last executing test programs: 9.325719158s ago: executing program 3 (id=6031): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000280)={0xffff2bf7, [0xff, 0x8], 0xb91}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x198, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x36}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0xc081) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="800100001000010000000000000000ac141400000000000000000000000000ac14140000000000000000000000000000000000000000000a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722873657270656e74290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x180}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x18, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0xfffffffffffffff6, 0x140b, 0x305, 0x70bd28, 0x67, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 9.120032685s ago: executing program 3 (id=6037): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r3, 0x4}, &(0x7f0000000180)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 7.020865469s ago: executing program 3 (id=6045): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000340)={0x0, 0x30, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000000000000014105000018001700000018000000006574683a766c616e30000000"], 0x34}}, 0x4000040) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x336) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000007603000000000000000900010002000000"], 0x20}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25030100800c0002"], 0x114}], 0x1}, 0x0) ioctl$TUNGETSNDBUF(r6, 0x800454d3, 0xffffffffffffffff) syz_emit_ethernet(0x12, &(0x7f00000002c0)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@generic={0x86dd}}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000004c0)={@broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r10 = socket$nl_crypto(0x10, 0x3, 0x15) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000200010c000280050001"], 0x58}}, 0x0) sendmsg$nl_crypto(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r6) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'gretap0\x00', r12, 0x8000, 0x700, 0x6, 0xffffc669, {{0x10, 0x4, 0x2, 0x2, 0x40, 0x66, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x76, 0x1, 0x1, [{@remote, 0xfff}]}, @end, @ssrr={0x89, 0x1b, 0xa1, [@private=0xa010101, @remote, @private=0xa010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @ra={0x94, 0x4}]}}}}}) 6.622953417s ago: executing program 3 (id=6049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r3]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0x6}, {0x0, 0xfff1}, {0xfff1, 0x2}}, [{0x8, 0xb, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000049c439d2ff9460c72354e609b00000000085ffff00bf0000009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) 6.363390059s ago: executing program 3 (id=6052): setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8009) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/16, 0x10}, {&(0x7f0000000180)=""/43, 0x2b}], 0x2, &(0x7f0000000200)=""/120, 0x78}, 0x5}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/64, 0x40}, {&(0x7f00000002c0)=""/44, 0x2c}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000000400)=""/202, 0xca}], 0x5, &(0x7f0000000580)=""/24, 0x18}, 0xfffffffd}, {{&(0x7f00000005c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)}, {&(0x7f0000000680)=""/45, 0x2d}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000780)=""/60, 0x3c}, {&(0x7f00000007c0)=""/232, 0xe8}, {&(0x7f00000008c0)=""/92, 0x5c}], 0x6, &(0x7f00000009c0)=""/100, 0x64}, 0x1}, {{&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000ac0)=""/41, 0x29}], 0x1}, 0xf8}, {{&(0x7f0000000b40)=@x25, 0x80, &(0x7f0000001240)=[{&(0x7f0000000bc0)=""/231, 0xe7}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/157, 0x9d}, {&(0x7f0000000e80)=""/91, 0x5b}, {&(0x7f0000000f00)=""/138, 0x8a}, {&(0x7f0000000fc0)=""/106, 0x6a}, {&(0x7f0000001040)=""/112, 0x70}, {&(0x7f00000010c0)=""/125, 0x7d}, {&(0x7f0000001140)=""/219, 0xdb}], 0x9, &(0x7f0000001300)=""/158, 0x9e}, 0x3}, {{&(0x7f00000013c0)=@generic, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001440)=""/79, 0x4f}, {&(0x7f00000014c0)=""/83, 0x53}, {&(0x7f0000001540)=""/72, 0x48}, {&(0x7f00000015c0)=""/234, 0xea}, {&(0x7f00000016c0)=""/68, 0x44}, {&(0x7f0000001740)=""/119, 0x77}, {&(0x7f00000017c0)=""/91, 0x5b}, {&(0x7f0000001840)=""/218, 0xda}, {&(0x7f0000001940)=""/171, 0xab}], 0x9, &(0x7f0000001ac0)=""/159, 0x9f}, 0x87}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/143, 0x8f}, {&(0x7f0000001c40)=""/75, 0x4b}], 0x2}, 0x7}], 0x7, 0x100, &(0x7f0000001ec0)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001f00)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f80), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001fc0)={0x0, @private}, &(0x7f0000002000)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002040)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002100)={'ip6tnl0\x00', &(0x7f0000002080)={'syztnl2\x00', 0x0, 0x2f, 0x40, 0x1c, 0x0, 0x38, @mcast2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1, 0x1, 0xbd77, 0xea6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002200)={'syztnl1\x00', &(0x7f0000002140)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x7, 0x3, {{0x27, 0x4, 0x0, 0x10, 0x9c, 0x65, 0x0, 0x5a, 0x2f, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0x17, 0x56, [@private=0xa010100, @empty, @broadcast, @private=0xa010100, @remote]}, @rr={0x7, 0x13, 0xc0, [@empty, @private=0xa010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}]}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x26, 0x2, [{0x2, 0x12, "dd6ba5c4401ca64e3279a7b237553e45"}, {0x7, 0xe, "f8ca2ae838229c4ab33de3c6"}]}, @cipso={0x86, 0x31, 0x0, [{0x0, 0x6, "cb4b08ab"}, {0x5, 0x4, "0656"}, {0x0, 0x4, "898b"}, {0x3, 0x4, "4fc3"}, {0x5, 0x2}, {0x0, 0x9, "a08d1eaac071b3"}, {0x1, 0xe, "0db76bdef6f885807c8251d3"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002240)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002300)={0xffffffffffffffff, 0x58, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000024c0)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002340)={0x120, r2, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000003540)={@ieee802154={0x24, @short={0x2, 0x0, 0xaaa3}}, {&(0x7f0000002500)=""/4096, 0x1000}, &(0x7f0000003500), 0x72}, 0xa0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000003600)) sendto$packet(r1, &(0x7f0000003640)="96bb3b27d6034292d51efc41d7c83249bd46fbd7b6b05d32c9437224c87435108ee292818cf936bb30d1ab663383f86216a330c9d727281298a30c5e0f98511105661382bd19987178cfc96e1dfc081c82691b28601fd33d2e1764ba87373796762320b421377e9049021237c8a68571e4766c49c18e90ac2bc59d88c2251286334c19f761746fd8b7a9137b33adfc08048fab41f952fe", 0x97, 0x4c805, &(0x7f0000003700)={0x11, 0xf6, r3, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) bind$inet6(r1, &(0x7f0000003740)={0xa, 0x4e24, 0x7, @loopback, 0x9}, 0x1c) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003780)='./cgroup.net/syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000037c0)='freezer.parent_freezing\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003800)=0xffffffffffffffff, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000003840)=@base={0x6, 0x0, 0x80, 0x4, 0x8000, r10, 0x8, '\x00', r8, r11, 0x3, 0x5, 0x1, 0x0, @value=r10}, 0x50) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000003900), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003940)={0xfc, r13, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xafd}, {0x8, 0xb, 0xff000000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xbdd64940}, {0x6, 0x16, 0x31}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0xfff7}, {0x8, 0xb, 0xec1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000001) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000003ac0)=0x4, 0x4) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000003b40), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x18200000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x2c, r14, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048080}, 0xd0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GET_RESBLKS(r12, 0x80105873, &(0x7f0000003c40)) 5.437563481s ago: executing program 3 (id=6056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r4, 0xe7d02281b1d40445, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x40, 0x80, 0xf, 0x9, {{0x17, 0x4, 0x3, 0xf, 0x5c, 0x64, 0x0, 0x2, 0x29, 0x0, @empty, @local, {[@timestamp={0x44, 0xc, 0xa8, 0x0, 0x4, [0x106, 0x4]}, @lsrr={0x83, 0x17, 0xc3, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @local]}, @rr={0x7, 0x7, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0x9e, 0x0, 0x2, [0x6, 0xff, 0x8, 0x4, 0xfffffff9, 0xfffffff2]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4001}, 0x20000040) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0xff}, 0x8) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000d1500010300000000002000000c000000b17257e9df43ec8669fc3bd42cf9760dd9735fcb21762a47d20227227ced1c2e8b3b17c2d4ac7a37859b9329ccf072853d14bfdcd19c19e3a52bd2a7cca03696efbe8aa7997cf34da59f079e2e0947a15888e92d109eca176b45c949f2c6a7851fca8d4cf15ced70214ab74bcf6ea7407cc1be747fe3d09be9c2f23db29fa22ba508638dee4df3ec6cc03490bc83c02ddad44c001bd8184fc0601ecb19eb9ff4b6f4a74080803bdc131cc7bd180e667163ab7d0cec8fa1f8a44f9a2d1518fc760dff8c2d88ed6ac9eb554f179a71d38e0a40d2e057f9a6b1"], 0x14}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001400000000000000000795"], &(0x7f0000000400)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="ed1aab35055bad04048203bbd923fb4e2e58c823ff901604459c9d2372f198a620a823ae03726be8484d73efbef83bd9b436836df94338f7255938f9ef0cab866af35cd6808392abe037a30101df988026afd8ea0f9da2ee72285eb41f1ceebda2fe66636780d76a645a2c1d06ec596fbef82d989a96034f9a49d55051b00fc67bfc9c877023aea7ab8529df095a5275ecb8c38a8e6eb646e4ea1b22e82c41ef0832b38c8938534cd0716e7e07609e96b8eeddfa81a884f3d23d145588256340754a662d96853b5be2c7849b130aa5a78f"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x2a}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}}, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x1, 0x2}, 0x10) r10 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x400}}}}}, 0x0) listen(r10, 0x0) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r13, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) getsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000000200)=""/71, &(0x7f0000000280)=0x47) 3.272115155s ago: executing program 4 (id=6082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x29, 0x4, 0x7ff) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) recvmmsg(r2, &(0x7f0000001540)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f00000006c0)=""/226, 0xe2}, {&(0x7f00000007c0)=""/114, 0x72}], 0x3, &(0x7f0000000880)=""/222, 0xde}, 0x7}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000980)=""/147, 0x93}, {&(0x7f0000000a40)=""/28, 0x1c}, {&(0x7f0000000a80)=""/233, 0xe9}, {&(0x7f0000000b80)=""/204, 0xcc}, {&(0x7f0000000c80)=""/169, 0xa9}, {&(0x7f0000000d40)=""/33, 0x21}, {&(0x7f0000000d80)=""/194, 0xc2}], 0x7, &(0x7f0000000f00)=""/231, 0xe7}, 0x1}, {{&(0x7f0000001000)=@hci, 0x80, &(0x7f0000001480)=[{&(0x7f0000001080)=""/183, 0xb7}, {&(0x7f0000001140)=""/86, 0x56}, {&(0x7f00000011c0)=""/132, 0x84}, {&(0x7f0000001280)=""/193, 0xc1}, {&(0x7f0000001380)=""/197, 0xc5}], 0x5, &(0x7f0000001500)}, 0x8001}], 0x3, 0x1, &(0x7f0000001600)) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000280)={0x3a, 0x16, '\x00', [@generic={0x4, 0x9f, "d1b2bc7b65b287570967bdac108a034be855aa50aded1ed86843cbdb2ac86ca171a91b7315bd45f9c2f513fb57642710ce1585a08f1ce3786702354f4353fa5b059d4695a8f0fba29e0bba36963abfa21c46b32c7b492db2291cac1adc87d438dcccb4cdfadd853e75e988ddb3b7969dec0f2bee34334771c9e197142a03424d08c285e0d1f664e8bd25d2ed53bb0c0d92d6d0d55da1abffc6c3063be5a2b7"}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x4}]}, 0xc0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r5, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x59}}}}}, 0x28}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 3.143029724s ago: executing program 4 (id=6083): socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000001c0)={0x1}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000700)={r5}, &(0x7f0000000740)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000700)={r5}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r5, 0xf575}, &(0x7f0000000080)=0x8) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000005fc0)={'filter\x00', 0x4}, 0x68) socket(0x200000000000011, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000080)}, {&(0x7f0000000300)}, {&(0x7f0000000340)="ec8b8c4bf16ef994f0ac9e0413268a17fed4c782b831dc2fcb0a7a2eca608cceba537951dedbebcf1fd8e079f738197f0e302c13177f9568437476361dd492b7cc12db7f7b4eab907882f9b8017361", 0x4f}], 0x3, &(0x7f0000000780)=[@ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x5}]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x2, 0x3, '\''}]}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_prespec={0x44, 0x4, 0x22, 0x3, 0x4}, @rr={0x7, 0x17, 0x34, [@empty, @remote, @broadcast, @local, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0xc0}}, {{&(0x7f0000000440)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000540)="1c70af8ea587ac75af7c552d37fbbdf3580d79093a6a9a07e8f255dc1996fef8b6106d55cae77722820bb28636ae8ad0f1b365dbf65946f991f633aa5020ab643fc7b3b6dae8d7db71c67dbbceace89023fe90d2da62d773bf773a5fb085843994f7638664579c4093fdb914c5542d776593d453a696ff4891f065eb3f8a50e25fcf1e", 0x83}, {&(0x7f0000000600)="7916e4e290ae3246a91b6d85f22f5043e59c207ee88e8b3dc4e80b7eaeb74d3de65ffa0ee7127ab1db5bcf0b0fe35abf8a0a0d2e91a46970051f97205d29e812595c4c6548cb38452942f5767dd2871c0216e2317703106b1e34559be5c183421321b8f4d862c2afd13b9ad86a28b7a86ed6f6d1ff5d81d152cd8806985e3f4b3a8e045f87", 0x85}, {&(0x7f00000009c0)="11322fc47dd828aac9b3752fb5406c537fdda01beafdc61237aa0e3fc67bab40b12ba9c221d0426f5f1efe20bb341b92aebc2049d4de0b0f52e6bbe6df4ba6c60ceeffb7eda5fa0c23ddfa8229e6c1f5f21a8ab1ea4fdd69c8d0109a1d6fed8b00f09b1260a35d63953981de14b2c26bdd85d754c772cd0ec50dcecd7191ec2fd9adf4f9f8427f63d3469f0713950b344fa9", 0x92}, {&(0x7f00000006c0)="cf4b0458ebd6b9b4b5be86ebd6378e6796e03b609898c61515bcdac76dcb3b55bc80fd8d4aadfaa35d76d0c673d563c645d880c6e7e1e0ccd5551718266c7dde4d572b700b2c", 0x46}, {&(0x7f0000000a80)="1e95366ba7d19164728701b1cb401dd88209467af076a91f07be1fd530f2e3280f011105d5f1193549ac67c35acc7d1dbd142ed7074eb66053db5d9266c49ceaff105b8e8899cf357b18dbaf5919aabf2b9265a020dc8664105edfe33f0889cb447eaa0168c180d14109482366f633017c2249295faf46932ca681d35a4faf60e17fe94a2804bb24ba7871b0c365763706ec83b70108682b8ad486174434644a614c3bcf393c2fbdcb130756040178c2b198931975a8afd32a573e440d1cc2e141f3c572a8d36f2131237717631018653a43bf80cd9b15cced7d7bf39652dbdb", 0xe0}, {&(0x7f0000000b80)="2d01a08efc5280451e3b13e5e2e7c7b32543f335b2ca5297aaca728fff1bff3285ab5ead2f913dc8908a1519701de37e42e95688dea259e7fbc0b352978a5e641585005a04de91c82c03c2974d981520a925", 0x52}, {&(0x7f0000000480)="47a3", 0x2}, {&(0x7f0000000c00)="a298b563e756234d85213e7d56f13fc3ddc8ad561d44b1296e5a52788f3a94a3317b6d6efcce00788b", 0x29}], 0x8}}, {{&(0x7f0000000cc0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003100)=[{&(0x7f0000000d00)="011fbf1c7c984d82", 0x8}, {&(0x7f0000000d40)="938d5579eddc876f3ef559f6030f901bb3605c896612028137f1227fef89e12277b8172d7923d8aa9aeaf38437ff6880dc0f095c180e1a3bcc1dfac23de34c1f88bd8793d1624ea9df4e3439c6360283d7330d502492224c8bfaf488b2808006f03b345a932d3f723082b6fdd2aa049d46476f2981c8125c0a188e13ebada4d1", 0x80}, {&(0x7f0000000dc0)="a81e3b36b5169e9936b1de089a336ba97522f22df933e9289e4a3fcad8f709b9b6d051ec691a02f17fc2d5c90f7151cb3050dbbdda016bdc7626a71f0d1d5f88f60cec78f3820e8beb94f578eecc7b0dc2a12cd27869ed621dcaa9bee7438d88ec82bad2cdda794006d4c10afe76b577be7721aa0c", 0x75}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="34eac430e52ea78f9b83775420f653c38bca2fab48de97884b441de213e8c0a91ede42bccbfe2d7b24c298c834ea67a9cd1bb4607323775e204e2c72c45391212dc0e86c27912b490e86a76b626dfa915c6c202b328f8cd8894b48e5786d304496ecf705414199b12ce46b55915e2dad4f05d632598d50c2f736089305636af20b080bdec35fa5b11b39c9b5a91d8fa8be355226254d718201f2e612109623c0389294224b8c4fa8dc6ad9baed843d9af178d795285f01ce1f02811e01f4b2fef97758ecea4cae0309b0668462e69559e464a96a165d146e5d6ed5", 0xdb}, {&(0x7f0000001f40)="ec3156d8faa0224aa93ab040430bddbc337e59651833dc3e97a1076f1fa5334de813b33cf34e1646810ca69523569f87152b", 0x32}, {&(0x7f0000001f80)="7b9812d77e9ad3431f62e2e29b0b0ea68d6c93f5d318a70287e0d27c6e8a61a83246", 0x22}, {0x0}, {&(0x7f0000002040)="1ff83b54edd38dd3a2b76c", 0xb}], 0x9, &(0x7f00000031c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@rr={0x7, 0x7, 0xf3, [@broadcast]}, @ra={0x94, 0x4}, @generic={0x94, 0x7, "38424ea2b5"}, @ssrr={0x89, 0xf, 0x65, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_addr={0x44, 0x34, 0x68, 0x1, 0x3, [{@broadcast, 0xa}, {@rand_addr=0x64010102, 0x6}, {@loopback, 0x20}, {@empty, 0x1000}, {@broadcast, 0x3}, {@broadcast, 0x5ed}]}, @timestamp_prespec={0x44, 0x4, 0x62, 0x3, 0x3}, @timestamp_addr={0x44, 0x54, 0x4a, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x391e}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x5}, {@broadcast, 0x8001}, {@empty, 0x940}, {@empty, 0x4}, {@remote, 0x7}, {@multicast2, 0xed4}, {@local, 0x2}]}]}}}], 0x108}}], 0x3, 0x804) 2.903524303s ago: executing program 4 (id=6085): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {0x0, 0x5}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb087e4c0000440000000000069078ac1414b3ac1414aa8907faac1414bb0712861c08e72602a8b5987e1721eab7d97400000000e0022af30600997aa46d000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r5, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00\x00'], 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r10, r9, 0x0, 0xe25) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000600)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf0, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x14, 0x3, "b0da39eed5f6db18d2c201e6972732a7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa3a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff0232}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe28}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x171d}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008810) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, r7, 0x533, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0) 2.768488425s ago: executing program 2 (id=6086): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f8ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000080)=0x71) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x10}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090003560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400e080}, 0x4) 2.544551308s ago: executing program 2 (id=6089): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0xffffff7b, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00L', 0x14, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, {[], {{0x20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8011, 0x0, 0x2}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$OCFS2_IOC_RESVSP64(r4, 0x4030582a, &(0x7f0000000140)={0x2, 0x0, 0x8000000000000000, 0xfffffffffb2a3ab7, 0x8, 0x6}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500000000f3ff07100000002efb8625aedd0b1f23a8021e2f0bb22edc5168", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001201000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000140), &(0x7f0000000180)=r6}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="e7782abd7000030000008200000008000300", @ANYRES32=r12, @ANYBLOB="cc978abcf5ea8421214fe2df29ed02c1"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x10) 2.484299324s ago: executing program 0 (id=6090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)={0x28, r5, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\''}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1d4, r5, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_TESTDATA={0xef, 0x45, "834fd2cb2308dabd1b16f67efe652cb5ad09b93ddfc1c06d9716eea097a407426f85640657bfb8c6de92f19aed49a808cf8493a413f20ff946cadc24f343da1d6c4ce138b0df97e71f54002326ee3e0d8bfc3dbd2d26bb8cfa80504ba0d139c2819c3e60c68538419a3236272cf2217451dea2ecf392024f0345a94f6e22f8c0ecf7df4348de68e50e2fa47397c26cc11a202f58c38c4510be3f9f90caec723ef95c079ede703b8ce58d0d06797fef5ec4bc4a1bc8eba39b1ac45b75413ffe793ccfa65e8a67810606778589cb3f6053e5907771cc609a3fee3dd5b3c473286ef63ffdf29267125be9c892"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x9b, 0x45, "bd487f67c14cf11cec08fbdd9bb1ca4cd419a45416eb44b01772e9d1972920cda8bfce00f89b25672b2ce20062e9b46b31b7554ec445cb193cba55ba7cab4ffb43b7b84dc4bd686cccfb1c2b689c8152c648db8ef9cbf57703bd4efe0e1ce061d02f335c1e834543acb1326be8f99b7429c8429f2d119b0f200cfce9a5514deffd28de6250ee5fd142d56393fa3d6f6cd69e7a618e0c0f"}, @NL80211_ATTR_TESTDATA={0x1b, 0x45, "27b56a275ec6842d473998dd41d1d46b93762ad9fb3229"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x300, 0x2000, 0x100002, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x80001}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000d000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 961.35497ms ago: executing program 0 (id=6091): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24000000) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 930.10075ms ago: executing program 2 (id=6092): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x28, r2, 0x535, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x4004810) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async, rerun: 64) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e63, 0xe7, @mcast2, 0x7daa}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) r5 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x4a, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfe, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfffffffffffffeb1, &(0x7f0000000200)=""/198, 0x41100, 0x50, '\x00', 0x0, @sk_msg}, 0x94) 847.96588ms ago: executing program 1 (id=6093): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x11, 0x14, 0x121, 0x0, 0x0, {0x23}}, 0x18}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x3a}, {0x18, 0x110, 0xe, "025f0dc359"}], 0x28}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r1, &(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x400, &(0x7f0000000040)={@_ha_fsid={[0xdc4, 0x9]}, {0x9, 0x7fff, 0x1, 0x7ff}}, 0x1219, &(0x7f0000000180), &(0x7f00000001c0)=0x100}, {[0x80000000, 0x5, 0x80000001, 0x6]}, 0x6, 0x6f, &(0x7f0000000200)=""/111}) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000300)=""/190, &(0x7f00000003c0)=0xbe) 841.213783ms ago: executing program 0 (id=6094): syz_emit_ethernet(0x7e, &(0x7f0000001180)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@fragment={0x11, 0x0, 0xff, 0x0, 0x0, 0x4, 0x67}, @dstopts={0x32, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfe, [0x0, 0x0, 0x1, 0x7, 0x6, 0xfd, 0x0, 0xfe, 0x3, 0x10], 0xfe, [0x4, 0x2, 0xfffe, 0x4e3e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 805.113509ms ago: executing program 2 (id=6095): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x5d) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x2, 0x2}}, 0x14}}, 0x20000090) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000880)={0x0, 0x2c, &(0x7f0000000840)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x4}]}, &(0x7f00000008c0)=0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000140)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x17}, 0xffffffffffffffff, "c9a77dbc6e8f5f09a694e33e41ca6f6edc79f0418944a521b932feda1c523995", 0x4, 0x6, 0x6, 0x9}, 0x3c) (async) listen(r6, 0x2) (async) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRESDEC=r6, @ANYRES32=0x41424344, @ANYBLOB="7a000000907800280204080000000000"], 0x3e) 724.630896ms ago: executing program 4 (id=6096): r0 = socket$isdn_base(0x22, 0x3, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f00000009c0)={0x24, @none={0x0, 0x1}}, 0x14) (async, rerun: 64) bind$isdn_base(r0, &(0x7f0000000040), 0x6) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000040)=0x749, 0x33) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @private=0xa010100}}}], 0x20}, 0x4008804) (async) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="3282", 0x2}], 0x1}, 0x8400) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000020605000000000000000000000049001400078008000800000000000800064000000000050001001b00000005000500020000000500040000000000090002009c5b7a310000000015000300686173683a6970"], 0x64}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) sendmmsg$inet6(r3, &(0x7f0000000d40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}, {{0x0, 0x39, &(0x7f0000000200)=[{&(0x7f0000000380)="03a10691df6c68fe9e6c2bb219f9c301e7af3b3931e61cca3e2fc82a4b6eb0bdbca1535b5e5079c66f12187ab087687e12451eb5e491c4224faeae5a9f46999e325186c43bb59729a542e53051f89e1a0df2c926428c06bdf4481b421b2a5fe3b93dad4c6fc50205a26bb70f1fba630e7a8e5290fe70c1dcb206c345d5dd0c87f4a6cc50a8b250e3ff76538b9005760b71585ecd4f3a5c22ce2b6879fc81641092bdf23f51dec692b8", 0xa9}, {&(0x7f00000000c0)}, {0x0, 0xfffffffffffffe15}], 0x3}}], 0x2, 0x1405c891) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0xd9, 0xfb}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000100)=""/165, &(0x7f00000001c0)=0xa5) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000007911d80000000095007400"/32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) socketpair(0x28, 0x6, 0x10000, &(0x7f0000000000)) 724.262206ms ago: executing program 1 (id=6097): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2c, 0x6, 0x280) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001400)={&(0x7f00000001c0)={0x1218, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1068, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5e, 0x0, "bb6b30cd392af3b7f5018402708ecaffaa1faf46137b34fba115e8b06cbcf2820165cec6f28961c5a6657a80d4bcdcfa36759eab34a3d9525be9eb2f8d58953842b02ed7deae371d28917f83a0ac2ea5ed0e5f9c9c83daa0a198"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}]}, @NL80211_ATTR_IE={0x62, 0x2a, [@cf={0x4, 0x6, {0x6, 0xdd, 0x3, 0x7ff}}, @prep={0x83, 0x1f, {{}, 0x2, 0x3, @device_b, 0x2, @void, 0x81, 0x9, @broadcast, 0x40}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @random={0x3, 0x30, "fc40a296e1e4ab574809584582a8bd286a35d812cbe6840ae4efa2591de6ee12f9349b5deb0ff8de2616414c8bfb5a49"}]}, @NL80211_ATTR_IE={0x109, 0x2a, [@perr={0x84, 0xfb, {0x2, 0xf, [{{0x0, 0x1}, @device_a, 0x80000001, @value, 0x34}, {{}, @device_a, 0x557, @void, 0x4}, {{}, @device_a, 0x3, @void, 0x2b}, {{}, @device_b, 0x4, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b}, {{}, @device_b, 0x4}, {{0x0, 0x1}, @broadcast, 0x1ff, @value=@device_b, 0x1d}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x2c}, {{0x0, 0x1}, @device_b, 0xfffffdfd, @value, 0x19}, {{}, @device_a, 0xfffffff7, @void, 0xb}, {{0x0, 0x1}, @device_b, 0x40, @value=@device_b, 0x3}, {{0x0, 0x1}, @broadcast, 0x3ff, @value, 0x40}, {{}, @broadcast, 0x4, @void, 0x1b}, {{0x0, 0x1}, @device_a, 0x75, @value=@device_b, 0x3c}, {{0x0, 0x1}, @broadcast, 0x7e, @value=@device_b, 0x13}]}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x553}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="8485f7636d44"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x1218}, 0x1, 0x0, 0x0, 0x4000}, 0x40082) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000dbb3000108000000000000000000000003", @ANYRES32=0x0, @ANYBLOB="50010000000000000a000200ffffffffffff000008001b0000000000"], 0x34}}, 0x0) 646.198533ms ago: executing program 2 (id=6098): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x8}}) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0xfffffffffffffdb8, &(0x7f00000008c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_TABLE={0x0, 0xf, 0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000d042abd7000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c04001c0012800c0001006d0800030003000000140035006d6163766c616e300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) 598.302803ms ago: executing program 1 (id=6099): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r4, @ANYBLOB="029000000080040f08000a006d13180ce29601a240fbd19b491bb3e1b96e1f61ce3aaf42665b790dfd098e4eab7715532517f27c0260c510fb1bbbee7cbd6b319dda182cc7994128996a0eb7ca8f94e49330666d89af4ab9d2fe68f2755ffac08140cf2d53c2c6465df1025073bd817b3b9da36167b2b708c1ac363715e54438921b22e49e9b4e1c51eb9499417a55449ef6f56bc7ea32f0ccef5df81b797e3480164ea831be28ab6e3bd2b30d6952d0b7b527cb5d0be27b9c8d", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000680)={@dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @loopback}, 0xc) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000680)={@dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r8, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x51) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x2, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0xfffffffd}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) accept$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) (async) accept$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) 476.327732ms ago: executing program 0 (id=6100): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x404400, 0x0) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000040)) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000080)={0x401, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x510, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000014) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000240)="95996620421eabad02889807b5c9ef2cf3f79c8e438e033d60ffd9c5aa2fd67ec0c972ec522a0790fd56f8feb01cd2f4444682621f8bad13435c2972f64cffe2a4c9933f70e07942f2094bbb9c5280b503a28d10bf5e1a3fba63a2a5a0ce5ffeeb857192f1b1135ab183fe8f5c037373ed10062b75df14cce47ac7046d3a3b04abb17a0e3a57ffc9b0", &(0x7f0000000300)=""/18, &(0x7f0000000340)="420975ba645a206a71702d2f20391791c62a97da7d0f00c26b82e3be4f60a607dc9dfc398e4b94bf6ccf1d989b2d2fbf7ef2208803282cd31b56b28e53b71fc5651b08271e3df791c29e756e868b602f0cc7746a02c4be56f448759446972c0e70e251e778992301ad2f1eb66ec6e68e616b05905c79ede828324337468dbda65f9c7a2834b112655a3bdf672dd1172a89e192aadd11362193b8552fa3b1394fb0a552cb7df5c710bc909fa52d308eff199de48114d9acb0951f6ab01fc5017c28124a65b0d9b2", &(0x7f0000000440)="d49e01f5e19775cafaf1fb632f4dabdcd150af0969f1e1d64a9fdbbefd39c6ce6e0f64a444d74c59de4481e2ee80cbcc9e3d99b35e7435a7bbc3fd4dfaaed5c333a7ae628fdf484aa6ec7e70563ff2102d08fc40aff394690005ae75de587a076df275196e46cf2997ed30f897db3d1ddaf7aa2a", 0x7, r3}, 0x38) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r4, 0x24, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x20008001) (async) r5 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r5, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000007c0)=""/182, 0xb6}], 0x2, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000002d40)=[{&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000ac0)=""/96, 0x60}, {&(0x7f0000000b40)=""/10, 0xa}, {&(0x7f0000000b80)=""/253, 0xfd}, {&(0x7f0000000c80)=""/141, 0x8d}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x7, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002ec0)=""/153, 0x99}, {&(0x7f0000002f80)=""/30, 0x1e}, {&(0x7f0000002fc0)=""/128, 0x80}, {&(0x7f0000003040)=""/150, 0x96}, {&(0x7f0000003100)=""/173, 0xad}, {&(0x7f00000031c0)=""/2, 0x2}], 0x6, &(0x7f0000003280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}], 0x3, 0x100, &(0x7f00000033c0)={0x0, 0x989680}) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003540)={r3, &(0x7f0000003400)="266ccab53a459c4bc4fc59d00504e3fc30e46e664ad2c31a14c17c0932823326541f872fe48097f51bc29262f0a7e27ac123aba30d10a57a4341617734f1a993fe4fca47386ceb152caf5f3a30367fbf38f04236ef278be9ac1cba34e09b60a73aad6bf46eef1d17449b6aacfb2504da5848342e908d0476c62cba15821ed6c3f49c4d8090d70015f11b10bc25212ed815d63561db536364eb", &(0x7f00000034c0)=""/91}, 0x20) (async) r44 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xebb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r45 = gettid() (async) ioctl$sock_SIOCGPGRP(r33, 0x8904, &(0x7f0000004b00)=0x0) (async) r47 = socket$unix(0x1, 0x2, 0x0) (async) r48 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005240), 0x4) r49 = openat$cgroup_freezer_state(r21, &(0x7f0000005280), 0x2, 0x0) r50 = accept4$rose(r41, 0x0, &(0x7f0000005740), 0x1800) (async) r51 = accept4$netrom(0xffffffffffffffff, &(0x7f0000005780)={{0x3, @null}, [@remote, @bcast, @null, @default, @remote, @bcast, @bcast, @default]}, &(0x7f0000005800)=0x48, 0x800) (async) r52 = socket$caif_stream(0x25, 0x1, 0x0) (async) r53 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGPGRP(r32, 0x8904, &(0x7f0000005980)=0x0) r55 = getgid() getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f00000059c0)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000005ac0)=0xe8) (async) r57 = getgid() (async) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000005b00)={0x0}, &(0x7f0000005b40)=0xc) r59 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r38, &(0x7f00000077c0)=[{{&(0x7f0000003580)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003740)=[{&(0x7f0000003600)="6aa19351da3b1325b1a5518fd9", 0xd}, {&(0x7f0000003640)="7e92c35a9b2a848c05aec5474fd252f1d1e2874cde706d9ab579594b0965d5f3f4648cef97c89b4cea4a415fd41ea03daf8f561b0219c4ce1b4e59cabdb82c874350ebe7ccc7972d8d3f41c81db573f6deffc82c9ec7766c07c0a4b4c7fa86d60bc6b7f8de46d7eafbb36e42cb6ccd6aa8ec363989bed71cd40470e3e9347ce82ef50b1dc2fb2dbf4229990d6b9e12ac0edad5f9f1e21d106e248c9ef29768f4ce3a842317f9081bec5097c919e2a09058ede562822358acb43cb37ca05faf5fa7ac734f6515a73586432313f8ac13915da566c0739ccccd0cba5a45dcbcbd50d1daca3323c57568105e8249d8e02762a140bcf96e", 0xf5}], 0x2, &(0x7f0000003800)=[@rights={{0x14, 0x1, 0x1, [r44]}}, @rights={{0x1c, 0x1, 0x1, [r0, r33, r11]}}, @cred={{0x1c, 0x1, 0x2, {r13, r18, r37}}}, @rights={{0x28, 0x1, 0x1, [r43, 0xffffffffffffffff, r20, r11, r1, r20]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r16}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r25}}}, @cred={{0x1c, 0x1, 0x2, {r45, r14, r16}}}], 0xe0, 0x80084}}, {{&(0x7f0000003900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004ac0)=[{&(0x7f0000003980)="82097199795a7581da3b4460c52158d5ff5055a63ff2b25caaf1265b6b1edb0ea61b3e23bc3a6010057985ad7c85c0f86b59803ae42483e2e08e3f207af6746308fa2c83ba35eee76b1c9eb08351983521d5a7bd6d09223858aad67598745f60e6b3f7c75fe05e32a7e50f40f7", 0x6d}, {&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="9c4bedceb397c69f4a8672408e76c28c13c19693df8108313981f8d1860c0399d748783049f5a32ac08e733aed0464cf0a877b35aeae1b50804956c47ee904ab3013b3c52e002998d39898a5ee544afa9dc607b26f763a97b3f4d15c0c205984efe9f7cec3f63f5815f20d9a62cd8e0ca08d535f3340ea8c234f6a16109829052389b346c8058cc63da87cc42d3eff43c3919c6a2ca422a343c6a3845d5de3", 0x9f}], 0x3, &(0x7f0000004b40)=[@cred={{0x1c, 0x1, 0x2, {r46, r24, r9}}}, @rights={{0x20, 0x1, 0x1, [r43, r31, r41, r22]}}], 0x40, 0x80}}, {{&(0x7f0000004b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004c40)=[{&(0x7f0000004c00)="cbfd6952426736", 0x7}], 0x1, 0x0, 0x0, 0xc0}}, {{&(0x7f0000004c80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000004d00)="9dd18e52ba68f642ce95b8ce120d085c25314a768616e0cbc8bdc7ebcfb5a3a2bb2b3e4503fc2880eed66dd2dfc3949297447c1d4005aba435a27c740b0c5dbb73e0b138ad6560d608651eb5f77d5ccde3e59aeb1428f68f85b14d023f5fa560d88d48e6a19009b06d8a24f81a77c7d2c67723ac813cb186946cc1abed8637043814fefccc03422b4b0f27e23540e058bd4aa3ee859dcdc291b5c43a8e968eb3a9d785b6f6bae9d83856b3745bf439", 0xaf}, {&(0x7f0000004dc0)="e4094300186b1c14caa9067b092c386ab1e225a7e2d042f015fcc8df493320f84aacda101b6e4c", 0x27}], 0x2, 0x0, 0x0, 0x80}}, {{&(0x7f0000004e40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000051c0)=[{&(0x7f0000004ec0)="4d45e91bc22afb7bc281f96abae9f74e6593ada83270c796ba5bbaf9531891c44999d0fb49eee72ae564f457312afc2f4eb333407689218ecc3fa3d915a8e24e2ed6fe971f8a225ba1935b5b31e2cbee5dce7b6e3048631207eb8d66edac61a90a33726370e0ae96e6", 0x69}, {&(0x7f0000004f40)="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", 0xff}, {&(0x7f0000005040)="fe1b12007540f929aec1a4ee9d9730421afb2406ccf517267c087ddc90c8ebef9eda9bd29f68e5c96f7d9c53db0f35e8b650c1fe13c69efda63dd5bb186f514d24b635b8af2c01cdf0f09b0dc61a054bbe50d87f77f00d1d3482773f22af0588b3c880d6b6bf9d0254fbde82f7c03e4d47509c7ff8d284708a93ed", 0x7b}, {&(0x7f00000050c0)="40ce78fd58a9ae4fd53125226e464cca03242f67f95e33fd6915e6063b4db9b0abe002660c3f14eee37d38ca2500764c0ccc247628b930f0dda0f2f1f4cc0b02ab6ddbff2e58647620249c1f773bfb50dac63a1656e58a52", 0x58}, {&(0x7f0000005140)="8406511729937ceb406b3d4459530690f0e22fe3cd2effb13ddaff682e8f0207fae65fea99a3940c473b0925554773ca3f6ad769ed44c94048b5e2fcbe2fe15394259846cfc22d7269ae5847437e39b4494821b6a5", 0x55}], 0x5, &(0x7f00000052c0)=[@rights={{0x1c, 0x1, 0x1, [r39, r12, r21]}}, @rights={{0x30, 0x1, 0x1, [r33, r43, r47, r40, r21, 0xffffffffffffffff, r43, r43]}}, @rights={{0x2c, 0x1, 0x1, [r33, r31, r43, r39, r2, r48, r49]}}, @rights={{0x14, 0x1, 0x1, [r32]}}, @cred={{0x1c, 0x1, 0x2, {r13, r18, r19}}}], 0xb8, 0x4000801}}, {{&(0x7f0000005380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005500)=[{&(0x7f0000005400)="b0a0a6927c1c82da703934f59e0bbc0799bae57c800f0a64bb19fd068aba66bfa19469ff567de41f981e799106c09924b8232eed6163541a1dfe714b2b6b8a91efb14bcbd3a933904213187793112e1ec38e59811bce092f60e81548bb7107c5cfa63e00d9757eea1ffaf1fdfd4f634a014decc3a6b8c2308763cadcccb877652067a84b109ecc98d3f31a77abf50ea309590f206900d48885a9472b7bbfece4e2c06c495b90ac38c855c7206430a6c0ebc1cb81309b50a5231df0f69dbfc375e5e005ee2f2cc972df3a574f5b16f6515b6d39aaf6da1bec31", 0xd9}], 0x1}}, {{&(0x7f0000005540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005700)=[{&(0x7f00000055c0)="e4866c6245bdd153786ada80910faf8c568c5b587a1f20970dd7500c329ea6df696b7097e5b24b146e7c4ada3ee65a5992be83f803e994abb79766efee0e21885c0ec1b7d7cb28e5eb97e82264f2717f21f7a2c80886512d9f9e3d54834c8e73522552e97c8854e0d81be53cb5985b8c42d37c0687b1d322c26384ec2c1e18f69c5097a00b9f686b724223d73262792ab246978400a7beba0173695c9a4756d101ddc86e142e59aa2224be090518021d88591e71c50f76c21798ea7ba4a5b6f78f52f1faf1a07fe6a440e3b2129fd60e06d2a12bc0bfc9a9a88d834b8a36792bd1b0041ae8493a53f9c8ecf7ee593f0e", 0xf0}, {&(0x7f00000056c0)}], 0x2, &(0x7f0000005840)=[@rights={{0x30, 0x1, 0x1, [r5, r32, r50, r0, r11, r0, r33, r10]}}, @cred={{0x1c, 0x1, 0x2, {r8, r6, r37}}}, @cred={{0x1c, 0x1, 0x2, {r17, r6, r37}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r34, r51, r52, r33, r40]}}], 0x98, 0x4000}}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000005900)="02ac039dd35e691ca279ac826f616bbd0aae541246e44815248191944af2c561c0eb09d1ea0396e7113a", 0x2a}], 0x1, &(0x7f0000005bc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r37}}}, @cred={{0x1c, 0x1, 0x2, {r26, r36, r16}}}, @rights={{0x18, 0x1, 0x1, [r53, r10]}}, @cred={{0x1c, 0x1, 0x2, {r54, r15, r55}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r23, r56, r57}}}, @cred={{0x1c, 0x1, 0x2, {r58, r27, r7}}}, @rights={{0x18, 0x1, 0x1, [r5, r43]}}, @rights={{0x14, 0x1, 0x1, [r33]}}, @rights={{0x34, 0x1, 0x1, [r34, r40, r20, r2, r59, r1, 0xffffffffffffffff, 0xffffffffffffffff, r32]}}], 0x140, 0x20008002}}, {{&(0x7f0000005d00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000007400)=[{&(0x7f0000005d80)="0db03d36e6d59190431f99b4e8679296da3dd85578a3fd1cc652c0006cc77f29711072b03a8df0909bfa2f7c485cdce4faee8b9d02e446a7e6fe0f3c4cc52de1dc38efb78a23e45f7aa4e46708c145805aca6bf34a41963145890fb66adb673abe9ae18f7203f14645acb1265e48c9d397f16f03a792ff0f5c453d2d3d8e0854267243d145c17c6cc0267420bc56121f8f1e618cd3396c9800c9846afd3bef0859a5199c8446954cdf5886da70502363e486629f9365d6894e088e0b24b1eb85", 0xc0}, {&(0x7f0000005e40)="10bb0407cab24270857db8fdaec96adbe1f23678bc71005e6fb3ae82c7787e194d432569937d7afed4b5cd6dca4216d393bc5bd23a3ee16ac760d5716ac91b487ff458faec66c2d0d33eeacd4a7c963319d116feae", 0x55}, {&(0x7f0000005ec0)="bc66243d3f742e1e9c7bb3e3f1dc309235eb661d42a46743a7709be91599d123bdefe64e1244c42e6a5eecd710130e0102da7cc61b2e5dd15d97bd79ca82b619cc15e1abd23a4bf38fc828cc45cefe1f9e630ff3053b255af260e797f0b1c235572431d38d76c465ceb98c47d447e792856171cad998472a5fc824c0d184a5110cdc73a43ad111ced446ba3dcaf48a1f56e4c4e956336f1da7b0f61d8fa91316e28681230de3ca2df2147fa64ac92050c79d8e4a63303aee01cdba97da0c063786927222795f532edb1915978258859bdc691014a8f5c8980f3c606fa1fb015dc89c0d1f72ef5639", 0xe8}, {&(0x7f0000005fc0)="aead75f4501b96c7ad5f90235f6a87a079abcccc773e6c33c5c5bcc670a7f05ee7a7b1851495922a00e8fa5956a08c61aded8f452955f46196ed30ef0e79f818457f8d9bd0394350df7f572dd2752a2e057c5dc8fcb48eab3dd3cc6b94b833284ebce91b6b0134a777850f12a16b32c54593988ffe8c65e2386516add5957f517732eae03e7eb30115cd7c026267b3ff342ed35623de4a8f53a71188feb582ac843b75680c19ce22f3fe053d051815ddec8253034189314bfea8f114fe90aaa23c623b5b39742a4f55baff53cdd484138e0390074d8e55a6e371d5730c33c2492657018026", 0xe5}, {&(0x7f00000060c0)="91b298c1df011586ae974bddf0991859186d4e0f651c56d1ad4ef981dccd19c07104f852f5cce6206ffdb5040074cc814c16e3e6341a6e8f6b2bee3d52f4f76ae18f3097a863dd681b59a70ff4c74414f1786714a799c5f5f52a688e19de22622bd8030483cad4ca528360f763300fb4baa89b9fadc7ce251a6c3e2d9b3b9f5bf5b969ff8465ce31d78748d2d8d12671e6ecb42daf1c1e16b722c42ac4eaf28324ddcd5955", 0xa5}, {&(0x7f0000006180)="6611030e9e2e6502135a92aa6cc1548a10473cd458fd5b11ab8104e3e59672fb7706f18f3522fb79f42d4af8cccd41e222ba8073a2a59825513ace4b065f774192ee2471b25ea6fdddcc7f64218661cce8d5ea228caf00207f7bb800d2d457821aabfd128d036781", 0x68}, {&(0x7f0000006200)="669526bb5250a2226b33d45d01b04bdc6bb61513736156620f63624f3dce55cf26450a4b8d6b381d05cc9e0316e57c51d2e701d5056a783226c4e46619e441e25e73c17975ea73de43ec5dd758bce6410024e3fa3497f02bc557b6ec42d51b2e3d85ceb08377c878b113f9f7bc144bccfa09356847d0e738b66c086e6520b280daa775c4b5d8880c5c676afb265ae1460acd3c7ecc044767ed7fb94c887155cddbd24d5e76e8f4add348e27e44816a88652097ef59076d0f3989e7a999e477ec989b18", 0xc3}, {&(0x7f0000006300)="61225c916ac972ff0340eb64ff938775ba4a7fff0888d18a67e7a4e086b0ef747dce63ef665fbbcb59cee2cbd58695fabb2b0e00d73f53c79104b7b65481dcbe9014092c5c265b7fe5a0c97fab03a8d4a3a664f565205caaa15fdbfb61b850d69db19c848db2a5f8cda89dfbca1dda91fb406b932244e687bbf05d05aa4bfc5d6cf8581aa08af7cb7c02c25f8848270d3651cedc04b7f0c60af6a61c7ab5a7839071089371765e47ce6e240a6cef1f802dcd7926df7b44d3", 0xb8}, {&(0x7f00000063c0)}, {&(0x7f0000006400)="d473bf258aab637250f45149283e85dddf0f80980023ab7fec9fc1f5eda3933173f66cd580cba21c7861755950a6a718b0f949eb1003579639ec1d09352ceebc0ac5459bab7528429f524e7671fe6a4a96470133fb2eb7dbb05fb330ef0883154aa939e50f69f28badae57c03ce911ef1701778c6d92546872165d043ba31f5f96dd3790840c5ce8ebd4cb75e94e2850f8e3af20492c27d51a88cade6c96c18d25625517490a8e8a719679ed663a73a34b3efb0e63fa2a8b8f727832ca245d9606af7c1ecc1b9342c46240bbc3325d2d66a75a7e865c82216a5b8fe398e81bda98ca30a284a33a06673ca275acbc2fee16fde5a0d46be2af44b316f4b32e56fa5a589e32991829f560c124c91a02eb7d2f4ca5e5e96f127c5792d7afbceab7fac853edc4855efb043bd3e0c119d09ec8c86322312d37b8e5f1938fb2df1e572a907972fafe0afb14aa84b918126a94368df1fefc07b4e38d6351d3291ee6c320221f535d9b6629de3691a5bdfe2b864f1991112665c9b67afc027c33928a4787d70bae4bd54f1199eadd9ec225d293796604ed71196cb5f5cd62c16410010de90959060cb1b4f69ad41ec8b5426c294803e0add41651925f15d87e1dceedea6317c90d5efec959e656e9405bfd9faaf391c2db8a1fa45ae6095566f87118b339ebf7bb64aae282dda150fb586244ecc3af3c719497eac396b1099b7e710e757fc4b3af8124621d88a7125cb4ef7d4c318b569809c6bb5c107d1bb182cfc44de8da9b45feff89f90948d394990f4432df07ffa4bca18a15ebca46c987de9485464b59d52ac49ead162cbf01b4bd4b0d77abbd46ec21de853fe7a2b6ba2e8a2f68a94c1688a76a263481b49bfc67a3c4a32fa3b8548147e5167df7879361925dfa45856792f207e52edb715cccda3aa2f88121f7bf4f2ce64a8507e7d3ef148e9d3fac9f98e642ae54481bd932637b4ba4310a8d013a6990a6fa884fb8bdc58174f23dc5bc3e09dd3f0e6d99ba07dfdc01648f567af15331ccfcb4ed7bff1dff41d0c95260967b8c45bbd5ca4f469a69ac1c9b170590d2b89d666b2e68ef23d212260453bb9e2575352c2af602b8e4b1c0bebfc2127c4fedacfa204427d84c1452e00874652559fd2172bed675b42df1b38f351acb5b82ab6465d8b62d822b1fcbaa37a12960db907d286dbc76440d839c4330f9aa95a74df2ca43b3b5e3144568cf49efe0044ad4e5000c6cd0bc19075fb54f3100f8b9e77ec6586457e61f9d8df61d683db27d4b21ea5eb9a163ff5a265e68b795c9abecd7c26b243beb31653272f41cf6c94a4091cf3f1ffa3e844a1b8f3da8a74dc9d011a61b45f719269b6ec3856728676447c6389f454ee344159b0603642a85f483da418aa12c454f66b40d13da2bc902ec1baa9a77124d92976545bd3a6ccc4c7159a87c39db515484720622a7c9b9866c8dbb2f2171d4196bd5f2d4d96a0d31858a0dab48c4efa348c989cb1ec0dcd53644963a7b42c7823fa515bc92930980400676d9b6488e6867ddaa4b99c5aedd5f4cb4603119716eefce071ccc381323714286c3eb2d84b98d474ff2b21d0cb32ff50527f7a3322f45d1bf6853b59b615a5100b28e3c950901e2fafa4e3189f1c330515bf2739c19fea58c9bda09c8c8691567b4e69736e845a57f33927c3376c11996c320e287f9a810efb8e03dd44f8a283386f94d846eedf468a6c6501274fe52c64118ad9addc9ca127cd9e96f4d7bc5bec033a6e0413f5b216e9556326b225f4c9e577b66e848e7d504d22a57af4c7223916e6626dc2fd612e55620af7ba1ba7581af9c569df8b57c9424e2324a2d66150ae7df36558e5e12b8911873ea7094f7a7654fa4cca5ac58df450f130da233f983b67a60c6c3106f671d290f96c6fbdc4129fde3f7148478c2512a97667bc6b8e2c8203c438015d35ad76b5e88589e6d7dc6a31236794b0711052e6dfa5f2916494ecff0478226d933ce780f9982cd0fd728436986bd911715c6a9b3355528080888749fbce4a8dc2ec53ae458469183242a2aa5b98489d678de282381698c5d4a7903f6cd62785adf98e587a8358b35a056b5678ccda2449aa6be09f9f2c4ab2a98fecc376ac0e87aba8c66bb6f6524776196a63a679dc3d8035e011f42e4ca71da43accb1abadbf1fa9c7498411cb1428badea71f8bf13bb8ca3ea7f8d47d5bb78c8c2f20cbb3be4bc8c467a1066065a58cb234cf1946176e3170cf7c5b21f99d3ab9e0a81b2bf330b0f1200294cce7096040df72c08cda9d4ea7681f06e78151c7a5167691ba71f8b0bb104f436f5da539c3aa81973eaacc4e49ce4136649b542b6465aff031726d2e104a43ff664918c155230ed97e36cc7d8f84fa0f9a6c620b6abd16368ddb1da758713820a883921fae38e8aecc4a967d95d569bcc556e52afe33301d47c8996eadb53776eb355eeac333c9e21e1ae953446e2fa363ec3dcecbf696fc89d92cb30b0cd29431f9d9e3518cbddf75bc2848255cfd0d7190a0f977fece0e7d1565437d5c339d9a8eb53623d55dc0a73bc2fceebffc174a2aa90101bd8666065da0b9f17e8d15388ed6813a68cbd1e3714ce2cdac140ce263901390c63a71203f6cd16822f56115177143993e6f257b6925d63bf5f724cde3cd7bde03cce3eee24c98465173b66f027b27318491de6afcb02be55de6a0941ddb98af2c8062b2c7bc538cf0c780b0daf05e683eb0758e35c36e6efa7d738791b0cecdb15405cff0096d76ebf4b7c3acfc303aec055dc2b2edc72dc02da3aec515a5d3d63a35e469c14c562b6f5084a1b1265e65d7f08e681b804e53b7d8db80125def3b5627855af27a4cdc9af0a0d660646737cfa86dd643c7f6506f5324ba8123df1fd73b92521fd68da9b6054fb4434b5510475b660af7f78b83e50972322ee4a2fa0cd36e90ba1b677208af615f960f79de87aaafa0b98149809ac7d7e21ec354b114ca599f1a134e74927644688d0a77374006aeb0654cf35c51421822bbac005aea1ce49b02ed2fc007b248f69e9c22fd9fbe1f97bc8b303f25f112168ef7465240558cb6c584839654471649aa8ddd6e35d67a21092d12f94bf97a4e05aa4f0049ec78bef6c48e618f4a5a8101f19e4071e0e05d4eb0c585e2dc491574a156b18dbfcfcb63a8d76d039d01440ed950656d78d0b0b80b0a9751c3ebe8cd259c0e561962eb863bda82431e11f4416770ee04d46e51d8720f46dc356d02e1db217d6e5d838b7d9c393e7107e6c6ca2f6cb7ce938628dfa5bbf7668b6c24df417e952d8f140f79a5acb2fad03ec11ce2186cec1afe47f40e8997157c8baf1e51f600cb0183cc63c49e2c24dcc1b1c5705002808a7681d74f604b820416e561f4f93535bd2c0403d2a936f9ebd0cd68df816e1b8148b787f1ad1bd751dcf1f7a059a953a61bb041ae09bd546e7ff8a7c960022423d6c9998320a79346bab65d3b5407df6615e7026140185a6100fb81aee8ae35c545ae9522ba75965d2e280ce0056b2460d32ce58512493c51dec43ca625f88fe8bc8fe758f6ce1d97badcecbdf5d0d820308d04350bd22802aeec3725545c73e44f3649e52647f5cabfd2b31f28d4f3c4d477bf4f6df40e9fe259432cb726db310071529b5c66e22fdcfc6cadf596fda2fd477525c11b47eb2d1d5b2da75695abf73f8fb7f9648bc650512f0c1d7e947175e0b230db1487b642ec138589c5b938e7c7946a14fd7f498742d5a490273e12ec965864e91650c1b86a30c7153090abb813fb8f668e306c1dffa21bd98e318a2202c2ff63b5cb48a162f1617ed153f346d5419b2e94853c409ecbfc7a74dc7dc2f0ecd7f7b31de7bf37b0d472941e8e168b33f5cd916a6293bca791f9c2bb2a50588bb4e2c227df43ccc42fdd952944088fb825c4383a4e686dbb8308664e0caf72146aff5b1523d1656aba1c3bb7525139ba272e47cba250a4967635ae38fca3460ad856b582505bc1c4515faac5d422132884d550c047b5570aa9de34e6aafc741a3a085003e363dbc5cd13631fde53b5527fcd12ef33d3ea42e72c0d6008977d7b5a4a3c82adbaa1c8affa2252f2c34e62b187b759f4c934c734f2f8133cb45563cd9885f566105162325c5ecac44bbc3c045c5f91bce697abbf6c32cfb4bb21c9a842616e7f3d3ae1ca88b5a92fc216015c86792246e7cfb4f77239e2d7cfba99dfb7537146ee061f1bfefaff530f9a304d2379b724dd213caa19b8413a821a6ddd3cb77d4b300c9c28f0155403d1d84a38d0ba13f4d13b6d1dd9313b35044a2db1e328a6ba3710271b952c9a24d638f5351292a1cfda3ea0ceb1fb91dd3953aafa3f88b8cc9de2537f247b637e9b3868c54ded02b07858b1d9cc840b990107a83ace01a2af0bf20d20926e1da32ad3cd110815f7bec05089cbadeb83406b57fa5e41e5258e101b1f9733afe1bf4ee16291a2300742707db0e174edf7277a729dc0b586473c4e0c617e6bde2923be16f0b0348aa5c2527d0f67d94a01c81bb0e1fd1fa44abeda31c55305f1eeb6f43ad9b31cde37cec05c46ff492d271f108456ec711e3f75330b454ebd2b72ca9f5414aecd36acf899b3aaaf433d0debe9580f2963743b7f8f0de841eaaa64095e8da9c46b6d239b3ad21865a7319f760694d7bdee9c02c567c2acebef2d24821a55e55c466854e758f30c919061aa5d15b310ece8207a61078b031352d079b8587d59689ba9fb4c8935744d41ef95c3d726fd4b8775cc567d3c789f7ee5c80428b93d7c7308501b0cc7851596e07abd153f4ecc7c1d39d9143b0aa607554dd48a158f28a61d878632b69155456cac84f549b9b9472480531444df108c4ab2194a9307631175de0c9358a64fa352791597d840f910386e19ae283a12caf928657d7e30af100ed81ea91d28f16065fa76346f9513ffaf8be26088fc3121ac2fea5d8345de93cb02f8a9fa304836d06837200321bd34c29cbd59fbf6070e0e0159a8155c5b78f52122173abd4474ba6f1f2b1825fc25c9ec60d61cac912b4061519c07e15e3700d2ea952cca1f25d1f4e43ca425acafc7bf32fd681f0b8c8fb4a9e756003466af55478234351ccba40b0bd2b64a862018e52b49256e745295e367ac216fce05ab7a9d81ea4a41c0aa2adc5e466b109519c2972b33e32a32210540f60a74515f1ded1407b4f9cca1a9228738251fcea16eea25688625b5c0b8eb47cd5e0f07a659d508abc61e9b9497e3b320f2cdc574c424e9fe907948adc0f5a3e964e9490f17f72e6a37f3d80e5e4983cd67dc8294458ce829c8b45ca15225396796f1375406e20c60216a711f18d39a6cfb43fb64eaf751050b68ac165ff4264e20b35637ea94ff3a5963df510fc61d1a8a127bffb3b3fb63dc9db3465371534a04db42ca5d98acbd1d1bf5be426f71e5f2e4527c668615e5da6b874a989c94485152f2e34cb048f6a80752389a7bae01e67f63a8922ee4456a762fc73fad69898c7aa5f343b4200d618b15a5e21bfa0c73df4e6a0870d2603ed6397ee53c35224392b178e9f11b9a27d5738bec7e2b0406f75c81c97ee4af0ad85c9d1b518af4819dab689cab635adcd367a5667cb27ecaa9968d72a0523524558d815c9c0c7c5e6f40ddd4df31b183a61029188e1ad33821556648e11b6974edfb3d4c22c3a94c8082902bcbbf9ecb1df9b94de72a832150486be459f6414f31f6cbc1322e2d645e657132e78aa9bb4b1c0e8f759bfe8f19d39e96043317646c2ec87975438b5b39227ac7d26d188cce0e2930d9a5b", 0x1000}], 0xa, &(0x7f0000007500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r42, r33, r22, r20, r12]}}, @rights={{0x18, 0x1, 0x1, [r21, r34]}}, @rights={{0x24, 0x1, 0x1, [r33, r3, r31, r20, r40]}}, @rights={{0x30, 0x1, 0x1, [r1, r41, r3, 0xffffffffffffffff, r11, r38, r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, r30}}}, @rights={{0x30, 0x1, 0x1, [r41, r5, r5, r2, r32, r38, r43, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r29, r6, r19}}}, @cred={{0x1c, 0x1, 0x2, {r35, r27, r28}}}], 0x128, 0x4058010}}, {{&(0x7f0000007640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007780)=[{&(0x7f00000076c0)="6504e7cd552e8e05ab19894a80821ca3c4ad39f397103969b0b6bfc8efe985bf077f3f02adb667baf03eed3ae11a0b0abd4fb01787db55613def7181982da9cb32cf2c7b2da806102b8e50b73e14b3df598e7ee5bbc06124b1839d4bf496d8b1ca41b49f2380bf3a8bfdeaaf5eab7ec866463de8cedac01193c26452f56f47f2228b6894293223a11fd5c232abbf0b1704c07a7f8d7de69c1331d015b1f0697123d3e71dca13de3590689b6afc5a", 0xae}], 0x1, 0x0, 0x0, 0x14000000}}], 0xa, 0x4841) 336.779524ms ago: executing program 4 (id=6101): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x70, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1000, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="34e5c127d8ea"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c08364c04866"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e137fa566ec3"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9557f0bd25c7"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8d16c0d9688e"}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40000) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 322.423739ms ago: executing program 0 (id=6102): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x3, 0x0, &(0x7f00000003c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0xe8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x98}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_EXPRESSIONS={0xa4, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x4c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @inner={{0xa}, @void}}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x1a0}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x34}}, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000700029d406dc200020073797a30000000000900010073797a30000000001400038008000140000000000800024000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff8a}, 0x90) 233.150207ms ago: executing program 1 (id=6103): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 200.828548ms ago: executing program 2 (id=6104): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x8, 0x3, 0x2, @mcast2, @empty, 0x7, 0x7800, 0xffffffff, 0x8}}) r6 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) (async) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x8, 0x3, 0x2, @mcast2, @empty, 0x7, 0x7800, 0xffffffff, 0x8}}) (async) openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) 125.945557ms ago: executing program 1 (id=6105): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0xfffffffa, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0xffe}], 0x1, 0x40010142, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1], 0xf8}}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) splice(r2, &(0x7f0000001280)=0x8c, r3, 0x0, 0x100000001, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 788.552µs ago: executing program 4 (id=6106): r0 = socket$phonet(0x23, 0x2, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x22020600) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x40010000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) (async) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0xfff7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x40010, r0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f0000000340)) 420.472µs ago: executing program 1 (id=6107): syz_init_net_socket$x25(0x9, 0x2, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x57b) setsockopt$inet6_mtu(r1, 0x29, 0x4e, &(0x7f0000000000)=0x2, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@empty, @multicast2, 0x0}, &(0x7f0000000080)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@empty, 0x4e, r2}) 0s ago: executing program 0 (id=6108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0xf8, 0x4, 0x64, 0x8, 0x0, 0xb, 0x1, 0x34, 0x7, 0x25, 0x87, 0x4, 0x0, 0x8}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @loopback}]}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000002c0)=r2, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x40}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000200)="27030200000314000e00203c0003000000000001", 0x14}, {&(0x7f00000022c0)="6037524d630f68287629547bd5c098e381953c405689f3afe4ec", 0x1a}, {&(0x7f0000002300)="3a9bd65e267e793c04ef2f57c99e4b5a4fc32622582fec4c83adc689975966d0608e099cc2d73c11c27ee7ec7cb98dedef95b6db3b9e36283b4b9f8a360a418da633a96149633d143f70788609b34f3d7a133569edc8e23cd6dabf9efa01928eb2bf385c8bf7fd8147380b5c6a90920396fa6b3ddacfc975be41ec5bc6c98e17447a1b95fb8d3bf91e577eb402bdf15ffaefbeb578c5f8bd8837525f537cfd0ec470fdf423e0d72a79f567fc20944492b40d96e64cc83ea242e59d208419cf97fce01cb47ee301da8993cfb16acb850644fbba86278f57751be770bd6f2b05d1143d04bf0ae9b5ad8e440a267bac023adbb23813ac0ba8e7acc790fb9611dfb9adde308024ab49d2617ca5bc55b069e3a5e73aaf87fa6da4e16660fbd4bd894ade6f190ed0fb39686ec70ae00cf01b9fab0ede475559972146bcb8684a59814b85712d22bd755967a022549bf88430512107481617324b5860f344f80c0daee5d32d57b72d02450cd97f21ba0931f94ad8dac43e5e7aa90ddf87da93f53ca8093e8b9d18a10f09d8bdb946bb0cb1cff30503fcc8e6580d83eac90892a51d896b89f5c934f2c86327292b3a76c6ddcf595782d6319bbd49aebcc5ea856649acd94439f6d78860b98cb01f0338eef99adc28af48c2ca68aa36786cf3b6f09d57c48f619ae8f5912fd06eaff92cb3199217c415c024d9f5a21770e24a096e725e4ebe09165253280e8d83e847bb011d7b975cbb864b430955d6feadfad6c4135268968258c8e0505cde214585cd9b4a549619ecaa20ec0b5b35a99cad2ea0638f4e3ec5eb887a0e3ff25e7399c7746946092bbc18b2f2b852621d6d1dcca95d776bedf7666f94906e4f47904b0d975767fea8fa4fb0e7194ec8b9a009b91470015ad9e17786159a8c6c8cc674574d8229989ff466d8b7d83745235c437dc54d3f7526af65462b236c4df362501145f55b037fbe5fb7fcd5043902e8ca3478596b82198fdf6129983f91e7c8225516f94d42d3af77d0a651d577ce9d7bc9027c11de564445444f0562c98df721f573e1fc52b4", 0x2f1}], 0x3}, 0x4041) sendto$packet(r5, &(0x7f0000000080)="a55a41b9a5759587e94025df0030462dbcc70ca69ef31a205f9b5da92f4498b935ca09d1dfb3f7e79e04d5e11bfabff259666190d352003822e19fba04bfe2189fc92cd25b6f4d24881645d376415da605d23cc3", 0x54, 0x4044001, &(0x7f0000000140)={0x11, 0xf0, r8, 0x1, 0xf1, 0x6, @multicast}, 0x14) r9 = socket$kcm(0xa, 0x5, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000675900000000000001ac14142500000000000000000000000000000000000005000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001"], 0xc4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3, 0x3}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_xfrm(r10, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=@getsadinfo={0x278, 0x23, 0x100, 0x70bd2a, 0x25dfdbfb, 0x0, [@address_filter={0x28, 0x1a, {@in6=@loopback, @in6=@local, 0xa, 0x2, 0xf3}}, @lastused={0xc, 0xf, 0x6}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x82, 0x84, "c0ca362714c661cbff00605b6175443ffbbf4128177958b29123f38041baefc94ad553ef8bc8e1b2cf66b4e8a6768910131afd75b10681463a8e0be1c2c2c594b1efb841849a4b089b232c5abd7bfcbbdf8eb32da7465ce6c2a2486f8b4c62c60c3ce18118ffdf33a132a782f97e5b5d2f8281c8fd0e42ba6bec2a5abd5e6fafc7dfd7d8"}}, @etimer_thresh={0x8, 0xc, 0xff}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd28, 0x1000}}, @etimer_thresh={0x8, 0xc, 0x2}, @algo_comp={0x9f, 0x3, {{'lzjh\x00'}, 0x2b8, "e3edab4d4b7a277b9a95326339e4ebac20acf35a57e8ba4d2a3ef2cc75ce24ee2e97631bc1c804da2eec8951dfe1fd5cf5602d67366b360ac36c8d6f45c07b904aebe19dc6be4aff63303359e6cb76453f644a0ce2d938"}}, @algo_aead={0xd7, 0x12, {{'morus640\x00'}, 0x458, 0x0, "92f75d94761de19f67eb91260e222b56ba8e0c037998087e1c306c39de498719150262f417282a4b4d219e614981b00cf4c0d4cf57130c82e14b540fa65ef1eab3ae8ecfa44614b40472f8e32f18bf408c5ade51657adcd73ef4ba2d31dfdcb7c9b4cd9b66676e81d3e37c1561df43f5dbad523f4264d009661be3d248484cde27816b583c4b0e4aeed14a"}}, @proto={0x5, 0x19, 0x2b}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008000) listen(r11, 0x7) listen(r4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x3, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): [ 410.214798][ T2278] Buffer I/O error on dev nbd3, logical block 0, async page read [ 410.224710][T19956] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.235857][T19956] Buffer I/O error on dev nbd3, logical block 1, async page read [ 410.243934][T19956] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.253711][T19956] Buffer I/O error on dev nbd3, logical block 2, async page read [ 410.261919][T19956] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.271771][T19956] Buffer I/O error on dev nbd3, logical block 3, async page read [ 410.280738][T19956] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.290551][T19956] Buffer I/O error on dev nbd3, logical block 0, async page read [ 410.299074][T19956] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.309233][T19956] Buffer I/O error on dev nbd3, logical block 1, async page read [ 410.317274][T19956] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.327008][T19956] Buffer I/O error on dev nbd3, logical block 2, async page read [ 410.334791][T19956] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.346155][T19956] Buffer I/O error on dev nbd3, logical block 3, async page read [ 410.353953][T19956] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.374808][T19956] Buffer I/O error on dev nbd3, logical block 0, async page read [ 410.402805][T19956] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.416181][T19956] Buffer I/O error on dev nbd3, logical block 1, async page read [ 410.428704][T20014] bond4: entered promiscuous mode [ 410.434102][T20014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 410.441548][T19956] ldm_validate_partition_table(): Disk read failed. [ 410.448902][T19956] Dev nbd3: unable to read RDB block 0 [ 410.457270][T19956] nbd3: unable to read partition table [ 410.482119][T19956] ldm_validate_partition_table(): Disk read failed. [ 410.490264][T19956] Dev nbd3: unable to read RDB block 0 [ 410.498059][T19956] nbd3: unable to read partition table [ 410.499140][T20014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 410.520032][T20014] bond4: (slave sit2): The slave device specified does not support setting the MAC address [ 410.531736][T20014] bond4: (slave sit2): Error -95 calling set_mac_address [ 410.812966][T20039] netlink: 'syz.4.3771': attribute type 33 has an invalid length. [ 410.853971][T20039] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 410.878621][T20039] bond4 (unregistering): Released all slaves [ 410.895495][T20042] netlink: 'syz.0.3772': attribute type 10 has an invalid length. [ 410.903822][T20042] veth0_vlan: left promiscuous mode [ 410.911068][T20042] veth0_vlan: entered promiscuous mode [ 410.918086][T20042] team0: Device veth0_vlan failed to register rx_handler [ 411.089543][T20049] "syz.1.3775" (20049) uses obsolete ecb(arc4) skcipher [ 411.115969][T20052] netlink: 'syz.0.3777': attribute type 1 has an invalid length. [ 411.124772][T20052] netlink: 'syz.0.3777': attribute type 1 has an invalid length. [ 411.155723][T20052] netlink: 'syz.0.3777': attribute type 8 has an invalid length. [ 411.240249][T20053] syzkaller0: entered promiscuous mode [ 411.266037][T20053] syzkaller0: entered allmulticast mode [ 412.973146][T20107] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 412.977934][T20108] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 413.227316][T20125] xt_TCPMSS: Only works on TCP SYN packets [ 413.275188][T20131] __nla_validate_parse: 17 callbacks suppressed [ 413.275207][T20131] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3798'. [ 413.344253][T20134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3801'. [ 413.366193][T20137] netlink: 'syz.3.3802': attribute type 39 has an invalid length. [ 413.439122][T20137] hsr_slave_1 (unregistering): left promiscuous mode [ 413.599761][T20151] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.601913][T20156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3805'. [ 413.626987][T20147] netlink: 'syz.0.3804': attribute type 1 has an invalid length. [ 413.627561][T20156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3805'. [ 413.639172][T20147] netlink: 'syz.0.3804': attribute type 2 has an invalid length. [ 413.682486][T20156] gretap0: entered promiscuous mode [ 413.689016][T20159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3809'. [ 413.701464][T20156] gretap0: left promiscuous mode [ 413.745685][T20161] netlink: 'syz.1.3808': attribute type 13 has an invalid length. [ 413.754199][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3808'. [ 413.770736][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.770818][T20161] netlink: 'syz.1.3808': attribute type 13 has an invalid length. [ 413.787917][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3808'. [ 413.798725][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.817502][T20162] netlink: 1724 bytes leftover after parsing attributes in process `syz.1.3808'. [ 413.831627][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3808'. [ 413.843438][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.887639][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.954025][T20175] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002 [ 413.963842][T20174] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002 [ 414.039825][T20182] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3813'. [ 414.578521][T20212] xt_cgroup: invalid path, errno=-2 [ 415.019333][T20240] netlink: 'syz.0.3833': attribute type 32 has an invalid length. [ 415.149399][T20240] bond5: option coupled_control: invalid value (110) [ 415.195285][T20240] bond5 (unregistering): Released all slaves [ 415.407918][T20263] netlink: 'syz.4.3840': attribute type 1 has an invalid length. [ 415.425963][T20265] team0: Device gtp0 is up. Set it down before adding it as a team port [ 415.806871][T20298] x_tables: duplicate underflow at hook 3 [ 415.891226][T20307] netlink: 'syz.4.3851': attribute type 10 has an invalid length. [ 415.917510][T20307] team0: Port device dummy0 added [ 416.144677][T20323] netlink: 'syz.4.3854': attribute type 10 has an invalid length. [ 416.177387][T20323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.196295][T20328] netlink: 'syz.4.3854': attribute type 10 has an invalid length. [ 416.201755][T20323] .`: (slave batadv0): Enslaving as an active interface with an up link [ 416.246322][T20328] batadv0: entered promiscuous mode [ 416.251701][T20328] batadv0: entered allmulticast mode [ 416.298845][T20328] .`: (slave batadv0): Releasing backup interface [ 416.331043][T20328] bridge0: port 3(batadv0) entered blocking state [ 416.345475][T20328] bridge0: port 3(batadv0) entered disabled state [ 416.475193][T20338] veth0: entered promiscuous mode [ 416.482529][T20338] veth0: left promiscuous mode [ 416.709802][T20358] syzkaller1: entered promiscuous mode [ 416.723764][T20358] syzkaller1: entered allmulticast mode [ 416.802328][T20367] x_tables: duplicate underflow at hook 4 [ 416.846269][ T1109] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 416.855552][ T1109] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 417.016033][T20380] nbd: must specify an index to disconnect [ 417.957934][T20417] block nbd4: server does not support multiple connections per device. [ 417.985217][T20417] block nbd4: shutting down sockets [ 418.221371][T20433] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 418.241403][T20431] 9: entered promiscuous mode [ 418.341467][T20442] __nla_validate_parse: 17 callbacks suppressed [ 418.341485][T20442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3890'. [ 418.466585][T20448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3894'. [ 418.513350][T20448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3894'. [ 418.544698][T20452] xt_hashlimit: size too large, truncated to 1048576 [ 418.698248][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3898'. [ 418.947781][T20470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3899'. [ 418.969035][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'. [ 419.299082][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3904'. [ 419.310997][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3904'. [ 419.368116][T20495] bond4: option miimon: invalid value (18446744073709551585) [ 419.375665][T20495] bond4: option miimon: allowed values 0 - 2147483647 [ 419.406492][T20495] bond4 (unregistering): Released all slaves [ 420.890123][T20369] Set syz1 is full, maxelem 65536 reached [ 420.896500][T20469] SET target dimension over the limit! [ 421.085959][T20574] validate_nla: 2 callbacks suppressed [ 421.085978][T20574] netlink: 'syz.0.3928': attribute type 1 has an invalid length. [ 421.114563][T20574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3928'. [ 421.155860][T20578] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3929'. [ 422.007760][T20628] netlink: 'syz.4.3949': attribute type 13 has an invalid length. [ 422.026232][T20628] netlink: 'syz.4.3949': attribute type 58 has an invalid length. [ 422.127408][T20641] netlink: 'syz.4.3953': attribute type 7 has an invalid length. [ 422.135834][T20641] netlink: 'syz.4.3953': attribute type 8 has an invalid length. [ 422.172414][T20638] netlink: 'syz.0.3952': attribute type 2 has an invalid length. [ 422.220769][T20644] netlink: 'syz.4.3955': attribute type 2 has an invalid length. [ 422.230629][T20644] netlink: 'syz.4.3955': attribute type 2 has an invalid length. [ 422.469927][T20657] team0: Port device team_slave_0 removed [ 422.487053][T20661] netlink: 'syz.4.3961': attribute type 2 has an invalid length. [ 422.499857][T20663] netlink: 'syz.3.3960': attribute type 7 has an invalid length. [ 422.514871][T20663] hsr0: entered promiscuous mode [ 422.520472][T20663] macvlan2: entered allmulticast mode [ 422.526810][T20663] hsr0: entered allmulticast mode [ 422.533215][T20663] hsr_slave_0: entered allmulticast mode [ 422.724230][T20676] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 422.919941][ T5832] Bluetooth: hci1: link tx timeout [ 422.936383][ T5832] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 423.210488][T20702] macvtap1: entered promiscuous mode [ 423.215804][T20702] vlan0: entered promiscuous mode [ 423.221580][T20702] macvtap1: entered allmulticast mode [ 423.227271][T20702] vlan0: entered allmulticast mode [ 423.232381][T20702] veth0_vlan: entered allmulticast mode [ 423.291111][T20710] team0 (unregistering): Port device team_slave_0 removed [ 423.333175][T20710] team0 (unregistering): Port device team_slave_1 removed [ 423.362723][T20722] __nla_validate_parse: 8 callbacks suppressed [ 423.362740][T20722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3977'. [ 423.373747][T20710] team0 (unregistering): Port device dummy0 removed [ 423.382640][T20722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3977'. [ 423.444846][T20715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.452495][T20724] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 423.464070][T20730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3981'. [ 423.653226][T20733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3983'. [ 423.815751][T20739] : (slave wlan1): Enslaving as an active interface with an up link [ 423.820882][T20750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3988'. [ 423.854163][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.870583][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.226628][T20773] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3989'. [ 424.322289][T20759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.536290][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 424.550848][T20793] netlink: 'syz.2.4001': attribute type 11 has an invalid length. [ 424.723697][T20806] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4004'. [ 424.979772][T20820] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 425.016264][ T5827] Bluetooth: hci1: command 0x0405 tx timeout [ 425.038399][T20755] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 425.302804][T20840] hsr_slave_1 (unregistering): left promiscuous mode [ 425.959554][T20881] syzkaller0: entered promiscuous mode [ 425.966250][T20881] syzkaller0: entered allmulticast mode [ 426.092046][T20888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.100814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.533108][T20911] validate_nla: 4 callbacks suppressed [ 426.533125][T20911] netlink: 'syz.4.4036': attribute type 19 has an invalid length. [ 426.569273][T20913] netlink: 'syz.4.4036': attribute type 19 has an invalid length. [ 426.582234][T20909] syzkaller0: entered promiscuous mode [ 426.596355][T20909] syzkaller0: entered allmulticast mode [ 426.606856][T20917] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4034'. [ 426.710366][T20915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4037'. [ 427.106256][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 427.386642][T20933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.416968][T20933] x_tables: duplicate underflow at hook 1 [ 427.436014][T20933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.567977][T20935] syzkaller0: entered promiscuous mode [ 427.583179][T20935] syzkaller0: entered allmulticast mode [ 427.978967][T20939] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4044'. [ 428.079527][T20951] netlink: 'syz.0.4046': attribute type 33 has an invalid length. [ 428.480878][T20967] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4053'. [ 428.491747][T20968] bond4: entered allmulticast mode [ 428.557325][T20967] bond4: left allmulticast mode [ 428.875249][T20992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4059'. [ 428.924017][T20994] netlink: 'syz.0.4059': attribute type 1 has an invalid length. [ 428.934065][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4059'. [ 428.985644][T20993] bond4: entered promiscuous mode [ 428.990903][T20993] bond4: entered allmulticast mode [ 428.996893][T20993] 8021q: adding VLAN 0 to HW filter on device bond4 [ 429.082618][T21009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4063'. [ 429.220787][T21024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.229944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.238324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.246864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.268505][T21030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4066'. [ 429.288189][T21024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.466888][T21038] syzkaller1: entered allmulticast mode [ 429.734731][T21060] net_ratelimit: 1 callbacks suppressed [ 429.734750][T21060] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 429.857311][T21070] delete_channel: no stack [ 429.912138][T21074] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4081'. [ 429.937091][T21074] netlink: 'syz.4.4081': attribute type 2 has an invalid length. [ 430.001559][T21076] vcan0: entered promiscuous mode [ 430.006734][T21076] vcan0: entered allmulticast mode [ 430.069250][T21083] delete_channel: no stack [ 430.390417][T21104] netlink: 'syz.3.4090': attribute type 10 has an invalid length. [ 430.504350][T21111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4094'. [ 430.563015][T21115] : entered promiscuous mode [ 430.569454][T21115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4094'. [ 430.609119][T21111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4094'. [ 430.645325][T21115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4094'. [ 430.680592][T21111] gretap0: entered promiscuous mode [ 430.729019][T21111] gretap0: left promiscuous mode [ 430.807413][T21115] gretap0: entered promiscuous mode [ 430.856673][T21115] gretap0: left promiscuous mode [ 431.094629][T21156] netlink: 'syz.3.4106': attribute type 39 has an invalid length. [ 431.736632][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 432.326703][T21238] syzkaller1: entered promiscuous mode [ 432.336547][T21238] syzkaller1: entered allmulticast mode [ 433.097488][T21288] syzkaller0: entered promiscuous mode [ 433.103127][T21288] syzkaller0: entered allmulticast mode [ 433.120840][T21293] netlink: 'syz.4.4145': attribute type 14 has an invalid length. [ 433.771224][T21330] xt_hashlimit: size too large, truncated to 1048576 [ 433.839928][T21333] __nla_validate_parse: 20 callbacks suppressed [ 433.839943][T21333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4155'. [ 434.379228][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 434.935078][T21340] netlink: 'syz.3.4157': attribute type 1 has an invalid length. [ 434.977182][T21340] bond5: entered promiscuous mode [ 434.983046][T21340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 435.048821][T21340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 435.066778][T21340] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 435.078198][T21340] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 435.090676][T21340] bond5: (slave vti0): making interface the new active one [ 435.098457][T21340] vti0: entered promiscuous mode [ 435.106255][T21340] bond5: (slave vti0): Enslaving as an active interface with an up link [ 435.393523][T21373] netlink: 'syz.4.4167': attribute type 1 has an invalid length. [ 435.416241][T21373] netlink: 'syz.4.4167': attribute type 1 has an invalid length. [ 435.474223][T21378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 436.383547][T21439] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4188'. [ 436.409687][T21436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4188'. [ 436.428933][T21441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'. [ 436.490756][T21441] ipvlan3: entered allmulticast mode [ 436.525209][T21441] syz_tun: entered allmulticast mode [ 436.545946][T21445] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4190'. [ 436.611215][T21445] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4190'. [ 436.635120][T21451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4194'. [ 436.807876][T21465] bridge5: entered promiscuous mode [ 436.813141][T21465] bridge5: entered allmulticast mode [ 436.904694][T21468] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4199'. [ 436.940913][T21468] openvswitch: netlink: Missing key (keys=40, expected=100) [ 437.094166][T21481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4203'. [ 438.085028][T21559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.104005][T21564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.177257][T21570] netlink: 'syz.3.4227': attribute type 9 has an invalid length. [ 438.186987][T21570] netlink: 'syz.3.4227': attribute type 11 has an invalid length. [ 438.202682][T21570] netlink: 'syz.3.4227': attribute type 12 has an invalid length. [ 438.228159][T21575] netlink: 'syz.3.4227': attribute type 2 has an invalid length. [ 438.242830][T21575] netlink: 'syz.3.4227': attribute type 2 has an invalid length. [ 438.370135][T21585] openvswitch: netlink: Invalid VLAN frame [ 438.768006][T21610] bond2 (unregistering): Released all slaves [ 439.006567][T21633] netlink: 'syz.1.4247': attribute type 62 has an invalid length. [ 439.101820][T21645] __nla_validate_parse: 10 callbacks suppressed [ 439.101838][T21645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4251'. [ 439.106721][T21643] nbd: couldn't find a device at index 0 [ 439.297715][T21654] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 439.322552][T21654] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 439.334220][T21654] gretap2: entered promiscuous mode [ 439.341064][T21654] gretap2: entered allmulticast mode [ 439.352657][T21660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4255'. [ 439.362742][T21661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4256'. [ 439.373224][T21656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4254'. [ 439.395145][T21656] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4254'. [ 439.427033][T21656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4254'. [ 439.446347][T21656] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4254'. [ 439.466657][T21656] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4254'. [ 439.649855][T21679] openvswitch: netlink: IP tunnel dst address not specified [ 439.717425][T21682] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4262'. [ 440.287726][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4269'. [ 440.636939][T21746] netlink: 'syz.4.4274': attribute type 1 has an invalid length. [ 441.246458][T21700] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 441.252649][T21700] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 441.369542][T21700] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 441.375477][T21700] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 441.561758][T21790] xt_hashlimit: size too large, truncated to 1048576 [ 441.581080][T21700] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 441.598404][T21700] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 441.699436][T21793] netlink: 'syz.0.4286': attribute type 1 has an invalid length. [ 441.790132][T21793] 8021q: adding VLAN 0 to HW filter on device bond5 [ 441.857271][T21803] xt_policy: output policy not valid in PREROUTING and INPUT [ 441.939521][T21801] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 441.955789][T21801] bond5: (slave batadv1): making interface the new active one [ 441.974487][T21801] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 442.105140][T21700] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 442.126687][T21700] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 443.385781][T21888] mac80211_hwsim hwsim34 : renamed from wlan1 [ 443.644487][T21904] bond6: Removing last ns target with arp_interval on [ 443.842036][T21918] macsec0: entered promiscuous mode [ 443.854252][T21918] macsec0: entered allmulticast mode [ 443.878053][T21921] veth1_macvtap: entered allmulticast mode [ 443.894867][T21921] macsec0: left promiscuous mode [ 443.907934][T21921] macsec0: left allmulticast mode [ 443.918811][T21921] veth1_macvtap: left allmulticast mode [ 444.250651][T21933] x_tables: duplicate underflow at hook 2 [ 444.407640][T21946] __nla_validate_parse: 22 callbacks suppressed [ 444.407658][T21946] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4321'. [ 444.441883][T21948] syzkaller0: entered promiscuous mode [ 444.456984][T21948] syzkaller0: entered allmulticast mode [ 444.463558][T21950] sock: sock_timestamping_bind_phc: sock not bind to device [ 444.619356][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4324'. [ 444.790517][T21973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4327'. [ 444.816630][T21965] ip6erspan0: entered promiscuous mode [ 444.851859][T21973] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 444.969327][T21978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4328'. [ 445.034392][T21981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4329'. [ 445.075349][T21984] netlink: 64987 bytes leftover after parsing attributes in process `syz.1.4328'. [ 445.095209][T21987] tipc: Failed to remove unknown binding: 66,1,1/0:3783158260/3783158262 [ 445.157301][T21987] tipc: Failed to remove unknown binding: 66,1,1/0:3783158260/3783158262 [ 445.378587][T21999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.454696][T22012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4338'. [ 445.670690][T22020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4340'. [ 445.950335][T22035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4345'. [ 445.989822][T22035] netlink: 'syz.4.4345': attribute type 1 has an invalid length. [ 446.016920][T22035] netlink: 760 bytes leftover after parsing attributes in process `syz.4.4345'. [ 446.049064][T22042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.309305][T22055] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 446.346831][T22055] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 447.054878][T22095] veth0_to_bond: entered allmulticast mode [ 447.082221][T22095] openvswitch: netlink: IP tunnel dst address not specified [ 447.788625][T22141] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 447.814535][T22153] netlink: 'syz.4.4373': attribute type 1 has an invalid length. [ 447.883678][T22141] bond3 (unregistering): Released all slaves [ 448.055607][T22154] bond4: (slave gretap1): making interface the new active one [ 448.085663][T22154] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 448.170928][T22143] macvlan2: entered promiscuous mode [ 448.191885][T22143] macvlan2: entered allmulticast mode [ 448.213488][T22143] bond4: entered promiscuous mode [ 448.228955][T22143] gretap1: entered promiscuous mode [ 448.246910][T22143] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 448.280575][T22143] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 448.326395][T22143] bond4: left promiscuous mode [ 448.331209][T22143] gretap1: left promiscuous mode [ 448.439184][T22171] IPVS: Unknown mcast interface: netdevsim0 [ 448.708664][T22203] vlan2: entered promiscuous mode [ 448.723765][T22203] geneve1: entered promiscuous mode [ 448.744341][T22203] vlan2: entered allmulticast mode [ 448.767637][T22203] geneve1: entered allmulticast mode [ 449.000545][T22221] syzkaller0: entered promiscuous mode [ 449.006219][T22221] syzkaller0: entered allmulticast mode [ 449.270014][T22237] netlink: 'syz.4.4391': attribute type 21 has an invalid length. [ 449.286669][T22237] IPv6: NLM_F_CREATE should be specified when creating new route [ 449.324897][T22237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.332183][T22237] IPv6: NLM_F_CREATE should be set when creating new route [ 449.339568][T22237] IPv6: NLM_F_CREATE should be set when creating new route [ 449.346819][T22237] IPv6: NLM_F_CREATE should be set when creating new route [ 449.570599][T22253] __nla_validate_parse: 4 callbacks suppressed [ 449.570618][T22253] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4392'. [ 449.809467][T22263] netlink: 'syz.1.4398': attribute type 12 has an invalid length. [ 449.830926][T22273] syz_tun: entered allmulticast mode [ 449.905657][T22276] macsec1: entered promiscuous mode [ 449.928418][T22276] veth1_to_team: entered promiscuous mode [ 449.946522][T22276] batman_adv: batadv0: Adding interface: macsec1 [ 449.953304][T22276] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.055145][T22276] batman_adv: batadv0: Interface activated: macsec1 [ 450.104755][T22290] netlink: 'syz.1.4406': attribute type 1 has an invalid length. [ 450.196541][T22265] syz_tun: left allmulticast mode [ 450.342836][T22305] netlink: 'syz.4.4410': attribute type 10 has an invalid length. [ 450.360826][T22305] netlink: 396 bytes leftover after parsing attributes in process `syz.4.4410'. [ 450.547407][T22314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4412'. [ 450.700759][T22323] netlink: 'syz.2.4416': attribute type 3 has an invalid length. [ 450.717215][T22323] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4416'. [ 450.767555][T22326] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4416'. [ 450.809829][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'. [ 450.839048][T22323] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4416'. [ 450.858549][T22328] batman_adv: batadv0: Adding interface: dummy0 [ 450.866288][T22328] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.956516][T22328] batman_adv: batadv0: Interface activated: dummy0 [ 451.047719][T22337] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 451.055286][T22337] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 451.536265][T22369] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4430'. [ 451.676320][T22376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4432'. [ 451.685396][T22376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4432'. [ 451.895921][T22392] netlink: 'syz.4.4438': attribute type 12 has an invalid length. [ 451.938364][T22392] netlink: 'syz.4.4438': attribute type 10 has an invalid length. [ 452.648813][T22453] sctp: [Deprecated]: syz.3.4450 (pid 22453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.648813][T22453] Use struct sctp_sack_info instead [ 453.154671][T22486] syzkaller0: entered promiscuous mode [ 453.160492][T22486] syzkaller0: entered allmulticast mode [ 453.168404][T22486] nbd: couldn't find a device at index 1048580 [ 453.466919][T22509] netlink: 'syz.2.4464': attribute type 5 has an invalid length. [ 453.529034][T22509] geneve4: entered promiscuous mode [ 453.551179][T22509] geneve4: entered allmulticast mode [ 454.057378][T22523] syzkaller1: entered promiscuous mode [ 454.096305][T22523] syzkaller1: entered allmulticast mode [ 454.267050][T22540] netlink: 'syz.3.4469': attribute type 2 has an invalid length. [ 454.389406][T22544] xt_socket: unknown flags 0x50 [ 454.811528][T22590] x_tables: duplicate underflow at hook 1 [ 454.972713][T22610] __nla_validate_parse: 6 callbacks suppressed [ 454.972731][T22610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4488'. [ 455.016292][T22610] netlink: 'syz.0.4488': attribute type 7 has an invalid length. [ 455.056274][T22610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4488'. [ 455.150997][T22625] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4489'. [ 455.176852][T22625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4489'. [ 455.193321][T22624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4490'. [ 455.204547][T22619] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4489'. [ 455.251600][T22624] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 455.313397][ T35] team0: left allmulticast mode [ 455.318482][ T35] team_slave_0: left allmulticast mode [ 455.374326][ T35] team_slave_1: left allmulticast mode [ 455.389790][ T35] team0: left promiscuous mode [ 455.412712][ T35] team_slave_0: left promiscuous mode [ 455.426631][ T35] team_slave_1: left promiscuous mode [ 455.432179][ T35] bridge1: left promiscuous mode [ 455.448671][ T35] bridge0: port 3(team0) entered disabled state [ 455.485407][ T35] bridge_slave_1: left allmulticast mode [ 455.518138][ T35] bridge_slave_1: left promiscuous mode [ 455.523874][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.556358][T22648] netlink: 'syz.3.4495': attribute type 1 has an invalid length. [ 455.854559][T22672] netlink: 'syz.2.4493': attribute type 1 has an invalid length. [ 456.099865][ T35] bond6 (unregistering): (slave ip6gretap2): Releasing active interface [ 456.125658][ T35] ip6gretap2 (unregistering): left allmulticast mode [ 456.148917][T22607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4486'. [ 456.186812][ T35] bond8 (unregistering): (slave ip6gre2): Releasing backup interface [ 456.211919][ T35] ip6gre2 (unregistering): left promiscuous mode [ 456.382190][ T35] bond3 (unregistering): (slave xfrm1): Releasing backup interface [ 456.589444][ T35] team0: Port device bridge1 removed [ 456.729308][ T35] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 456.737554][ T35] bond5 (unregistering): (slave bridge4): the permanent HWaddr of slave - 46:e0:c4:6e:01:4b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 456.755936][ T35] bridge4 (unregistering): left promiscuous mode [ 456.762405][ T35] bond5 (unregistering): (slave bridge5): making interface the new active one [ 456.771563][ T35] bridge5 (unregistering): entered promiscuous mode [ 456.818807][ T35] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 456.826969][ T35] bridge5 (unregistering): left promiscuous mode [ 456.859960][ T35] bond7 (unregistering): (slave bridge6): Releasing active interface [ 457.040245][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.050070][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.059740][ T35] bond0 (unregistering): Released all slaves [ 457.069383][ T35] bond1 (unregistering): Released all slaves [ 457.082029][ T35] bond2 (unregistering): Released all slaves [ 457.094054][ T35] bond3 (unregistering): Released all slaves [ 457.109114][ T35] bond4 (unregistering): Released all slaves [ 457.125984][ T35] bond5 (unregistering): Released all slaves [ 457.138647][ T35] bond6 (unregistering): Released all slaves [ 457.159124][ T35] bond7 (unregistering): Released all slaves [ 457.171466][ T35] bond8 (unregistering): Released all slaves [ 457.183811][ T35] bond9 (unregistering): Released all slaves [ 457.195984][ T35] bond10 (unregistering): Released all slaves [ 457.208727][ T35] bond11 (unregistering): (slave bond12): Releasing backup interface [ 457.218070][ T35] bond11 (unregistering): Released all slaves [ 457.230640][ T35] bond12 (unregistering): Released all slaves [ 457.273678][T22648] 8021q: adding VLAN 0 to HW filter on device bond7 [ 457.444283][ T35] tipc: Left network mode [ 457.964619][T22711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4508'. [ 457.980660][T22718] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4509'. [ 458.032089][T22711] syzkaller0: entered promiscuous mode [ 458.049415][T22711] syzkaller0: entered allmulticast mode [ 458.214402][T22735] mac80211_hwsim hwsim38 : renamed from wlan1 [ 458.252652][T22737] sctp: [Deprecated]: syz.2.4513 (pid 22737) Use of int in max_burst socket option deprecated. [ 458.252652][T22737] Use struct sctp_assoc_value instead [ 458.366340][ T35] hsr_slave_1: left promiscuous mode [ 458.771917][ T35] team0 (unregistering): Port device team_slave_1 removed [ 458.828736][ T35] team0 (unregistering): Port device team_slave_0 removed [ 459.128109][T22762] syzkaller0: entered promiscuous mode [ 459.133765][T22762] syzkaller0: entered allmulticast mode [ 459.203648][T22787] netlink: 'syz.4.4521': attribute type 1 has an invalid length. [ 460.517752][T22803] syzkaller1: entered promiscuous mode [ 460.547733][T22803] syzkaller1: entered allmulticast mode [ 460.623438][T22809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4525'. [ 460.634571][T22811] netlink: 'syz.4.4526': attribute type 1 has an invalid length. [ 460.699762][T22809] bond8: entered promiscuous mode [ 460.707321][T22809] 8021q: adding VLAN 0 to HW filter on device bond8 [ 460.731363][T22813] vlan2: entered promiscuous mode [ 460.751839][T22813] bridge0: entered promiscuous mode [ 460.787116][T22821] openvswitch: netlink: Duplicate or invalid key (type 0). [ 460.794968][T22823] openvswitch: netlink: EtherType 0 is less than min 600 [ 460.815176][ T35] IPVS: stop unused estimator thread 0... [ 460.823316][T22819] 8021q: adding VLAN 0 to HW filter on device bond8 [ 460.837518][T22819] bond8: (slave sit2): The slave device specified does not support setting the MAC address [ 460.849922][T22821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.877582][T22819] bond8: (slave sit2): Error -95 calling set_mac_address [ 460.929900][T22831] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.4533'. [ 461.080074][T22843] openvswitch: netlink: Duplicate key (type 2). [ 461.282099][T22857] delete_channel: no stack [ 461.500485][T22870] bond6: entered allmulticast mode [ 461.522657][T22870] bridge2: entered promiscuous mode [ 461.527995][T22875] xt_TPROXY: Can be used only with -p tcp or -p udp [ 461.534846][T22870] bridge2: entered allmulticast mode [ 461.543868][T22870] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 461.577383][T22877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.655756][T22879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4545'. [ 461.696906][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4545'. [ 461.777159][T22883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.786278][T22840] erspan0: entered allmulticast mode [ 461.853208][T22893] mac80211_hwsim hwsim27 : renamed from wlan1 [ 462.358151][T22932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4559'. [ 462.598722][T22943] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4560'. [ 462.635665][T22943] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4560'. [ 462.903145][T22955] syzkaller0: entered promiscuous mode [ 462.920534][T22955] syzkaller0: entered allmulticast mode [ 463.042434][T22960] xt_hashlimit: size too large, truncated to 1048576 [ 463.380136][T22988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4570'. [ 464.769850][T23008] netlink: 'syz.3.4572': attribute type 10 has an invalid length. [ 464.911909][T23023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.916263][T23008] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 465.767491][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4585'. [ 466.001974][T23095] netlink: 'syz.4.4588': attribute type 3 has an invalid length. [ 466.043191][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'. [ 466.052184][T23100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4590'. [ 466.066901][T23100] netlink: 'syz.1.4590': attribute type 12 has an invalid length. [ 466.069942][T23098] team0: No ports can be present during mode change [ 466.074717][T23100] netlink: 'syz.1.4590': attribute type 11 has an invalid length. [ 466.213440][T23114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4591'. [ 466.648127][T23134] netlink: 'syz.0.4594': attribute type 1 has an invalid length. [ 467.523859][T23172] syzkaller0: entered allmulticast mode [ 467.629124][T23180] tipc: Enabling of bearer rejected, media not registered [ 467.644362][T23181] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4604'. [ 467.742968][T23186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4606'. [ 467.763598][T23189] sctp: [Deprecated]: syz.3.4608 (pid 23189) Use of int in max_burst socket option deprecated. [ 467.763598][T23189] Use struct sctp_assoc_value instead [ 467.845424][T23186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4606'. [ 468.207520][T23215] netlink: 'syz.0.4613': attribute type 9 has an invalid length. [ 468.240168][T23215] netlink: 'syz.0.4613': attribute type 11 has an invalid length. [ 468.251172][T23220] syzkaller0: entered promiscuous mode [ 468.263901][T23220] syzkaller0: entered allmulticast mode [ 468.271218][T23215] netlink: 'syz.0.4613': attribute type 12 has an invalid length. [ 468.312601][T23229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4613'. [ 468.331982][T23215] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4613'. [ 468.445735][T23215] netlink: 'syz.0.4613': attribute type 1 has an invalid length. [ 469.384402][T23272] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4627'. [ 469.604656][T23272] bond7 (unregistering): Released all slaves [ 469.759616][T23306] netlink: 'syz.1.4638': attribute type 1 has an invalid length. [ 469.827408][T23306] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.875958][T23317] bond4: entered allmulticast mode [ 470.237886][T23345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.447167][T23437] __nla_validate_parse: 1 callbacks suppressed [ 471.447186][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4674'. [ 472.688246][T23437] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 472.707276][T23444] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 472.747783][T23444] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 472.778454][T23444] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 472.977837][T23466] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 472.983963][T23469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4683'. [ 473.051503][T23471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4684'. [ 473.095951][T23471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4684'. [ 473.322071][T23489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4691'. [ 473.336696][T23489] netlink: 'syz.4.4691': attribute type 7 has an invalid length. [ 473.366329][T23489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4691'. [ 473.399185][T23496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4694'. [ 473.429659][T23489] erspan0: entered promiscuous mode [ 473.436940][T23489] gretap0: entered promiscuous mode [ 473.484448][T23503] bridge0: port 3(ipvlan2) entered blocking state [ 473.523180][T23503] bridge0: port 3(ipvlan2) entered disabled state [ 473.541655][T23503] ipvlan2: entered allmulticast mode [ 473.570522][T23503] bridge0: entered allmulticast mode [ 473.582065][T23503] ipvlan2: left allmulticast mode [ 473.591293][T23503] bridge0: left allmulticast mode [ 473.903216][T23543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4708'. [ 473.927840][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.942447][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.954276][T23546] netlink: 'syz.1.4705': attribute type 1 has an invalid length. [ 473.962248][ T7431] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.967612][T23547] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 474.008512][T23547] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 474.097435][ T7431] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 474.305939][T23571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4715'. [ 474.516634][ T7431] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 474.701067][T23580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4720'. [ 474.861063][T23601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.230974][T23623] netlink: 'syz.3.4732': attribute type 1 has an invalid length. [ 475.287769][T23623] 8021q: adding VLAN 0 to HW filter on device bond9 [ 475.307957][T23613] xfrm1: entered allmulticast mode [ 475.342351][T23623] bond9: (slave geneve2): making interface the new active one [ 475.351920][T23623] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 475.437680][ T1088] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 475.450808][ T1088] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 475.467900][ T1088] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 475.476776][ T1088] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 475.880738][T23660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.076947][T23678] netlink: 'syz.3.4746': attribute type 64 has an invalid length. [ 476.095358][T23677] netlink: 'syz.1.4747': attribute type 2 has an invalid length. [ 476.321507][T23693] team1: entered promiscuous mode [ 476.326870][T23693] team1: entered allmulticast mode [ 476.487249][T23711] __nla_validate_parse: 41 callbacks suppressed [ 476.487269][T23711] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4756'. [ 476.564032][T23711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4756'. [ 476.673416][T23726] netlink: 'syz.4.4761': attribute type 1 has an invalid length. [ 476.799204][T23730] bond8: (slave geneve2): making interface the new active one [ 476.825313][T23730] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 476.847936][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 476.878631][T23730] netlink: 294 bytes leftover after parsing attributes in process `syz.4.4761'. [ 476.912716][T23730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.927046][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 476.951343][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 476.959624][T23738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4766'. [ 476.972768][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 476.983305][T23740] netlink: 'syz.2.4765': attribute type 1 has an invalid length. [ 477.038710][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4765'. [ 477.059808][T23740] bond1: entered promiscuous mode [ 477.065342][T23740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.325668][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4770'. [ 477.437476][T23777] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 477.450061][T23777] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 477.471912][T23779] IPVS: length: 239 != 24 [ 477.567269][T23784] erspan0: entered promiscuous mode [ 477.577197][T23784] erspan0: entered allmulticast mode [ 477.591087][T23784] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4777'. [ 477.630173][T23787] tipc: Enabled bearer , priority 0 [ 477.650925][T23787] tipc: Resetting bearer [ 477.774383][T23800] syzkaller0: entered promiscuous mode [ 477.792249][T23800] syzkaller0: entered allmulticast mode [ 477.802009][T23804] netlink: 'syz.4.4785': attribute type 1 has an invalid length. [ 477.842134][T23804] 8021q: adding VLAN 0 to HW filter on device bond9 [ 477.903597][T23804] bond9: (slave veth9): Enslaving as an active interface with a down link [ 477.924070][T23804] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 477.976258][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 478.378335][T23848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4798'. [ 478.467973][T23850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4799'. [ 478.557381][T23858] netlink: 'syz.3.4802': attribute type 1 has an invalid length. [ 478.565231][T23858] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4802'. [ 478.584560][T23858] netlink: 'syz.3.4802': attribute type 1 has an invalid length. [ 478.592946][T23858] netlink: 'syz.3.4802': attribute type 8 has an invalid length. [ 478.694717][T23872] IPVS: ip_vs_edit_dest(): server weight less than zero [ 478.822670][T23883] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 478.838193][T23883] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 478.854103][T23883] gretap1: entered promiscuous mode [ 478.860509][T23883] gretap1: entered allmulticast mode [ 479.188636][T23914] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20000 [ 479.215736][T23914] netlink: 'syz.4.4817': attribute type 1 has an invalid length. [ 479.889419][T23935] netlink: 'syz.4.4819': attribute type 2 has an invalid length. [ 480.122315][T23955] netlink: 'syz.0.4825': attribute type 3 has an invalid length. [ 480.141531][T23952] veth11: entered promiscuous mode [ 480.150729][T23952] veth11: entered allmulticast mode [ 480.215889][T23960] syzkaller1: entered allmulticast mode [ 480.240175][T23966] netlink: 'syz.1.4830': attribute type 8 has an invalid length. [ 480.307712][T23966] bond0: entered promiscuous mode [ 480.342029][T23966] gretap0: entered promiscuous mode [ 480.390370][T23966] bond0: left promiscuous mode [ 480.406544][T23966] gretap0: left promiscuous mode [ 483.663971][T24015] __nla_validate_parse: 13 callbacks suppressed [ 483.663990][T24015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4840'. [ 483.677027][T24016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4842'. [ 483.697568][T24015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4840'. [ 483.741007][T24018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4841'. [ 483.765554][T24015] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4840'. [ 483.766991][ T35] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.783307][T24015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4840'. [ 483.801830][T24028] sctp: [Deprecated]: syz.2.4844 (pid 24028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.801830][T24028] Use struct sctp_sack_info instead [ 483.805991][ T35] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.892186][ T35] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.913528][ T35] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.042162][T24036] netlink: 'syz.2.4847': attribute type 2 has an invalid length. [ 484.055775][T24036] netlink: 'syz.2.4847': attribute type 2 has an invalid length. [ 484.072715][T24043] ip6tnl2: entered promiscuous mode [ 484.152390][T24047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4849'. [ 484.242479][T24054] pimreg: entered allmulticast mode [ 484.346227][T24067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4856'. [ 484.429089][T24075] sctp: [Deprecated]: syz.0.4858 (pid 24075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.429089][T24075] Use struct sctp_sack_info instead [ 484.664717][T24084] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 484.684939][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4861'. [ 484.811827][T24094] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4863'. [ 485.078988][T24100] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 485.266976][T24113] netlink: 'syz.1.4870': attribute type 1 has an invalid length. [ 485.282221][T24110] x9 (unregistering): left allmulticast mode [ 485.288934][T24110] x9 (unregistering): left promiscuous mode [ 485.295234][T24110] bridge0: port 1(1x9) entered disabled state [ 485.373993][T24123] netlink: 'syz.4.4873': attribute type 13 has an invalid length. [ 485.382048][T24113] 8021q: adding VLAN 0 to HW filter on device bond6 [ 485.382093][T24123] netlink: 'syz.4.4873': attribute type 58 has an invalid length. [ 485.409566][T24115] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 485.452612][T24126] vlan2: entered promiscuous mode [ 485.459393][T24126] geneve1: entered promiscuous mode [ 485.464727][T24126] vlan2: entered allmulticast mode [ 485.470008][T24126] geneve1: entered allmulticast mode [ 485.695969][T24141] tipc: Started in network mode [ 485.705507][T24141] tipc: Node identity de7afaa5fc49, cluster identity 4711 [ 485.726300][T24141] tipc: Enabled bearer , priority 0 [ 485.756964][T24141] syzkaller0: entered promiscuous mode [ 485.762485][T24141] syzkaller0: entered allmulticast mode [ 485.861412][T24141] tipc: Resetting bearer [ 485.874855][T24140] tipc: Resetting bearer [ 485.878548][T24159] netlink: 'syz.0.4886': attribute type 14 has an invalid length. [ 485.899798][T24159] netlink: 'syz.0.4886': attribute type 13 has an invalid length. [ 485.909496][T24140] tipc: Disabling bearer [ 485.941732][T24160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.963708][T24166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.420897][T24196] netlink: 'syz.1.4893': attribute type 1 has an invalid length. [ 486.561351][T24200] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 486.597929][T24200] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 486.616975][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.663602][T24196] bond7: (slave gretap2): making interface the new active one [ 486.674958][T24196] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 486.709058][T24204] macvlan2: entered promiscuous mode [ 486.714447][T24204] macvlan2: entered allmulticast mode [ 486.720580][T24204] bond7: entered promiscuous mode [ 486.725631][T24204] gretap2: entered promiscuous mode [ 486.743775][T24204] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 486.778149][T24204] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 486.835066][T24204] bond7: left promiscuous mode [ 486.840280][T24204] gretap2: left promiscuous mode [ 486.860847][T24211] syzkaller0: entered promiscuous mode [ 486.868202][T24211] syzkaller0: entered allmulticast mode [ 486.987740][T24221] netlink: 'syz.0.4900': attribute type 1 has an invalid length. [ 487.044752][T24221] 8021q: adding VLAN 0 to HW filter on device bond6 [ 487.065839][T24229] bond6: (slave gretap3): making interface the new active one [ 487.090767][T24229] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 487.631565][T24271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.673810][T24271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.734001][T24277] team0: No ports can be present during mode change [ 488.107152][T24315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.300773][T24319] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 488.314518][T24331] sctp: [Deprecated]: syz.4.4934 (pid 24331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.314518][T24331] Use struct sctp_sack_info instead [ 488.373750][T24331] sctp: [Deprecated]: syz.4.4934 (pid 24331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.373750][T24331] Use struct sctp_sack_info instead [ 488.488044][T24338] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 489.128475][T24375] __nla_validate_parse: 19 callbacks suppressed [ 489.128493][T24375] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4944'. [ 489.166565][T24370] syzkaller1: entered promiscuous mode [ 489.172066][T24370] syzkaller1: entered allmulticast mode [ 489.227248][T24380] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4950'. [ 489.252717][T24380] netlink: 'syz.1.4950': attribute type 2 has an invalid length. [ 489.507403][T24389] bond2: option min_links: invalid value (18446744073709551614) [ 489.515372][T24389] bond2: option min_links: allowed values 0 - 2147483647 [ 489.547986][T24389] bond2 (unregistering): Released all slaves [ 489.639568][T24393] netlink: 'syz.1.4952': attribute type 12 has an invalid length. [ 489.664672][T24392] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4952'. [ 489.780951][T24404] Bluetooth: MGMT ver 1.23 [ 489.999329][T24416] bond10: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 490.029656][T24411] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 490.194702][T24427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4962'. [ 490.461745][T24443] Cannot find map_set index 65533 as target [ 490.475830][T24445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4967'. [ 490.662797][T24454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4971'. [ 490.915234][T24478] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4977'. [ 490.947032][T24475] bond10 (unregistering): Released all slaves [ 490.992991][T24484] vlan2: entered allmulticast mode [ 490.998432][T24486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.006253][T24487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4978'. [ 491.007386][T24484] bond0: entered allmulticast mode [ 491.018655][T24487] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4978'. [ 491.063244][T24484] bond_slave_1: entered allmulticast mode [ 491.070310][T24484] bridge_slave_1: entered allmulticast mode [ 491.091241][T24491] netlink: 'syz.1.4978': attribute type 1 has an invalid length. [ 491.133395][T24487] veth7: entered promiscuous mode [ 491.185287][T24498] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4982'. [ 491.195021][T24480] bond8: (slave ip6gretap0): making interface the new active one [ 491.197359][T24480] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 491.211158][T24480] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 491.219513][T24480] bond8: (slave ip6gretap0): Enslaving as an active interface with an up link [ 491.446617][T24515] Bluetooth: MGMT ver 1.23 [ 491.457088][T24515] netlink: 'syz.3.4987': attribute type 1 has an invalid length. [ 491.705693][T24534] netlink: 'syz.0.4993': attribute type 12 has an invalid length. [ 491.716961][T24534] netlink: 'syz.0.4993': attribute type 1 has an invalid length. [ 491.724824][T24537] syzkaller0: entered promiscuous mode [ 491.730910][T24537] syzkaller0: entered allmulticast mode [ 491.733686][T24539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.086852][T24559] xt_CT: You must specify a L4 protocol and not use inversions on it [ 492.246477][T24571] ksmbd: Unknown IPC event: 3, ignore. [ 493.207688][T24636] team0: entered promiscuous mode [ 493.213119][T24636] team_slave_0: entered promiscuous mode [ 493.245588][T24636] team_slave_1: entered promiscuous mode [ 493.321944][T24636] xt_hashlimit: invalid interval [ 493.327204][T24636] netlink: 'syz.0.5021': attribute type 1 has an invalid length. [ 493.382346][T24645] netlink: 'syz.4.5024': attribute type 2 has an invalid length. [ 493.410910][T24645] netlink: 'syz.4.5024': attribute type 2 has an invalid length. [ 493.566416][T24659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.605422][T24659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.642602][T24659] batman_adv: batadv0: Interface deactivated: macsec1 [ 493.649668][T24659] batman_adv: batadv0: Removing interface: macsec1 [ 493.677212][T24659] bond0: (slave batadv0): Releasing backup interface [ 493.727353][T24664] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 494.147326][T24690] batman_adv: batadv0: Interface deactivated: dummy0 [ 494.154074][T24690] batman_adv: batadv0: Removing interface: dummy0 [ 494.183080][T24690] bond0: (slave bridge_slave_1): Releasing backup interface [ 494.226870][T24690] bridge_slave_1: left allmulticast mode [ 494.250471][T24690] bond0: (slave bond_slave_1): Releasing backup interface [ 494.271155][T24690] bond_slave_1: left allmulticast mode [ 494.276017][T24702] netlink: 'syz.4.5036': attribute type 4 has an invalid length. [ 494.291499][T24690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 494.339770][T24694] erspan0: left promiscuous mode [ 494.346285][T24708] __nla_validate_parse: 13 callbacks suppressed [ 494.346302][T24708] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5032'. [ 494.365832][T24694] erspan0: left allmulticast mode [ 494.438197][T24693] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.5034'. [ 494.498821][T24713] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5038'. [ 494.515986][T24713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5038'. [ 494.590137][T24715] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 494.981952][T24743] bond0: (slave gre0): refused to change device type [ 495.033604][T24750] xt_hashlimit: size too large, truncated to 1048576 [ 495.249650][T24769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5051'. [ 495.288122][T24772] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 495.289805][T24774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5053'. [ 495.372034][T24776] netlink: 'syz.0.5050': attribute type 39 has an invalid length. [ 495.450636][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5055'. [ 495.494709][T24769] bond1: left promiscuous mode [ 495.501980][T24769] bridge1: left promiscuous mode [ 495.509850][T24769] ipvlan2: left allmulticast mode [ 495.514990][T24769] ipvlan3: left allmulticast mode [ 495.522841][T24769] bond1: left allmulticast mode [ 495.527767][T24769] bridge1: left allmulticast mode [ 495.533751][T24769] A link change request failed with some changes committed already. Interface bridge1 may have been left with an inconsistent configuration, please check. [ 495.586300][T24783] netlink: 'syz.4.5055': attribute type 1 has an invalid length. [ 495.604699][T24783] netlink: 'syz.4.5055': attribute type 2 has an invalid length. [ 495.614210][T24786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5057'. [ 495.629836][ T77] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.648563][ T77] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.667323][ T77] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.675711][ T77] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.702937][T24787] tipc: Enabling of bearer rejected, already enabled [ 495.712376][T24789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5058'. [ 495.719445][T24791] openvswitch: netlink: Flow key attribute not present in set flow. [ 495.786812][T24788] delete_channel: no stack [ 495.908413][T24802] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5063'. [ 496.007078][T24814] block nbd3: NBD_DISCONNECT [ 496.024878][T24814] block nbd3: Send disconnect failed -32 [ 496.440070][T17829] IPVS: starting estimator thread 0... [ 496.446635][T24842] IPVS: sh: FWM 3 0x00000003 - no destination available [ 496.456246][T24842] tipc: Started in network mode [ 496.461134][T24842] tipc: Node identity ac14140f, cluster identity 4711 [ 496.469518][T24842] tipc: New replicast peer: 255.255.255.255 [ 496.478338][T24842] tipc: Enabled bearer , priority 10 [ 496.525580][T24854] netlink: 'syz.4.5080': attribute type 2 has an invalid length. [ 496.546386][T24847] IPVS: using max 32 ests per chain, 76800 per kthread [ 496.728322][T24865] netlink: 'syz.0.5083': attribute type 1 has an invalid length. [ 496.766994][T24865] 8021q: adding VLAN 0 to HW filter on device bond7 [ 496.796975][T24865] bond7: (slave veth5): Enslaving as an active interface with a down link [ 496.815791][T24865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.825592][T24865] bond7: (slave batadv0): making interface the new active one [ 496.835279][T24865] batadv0: entered promiscuous mode [ 496.841392][T24865] bond7: (slave batadv0): Enslaving as an active interface with an up link [ 497.150548][T24879] netlink: 'syz.0.5087': attribute type 12 has an invalid length. [ 497.159891][T24879] netlink: 'syz.0.5087': attribute type 12 has an invalid length. [ 497.401749][T24884] netlink: 'syz.2.5089': attribute type 10 has an invalid length. [ 497.468748][T24884] veth0_vlan: left promiscuous mode [ 497.487122][T24884] veth0_vlan: entered promiscuous mode [ 497.495275][T24884] team0: Device veth0_vlan failed to register rx_handler [ 497.597387][T17829] tipc: Node number set to 2886997007 [ 497.613024][T24892] nbd: couldn't find a device at index 0 [ 497.728234][T24896] SET target dimension over the limit! [ 497.839524][T24904] bond0: entered allmulticast mode [ 497.858395][T24904] bond_slave_0: entered allmulticast mode [ 497.864165][T24904] bond_slave_1: entered allmulticast mode [ 498.479727][T24925] sctp: [Deprecated]: syz.0.5102 (pid 24925) Use of int in max_burst socket option. [ 498.479727][T24925] Use struct sctp_assoc_value instead [ 498.622363][T24935] 8021q: VLANs not supported on gre0 [ 498.793727][T24939] netlink: 'syz.4.5107': attribute type 1 has an invalid length. [ 499.013618][T24953] IPVS: persistence engine module ip_vs_pe_ not found [ 499.314906][T24982] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 499.327565][T24982] bond10 (unregistering): Released all slaves [ 499.370889][T24984] __nla_validate_parse: 27 callbacks suppressed [ 499.370901][T24984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5117'. [ 499.386939][T24984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5117'. [ 499.420579][T24986] syzkaller1: entered promiscuous mode [ 499.426469][T24986] syzkaller1: entered allmulticast mode [ 499.474444][T24991] netlink: 'syz.4.5120': attribute type 1 has an invalid length. [ 499.547939][T24991] 8021q: adding VLAN 0 to HW filter on device bond11 [ 499.586366][T24982] bond10: (slave bond_slave_1): Device is not bonding slave [ 499.597616][T24982] bond10: option active_slave: invalid value (bond_slave_1) [ 499.608055][T24982] bond10 (unregistering): Released all slaves [ 499.652664][T24997] bond11: (slave syz_tun): Enslaving as a backup interface with an up link [ 499.707681][T24996] gtp0: entered promiscuous mode [ 499.709917][T25006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5125'. [ 499.722032][T24996] gtp0: entered allmulticast mode [ 499.741534][T25008] tls_set_device_offload: netdev not found [ 499.895681][T25020] netlink: 'syz.2.5128': attribute type 322 has an invalid length. [ 500.133302][T25039] sock: sock_timestamping_bind_phc: sock not bind to device [ 500.237519][T25054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5134'. [ 500.247808][T25054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5134'. [ 500.351187][T25062] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 500.464596][T25069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5141'. [ 500.520739][T25069] netlink: 'syz.2.5141': attribute type 5 has an invalid length. [ 500.557598][T25073] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5143'. [ 500.994541][T25104] x_tables: duplicate underflow at hook 2 [ 501.228247][T25118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5157'. [ 501.234407][T25122] xt_TPROXY: Can be used only with -p tcp or -p udp [ 501.253355][T25118] netlink: 'syz.0.5157': attribute type 1 has an invalid length. [ 501.280387][T25118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5157'. [ 501.290816][T25122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5158'. [ 501.301436][T25118] netlink: 'syz.0.5157': attribute type 1 has an invalid length. [ 501.597120][T25141] netlink: 'syz.1.5164': attribute type 23 has an invalid length. [ 501.724615][T25144] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 501.733091][T25144] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 502.514338][T25160] tipc: Started in network mode [ 502.526249][T25160] tipc: Node identity 121424592ec4, cluster identity 4711 [ 502.533638][T25160] tipc: Enabled bearer , priority 11 [ 502.557648][T25165] netlink: 'syz.4.5173': attribute type 1 has an invalid length. [ 502.586837][T25165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.635471][T25171] netlink: 'syz.4.5173': attribute type 1 has an invalid length. [ 502.654024][T25171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.711289][T25175] netlink: 'syz.1.5176': attribute type 2 has an invalid length. [ 502.921525][T25202] Cannot find del_set index 3 as target [ 503.036789][T25210] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 503.043879][T25210] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 503.121621][T25216] mac80211_hwsim hwsim32 : renamed from wlan1 [ 503.646592][ T5937] tipc: Node number set to 1020273753 [ 503.896217][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 504.510010][T25310] gtp2: entered promiscuous mode [ 504.520928][T25310] gtp2: entered allmulticast mode [ 504.544102][T25307] syzkaller1: entered promiscuous mode [ 504.550948][T25307] syzkaller1: entered allmulticast mode [ 504.565445][T25316] netlink: 'syz.2.5221': attribute type 1 has an invalid length. [ 504.585301][T25310] netlink: 'syz.3.5220': attribute type 1 has an invalid length. [ 504.636115][T25316] bond3: entered promiscuous mode [ 504.641586][T25316] 8021q: adding VLAN 0 to HW filter on device bond3 [ 504.676855][T25316] __nla_validate_parse: 24 callbacks suppressed [ 504.676875][T25316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5221'. [ 504.817211][T25326] netlink: 'syz.2.5223': attribute type 10 has an invalid length. [ 504.883326][T25326] team0 (unregistering): Port device team_slave_1 removed [ 505.297413][T25358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.324982][T25358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5231'. [ 505.335748][T25356] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 505.394690][T25356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.796226][T25392] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5239'. [ 505.806622][T25391] IPv6: NLM_F_CREATE should be specified when creating new route [ 505.833027][T25392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5239'. [ 505.872660][T25392] Cannot find add_set index 192 as target [ 505.946749][T25408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5237'. [ 505.964184][T25408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5237'. [ 506.065709][T25423] netlink: zone id is out of range [ 506.079822][T25424] pim6reg1: entered promiscuous mode [ 506.085218][T25424] pim6reg1: entered allmulticast mode [ 506.095493][T25422] netlink: zone id is out of range [ 506.097676][T25423] netlink: zone id is out of range [ 506.103061][T25422] netlink: zone id is out of range [ 506.110431][T25426] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5249'. [ 506.111462][T25422] netlink: zone id is out of range [ 506.294490][T25438] netlink: 'syz.2.5254': attribute type 4 has an invalid length. [ 506.394678][T25446] netlink: 'syz.1.5257': attribute type 1 has an invalid length. [ 506.423018][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5254'. [ 506.468983][T25446] 8021q: adding VLAN 0 to HW filter on device bond9 [ 506.540799][T25450] bond9: (slave gretap3): making interface the new active one [ 506.557922][T25450] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 506.665308][T25457] netlink: 640 bytes leftover after parsing attributes in process `syz.0.5261'. [ 507.006795][T25475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5268'. [ 507.519125][T25514] sctp: [Deprecated]: syz.1.5281 (pid 25514) Use of int in maxseg socket option. [ 507.519125][T25514] Use struct sctp_assoc_value instead [ 507.772373][T25532] netlink: 'syz.3.5285': attribute type 1 has an invalid length. [ 507.888795][T25532] 8021q: adding VLAN 0 to HW filter on device bond10 [ 507.897883][T25535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.920285][T25525] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 507.989571][T25532] bond10: entered promiscuous mode [ 508.006370][T25532] bond10: entered allmulticast mode [ 508.017431][T25525] bond10: left allmulticast mode [ 508.029892][ T1088] batadv0: left promiscuous mode [ 508.052854][T25525] net_ratelimit: 117 callbacks suppressed [ 508.052872][T25525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.092845][T25545] netlink: 'syz.4.5291': attribute type 1 has an invalid length. [ 508.175694][T25558] xt_l2tp: v2 tid > 0xffff: 1114244 [ 508.337140][T25573] netlink: 'syz.4.5300': attribute type 6 has an invalid length. [ 508.692038][T25594] syzkaller0: entered promiscuous mode [ 508.698030][T25594] syzkaller0: entered allmulticast mode [ 509.229754][T25630] lo: Caught tx_queue_len zero misconfig [ 509.502424][T25655] sock: sock_timestamping_bind_phc: sock not bind to device [ 509.515266][T25655] netlink: 'syz.2.5321': attribute type 1 has an invalid length. [ 509.524571][T25656] netlink: 'syz.2.5321': attribute type 1 has an invalid length. [ 509.571888][T25655] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.870065][T25685] __nla_validate_parse: 14 callbacks suppressed [ 509.870085][T25685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5330'. [ 509.892463][T25686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5327'. [ 509.903152][T25686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5327'. [ 509.961985][T25692] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5332'. [ 510.079328][T25697] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 510.084022][T25699] validate_nla: 1 callbacks suppressed [ 510.084038][T25699] netlink: 'syz.1.5334': attribute type 39 has an invalid length. [ 510.379582][T25710] : renamed from bond0 [ 510.490738][T25717] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 510.618173][T25728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5344'. [ 510.684026][T25731] netlink: 'syz.1.5345': attribute type 1 has an invalid length. [ 510.701946][T25731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5345'. [ 510.799681][T25743] macvlan0: entered promiscuous mode [ 510.889750][T25750] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5351'. [ 510.931561][T25756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5352'. [ 510.953066][T25756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5352'. [ 511.080549][T25769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5356'. [ 511.551986][T25812] openvswitch: netlink: IPv6 tunnel dst address is zero [ 511.672009][T25802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.963076][T25833] syzkaller1: entered promiscuous mode [ 511.969082][T25833] syzkaller1: entered allmulticast mode [ 512.399461][T25857] netlink: 'syz.1.5386': attribute type 1 has an invalid length. [ 512.424957][T25857] sctp: [Deprecated]: syz.1.5386 (pid 25857) Use of int in max_burst socket option. [ 512.424957][T25857] Use struct sctp_assoc_value instead [ 512.453311][T25871] netlink: 'syz.0.5387': attribute type 10 has an invalid length. [ 512.475614][T25871] veth0_vlan: left promiscuous mode [ 512.508040][T25871] veth0_vlan: entered promiscuous mode [ 512.529005][T25871] team0: Device veth0_vlan failed to register rx_handler [ 512.804779][T25898] netlink: 'syz.1.5400': attribute type 3 has an invalid length. [ 512.985182][T25916] netlink: 'syz.4.5404': attribute type 10 has an invalid length. [ 513.289161][T25935] syzkaller0: entered promiscuous mode [ 513.294672][T25935] syzkaller0: entered allmulticast mode [ 513.462888][T25945] macsec0: entered promiscuous mode [ 513.468191][T25945] macsec0: entered allmulticast mode [ 513.496889][T25945] veth1_macvtap: entered allmulticast mode [ 513.502905][T25945] macsec0: left promiscuous mode [ 513.508275][T25945] macsec0: left allmulticast mode [ 513.513322][T25945] veth1_macvtap: left allmulticast mode [ 513.636786][T25951] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 513.856435][T25971] syzkaller1: entered promiscuous mode [ 513.862150][T25971] syzkaller1: entered allmulticast mode [ 514.447957][T25998] bond11: Invalid ad_actor_system MAC address. [ 514.458552][T25998] bond11: option ad_actor_system: invalid value (1) [ 514.468390][T25998] bond11 (unregistering): Released all slaves [ 514.832496][T26015] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 514.910333][T26025] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 514.921294][T26025] __nla_validate_parse: 26 callbacks suppressed [ 514.921310][T26025] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.5442'. [ 514.965836][T26027] ipt_rpfilter: unknown options [ 514.994943][T26029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5445'. [ 515.017749][T26029] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5445'. [ 515.193669][T26041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5443'. [ 515.224385][T26041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5443'. [ 515.247761][T26041] geneve2: entered promiscuous mode [ 515.253128][T26041] geneve2: entered allmulticast mode [ 515.384019][T26063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5455'. [ 515.564704][T26077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5457'. [ 515.612508][T26082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5458'. [ 515.785068][T26093] xt_hashlimit: size too large, truncated to 1048576 [ 515.942038][T26100] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5464'. [ 515.953321][T26100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5464'. [ 515.984908][T26100] netlink: 'syz.0.5464': attribute type 1 has an invalid length. [ 516.280908][T26128] xfrm1: entered allmulticast mode [ 516.416703][T26140] netlink: 'syz.4.5475': attribute type 3 has an invalid length. [ 516.487836][T26152] netlink: 'syz.0.5477': attribute type 10 has an invalid length. [ 516.506126][T26152] dummy0: entered promiscuous mode [ 516.513028][T26152] team0: Port device dummy0 added [ 516.529430][T26152] netlink: 'syz.0.5477': attribute type 1 has an invalid length. [ 516.784042][T26170] bond11: entered allmulticast mode [ 516.843167][T26177] netlink: 'syz.2.5486': attribute type 32 has an invalid length. [ 516.908518][T26177] bond5: Setting coupled_control to off (0) [ 517.074833][T26182] batadv0: entered promiscuous mode [ 517.084635][T26182] batadv0: entered allmulticast mode [ 517.098378][T26182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.114081][T26204] syzkaller0: entered promiscuous mode [ 517.119690][T26204] syzkaller0: entered allmulticast mode [ 517.345941][T26215] ip6tnl0: Caught tx_queue_len zero misconfig [ 517.484060][T26237] netlink: 'syz.3.5503': attribute type 26 has an invalid length. [ 517.501284][T26237] netlink: 'syz.3.5503': attribute type 26 has an invalid length. [ 517.964974][T26263] bond9: entered promiscuous mode [ 517.970279][T26263] bond9: entered allmulticast mode [ 517.975895][T26263] 8021q: adding VLAN 0 to HW filter on device bond9 [ 518.141136][T26280] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 518.169857][T26280] bond10: (slave lo): Enslaving as an active interface with an up link [ 518.178620][T26280] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 518.273747][T26286] bond12: entered allmulticast mode [ 518.454655][T26298] bond11: option min_links: invalid value (18446744073709551614) [ 518.473879][T26298] bond11: option min_links: allowed values 0 - 2147483647 [ 518.486969][T26298] bond11 (unregistering): Released all slaves [ 518.642690][T26316] syzkaller0: entered promiscuous mode [ 518.648402][T26316] syzkaller0: entered allmulticast mode [ 518.904878][T26330] bond6: entered promiscuous mode [ 518.910588][T26330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 518.931997][T26330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 518.945443][T26336] xt_cgroup: invalid path, errno=-2 [ 518.949867][T26330] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 518.959808][T26341] xt_cgroup: invalid path, errno=-2 [ 518.963108][T26330] bond6: (slave sit2): Error -95 calling set_mac_address [ 518.987274][T26338] tipc: Enabling of bearer rejected, failed to enable media [ 519.069228][T26346] IPVS: Unknown mcast interface: vcan0 [ 519.105202][T26348] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 519.122323][T26348] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 519.129721][T26348] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 519.374252][T26365] macsec2: entered promiscuous mode [ 519.381010][T26365] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 519.601183][ T5832] block nbd3: Receive control failed (result -32) [ 519.831873][T26387] tipc: Enabled bearer , priority 0 [ 519.894921][T26386] tipc: Disabling bearer [ 520.022940][T26416] __nla_validate_parse: 23 callbacks suppressed [ 520.022956][T26416] netlink: 300 bytes leftover after parsing attributes in process `syz.1.5558'. [ 520.028734][T26419] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 520.256798][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5565'. [ 520.277720][T26429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5562'. [ 520.289102][T26430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5565'. [ 520.302492][T26430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5565'. [ 520.359893][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5565'. [ 520.374519][T26430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5565'. [ 520.384638][T26430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5565'. [ 520.492672][T26451] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 520.498757][T26451] syzkaller1: linktype set to 823 [ 520.560121][T26456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5572'. [ 520.711757][T26466] netlink: 'syz.1.5574': attribute type 10 has an invalid length. [ 520.723231][T26466] team0: Device ipvlan1 failed to register rx_handler [ 520.823353][T26481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5576'. [ 521.005457][T26488] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 521.108501][T26494] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 521.191883][T26505] veth0: entered promiscuous mode [ 521.205817][T26505] veth0: left promiscuous mode [ 521.273600][T26508] netlink: 'syz.4.5586': attribute type 15 has an invalid length. [ 521.345515][ T1118] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 521.354581][ T1118] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 521.359060][T26508] netlink: 'syz.4.5586': attribute type 15 has an invalid length. [ 521.363906][ T1118] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 521.384615][ T1118] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 521.682360][T26544] xt_hashlimit: size too large, truncated to 1048576 [ 521.779734][T26547] : renamed from vxcan1 (while UP) [ 521.901224][T26556] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 521.912265][T26556] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 521.927039][T26553] veth0: entered promiscuous mode [ 521.947625][T26553] veth0: left promiscuous mode [ 521.995222][T26563] netlink: 'syz.3.5596': attribute type 1 has an invalid length. [ 522.110602][T26573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.127616][T26577] netlink: 'syz.2.5602': attribute type 10 has an invalid length. [ 522.237522][T26587] netlink: 'syz.0.5608': attribute type 25 has an invalid length. [ 522.299078][T26587] netlink: 'syz.0.5608': attribute type 25 has an invalid length. [ 522.335628][T26590] netlink: 'syz.0.5608': attribute type 3 has an invalid length. [ 523.179276][T26624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.187936][T26624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.203401][T26624] IPv6: NLM_F_CREATE should be set when creating new route [ 523.210664][T26624] IPv6: NLM_F_CREATE should be set when creating new route [ 523.614449][T26639] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 523.634728][T26639] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 524.375943][T26676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.394271][T26676] blkio.reset_stats is deprecated [ 524.549016][T26695] netlink: 'syz.3.5648': attribute type 1 has an invalid length. [ 524.767471][T26722] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 524.835482][T26728] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 524.860829][ T5832] block nbd4: Receive control failed (result -32) [ 524.990839][T26739] syzkaller0: entered promiscuous mode [ 524.999541][T26739] syzkaller0: entered allmulticast mode [ 525.497816][T26754] __nla_validate_parse: 31 callbacks suppressed [ 525.497837][T26754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5665'. [ 525.545190][T26782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5672'. [ 525.560496][ T5937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 525.741868][T26797] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 525.816273][ T5937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 525.836629][ T77] batman_adv: batadv0: IGMP Querier appeared [ 525.842636][ T77] batman_adv: batadv0: MLD Querier appeared [ 525.890650][T26804] openvswitch: netlink: Tunnel attr 29 out of range max 16 [ 526.045331][T26819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5685'. [ 526.079134][T26819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5685'. [ 526.169952][T26827] netlink: 'syz.2.5688': attribute type 12 has an invalid length. [ 526.181840][T26827] netlink: 'syz.2.5688': attribute type 29 has an invalid length. [ 526.194686][T26827] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5688'. [ 526.219869][T26834] geneve3: entered promiscuous mode [ 526.225991][T26834] geneve3: entered allmulticast mode [ 526.236455][ T77] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 526.245390][ T77] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 526.266248][ T77] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 526.275245][ T77] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 526.279085][T26837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5692'. [ 526.318873][T26834] netlink: 'syz.4.5691': attribute type 1 has an invalid length. [ 526.327056][T26834] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5691'. [ 526.430557][T26846] openvswitch: netlink: IP tunnel dst address not specified [ 526.587373][T26862] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5701'. [ 526.604655][T26860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5700'. [ 526.615190][T26860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5700'. [ 526.657992][T26860] erspan0: entered promiscuous mode [ 526.678868][T26860] gretap0: entered promiscuous mode [ 526.684770][T26860] debugfs: 'hsr0' already exists in 'hsr' [ 526.704176][T26860] Cannot create hsr debugfs directory [ 526.714430][T26860] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 526.727645][T26860] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 526.753508][T26875] ip6tnl0: Caught tx_queue_len zero misconfig [ 526.794538][T26881] netlink: 'syz.4.5707': attribute type 11 has an invalid length. [ 526.802848][T26881] netlink: 'syz.4.5707': attribute type 11 has an invalid length. [ 526.812348][T26881] openvswitch: netlink: Missing valid actions attribute. [ 526.819921][T26881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.160159][T26890] veth0: entered promiscuous mode [ 527.167314][T26894] veth0 (unregistering): left promiscuous mode [ 527.411907][T26905] netlink: 'syz.1.5716': attribute type 5 has an invalid length. [ 527.480281][T26909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 527.487553][T26909] IPv6: NLM_F_CREATE should be set when creating new route [ 527.596467][T26915] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 527.609339][T26913] bond13: Removing last arp target with arp_interval on [ 527.743849][T26923] syzkaller0: entered promiscuous mode [ 527.749871][T26923] syzkaller0: entered allmulticast mode [ 527.874536][T26934] netlink: 'syz.0.5729': attribute type 1 has an invalid length. [ 527.882910][T26934] netlink: 'syz.0.5729': attribute type 4 has an invalid length. [ 528.004622][T26932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.017242][T26932] tipc: Resetting bearer [ 528.098760][T26932] vlan0: left allmulticast mode [ 528.104545][T26932] veth0_vlan: left allmulticast mode [ 528.111387][T26932] vlan0: left promiscuous mode [ 528.202180][ T1088] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.228550][ T1088] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.256126][ T1088] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.298350][ T1088] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.311455][ T1088] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.328090][ T1088] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.328304][T26954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 528.380354][ T1088] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.408716][ T1088] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.420142][T26958] gre0: Caught tx_queue_len zero misconfig [ 528.475364][T26964] netlink: 'syz.2.5739': attribute type 25 has an invalid length. [ 528.497319][ T1109] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.505739][T26964] netlink: 'syz.2.5739': attribute type 25 has an invalid length. [ 528.519934][ T1109] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.528599][ T1109] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.542683][ T1109] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.672588][T26981] netlink: 'syz.3.5742': attribute type 1 has an invalid length. [ 528.887755][T26992] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 528.897146][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.909585][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.917772][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.932571][T26995] sctp: [Deprecated]: syz.1.5747 (pid 26995) Use of int in maxseg socket option. [ 528.932571][T26995] Use struct sctp_assoc_value instead [ 528.966889][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.974637][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.008655][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 529.020454][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 529.029265][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 529.037250][T27001] x_tables: unsorted underflow at hook 4 [ 529.043571][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 529.051689][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.465225][T27017] syzkaller0: entered promiscuous mode [ 529.525026][T26994] chnl_net:caif_netlink_parms(): no params data found [ 529.590623][T27032] netlink: 'syz.2.5753': attribute type 1 has an invalid length. [ 529.616552][T27032] netlink: 'syz.2.5753': attribute type 2 has an invalid length. [ 529.628442][T27032] netlink: 'syz.2.5753': attribute type 1 has an invalid length. [ 529.782598][T27041] 8021q: adding VLAN 0 to HW filter on device bond12 [ 529.855851][T27043] bond11: (slave syz_tun): Removing an active aggregator [ 529.870414][T27043] bond11: (slave syz_tun): Releasing backup interface [ 529.971023][T26994] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.978521][T26994] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.985706][T26994] bridge_slave_0: entered allmulticast mode [ 529.994116][T26994] bridge_slave_0: entered promiscuous mode [ 530.002901][T26994] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.018126][T26994] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.031258][T26994] bridge_slave_1: entered allmulticast mode [ 530.045004][T26994] bridge_slave_1: entered promiscuous mode [ 530.061244][T27063] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 530.115062][T26994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.140836][T26994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.231791][T26994] team0: Port device team_slave_0 added [ 530.244789][T26994] team0: Port device team_slave_1 added [ 530.318708][T26994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.330456][T26994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.358607][T26994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.386519][T26994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.393475][T26994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.449762][T26994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.585733][T26994] hsr_slave_0: entered promiscuous mode [ 530.600976][T26994] hsr_slave_1: entered promiscuous mode [ 530.610974][T26994] debugfs: 'hsr0' already exists in 'hsr' [ 530.638663][T26994] Cannot create hsr debugfs directory [ 530.790683][T27109] __nla_validate_parse: 22 callbacks suppressed [ 530.790702][T27109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5770'. [ 530.949387][T26994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.979497][T27128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5777'. [ 531.021649][T26994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.093050][T26994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.105929][ T5832] Bluetooth: hci4: command tx timeout [ 531.142317][T27131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.160135][T27131] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5778'. [ 531.184470][T26994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.563572][T27115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.587206][T26994] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 531.630032][T26994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.654628][T26994] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 531.675289][T26994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.729355][T27139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5782'. [ 531.740290][T26994] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 531.749351][T27144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5781'. [ 531.758638][T27144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5781'. [ 531.789720][T26994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.814897][T27139] bridge_slave_0 (unregistering): left allmulticast mode [ 531.823117][T27139] bridge_slave_0 (unregistering): left promiscuous mode [ 531.830382][T27139] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.869923][T26994] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 531.870953][T27152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5784'. [ 531.893558][T26994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.919883][T27145] ip6tnl2: entered allmulticast mode [ 532.162786][T26994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.241324][T27183] validate_nla: 7 callbacks suppressed [ 532.241342][T27183] netlink: 'syz.2.5792': attribute type 29 has an invalid length. [ 532.257031][T27183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5792'. [ 532.278844][T26994] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.292629][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.299747][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.309195][T27183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.334677][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.341845][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.396963][T27190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5794'. [ 532.475696][T27190] netlink: get zone limit has 4 unknown bytes [ 532.531219][T26994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.693730][T27208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5798'. [ 532.934537][T26994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.121804][T26994] veth0_vlan: entered promiscuous mode [ 533.144816][T26994] veth1_vlan: entered promiscuous mode [ 533.164093][T27238] team_slave_1: Caught tx_queue_len zero misconfig [ 533.171142][T27240] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 533.177368][ T5832] Bluetooth: hci4: command tx timeout [ 533.269446][T26994] veth0_macvtap: entered promiscuous mode [ 533.301525][T26994] veth1_macvtap: entered promiscuous mode [ 533.332368][T26994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.374066][T26994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.394143][ T1109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.411294][ T1109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.433616][ T1109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.452634][ T1109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.585671][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.594309][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.641729][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.650223][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.884008][T27273] tipc: Invalid UDP bearer configuration [ 533.884040][T27273] tipc: Enabling of bearer rejected, failed to enable media [ 533.957798][T27281] netlink: 'syz.0.5824': attribute type 4 has an invalid length. [ 533.981568][T27282] netlink: 'syz.1.5823': attribute type 1 has an invalid length. [ 533.993892][T27282] netlink: 'syz.1.5823': attribute type 1 has an invalid length. [ 534.003100][T27281] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002 [ 534.162158][T27293] xt_l2tp: v2 doesn't support IP mode [ 534.259553][T27302] netlink: 'syz.0.5832': attribute type 1 has an invalid length. [ 534.603210][T27337] Bluetooth: MGMT ver 1.23 [ 534.668307][T27341] team0: No ports can be present during mode change [ 535.021436][T27359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.119051][T27362] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 535.258017][ T5827] Bluetooth: hci4: command tx timeout [ 535.305025][T27374] netlink: 'syz.2.5857': attribute type 51 has an invalid length. [ 535.318401][T27374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.325932][T27374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.334513][T27374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.342119][T27374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.366648][T27374] : (slave batadv0): Releasing backup interface [ 535.731590][T27401] bond13: entered promiscuous mode [ 535.743284][T27401] bond13: entered allmulticast mode [ 535.747780][T27407] netlink: 'syz.3.5864': attribute type 1 has an invalid length. [ 535.749071][T27401] 8021q: adding VLAN 0 to HW filter on device bond13 [ 535.776171][T27407] netlink: 'syz.3.5864': attribute type 1 has an invalid length. [ 535.793805][T27407] netlink: 'syz.3.5864': attribute type 8 has an invalid length. [ 535.804494][T27407] __nla_validate_parse: 22 callbacks suppressed [ 535.804509][T27407] netlink: 582 bytes leftover after parsing attributes in process `syz.3.5864'. [ 535.822999][T27407] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5864'. [ 535.823546][T27409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5867'. [ 535.842509][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5866'. [ 536.005699][T27417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5870'. [ 536.028669][T27415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5869'. [ 536.200340][T27426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5873'. [ 536.303016][T27430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5875'. [ 536.365847][T27432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 536.649195][T27447] IPv6: sit2: Disabled Multicast RS [ 536.664462][T27447] sit2: entered allmulticast mode [ 536.847633][T27453] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.855286][T27453] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.944392][T27463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5884'. [ 537.000513][T27453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.014108][T27453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.140890][ T1109] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.166181][ T1109] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.214714][ T1109] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.246246][ T1109] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.286711][T27472] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5887'. [ 537.338987][ T5827] Bluetooth: hci4: command tx timeout [ 538.189011][T27518] Cannot find set identified by id 0 to match [ 538.951610][T27571] bond14: option packets_per_slave: invalid value (18446744073709551615) [ 538.960419][T27571] bond14: option packets_per_slave: allowed values 0 - 65535 [ 538.973015][T27571] bond14 (unregistering): Released all slaves [ 539.096487][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.822187][T27625] bond6: entered allmulticast mode [ 539.868970][T27629] netlink: zone id is out of range [ 539.886511][T27629] netlink: del zone limit has 4 unknown bytes [ 539.948053][T27627] bond14 (unregistering): Released all slaves [ 539.978540][T27637] netlink: 'syz.2.5935': attribute type 3 has an invalid length. [ 540.274321][T27652] batadv_slave_0: Caught tx_queue_len zero misconfig [ 540.752588][T27683] sctp: [Deprecated]: syz.3.5949 (pid 27683) Use of int in maxseg socket option. [ 540.752588][T27683] Use struct sctp_assoc_value instead [ 540.788335][T27687] sctp: [Deprecated]: syz.3.5949 (pid 27687) Use of int in maxseg socket option. [ 540.788335][T27687] Use struct sctp_assoc_value instead [ 540.810397][T27686] netlink: 'syz.4.5950': attribute type 1 has an invalid length. [ 540.958967][T27694] netlink: 'syz.4.5953': attribute type 1 has an invalid length. [ 540.966854][T27694] __nla_validate_parse: 18 callbacks suppressed [ 540.966869][T27694] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5953'. [ 540.982531][T27694] netlink: 'syz.4.5953': attribute type 1 has an invalid length. [ 540.990636][T27694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5953'. [ 541.134428][T27701] netlink: 'syz.2.5955': attribute type 1 has an invalid length. [ 541.144397][T27701] netlink: 'syz.2.5955': attribute type 7 has an invalid length. [ 541.152307][T27701] netlink: 'syz.2.5955': attribute type 8 has an invalid length. [ 541.181369][T27701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5955'. [ 541.198950][T27701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5955'. [ 541.257407][T27709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5958'. [ 541.355100][T27716] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5960'. [ 541.459922][T27728] netlink: 'syz.4.5964': attribute type 2 has an invalid length. [ 541.483527][T27728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5964'. [ 541.537575][T27737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5967'. [ 541.592358][T27739] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5968'. [ 541.623945][T27737] xt_hashlimit: size too large, truncated to 1048576 [ 541.928736][T27757] netlink: 'syz.0.5974': attribute type 1 has an invalid length. [ 541.956538][T27757] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5974'. [ 542.309853][T27783] sctp: [Deprecated]: syz.1.5982 (pid 27783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.309853][T27783] Use struct sctp_sack_info instead [ 542.357573][ T1088] tipc: Subscription rejected, illegal request [ 542.378609][T27783] sctp: [Deprecated]: syz.1.5982 (pid 27783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.378609][T27783] Use struct sctp_sack_info instead [ 542.842960][T27825] netlink: 'syz.0.5992': attribute type 5 has an invalid length. [ 542.981818][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 542.999843][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 543.007687][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 543.015626][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 543.032541][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 543.261783][T27831] chnl_net:caif_netlink_parms(): no params data found [ 543.695307][T27831] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.716528][T27831] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.723813][T27831] bridge_slave_0: entered allmulticast mode [ 543.732870][T27831] bridge_slave_0: entered promiscuous mode [ 543.775346][T27831] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.789883][T27831] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.806916][T27831] bridge_slave_1: entered allmulticast mode [ 543.814948][T27831] bridge_slave_1: entered promiscuous mode [ 543.893911][T27831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.922995][T27831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.002833][ T77] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.026168][ T77] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.067332][ T77] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.096402][ T77] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.131776][T27831] team0: Port device team_slave_0 added [ 544.168353][T27831] team0: Port device team_slave_1 added [ 544.188515][T27874] veth0_to_team: Caught tx_queue_len zero misconfig [ 544.334031][T27879] bond2: entered promiscuous mode [ 544.347350][T27879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.357827][T27831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.364785][T27831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.393836][T27831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.455813][T27887] bond2: (slave bridge1): making interface the new active one [ 544.477663][T27887] bridge1: entered promiscuous mode [ 544.484351][T27887] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 544.494440][T27831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.505701][T27831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.543298][T27831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.589013][T27896] bond14: option coupled_control: invalid value (192) [ 544.600255][T27896] bond14 (unregistering): Released all slaves [ 544.695754][T27831] hsr_slave_0: entered promiscuous mode [ 544.713914][T27831] hsr_slave_1: entered promiscuous mode [ 544.722924][T27831] debugfs: 'hsr0' already exists in 'hsr' [ 544.730265][T27831] Cannot create hsr debugfs directory [ 544.790449][T27907] tipc: Failed to obtain node identity [ 544.795977][T27907] tipc: Enabling of bearer rejected, failed to enable media [ 544.838709][T27909] tipc: Enabling of bearer rejected, media not registered [ 544.959843][T27917] sctp: [Deprecated]: syz.3.6015 (pid 27917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.959843][T27917] Use struct sctp_sack_info instead [ 545.096206][ T5827] Bluetooth: hci5: command tx timeout [ 545.246221][ T1644] IPVS: starting estimator thread 0... [ 545.336183][T27942] IPVS: using max 35 ests per chain, 84000 per kthread [ 545.368900][T27951] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 545.486000][T27958] delete_channel: no stack [ 545.610846][T27831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 545.624458][T27831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.639716][T27831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 545.659529][T27831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.686579][T27831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 545.719784][T27831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.740386][T27831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 545.756842][T27831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.782957][T27979] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 545.952291][T27992] syzkaller0: entered promiscuous mode [ 545.968997][T27992] syzkaller0: entered allmulticast mode [ 546.101923][T28005] __nla_validate_parse: 22 callbacks suppressed [ 546.101941][T28005] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6039'. [ 546.121070][T28005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6039'. [ 547.188387][ T5827] Bluetooth: hci5: command tx timeout [ 547.590685][T27831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.629829][T27831] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.650275][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.657430][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.717936][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.725099][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.102375][T28038] tipc: Enabled bearer , priority 24 [ 548.160425][T28038] validate_nla: 5 callbacks suppressed [ 548.160442][T28038] netlink: 'syz.3.6045': attribute type 2 has an invalid length. [ 548.174054][T28038] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6045'. [ 548.224029][T28035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6045'. [ 548.233908][T28035] pim6reg1: entered promiscuous mode [ 548.239353][T28035] pim6reg1: entered allmulticast mode [ 548.303587][T28045] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6047'. [ 548.314849][T27831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.447691][T28049] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6048'. [ 548.448019][T27831] veth0_vlan: entered promiscuous mode [ 548.492133][T27831] veth1_vlan: entered promiscuous mode [ 548.648860][T27831] veth0_macvtap: entered promiscuous mode [ 548.675027][T27831] veth1_macvtap: entered promiscuous mode [ 548.691921][T28057] netlink: 'syz.4.6051': attribute type 10 has an invalid length. [ 548.723085][T28057] .`: (slave ): Enslaving as an active interface with an up link [ 548.733920][T27831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.771827][T27831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.826383][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.835804][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.866271][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.877766][T28067] netlink: 'syz.0.6054': attribute type 1 has an invalid length. [ 548.990970][T28067] 8021q: adding VLAN 0 to HW filter on device bond3 [ 549.011317][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.095789][T28076] bond3: (slave veth5): Enslaving as an active interface with a down link [ 549.116695][T28080] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.217688][ T6239] tipc: Node number set to 573831845 [ 549.276406][ T5827] Bluetooth: hci5: command tx timeout [ 549.381820][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.393130][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.467269][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.633924][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.930151][T28097] openvswitch: netlink: IP tunnel dst address not specified [ 549.998902][T28092] geneve2: entered promiscuous mode [ 550.006919][ T1109] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 41987 - 0 [ 550.025158][ T1109] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 41987 - 0 [ 550.057521][T28100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6061'. [ 550.073022][ T1109] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 41987 - 0 [ 550.085034][T28100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.121137][ T1109] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 41987 - 0 [ 550.200994][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 550.213575][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 550.225669][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 550.235672][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 550.244181][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 550.544736][T28117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6066'. [ 550.690949][T28124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6067'. [ 550.721415][ T35] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 550.917692][ T35] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 551.001541][T28141] netlink: 'syz.4.6072': attribute type 18 has an invalid length. [ 551.027177][ T35] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 551.141225][T28151] netlink: 'syz.4.6072': attribute type 10 has an invalid length. [ 551.268422][ T35] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 551.298869][T28147] : renamed from virt_wifi0 [ 551.305516][T28151] bridge_slave_1: left allmulticast mode [ 551.312015][T28151] bridge_slave_1: left promiscuous mode [ 551.318780][T28151] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.331031][T28151] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 551.340848][ T5832] Bluetooth: hci5: command tx timeout [ 551.362236][T28103] chnl_net:caif_netlink_parms(): no params data found [ 551.505899][T28103] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.513520][T28103] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.521249][T28103] bridge_slave_0: entered allmulticast mode [ 551.530207][T28103] bridge_slave_0: entered promiscuous mode [ 551.539307][T28103] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.547446][T28103] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.555466][T28103] bridge_slave_1: entered allmulticast mode [ 551.564249][T28103] bridge_slave_1: entered promiscuous mode [ 551.597767][T28171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6081'. [ 551.613370][T28103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.619145][T28171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.629678][T28171] IPv6: NLM_F_CREATE should be set when creating new route [ 551.633797][T28103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.674743][T28103] team0: Port device team_slave_0 added [ 551.684161][T28103] team0: Port device team_slave_1 added [ 551.721544][T28103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.729267][T28103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.760927][T28103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.774276][T28103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.781563][T28103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.809511][T28103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.919875][T28103] hsr_slave_0: entered promiscuous mode [ 551.928825][T28103] hsr_slave_1: entered promiscuous mode [ 551.937271][T28103] debugfs: 'hsr0' already exists in 'hsr' [ 551.943874][T28103] Cannot create hsr debugfs directory [ 552.087053][T28182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6084'. [ 552.172732][T28183] veth1_to_bond: entered allmulticast mode [ 552.194435][T28182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6084'. [ 552.282793][T28181] veth1_to_bond: left allmulticast mode [ 552.303733][ T5832] Bluetooth: hci3: command tx timeout [ 552.410102][T28189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6086'. [ 552.548277][T28198] netlink: 'syz.2.6089': attribute type 1 has an invalid length. [ 552.792474][T28218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6090'. [ 553.073483][ T35] bond5 (unregistering): (slave vti0): Releasing backup interface [ 553.085114][ T35] vti0 (unregistering): left promiscuous mode [ 553.235428][ T35] bond9 (unregistering): (slave geneve2): Releasing active interface [ 553.264021][ T35] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 553.302351][ T35] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 553.311307][ T35] bridge2 (unregistering): left promiscuous mode [ 553.632626][ T35] bond0 (unregistering): Released all slaves [ 553.648683][ T35] bond1 (unregistering): Released all slaves [ 553.662440][ T35] bond2 (unregistering): Released all slaves [ 553.679802][ T35] bond3 (unregistering): Released all slaves [ 553.692727][ T35] bond4 (unregistering): Released all slaves [ 553.711207][ T35] bond5 (unregistering): Released all slaves [ 553.723174][ T35] bond6 (unregistering): Released all slaves [ 553.735494][ T35] bond7 (unregistering): Released all slaves [ 553.750423][ T35] bond8 (unregistering): Released all slaves [ 553.770154][ T35] bond9 (unregistering): Released all slaves [ 553.783598][ T35] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 553.793247][ T35] bond10 (unregistering): Released all slaves [ 553.805419][ T35] bond11 (unregistering): Released all slaves [ 553.824523][ T35] bond12 (unregistering): Released all slaves [ 553.837670][ T35] bond13 (unregistering): Released all slaves [ 553.850277][T28198] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 554.022081][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 554.040070][ T35] 9: left promiscuous mode [ 554.153789][ T35] tipc: Disabling bearer [ 554.183820][ T35] tipc: Left network mode [ 554.341012][T28255] Unsupported ieee802154 address type: 0 [ 554.353604][ T35] IPVS: stopping master sync thread 19515 ... [ 554.368449][T28255] Unsupported ieee802154 address type: 0 [ 554.385264][ T5832] Bluetooth: hci3: command tx timeout [ 554.390991][T28255] Unsupported ieee802154 address type: 0 [ 554.416453][T28255] Unsupported ieee802154 address type: 0 [ 554.422159][T28255] Unsupported ieee802154 address type: 0 [ 554.433060][T28255] Unsupported ieee802154 address type: 0 [ 554.439744][T28255] Unsupported ieee802154 address type: 0 [ 554.445422][T28255] Unsupported ieee802154 address type: 0 [ 554.453449][T28255] Unsupported ieee802154 address type: 0 [ 554.465682][T28255] Unsupported ieee802154 address type: 0 [ 554.471714][T28255] Unsupported ieee802154 address type: 0 [ 554.594684][T28264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6098'. [ 554.618026][T28267] netlink: 'syz.1.6099': attribute type 1 has an invalid length. [ 554.645899][T28275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6098'. [ 554.666950][T28275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6098'. [ 555.065032][T28304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6108'. [ 555.094507][T28299] ------------[ cut here ]------------ [ 555.100395][T28299] page_counter underflow: -512 nr_pages=512 [ 555.106289][T28299] WARNING: mm/page_counter.c:61 at page_counter_uncharge+0xd2/0x150, CPU#0: syz.2.6104/28299 [ 555.116456][T28299] Modules linked in: [ 555.120564][T28299] CPU: 0 UID: 0 PID: 28299 Comm: syz.2.6104 Not tainted syzkaller #0 PREEMPT(full) [ 555.129926][T28299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 555.139980][T28299] RIP: 0010:page_counter_uncharge+0xd8/0x150 [ 555.145960][T28299] Code: f7 e8 3c 8a f8 ff 4d 8b 36 4d 85 f6 74 6e e8 df 37 8e ff e9 6c ff ff ff e8 d5 37 8e ff 48 8d 3d 4e f5 df 0d 4c 89 fe 48 89 da <67> 48 0f b9 3a 4c 89 f7 be 08 00 00 00 e8 a6 8c f8 ff 4c 89 f0 48 [ 555.165555][T28299] RSP: 0018:ffffc90004147230 EFLAGS: 00010093 [ 555.171617][T28299] RAX: ffffffff8237881b RBX: 0000000000000200 RCX: ffff888068d4bd00 [ 555.179579][T28299] RDX: 0000000000000200 RSI: fffffffffffffe00 RDI: ffffffff90177d70 [ 555.187550][T28299] RBP: fffffffffffffe00 R08: ffff888025296387 R09: 1ffff11004a52c70 [ 555.195512][T28299] R10: dffffc0000000000 R11: ffffed1004a52c71 R12: 0000000000000001 [ 555.203492][T28299] R13: dffffc0000000000 R14: ffff888025296380 R15: fffffffffffffe00 [ 555.211454][T28299] FS: 0000000000000000(0000) GS:ffff888125451000(0000) knlGS:0000000000000000 [ 555.220372][T28299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.226942][T28299] CR2: 000000110c3a21cd CR3: 000000005cbc6000 CR4: 00000000003526f0 [ 555.234910][T28299] Call Trace: [ 555.238189][T28299] [ 555.241117][T28299] __hugetlb_cgroup_uncharge_folio+0x15e/0x510 [ 555.247267][T28299] free_huge_folio+0xaef/0x11e0 [ 555.252124][T28299] folios_put_refs+0x553/0x8d0 [ 555.256890][T28299] ? __pfx_folios_put_refs+0x10/0x10 [ 555.262168][T28299] ? mlock_drain_local+0x79/0x480 [ 555.267188][T28299] ? mlock_drain_local+0x28d/0x480 [ 555.272297][T28299] remove_inode_hugepages+0xf50/0x11a0 [ 555.277752][T28299] ? unwind_next_frame+0x1aaf/0x23c0 [ 555.283037][T28299] ? unwind_next_frame+0xa5/0x23c0 [ 555.288145][T28299] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 555.294048][T28299] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 555.300105][T28299] ? do_raw_spin_lock+0x12b/0x2f0 [ 555.305127][T28299] hugetlbfs_evict_inode+0xaf/0x260 [ 555.310314][T28299] ? __pfx_hugetlbfs_evict_inode+0x10/0x10 [ 555.316110][T28299] evict+0x61e/0xb10 [ 555.320000][T28299] ? __pfx_evict+0x10/0x10 [ 555.324401][T28299] ? do_raw_spin_unlock+0xf5/0x210 [ 555.329499][T28299] ? _raw_spin_unlock+0x28/0x50 [ 555.334334][T28299] ? iput+0xb25/0xe80 [ 555.338305][T28299] __dentry_kill+0x1a2/0x5e0 [ 555.342885][T28299] ? finish_dput+0xad/0x480 [ 555.347381][T28299] finish_dput+0xc9/0x480 [ 555.351707][T28299] __fput+0x691/0xa70 [ 555.355689][T28299] task_work_run+0x1d9/0x270 [ 555.360276][T28299] ? __pfx_task_work_run+0x10/0x10 [ 555.365374][T28299] ? do_raw_spin_unlock+0xf5/0x210 [ 555.370475][T28299] do_exit+0x70f/0x23c0 [ 555.374620][T28299] ? __pfx_do_exit+0x10/0x10 [ 555.379195][T28299] ? cgroup1_freezing+0x20/0x350 [ 555.384125][T28299] ? cgroup1_freezing+0x20/0x350 [ 555.389058][T28299] do_group_exit+0x21b/0x2d0 [ 555.393636][T28299] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.398827][T28299] get_signal+0x1284/0x1330 [ 555.403335][T28299] arch_do_signal_or_restart+0xbc/0x830 [ 555.408871][T28299] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 555.415020][T28299] ? do_raw_spin_lock+0x12b/0x2f0 [ 555.420026][T28299] ? lock_acquire+0xf0/0x2e0 [ 555.424610][T28299] exit_to_user_mode_loop+0x86/0x480 [ 555.429886][T28299] ? rcu_is_watching+0x15/0xb0 [ 555.434641][T28299] ret_from_fork+0x59d/0xb90 [ 555.439223][T28299] ? __pfx_ret_from_fork+0x10/0x10 [ 555.444322][T28299] ? __switch_to+0xc7d/0x1450 [ 555.448991][T28299] ret_from_fork_asm+0x1a/0x30 [ 555.453757][T28299] [ 555.456778][T28299] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 555.464042][T28299] CPU: 0 UID: 0 PID: 28299 Comm: syz.2.6104 Not tainted syzkaller #0 PREEMPT(full) [ 555.473397][T28299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 555.483445][T28299] Call Trace: [ 555.486710][T28299] [ 555.489631][T28299] vpanic+0x56c/0xa60 [ 555.493606][T28299] ? __pfx__printk+0x10/0x10 [ 555.498186][T28299] ? __pfx_vpanic+0x10/0x10 [ 555.502680][T28299] ? is_bpf_text_address+0x292/0x2b0 [ 555.507952][T28299] ? is_bpf_text_address+0x26/0x2b0 [ 555.513139][T28299] panic+0xc5/0xd0 [ 555.516941][T28299] ? __pfx_panic+0x10/0x10 [ 555.521354][T28299] ? ret_from_fork_asm+0x1a/0x30 [ 555.526285][T28299] __warn+0x315/0x4f0 [ 555.530255][T28299] ? page_counter_uncharge+0xd2/0x150 [ 555.535629][T28299] ? page_counter_uncharge+0xd2/0x150 [ 555.541001][T28299] __report_bug+0x29a/0x540 [ 555.545501][T28299] ? page_counter_uncharge+0xd2/0x150 [ 555.550864][T28299] ? __pfx___report_bug+0x10/0x10 [ 555.555891][T28299] ? __lock_acquire+0x6b5/0x2cf0 [ 555.560819][T28299] report_bug_entry+0x19a/0x290 [ 555.565663][T28299] ? page_counter_uncharge+0xd8/0x150 [ 555.571406][T28299] ? page_counter_uncharge+0xdd/0x150 [ 555.576776][T28299] handle_bug+0xce/0x200 [ 555.581008][T28299] exc_invalid_op+0x1a/0x50 [ 555.585498][T28299] asm_exc_invalid_op+0x1a/0x20 [ 555.590341][T28299] RIP: 0010:page_counter_uncharge+0xd8/0x150 [ 555.596325][T28299] Code: f7 e8 3c 8a f8 ff 4d 8b 36 4d 85 f6 74 6e e8 df 37 8e ff e9 6c ff ff ff e8 d5 37 8e ff 48 8d 3d 4e f5 df 0d 4c 89 fe 48 89 da <67> 48 0f b9 3a 4c 89 f7 be 08 00 00 00 e8 a6 8c f8 ff 4c 89 f0 48 [ 555.615929][T28299] RSP: 0018:ffffc90004147230 EFLAGS: 00010093 [ 555.621986][T28299] RAX: ffffffff8237881b RBX: 0000000000000200 RCX: ffff888068d4bd00 [ 555.629944][T28299] RDX: 0000000000000200 RSI: fffffffffffffe00 RDI: ffffffff90177d70 [ 555.637902][T28299] RBP: fffffffffffffe00 R08: ffff888025296387 R09: 1ffff11004a52c70 [ 555.645859][T28299] R10: dffffc0000000000 R11: ffffed1004a52c71 R12: 0000000000000001 [ 555.653814][T28299] R13: dffffc0000000000 R14: ffff888025296380 R15: fffffffffffffe00 [ 555.661779][T28299] ? page_counter_uncharge+0xcb/0x150 [ 555.667156][T28299] __hugetlb_cgroup_uncharge_folio+0x15e/0x510 [ 555.673304][T28299] free_huge_folio+0xaef/0x11e0 [ 555.678149][T28299] folios_put_refs+0x553/0x8d0 [ 555.682912][T28299] ? __pfx_folios_put_refs+0x10/0x10 [ 555.688190][T28299] ? mlock_drain_local+0x79/0x480 [ 555.693204][T28299] ? mlock_drain_local+0x28d/0x480 [ 555.698312][T28299] remove_inode_hugepages+0xf50/0x11a0 [ 555.703762][T28299] ? unwind_next_frame+0x1aaf/0x23c0 [ 555.709043][T28299] ? unwind_next_frame+0xa5/0x23c0 [ 555.714156][T28299] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 555.720058][T28299] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 555.726111][T28299] ? do_raw_spin_lock+0x12b/0x2f0 [ 555.731128][T28299] hugetlbfs_evict_inode+0xaf/0x260 [ 555.736316][T28299] ? __pfx_hugetlbfs_evict_inode+0x10/0x10 [ 555.742112][T28299] evict+0x61e/0xb10 [ 555.746004][T28299] ? __pfx_evict+0x10/0x10 [ 555.750419][T28299] ? do_raw_spin_unlock+0xf5/0x210 [ 555.755523][T28299] ? _raw_spin_unlock+0x28/0x50 [ 555.760366][T28299] ? iput+0xb25/0xe80 [ 555.764339][T28299] __dentry_kill+0x1a2/0x5e0 [ 555.768922][T28299] ? finish_dput+0xad/0x480 [ 555.773422][T28299] finish_dput+0xc9/0x480 [ 555.777745][T28299] __fput+0x691/0xa70 [ 555.781727][T28299] task_work_run+0x1d9/0x270 [ 555.786307][T28299] ? __pfx_task_work_run+0x10/0x10 [ 555.791411][T28299] ? do_raw_spin_unlock+0xf5/0x210 [ 555.796522][T28299] do_exit+0x70f/0x23c0 [ 555.800677][T28299] ? __pfx_do_exit+0x10/0x10 [ 555.805255][T28299] ? cgroup1_freezing+0x20/0x350 [ 555.810184][T28299] ? cgroup1_freezing+0x20/0x350 [ 555.815116][T28299] do_group_exit+0x21b/0x2d0 [ 555.819694][T28299] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.824883][T28299] get_signal+0x1284/0x1330 [ 555.829392][T28299] arch_do_signal_or_restart+0xbc/0x830 [ 555.834938][T28299] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 555.841090][T28299] ? do_raw_spin_lock+0x12b/0x2f0 [ 555.846112][T28299] ? lock_acquire+0xf0/0x2e0 [ 555.850708][T28299] exit_to_user_mode_loop+0x86/0x480 [ 555.855985][T28299] ? rcu_is_watching+0x15/0xb0 [ 555.860759][T28299] ret_from_fork+0x59d/0xb90 [ 555.865344][T28299] ? __pfx_ret_from_fork+0x10/0x10 [ 555.870444][T28299] ? __switch_to+0xc7d/0x1450 [ 555.875116][T28299] ret_from_fork_asm+0x1a/0x30 [ 555.879885][T28299] [ 555.883224][T28299] Kernel Offset: disabled [ 555.887554][T28299] Rebooting in 86400 seconds..