [{0x1, 0x4}, {0x0, 0x6}, {0x81, 0x8}, {0x1, 0x1}, {0x17, 0x7}, {0x1ff, 0x4}, {0x2b92, 0x9}, {0x6, 0x5a3f}, {0x5, 0xeaa}, {0x4, 0xff}, {0x7, 0xbe6a}], 0xa, 0x6}, {[{0x4, 0x2}, {0x6, 0x2}, {0x401, 0x3}, {0x67}, {0x9, 0x2}, {0x6}, {0x6, 0x3}, {0x10001, 0x3}, {0x837}, {0x400}, {0x8, 0x2}], [{0x8000, 0x5}, {0x6a16f152, 0x8}, {0xfffff564, 0x7}, {0x1ff, 0x4}, {0x9, 0x1}, {0xfffffff0, 0x80000001}, {0xa5, 0x4}, {0x8, 0x10}, {0x9, 0x2}, {0xa4, 0x80000000}, {0x9, 0x9}], 0x2}, {[{0xf, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5, 0x2}, {0x4}, {0x7}, {0x0, 0x2}, {0x3, 0x3}, {0x3f3e871a, 0x2}, {0x76, 0x2}], [{0x2, 0x9}, {0x401, 0x85}, {0x2, 0x4}, {0x7, 0xffffffff}, {0x10000, 0x7}, {0xc, 0xfffffff9}, {0x0, 0x5}, {0x7fff, 0x7}, {0x101, 0x81}, {0x8, 0x9}, {0xc9, 0x8}], 0xb, 0x8}, {[{0x5e32, 0x1}, {0x70000, 0x2}, {0x101}, {0xf, 0x1}, {0x8}, {0x8, 0x3}, {0x6, 0x2}, {0x401, 0x1}, {0x7fff0000}, {0x4}, {0x6, 0x3}], [{0x2, 0x6}, {0x45e669a, 0x5}, {0x1, 0x968c}, {0x5, 0x9}, {0x2, 0x50}, {0x2, 0x7}, {0xf, 0x1}, {0x1, 0x80}, {0x6000, 0x8}, {0x6, 0xd}, {0x6, 0x3}], 0x3, 0x3}, {[{0xe, 0x1}, {0xffffffff}, {0x8, 0x3}, {0x1, 0x3}, {0x4}, {0x5}, {0xe}, {0x9, 0x3}, {0x40, 0x6}, {0x3, 0x2}, {0x213c7d29, 0x2}], [{0x8, 0x9}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x8}, {0x5, 0x5}, {0x8, 0x5}, {0x7677, 0x9}, {0x7, 0x9}, {0x3ff, 0x9a}, {0x8000, 0x6}, {0x6, 0x10}], 0xa, 0x3}, {[{0x5, 0x1}, {0x9}, {}, {0x7a}, {0x6, 0x2}, {0xff, 0x1}, {0x3771, 0x7}, {0x1, 0x1}, {}, {0x79e9085c}, {0x6df, 0x3}], [{0x4, 0x4}, {0x7, 0x8001}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x80000001}, {0x1, 0x7}, {0x6, 0x6}, {0x5, 0x101}, {0x0, 0x5}, {0x5, 0x7}, {0x9, 0x800}], 0xb, 0xb}, {[{0x5, 0x1}, {0x2, 0x2}, {0xffff6b45, 0x1}, {0x2, 0x1}, {0xb}, {0x0, 0x1}, {0x8}, {0x7, 0x3}, {0x100, 0x2}, {0x8, 0x1}, {0x563, 0x3}], [{0xd, 0xfff}, {0x6, 0x80}, {0x9, 0x4}, {0x5, 0x7}, {0x5, 0xfffffffe}, {0x7f, 0x300}, {0x4, 0x3}, {0x1ff, 0xb53}, {0x7, 0x81}, {0x0, 0x6}, {0xe}], 0x1, 0x6}, {[{0x7ff, 0x2}, {0x1d2c, 0x3}, {0x0, 0x2}, {0x8000, 0x1}, {0x10001, 0x3}, {0x3883, 0x1}, {0xc, 0x3}, {0xb, 0x1}, {0x9, 0x1}, {0x20, 0x1}, {0x70, 0x3}], [{0x7, 0x2}, {0x6, 0x1}, {0x7, 0x401}, {0x6, 0x9}, {0x5, 0x3ff}, {0x1, 0xf63}, {0x101, 0x5}, {0x2417, 0x5}, {0x1b0000, 0x1ff}, {0xffff4263, 0x5c00}, {0x1307, 0x6}], 0x2, 0x3}], 0xb}}, @common=@inet=@multiport={{0x50}, {0x0, 0x9, [0x4e23, 0x4e21, 0x4e23, 0x4e1d, 0x4e24, 0x4e20, 0x4e24, 0x4e21, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e21, 0x4e20, 0x4e22], [0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x28}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc23) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x2000000, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x0, 0x1084}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x20044840) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xb}, {0x5}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x2}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e20}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) (async) r6 = socket$inet_icmp(0x2, 0x2, 0x1) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r7, 0x89e7, &(0x7f0000000180)) (async) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 90.82949ms ago: executing program 5 (id=4872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000850}, 0x20044000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv6_newaddrlabel={0x4c, 0x48, 0x800, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x10, 0x0, r5, 0xd8c}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60001801}, 0x44000) 0s ago: executing program 4 (id=4873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) close(r1) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='@\x00\x00\x00']}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@generic="a664f7feda247668"]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f0000003d40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x752}, 0x1c, 0x0}}], 0x2, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000103c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000300001800c0001006269747769736500200002800800034000000007080002400000000e04000780080001400000000f0900010073797a3000"], 0x104}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) accept4$alg(r2, 0x0, 0x0, 0x800) r6 = accept4(r2, 0x0, 0x0, 0x0) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000100)={0xd, 0x2}) sendmmsg$alg(r6, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000017010000020000000c0004005ee404d5788326c3540e1528"], 0x20, 0x44004}], 0x1, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) kernel console output (not intermixed with test programs): 0 port 6081 - 0 [ 385.922196][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 385.943986][T17995] ip6tnl0: Caught tx_queue_len zero misconfig [ 385.986713][T17708] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.010979][T17708] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 386.039218][T17708] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.076396][T17995] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3216'. [ 386.085724][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 386.198113][T17708] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.241156][T17708] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 386.280910][T17708] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.367669][T18029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.635612][T18041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3230'. [ 386.646097][ T5647] Bluetooth: hci2: command tx timeout [ 386.657361][T18037] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 386.695402][T17708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.712116][T17708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.758112][T17708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 386.804919][T17708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.833027][T17708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 386.858274][T17708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.895023][T17708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 386.927817][T17708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.193341][T17708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.271969][T17708] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.342619][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.349869][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.388546][ T7835] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.395785][ T7835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.477794][T18086] bond0: (slave bond_slave_1): Releasing backup interface [ 387.588506][T18090] sctp: [Deprecated]: syz.1.3242 (pid 18090) Use of int in maxseg socket option. [ 387.588506][T18090] Use struct sctp_assoc_value instead [ 387.594981][T18093] netlink: 'syz.3.3245': attribute type 1 has an invalid length. [ 387.645152][T18093] netlink: 'syz.3.3245': attribute type 2 has an invalid length. [ 388.002108][ C1] net_ratelimit: 2 callbacks suppressed [ 388.002133][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 388.153555][T18127] netlink: 'syz.2.3252': attribute type 5 has an invalid length. [ 388.163162][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 388.295829][T18133] Bluetooth: MGMT ver 1.23 [ 388.418801][T18147] Cannot find add_set index 0 as target [ 388.441135][T18147] xt_l2tp: v2 doesn't support IP mode [ 388.526189][T18150] tipc: Resetting bearer [ 388.532832][T18150] tipc: Resetting bearer [ 388.548039][T18150] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.558605][T18150] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.618324][T18153] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.625534][T18153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.638958][T18153] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.646128][T18153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.660725][T18153] team_slave_0: left promiscuous mode [ 388.666125][T18153] team_slave_0: left allmulticast mode [ 388.701703][T18153] wireguard0: left allmulticast mode [ 388.708384][T18153] xfrm1: left promiscuous mode [ 388.721426][T18153] xfrm1: left allmulticast mode [ 388.728662][T18153] gretap2: left promiscuous mode [ 388.736408][T18153] gretap2: left allmulticast mode [ 388.743692][T18153] macvtap0: left promiscuous mode [ 388.749019][T18153] macvtap0: left allmulticast mode [ 388.755369][T18153] veth1_vlan: left allmulticast mode [ 388.763244][T18153] h: left promiscuous mode [ 388.767826][T18153] bond13: left promiscuous mode [ 388.773337][T18153] bond13: left allmulticast mode [ 388.779066][T18153] veth3: left allmulticast mode [ 388.791197][T17708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.039492][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 389.199541][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 389.417334][T17708] veth0_vlan: entered promiscuous mode [ 389.466452][T17708] veth1_vlan: entered promiscuous mode [ 389.581236][T17708] veth0_macvtap: entered promiscuous mode [ 389.623263][T17708] veth1_macvtap: entered promiscuous mode [ 389.675803][T18201] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 389.707402][T17708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.746281][T18201] netlink: 'syz.3.3272': attribute type 10 has an invalid length. [ 389.762937][T17708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.836650][ T134] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.861980][ T134] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.899187][ T134] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.957128][ T134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.092024][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 390.239488][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 390.313071][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.352856][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.450512][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.485186][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.725024][T18230] __nla_validate_parse: 2 callbacks suppressed [ 390.725054][T18230] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.3142'. [ 390.762206][T18230] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.3142'. [ 390.857718][T18237] netlink: 'syz.1.3283': attribute type 49 has an invalid length. [ 390.934245][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.943923][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.956132][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.972064][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 391.004141][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 391.129524][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 391.211543][T18237] ip6gretap0: entered promiscuous mode [ 391.217686][T18237] ip6gretap0: entered allmulticast mode [ 391.279409][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 391.302939][T18249] tipc: Enabled bearer , priority 0 [ 391.373733][T18249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3285'. [ 391.551185][T18247] tipc: Disabling bearer [ 391.631538][T18262] netlink: 'syz.4.3287': attribute type 2 has an invalid length. [ 391.648248][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 391.790339][T18266] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3288'. [ 391.809920][T18266] netlink: 'syz.5.3288': attribute type 3 has an invalid length. [ 391.831973][T18266] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3288'. [ 391.859292][T18266] netlink: 'syz.5.3288': attribute type 3 has an invalid length. [ 391.903702][T18275] netlink: 'syz.4.3290': attribute type 30 has an invalid length. [ 392.140188][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3293'. [ 392.162222][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 392.214162][T18295] netlink: 'syz.2.3294': attribute type 3 has an invalid length. [ 392.319789][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 392.362329][T18294] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.546899][T18240] xfrm0 speed is unknown, defaulting to 1000 [ 392.652089][T18311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3295'. [ 393.040350][ T50] Bluetooth: hci4: command tx timeout [ 393.081959][T18324] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 393.118891][T18324] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 393.199721][ C1] net_ratelimit: 1 callbacks suppressed [ 393.199739][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 393.328365][T18344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.359463][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 393.406156][T18354] netem: change failed [ 393.443728][T18357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3306'. [ 393.453359][T18358] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3305'. [ 393.455294][T18240] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.490118][T18240] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.497820][T18240] bridge_slave_0: entered allmulticast mode [ 393.508707][T18240] bridge_slave_0: entered promiscuous mode [ 393.620476][T18358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.631803][T18358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.643709][T18358] bond0 (unregistering): Released all slaves [ 393.657161][T18240] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.665288][T18240] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.673204][T18240] bridge_slave_1: entered allmulticast mode [ 393.684145][T18240] bridge_slave_1: entered promiscuous mode [ 393.753897][T18240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.772613][T18240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.887010][T18371] netlink: 'syz.2.3312': attribute type 268 has an invalid length. [ 393.935264][T18240] team0: Port device team_slave_0 added [ 393.958018][T18240] team0: Port device team_slave_1 added [ 394.129158][T18240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.143407][T18240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.175499][T18240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.218503][T18240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.235189][T18387] netlink: 'syz.1.3315': attribute type 1 has an invalid length. [ 394.245964][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 394.255584][T18240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.283628][T18240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.413661][T18240] hsr_slave_0: entered promiscuous mode [ 394.431173][T18240] hsr_slave_1: entered promiscuous mode [ 394.438070][T18240] debugfs: 'hsr0' already exists in 'hsr' [ 394.439232][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 394.446799][T18240] Cannot create hsr debugfs directory [ 394.537273][T18390] netlink: 'syz.1.3316': attribute type 21 has an invalid length. [ 394.700832][T18393] IPv6: NLM_F_CREATE should be specified when creating new route [ 394.937832][T18240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.952324][T18240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 394.965841][T18240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.131268][ T50] Bluetooth: hci4: command tx timeout [ 395.280071][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 395.346022][T18240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.363907][T18240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 395.377916][T18240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.439474][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 395.581066][T18240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.604579][T18240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 395.615560][T18240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.682163][T18445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.721215][T18240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.738956][T18240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 395.788088][T18240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.109194][T18467] __nla_validate_parse: 13 callbacks suppressed [ 396.109214][T18467] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3338'. [ 396.246177][T18470] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 396.262280][T18470] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 396.322219][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 396.354388][T18240] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.396752][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.434581][T18240] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.465774][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.479844][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.489521][T18240] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.520203][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.534399][T18240] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.571629][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.807751][T18512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3347'. [ 396.835935][T18495] netlink: 'syz.5.3344': attribute type 1 has an invalid length. [ 396.851289][T18495] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3344'. [ 396.863481][T18495] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.901747][T18508] netlink: 'syz.5.3344': attribute type 1 has an invalid length. [ 396.914426][T18508] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3344'. [ 396.925770][T18508] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.030261][T18240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.122994][T18240] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.159095][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.166327][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.205730][ T50] Bluetooth: hci4: command tx timeout [ 397.225988][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.233214][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.437648][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3355'. [ 397.661742][T18545] bond0: entered promiscuous mode [ 397.673506][T18545] bond_slave_0: entered promiscuous mode [ 397.688240][T18545] batadv0: entered promiscuous mode [ 397.706984][T18545] debugfs: 'hsr1' already exists in 'hsr' [ 397.715120][T18545] Cannot create hsr debugfs directory [ 397.723810][T18545] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 397.774714][T18545] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 397.812417][T18545] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 397.832237][T18545] bond0: left promiscuous mode [ 397.844204][T18545] bond_slave_0: left promiscuous mode [ 397.865798][T18545] batadv0: left promiscuous mode [ 398.092712][T18558] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3362'. [ 398.295397][T18565] bond0: entered promiscuous mode [ 398.314731][T18565] bond_slave_0: entered promiscuous mode [ 398.402701][ C1] net_ratelimit: 2 callbacks suppressed [ 398.402721][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 398.559407][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 398.665237][T18589] Bluetooth: MGMT ver 1.23 [ 398.684412][T18589] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3370'. [ 398.758145][T18592] syzkaller1: entered promiscuous mode [ 398.765978][T18592] syzkaller1: entered allmulticast mode [ 398.794399][T18592] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 398.840518][T18240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.906750][T18240] veth0_vlan: entered promiscuous mode [ 398.925896][T18240] veth1_vlan: entered promiscuous mode [ 398.984960][T18240] veth0_macvtap: entered promiscuous mode [ 399.005076][T18240] veth1_macvtap: entered promiscuous mode [ 399.038201][T18240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.059254][T18240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.081212][ T7851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.094340][ T7851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.114415][ T7851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.128676][ T7851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.280108][ T50] Bluetooth: hci4: command tx timeout [ 399.364449][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.387388][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.439645][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 399.464772][T18609] macvlan4: entered promiscuous mode [ 399.471217][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3378'. [ 399.484445][T18609] macvlan4: entered allmulticast mode [ 399.504702][T18609] veth1_to_team: entered promiscuous mode [ 399.523165][T18609] veth1_to_team: entered allmulticast mode [ 399.527183][T18606] netlink: set zone limit has 4 unknown bytes [ 399.555958][T18609] team0: Port device macvlan4 added [ 399.599474][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 399.735689][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.762907][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.972765][T18637] tipc: Started in network mode [ 399.993188][T18637] tipc: Node identity bad2592bf19c, cluster identity 4711 [ 400.014227][T18637] tipc: Enabled bearer , priority 0 [ 400.032399][T18638] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.043371][ T7997] IPVS: starting estimator thread 0... [ 400.124100][T18637] syzkaller0: entered promiscuous mode [ 400.130894][T18637] syzkaller0: entered allmulticast mode [ 400.137621][T18637] tipc: Resetting bearer [ 400.179954][T18643] IPVS: using max 32 ests per chain, 76800 per kthread [ 400.244583][T18637] netlink: 'syz.1.3385': attribute type 1 has an invalid length. [ 400.482549][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 400.638143][ T57] tipc: Resetting bearer [ 400.644460][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.687619][T18634] tipc: Resetting bearer [ 401.173580][T18681] netlink: 'syz.4.3390': attribute type 1 has an invalid length. [ 401.270462][T18686] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3395'. [ 401.303498][T18686] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3395'. [ 401.333158][T18689] netlink: 'syz.5.3395': attribute type 1 has an invalid length. [ 401.359553][T18689] netlink: 'syz.5.3395': attribute type 2 has an invalid length. [ 401.435154][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3395'. [ 401.486232][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3395'. [ 401.519990][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 401.657203][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880358a1400: rx timeout, send abort [ 401.680667][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 402.166103][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880358a2000: rx timeout, send abort [ 402.174703][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880358a1400: abort rx timeout. Force session deactivation [ 402.674369][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880358a2000: abort rx timeout. Force session deactivation [ 403.604358][ C1] net_ratelimit: 2 callbacks suppressed [ 403.604372][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 403.762804][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 403.832339][T18634] tipc: Disabling bearer [ 403.856137][ T8295] tipc: Node number set to 1263425835 [ 403.868469][T18687] macvlan2: entered promiscuous mode [ 403.874154][T18687] macvlan2: entered allmulticast mode [ 403.981816][T18686] erspan0: entered promiscuous mode [ 404.000712][T18686] : entered promiscuous mode [ 404.013724][T18686] debugfs: 'hsr1' already exists in 'hsr' [ 404.034345][T18686] Cannot create hsr debugfs directory [ 404.040987][T18686] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 404.052107][T18686] hsr1: Slave B () is not up; please bring it up to get a fully working HSR network [ 404.418860][T18717] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 2, id = 0 [ 404.553481][ T7835] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.642051][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 404.801095][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 404.865931][T18741] tipc: Enabled bearer , priority 10 [ 405.361707][T18760] Cannot find add_set index 65532 as target [ 405.679480][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 405.773790][T18786] netlink: 'syz.1.3420': attribute type 4 has an invalid length. [ 405.821434][T18788] netlink: 'syz.1.3420': attribute type 4 has an invalid length. [ 405.839769][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 405.862848][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3420'. [ 406.258945][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 406.661057][T18833] xt_hashlimit: size too large, truncated to 1048576 [ 406.722253][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 406.790800][T18841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3432'. [ 406.879412][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 407.192397][T18852] tipc: Enabling of bearer rejected, media not registered [ 407.351830][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3437'. [ 407.760071][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 407.845840][T18884] netlink: 'syz.1.3442': attribute type 1 has an invalid length. [ 407.878789][T18884] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3442'. [ 407.919430][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 408.102992][T18909] netlink: 'syz.4.3448': attribute type 1 has an invalid length. [ 408.129065][T18909] netlink: 'syz.4.3448': attribute type 1 has an invalid length. [ 408.465751][T18929] : renamed from vlan0 (while UP) [ 408.514376][T18929] netlink: 'syz.1.3456': attribute type 1 has an invalid length. [ 408.564961][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3456'. [ 408.572108][T18937] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3459'. [ 408.802208][ C1] net_ratelimit: 1 callbacks suppressed [ 408.802227][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 408.959433][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 409.021302][T18965] bond0 (unregistering): Released all slaves [ 409.135566][T18979] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3471'. [ 409.394388][T18995] netlink: 'syz.2.3477': attribute type 11 has an invalid length. [ 409.417183][T18995] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3477'. [ 409.523746][T19007] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3479'. [ 409.756522][T19019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3483'. [ 409.786003][T19023] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 409.802657][T19019] netlink: 'syz.3.3483': attribute type 11 has an invalid length. [ 409.839482][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 409.863838][T19031] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3483'. [ 409.915387][T19021] netlink: 'syz.1.3486': attribute type 1 has an invalid length. [ 409.996519][T19021] netlink: 'syz.1.3486': attribute type 5 has an invalid length. [ 409.999452][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 410.158586][T19042] IPv6: sit1: Disabled Multicast RS [ 410.177804][T19045] openvswitch: netlink: IPv4 tunnel dst address is zero [ 410.362911][T19055] IPVS: set_ctl: invalid protocol: 115 100.1.1.5:20001 [ 410.366542][T19062] netlink: 'syz.2.3496': attribute type 49 has an invalid length. [ 410.381103][T19064] netlink: 'syz.2.3496': attribute type 49 has an invalid length. [ 410.882101][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 411.039425][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.919631][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 411.962028][T19148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.986097][T19158] __nla_validate_parse: 11 callbacks suppressed [ 411.986118][T19158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3522'. [ 412.004246][T19161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3521'. [ 412.006563][T19150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.058810][T19156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3521'. [ 412.079402][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 412.279734][ T5294] veth1_vlan: left promiscuous mode [ 412.432090][T19176] validate_nla: 2 callbacks suppressed [ 412.432108][T19176] netlink: 'syz.4.3526': attribute type 1 has an invalid length. [ 412.703673][T19177] bond0: (slave veth3): Enslaving as an active interface with a down link [ 412.781592][T19178] bond0: (slave veth5): Enslaving as an active interface with a down link [ 412.831316][T19189] pim6reg: entered allmulticast mode [ 412.870205][T19191] netlink: 'syz.2.3527': attribute type 16 has an invalid length. [ 412.902350][T19191] netlink: 'syz.2.3527': attribute type 17 has an invalid length. [ 412.977822][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3527'. [ 413.001376][T19190] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.021619][T19190] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.088549][T19205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3533'. [ 413.117458][T19206] netlink: 'syz.3.3531': attribute type 30 has an invalid length. [ 413.180820][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3534'. [ 413.223283][T19191] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.230548][T19191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.257491][T19191] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.264665][T19191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.283457][T19213] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3795891520/3795891522 [ 413.329930][T19213] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3795891520/3795891521 [ 413.337342][T19218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3536'. [ 413.387253][T19213] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3795891520/3795891522 [ 413.420807][T19195] bridge_slave_1: left allmulticast mode [ 413.445590][T19213] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3795891520/3795891521 [ 413.462120][T19195] bridge_slave_1: left promiscuous mode [ 413.488767][T19195] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.515821][T19195] bridge_slave_0: left allmulticast mode [ 413.521717][T19195] bridge_slave_0: left promiscuous mode [ 413.527579][T19195] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.598211][T19185] xfrm0 speed is unknown, defaulting to 1000 [ 414.000381][ C1] net_ratelimit: 3 callbacks suppressed [ 414.000399][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 414.143435][T19242] bond3 (unregistering): Released all slaves [ 414.159445][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 414.854609][T19282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.856823][T19285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.889010][T19282] xt_l2tp: v2 doesn't support IP mode [ 415.041937][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 415.055479][T19289] netlink: 'syz.1.3550': attribute type 2 has an invalid length. [ 415.199436][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 415.906716][T19353] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3567'. [ 415.960217][T19356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3570'. [ 416.079527][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 416.166971][T19354] netlink: 'syz.4.3569': attribute type 2 has an invalid length. [ 416.215387][T19358] bond9: option all_slaves_active: invalid value (222) [ 416.225030][T19358] bond9 (unregistering): Released all slaves [ 416.239801][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.242541][T19368] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 416.261186][T19368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3573'. [ 416.427953][T19376] xt_TPROXY: Can be used only with -p tcp or -p udp [ 416.454092][T19365] tipc: Started in network mode [ 416.459171][T19365] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 416.497765][T19365] tipc: Enabled bearer , priority 10 [ 416.598537][T19385] lo speed is unknown, defaulting to 1000 [ 416.655241][T19385] lo speed is unknown, defaulting to 1000 [ 416.681261][T19385] lo speed is unknown, defaulting to 1000 [ 416.688371][T19386] : renamed from vlan0 (while UP) [ 417.135979][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 417.233209][T19418] __nla_validate_parse: 3 callbacks suppressed [ 417.233226][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'. [ 417.257394][T19420] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3587'. [ 417.416729][T19385] infiniband sz1: set active [ 417.424126][ T8292] lo speed is unknown, defaulting to 1000 [ 417.443153][T19385] infiniband sz1: added lo [ 417.482798][T19385] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 417.495586][T19385] infiniband sz1: Couldn't open port 1 [ 417.547954][T19385] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 417.598433][T19385] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 417.609506][ T7997] tipc: Node number set to 4269801492 [ 417.661563][T19385] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 417.727630][T19385] RDS/IB: sz1: added [ 417.734281][T19385] smc: adding ib device sz1 with port count 1 [ 417.741218][T19385] smc: ib device sz1 port 1 has no pnetid [ 417.752849][ T8292] lo speed is unknown, defaulting to 1000 [ 417.763271][T19385] lo speed is unknown, defaulting to 1000 [ 417.990481][T19459] ipt_REJECT: ECHOREPLY no longer supported. [ 418.134917][T19471] IPv6: sit1: Disabled Multicast RS [ 418.188773][T19385] lo speed is unknown, defaulting to 1000 [ 418.288066][T19477] macvlan0: entered promiscuous mode [ 418.451758][T19484] netdevsim netdevsim4: Direct firmware load for þÿÿß failed with error -2 [ 418.461571][T19484] netdevsim netdevsim4: Falling back to sysfs fallback for: þÿÿß [ 418.483079][T19482] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3605'. [ 418.509587][T19482] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3605'. [ 418.518918][T19482] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3605'. [ 418.588380][T19488] ip6t_srh: unknown srh match flags 4000 [ 418.611298][T19489] ip6t_srh: unknown srh match flags 4000 [ 418.661529][T19492] netem: unknown loss type 8 [ 418.680133][T19492] netem: change failed [ 418.691457][T19385] lo speed is unknown, defaulting to 1000 [ 418.745833][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.765410][T19496] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3608'. [ 418.777675][T19496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3608'. [ 418.807451][T19495] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3609'. [ 418.832061][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3609'. [ 419.035384][T19503] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3611'. [ 419.044615][T19385] lo speed is unknown, defaulting to 1000 [ 419.202150][ C1] net_ratelimit: 3 callbacks suppressed [ 419.202167][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 419.359442][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 419.406672][T19385] lo speed is unknown, defaulting to 1000 [ 419.852664][T19385] lo speed is unknown, defaulting to 1000 [ 420.121040][T19385] lo speed is unknown, defaulting to 1000 [ 420.241979][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 420.399402][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 420.495555][T19385] lo speed is unknown, defaulting to 1000 [ 420.805161][T19550] netlink: 'syz.4.3629': attribute type 1 has an invalid length. [ 421.026175][T19561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 421.282575][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 421.392802][T19583] tap0: tun_chr_ioctl cmd 1074025676 [ 421.398426][T19583] tap0: owner set to 0 [ 421.440045][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 421.833898][T19606] netlink: 'syz.5.3640': attribute type 12 has an invalid length. [ 421.842529][T19606] netlink: 'syz.5.3640': attribute type 29 has an invalid length. [ 422.320057][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 422.480124][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.361988][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 423.526265][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 424.316782][T19626] syzkaller1: entered promiscuous mode [ 424.338251][T19626] syzkaller1: entered allmulticast mode [ 424.399469][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 424.559401][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 424.625157][T19645] __nla_validate_parse: 12 callbacks suppressed [ 424.625175][T19645] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3652'. [ 424.667620][T19655] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.3650'. [ 424.746067][T19658] xt_l2tp: v2 tid > 0xffff: 1114244 [ 425.037864][T19674] tipc: Enabling of bearer rejected, failed to enable media [ 425.098820][T19674] syzkaller0: entered promiscuous mode [ 425.105463][T19674] syzkaller0: entered allmulticast mode [ 425.132764][T19677] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3660'. [ 425.201708][T19681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3661'. [ 425.442348][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 425.599409][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 425.766499][T19690] netlink: 'syz.2.3663': attribute type 61 has an invalid length. [ 426.489511][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 426.642448][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 427.434157][T19681] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 427.522023][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 427.679400][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 427.683879][T19701] nbd: must specify a device to reconfigure [ 427.695012][T19697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.735840][T19710] xt_ecn: cannot match TCP bits for non-tcp packets [ 427.759106][T19714] openvswitch: netlink: IP tunnel dst address not specified [ 427.784044][T19697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.898086][T19696] bond0: (slave bond_slave_1): Releasing backup interface [ 427.911544][T19701] netlink: 'syz.5.3667': attribute type 1 has an invalid length. [ 427.941972][T19719] syzkaller0: entered promiscuous mode [ 427.960513][T19719] syzkaller0: entered allmulticast mode [ 428.169653][T19726] syzkaller1: entered promiscuous mode [ 428.192843][T19726] syzkaller1: entered allmulticast mode [ 428.264365][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3670'. [ 428.291437][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3670'. [ 428.303936][T19738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3670'. [ 428.403567][T19745] netlink: 'syz.2.3672': attribute type 1 has an invalid length. [ 428.458179][T19745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3672'. [ 428.559497][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 428.633714][T19726] netlink: 'syz.4.3668': attribute type 29 has an invalid length. [ 428.651123][T19726] netlink: 'syz.4.3668': attribute type 29 has an invalid length. [ 428.684655][T19726] netlink: 'syz.4.3668': attribute type 10 has an invalid length. [ 428.705007][T19726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3668'. [ 428.746047][T19726] team0: entered allmulticast mode [ 428.782872][T19726] team_slave_0: entered allmulticast mode [ 428.807928][T19726] team_slave_1: entered allmulticast mode [ 428.832096][T19726] bridge0: port 3(team0) entered blocking state [ 428.851574][T19726] bridge0: port 3(team0) entered disabled state [ 428.858620][T19761] netlink: 'syz.5.3676': attribute type 1 has an invalid length. [ 428.872608][T19726] team0: entered promiscuous mode [ 428.893121][T19726] team_slave_0: entered promiscuous mode [ 428.899851][T19726] team_slave_1: entered promiscuous mode [ 428.906845][T19726] bridge0: port 3(team0) entered blocking state [ 428.913429][T19726] bridge0: port 3(team0) entered forwarding state [ 429.602324][ C1] net_ratelimit: 1 callbacks suppressed [ 429.602342][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 429.695754][T19797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3685'. [ 429.762340][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 430.018431][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3691'. [ 430.027916][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3691'. [ 430.031812][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 430.056872][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.070503][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.086934][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.096248][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 430.246165][T19823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3692'. [ 430.639475][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 430.762950][T19848] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3701'. [ 430.799417][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 431.005386][T19812] xfrm0 speed is unknown, defaulting to 1000 [ 431.030694][T19812] lo speed is unknown, defaulting to 1000 [ 431.357028][ T29] audit: type=1804 audit(1781389057.592:7): pid=19877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3711" name="/newroot/100/cgroup.controllers" dev="tmpfs" ino=529 res=1 errno=0 [ 431.406648][ T29] audit: type=1800 audit(1781389057.592:8): pid=19877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3711" name="cgroup.controllers" dev="tmpfs" ino=529 res=0 errno=0 [ 431.592756][T19886] netlink: 'syz.4.3714': attribute type 6 has an invalid length. [ 431.682848][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 431.830927][T19904] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 431.839461][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.015438][T19913] netlink: 'syz.2.3722': attribute type 11 has an invalid length. [ 432.027361][T19913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3722'. [ 432.034321][T19915] netlink: 'syz.3.3721': attribute type 1 has an invalid length. [ 432.047999][T19812] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.061574][T19812] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.078228][T19915] netlink: 'syz.3.3721': attribute type 7 has an invalid length. [ 432.089962][T19812] bridge_slave_0: entered allmulticast mode [ 432.097102][T19919] xt_l2tp: invalid flags combination: 0 [ 432.101853][T19812] bridge_slave_0: entered promiscuous mode [ 432.108906][T19915] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3721'. [ 432.127166][T19917] vcan1: entered promiscuous mode [ 432.132908][T19917] vcan1: entered allmulticast mode [ 432.155885][T19812] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.166779][ T50] Bluetooth: hci3: command tx timeout [ 432.170486][T19812] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.183327][T19812] bridge_slave_1: entered allmulticast mode [ 432.202558][T19812] bridge_slave_1: entered promiscuous mode [ 432.336428][T19812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.368517][T19812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.498489][T19812] team0: Port device team_slave_0 added [ 432.521433][T19926] syzkaller0: entered promiscuous mode [ 432.543550][T19926] syzkaller0: entered allmulticast mode [ 432.565805][T19812] team0: Port device team_slave_1 added [ 432.710934][T19812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.719486][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 432.720977][T19812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.754687][T19812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.768108][T19942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3728'. [ 432.814799][T19942] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3728'. [ 432.834864][T19812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.841170][T19942] netlink: ct family unspecified [ 432.842198][T19812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.874593][T19812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.885258][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.973568][T19812] hsr_slave_0: entered promiscuous mode [ 432.980674][T19812] hsr_slave_1: entered promiscuous mode [ 432.986930][T19812] debugfs: 'hsr0' already exists in 'hsr' [ 432.993381][T19812] Cannot create hsr debugfs directory [ 433.253029][T19812] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 433.308550][T19812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.318493][T19812] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.331886][T19812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.343174][T19812] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.356401][T19812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.367039][T19812] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 433.374622][T19963] validate_nla: 2 callbacks suppressed [ 433.374639][T19963] netlink: 'syz.2.3734': attribute type 3 has an invalid length. [ 433.374654][T19963] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3734'. [ 433.406269][T19812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.512062][T19812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.546865][T19812] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.578381][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.585659][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.662117][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.670463][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.937483][T19986] Cannot find add_set index 65532 as target [ 434.138240][T20000] netlink: 'syz.5.3741': attribute type 28 has an invalid length. [ 434.201551][T20000] netlink: 'syz.5.3741': attribute type 3 has an invalid length. [ 434.241179][ T50] Bluetooth: hci3: command tx timeout [ 434.464435][T20014] syzkaller1: entered promiscuous mode [ 434.484279][T20014] syzkaller1: entered allmulticast mode [ 434.549070][T20016] : entered promiscuous mode [ 434.556415][T20021] tipc: Enabled bearer , priority 0 [ 434.636257][T20021] tipc: Disabling bearer [ 434.763611][T20028] syzkaller0: entered promiscuous mode [ 434.777690][T20028] syzkaller0: entered allmulticast mode [ 434.799525][ C1] net_ratelimit: 2 callbacks suppressed [ 434.799543][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 434.832154][T19812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.923346][T20028] dvmrp0: entered allmulticast mode [ 434.959446][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 435.216693][T20051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.478473][T19812] veth0_vlan: entered promiscuous mode [ 435.511098][T19812] veth1_vlan: entered promiscuous mode [ 435.562970][T20070] team0: entered promiscuous mode [ 435.568499][T20070] team_slave_0: entered promiscuous mode [ 435.575958][T20070] team_slave_1: entered promiscuous mode [ 435.607226][T19812] veth0_macvtap: entered promiscuous mode [ 435.644226][T19812] veth1_macvtap: entered promiscuous mode [ 435.741007][T19812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.781155][T19812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.824534][ T7839] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.841913][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 435.864124][ T7839] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.898665][ T7839] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.928256][ T7839] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.000277][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 436.000392][T20084] syzkaller0: entered promiscuous mode [ 436.041878][T20084] syzkaller0: entered allmulticast mode [ 436.158889][T20089] __nla_validate_parse: 3 callbacks suppressed [ 436.158906][T20089] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3766'. [ 436.305484][ T7835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.321564][ T50] Bluetooth: hci3: command tx timeout [ 436.346221][ T7835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.397132][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.423340][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.879608][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 436.933789][T20117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3772'. [ 437.039416][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 437.168331][T20127] bridge2: entered allmulticast mode [ 437.193195][T20131] netlink: 'syz.3.3775': attribute type 11 has an invalid length. [ 437.606712][T20154] netlink: 'syz.6.3783': attribute type 8 has an invalid length. [ 437.704211][T20161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3785'. [ 437.711275][T20165] netlink: 'syz.6.3783': attribute type 8 has an invalid length. [ 437.740274][ T7997] lo speed is unknown, defaulting to 1000 [ 437.868359][T20170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3786'. [ 437.922071][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 437.931629][T20172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3786'. [ 438.044714][T20179] syzkaller0: entered promiscuous mode [ 438.064426][T20179] syzkaller0: entered allmulticast mode [ 438.080337][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.262301][T20190] netlink: 'syz.5.3793': attribute type 1 has an invalid length. [ 438.307938][T20190] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3793'. [ 438.401223][ T50] Bluetooth: hci3: command tx timeout [ 438.495433][T20199] netlink: 'syz.5.3798': attribute type 1 has an invalid length. [ 438.585888][T20199] 8021q: adding VLAN 0 to HW filter on device bond9 [ 438.606778][T20212] vlan2: entered promiscuous mode [ 438.620316][T20212] bond9: entered promiscuous mode [ 438.625977][T20212] vlan2: entered allmulticast mode [ 438.640237][T20212] bond9: entered allmulticast mode [ 438.751401][T20199] bond9: (slave bridge25): making interface the new active one [ 438.771686][T20199] bridge25: entered promiscuous mode [ 438.782279][T20199] bridge25: entered allmulticast mode [ 438.802154][T20199] bond9: (slave bridge25): Enslaving as an active interface with an up link [ 438.823987][T20224] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3803'. [ 438.853413][T20224] xt_nat: multiple ranges no longer supported [ 438.959520][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 439.051295][T20232] IPv6: sit1: Disabled Multicast RS [ 439.058117][T20232] sit1: entered allmulticast mode [ 439.126299][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 439.291240][T20242] bridge0: port 3(team0) entered disabled state [ 439.297731][T20242] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.306191][T20242] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.332880][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3808'. [ 439.346530][T20238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3807'. [ 439.390699][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3809'. [ 439.575962][T20257] netlink: 'syz.2.3813': attribute type 1 has an invalid length. [ 439.624290][T20259] IPv6: sit1: Disabled Multicast RS [ 439.638432][T20259] sit1: entered allmulticast mode [ 439.776124][T20268] netlink: 'syz.3.3817': attribute type 1 has an invalid length. [ 439.795750][T20268] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.805455][T20268] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.812698][T20268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.004896][ C1] net_ratelimit: 1 callbacks suppressed [ 440.004915][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 440.159474][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 440.295479][T20306] netlink: 'syz.5.3826': attribute type 8 has an invalid length. [ 440.775078][T20324] netlink: 'syz.2.3833': attribute type 2 has an invalid length. [ 440.801707][T20324] netlink: 'syz.2.3833': attribute type 29 has an invalid length. [ 441.049483][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 441.199408][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 441.217579][T20346] __nla_validate_parse: 8 callbacks suppressed [ 441.217595][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3840'. [ 441.244348][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3840'. [ 441.256773][T20348] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3841'. [ 441.267169][T20346] macsec1: entered promiscuous mode [ 441.272877][T20344] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3839'. [ 441.286518][T20346] bridge0: entered promiscuous mode [ 441.292852][T20346] macsec1: entered allmulticast mode [ 441.298352][T20346] bridge0: entered allmulticast mode [ 441.433585][T20352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3842'. [ 441.592073][T20361] IPVS: length: 141 != 8 [ 441.862807][T20376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3853'. [ 441.893208][T20380] sctp: [Deprecated]: syz.4.3854 (pid 20380) Use of int in max_burst socket option. [ 441.893208][T20380] Use struct sctp_assoc_value instead [ 442.075508][T20387] syzkaller0: entered promiscuous mode [ 442.083781][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 442.101251][T20387] syzkaller0: entered allmulticast mode [ 442.239407][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.407687][T20410] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 443.006373][T20446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3876'. [ 443.119467][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 443.281250][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.724754][T20480] netlink: 'syz.2.3885': attribute type 1 has an invalid length. [ 443.795213][T20482] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3885'. [ 444.162072][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 444.198323][T20499] syzkaller0: entered promiscuous mode [ 444.204849][T20499] syzkaller0: entered allmulticast mode [ 444.319415][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.326545][ T5647] Bluetooth: hci3: command 0x0405 tx timeout [ 444.809782][T20532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3902'. [ 444.827699][T20532] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.3902'. [ 444.909450][T20534] No such timeout policy "syz1" [ 444.986042][T20538] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 445.199458][ C1] net_ratelimit: 2 callbacks suppressed [ 445.199474][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 445.359570][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 446.241643][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 446.400346][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.289488][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 447.439428][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.118343][T20545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.301140][T20594] geneve2: entered promiscuous mode [ 448.312155][T20594] geneve2: entered allmulticast mode [ 448.324842][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 448.479407][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.504678][T20608] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 448.632349][T20617] IPv6: Can't replace route, no match found [ 448.638909][T20617] IPv6: Can't replace route, no match found [ 449.164480][T20659] SET target dimension over the limit! [ 449.178799][T20658] __nla_validate_parse: 5 callbacks suppressed [ 449.178818][T20658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3944'. [ 449.192327][T20659] sctp: [Deprecated]: syz.4.3943 (pid 20659) Use of int in max_burst socket option deprecated. [ 449.192327][T20659] Use struct sctp_assoc_value instead [ 449.233328][T20658] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 449.300968][T20666] netlink: 8476 bytes leftover after parsing attributes in process `syz.2.3946'. [ 449.359796][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 449.520151][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.618403][T20678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3950'. [ 449.641335][T20680] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3952'. [ 449.652580][T20678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3950'. [ 449.668430][T20678] netlink: 'syz.4.3950': attribute type 1 has an invalid length. [ 449.760606][T20686] syzkaller0: entered promiscuous mode [ 449.782442][T20686] syzkaller0: entered allmulticast mode [ 449.838935][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3953'. [ 449.870779][T20686] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3953'. [ 449.961870][T20694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3955'. [ 449.979794][T20694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3955'. [ 450.232884][T20712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3961'. [ 450.402081][ C1] net_ratelimit: 1 callbacks suppressed [ 450.402099][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 450.559400][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 450.877581][T20756] netlink: 'syz.3.3969': attribute type 1 has an invalid length. [ 450.965079][T20756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.048747][T20762] bond2: (slave geneve2): making interface the new active one [ 451.063924][T20762] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 451.075143][ T6544] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 451.116301][ T6544] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 451.175951][ T771] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 451.430079][T20790] netlink: 'syz.5.3980': attribute type 1 has an invalid length. [ 451.440163][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 451.599460][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.030587][T20822] netlink: 'syz.4.3987': attribute type 1 has an invalid length. [ 452.063046][T20822] netlink: 'syz.4.3987': attribute type 2 has an invalid length. [ 452.113523][T20822] netlink: 'syz.4.3987': attribute type 1 has an invalid length. [ 452.192873][T20831] tipc: Enabled bearer , priority 10 [ 452.233548][T20834] netlink: 'syz.2.3991': attribute type 21 has an invalid length. [ 452.254209][T20834] IPv6: NLM_F_CREATE should be specified when creating new route [ 452.262614][T20834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 452.265042][T20838] netlink: 'syz.4.3992': attribute type 10 has an invalid length. [ 452.269922][T20834] IPv6: NLM_F_CREATE should be set when creating new route [ 452.270054][T20834] IPv6: NLM_F_CREATE should be set when creating new route [ 452.270077][T20834] IPv6: NLM_F_CREATE should be set when creating new route [ 452.482167][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 452.639444][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.861291][T20868] ipvlan3: entered promiscuous mode [ 453.377820][T20911] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20004 [ 453.418165][T20911] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.425599][T20911] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.519595][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 453.549232][T20917] netlink: 'syz.2.4013': attribute type 11 has an invalid length. [ 453.655424][T20920] netlink: 'syz.2.4013': attribute type 11 has an invalid length. [ 453.679477][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.757435][T20932] xt_hashlimit: size too large, truncated to 1048576 [ 454.204096][T20945] __nla_validate_parse: 94 callbacks suppressed [ 454.204114][T20945] netlink: 816 bytes leftover after parsing attributes in process `syz.3.4022'. [ 454.561602][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 454.719895][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 454.744772][T20983] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 454.760915][T20983] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 454.788536][T20983] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 454.833341][T20983] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 455.132580][T20999] tipc: Enabled bearer , priority 0 [ 455.141611][T21005] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4039'. [ 455.263351][T20999] syzkaller0: entered promiscuous mode [ 455.322835][T20999] syzkaller0: entered allmulticast mode [ 455.340788][T20999] tipc: Resetting bearer [ 455.584151][ T5647] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 455.599986][ C1] net_ratelimit: 1 callbacks suppressed [ 455.600005][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 455.603203][ T5647] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 455.623944][T21025] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 455.626084][ T5647] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 455.644211][ T5647] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 455.654215][ T5647] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 455.759415][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.803293][T21037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4047'. [ 455.995254][T20998] tipc: Resetting bearer [ 456.100809][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4050'. [ 456.184333][T21056] netlink: 'syz.4.4052': attribute type 39 has an invalid length. [ 456.652409][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 456.805172][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 457.685772][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 457.760806][ T5647] Bluetooth: hci7: command tx timeout [ 457.843467][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.364381][T20998] tipc: Disabling bearer [ 458.545019][T21070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4055'. [ 458.619673][T21075] netlink: 'syz.5.4055': attribute type 4 has an invalid length. [ 458.731967][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 458.879408][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.086926][T21096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4061'. [ 459.127252][T21022] xfrm0 speed is unknown, defaulting to 1000 [ 459.143432][T21022] lo speed is unknown, defaulting to 1000 [ 459.154729][T21099] syzkaller0: entered promiscuous mode [ 459.173229][T21099] syzkaller0: entered allmulticast mode [ 459.199038][T21102] veth0: entered promiscuous mode [ 459.248013][T21110] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4064'. [ 459.250697][T21102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4063'. [ 459.323296][T21099] netlink: 'syz.4.4062': attribute type 1 has an invalid length. [ 459.450318][T21114] netlink: 'syz.5.4065': attribute type 1 has an invalid length. [ 459.770355][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 459.787224][ T8295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.843631][ T5647] Bluetooth: hci7: command tx timeout [ 460.253020][T21022] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.260401][T21022] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.267585][T21022] bridge_slave_0: entered allmulticast mode [ 460.275846][T21022] bridge_slave_0: entered promiscuous mode [ 460.283691][T21022] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.292571][T21022] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.299929][T21022] bridge_slave_1: entered allmulticast mode [ 460.307683][T21022] bridge_slave_1: entered promiscuous mode [ 460.374298][T21022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.389149][T21022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.420486][T21022] team0: Port device team_slave_0 added [ 460.428373][T21022] team0: Port device team_slave_1 added [ 460.800537][ T8001] net_ratelimit: 2 callbacks suppressed [ 460.800557][ T8001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.802764][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 460.828038][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.836728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.964820][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 461.846826][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 461.861695][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.870800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.926598][ T5647] Bluetooth: hci7: command tx timeout [ 462.005384][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 462.054061][T21090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.892103][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 462.984658][T21022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.998657][T21022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.078359][T21022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.128251][T21022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.161965][T21022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.205367][T21179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4077'. [ 463.221869][T21022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.224638][T21182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4078'. [ 463.247331][T21182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4078'. [ 463.260326][T21182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4078'. [ 463.418609][T21022] hsr_slave_0: entered promiscuous mode [ 463.435482][T21022] hsr_slave_1: entered promiscuous mode [ 463.453891][T21022] debugfs: 'hsr0' already exists in 'hsr' [ 463.466773][T21022] Cannot create hsr debugfs directory [ 463.576337][T21193] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4084'. [ 463.779203][T21200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4086'. [ 463.790744][T21201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4086'. [ 463.908534][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4086'. [ 464.000390][T21022] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 464.004092][ T5647] Bluetooth: hci7: command tx timeout [ 464.028488][T21022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.058653][T21022] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 464.078167][T21022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.097964][T21022] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 464.127063][T21022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.145726][ T7985] IPVS: starting estimator thread 0... [ 464.156645][T21022] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 464.260590][T21215] IPVS: using max 55 ests per chain, 132000 per kthread [ 464.313084][T21022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.504692][T21022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.530365][T21022] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.547756][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.554902][ T771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.594505][ T7839] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.601779][ T7839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.368354][T21258] __nla_validate_parse: 4 callbacks suppressed [ 465.368372][T21258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4102'. [ 465.386875][T21260] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 465.415057][T21262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4101'. [ 465.434635][T21262] geneve0: entered allmulticast mode [ 465.455486][T21260] x_tables: duplicate underflow at hook 2 [ 465.851655][T21283] net_ratelimit: 14 callbacks suppressed [ 465.851676][T21283] openvswitch: netlink: Geneve option length err (len 519, max 255). [ 465.982468][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4110'. [ 465.999681][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 466.087241][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.095833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.117663][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4112'. [ 466.135892][T21022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.145648][T21298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4112'. [ 466.159470][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.215055][T21301] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 466.382387][T21314] bond5: Removing last ns target with arp_interval on [ 466.432613][T21314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4113'. [ 466.557530][T21326] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 466.674836][T21332] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4119'. [ 466.731991][T21332] geneve2: entered promiscuous mode [ 466.743155][ T771] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 37984 - 0 [ 466.753569][T21334] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4118'. [ 466.775972][T21330] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4118'. [ 466.805299][ T771] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 37984 - 0 [ 466.825584][ T771] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 37984 - 0 [ 466.865281][T21345] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 2, id = 0 [ 466.887818][ T7998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.949605][T21022] veth0_vlan: entered promiscuous mode [ 467.000299][T21022] veth1_vlan: entered promiscuous mode [ 467.041992][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 467.059022][T21354] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4125'. [ 467.074095][T21354] openvswitch: netlink: Message has 3 unknown bytes. [ 467.081109][T21022] veth0_macvtap: entered promiscuous mode [ 467.096572][T21022] veth1_macvtap: entered promiscuous mode [ 467.119294][T21022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.140871][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.173754][T21022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.212330][ T34] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.253841][ T7859] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.285844][ T7859] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.302705][ T7859] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.377363][T21370] Bluetooth: MGMT ver 1.23 [ 467.623191][T21378] ipt_ECN: cannot use operation on non-tcp rule [ 467.635224][T21380] netlink: 'syz.5.4132': attribute type 1 has an invalid length. [ 467.680773][ T50] Bluetooth: hci6: command 0x0405 tx timeout [ 467.741177][T21380] 8021q: adding VLAN 0 to HW filter on device bond10 [ 467.791214][ T7859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.810362][ T7859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.906969][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.952683][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.992954][T21397] netlink: 'syz.5.4137': attribute type 1 has an invalid length. [ 468.072371][T21397] 8021q: adding VLAN 0 to HW filter on device bond11 [ 468.131827][T21397] bond11: (slave veth0_to_bond): making interface the new active one [ 468.146568][T21397] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 468.178763][T21398] bond11: entered promiscuous mode [ 468.193724][T21407] netlink: 'syz.3.4139': attribute type 178 has an invalid length. [ 468.195642][T21398] veth0_to_bond: entered promiscuous mode [ 468.203136][T21407] netlink: 'syz.3.4139': attribute type 1 has an invalid length. [ 468.218604][T21398] bond11: entered allmulticast mode [ 468.225502][T21398] veth0_to_bond: entered allmulticast mode [ 468.369254][T21407] bond3: entered promiscuous mode [ 468.380088][T21407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.767179][T21436] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 468.774863][T21439] tipc: Enabling of bearer rejected, media not registered [ 468.807546][T21444] veth0: entered promiscuous mode [ 471.201607][ C1] net_ratelimit: 19 callbacks suppressed [ 471.201621][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 471.284308][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.293083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.359597][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 471.440007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.448875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.239526][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 472.324417][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.332948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.399463][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.399607][ C1] net_ratelimit: 16 callbacks suppressed [ 476.399626][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 476.482273][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.490806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.559610][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 477.441030][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 477.523848][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.532531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.599678][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 478.479576][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 478.560229][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.602262][ C1] net_ratelimit: 15 callbacks suppressed [ 481.602283][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 481.682505][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.691096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.759648][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 482.080876][ T7995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.639544][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 482.724891][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.733185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.799589][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 483.043432][ T5634] Bluetooth: hci0: command 0x0406 tx timeout [ 483.681233][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 486.799584][ C1] net_ratelimit: 14 callbacks suppressed [ 486.799605][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 486.883792][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.892407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.959487][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 487.841270][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 487.925882][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.934764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.001099][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 488.159980][ T7997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.879522][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 492.001777][ C1] net_ratelimit: 14 callbacks suppressed [ 492.001791][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 492.085105][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.093666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.159553][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 492.988455][T21472] __nla_validate_parse: 11 callbacks suppressed [ 492.988474][T21472] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.4153'. [ 493.018007][T21462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4151'. [ 493.032038][T21462] netlink: 'syz.7.4151': attribute type 29 has an invalid length. [ 493.035061][T21471] syzkaller0: entered promiscuous mode [ 493.040082][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 493.055425][T21471] syzkaller0: entered allmulticast mode [ 493.055563][T21462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4151'. [ 493.128845][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.137619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.199541][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 493.291294][T21484] netlink: 'syz.4.4157': attribute type 12 has an invalid length. [ 493.328130][T21484] netlink: 'syz.4.4157': attribute type 29 has an invalid length. [ 493.364699][T21484] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4157'. [ 493.474425][T21484] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4157'. [ 493.547348][T21501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4159'. [ 493.628359][T21504] siw: device registration error -23 [ 493.663978][T21484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4157'. [ 493.688300][T21504] sock: sock_set_timeout: `syz.5.4160' (pid 21504) tries to set negative timeout [ 493.694498][T21484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4157'. [ 493.747877][T21484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4157'. [ 493.776750][T21484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4157'. [ 493.788166][ T7859] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.815238][ T7859] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.817696][T21513] Unsupported ieee802154 address type: 0 [ 493.836114][ T7859] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.016993][ T29] audit: type=1107 audit(1781389120.252:9): pid=21527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 494.082074][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 494.975512][T21586] macsec0: entered promiscuous mode [ 495.003948][T21581] veth1_macvtap: left promiscuous mode [ 495.036152][T21581] macsec0 (unregistering): left promiscuous mode [ 495.261385][T21593] syz_tun: entered allmulticast mode [ 495.347427][T21556] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 495.444643][T21606] netlink: 'syz.7.4189': attribute type 11 has an invalid length. [ 495.510224][T21609] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 495.914184][T21638] bridge_slave_1: left allmulticast mode [ 495.944224][T21638] bridge_slave_1: left promiscuous mode [ 495.976714][T21638] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.016096][T21638] bridge_slave_0: left allmulticast mode [ 496.022647][T21638] bridge_slave_0: left promiscuous mode [ 496.032480][T21638] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.455504][T21658] netlink: 'syz.4.4206': attribute type 20 has an invalid length. [ 496.561003][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 496.573374][T21658] netlink: 'syz.4.4206': attribute type 20 has an invalid length. [ 496.811016][T21670] netlink: 'syz.2.4210': attribute type 1 has an invalid length. [ 496.946874][T21678] ipvlan1: entered allmulticast mode [ 496.955238][T21678] veth0_vlan: entered allmulticast mode [ 497.013001][T21673] net_ratelimit: 34 callbacks suppressed [ 497.013046][T21673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.087559][T21673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.199578][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 497.279886][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.321307][T21689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.332451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.359594][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 497.362820][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.374851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.411186][T21689] netlink: 'syz.4.4217': attribute type 2 has an invalid length. [ 497.433268][T21689] netlink: 'syz.4.4217': attribute type 1 has an invalid length. [ 497.463880][T21689] netlink: 'syz.4.4217': attribute type 6 has an invalid length. [ 497.666271][T21709] syzkaller0: entered promiscuous mode [ 497.681670][T21709] syzkaller0: entered allmulticast mode [ 498.044759][T21732] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 498.076397][T21732] __nla_validate_parse: 53 callbacks suppressed [ 498.076416][T21732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4227'. [ 498.212854][T21736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4228'. [ 498.219066][T21740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4229'. [ 498.247602][T21736] netlink: 'syz.4.4228': attribute type 7 has an invalid length. [ 498.263861][T21740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4229'. [ 498.314019][T21736] netlink: 'syz.4.4228': attribute type 8 has an invalid length. [ 498.326233][T21740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4229'. [ 498.351844][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4228'. [ 498.371941][T21749] netlink: 'syz.3.4230': attribute type 1 has an invalid length. [ 498.395862][T21740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4229'. [ 498.433692][T21740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4229'. [ 498.464628][T21740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4229'. [ 498.484377][T21740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4229'. [ 499.081744][T21785] netlink: 'syz.4.4242': attribute type 1 has an invalid length. [ 499.453734][T21799] gre3: entered promiscuous mode [ 499.469541][T21799] gre3: entered allmulticast mode [ 499.961068][ T7996] IPVS: starting estimator thread 0... [ 500.006386][T21828] IPVS: Unknown mcast interface: syzkaller0 [ 500.060457][T21826] IPVS: using max 29 ests per chain, 69600 per kthread [ 500.782715][T21867] x_tables: duplicate underflow at hook 3 [ 500.789904][T21865] netlink: 'syz.4.4270': attribute type 18 has an invalid length. [ 500.910630][T21865] netlink: 'syz.4.4270': attribute type 18 has an invalid length. [ 501.044496][T21874] ip6gretap2: entered promiscuous mode [ 501.051706][T21874] ip6gretap2: entered allmulticast mode [ 501.090303][T21876] syzkaller0: entered promiscuous mode [ 501.100414][T21876] syzkaller0: entered allmulticast mode [ 501.197451][T21878] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 501.212724][T21878] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 501.326491][T21882] xt_ecn: cannot match TCP bits for non-tcp packets [ 501.343660][T21884] netlink: 'syz.4.4278': attribute type 1 has an invalid length. [ 501.956461][T21913] syzkaller0: entered promiscuous mode [ 501.975175][T21913] syzkaller0: entered allmulticast mode [ 501.986239][T21916] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 502.106203][T21922] netlink: 'syz.3.4289': attribute type 4 has an invalid length. [ 502.402107][ C1] net_ratelimit: 18 callbacks suppressed [ 502.402126][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 502.559699][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 502.704751][T21946] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 502.775347][T21947] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 503.128313][T21973] xt_socket: unknown flags 0xe4 [ 503.144807][T21964] netlink: 'syz.7.4301': attribute type 1 has an invalid length. [ 503.171500][T21964] netlink: 'syz.7.4301': attribute type 4 has an invalid length. [ 503.210025][T21964] __nla_validate_parse: 115 callbacks suppressed [ 503.210046][T21964] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4301'. [ 503.336138][T21988] dvmrp0: entered allmulticast mode [ 503.420833][T21988] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4306'. [ 503.439463][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 503.453429][T21988] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4306'. [ 503.485445][T21997] netlink: 'syz.3.4310': attribute type 1 has an invalid length. [ 503.526770][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 503.599622][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 503.618201][T21997] bond4: entered promiscuous mode [ 503.629130][T22005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4313'. [ 503.641648][T21997] 8021q: adding VLAN 0 to HW filter on device bond4 [ 503.729578][T22007] netlink: 184 bytes leftover after parsing attributes in process `syz.5.4312'. [ 503.761704][T22007] netlink: 184 bytes leftover after parsing attributes in process `syz.5.4312'. [ 503.785863][T22007] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4312'. [ 503.900673][T22007] syzkaller0: entered promiscuous mode [ 503.924862][T22007] syzkaller0: entered allmulticast mode [ 503.953478][T22025] xt_hashlimit: size too large, truncated to 1048576 [ 504.230270][T22033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4319'. [ 504.481679][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 504.491082][T22033] bond8: option xmit_hash_policy: invalid value (64) [ 504.524190][T22033] bond8 (unregistering): Released all slaves [ 504.573537][T22039] ip6erspan1: entered allmulticast mode [ 504.581847][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4322'. [ 504.639807][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.231870][T22079] netlink: 'syz.5.4332': attribute type 1 has an invalid length. [ 505.234337][T22073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4334'. [ 505.515778][T22090] syzkaller0: entered promiscuous mode [ 505.521491][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 505.549737][T22090] syzkaller0: entered allmulticast mode [ 505.679412][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 506.257930][T22132] netlink: 'syz.4.4351': attribute type 17 has an invalid length. [ 506.327771][T22132] erspan0: entered promiscuous mode [ 506.380357][T22132] erspan0: left promiscuous mode [ 506.535176][T22145] netlink: 'syz.5.4355': attribute type 4 has an invalid length. [ 506.613535][T22149] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 506.783768][T22149] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 506.793555][T22149] bond2: option packets_per_slave: allowed values 0 - 65535 [ 506.817418][T22149] bond2 (unregistering): Released all slaves [ 506.932704][ T12] tipc: Subscription rejected, illegal request [ 506.934096][T22157] bridge: RTM_NEWNEIGH with invalid ether address [ 507.335912][T22194] x_tables: duplicate underflow at hook 2 [ 507.599467][ C1] net_ratelimit: 7 callbacks suppressed [ 507.599486][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 507.759588][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 507.794234][T22214] netlink: 'syz.3.4373': attribute type 4 has an invalid length. [ 508.642156][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 508.799685][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 509.133697][T22269] netlink: 'syz.2.4391': attribute type 1 has an invalid length. [ 509.177272][T22282] netlink: 'syz.7.4394': attribute type 1 has an invalid length. [ 509.206867][T22282] __nla_validate_parse: 8 callbacks suppressed [ 509.206883][T22282] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4394'. [ 509.261128][T22269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.288761][T22272] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 509.301169][T22291] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4395'. [ 509.306117][T22282] tipc: Failed to obtain node identity [ 509.321541][T22282] tipc: Enabling of bearer rejected, failed to enable media [ 509.347753][T22289] macvlan2: entered promiscuous mode [ 509.353732][T22289] macvlan2: entered allmulticast mode [ 509.360420][T22289] bond2: entered promiscuous mode [ 509.365770][T22289] veth0_to_bond: entered promiscuous mode [ 509.384154][T22289] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 509.417193][T22289] bond2: left promiscuous mode [ 509.430598][T22289] veth0_to_bond: left promiscuous mode [ 509.488052][T22285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4395'. [ 509.521815][T22285] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4395'. [ 509.547413][T22285] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4395'. [ 509.679476][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 509.777514][T22306] macvtap1: entered promiscuous mode [ 509.791625][T22306] macvtap1: entered allmulticast mode [ 509.800886][T22306] veth1_vlan: entered allmulticast mode [ 509.817391][T22307] macvtap2: entered promiscuous mode [ 509.823943][T22307] macvtap2: entered allmulticast mode [ 509.839453][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 509.872944][T22309] macvtap2: entered promiscuous mode [ 509.878717][T22309] macvtap2: entered allmulticast mode [ 510.017584][T22332] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4408'. [ 510.044158][T22334] netlink: 'syz.2.4409': attribute type 1 has an invalid length. [ 510.141424][T22341] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4411'. [ 510.227286][T22342] 8021q: adding VLAN 0 to HW filter on device bond12 [ 510.315987][T22355] netlink: 'syz.4.4411': attribute type 1 has an invalid length. [ 510.347043][T22355] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4411'. [ 510.411522][T22355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4411'. [ 510.412481][T22360] sctp: [Deprecated]: syz.7.4414 (pid 22360) Use of int in max_burst socket option. [ 510.412481][T22360] Use struct sctp_assoc_value instead [ 510.722054][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 510.730960][T22378] netlink: 'syz.2.4416': attribute type 1 has an invalid length. [ 510.862317][T22384] IPv6: sit1: Disabled Multicast RS [ 510.879575][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.894471][T22384] sit1: entered allmulticast mode [ 510.929302][T22370] macvlan2: entered promiscuous mode [ 510.935560][T22370] macvlan2: entered allmulticast mode [ 510.942579][T22370] bond3: entered promiscuous mode [ 510.948222][T22370] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 510.962686][T22370] bond3: left promiscuous mode [ 510.994068][T22390] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 511.005374][T22390] bond6 (unregistering): Released all slaves [ 511.014423][T22396] netlink: 'syz.7.4423': attribute type 1 has an invalid length. [ 511.041300][ T7851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.051709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.051905][T22396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.109899][T22391] bond1: (slave geneve2): making interface the new active one [ 511.138974][T22391] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 511.217975][T22399] netlink: 'syz.5.4424': attribute type 10 has an invalid length. [ 511.230425][T22399] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4424'. [ 511.416219][T22401] bond4: option xmit_hash_policy: invalid value (64) [ 511.430677][T22401] bond4 (unregistering): Released all slaves [ 511.486238][T22405] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 511.506428][T22405] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 511.547566][T22405] gretap1: entered promiscuous mode [ 511.563421][T22405] gretap1: entered allmulticast mode [ 512.154102][T22453] tipc: Started in network mode [ 512.185827][T22453] tipc: Node identity ac14142f, cluster identity 4711 [ 512.211673][T22453] tipc: Enabling of bearer rejected, failed to enable media [ 512.426739][T22465] macvtap1: entered promiscuous mode [ 512.454314][T22465] macvtap1: entered allmulticast mode [ 512.471858][T22465] veth1_vlan: entered allmulticast mode [ 512.518003][T22466] macvtap2: entered promiscuous mode [ 512.539531][T22466] macvtap2: entered allmulticast mode [ 512.802243][ C1] net_ratelimit: 2 callbacks suppressed [ 512.802262][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 512.959493][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 513.258053][T22507] ip6t_srh: unknown srh invflags 4000 [ 513.302011][T22507] ip6t_srh: unknown srh invflags 4000 [ 513.340293][T22514] x_tables: duplicate entry at hook 1 [ 513.533410][T22513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.556339][T22528] syzkaller0: entered promiscuous mode [ 513.562395][T22528] syzkaller0: entered allmulticast mode [ 513.732902][T22537] bond0: option miimon: invalid value (18446744071829782528) [ 513.741588][T22537] bond0: option miimon: allowed values 0 - 2147483647 [ 513.764434][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 513.839489][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 513.999577][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 514.724029][T22546] netlink: 'syz.3.4456': attribute type 2 has an invalid length. [ 514.737644][T22546] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 514.881483][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 515.039602][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.919510][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 516.079546][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.240455][T22506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.286360][T22528] netlink: 'syz.2.4451': attribute type 1 has an invalid length. [ 516.296868][T22528] __nla_validate_parse: 5 callbacks suppressed [ 516.296885][T22528] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4451'. [ 516.312826][T22528] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4451'. [ 516.330823][T22528] netlink: 'syz.2.4451': attribute type 1 has an invalid length. [ 516.339183][T22528] netlink: 'syz.2.4451': attribute type 8 has an invalid length. [ 516.348370][T22528] netlink: 582 bytes leftover after parsing attributes in process `syz.2.4451'. [ 516.441429][T22555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4458'. [ 516.474845][T22555] netlink: 'syz.4.4458': attribute type 1 has an invalid length. [ 516.627463][T22555] bond8: entered promiscuous mode [ 516.651517][T22555] 8021q: adding VLAN 0 to HW filter on device bond8 [ 516.775016][T22561] bond8: (slave bridge4): making interface the new active one [ 516.798453][T22561] bridge4: entered promiscuous mode [ 516.838152][T22583] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4464'. [ 516.851186][T22561] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 517.077162][T22582] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 517.133140][T22582] bridge0: entered promiscuous mode [ 517.167883][T22595] netlink: 'syz.4.4467': attribute type 1 has an invalid length. [ 517.201576][T22595] netlink: 'syz.4.4467': attribute type 2 has an invalid length. [ 517.433168][T22609] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4473'. [ 517.605376][T22622] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4475'. [ 517.760108][T22633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4476'. [ 517.999464][ C1] net_ratelimit: 4 callbacks suppressed [ 517.999482][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 518.159484][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.040823][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 519.199644][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.079569][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 520.239411][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.423837][T22609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.672412][T22679] sctp: [Deprecated]: syz.3.4487 (pid 22679) Use of int in max_burst socket option. [ 520.672412][T22679] Use struct sctp_assoc_value instead [ 520.700568][T22683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4490'. [ 520.786169][T22683] 8021q: adding VLAN 0 to HW filter on device bond13 [ 520.822802][T22685] macvlan5: entered promiscuous mode [ 520.838371][T22685] macvlan5: entered allmulticast mode [ 520.857081][T22685] bond13: entered promiscuous mode [ 520.872767][T22685] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 520.885680][T22685] bond13: left promiscuous mode [ 521.122024][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 521.123413][T22704] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4495'. [ 521.272772][T22710] netlink: 'syz.5.4497': attribute type 10 has an invalid length. [ 521.279437][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.285630][T22710] team0: left promiscuous mode [ 521.293738][T22710] team_slave_0: left promiscuous mode [ 521.300209][T22710] team_slave_1: left promiscuous mode [ 521.344355][T22713] IPVS: ip_vs_add_dest(): server weight less than zero [ 521.388206][T22666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.807206][T22743] __nla_validate_parse: 1 callbacks suppressed [ 521.807223][T22743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4507'. [ 521.925431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.934373][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.970438][T22749] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4510'. [ 521.970778][T22747] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4509'. [ 522.083451][T22754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4512'. [ 522.123970][T22757] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4514'. [ 522.187567][T22764] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4513'. [ 522.941250][T22810] netlink: 'syz.3.4528': attribute type 1 has an invalid length. [ 523.113243][T22810] 8021q: adding VLAN 0 to HW filter on device bond7 [ 523.132568][T22818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4528'. [ 523.163764][T22813] bond7: (slave veth0_to_bond): making interface the new active one [ 523.191858][T22813] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 523.211621][ C1] net_ratelimit: 7 callbacks suppressed [ 523.211638][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 523.289161][T22805] 8021q: adding VLAN 0 to HW filter on device bond8 [ 523.313538][T22805] bond7: (slave bond8): Enslaving as an active interface with a down link [ 523.329127][T22833] IPv6: NLM_F_CREATE should be specified when creating new route [ 523.359605][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 523.532565][T22841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4537'. [ 523.598140][T22841] netlink: 150284 bytes leftover after parsing attributes in process `syz.4.4537'. [ 523.638640][T22841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4537'. [ 523.839994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.849968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.862966][T22863] netlink: 'syz.3.4542': attribute type 1 has an invalid length. [ 523.875510][T22862] netlink: 'syz.3.4542': attribute type 1 has an invalid length. [ 524.059093][T22873] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.068418][T22873] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.239472][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 524.397940][T22895] netlink: 'syz.7.4548': attribute type 1 has an invalid length. [ 524.399431][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 525.166608][T22930] tipc: Resetting bearer [ 525.282187][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 525.416506][T22930] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 525.439542][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 525.635229][T22966] syzkaller0: entered promiscuous mode [ 525.641412][T22966] syzkaller0: entered allmulticast mode [ 525.678756][T22969] veth1: entered allmulticast mode [ 525.749043][T22973] netlink: 'syz.3.4569': attribute type 1 has an invalid length. [ 525.757023][T22973] netlink: 'syz.3.4569': attribute type 4 has an invalid length. [ 525.971636][T22983] block nbd0: not configured, cannot reconfigure [ 526.051851][T22991] netlink: 'syz.5.4573': attribute type 7 has an invalid length. [ 526.085085][T22991] netlink: 'syz.5.4573': attribute type 8 has an invalid length. [ 526.136931][T22998] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 526.276945][T23004] ipvlan0: entered allmulticast mode [ 526.291329][T23004] batadv_slave_1: entered allmulticast mode [ 526.313877][T23004] batman_adv: batadv0: Adding interface: ipvlan0 [ 526.329554][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 526.341402][T23004] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.369730][T23004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.381265][T23004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.392488][T23004] batman_adv: batadv0: Interface activated: ipvlan0 [ 526.661887][T23016] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 526.690077][T23016] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 527.285574][T23054] netlink: 'syz.4.4597': attribute type 1 has an invalid length. [ 527.345860][T23057] netlink: 'syz.5.4598': attribute type 10 has an invalid length. [ 527.379003][T23057] __nla_validate_parse: 18 callbacks suppressed [ 527.379023][T23057] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4598'. [ 527.423873][T23059] netlink: 'syz.2.4599': attribute type 3 has an invalid length. [ 527.444921][T23059] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4599'. [ 527.481444][ T6544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.492588][ T6544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.872894][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4610'. [ 527.933088][T23086] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 527.972771][T23101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4608'. [ 527.995268][T23086] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 528.035454][T23086] gretap0: entered promiscuous mode [ 528.068363][T23086] gretap0: entered allmulticast mode [ 528.132295][T23108] netlink: 'syz.3.4612': attribute type 12 has an invalid length. [ 528.152202][T23108] netlink: 'syz.3.4612': attribute type 29 has an invalid length. [ 528.180093][T23108] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4612'. [ 528.209780][T23108] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4612'. [ 528.399471][ C1] net_ratelimit: 6 callbacks suppressed [ 528.399490][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 528.511123][T23131] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4619'. [ 528.559561][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 528.765735][T23144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.799412][T23149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4623'. [ 528.855754][T23151] nftables ruleset with unbound set [ 529.300195][T23153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.301726][T23170] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4633'. [ 529.312181][T23153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.372323][T23167] ipvlan1: left allmulticast mode [ 529.377771][T23167] veth0_vlan: left allmulticast mode [ 529.412305][T23174] netlink: 'syz.3.4631': attribute type 1 has an invalid length. [ 529.428382][T23167] bridge2: left allmulticast mode [ 529.440508][T23174] xt_l2tp: v2 doesn't support IP mode [ 529.446658][T23167] macsec1: left allmulticast mode [ 529.453189][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 529.471832][T23179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4632'. [ 529.482103][T23167] bridge0: left allmulticast mode [ 529.496654][T23167] ip6erspan1: left allmulticast mode [ 529.505453][T23167] veth1: left allmulticast mode [ 529.599845][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 529.644686][T23153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.662340][T23153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.862275][T23153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.888571][T23153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.026293][T23153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.046074][T23153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.116418][T23205] bond9: option lp_interval: invalid value (0) [ 530.125114][T23205] bond9: option lp_interval: allowed values 1 - 2147483647 [ 530.136949][T23205] bond9 (unregistering): Released all slaves [ 530.479554][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 530.507291][ T6544] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.526234][ T6544] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.639627][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 530.648736][ T7851] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.665958][ T7851] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.704716][ T7851] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.730338][ T7851] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.781003][ T7859] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.804548][ T7859] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.863956][T23240] team0: Port device team_slave_0 removed [ 530.903629][T23249] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 530.931117][T23249] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 531.051215][T23255] bond2: Removing last arp target with arp_interval on [ 531.316886][T23275] syzkaller1: entered promiscuous mode [ 531.361788][T23275] syzkaller1: entered allmulticast mode [ 531.522333][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 531.679597][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.894494][T23323] netlink: 'syz.3.4670': attribute type 1 has an invalid length. [ 531.914737][T23323] netlink: 'syz.3.4670': attribute type 3 has an invalid length. [ 531.926137][T23323] netlink: 'syz.3.4670': attribute type 7 has an invalid length. [ 531.935235][T23323] netlink: 'syz.3.4670': attribute type 8 has an invalid length. [ 531.949245][T23323] NCSI netlink: No device for ifindex 131092 [ 532.028475][T23327] bond3: entered promiscuous mode [ 532.034776][T23327] 8021q: adding VLAN 0 to HW filter on device bond3 [ 532.066116][T23327] 8021q: adding VLAN 0 to HW filter on device bond3 [ 532.111685][T23327] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 532.125595][T23327] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 532.152521][T23327] bond3: (slave ip6gre1): making interface the new active one [ 532.168698][T23327] ip6gre1: entered promiscuous mode [ 532.202005][T23327] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 532.210518][ T7997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.493251][T23358] __nla_validate_parse: 4 callbacks suppressed [ 532.493271][T23358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4679'. [ 532.533114][T23358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4679'. [ 532.940934][T23389] tipc: Started in network mode [ 532.968248][T23389] tipc: Node identity 9aee23ad1c93, cluster identity 4711 [ 532.991885][T23389] tipc: Enabled bearer , priority 0 [ 533.030601][T23387] syzkaller0: entered promiscuous mode [ 533.041786][T23387] syzkaller0: entered allmulticast mode [ 533.106203][T23387] tipc: Resetting bearer [ 533.137971][T23410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4694'. [ 533.151582][T23387] tipc: Disabling bearer [ 533.156520][T23410] validate_nla: 1 callbacks suppressed [ 533.156536][T23410] netlink: 'syz.3.4694': attribute type 30 has an invalid length. [ 533.203196][T23410] bond9: option arp_missed_max: invalid value (0) [ 533.221154][T23410] bond9: option arp_missed_max: allowed values 1 - 255 [ 533.245156][T23410] bond9 (unregistering): Released all slaves [ 533.400813][T23424] netlink: 'syz.7.4698': attribute type 1 has an invalid length. [ 533.602125][ C1] net_ratelimit: 7 callbacks suppressed [ 533.602143][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 533.759624][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 533.772672][T23448] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4705'. [ 533.883566][T23461] x_tables: duplicate underflow at hook 2 [ 533.901745][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4708'. [ 534.077866][T23470] netlink: 'syz.4.4711': attribute type 1 has an invalid length. [ 534.222680][T23483] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4714'. [ 534.233082][T23470] bond9: entered promiscuous mode [ 534.238684][T23470] 8021q: adding VLAN 0 to HW filter on device bond9 [ 534.262562][T23483] tipc: MTU too low for tipc bearer [ 534.284427][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4716'. [ 534.301669][T23488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4715'. [ 534.394840][T23494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4719'. [ 534.600960][T23500] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 534.639456][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 534.748543][T23512] netlink: 408 bytes leftover after parsing attributes in process `syz.4.4726'. [ 534.799590][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 534.876266][T23522] netlink: 'syz.7.4729': attribute type 7 has an invalid length. [ 534.946303][T23529] ipt_REJECT: TCP_RESET invalid for non-tcp [ 535.627300][T23570] 0·: renamed from hsr0 (while UP) [ 535.647986][T23570] 0·: entered allmulticast mode [ 535.659260][T23570] hsr_slave_0: entered allmulticast mode [ 535.666424][T23570] hsr_slave_1: entered allmulticast mode [ 535.673847][T23570] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 535.692080][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 535.839446][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 536.719490][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 536.863411][T23629] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 536.879442][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 536.902968][T23632] veth0: entered promiscuous mode [ 536.934798][T23632] veth0: left promiscuous mode [ 536.961132][T23634] netlink: 'syz.3.4765': attribute type 10 has an invalid length. [ 537.024940][T23634] team0: Port device dummy0 added [ 537.058401][T23641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.082246][T23640] netlink: 'syz.4.4768': attribute type 1 has an invalid length. [ 537.258353][T23640] bond10: entered promiscuous mode [ 537.271041][T23640] 8021q: adding VLAN 0 to HW filter on device bond10 [ 537.343263][T23650] bond10: (slave bridge5): making interface the new active one [ 537.353495][T23650] bridge5: entered promiscuous mode [ 537.368477][T23650] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 537.637653][T23682] __nla_validate_parse: 11 callbacks suppressed [ 537.637672][T23682] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4778'. [ 537.642904][T23677] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4779'. [ 538.048746][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4786'. [ 538.204817][T23707] netlink: 'syz.2.4789': attribute type 10 has an invalid length. [ 538.226124][T23707] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4789'. [ 538.295775][T23712] netlink: 'syz.7.4790': attribute type 21 has an invalid length. [ 538.340251][T23712] IPv6: NLM_F_CREATE should be specified when creating new route [ 538.525723][T23725] sit1: entered promiscuous mode [ 538.541632][T23725] sit1: entered allmulticast mode [ 538.799511][ C1] net_ratelimit: 12 callbacks suppressed [ 538.799529][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 538.826534][T23747] netlink: 186440 bytes leftover after parsing attributes in process `syz.4.4800'. [ 538.840448][T23747] netlink: 'syz.4.4800': attribute type 1 has an invalid length. [ 538.959714][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 539.132958][T23765] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 539.345727][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4809'. [ 539.361879][T23779] : entered promiscuous mode [ 539.392982][T23780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4810'. [ 539.552505][T23786] siw: device registration error -23 [ 539.842405][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 539.850973][T23803] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4819'. [ 539.907978][T23809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4821'. [ 539.923679][T23809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4821'. [ 539.999583][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 540.326448][T23832] nbd: nbd64 already in use [ 540.600734][T23851] netlink: 'syz.2.4831': attribute type 12 has an invalid length. [ 540.648456][T21480] udevd[21480]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 540.701780][T23855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.879476][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 541.039519][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.084954][T23875] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 541.124687][T23875] team1: entered promiscuous mode [ 541.143652][T23875] team1: entered allmulticast mode [ 541.508079][T23899] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 541.530142][T23899] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 541.548511][T23903] Bluetooth: MGMT ver 1.23 [ 541.922033][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 542.079414][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 542.112384][T23943] netlink: 'syz.3.4852': attribute type 178 has an invalid length. [ 542.210863][T23942] netlink: 'syz.2.4857': attribute type 10 has an invalid length. [ 542.264559][T23942] team0: Port device dummy0 added [ 542.452313][T23950] netlink: 'syz.3.4859': attribute type 3 has an invalid length. [ 542.647776][T23965] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 542.664485][T23944] __nla_validate_parse: 4 callbacks suppressed [ 542.664502][T23944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4855'. [ 542.846537][T23981] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4867'. [ 542.959491][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 543.136805][T23993] bridge5: entered promiscuous mode [ 543.142987][T23993] bridge5: entered allmulticast mode [ 543.224704][T24005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4869'. [ 543.268471][T24005] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4869'. [ 543.308867][T24012] xt_hashlimit: overflow, try lower: 3/0 [ 543.325206][T24012] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4874'. [ 543.548621][T24019] syzkaller0: entered promiscuous mode [ 543.563102][T24019] syzkaller0: entered allmulticast mode [ 544.002159][ C1] net_ratelimit: 4 callbacks suppressed [ 544.002179][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 544.159447][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 545.039571][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 545.199661][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 546.081559][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 546.239528][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.120161][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 547.279551][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 548.161989][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 548.319445][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 549.199512][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 549.359470][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 549.441233][ T7859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.452016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.241167][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 550.399518][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.279595][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 551.439450][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.321961][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 552.479610][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 554.400868][ C1] net_ratelimit: 2 callbacks suppressed [ 554.400882][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 554.482138][ T7849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.490486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.559548][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 554.719998][ T5634] Bluetooth: hci3: command 0x0405 tx timeout [ 555.440179][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 555.599661][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.482373][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 556.639452][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 557.529565][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 557.679447][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 559.609526][ C1] net_ratelimit: 2 callbacks suppressed [ 559.609545][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 559.759557][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 560.320954][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.329389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.641204][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 560.799440][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 561.679544][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 561.839557][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.721521][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 562.881090][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 563.519852][ T30] INFO: task syz.1.3550:19284 blocked for more than 143 seconds. [ 563.527644][ T30] Not tainted syzkaller #0 [ 563.533141][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.542117][ T30] task:syz.1.3550 state:D stack:25984 pid:19284 tgid:19281 ppid:16303 task_flags:0x400140 flags:0x00080002 [ 563.554158][ T30] Call Trace: [ 563.557475][ T30] [ 563.560985][ T30] __schedule+0x1840/0x57a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 563.565513][ T30] ? __lock_acquire+0x683/0x2cd0 [ 563.570675][ T30] ? __pfx___schedule+0x10/0x10 [ 563.576032][ T30] ? schedule+0x90/0x360 [ 563.580535][ T30] schedule+0x164/0x360 [ 563.584736][ T30] schedule_preempt_disabled+0x13/0x30 [ 563.590914][ T30] __mutex_lock+0x7c5/0x1590 [ 563.596192][ T30] ? __mutex_lock+0x5c5/0x1590 [ 563.601346][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 563.607553][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 563.613033][ T30] ? stack_trace_save+0xa9/0x100 [ 563.618115][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 563.631468][ T30] ? stack_depot_save_flags+0x33/0x800 [ 563.671548][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 563.726829][ T30] ? kasan_save_track+0x4f/0x80 [ 563.759667][ T30] ? kasan_save_track+0x3e/0x80 [ 563.772471][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 563.778567][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 563.786716][ T30] ? __alloc_skb+0x2bd/0x7a0 [ 563.792246][ T30] ? __netlink_dump_start+0x589/0x7b0 [ 563.799219][ T30] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 563.806272][ T30] ? genl_rcv_msg+0x5e1/0x7a0 [ 563.811794][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 563.816780][ T30] ? genl_rcv+0x28/0x40 [ 563.821649][ T30] ? netlink_unicast+0x7bb/0x940 [ 563.826721][ T30] ? netlink_sendmsg+0x813/0xb40 [ 563.832532][ T30] ? ____sys_sendmsg+0x9b9/0xa20 [ 563.837521][ T30] ? ___sys_sendmsg+0x2a5/0x360 [ 563.848618][ T30] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 563.854819][ T30] ? do_syscall_64+0x174/0x580 [ 563.860300][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.866415][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 563.873784][ T30] ? rcu_is_watching+0x15/0xb0 [ 563.878596][ T30] ? trace_kmalloc+0x2a/0xf0 [ 563.884315][ T30] ? __kmalloc_node_track_caller_noprof+0x4f5/0x7b0 [ 563.891987][ T30] genl_dumpit+0x10b/0x1b0 [ 563.896467][ T30] netlink_dump+0x711/0xee0 [ 563.903963][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 563.909047][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 563.915018][ T30] ? genl_start+0x497/0x6d0 [ 563.924628][ T30] __netlink_dump_start+0x589/0x7b0 [ 563.932036][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 563.937819][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 563.945899][ T30] ? genl_get_cmd+0x523/0x960 [ 563.952135][ T30] ? __pfx_genl_start+0x10/0x10 [ 563.957423][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 563.963261][ T30] ? __pfx_genl_done+0x10/0x10 [ 563.968065][ T30] ? __lock_acquire+0x683/0x2cd0 [ 563.974288][ T30] genl_rcv_msg+0x5e1/0x7a0 [ 563.978842][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.986857][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 564.020673][ T30] netlink_rcv_skb+0x226/0x4a0 [ 564.025560][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.032561][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.051221][ T30] ? down_read+0x270/0x2e0 [ 564.055710][ T30] ? genl_rcv+0xd/0x40 [ 564.061830][ T30] genl_rcv+0x28/0x40 [ 564.065867][ T30] netlink_unicast+0x7bb/0x940 [ 564.072172][ T30] netlink_sendmsg+0x813/0xb40 [ 564.077023][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.084765][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 564.092631][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.097972][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.106594][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 564.113277][ T30] ? __might_fault+0xaf/0x130 [ 564.118013][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.124490][ T30] ? import_iovec+0x73/0xa0 [ 564.129048][ T30] ___sys_sendmsg+0x2a5/0x360 [ 564.135506][ T30] ? __lock_acquire+0x683/0x2cd0 [ 564.151166][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.157402][ T30] ? futex_wait+0x2a2/0x390 [ 564.169405][ T30] ? __fget_files+0x2a/0x420 [ 564.174065][ T30] ? __fget_files+0x3a2/0x420 [ 564.178775][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 564.185501][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.191955][ T30] ? rcu_is_watching+0x15/0xb0 [ 564.196786][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.203560][ T30] do_syscall_64+0x174/0x580 [ 564.208958][ T30] ? trace_irq_disable+0x3b/0x140 [ 564.214541][ T30] ? clear_bhb_loop+0x40/0x90 [ 564.219245][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.225860][ T30] RIP: 0033:0x7f1f4339ce59 [ 564.230782][ T30] RSP: 002b:00007f1f44288028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.239210][ T30] RAX: ffffffffffffffda RBX: 00007f1f43615fa0 RCX: 00007f1f4339ce59 [ 564.248291][ T30] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000004 [ 564.256645][ T30] RBP: 00007f1f43432d6f R08: 0000000000000000 R09: 0000000000000000 [ 564.264949][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.273154][ T30] R13: 00007f1f43616038 R14: 00007f1f43615fa0 R15: 00007ffd82873dc8 [ 564.281407][ T30] [ 564.284582][ T30] [ 564.284582][ T30] Showing all locks held in the system: [ 564.293925][ T30] 1 lock held by khungtaskd/30: [ 564.298816][ T30] #0: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 564.331035][ T30] 2 locks held by getty/5389: [ 564.342864][ T30] #0: ffff8880366c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 564.371029][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1380 [ 564.389529][ T30] 3 locks held by kworker/1:14/8295: [ 564.394877][ T30] #0: ffff88813fe3f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 564.410588][ T30] #1: ffffc9000d3e7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 564.424425][ T30] #2: ffffffff8e962aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 564.442699][ T30] 2 locks held by syz.0.2014/13124: [ 564.460446][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.471286][ T30] #1: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 564.500458][ T30] 1 lock held by syz-executor/13679: [ 564.507321][ T30] 1 lock held by syz-executor/16979: [ 564.521985][ T30] #0: ffff888086b04ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 564.551699][ T30] 1 lock held by syz-executor/17708: [ 564.557055][ T30] 2 locks held by syz-executor/18240: [ 564.580102][ T30] #0: ffff888075f6cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 564.599456][ T30] #1: ffffffff8e962aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 564.621065][ T30] 3 locks held by syz.1.3550/19284: [ 564.641944][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.651364][ T30] #1: ffff888059e6f6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 564.679895][ T30] #2: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 564.710099][ T30] 2 locks held by syz.6.3824/20296: [ 564.715362][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.739683][ T30] #1: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 564.761060][ T30] 1 lock held by dhcpcd/24053: [ 564.768375][ T30] #0: ffff88803dfeb040 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 564.789935][ T30] [ 564.793103][ T30] ============================================= [ 564.793103][ T30] [ 564.804768][ C1] net_ratelimit: 2 callbacks suppressed [ 564.804785][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 564.826951][ T30] NMI backtrace for cpu 0 [ 564.826978][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 564.826997][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 564.827007][ T30] Call Trace: [ 564.827013][ T30] [ 564.827022][ T30] dump_stack_lvl+0xe8/0x150 [ 564.827047][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 564.827070][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 564.827107][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 564.827135][ T30] sys_info+0x135/0x170 [ 564.827153][ T30] watchdog+0xfd7/0x1030 [ 564.827184][ T30] ? watchdog+0x1c7/0x1030 [ 564.827213][ T30] kthread+0x389/0x470 [ 564.827235][ T30] ? __pfx_watchdog+0x10/0x10 [ 564.827256][ T30] ? __pfx_kthread+0x10/0x10 [ 564.827279][ T30] ret_from_fork+0x514/0xb70 [ 564.827300][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 564.827324][ T30] ? __switch_to+0xc89/0x1420 [ 564.827350][ T30] ? __pfx_kthread+0x10/0x10 [ 564.827373][ T30] ret_from_fork_asm+0x1a/0x30 [ 564.827409][ T30] [ 564.827416][ T30] Sending NMI from CPU 0 to CPUs 1: [ 564.941401][ C1] NMI backtrace for cpu 1 [ 564.941418][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 564.941435][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 564.941444][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 564.941472][ C1] Code: ab 83 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 12 27 00 fb f4 7c ff 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 564.941485][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 564.941499][ C1] RAX: 00000000001e96d9 RBX: ffffffff819a301a RCX: 0000000080000001 [ 564.941510][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa1aa6 RDI: ffffffff8c2899a0 [ 564.941521][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 564.941532][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 564.941543][ C1] R13: 1ffff11003b5a000 R14: 0000000000000001 R15: 1ffff11003b5a000 [ 564.941553][ C1] FS: 0000000000000000(0000) GS:ffff8881253b9000(0000) knlGS:0000000000000000 [ 564.941566][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.941576][ C1] CR2: 0000563e164c84b0 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 564.941590][ C1] Call Trace: [ 564.941596][ C1] [ 564.941602][ C1] default_idle+0x9/0x20 [ 564.941618][ C1] default_idle_call+0x72/0xb0 [ 564.941636][ C1] do_idle+0x36a/0x5f0 [ 564.941656][ C1] ? __pfx_do_idle+0x10/0x10 [ 564.941678][ C1] cpu_startup_entry+0x43/0x60 [ 564.941694][ C1] start_secondary+0x101/0x110 [ 564.941715][ C1] common_startup_64+0x13e/0x147 [ 564.941742][ C1] [ 564.965807][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 565.114316][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 565.121190][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 565.130306][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 565.140383][ T30] Call Trace: [ 565.143677][ T30] [ 565.146618][ T30] vpanic+0x56c/0xa60 [ 565.150617][ T30] ? __pfx___schedule+0x10/0x10 [ 565.155497][ T30] ? __pfx_vpanic+0x10/0x10 [ 565.160018][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 565.166195][ T30] panic+0xc5/0xd0 [ 565.169935][ T30] ? __pfx_panic+0x10/0x10 [ 565.174390][ T30] ? preempt_schedule_common+0x82/0xd0 [ 565.179842][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 565.185197][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 565.191333][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 565.197466][ T30] watchdog+0x1030/0x1030 [ 565.201806][ T30] ? watchdog+0x1c7/0x1030 [ 565.206208][ T30] kthread+0x389/0x470 [ 565.210259][ T30] ? __pfx_watchdog+0x10/0x10 [ 565.214921][ T30] ? __pfx_kthread+0x10/0x10 [ 565.219503][ T30] ret_from_fork+0x514/0xb70 [ 565.224106][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 565.229227][ T30] ? __switch_to+0xc89/0x1420 [ 565.233902][ T30] ? __pfx_kthread+0x10/0x10 [ 565.238487][ T30] ret_from_fork_asm+0x1a/0x30 [ 565.243253][ T30] [ 565.246534][ T30] Kernel Offset: disabled [ 565.250851][ T30] Rebooting in 86400 seconds..