last executing test programs: 4.390532438s ago: executing program 1 (id=12536): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0xf8, 0x11, 0x148, 0xf8, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x7, 0x1], 0x4}, {0xffffffffffffffff, [0x7]}}}}, {{@ip={@multicast1, @empty, 0xffffffff, 0xffffffff, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x29}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2df) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r1, &(0x7f0000000340)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0xfffffffd, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x73a9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 4.388849593s ago: executing program 1 (id=12539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x98, 0x1, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x3c, 0x6, "98f7674ace4815c679c59d9ca55984cc2ff3cfa5559b5b2b807fd002b7d3cb7bee7040f15aef8667fea9763d6c9fd32ed3420539acd1ea0f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x808) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r3, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800000013"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.386704248s ago: executing program 4 (id=12542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001000000000000000000ac1ee100000000002000000000000000403403f438bd9e2800000000000000000000000000000000020000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x62, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 4.385207338s ago: executing program 1 (id=12544): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bba9"], 0x2c}, 0x1, 0x0, 0x0, 0xa000}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x210, r1, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "e0d65d6b0c"}, @ETHTOOL_A_BITSET_MASK={0xda, 0x5, "d82130e5248ee8b2e7f5640bc8911c0e4356b3b9ac7c2fb28ea1cf1498534d63dd2307c5b43023e6f5b4cfa1361c5a55337af3a30d5cdec70e8137bc2678bc2d1ec081c51c29882790330b050af68a701fe988470ce0c4d5395bff9c8cc56862aeb1d168988505f11b3ebc0a04bf301a7f8e168595c3d269d4883bdbdb793744c4185cd1c5b5e2c786eff27465712dd0b0c485329a9f2f05f9a2685f4395cf8ef187e1f86865646da5d04c6d22ff162b6481e25d53949ebaa64714855d92d489141baf4833cfd033fb775a8bb23c8455d847c73ea306"}]}, @ETHTOOL_A_FEATURES_WANTED={0xcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "a334a6529ffca425711a014127083a5780eb0f159d26851b0e540f34991cee4f6ee2bf5f201c1776c3346f6d42b6d428425b6c31607b9b5578bfbbfe8d407b23a17693850388ad6d671796a5c444d8ae6fccc26fcf62785d76541b555058663a2120deae5b463e3e198185b96f7155970bed2f8ddd043ed2737e35d5ed4d8e2ba1ad96abdc1d6dc908f555ebda519993bf1886cb494de426b5820f3ef246e749335b80e16c3f72dc371f6f7f25cfcab0b563d0b183e7a4d6afde8d94be59a7981181bd"}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000000)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e40)={0x0, 0xe, 0xc}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf001}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r9, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r8}, 0x20) close(r9) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f00)={0x0, 0xfffffffc, 0x10}, 0xc) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x12, 0x17, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0x7, 0x8, 0xa, 0x10}, @jmp={0x5, 0x0, 0xb, 0x1, 0x7, 0x30, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @func]}, &(0x7f0000000740)='GPL\x00', 0xfffffffe, 0x15, &(0x7f0000000780)=""/21, 0x1e00, 0x1d, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000fc0)=[0xffffffffffffffff, r5, r0, r6, r7, r9, r10, r11, 0xffffffffffffffff, r12], &(0x7f0000001000)=[{0x4, 0x5, 0xf, 0x5}, {0x4, 0x5, 0x10, 0xb}, {0x2, 0x1, 0x2, 0x3}, {0x1, 0x1, 0x1, 0x7}, {0x5, 0x3, 0x2, 0x7}, {0x4, 0x2, 0xe}, {0x1, 0x4, 0xa, 0x6}], 0x10, 0x7}, 0x94) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r13}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r14, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x410) 4.381587312s ago: executing program 4 (id=12547): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000002000010000000000ffffffff0a144000000000070000000014000200fc17000000000000000000000000000014000100200100000000000000000000000000e3070017004e214e22"], 0x4c}, 0x1, 0x0, 0x0, 0xc011}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@getchain={0x2c, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xfff2}, {0xffe0}}, [{0x8, 0xb, 0x1}]}, 0x2c}}, 0x400c0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000029000000000000000000983f553831db5b"], 0x58}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$NL80211_CMD_DEL_INTERFACE(r9, 0x0, 0x410) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000200009828f2000000000600004c21b6340dac436f00000c00168008000400000000002e05e22016a8d095df02e5146492ac117f599490188b230ba568478c7ba043f5fc3b79137f232393740382d27923a7a1db1d9be450f468059bdf802233717d780c895788e6976c31173bb866e2c72a95d74472e62749dfc9d4853156a034b074646a6f9842bac5037aaad5c79e"], 0x30}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x78392403d8da3499, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x1, 0xa}, {0x6}, {0xf, 0x9}}}, 0x24}}, 0x40004) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000002fcffffff0000969806f5f6000000000000a865ea008d52334e7bdbc29fbd4915b783c008f475540d6899656aab5cf1a31b4ae24c9166603e0e25eda4425eb32f681898933cdb940a39c64e2511d0ff73", @ANYRESDEC=r3, @ANYBLOB="00050400000000001c0012800b000100697036746e6c00000c00028006000f0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004010) 4.224850349s ago: executing program 3 (id=12549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="a976cc", 0x3}], 0x1, 0x1e9b, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x337) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf25070000000a0004007770616e3000000008000100010100000c0006000300000003000000"], 0x34}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) setsockopt$inet_int(r1, 0x0, 0x31, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000000)=0x10, 0x2) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000340)=""/229, &(0x7f0000000440)=0xe5) 4.168193449s ago: executing program 4 (id=12551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x22020600) unshare(0x8000200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001dc0)=@newchain={0x80, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xd}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0xa}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0xffffff00, 0xffffff00]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000380)="a1c54c666c7186d9279a75d7c41a028de38a4e5931117735c0a89d920648cda3fe903f0034a9e528ca0a210eaeebb3b420fe3a2fd388707ecb30998dea1f8e8d0a5561c6657945060cf23724bec9f5fb505af315a9fc659ed43d11a3a87dc98b40c32cb74c752a7ad4fa313f7f632b5f7964507d9ca760dd389f09f77322223c4efbeff2659bf7715f61ae82b58baa634c0ee7230876e63833a8a43138d9ea20d97f3ddf051c607e2a766bb286536a4fcfd331e32268", &(0x7f0000000280)=@udp6=r5, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r4}, 0x20) close(r4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f8343fe0d53db903cbe1e2197e3d", 0x3a}], 0x1) 3.959320951s ago: executing program 1 (id=12553): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, 0x4, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7b6b6726}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x74965834}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.79359871s ago: executing program 1 (id=12555): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x3, 0x80000000, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x1) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r9, 0x495b866df80b4e6b}, 0x14}}, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r10, &(0x7f0000000440), &(0x7f00000004c0)=0x20) 3.793050005s ago: executing program 3 (id=12556): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000004c0)={r1, &(0x7f0000000000)='syzkaller\x00', 0x365000, &(0x7f0000000040)={@_ha_fsid={[0x10000, 0x2]}, {0x3, 0x6, 0xacb591f7, 0x6}}, 0x5, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x7}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000004c0)={r1, &(0x7f0000000000)='syzkaller\x00', 0x365000, &(0x7f0000000040)={@_ha_fsid={[0x10000, 0x2]}, {0x3, 0x6, 0xacb591f7, 0x6}}, 0x5, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x7}) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000043}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 3.59097564s ago: executing program 3 (id=12559): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="070f2abd7000ffdbdf2501000000240002800c000180080001000800000014000180080001030000d900080001000500000004000300"], 0x3c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) syz_emit_ethernet(0x4e, &(0x7f0000001740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @local}}}}}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18025a19fb86000000000000000000000300c0ff400000a60095000000d303e63ce1"], 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x80) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x18, r8, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x4, 0xe}]}, 0x18}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3], 0x30}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r11, &(0x7f0000000440), &(0x7f0000000040)=@udp=r10}, 0x20) r12 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2b}, {0x0, 0x6faa, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, 0x0, 0x0) recvmmsg(r10, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1}, 0x9}], 0x1, 0x7, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r11, 0x58, &(0x7f00000003c0)}, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000fcdbdf250100000014000100fe80000000000000000000000000002405000500030000000800030003000000080002000100000005000600f700000008000200070000050000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 3.505899179s ago: executing program 0 (id=12560): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000000c0)={0x21}) 3.471626949s ago: executing program 0 (id=12561): r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000440)={'ipvs\x00'}, &(0x7f0000000480)=0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6d4325d8bb5ca191a6573bedaf9c388064e11581fd490f5f11f0ef781e1ae17c7fd28c949d82777e96096b48b9995e660c7d6cc8ef8a7cf7e74ae9ffe177fe4d83bc066a1cd464e0649afc3be5fe79d9ecebe4763f04a6e20c14f2ec28fa98427cd1f9f0f865a1239c5e237b323ae43cedd26df837e097b88d5741cfa39158f3a45cb70020d8e421ce7d490f25c4552715df263e77490ec69ea4d481173bef9eb72eed0e2ab3dcdb8abe5bbfbe7a6bb4a1205245ef3b94fd48f917bfbac2b41a924b736dfe76ca48daa39d3fdc56b8f80869d58da508a83a04b79e32454292fc92"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @mss={0x2, 0xe}, @mss, @mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0xa, 0x7}], 0x7) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="150b2abd7000fddbdf250100000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x1400c000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.086199939s ago: executing program 4 (id=12563): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x901}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000001200000000005f"], 0x0, 0x4f}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x141, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}}, 0x0) 670.865024ms ago: executing program 1 (id=12566): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x2b, 0x0, &(0x7f00000003c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r5, 0xfffff789) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r8 = accept(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfff, 0x0, 0x200, 0x0, 0xf4a8, 0xabe6, 0x6, 0x5, 0x85c}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r11, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x88044}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 586.072986ms ago: executing program 0 (id=12567): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3f}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000680)={@fallback=r2, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r2, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r1, r1, 0x2f, 0x2028, 0x4, @void, @void, @value=r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r7, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x54}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x56}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000040) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x30, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 584.372417ms ago: executing program 4 (id=12568): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000130005002cbd71000000000000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000014000300766c616e3000000000000074ce665944211109ccb3"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 583.699019ms ago: executing program 3 (id=12569): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r1], 0x10c}, 0x1, 0x0, 0x0, 0x400c1}, 0x4000) r3 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet_sctp(r3, &(0x7f0000002ec0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}], 0x1, 0x8000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x50}}, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x324) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = socket$inet6(0x10, 0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a30"], 0x118}}, 0x0) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 522.029829ms ago: executing program 4 (id=12570): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x9, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./cgroup/cgroup.procs/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000010a40)=[0x93e6], 0x0, 0x0, 0x1}}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r4, 0x800, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 519.022675ms ago: executing program 2 (id=12571): r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@broadcast, @private=0xa010100}) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x8000000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) 417.153495ms ago: executing program 0 (id=12572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000a8a57dfbb8f2c81a2c2df6dd18d097819455e2a241f021eeed", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r1, 0x0, 0x0, 0x2100, 0x0, 0x0) (async) recvfrom$inet(r1, 0x0, 0x0, 0x2100, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f00000003c0)=0x14) r4 = accept(r3, &(0x7f0000000240)=@in={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) 370.398719ms ago: executing program 2 (id=12573): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005f80)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="19022bbd7000fedbdf25210000000c0005000000000000000000050020000000000009001f007068793100000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 341.190208ms ago: executing program 3 (id=12574): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000180), 0x1, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000000000000800000000220000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000006e03ff95"], 0x48}, 0x2}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8400210000e2165e859497b0195d3a7993afcff1c05a010021169a07df38542917ce2e1231db4048eed4898ed91ed76095ba28eef7aecaf8bb255bf9d9e591f96e5c2451981e791b3354e0d71d598a88eaeda9f94a60ce4f5ed43f92e9a70edc34f1e9d4e51d080c261e03e2f2195046f905de79c57cf4ed61715d5fa44cc92b76fbfd5f767a56f10ea9306e6828537de18ea07bf99cbeb1a430da48efa3b54ed36fd98b6ee84c", @ANYRES16=r3, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x10d4}, 0x4400) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 284.235267ms ago: executing program 2 (id=12575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x7, 0x1ff, "fac16a590b17"}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 177.886986ms ago: executing program 2 (id=12576): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x6d) listen(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, &(0x7f0000000180)) (rerun: 64) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) (async) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) (async, rerun: 64) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (rerun: 64) 143.457226ms ago: executing program 3 (id=12577): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000001200010a00000000000000000a"], 0x26}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x10, 0x0, [{}]}}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) unshare(0x20000400) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000030800450000280000000000069078ac1435bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5001000090780000"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002b80), 0x0, 0x4404c880) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "ea54e5922c671b78", "b4f13b898afc0e3d2897a831ffd038ac88fe3c849bde3ff1260088f480867953", "987d6149", "3bb52c5c8b9404e2"}, 0x38) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="fdffffffe1ffffffffffffffffffffff00000000000000004fc400000000000000000000000000000000000000000000000000000000000000000000000010000000000000000002000000000000006fbb7b669c49a3b700000000000000000000000000fc84ee740000000000000084010500ac1414bb000000000000008000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe800000000000008a1a00"/202], 0x23c}}, 0x4004000) 124.231254ms ago: executing program 0 (id=12578): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="068b9b0000000400000003000000050000000000000053c7451a7e1c215c1928eeaaeefdbd84e2ee2ca7fc99551d5971443ca9428495e12b9f5626d0f40d00d54691d2eb46a25e0286fc3bfb910082046c80124c2b7a33d38797fe3c0154d810ec84738e4992b741d47f835133068b1d8597eab5634d4de2be9065726df60cbfe6d0e74cb798dd05ac94cafe2bd49dc18a4549fe3ad8ba69ef9e5ca7e5720a475f108b8c84111c61f98547fc9f77fed119fc0343dc387bb6ad15b02064f4f0a04e2df76af74131565ec37c6753a1b87b05ad8dc7d15be199b46962aea69c0b2db2cbf8240386e20d0a2518ef3d1d81d6be0120312a6f21493d292e28144213db14c81d94101b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 58.028248ms ago: executing program 2 (id=12579): ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x3, 0x4}, @hci={0x1f, 0x4, 0x3}, @can, 0xff81, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xa, 0x5}) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x268, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x391a65ee, 0x31}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x1f, 0x24, [{0x16}, {0xc, 0x1}, {0x5}, {0x6, 0x1}, {0xc, 0x1}, {0x24, 0x1}, {0x1, 0x1}, {}, {0x24}, {0x24}, {0x16, 0x1}, {0x4, 0x1}, {0x24, 0x1}, {0x6, 0x1}, {0x1b, 0x1}, {0x6, 0x1}, {0x5}, {0x1}, {0xc}, {0x9}, {0x4, 0x1}, {0x6, 0x1}, {0xb}, {0xb, 0x1}, {0x18}, {0x3, 0x1}, {0x2}]}, @NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0xe0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffe, 0x753, 0x4, 0x6, 0x925c, 0x4, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x464, 0x4, 0x4, 0x7fff, 0x5, 0x81, 0x0, 0xea5]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x8}, {0x1, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x8}, {0x5}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x9}, {0x3, 0xa}, {0x3, 0x1}, {0x3, 0xa}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x2}, {0x0, 0x3}, {0x6, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x7}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x4}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0x8}, {0x6, 0x6}, {0x6, 0x5}, {0x7, 0xa}, {0x0, 0x4}, {0x1, 0xa}, {0x1, 0x2}, {0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x2}, {0x3, 0x5}, {0x6, 0x6}, {0x3, 0xa}, {0x5, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x5}, {0x6}, {0x1, 0x7}, {0x1, 0x8}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x5, 0x7}, {0x4, 0xa}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x5}, {0x4}, {0x0, 0x6}, {0x5, 0x1}, {0x2, 0x5}, {0x5, 0x3}, {0x2}, {0x2, 0x1}, {0x5, 0x5}, {0x3, 0x6}, {0x4, 0x9}, {0x4, 0x1}, {0x7, 0x7}, {0x3, 0x7}, {0x1, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0xa}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x8}, {0x6}, {0x0, 0x5}, {0x5}, {0x0, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x6, 0x4}, {0x1}, {0x2, 0x6}, {0x2, 0x5}, {0x0, 0xa}, {0x6, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x7}, {0x4, 0x3}, {}, {0x0, 0x3}, {0x1, 0x9}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x8}, {0x4, 0x6}, {0x6, 0x6}, {0x6, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x4}, {0x1, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x2, 0xa}, {0x7, 0x8}, {0x6}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x4}, {0x4, 0x6}, {0x5, 0x9}, {0x5, 0x2}, {0x3, 0x9}, {0x6, 0x3}, {0x3, 0x1}, {0x7, 0x7}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x1}, {0x6}, {0x1, 0x3}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x7}, {0x2}, {0x2, 0x8}, {0x4}, {0x4, 0x9}, {0x1}, {0x5, 0x8}, {0x4, 0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x6}, {0x2, 0x1}, {0x1, 0x5}, {0x7, 0x3}, {0x7}, {0x7, 0xa}, {0x1, 0x5}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x6, 0xfc00, 0x6, 0x7, 0xa, 0x7, 0xe1]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x4a, 0x3, 0x6, 0x1b, 0x0, 0x45, 0x1b, 0x12, 0x4, 0x9, 0x12, 0x6c, 0x3, 0x48, 0x0, 0x48, 0xc, 0x15, 0x1a]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xe0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0xd, 0x2, 0x8, 0x8d4, 0x4, 0x399]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x5, 0x3}, {0x7, 0x2}, {0x3, 0x3}, {0x5}, {0x1, 0x6}, {0x4, 0x2}, {0x1}, {0x4, 0x7}, {0x3, 0x4}, {0x6, 0xa}, {0x6, 0x2}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x5}, {0x4, 0xa}, {0x3, 0x2}, {0x6, 0x5}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0x9}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0x4}, {0x3}, {0x6, 0x4}, {0x6, 0xa}, {0x4, 0x7}, {0x6, 0x3}, {0x2, 0x9}, {0x2, 0x7}, {0x6, 0x9}, {0x3}, {0x7}, {0x6}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0x8}, {0x1}, {0x2, 0x3}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x3}, {0x7, 0x2}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x938814813067d4de, 0x6c, 0x18, 0x1b, 0x24, 0x6c, 0x18, 0x5, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x10, 0x0, 0xa, 0x5, 0x6, 0x7af7, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x34, 0x16, 0x5, 0x36, 0x4, 0x12, 0x9, 0x2, 0x24, 0x3, 0x24, 0xc, 0x24, 0x4, 0x60, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfffd, 0xc4b9, 0xb, 0x51f0, 0x7, 0x1, 0x9]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x8, 0x6, 0xff, 0x9, 0x4, 0x51, 0xff]}}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x268}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 40.086181ms ago: executing program 0 (id=12580): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x5c}, 0x1, 0x620b, 0x0, 0xc0}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250200000008000300", @ANYRES32=r9, @ANYBLOB="0c009900090000007400000004008700080026006c09000008009f0006"], 0x3c}}, 0x20000000) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) 0s ago: executing program 2 (id=12581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x5460, 0x96b5376b91506d81) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xd, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0) pipe(&(0x7f0000000280)) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000400)={r0, &(0x7f00000002c0)='\x9a@!{\'\x00', 0x320400, &(0x7f0000000340)={@_ha_fsid={[0x55, 0x5]}, {0x3, 0x10, 0x8, 0x4}}, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0xd}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003"], 0x18, 0x40045}], 0x1, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r8, 0x0, 0x1, 0x0, &(0x7f00000010c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) kernel console output (not intermixed with test programs): ady. Interface lo may have been left with an inconsistent configuration, please check. [ 1272.523626][T13696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1272.661400][T13706] team0: Port device team_slave_0 removed [ 1272.873811][T13719] netlink: 'syz.3.10656': attribute type 8 has an invalid length. [ 1273.137918][T13737] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1273.174410][T13739] lo: entered promiscuous mode [ 1273.211835][T13739] netlink: 'syz.4.10660': attribute type 2 has an invalid length. [ 1273.243190][T13739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1273.976741][T13791] netlink: 'syz.4.10677': attribute type 16 has an invalid length. [ 1273.991644][T13790] netlink: 'syz.4.10677': attribute type 16 has an invalid length. [ 1274.003542][T13791] netlink: 'syz.4.10677': attribute type 3 has an invalid length. [ 1274.014538][T13790] netlink: 'syz.4.10677': attribute type 3 has an invalid length. [ 1274.340515][T13815] openvswitch: netlink: Duplicate key (type 2). [ 1274.568420][T13830] mac80211_hwsim hwsim148 syzkaller0: entered promiscuous mode [ 1274.595785][T13830] mac80211_hwsim hwsim148 syzkaller0: entered allmulticast mode [ 1274.611102][T13829] __nla_validate_parse: 10 callbacks suppressed [ 1274.611420][T13829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10687'. [ 1274.628615][T13830] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1274.712527][T13833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10690'. [ 1274.751750][T13833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10690'. [ 1274.908765][T13833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1274.921754][T13850] validate_nla: 1 callbacks suppressed [ 1274.921768][T13850] netlink: 'syz.3.10692': attribute type 29 has an invalid length. [ 1274.980446][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10692'. [ 1275.031807][T13855] netlink: 'syz.3.10692': attribute type 29 has an invalid length. [ 1275.059810][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10692'. [ 1275.098623][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10694'. [ 1275.142349][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10694'. [ 1275.311913][T13872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1275.342690][T13877] netlink: 'syz.0.10701': attribute type 1 has an invalid length. [ 1275.346781][T13875] netlink: 324 bytes leftover after parsing attributes in process `syz.2.10700'. [ 1275.396966][T13872] xfrm1: entered allmulticast mode [ 1275.544256][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10704'. [ 1275.599331][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10704'. [ 1275.662740][T13896] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1276.091991][T13921] syz_tun: entered allmulticast mode [ 1276.251301][T13921] syz_tun: left allmulticast mode [ 1276.611028][T13954] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1276.619713][T13954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1276.764738][T13962] netlink: 'syz.0.10723': attribute type 12 has an invalid length. [ 1276.776953][T13963] netlink: 'syz.3.10726': attribute type 2 has an invalid length. [ 1277.160319][T13985] syzkaller0: entered promiscuous mode [ 1277.179027][T13985] syzkaller0: entered allmulticast mode [ 1277.210512][T13991] netlink: 'syz.1.10733': attribute type 1 has an invalid length. [ 1277.242762][T13991] gretap0: entered promiscuous mode [ 1277.353013][T13996] xt_policy: neither incoming nor outgoing policy selected [ 1277.390835][T13998] : entered promiscuous mode [ 1277.480513][T14004] netlink: 'syz.2.10734': attribute type 10 has an invalid length. [ 1277.500624][T14004] team0: Port device dummy0 added [ 1277.835129][T14020] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 1277.993943][T14029] rdma_rxe: rxe_newlink: failed to add lo [ 1278.460523][T14040] mac80211_hwsim hwsim148 syzkaller0: Caught tx_queue_len zero misconfig [ 1278.503302][T14041] netlink: 'syz.3.10752': attribute type 1 has an invalid length. [ 1278.613210][T14061] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 1278.830828][T14078] ip6erspan0: entered promiscuous mode [ 1279.092409][T14094] netlink: 'syz.1.10768': attribute type 29 has an invalid length. [ 1279.102326][T14094] netlink: 'syz.1.10768': attribute type 29 has an invalid length. [ 1279.163010][T14094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1279.273277][T14047] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1279.288388][T14047] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1279.329125][T14047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1279.344122][T14047] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1279.418259][T14114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1279.469267][T14114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1279.499686][T14122] xt_ecn: cannot match TCP bits for non-tcp packets [ 1279.681608][T14129] ipvlan1: entered promiscuous mode [ 1279.699753][T14129] ipvlan1: entered allmulticast mode [ 1279.715651][T14129] veth0_vlan: entered allmulticast mode [ 1279.721561][T14135] __nla_validate_parse: 22 callbacks suppressed [ 1279.721578][T14135] netlink: 264 bytes leftover after parsing attributes in process `syz.2.10782'. [ 1279.734395][T14129] veth1_macvtap: left promiscuous mode [ 1279.752976][T14139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10780'. [ 1279.764021][T14140] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.10779'. [ 1279.776598][T14129] macsec0: entered allmulticast mode [ 1279.992463][T14151] validate_nla: 1 callbacks suppressed [ 1279.992488][T14151] netlink: 'syz.1.10786': attribute type 29 has an invalid length. [ 1280.018574][T14160] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10788'. [ 1280.020329][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10786'. [ 1280.040423][T14152] netlink: 'syz.1.10786': attribute type 29 has an invalid length. [ 1280.049768][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10786'. [ 1280.080321][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10788'. [ 1280.410897][T14184] openvswitch: netlink: Tunnel attr 104 out of range max 16 [ 1280.881869][T14213] veth3: entered allmulticast mode [ 1281.142067][T14224] netlink: 'syz.0.10801': attribute type 1 has an invalid length. [ 1281.345117][T14224] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1281.878527][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10811'. [ 1282.247869][T14285] xt_hashlimit: size too large, truncated to 1048576 [ 1282.779713][T14320] bond_slave_0: Device is already in use. [ 1282.781532][T14314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10820'. [ 1283.072813][T14341] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1283.142103][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10827'. [ 1283.292297][T14355] syz_tun: left allmulticast mode [ 1283.904996][T14396] Bluetooth: hci3: Opcode 0x080f failed: -22 [ 1284.318976][T14403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1284.982756][T14441] __nla_validate_parse: 4 callbacks suppressed [ 1284.982774][T14441] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10861'. [ 1285.121196][T14449] veth5: entered promiscuous mode [ 1285.131653][T14449] veth5: entered allmulticast mode [ 1285.252840][T14458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10868'. [ 1285.348215][T14465] netlink: 248 bytes leftover after parsing attributes in process `syz.4.10868'. [ 1285.380269][T14465] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10868'. [ 1285.825162][T14499] tipc: Enabling of bearer rejected, failed to enable media [ 1286.159071][T14520] netlink: 'syz.4.10880': attribute type 1 has an invalid length. [ 1286.192430][T14520] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10880'. [ 1286.232713][T14520] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10880'. [ 1286.250895][T14520] netlink: 'syz.4.10880': attribute type 1 has an invalid length. [ 1286.263575][T14520] netlink: 'syz.4.10880': attribute type 8 has an invalid length. [ 1286.275096][T14520] netlink: 606 bytes leftover after parsing attributes in process `syz.4.10880'. [ 1286.357268][T14531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10884'. [ 1286.379839][T14507] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1286.564674][T14507] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1286.566902][T14539] netlink: 'syz.2.10887': attribute type 1 has an invalid length. [ 1286.681653][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10887'. [ 1286.753076][T14552] nbd: must specify an index to disconnect [ 1286.816333][T14552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10890'. [ 1286.978257][T14507] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1287.081025][T14558] netlink: 'syz.4.10891': attribute type 1 has an invalid length. [ 1287.157876][T14507] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1288.005158][T14572] veth0_vlan: left promiscuous mode [ 1288.031727][T14572] veth1_vlan: left allmulticast mode [ 1288.333282][T14579] bridge4: entered promiscuous mode [ 1288.349332][T14579] bridge4: entered allmulticast mode [ 1288.386919][ T6526] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.557123][ T6528] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.600924][ T6528] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.670202][ T6528] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.992934][ T6509] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.104719][ T6531] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.219373][ T6531] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.310064][T10877] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.341606][T14643] ip6tnl0: Caught tx_queue_len zero misconfig [ 1289.677832][T14666] netlink: 'syz.2.10918': attribute type 10 has an invalid length. [ 1289.725081][T14666] dummy0: entered promiscuous mode [ 1289.798439][T14666] team0: Port device dummy0 removed [ 1289.840362][T14666] bridge0: port 3(dummy0) entered blocking state [ 1289.864309][T14666] bridge0: port 3(dummy0) entered disabled state [ 1289.882327][T14666] dummy0: entered allmulticast mode [ 1290.292581][T14712] __nla_validate_parse: 8 callbacks suppressed [ 1290.292603][T14712] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10926'. [ 1291.016864][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10936'. [ 1291.089576][T14757] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10938'. [ 1291.216282][T14762] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 1291.364486][T14768] netlink: 108 bytes leftover after parsing attributes in process `syz.4.10941'. [ 1291.400058][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10941'. [ 1291.781533][T14788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10947'. [ 1291.834351][T14792] netlink: 'syz.1.10948': attribute type 1 has an invalid length. [ 1291.871093][T14793] netlink: 'syz.1.10948': attribute type 1 has an invalid length. [ 1291.969439][T14792] bond5: entered promiscuous mode [ 1291.980656][T14792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1292.251487][T14810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10951'. [ 1292.288384][T14816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10952'. [ 1292.666872][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10956'. [ 1292.685084][T14840] netlink: 220 bytes leftover after parsing attributes in process `syz.4.10959'. [ 1292.711689][T14840] netlink: 'syz.4.10959': attribute type 2 has an invalid length. [ 1292.993955][T14862] netlink: 'syz.0.10967': attribute type 4 has an invalid length. [ 1293.033194][T14858] tipc: Enabling of bearer rejected, media not registered [ 1293.071296][T14865] bond0: Caught tx_queue_len zero misconfig [ 1293.239165][T14870] block nbd6: server does not support multiple connections per device. [ 1293.267743][T14870] block nbd6: shutting down sockets [ 1293.338471][T14882] netlink: 'syz.3.10973': attribute type 1 has an invalid length. [ 1293.391754][T14882] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1293.469012][T14889] netlink: 'syz.1.10974': attribute type 30 has an invalid length. [ 1293.486148][T14884] bond6: (slave veth9): Enslaving as an active interface with a down link [ 1293.573874][ T6526] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.650395][ T6526] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.671300][ T6526] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.689120][ T6526] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.961921][T14921] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1293.983215][T14921] bond0: (slave lo): Error: Device can not be enslaved while up [ 1294.002986][T14927] sock: sock_set_timeout: `syz.4.10986' (pid 14927) tries to set negative timeout [ 1294.023464][T14922] netlink: 'syz.3.10984': attribute type 1 has an invalid length. [ 1294.120392][T14922] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1294.283418][T14948] netlink: zone id is out of range [ 1294.302271][T14948] netlink: zone id is out of range [ 1294.310518][T14948] netlink: zone id is out of range [ 1294.320024][T14951] netlink: 'syz.1.10991': attribute type 26 has an invalid length. [ 1294.335567][T14948] netlink: zone id is out of range [ 1294.362133][T14948] netlink: zone id is out of range [ 1294.384030][T14948] netlink: zone id is out of range [ 1294.405524][T14948] netlink: zone id is out of range [ 1294.418673][T14948] netlink: zone id is out of range [ 1294.515149][T14961] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1294.973180][T14987] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1294.994312][T14987] bond2 (unregistering): Released all slaves [ 1295.314109][T15013] netlink: 'syz.4.11010': attribute type 7 has an invalid length. [ 1295.343639][T15007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1295.385800][T15017] __nla_validate_parse: 14 callbacks suppressed [ 1295.385828][T15017] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11010'. [ 1295.576958][T15028] netlink: 'syz.1.11012': attribute type 1 has an invalid length. [ 1295.602655][T15028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11012'. [ 1295.603329][T15027] bridge3: entered promiscuous mode [ 1295.652915][T15030] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.11014'. [ 1295.670104][T15032] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1295.674055][T15027] bridge3: entered allmulticast mode [ 1295.728480][T15028] netlink: 248 bytes leftover after parsing attributes in process `syz.1.11012'. [ 1295.772025][T15028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11012'. [ 1296.026541][T15053] bridge3: entered promiscuous mode [ 1296.041497][T15053] bridge3: entered allmulticast mode [ 1296.168460][T15066] netlink: 5 bytes leftover after parsing attributes in process `syz.0.11025'. [ 1296.186022][T15066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11025'. [ 1296.251365][T15072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11026'. [ 1296.272949][T15072] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11026'. [ 1296.295928][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11026'. [ 1296.423284][T15081] xt_hashlimit: size too large, truncated to 1048576 [ 1297.023514][T15101] bond7: option xmit_hash_policy: invalid value (64) [ 1297.031979][T15101] bond7 (unregistering): Released all slaves [ 1297.227685][T15121] validate_nla: 2 callbacks suppressed [ 1297.227705][T15121] netlink: 'syz.1.11041': attribute type 9 has an invalid length. [ 1297.331308][T15130] Bluetooth: MGMT ver 1.23 [ 1297.679916][T15147] net_ratelimit: 47 callbacks suppressed [ 1297.679930][T15147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1297.809902][T15151] veth0: Caught tx_queue_len zero misconfig [ 1297.991560][T15166] sctp: [Deprecated]: syz.1.11054 (pid 15166) Use of int in max_burst socket option deprecated. [ 1297.991560][T15166] Use struct sctp_assoc_value instead [ 1298.123546][T15171] xt_TCPMSS: Only works on TCP SYN packets [ 1298.190137][T15176] SET target dimension over the limit! [ 1298.202181][T15174] netlink: 'syz.3.11060': attribute type 21 has an invalid length. [ 1298.397287][T15192] openvswitch: netlink: Missing valid actions attribute. [ 1298.423183][T15192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1298.827463][T15218] 8021q: VLANs not supported on wg2 [ 1298.971024][T15234] tipc: Enabling of bearer rejected, failed to enable media [ 1299.190907][T15242] syzkaller1: entered promiscuous mode [ 1299.212240][T15242] syzkaller1: entered allmulticast mode [ 1299.288342][T15251] vlan0: entered promiscuous mode [ 1299.321307][T15251] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20001 [ 1300.039126][T15287] bond2 (unregistering): Released all slaves [ 1300.094787][T15304] netlink: 'syz.3.11093': attribute type 12 has an invalid length. [ 1300.122170][T15304] netlink: 'syz.3.11093': attribute type 29 has an invalid length. [ 1300.163658][T15304] netlink: 'syz.3.11093': attribute type 1 has an invalid length. [ 1300.214060][T15304] netlink: 'syz.3.11093': attribute type 2 has an invalid length. [ 1300.394203][T15320] netlink: 'syz.4.11098': attribute type 1 has an invalid length. [ 1300.442109][T15323] __nla_validate_parse: 19 callbacks suppressed [ 1300.442250][T15323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11100'. [ 1300.479023][T15320] bond7: (slave geneve3): making interface the new active one [ 1300.491991][T15320] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 1300.504940][T15320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11098'. [ 1300.540711][ T6509] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1300.560703][T15328] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11103'. [ 1300.575930][T15328] netlink: 'syz.2.11103': attribute type 2 has an invalid length. [ 1300.577018][T15320] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1300.611575][ T6509] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1300.670224][T15329] pim6reg: entered allmulticast mode [ 1300.679404][ T6509] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1300.694874][ T6509] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1300.700672][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11104'. [ 1300.832044][T15348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11107'. [ 1300.923729][T15352] syzkaller1: entered promiscuous mode [ 1300.951747][T15352] syzkaller1: entered allmulticast mode [ 1301.039715][T15357] netlink: 'syz.0.11111': attribute type 61 has an invalid length. [ 1301.048873][T15357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11111'. [ 1301.164805][T15359] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1301.329643][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11114'. [ 1301.343582][T15364] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11114'. [ 1301.354375][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11114'. [ 1301.433417][T15374] openvswitch: netlink: Flow actions attr not present in new flow. [ 1301.514179][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11116'. [ 1302.259039][T15422] geneve3: entered promiscuous mode [ 1302.274089][T15422] geneve3: entered allmulticast mode [ 1302.301390][ T6508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1302.328589][ T6508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1302.353244][ T6508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1302.383775][T15427] netlink: 'syz.4.11128': attribute type 1 has an invalid length. [ 1302.422132][T15431] 8021q: VLANs not supported on lo [ 1302.438966][ T6508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1302.459570][T15431] netlink: 'syz.2.11129': attribute type 1 has an invalid length. [ 1303.196718][T15479] SET target dimension over the limit! [ 1303.654379][T15498] tc action pedit 'at' offset 6 out of bounds [ 1303.682185][T15500] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 1303.874974][T15510] netlink: 'syz.3.11151': attribute type 3 has an invalid length. [ 1303.961193][T15517] syzkaller1: entered promiscuous mode [ 1303.978085][T15517] syzkaller1: entered allmulticast mode [ 1304.287613][T15535] sctp: [Deprecated]: syz.3.11157 (pid 15535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1304.287613][T15535] Use struct sctp_sack_info instead [ 1304.527576][T15552] : entered promiscuous mode [ 1305.159513][T15595] netlink: 'syz.1.11176': attribute type 2 has an invalid length. [ 1305.184463][T15593] xt_hashlimit: size too large, truncated to 1048576 [ 1305.424849][T15604] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1305.622727][T15606] __nla_validate_parse: 27 callbacks suppressed [ 1305.622745][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11179'. [ 1305.693077][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11179'. [ 1305.739147][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11179'. [ 1305.806008][T15608] netlink: 'syz.1.11179': attribute type 10 has an invalid length. [ 1305.891945][T15612] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1305.959316][T15613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1306.013788][T15613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.479667][T15606] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1310.484043][T15608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.783335][T15634] netlink: 'syz.3.11187': attribute type 12 has an invalid length. [ 1310.910882][T15646] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11191'. [ 1310.922864][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11191'. [ 1310.938459][T15646] netlink: 31 bytes leftover after parsing attributes in process `syz.3.11191'. [ 1310.947909][T15646] netlink: 'syz.3.11191': attribute type 3 has an invalid length. [ 1310.983419][T15646] netlink: 'syz.3.11191': attribute type 2 has an invalid length. [ 1310.997198][T15646] netlink: 31 bytes leftover after parsing attributes in process `syz.3.11191'. [ 1311.201583][T15665] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11195'. [ 1311.404094][T15672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1311.450783][T15667] netlink: 'syz.1.11196': attribute type 1 has an invalid length. [ 1311.579622][T15672] syzkaller0: entered promiscuous mode [ 1311.593033][T15672] syzkaller0: entered allmulticast mode [ 1311.945034][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11201'. [ 1316.979662][T15700] lo: Caught tx_queue_len zero misconfig [ 1317.156809][T15721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11209'. [ 1317.167260][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11211'. [ 1317.347826][T15737] mac80211_hwsim hwsim146 syzkaller0: entered promiscuous mode [ 1317.372646][T15737] mac80211_hwsim hwsim146 syzkaller0: entered allmulticast mode [ 1317.433428][T15737] tipc: Enabled bearer , priority 0 [ 1317.504817][T15746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11222'. [ 1317.703457][T15761] netlink: zone id is out of range [ 1317.712246][T15761] netlink: zone id is out of range [ 1317.718892][T15761] netlink: zone id is out of range [ 1317.724369][T15761] netlink: zone id is out of range [ 1317.730131][T15761] netlink: zone id is out of range [ 1317.736437][T15761] netlink: zone id is out of range [ 1317.741840][T15761] netlink: zone id is out of range [ 1317.750214][T15761] netlink: zone id is out of range [ 1317.758545][T15761] netlink: zone id is out of range [ 1317.769292][T15761] netlink: zone id is out of range [ 1317.878346][T15766] netlink: 'syz.2.11228': attribute type 1 has an invalid length. [ 1317.898547][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11228'. [ 1318.153289][T15792] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1318.363311][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11240'. [ 1318.390349][T15805] netlink: 236 bytes leftover after parsing attributes in process `syz.0.11239'. [ 1318.771014][T15821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11244'. [ 1318.927542][T15828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11245'. [ 1318.983011][T15819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11242'. [ 1319.111035][T15819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1319.174905][T15819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1319.272368][T15819] bond0 (unregistering): (slave team0): Releasing backup interface [ 1319.299213][T15819] bond0 (unregistering): Released all slaves [ 1319.324394][T15838] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11249'. [ 1319.354594][T15849] netlink: 'syz.1.11251': attribute type 1 has an invalid length. [ 1319.523532][T15849] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1319.545124][T15850] bond7: (slave ip6erspan0): making interface the new active one [ 1319.557302][T15850] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1319.887301][T15875] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1320.771799][ T5810] IPVS: starting estimator thread 0... [ 1320.896641][T15927] IPVS: using max 29 ests per chain, 69600 per kthread [ 1321.009355][T15941] netlink: 'syz.2.11276': attribute type 1 has an invalid length. [ 1321.144821][T15943] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1321.161005][T15943] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1321.229720][T15941] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 1321.239246][T15945] tipc: New replicast peer: 255.255.255.255 [ 1321.250604][T15945] tipc: Enabled bearer , priority 10 [ 1321.292458][T15949] macvlan4: entered promiscuous mode [ 1321.308664][T15949] macvlan4: entered allmulticast mode [ 1321.316847][T15949] bond3: entered promiscuous mode [ 1321.328144][T15949] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1321.354600][T15949] bond3: left promiscuous mode [ 1321.960806][T15974] netlink: 'syz.4.11285': attribute type 39 has an invalid length. [ 1322.178652][T15970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1322.240955][T15970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.302705][T15972] syz_tun: entered promiscuous mode [ 1322.337528][T15972] __nla_validate_parse: 7 callbacks suppressed [ 1322.337558][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11284'. [ 1322.405141][T16001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11292'. [ 1322.568031][T16015] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1322.605824][T16015] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1322.849361][T16024] netlink: 'syz.3.11296': attribute type 29 has an invalid length. [ 1322.899741][T16024] netlink: 'syz.3.11296': attribute type 29 has an invalid length. [ 1322.942177][T16024] netlink: 'syz.3.11296': attribute type 32 has an invalid length. [ 1322.980220][T16024] netlink: 500 bytes leftover after parsing attributes in process `syz.3.11296'. [ 1323.003352][T15829] udevd[15829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1323.241961][T16036] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1323.427912][T16041] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11302'. [ 1323.579569][T16047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11304'. [ 1323.590469][T16047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11304'. [ 1323.627555][T16047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11304'. [ 1323.640782][T16047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11304'. [ 1323.669466][T16047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11304'. [ 1323.679121][T16047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11304'. [ 1323.970102][T16060] bond0: Removing last arp target with arp_interval on [ 1324.582198][T16111] netlink: 'syz.0.11326': attribute type 10 has an invalid length. [ 1324.964905][T16134] vxcan1 speed is unknown, defaulting to 1000 [ 1325.099038][T16148] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1325.244388][T16148] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1325.283055][T16148] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 1325.311853][T16148] bond7: (slave vti0): Error -95 calling set_mac_address [ 1330.721602][T16208] __nla_validate_parse: 33 callbacks suppressed [ 1330.721621][T16208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11353'. [ 1330.734360][T16205] syzkaller1: entered promiscuous mode [ 1330.761700][T16205] syzkaller1: entered allmulticast mode [ 1330.798958][T16211] netlink: 272 bytes leftover after parsing attributes in process `syz.1.11355'. [ 1331.273992][T16234] ip6tnl0: Caught tx_queue_len zero misconfig [ 1331.306177][T16234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11362'. [ 1331.394637][T16238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11363'. [ 1331.540710][T16239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11363'. [ 1331.854388][T16249] xt_hashlimit: size too large, truncated to 1048576 [ 1331.919987][T16250] dvmrp0: entered allmulticast mode [ 1332.492133][T16276] netlink: 51 bytes leftover after parsing attributes in process `syz.0.11374'. [ 1332.680455][T16286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11377'. [ 1332.686581][T16287] mac80211_hwsim hwsim146 syzkaller0: left promiscuous mode [ 1332.714796][T16287] mac80211_hwsim hwsim146 syzkaller0: left allmulticast mode [ 1333.085151][T16310] netlink: 'syz.3.11384': attribute type 1 has an invalid length. [ 1333.114440][T16310] netlink: 244 bytes leftover after parsing attributes in process `syz.3.11384'. [ 1333.399696][T16325] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11390'. [ 1333.493042][T16331] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11392'. [ 1333.703959][T16346] net_ratelimit: 134 callbacks suppressed [ 1333.703978][T16346] openvswitch: netlink: IP tunnel dst address not specified [ 1333.703977][T16344] netlink: 'syz.2.11397': attribute type 11 has an invalid length. [ 1333.857787][T16349] geneve1: entered allmulticast mode [ 1333.883229][T16349] netlink: 'syz.2.11399': attribute type 21 has an invalid length. [ 1333.921514][T16355] netlink: 'syz.3.11401': attribute type 12 has an invalid length. [ 1333.952626][T16355] netlink: 'syz.3.11401': attribute type 11 has an invalid length. [ 1334.518382][T16387] netlink: 'syz.3.11413': attribute type 9 has an invalid length. [ 1335.048039][T16417] netlink: 'syz.2.11421': attribute type 1 has an invalid length. [ 1335.180598][T16417] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1335.257191][T16429] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1335.365102][T16417] bond4: (slave veth9): Enslaving as an active interface with a down link [ 1335.383060][T16444] mac80211_hwsim hwsim146 syzkaller0: entered promiscuous mode [ 1335.409732][T16444] mac80211_hwsim hwsim146 syzkaller0: entered allmulticast mode [ 1335.461201][T16444] netlink: 'syz.1.11424': attribute type 1 has an invalid length. [ 1335.722571][T16464] netlink: 'syz.3.11432': attribute type 1 has an invalid length. [ 1335.736038][T16468] C: renamed from lo [ 1335.744884][T16468] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1335.764315][T16470] __nla_validate_parse: 15 callbacks suppressed [ 1335.764333][T16470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11435'. [ 1335.827342][T16464] bond7: entered promiscuous mode [ 1335.833895][T16464] bond7: entered allmulticast mode [ 1335.846653][T16464] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1335.883094][T16480] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.11437'. [ 1335.901875][T16468] netlink: 516 bytes leftover after parsing attributes in process `syz.1.11434'. [ 1335.930109][T16480] openvswitch: netlink: Message has 6 unknown bytes. [ 1336.126850][T16492] team0: No ports can be present during mode change [ 1336.151733][T16501] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.11442'. [ 1336.188724][T16501] netlink: Unknown conntrack attr (type=2304, max=9) [ 1336.271652][T16506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1336.311407][T16511] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1336.329734][T16514] netlink: 'syz.3.11445': attribute type 1 has an invalid length. [ 1336.401113][T16520] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.11448'. [ 1336.420766][T16522] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11449'. [ 1336.430080][T16514] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1336.432988][T16520] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.11448'. [ 1336.454988][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11447'. [ 1336.484145][T16517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11447'. [ 1336.514894][T16517] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11447'. [ 1336.611657][T16530] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1336.753433][T16540] bond8: entered promiscuous mode [ 1336.766464][T16540] bond8: entered allmulticast mode [ 1336.773814][T16540] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1337.124357][T16562] bond0: entered promiscuous mode [ 1337.141801][T16562] bond_slave_0: entered promiscuous mode [ 1337.173284][T16562] bond_slave_1: entered promiscuous mode [ 1337.194730][T16562] gretap0: entered promiscuous mode [ 1337.224511][T16562] veth1_virt_wifi: entered promiscuous mode [ 1337.244481][T16562] debugfs: 'hsr1' already exists in 'hsr' [ 1337.259618][T16562] Cannot create hsr debugfs directory [ 1337.268483][T16562] hsr1: entered promiscuous mode [ 1337.602133][T16602] syzkaller1: entered promiscuous mode [ 1337.615975][T16602] syzkaller1: entered allmulticast mode [ 1338.392876][T16666] IPv6: sit2: Disabled Multicast RS [ 1338.858022][T16697] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1339.070104][T16710] xt_l2tp: invalid flags combination: 0 [ 1339.184809][T16720] validate_nla: 4 callbacks suppressed [ 1339.184830][T16720] netlink: 'syz.1.11504': attribute type 1 has an invalid length. [ 1339.228156][T16722] netlink: 'syz.3.11503': attribute type 61 has an invalid length. [ 1339.288348][T16724] netlink: 'syz.1.11505': attribute type 22 has an invalid length. [ 1339.356863][T16724] netlink: 'syz.1.11505': attribute type 22 has an invalid length. [ 1339.981610][T27223] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1340.005448][T27223] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1340.015103][T27223] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1340.028431][T27223] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1340.036353][T27223] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1340.094133][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1340.101758][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1340.110212][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1340.118563][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1340.128930][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1340.294244][T16765] netlink: 'syz.3.11516': attribute type 1 has an invalid length. [ 1340.360654][T16765] netlink: 'syz.3.11516': attribute type 1 has an invalid length. [ 1341.101765][T16809] netlink: 'syz.1.11525': attribute type 1 has an invalid length. [ 1341.332034][T16827] __nla_validate_parse: 17 callbacks suppressed [ 1341.332053][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11530'. [ 1341.427962][ T6508] bond0 (unregistering): (slave ip6gre1): Releasing backup interface [ 1341.591423][ T6508] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1341.630237][ T6508] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 1342.091454][ T6508] bond1 (unregistering): Released all slaves [ 1342.105821][ T6508] bond2 (unregistering): Released all slaves [ 1342.121757][ T6508] bond3 (unregistering): Released all slaves [ 1342.139850][ T6508] bond0 (unregistering): Released all slaves [ 1342.154345][ T6508] bond4 (unregistering): Released all slaves [ 1342.160793][T27223] Bluetooth: hci4: command tx timeout [ 1342.186781][ T6508] bond5 (unregistering): Released all slaves [ 1342.202309][ T6508] bond6 (unregistering): Released all slaves [ 1342.224654][ T6508] bond7 (unregistering): Released all slaves [ 1342.242195][ T6508] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1342.253115][ T6508] bond8 (unregistering): (slave bond9): Releasing active interface [ 1342.267625][ T6508] bond8 (unregistering): Released all slaves [ 1342.282322][ T6508] bond9 (unregistering): Released all slaves [ 1342.297405][ T6508] bond10 (unregistering): (slave C): Releasing backup interface [ 1342.306688][ T6508] bond10 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 1342.327967][ T6508] bond10 (unregistering): Released all slaves [ 1342.343964][ T6508] bond11 (unregistering): Released all slaves [ 1342.358916][ T6508] bond12 (unregistering): Released all slaves [ 1342.373625][ T6508] bond13 (unregistering): Released all slaves [ 1342.388882][T16758] vxcan1 speed is unknown, defaulting to 1000 [ 1342.785768][ T6508] tipc: Left network mode [ 1343.245461][T16859] netlink: 92 bytes leftover after parsing attributes in process `syz.4.11539'. [ 1343.272785][T16859] netlink: 'syz.4.11539': attribute type 1 has an invalid length. [ 1343.483153][T16864] syzkaller1: entered promiscuous mode [ 1343.490000][T16864] syzkaller1: entered allmulticast mode [ 1343.651569][T16873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11542'. [ 1343.841616][T16882] xt_hashlimit: size too large, truncated to 1048576 [ 1343.987554][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11548'. [ 1344.000323][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11548'. [ 1344.238208][T27223] Bluetooth: hci4: command tx timeout [ 1344.363010][T16898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1344.399983][T16900] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11551'. [ 1344.511502][T16906] openvswitch: netlink: Message has 8 unknown bytes. [ 1344.525099][T16906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1344.545046][T16909] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1344.728114][T16911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11554'. [ 1345.258443][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11561'. [ 1345.420933][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11561'. [ 1345.551389][T16958] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11561'. [ 1345.691394][T16960] mac80211_hwsim hwsim148 wlan1: Caught tx_queue_len zero misconfig [ 1345.837027][T16963] nbd4: detected capacity change from 0 to 8388607 [ 1345.849512][T16772] block nbd4: Dead connection, failed to find a fallback [ 1345.928074][ T6508] hsr_slave_0: left promiscuous mode [ 1345.941004][ T6508] hsr_slave_1: left promiscuous mode [ 1346.010627][ T6508] veth1_macvtap: left promiscuous mode [ 1346.015291][T16973] netlink: 'syz.1.11574': attribute type 1 has an invalid length. [ 1346.025688][ T6508] veth0_macvtap: left promiscuous mode [ 1346.032962][ T6508] veth1_vlan: left promiscuous mode [ 1346.056465][T16974] No such timeout policy "syz1" [ 1346.318130][T27223] Bluetooth: hci4: command tx timeout [ 1346.534444][T16968] __nla_validate_parse: 2 callbacks suppressed [ 1346.534460][T16968] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11572'. [ 1346.553533][T16971] lo: left promiscuous mode [ 1346.578073][T16971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1346.791700][T16758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.810361][T16758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.828028][T16758] bridge_slave_0: entered allmulticast mode [ 1346.836220][T16758] bridge_slave_0: entered promiscuous mode [ 1346.864738][T16758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.886059][T16758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.895036][T16758] bridge_slave_1: entered allmulticast mode [ 1346.921769][T16758] bridge_slave_1: entered promiscuous mode [ 1346.939960][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11582'. [ 1346.989570][T17002] geneve1: Caught tx_queue_len zero misconfig [ 1347.104117][T17007] netlink: 39051 bytes leftover after parsing attributes in process `syz.3.11582'. [ 1347.163827][T16758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.211340][T16758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.370275][T16758] team0: Port device team_slave_0 added [ 1347.387556][T17019] netlink: 'syz.1.11584': attribute type 1 has an invalid length. [ 1347.390301][T16758] team0: Port device team_slave_1 added [ 1347.405476][T17019] netlink: 'syz.1.11584': attribute type 11 has an invalid length. [ 1347.406007][ T6508] IPVS: stop unused estimator thread 0... [ 1347.421534][T17019] netlink: 228 bytes leftover after parsing attributes in process `syz.1.11584'. [ 1347.464402][T16758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.480328][T16758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1347.533186][T16758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.557599][T16758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.568343][T16758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1347.620247][T16758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1347.703891][T16758] hsr_slave_0: entered promiscuous mode [ 1347.727597][T16758] hsr_slave_1: entered promiscuous mode [ 1347.737733][T16758] debugfs: 'hsr0' already exists in 'hsr' [ 1347.743547][T16758] Cannot create hsr debugfs directory [ 1347.803553][T17033] sctp: [Deprecated]: syz.1.11589 (pid 17033) Use of int in maxseg socket option. [ 1347.803553][T17033] Use struct sctp_assoc_value instead [ 1347.928343][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11592'. [ 1348.047199][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11594'. [ 1348.062603][T17051] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11595'. [ 1348.243575][T16758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.266114][T16758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1348.368541][T17059] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1348.396120][T27223] Bluetooth: hci4: command tx timeout [ 1348.467467][T16758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.478244][T16758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1348.700813][T16758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.737980][T16758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1348.827507][T17090] netlink: 'syz.4.11605': attribute type 16 has an invalid length. [ 1348.837846][T17090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11605'. [ 1348.844170][T17088] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1348.864469][T17092] IPVS: set_ctl: invalid protocol: 115 10.1.1.1:20002 [ 1348.888805][T17088] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1348.907498][T17088] gretap2: entered promiscuous mode [ 1348.919498][T17088] gretap2: entered allmulticast mode [ 1349.068527][T16758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1349.079143][T16758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1349.139910][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11607'. [ 1349.152445][T17105] netlink: 'syz.4.11608': attribute type 9 has an invalid length. [ 1349.207720][T17102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11607'. [ 1349.238771][T17102] vlan2: entered allmulticast mode [ 1349.420520][T17113] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1349.755362][T17126] netlink: 'syz.4.11615': attribute type 7 has an invalid length. [ 1349.760164][T16758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1349.791787][T16758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1349.804221][T16758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1349.818723][T16758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1349.827827][T16758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1349.850056][T16758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1349.881506][T16758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1349.923398][T16758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1350.221917][T16758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.272600][T16758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.284993][T17165] xt_hashlimit: size too large, truncated to 1048576 [ 1350.298087][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.305297][ T6501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.348741][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.349078][T17170] netlink: 'syz.2.11624': attribute type 1 has an invalid length. [ 1350.355942][ T6501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.473219][T17170] bond5: entered promiscuous mode [ 1350.480962][T17170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1350.507636][T17176] netlink: 'syz.3.11626': attribute type 1 has an invalid length. [ 1350.530522][T17176] netlink: 'syz.3.11626': attribute type 7 has an invalid length. [ 1350.559522][T17176] netlink: 'syz.3.11626': attribute type 8 has an invalid length. [ 1350.877454][T17192] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20000 [ 1351.057224][T17203] syzkaller1: entered promiscuous mode [ 1351.077664][T17203] syzkaller1: entered allmulticast mode [ 1351.253459][T16758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.429500][T16758] veth0_vlan: entered promiscuous mode [ 1351.504928][T16758] veth1_vlan: entered promiscuous mode [ 1351.652036][T16758] veth0_macvtap: entered promiscuous mode [ 1351.688925][T16758] veth1_macvtap: entered promiscuous mode [ 1351.780824][T16758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1351.832735][T16758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1351.887694][ T6531] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.922322][ T6531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.960664][ T6531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.974611][ T6531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.355073][ T6504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.389335][ T6504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.498959][ T6509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.512175][T17263] netlink: 'syz.3.11650': attribute type 3 has an invalid length. [ 1352.521302][ T6509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.704220][T17274] __nla_validate_parse: 11 callbacks suppressed [ 1352.704238][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11512'. [ 1352.830658][T17284] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.11654'. [ 1352.924278][T17288] netlink: 'syz.4.11655': attribute type 1 has an invalid length. [ 1352.942681][T17288] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11655'. [ 1352.956721][T17293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11657'. [ 1352.963206][T17288] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11655'. [ 1352.978081][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11657'. [ 1353.013347][T17288] netlink: 658 bytes leftover after parsing attributes in process `syz.4.11655'. [ 1353.059798][T17293] bond6: entered promiscuous mode [ 1353.066725][T17293] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1353.464343][T17331] netlink: 'syz.1.11662': attribute type 3 has an invalid length. [ 1353.672279][T17346] sctp: [Deprecated]: syz.2.11666 (pid 17346) Use of int in maxseg socket option. [ 1353.672279][T17346] Use struct sctp_assoc_value instead [ 1353.718614][T17349] netlink: 'syz.4.11668': attribute type 64 has an invalid length. [ 1353.743805][T17349] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11668'. [ 1353.832345][T17355] netlink: 'syz.4.11668': attribute type 3 has an invalid length. [ 1353.857878][T17355] netlink: 'syz.4.11668': attribute type 1 has an invalid length. [ 1353.876668][T17355] netlink: 204 bytes leftover after parsing attributes in process `syz.4.11668'. [ 1353.993217][T17362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11671'. [ 1354.099484][T27223] block nbd7: Receive control failed (result -32) [ 1354.497060][T17375] netlink: 'syz.2.11674': attribute type 1 has an invalid length. [ 1354.530284][T17375] netlink: 'syz.2.11674': attribute type 2 has an invalid length. [ 1354.564917][T17375] netlink: 'syz.2.11674': attribute type 2 has an invalid length. [ 1354.612464][T17375] netlink: 'syz.2.11674': attribute type 2 has an invalid length. [ 1355.164069][T17407] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1355.212997][T17403] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1355.231278][T17403] bond7 (unregistering): Released all slaves [ 1355.483633][T17428] gtp1: entered promiscuous mode [ 1355.501028][T17428] gtp1: entered allmulticast mode [ 1355.520713][T17432] openvswitch: netlink: Multiple metadata blocks provided [ 1356.607345][T17500] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 1357.470879][T17554] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1357.547201][T17564] macvlan2: entered promiscuous mode [ 1357.557068][T17564] macvlan2: entered allmulticast mode [ 1357.635659][T17554] bond9: (slave ip6gretap1): making interface the new active one [ 1357.659223][T17554] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1357.683641][T17572] 0·: renamed from hsr0 (while UP) [ 1357.722566][T17572] 0·: entered allmulticast mode [ 1357.730320][T17572] hsr_slave_0: entered allmulticast mode [ 1357.737080][T17572] hsr_slave_1: entered allmulticast mode [ 1357.743737][T17572] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1357.870774][T17575] bond7: option miimon: invalid value (18446744073709551585) [ 1357.912245][T17575] bond7: option miimon: allowed values 0 - 2147483647 [ 1357.940800][T17575] bond7 (unregistering): Released all slaves [ 1358.176614][T17600] syzkaller1: entered allmulticast mode [ 1358.512922][T17625] validate_nla: 7 callbacks suppressed [ 1358.512940][T17625] netlink: 'syz.3.11745': attribute type 1 has an invalid length. [ 1358.632343][T17625] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1358.714804][T17625] netlink: 'syz.3.11745': attribute type 1 has an invalid length. [ 1358.804240][T17626] bond10: (slave gretap1): making interface the new active one [ 1358.834340][T17626] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 1358.927393][T17625] netlink: 'syz.3.11745': attribute type 1 has an invalid length. [ 1358.978306][T17643] syzkaller1: entered promiscuous mode [ 1359.003435][T17643] syzkaller1: entered allmulticast mode [ 1359.049282][T17625] netlink: 'syz.3.11745': attribute type 1 has an invalid length. [ 1359.162886][T17625] netlink: 'syz.3.11745': attribute type 1 has an invalid length. [ 1359.189721][T17625] netlink: 'syz.3.11745': attribute type 1 has an invalid length. [ 1359.240458][T17625] netlink: 'syz.3.11745': attribute type 1 has an invalid length. [ 1359.554090][ T5285] veth0_macvtap: left promiscuous mode [ 1359.872279][T17706] macvtap1: entered promiscuous mode [ 1359.890199][T17706] macvtap1: entered allmulticast mode [ 1359.907806][T17706] veth1_vlan: entered allmulticast mode [ 1360.091301][T17708] macvtap2: entered promiscuous mode [ 1360.113693][T17708] macvtap2: entered allmulticast mode [ 1360.204354][T17721] __nla_validate_parse: 38 callbacks suppressed [ 1360.204377][T17721] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11763'. [ 1360.212411][T17727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11767'. [ 1360.248276][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11767'. [ 1360.769831][T17740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11769'. [ 1360.805060][T17733] syzkaller1: entered promiscuous mode [ 1360.827598][T17733] syzkaller1: entered allmulticast mode [ 1360.860325][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.868067][T17740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.500719][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11776'. [ 1361.523031][T17783] bridge0: port 1(ipvlan2) entered blocking state [ 1361.530153][T17783] bridge0: port 1(ipvlan2) entered disabled state [ 1361.539709][T17783] ipvlan2: entered allmulticast mode [ 1361.547758][T17783] bridge0: entered allmulticast mode [ 1361.557549][T17783] ipvlan2: left allmulticast mode [ 1361.562736][T17783] bridge0: left allmulticast mode [ 1361.627514][T17781] netlink: 184 bytes leftover after parsing attributes in process `syz.2.11776'. [ 1361.701219][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11781'. [ 1362.338989][T17823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11788'. [ 1362.411825][T17823] xfrm2: entered promiscuous mode [ 1362.421982][T17823] xfrm2: entered allmulticast mode [ 1362.498957][T17835] netlink: 'syz.0.11793': attribute type 1 has an invalid length. [ 1362.594710][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11795'. [ 1362.610538][T17842] netlink: 'syz.4.11795': attribute type 1 has an invalid length. [ 1362.620439][T17842] netlink: 'syz.4.11795': attribute type 2 has an invalid length. [ 1362.713805][T17848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11797'. [ 1362.882903][T17854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1363.231141][T17880] tun0: tun_chr_ioctl cmd 1074025675 [ 1363.246958][T17883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1363.260170][T17880] tun0: persist disabled [ 1363.534538][T17901] validate_nla: 1 callbacks suppressed [ 1363.534558][T17901] netlink: 'syz.0.11810': attribute type 5 has an invalid length. [ 1363.882918][T17924] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1363.919864][T17926] netlink: 'syz.0.11819': attribute type 83 has an invalid length. [ 1363.990916][T17930] netlink: 'syz.1.11820': attribute type 1 has an invalid length. [ 1364.034535][T17933] netlink: 'syz.2.11822': attribute type 16 has an invalid length. [ 1364.062187][T17933] netlink: 'syz.2.11822': attribute type 17 has an invalid length. [ 1364.092576][T17930] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1364.183226][T17933] bridge0: port 3(dummy0) entered blocking state [ 1364.191508][T17933] bridge0: port 3(dummy0) entered forwarding state [ 1364.199499][T17941] netlink: 'syz.4.11824': attribute type 4 has an invalid length. [ 1364.211269][T17933] bridge0: port 3(dummy0) entered disabled state [ 1364.234499][T17933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.247079][T17933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.274459][T17933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1364.288352][T17933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1364.310046][T17933] vlan0: left promiscuous mode [ 1364.333180][T17933] geneve1: left allmulticast mode [ 1364.343201][T17933] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1364.351700][T17933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1364.382735][T17933] bridge1: left promiscuous mode [ 1364.388114][T17933] bridge1: left allmulticast mode [ 1364.404196][T17933] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1364.415791][T17933] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1364.430578][T17933] veth3: left allmulticast mode [ 1364.440936][T17933] bridge3: left promiscuous mode [ 1364.446304][T17933] bridge3: left allmulticast mode [ 1364.458538][T17933] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1364.467956][T17933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1364.487196][T17933] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1364.497530][T17933] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1364.508031][T17933] hsr1: Interlink (veth1_virt_wifi) is not up; please bring it up to get a fully working HSR network [ 1364.519473][T17933] hsr1: left promiscuous mode [ 1364.533139][T17933] gretap2: left promiscuous mode [ 1364.538928][T17933] gretap2: left allmulticast mode [ 1364.546144][T17933] vlan2: left allmulticast mode [ 1364.553046][T17933] bond5: left promiscuous mode [ 1364.561908][T17933] bond6: left promiscuous mode [ 1364.572770][T27523] team_slave_0: entered promiscuous mode [ 1364.580996][T27523] ±ÿ: entered promiscuous mode [ 1364.588247][T17938] ip_vti0: entered promiscuous mode [ 1364.638353][T17942] mac80211_hwsim hwsim148 syzkaller0: left promiscuous mode [ 1364.654772][T17942] mac80211_hwsim hwsim148 syzkaller0: left allmulticast mode [ 1364.678743][ T6504] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1364.731330][ T6504] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1364.833992][ T6504] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1364.863916][ T6504] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1364.920846][ T6528] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1364.967287][ T6528] bond4: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 1364.998848][ T6528] bond4: (slave veth7): making interface the new active one [ 1365.016616][T17962] openvswitch: netlink: Unknown key attributes 2 [ 1365.057432][ T6528] bond4: active interface up! [ 1365.128386][ T6526] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1365.158476][ T6526] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1365.167084][T27512] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1365.244002][T17974] __nla_validate_parse: 7 callbacks suppressed [ 1365.244023][T17974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11834'. [ 1365.368264][T17984] netlink: 'syz.3.11837': attribute type 1 has an invalid length. [ 1365.399679][T17979] batadv_slave_1: entered promiscuous mode [ 1365.423345][T17990] netlink: 'syz.3.11837': attribute type 1 has an invalid length. [ 1365.468441][T17979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11836'. [ 1365.585828][ T5619] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1365.669480][T17987] batadv_slave_1: left promiscuous mode [ 1365.694110][T18005] netlink: 'syz.4.11839': attribute type 4 has an invalid length. [ 1365.726761][T18005] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11839'. [ 1365.785815][ T5619] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1365.787240][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11839'. [ 1365.890864][T18017] macvlan0: entered promiscuous mode [ 1365.897704][T18005] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11839'. [ 1365.917805][T18011] syzkaller0: entered promiscuous mode [ 1365.946644][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11843'. [ 1365.960090][T18011] syzkaller0: entered allmulticast mode [ 1365.972870][T18020] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.11845'. [ 1366.030009][T18020] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1366.041401][T18020] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.11845'. [ 1366.051241][T18020] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1366.089496][T18020] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.11845'. [ 1366.107057][T18020] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1366.336852][T18039] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11849'. [ 1366.470173][T18039] syzkaller1: entered promiscuous mode [ 1366.504801][T18039] syzkaller1: entered allmulticast mode [ 1367.395043][T18101] veth0: entered promiscuous mode [ 1367.404593][T18100] veth0: left promiscuous mode [ 1367.526681][T18114] netlink: 'syz.0.11873': attribute type 25 has an invalid length. [ 1367.575480][T18116] bond0: entered promiscuous mode [ 1367.601600][T18116] bond_slave_0: entered promiscuous mode [ 1367.616532][T18116] bond_slave_1: entered promiscuous mode [ 1367.624623][T18116] bond0: left promiscuous mode [ 1367.631449][T18116] bond_slave_0: left promiscuous mode [ 1367.639079][T18116] bond_slave_1: left promiscuous mode [ 1367.719451][T18116] bond0: entered promiscuous mode [ 1367.730445][T18116] bond_slave_0: entered promiscuous mode [ 1367.763199][T18116] bond_slave_1: entered promiscuous mode [ 1367.777683][T18116] bond0: left promiscuous mode [ 1367.785677][T18116] bond_slave_0: left promiscuous mode [ 1367.796390][T18116] bond_slave_1: left promiscuous mode [ 1367.875637][T18116] bond0: entered promiscuous mode [ 1367.887428][T18116] bond_slave_0: entered promiscuous mode [ 1367.905690][T18116] bond_slave_1: entered promiscuous mode [ 1367.917529][T18116] bond0: left promiscuous mode [ 1367.922565][T18116] bond_slave_0: left promiscuous mode [ 1367.941569][T18116] bond_slave_1: left promiscuous mode [ 1368.058537][T18116] bond0: entered promiscuous mode [ 1368.076347][T18116] bond_slave_0: entered promiscuous mode [ 1368.082400][T18116] bond_slave_1: entered promiscuous mode [ 1368.109775][T18116] bond0: left promiscuous mode [ 1368.125573][T18116] bond_slave_0: left promiscuous mode [ 1368.135514][T18116] bond_slave_1: left promiscuous mode [ 1368.178141][T18147] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1368.188107][T18147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1368.229402][T18116] bond0: entered promiscuous mode [ 1368.234485][T18116] bond_slave_0: entered promiscuous mode [ 1368.269975][T18116] bond_slave_1: entered promiscuous mode [ 1368.301540][T18116] bond0: left promiscuous mode [ 1368.324398][T18116] bond_slave_0: left promiscuous mode [ 1368.351813][T18116] bond_slave_1: left promiscuous mode [ 1368.395809][ T6528] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1368.414912][ T6528] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1368.422961][T27512] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1368.447273][T27512] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1368.596963][T27512] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1368.610263][T18164] vxcan1 speed is unknown, defaulting to 1000 [ 1368.761763][T18181] xt_hashlimit: overflow, try lower: 3/0 [ 1371.011982][T18291] __nla_validate_parse: 19 callbacks suppressed [ 1371.012001][T18291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11926'. [ 1371.649749][T18319] xt_cgroup: invalid path, errno=-2 [ 1371.652365][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11935'. [ 1371.700815][T18319] xt_cgroup: invalid path, errno=-2 [ 1371.923347][T18340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11934'. [ 1371.984107][T18346] validate_nla: 4 callbacks suppressed [ 1371.984126][T18346] netlink: 'syz.1.11936': attribute type 1 has an invalid length. [ 1372.143073][T18346] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1372.497650][T18374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11942'. [ 1372.533895][T18325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1372.547522][T18337] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1372.593940][T18378] vxcan1 speed is unknown, defaulting to 1000 [ 1372.716716][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1372.716735][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1372.743023][ T30] audit: type=1800 audit(1777489644.501:19): pid=18380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11944" name="memory.events" dev="tmpfs" ino=3052 res=0 errno=0 [ 1372.753854][T18380] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11944'. [ 1372.808835][ T30] audit: type=1804 audit(1777489644.501:20): pid=18380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.11944" name="/newroot/594/memory.events" dev="tmpfs" ino=3052 res=1 errno=0 [ 1372.821949][T18380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.838048][T18380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.855374][T18386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11947'. [ 1373.008887][T18400] netlink: 294 bytes leftover after parsing attributes in process `syz.1.11949'. [ 1373.021222][T18400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1373.240616][T18407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1373.443818][T18410] netlink: 'syz.0.11951': attribute type 25 has an invalid length. [ 1373.581687][T18410] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 1373.607091][T18410] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1373.849372][T18426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11956'. [ 1374.518359][T18459] netlink: 'syz.1.11963': attribute type 30 has an invalid length. [ 1374.540457][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11963'. [ 1374.598307][T18465] netlink: 'syz.1.11963': attribute type 30 has an invalid length. [ 1374.616480][T18469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11966'. [ 1374.628065][T18467] netlink: 'syz.0.11965': attribute type 1 has an invalid length. [ 1374.652109][T18467] netlink: 'syz.0.11965': attribute type 7 has an invalid length. [ 1374.660955][T18467] netlink: 'syz.0.11965': attribute type 8 has an invalid length. [ 1375.063928][T18488] xt_l2tp: wrong L2TP version: 0 [ 1375.152305][T18496] netlink: 'syz.4.11974': attribute type 6 has an invalid length. [ 1375.380676][T18505] geneve2: entered promiscuous mode [ 1375.400647][ T6509] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 59247 - 0 [ 1375.428381][ T6509] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 59247 - 0 [ 1375.484595][ T6509] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 59247 - 0 [ 1375.507455][ T6509] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 59247 - 0 [ 1375.584814][T18509] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1375.629826][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1375.647677][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1375.660137][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1375.670037][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1375.683985][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1375.824472][T18523] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.929028][T18523] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1376.118757][T18530] dvmrp0: entered allmulticast mode [ 1376.165716][T18523] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1376.263807][T18523] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1376.356935][T18545] __nla_validate_parse: 6 callbacks suppressed [ 1376.356955][T18545] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11988'. [ 1376.468851][ T6504] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1376.513240][T18511] vxcan1 speed is unknown, defaulting to 1000 [ 1376.513260][ T6504] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1376.557567][ T6504] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1376.598651][ T6509] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1377.019421][T18571] xt_hashlimit: overflow, rate too high: 0 [ 1377.209496][T18578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12001'. [ 1377.554620][T18595] netlink: 'syz.2.12006': attribute type 10 has an invalid length. [ 1377.724811][T18595] team0: Port device vlan0 added [ 1377.759095][T27223] Bluetooth: hci1: command tx timeout [ 1377.930811][T18608] vlan2: entered allmulticast mode [ 1377.937170][T18608] bond0: entered allmulticast mode [ 1377.951561][T18608] bond_slave_0: entered allmulticast mode [ 1377.958759][T18608] bond_slave_1: entered allmulticast mode [ 1378.148613][T18628] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1378.155892][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1378.194012][T18623] syzkaller1: entered promiscuous mode [ 1378.221962][T18623] syzkaller1: entered allmulticast mode [ 1378.264260][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12012'. [ 1378.623370][T18656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12019'. [ 1378.668747][T27512] IPVS: starting estimator thread 0... [ 1378.690163][T18660] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12021'. [ 1378.702258][T18665] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 1378.763442][T18668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1378.772170][T18661] IPVS: using max 30 ests per chain, 72000 per kthread [ 1378.784686][T18656] macvtap1: entered promiscuous mode [ 1378.790229][T18656] vlan0: entered promiscuous mode [ 1378.799566][T18656] macvtap1: entered allmulticast mode [ 1378.809504][T18656] vlan0: entered allmulticast mode [ 1378.815844][T18656] veth0_vlan: entered allmulticast mode [ 1378.875741][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1378.962365][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12023'. [ 1378.962528][T18678] netlink: 27 bytes leftover after parsing attributes in process `syz.1.12024'. [ 1379.101502][T18680] netlink: 248 bytes leftover after parsing attributes in process `syz.2.12025'. [ 1379.157288][T18688] syzkaller1: entered promiscuous mode [ 1379.183838][T18688] syzkaller1: entered allmulticast mode [ 1379.195377][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1379.216003][T18511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.243392][T18511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.262871][T18511] bridge_slave_0: entered allmulticast mode [ 1379.291043][T18511] bridge_slave_0: entered promiscuous mode [ 1379.303760][T18685] syzkaller1: entered promiscuous mode [ 1379.311623][T18685] syzkaller1: entered allmulticast mode [ 1379.325623][T18511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.333554][T18511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.343380][T18511] bridge_slave_1: entered allmulticast mode [ 1379.352570][T18511] bridge_slave_1: entered promiscuous mode [ 1379.421823][T18702] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1379.433696][T18702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12028'. [ 1379.570766][T18511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.602855][T18511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.642471][T18708] netlink: 'syz.0.12031': attribute type 1 has an invalid length. [ 1379.686716][T18713] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12032'. [ 1379.726492][T18708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1379.762955][T18710] ip_vti0: entered promiscuous mode [ 1379.777913][T18511] team0: Port device team_slave_0 added [ 1379.787797][T18511] team0: Port device team_slave_1 added [ 1379.825971][T18511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.832979][T18511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.846680][T18720] netlink: 'syz.3.12034': attribute type 14 has an invalid length. [ 1379.860831][T27223] Bluetooth: hci1: command tx timeout [ 1379.860974][T18511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.863155][T18511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.922987][T18511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.972826][T18720] netlink: 'syz.3.12034': attribute type 13 has an invalid length. [ 1379.976908][T18511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.140762][T18511] hsr_slave_0: entered promiscuous mode [ 1380.149945][T18511] hsr_slave_1: entered promiscuous mode [ 1380.169739][T18511] debugfs: 'hsr0' already exists in 'hsr' [ 1380.177133][T18511] Cannot create hsr debugfs directory [ 1380.235420][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1380.380041][T18743] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1380.528414][T18748] bridge6: entered promiscuous mode [ 1380.540474][T18748] bridge6: entered allmulticast mode [ 1380.729789][T18763] netlink: 'syz.2.12049': attribute type 14 has an invalid length. [ 1380.770890][T18511] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.789847][T18511] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.815874][T18511] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1380.884071][T18774] sit0: entered promiscuous mode [ 1380.922869][T18774] netlink: 'syz.2.12052': attribute type 1 has an invalid length. [ 1380.999813][T18511] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1381.010796][T18511] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.033753][T18511] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1381.077040][T18778] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1381.118744][T18778] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1381.259594][T18511] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1381.275375][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1381.289559][T18511] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.334620][T18511] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1381.435406][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1381.617602][T18511] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1381.643943][T18511] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.658232][T18511] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1381.724686][T18807] tap0: tun_chr_ioctl cmd 1074025672 [ 1381.737796][T18807] tap0: ignored: set checksum disabled [ 1381.765309][T18807] __nla_validate_parse: 6 callbacks suppressed [ 1381.765328][T18807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12062'. [ 1381.776653][T18810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12063'. [ 1381.917701][T27223] Bluetooth: hci1: command tx timeout [ 1382.086863][T18511] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1382.100073][T18511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1382.117167][T18511] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1382.147194][T18511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1382.164767][T18511] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1382.187274][T18819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12067'. [ 1382.187826][T18511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1382.222370][T18511] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1382.244382][T18511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1382.315242][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1382.358754][T18834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12070'. [ 1382.371114][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12069'. [ 1382.392262][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12069'. [ 1382.504072][T18842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12072'. [ 1382.589502][T18846] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12074'. [ 1382.608840][T18511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1382.643562][T18848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1382.666819][T18511] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.704527][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.711732][ T6526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.772291][ T6504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.779647][ T6504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.919812][T18863] veth1_mac: renamed from veth0_vlan (while UP) [ 1382.934133][T18868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12079'. [ 1382.960088][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12079'. [ 1383.299577][T18892] ksmbd: Unknown IPC event: 3, ignore. [ 1383.356515][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1383.996256][T27223] Bluetooth: hci1: command tx timeout [ 1384.190807][T18511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1384.395391][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1384.813101][T18511] veth0_vlan: entered promiscuous mode [ 1384.879875][T18511] veth1_vlan: entered promiscuous mode [ 1385.072150][T18511] veth0_macvtap: entered promiscuous mode [ 1385.133365][T18511] veth1_macvtap: entered promiscuous mode [ 1385.170325][T18511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1385.206325][T18511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1385.234358][ T6528] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.251492][ T6528] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.303357][ T6528] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.325822][ T6528] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.436503][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1386.475325][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1386.862132][T19034] __nla_validate_parse: 10 callbacks suppressed [ 1386.862145][T19034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12118'. [ 1387.515302][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1387.911351][T18999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1387.922408][T19007] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12110'. [ 1388.016764][ T6504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.051182][ T6504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.170558][ T6504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.182593][ T6504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.451316][T19061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12123'. [ 1388.555388][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1388.626010][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1388.645037][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1388.659815][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1388.669678][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1388.685948][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1389.048705][T19082] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12129'. [ 1389.078975][T19084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12130'. [ 1389.129265][T19084] netlink: 'syz.2.12130': attribute type 4 has an invalid length. [ 1389.185631][T19090] netlink: 'syz.2.12130': attribute type 4 has an invalid length. [ 1389.250011][T19089] team0: No ports can be present during mode change [ 1389.368020][T19094] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12133'. [ 1389.607040][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1389.870721][T19072] vxcan1 speed is unknown, defaulting to 1000 [ 1390.241608][T19141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1390.468938][T19156] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1390.527825][T19158] netlink: 'syz.0.12150': attribute type 4 has an invalid length. [ 1390.635354][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1390.674072][T19162] tipc: Resetting bearer [ 1390.714209][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12153'. [ 1390.797029][ T50] Bluetooth: hci2: command tx timeout [ 1390.940547][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12154'. [ 1390.954409][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12154'. [ 1391.675720][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1391.967106][T19216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1392.018809][T19218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12169'. [ 1392.117736][T19228] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12171'. [ 1392.211916][T19228] bond12 (unregistering): Released all slaves [ 1392.220340][T19237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12175'. [ 1392.262064][T19237] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1392.341614][T14589] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1392.358780][T19240] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1392.450647][T19072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.458065][T19072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.459789][T19247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12177'. [ 1392.465513][T19072] bridge_slave_0: entered allmulticast mode [ 1392.467370][T19072] bridge_slave_0: entered promiscuous mode [ 1392.496013][T19072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.503264][T19072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.511786][T19072] bridge_slave_1: entered allmulticast mode [ 1392.519882][T19072] bridge_slave_1: entered promiscuous mode [ 1392.563409][T19072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.577986][T19072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.644635][T19258] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12181'. [ 1392.657099][T19072] team0: Port device team_slave_0 added [ 1392.672461][T19072] team0: Port device team_slave_1 added [ 1392.717563][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1392.753557][T19072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.770742][T19072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.804755][T19072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.849365][T19267] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12183'. [ 1392.873071][T19072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.880595][ T50] Bluetooth: hci2: command tx timeout [ 1392.894376][T19072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.924582][T19072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.980315][T19270] bridge0: port 3(batadv1) entered blocking state [ 1392.988926][T19270] bridge0: port 3(batadv1) entered disabled state [ 1392.997772][T19270] batadv1: entered allmulticast mode [ 1393.004996][T19270] batadv1: entered promiscuous mode [ 1393.102621][T19072] hsr_slave_0: entered promiscuous mode [ 1393.112668][T19072] hsr_slave_1: entered promiscuous mode [ 1393.123419][T19072] debugfs: 'hsr0' already exists in 'hsr' [ 1393.132045][T19072] Cannot create hsr debugfs directory [ 1393.322284][T19283] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12188'. [ 1393.366158][T19283] netlink: 'syz.4.12188': attribute type 10 has an invalid length. [ 1393.404442][T19283] syz_tun: entered promiscuous mode [ 1393.460823][T19283] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1393.480798][ T6528] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1393.491209][ T6528] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1393.633100][T19302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12194'. [ 1393.755261][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1393.809435][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12197'. [ 1393.994906][T19072] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1394.233531][T19072] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1394.444037][T19348] netlink: 'syz.2.12202': attribute type 12 has an invalid length. [ 1394.467966][T19351] netlink: 'syz.2.12202': attribute type 12 has an invalid length. [ 1394.571821][T19072] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1394.648300][ T6504] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.679436][ T6504] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.795341][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1394.807376][T19355] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 1394.856632][T19355] bond8: option packets_per_slave: allowed values 0 - 65535 [ 1394.871797][T19365] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 1394.896443][T19365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1394.916901][T19355] bond8 (unregistering): Released all slaves [ 1394.966818][ T50] Bluetooth: hci2: command tx timeout [ 1395.021699][ T6504] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1395.041381][T19072] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1395.122263][ T6504] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1395.578506][T19397] netlink: 'syz.2.12213': attribute type 11 has an invalid length. [ 1395.601137][T19396] xt_hashlimit: size too large, truncated to 1048576 [ 1395.610004][T19397] netlink: 'syz.2.12213': attribute type 11 has an invalid length. [ 1395.835393][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1395.839653][T19072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1395.860801][T19072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1395.872001][T19072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1395.898686][T19072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1395.926968][T19072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1395.951422][T19072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1395.971843][T19072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1395.988242][T19072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1396.197287][T19072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.260975][T19072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1396.317569][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.324748][ T6501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.351926][T19415] syzkaller1: entered promiscuous mode [ 1396.365931][T19415] syzkaller1: entered allmulticast mode [ 1396.423016][ T6504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.430265][ T6504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.626611][T19423] dvmrp0: entered allmulticast mode [ 1396.798978][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1396.875469][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1397.048453][ T50] Bluetooth: hci2: command tx timeout [ 1397.273909][T19451] __nla_validate_parse: 7 callbacks suppressed [ 1397.273928][T19451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12228'. [ 1397.313647][T19458] xt_l2tp: unknown flags: 10 [ 1397.319922][T19451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12228'. [ 1397.522059][T19470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1397.774367][T19072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.893476][T19072] veth0_vlan: entered promiscuous mode [ 1397.908485][T19492] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.12235'. [ 1397.918088][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1397.928585][T19072] veth1_vlan: entered promiscuous mode [ 1397.955585][T19492] netlink: ct family unspecified [ 1397.988691][T19072] veth0_macvtap: entered promiscuous mode [ 1398.027008][T19072] veth1_macvtap: entered promiscuous mode [ 1398.082700][T19072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.116997][T19072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1398.188925][ T6528] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.214652][ T6528] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.241259][ T6528] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.270514][ T6528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.522524][ T6521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.552282][ T6521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.593951][T19521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12246'. [ 1398.629730][T19523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12245'. [ 1398.648304][ T6528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.677221][ T6528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.715688][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1398.955426][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1398.994126][T19547] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12253'. [ 1399.126992][T19559] netlink: 260 bytes leftover after parsing attributes in process `syz.4.12257'. [ 1399.144773][T19559] netlink: zone id is out of range [ 1399.153800][T19559] netlink: zone id is out of range [ 1399.162345][T19559] netlink: zone id is out of range [ 1399.310316][T19571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12260'. [ 1399.389319][T19576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12262'. [ 1399.974980][T19581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12264'. [ 1399.996055][ C0] net_ratelimit: 9 callbacks suppressed [ 1399.996073][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1400.210431][T19591] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1400.630146][T19620] openvswitch: netlink: IPv4 tun info is not correct [ 1400.654462][T19623] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1400.984934][T19638] syzkaller0: entered promiscuous mode [ 1401.004706][T19638] syzkaller0: entered allmulticast mode [ 1401.035507][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1401.110448][T19647] bond1: entered promiscuous mode [ 1401.143168][T19647] bond1: entered allmulticast mode [ 1401.166903][T19647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1401.475460][T19669] bond0: ARP target 8.4.0.0 is already present [ 1401.484040][T19669] bond0: option arp_ip_target: invalid value (1032) [ 1401.673662][T19678] netlink: 'syz.2.12291': attribute type 1 has an invalid length. [ 1401.721332][T19678] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1401.819529][T19686] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1401.890944][T19690] netlink: 'syz.2.12295': attribute type 2 has an invalid length. [ 1402.075231][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1402.390322][T19710] Cannot find add_set index 65532 as target [ 1402.401328][T19710] __nla_validate_parse: 10 callbacks suppressed [ 1402.401347][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12299'. [ 1402.449747][T19712] 8021q: VLANs not supported on ip6gre0 [ 1402.758175][T19725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12304'. [ 1402.911732][T19733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1402.923165][T19733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1402.968882][T19734] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12308'. [ 1402.990081][T19742] netlink: 220 bytes leftover after parsing attributes in process `syz.0.12307'. [ 1403.008920][T19741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12311'. [ 1403.053958][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12311'. [ 1403.112048][T19747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12312'. [ 1403.115881][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1403.183938][T19751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12313'. [ 1403.261050][T19753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12313'. [ 1403.359466][T19756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12317'. [ 1404.155327][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1405.195527][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1405.958022][ T4990] udevd[4990]: worker [16772] /devices/virtual/block/nbd4 is taking a long time [ 1406.235405][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1407.275490][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1408.315877][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1409.355449][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1410.395472][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1411.435440][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1412.475442][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1413.515508][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1414.555469][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1415.595461][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1416.636543][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1417.675490][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1418.715452][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1419.755467][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1420.795395][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1421.835542][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1422.875460][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1423.915477][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1424.955831][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1425.995445][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1427.035443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1427.408495][T19771] __nla_validate_parse: 1 callbacks suppressed [ 1427.408513][T19771] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12324'. [ 1427.473052][T19779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12322'. [ 1427.536773][T19779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12322'. [ 1427.586367][T19788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1427.668567][T19792] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12326'. [ 1427.714358][T19797] netlink: 'syz.3.12329': attribute type 1 has an invalid length. [ 1427.737383][T19797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12329'. [ 1427.773663][T19799] netlink: 'syz.3.12329': attribute type 1 has an invalid length. [ 1427.872950][T19803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.929658][T19811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12333'. [ 1427.978095][T19813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12334'. [ 1427.994885][T19816] syzkaller1: entered promiscuous mode [ 1428.011853][T19816] syzkaller1: entered allmulticast mode [ 1428.084607][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1428.123921][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12335'. [ 1428.152165][T19819] netlink: 'syz.2.12335': attribute type 1 has an invalid length. [ 1428.302686][T19807] openvswitch: netlink: EtherType 50a is less than min 600 [ 1428.352956][T19830] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12336'. [ 1428.449160][T19829] bond8: (slave 26±ÿª¨úrBº“): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1428.507667][T19829] bond8: (slave 26±ÿª¨úrBº“): Enslaving as an active interface with an up link [ 1428.539093][T19829] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1428.928112][T19852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12344'. [ 1429.037502][T19855] netlink: 'syz.2.12345': attribute type 3 has an invalid length. [ 1429.115216][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1429.283357][T19866] netlink: 'syz.1.12350': attribute type 4 has an invalid length. [ 1429.309567][T19863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1429.336337][T19863] batadv_slave_0: entered promiscuous mode [ 1429.432161][T19879] veth0: entered promiscuous mode [ 1429.464394][T19879] veth0: left promiscuous mode [ 1429.492680][T19879] Bluetooth: MGMT ver 1.23 [ 1429.569676][T19884] veth0: entered promiscuous mode [ 1429.647647][T19884] veth0: left promiscuous mode [ 1430.155226][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1430.273870][T19925] veth0_to_bond: entered allmulticast mode [ 1430.775145][T19958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.782448][T19958] bridge0: port 2(bridge_slave_1) entered listening state [ 1430.789902][T19958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.797092][T19958] bridge0: port 1(bridge_slave_0) entered listening state [ 1430.857383][T19958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.864677][T19958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.128987][T19978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.195226][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1431.311409][T19996] ipt_REJECT: ECHOREPLY no longer supported. [ 1431.355567][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1431.451790][T20007] IPVS: Error connecting to the multicast addr [ 1431.530108][T20012] netem: change failed [ 1431.539551][T20011] netlink: 'syz.0.12395': attribute type 1 has an invalid length. [ 1431.583101][T20011] bond2: entered promiscuous mode [ 1431.589028][T20011] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1431.649705][T20011] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1431.692581][T20011] bond2: (slave bridge6): making interface the new active one [ 1431.703895][T20011] bridge6: entered promiscuous mode [ 1431.740531][T20011] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 1431.810182][T20017] netlink: 'syz.2.12396': attribute type 5 has an invalid length. [ 1431.971487][T20032] xt_hashlimit: size too large, truncated to 1048576 [ 1432.235224][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1432.491728][T20070] __nla_validate_parse: 16 callbacks suppressed [ 1432.491748][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12410'. [ 1432.623467][T20081] netlink: 'syz.0.12412': attribute type 25 has an invalid length. [ 1432.660550][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12412'. [ 1432.712696][T20081] netlink: 'syz.0.12412': attribute type 25 has an invalid length. [ 1432.713057][ T6521] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1432.721266][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12412'. [ 1432.756321][ T6521] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1432.776016][ T6521] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1432.801431][ T6521] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1432.886771][T20094] netlink: 'syz.2.12415': attribute type 25 has an invalid length. [ 1433.157681][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12424'. [ 1433.276648][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1433.332624][T20120] bond12: Unable to set down delay as MII monitoring is disabled [ 1433.347029][T20120] bond12 (unregistering): Released all slaves [ 1433.613163][T20141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1433.711503][T20142] gre1: entered promiscuous mode [ 1433.725861][T20142] gre1: entered allmulticast mode [ 1434.033315][T20172] tipc: Enabling not permitted [ 1434.043781][T20172] tipc: Enabling of bearer rejected, failed to enable media [ 1434.103144][T20165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12440'. [ 1434.269925][T20186] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12445'. [ 1434.315253][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1434.490345][T20203] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12449'. [ 1434.503380][T20203] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12449'. [ 1434.555538][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1434.566795][T20207] sctp: [Deprecated]: syz.1.12452 (pid 20207) Use of int in maxseg socket option. [ 1434.566795][T20207] Use struct sctp_assoc_value instead [ 1434.913380][T20223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12454'. [ 1434.932186][T27223] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1434.948934][T27223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1434.973707][T27223] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1434.987195][T27223] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1434.998335][T27223] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1435.106354][T20222] macvtap1: entered promiscuous mode [ 1435.142096][T20222] macvtap1: entered allmulticast mode [ 1435.156978][T20222] veth1_vlan: entered allmulticast mode [ 1435.235805][T20225] macvtap2: entered promiscuous mode [ 1435.247165][T20225] macvtap2: entered allmulticast mode [ 1435.253934][T20235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12457'. [ 1435.355222][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1435.575981][T20245] x_tables: duplicate underflow at hook 1 [ 1435.602936][T20253] x_tables: duplicate underflow at hook 1 [ 1435.743290][T20219] vxcan1 speed is unknown, defaulting to 1000 [ 1436.395365][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1437.019289][T20306] vlan2: entered allmulticast mode [ 1437.116350][T27223] Bluetooth: hci3: command tx timeout [ 1437.182922][T20314] xt_nfacct: accounting object `syz1' does not exist [ 1437.215610][T20313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.280350][T20313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.285027][T20317] xt_ipcomp: unknown flags 1D [ 1437.435255][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1437.529005][T20326] __nla_validate_parse: 6 callbacks suppressed [ 1437.529023][T20326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12484'. [ 1437.639822][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12484'. [ 1437.656543][T20332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12484'. [ 1438.004219][T20351] x_tables: unsorted entry at hook 3 [ 1438.021908][T20350] x_tables: unsorted entry at hook 3 [ 1438.105663][T20219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.112916][T20219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.120549][T20219] bridge_slave_0: entered allmulticast mode [ 1438.128664][T20219] bridge_slave_0: entered promiscuous mode [ 1438.138113][T20219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.145649][T20219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.153016][T20219] bridge_slave_1: entered allmulticast mode [ 1438.161696][T20219] bridge_slave_1: entered promiscuous mode [ 1438.240882][T20219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.274642][T20219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.391598][T20219] team0: Port device team_slave_0 added [ 1438.439462][T20219] team0: Port device team_slave_1 added [ 1438.475273][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1438.582507][T20219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1438.602976][T20219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1438.676831][T20219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.730917][T20219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.754969][T20219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1438.827001][T20219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.876622][T20371] netlink: 'syz.4.12494': attribute type 5 has an invalid length. [ 1439.060787][T20219] hsr_slave_0: entered promiscuous mode [ 1439.077328][T20219] hsr_slave_1: entered promiscuous mode [ 1439.096790][T20219] debugfs: 'hsr0' already exists in 'hsr' [ 1439.118063][T20219] Cannot create hsr debugfs directory [ 1439.195929][T27223] Bluetooth: hci3: command tx timeout [ 1439.442129][T20219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.454324][T20219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.515204][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1439.634953][T20219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.659508][T20219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.843369][T20219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.856915][T20219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.958629][T20219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.978650][T20219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.230079][T20219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1440.244087][T20219] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1440.253182][T20219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1440.266888][T20219] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1440.279136][T20219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1440.290652][T20219] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1440.299422][T20219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1440.308897][T20219] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1440.383232][T20219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.403884][T20219] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.418435][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.425602][ T6521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.440527][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.447648][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1440.555232][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1440.783503][T20219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.834240][T20219] veth0_vlan: entered promiscuous mode [ 1440.848420][T20219] veth1_vlan: entered promiscuous mode [ 1440.879303][T20219] veth0_macvtap: entered promiscuous mode [ 1440.888972][T20219] veth1_macvtap: entered promiscuous mode [ 1440.910189][T20219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.925084][T20219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.941154][ T6512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.953095][ T6512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.972916][ T6512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.986292][ T6512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.142998][ T6512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.153071][ T6512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.192750][ T6526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.203827][ T6526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.276244][T27223] Bluetooth: hci3: command tx timeout [ 1441.320194][T20396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1441.595595][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1442.635355][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1443.355504][T27223] Bluetooth: hci3: command tx timeout [ 1443.675285][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1444.715282][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1445.755267][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1446.795277][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1447.835423][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1448.875309][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1449.916621][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1450.955374][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1451.995287][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1453.035286][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1454.075443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1455.115259][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1456.155306][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1457.173566][T20410] netlink: 'syz.2.12497': attribute type 21 has an invalid length. [ 1457.195231][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1457.532339][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12503'. [ 1457.589404][T20428] vlan3: entered allmulticast mode [ 1457.594771][T20428] mac80211_hwsim hwsim149 wlan0: entered allmulticast mode [ 1457.913411][T20450] tap0: tun_chr_ioctl cmd 1074025676 [ 1457.931695][T20450] tap0: owner set to 0 [ 1457.939461][T20454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12509'. [ 1457.964339][T20450] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12507'. [ 1458.224938][T20470] geneve2: entered promiscuous mode [ 1458.230627][T20470] geneve2: entered allmulticast mode [ 1458.239001][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1458.270475][ T4163] IPVS: starting estimator thread 0... [ 1458.289694][T20467] bond2: Removing last arp target with arp_interval on [ 1458.298276][ T6521] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1458.313025][ T6521] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1458.327457][ T6526] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1458.362166][ T6526] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1458.373446][T20474] IPVS: using max 30 ests per chain, 72000 per kthread [ 1458.549017][T20485] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1459.114429][T20492] netlink: 71 bytes leftover after parsing attributes in process `syz.3.12524'. [ 1459.161713][T20499] netlink: 'syz.0.12522': attribute type 2 has an invalid length. [ 1459.192131][T20497] netlink: 'syz.1.12521': attribute type 1 has an invalid length. [ 1459.275799][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1459.327308][T20497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1459.460935][T20510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12526'. [ 1459.622609][T20505] bond1: (slave veth0_to_bond): making interface the new active one [ 1459.633605][T20505] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1459.701221][T20497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1459.712654][T20497] bond1: (slave bond2): Enslaving as an active interface with a down link [ 1460.072032][T20539] No such timeout policy "syz1" [ 1460.310129][T20554] netlink: 'syz.0.12541': attribute type 23 has an invalid length. [ 1460.315208][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1460.353425][T20553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12540'. [ 1460.376577][T20556] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12542'. [ 1460.414329][T20553] bond1 (unregistering): Released all slaves [ 1461.355281][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1462.395495][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1463.435260][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1464.475359][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1465.515279][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1466.555654][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1467.595259][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1468.635245][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1469.675335][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1470.715242][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1471.755299][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1472.795256][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1473.835391][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1474.875401][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1475.915321][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1476.955270][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1477.995284][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1479.035230][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1480.075255][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1481.115238][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1481.833206][T20565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12545'. [ 1481.868814][T20566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12547'. [ 1482.155212][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1482.270934][T20595] veth0: entered promiscuous mode [ 1482.279806][T20595] veth0: left promiscuous mode [ 1482.427946][T20605] netlink: 'syz.0.12557': attribute type 29 has an invalid length. [ 1482.441456][T20605] netlink: 'syz.0.12557': attribute type 29 has an invalid length. [ 1482.572583][T20612] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12558'. [ 1482.659535][T20617] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 1482.789957][T20622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12561'. [ 1482.937177][T20591] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1483.091640][T20630] ip6tnl2: entered promiscuous mode [ 1483.100574][T20630] team0: Device ip6tnl2 is of different type [ 1483.140805][T20632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12563'. [ 1483.195286][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1484.235211][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1485.275243][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1485.384297][T20602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1485.673341][T20644] netlink: 256 bytes leftover after parsing attributes in process `syz.0.12567'. [ 1485.852315][T20655] syzkaller0: entered promiscuous mode [ 1485.867519][T20655] syzkaller0: entered allmulticast mode [ 1485.892491][T20659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12574'. [ 1485.902919][T20659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12574'. [ 1485.954862][T20659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12574'. [ 1485.973338][T20659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12574'. [ 1486.266909][T20678] vxcan1 speed is unknown, defaulting to 1000 [ 1486.315288][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1486.385687][T20685] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1486.868350][T20698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1486.890586][T20698] __nla_validate_parse: 4 callbacks suppressed [ 1486.890603][T20698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12587'. [ 1487.003875][T20704] netlink: 'syz.1.12590': attribute type 1 has an invalid length. [ 1487.056102][T20707] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12590'. [ 1487.355391][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1488.395262][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1489.435243][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1489.628422][ T6512] bridge_slave_1: left allmulticast mode [ 1489.634095][ T6512] bridge_slave_1: left promiscuous mode [ 1489.640557][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.663046][ T6512] dvmrp0: left allmulticast mode [ 1489.771873][ T6512] bond7 (unregistering): (slave ip6erspan0): Releasing active interface [ 1490.523059][ T6512] bond1 (unregistering): Released all slaves [ 1490.539308][ T6512] bond2 (unregistering): Released all slaves [ 1490.553108][ T6512] bond0 (unregistering): Released all slaves [ 1490.570750][ T6512] bond3 (unregistering): Released all slaves [ 1490.590634][ T6512] bond4 (unregistering): Released all slaves [ 1490.604285][ T6512] bond5 (unregistering): Released all slaves [ 1490.618971][ T6512] bond6 (unregistering): Released all slaves [ 1490.635028][ T6512] bond7 (unregistering): Released all slaves [ 1490.653739][ T6512] bond8 (unregistering): Released all slaves [ 1490.669234][ T6512] bond9 (unregistering): Released all slaves [ 1490.897525][ T6512] : left promiscuous mode [ 1490.990156][ T6512] : left promiscuous mode [ 1491.076041][ T6512] tipc: Disabling bearer [ 1491.100136][ T6512] tipc: Disabling bearer [ 1491.109348][ T6512] tipc: Left network mode [ 1491.679981][T27223] Bluetooth: hci4: command 0x0406 tx timeout [ 1492.137964][ T6512] hsr_slave_0: left promiscuous mode [ 1492.143868][ T6512] hsr_slave_1: left promiscuous mode [ 1492.150052][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1492.160335][ T6512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1492.174556][ T6512] vlan0: left allmulticast mode [ 1492.179650][ T6512] veth0_vlan: left allmulticast mode [ 1492.184979][ T6512] vlan0: left promiscuous mode [ 1493.396000][ T6512] team0 (unregistering): Port device team_slave_1 removed [ 1493.412816][ T6512] team0 (unregistering): Port device team_slave_0 removed [ 1493.854706][ T6512] IPVS: stop unused estimator thread 0... [ 1501.915718][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 1504.957794][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1506.877321][ T31] INFO: task udevd:16772 blocked for more than 143 seconds. [ 1506.885960][ T31] Not tainted syzkaller #0 [ 1506.890939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1506.900926][ T31] task:udevd state:D stack:23400 pid:16772 tgid:16772 ppid:4990 task_flags:0x400140 flags:0x00080000 [ 1506.913061][ T31] Call Trace: [ 1506.916707][ T31] [ 1506.919676][ T31] __schedule+0x17b4/0x5680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1506.924194][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1506.931188][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 1506.937739][ T31] ? __pfx___schedule+0x10/0x10 [ 1506.942735][ T31] ? schedule+0x90/0x360 [ 1506.950231][ T31] schedule+0x164/0x360 [ 1506.954452][ T31] schedule_timeout+0x158/0x2c0 [ 1506.964689][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1507.000313][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1507.052967][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1507.085511][ T31] ? prepare_to_wait_event+0x436/0x480 [ 1507.106018][ T31] nbd_queue_rq+0x857/0x1100 [ 1507.124759][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1507.140994][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1507.159168][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1507.179062][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1507.197322][ T31] ? sbitmap_get+0x229/0x390 [ 1507.225381][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1507.231450][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1507.249170][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1507.268403][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1507.286825][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 1507.292635][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1507.298107][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1507.304156][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1507.309806][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 1507.314968][ T31] blk_mq_dispatch_list+0xd16/0xe10 [ 1507.320318][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 1507.326255][ T31] ? blk_mq_dispatch_list+0x1b0/0xe10 [ 1507.331695][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1507.338087][ T31] ? rcu_is_watching+0x15/0xb0 [ 1507.342975][ T31] blk_mq_flush_plug_list+0x48d/0x570 [ 1507.350655][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 1507.360101][ T31] ? blk_mq_submit_bio+0x1acf/0x28e0 [ 1507.372047][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1507.386092][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 1507.391299][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 1507.397292][ T31] __submit_bio+0x28d/0x580 [ 1507.401869][ T31] ? __pfx___submit_bio+0x10/0x10 [ 1507.408972][ T31] ? bio_associate_blkg+0x6d/0x230 [ 1507.414163][ T31] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1507.431193][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1507.439132][ T31] block_read_full_folio+0x599/0x830 [ 1507.444486][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 1507.452800][ T31] filemap_read_folio+0x137/0x3b0 [ 1507.460397][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1507.466960][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 1507.472569][ T31] ? filemap_add_folio+0x356/0x530 [ 1507.478987][ T31] do_read_cache_folio+0x358/0x590 [ 1507.484464][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1507.491657][ T31] read_part_sector+0xb6/0x2b0 [ 1507.499172][ T31] adfspart_check_ICS+0xb1/0x960 [ 1507.504175][ T31] ? seq_buf_printf+0x212/0x2d0 [ 1507.509758][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1507.522652][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1507.532901][ T31] bdev_disk_changed+0x817/0x1770 [ 1507.538452][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1507.543970][ T31] blkdev_get_whole+0x380/0x510 [ 1507.549148][ T31] bdev_open+0x31e/0xd30 [ 1507.553433][ T31] blkdev_open+0x470/0x610 [ 1507.559891][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1507.564877][ T31] do_dentry_open+0x785/0x14e0 [ 1507.570609][ T31] vfs_open+0x3b/0x340 [ 1507.574714][ T31] ? path_openat+0x2df0/0x3860 [ 1507.579818][ T31] path_openat+0x2e08/0x3860 [ 1507.584458][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1507.589924][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1507.596561][ T31] ? __pfx_path_openat+0x10/0x10 [ 1507.601615][ T31] ? __x64_sys_openat+0x138/0x170 [ 1507.607093][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1507.612051][ T31] do_file_open+0x23e/0x4a0 [ 1507.616669][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1507.621722][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1507.627445][ T31] ? alloc_fd+0x64b/0x6c0 [ 1507.631990][ T31] do_sys_openat2+0x113/0x200 [ 1507.637007][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1507.642468][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1507.647811][ T31] ? rcu_is_watching+0x15/0xb0 [ 1507.652597][ T31] __x64_sys_openat+0x138/0x170 [ 1507.658146][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.664254][ T31] do_syscall_64+0x15f/0xf80 [ 1507.669369][ T31] ? clear_bhb_loop+0x40/0x90 [ 1507.674100][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.680174][ T31] RIP: 0033:0x7f69eaaa7407 [ 1507.684718][ T31] RSP: 002b:00007ffe38bdd770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1507.694021][ T31] RAX: ffffffffffffffda RBX: 00007f69eb206880 RCX: 00007f69eaaa7407 [ 1507.702414][ T31] RDX: 00000000000a0800 RSI: 000056218b570280 RDI: ffffffffffffff9c [ 1507.710467][ T31] RBP: 000056218b56f910 R08: 0000000000000000 R09: 0000000000000000 [ 1507.719001][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000056218b56f500 [ 1507.727350][ T31] R13: 000056218b57d190 R14: 0000000000000000 R15: 000056218b56f500 [ 1507.735739][ T31] [ 1507.738922][ T31] [ 1507.738922][ T31] Showing all locks held in the system: [ 1507.761369][ T31] 1 lock held by khungtaskd/31: [ 1507.783865][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1507.797554][ T31] 2 locks held by getty/5375: [ 1507.802300][ T31] #0: ffff888031d590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1507.814943][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1507.840344][ T31] 2 locks held by kworker/1:7/4163: [ 1507.855896][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1507.898193][ T31] #1: ffffc90004087c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1507.927289][ T31] 3 locks held by kworker/u8:32/6526: [ 1507.935438][ T31] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1507.965346][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1507.985359][ T31] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 1508.007830][ T31] 5 locks held by syz-executor/16758: [ 1508.020090][ T31] #0: ffff88808a7e8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1508.045336][ T31] #1: ffff88808a7e80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1508.069055][ T31] #2: ffffffff8ff51b80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1508.096753][ T31] #3: ffff8880521072f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 1508.127469][ T31] #4: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1508.146622][ T31] 3 locks held by udevd/16772: [ 1508.158438][ T31] #0: ffff888027555350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1508.186532][ T31] #1: ffff888026fb7898 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 1508.205856][ T31] #2: ffff8880276751f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1508.233260][ T31] 3 locks held by syz-executor/20219: [ 1508.239920][ T31] #0: ffff888065c1cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1508.261743][ T31] #1: ffff888065c1c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1508.271984][ T31] #2: ffffffff8ff51b80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1508.288430][ T31] [ 1508.300143][ T31] ============================================= [ 1508.300143][ T31] [ 1508.358470][ T31] NMI backtrace for cpu 0 [ 1508.358494][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1508.358537][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1508.358559][ T31] Call Trace: [ 1508.358568][ T31] [ 1508.358577][ T31] dump_stack_lvl+0xe8/0x150 [ 1508.358602][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1508.358628][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1508.358650][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1508.358678][ T31] sys_info+0x135/0x170 [ 1508.358699][ T31] watchdog+0xfd3/0x1030 [ 1508.358731][ T31] ? watchdog+0x1c9/0x1030 [ 1508.358761][ T31] kthread+0x388/0x470 [ 1508.358785][ T31] ? __pfx_watchdog+0x10/0x10 [ 1508.358807][ T31] ? __pfx_kthread+0x10/0x10 [ 1508.358832][ T31] ret_from_fork+0x514/0xb70 [ 1508.358861][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1508.358880][ T31] ? __switch_to+0xc79/0x1410 [ 1508.358909][ T31] ? __pfx_kthread+0x10/0x10 [ 1508.358932][ T31] ret_from_fork_asm+0x1a/0x30 [ 1508.358969][ T31] [ 1508.358976][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1508.473863][ C1] NMI backtrace for cpu 1 [ 1508.473881][ C1] CPU: 1 UID: 0 PID: 6512 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 1508.473899][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1508.473909][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1508.473937][ C1] RIP: 0010:load_new_mm_cr3+0x13b/0x1d0 [ 1508.473961][ C1] Code: b7 c3 3d ff 07 00 00 73 4c f7 c3 00 08 00 00 75 50 ff c3 0f b7 c3 48 09 c1 48 b8 00 00 00 00 00 00 00 80 48 09 c8 0f 22 d8 5b <41> 5c 41 5e 41 5f e9 1a 22 32 0a cc 90 0f 0b 90 eb b3 90 0f 0b 90 [ 1508.473974][ C1] RSP: 0018:ffffc90003e376d0 EFLAGS: 00000046 [ 1508.473987][ C1] RAX: 000000013fe64000 RBX: ffff88813fe70c40 RCX: 000000000000002e [ 1508.473998][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88813fe64000 [ 1508.474008][ C1] RBP: 0000000000000000 R08: ffff88813fe7150f R09: 1ffff11027fce2a1 [ 1508.474018][ C1] R10: dffffc0000000000 R11: ffffed1027fce2a2 R12: 00000000000def4d [ 1508.474029][ C1] R13: dffffc0000000000 R14: ffff88813fe64000 R15: 0000000000010000 [ 1508.474041][ C1] FS: 0000000000000000(0000) GS:ffff888125393000(0000) knlGS:0000000000000000 [ 1508.474054][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1508.474069][ C1] CR2: 00005611b829aee8 CR3: 000000013fe64000 CR4: 00000000003526f0 [ 1508.474084][ C1] Call Trace: [ 1508.474090][ C1] [ 1508.474099][ C1] switch_mm_irqs_off+0x45c/0x690 [ 1508.474123][ C1] use_temporary_mm+0x98/0x140 [ 1508.474144][ C1] __text_poke+0x632/0x9a0 [ 1508.474167][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1508.474186][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1508.474205][ C1] ? kmem_cache_alloc_bulk_noprof+0xaf/0x7c0 [ 1508.474228][ C1] ? __pfx___text_poke+0x10/0x10 [ 1508.474252][ C1] smp_text_poke_batch_finish+0x923/0x1160 [ 1508.474279][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1508.474302][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 1508.474331][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1508.474353][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 1508.474371][ C1] static_key_disable+0x1a/0x20 [ 1508.474387][ C1] toggle_allocation_gate+0x1fe/0x290 [ 1508.474409][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1508.474430][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1508.474450][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1508.474465][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1508.474481][ C1] process_scheduled_works+0xb5d/0x1860 [ 1508.474497][ C1] ? trace_contention_end+0x3b/0x160 [ 1508.474532][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1508.474550][ C1] ? assign_work+0x3d5/0x5e0 [ 1508.474568][ C1] worker_thread+0xa53/0xfc0 [ 1508.474597][ C1] kthread+0x388/0x470 [ 1508.474622][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1508.474637][ C1] ? __pfx_kthread+0x10/0x10 [ 1508.474655][ C1] ret_from_fork+0x514/0xb70 [ 1508.474673][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1508.474688][ C1] ? __switch_to+0xc79/0x1410 [ 1508.474711][ C1] ? __pfx_kthread+0x10/0x10 [ 1508.474730][ C1] ret_from_fork_asm+0x1a/0x30 [ 1508.474756][ C1] [ 1508.777955][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1508.784845][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1508.793977][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1508.804049][ T31] Call Trace: [ 1508.807341][ T31] [ 1508.810280][ T31] vpanic+0x56c/0xa60 [ 1508.814255][ T31] ? __pfx___schedule+0x10/0x10 [ 1508.819093][ T31] ? __pfx_vpanic+0x10/0x10 [ 1508.823601][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1508.829743][ T31] panic+0xc5/0xd0 [ 1508.833456][ T31] ? __pfx_panic+0x10/0x10 [ 1508.837877][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1508.843322][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1508.849474][ T31] watchdog+0x102c/0x1030 [ 1508.853829][ T31] ? watchdog+0x1c9/0x1030 [ 1508.858267][ T31] kthread+0x388/0x470 [ 1508.862347][ T31] ? __pfx_watchdog+0x10/0x10 [ 1508.867031][ T31] ? __pfx_kthread+0x10/0x10 [ 1508.871621][ T31] ret_from_fork+0x514/0xb70 [ 1508.876227][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1508.881358][ T31] ? __switch_to+0xc79/0x1410 [ 1508.886035][ T31] ? __pfx_kthread+0x10/0x10 [ 1508.890627][ T31] ret_from_fork_asm+0x1a/0x30 [ 1508.895403][ T31] [ 1508.899090][ T31] Kernel Offset: disabled [ 1508.903406][ T31] Rebooting in 86400 seconds..