last executing test programs: 2m41.50908123s ago: executing program 4 (id=1978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x111600, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000001c0)={{[0x7f21, 0xc862, 0xfffffffb, 0x81]}, 0x0, 0x2, 0x10, 0x0, &(0x7f00000000c0)=[{{@_ha_fsid={[0x80000000, 0x8db]}, {0x4ab6, 0x1}}, 0x7, 0x0, '\x87\\--+[@%(:,,\\-&:#)-\\)$\x00'}, {{@align=0xbe, {0x8, 0x0, 0x2, 0x3}}, 0x9, 0x0, '\x1d.(\\[)\\[\x00'}, {{@_ha_fsid={[0x3, 0xfffffff1]}, {0x8, 0x1, 0x6, 0x9}}, 0x4, 0x0, '\x00'}, {{@_ha_fsid={[0x31d3]}, {0x9, 0x3e1, 0xffffff24, 0x3}}, 0x8, 0x0, '\\^#!-\x00'}, {{@align=0x3, {0x0, 0x8, 0x0, 0x3}}, 0x5638, 0x0, '\x00'}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)={0x1, 0x8, [@multicast, @empty, @random="b1de083c1151", @random="1ce38cde3a7c", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @random="2710aa66362c"]}) 2m41.282372696s ago: executing program 4 (id=1979): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xea60}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x310, 0xf0, 0xffffffff, 0xf0, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x6b, @icmp_id=0x65}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}, @ipv4=@multicast2, @gre_key=0x400, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 2m40.917200402s ago: executing program 4 (id=1980): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x5, 0x0, 0xfffffffe}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@generic='^(']}, 0x18}}, 0x40000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001880)={0x18, 0x2f, 0x1, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0xe9, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m40.597559228s ago: executing program 4 (id=1983): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1240d0, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2m40.437396929s ago: executing program 4 (id=1986): r0 = socket$kcm(0x29, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000440)={r2}, &(0x7f00000001c0)=0x8) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@loopback, 0x1a, r6}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2m40.01505678s ago: executing program 4 (id=1994): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf25060000009092994fca4e6e4525edabaab78b234c2e6b34"], 0x14}}, 0x24048000) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}}) (async) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r7 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000140), 0x4) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000200), 0x12) 2m30.617677392s ago: executing program 2 (id=2116): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r1, 0x1, 0x33, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000b80)) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000000)) (async) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f00000000c0), 0x4) (async) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) 2m30.505413106s ago: executing program 2 (id=2118): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x20008000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3e, 0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f0000000740)=""/135, 0x87}], 0x3, &(0x7f0000000240)=""/2, 0x2}, 0x3}], 0x1, 0x40006023, 0x0) socketpair(0x22, 0x2, 0x4, &(0x7f0000005fc0)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @rose={'rose', 0x0}, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000002003904000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac1414aa0800040001010000"], 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000440)={'veth1\x00', 0x600}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f0000000480)=@bridge_dellink={0x60, 0x11, 0x300, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x26ef3448ec1f235b, 0x20}, [@IFLA_MASTER={0x8}, @IFLA_IFALIASn={0x4}, @IFLA_ADDRESS={0xa}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_bridge\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x4084) 2m28.646144583s ago: executing program 2 (id=2125): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10, 0x10}]}}, 0x0, 0x26}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x7ad71c5c2912d839, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) 2m28.635444371s ago: executing program 2 (id=2126): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000002c0)={0x4, 0x1, 0x5, 0xffa, 0x2, 0x0, [{0x7fffffffffffffff, 0x0, 0x6, '\x00', 0x8}, {0x1, 0x1000, 0x5}]}) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f00000000c0)) r3 = accept(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000140)=0x80) listen(r3, 0x2) setsockopt(r0, 0x0, 0x7, &(0x7f00000001c0)="1316df55bcd5b1a89b092c145f0a44539dce6d50aa031c8c6739f57d8041397388ba285ed9719c0622f87a88867b649c0db30d467e7f6c2a53c2b7365848702028e19379893be7b66c95a5bda558e25558c525bddbdce2d6f9f983eecca4fd34899a3e6d2d8527132ef8a441a498fe9c50807bb1ff28f39f8b2fb6fec1a580eac92c59713cc617c2d97750af262738e854894822fd11fbd7d51e9d8585f0bd95bc5347b8baa014666487f9b976e30d7f07a7943d6618c9ea867a734b866ed8cb8614055baed69ab74c1950cb2db82ae836f7b51bd710076ec7c31cc2081ed7a19d", 0xe1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'vlan1\x00', @random="017335fffff8"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x12c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}, @typed={0x8, 0xaa, 0x0, 0x0, @u32=0xc}, @generic="0bdab8e40bb2cc70c3b110471372ae7a003c5cb1ab849fdd0df1b20649d4a008faa649712237cc8c83a39badfeaa65e92cb0b7d844f5cb0e9b525d84332c5058fc0f216adb72b6d473fd1dde93b2587c9fc4aa3ca4e37ed8c4847643bad824eb0b7d548050d76fefd2fd7e96e3e611a0ffb0ebf0cd108b0d6185235857288810225277077fcd2e4b9ed69c790b1e904d1c4804ae0afbb887e14d2bd623df9f7d7dc61e7911bb204a0c429bb22f715c59884afd7c32541dc3e82691fb99ac7ae6ed1730566a36197dc440f59451553939a2ba9aef55819a9b8a7e01", @generic="95c3e087693de123597de2c63d45c71ca8c416d0d7"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r7}]}, 0x12c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendto$packet(r5, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) 2m28.439557112s ago: executing program 2 (id=2129): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000340)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x44, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x80f514e10c300148) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f00000002c0)='\x00', 0x80080, &(0x7f0000000440)={@align=0x7fffffff, {0x800, 0xe, 0x80, 0x4}}, 0x4, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x6}) sendmmsg$alg(r7, &(0x7f0000004400)=[{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000840)="2b06e554116da96f82028745510d2b9651bdaa03a600fd3715a62741a499f76a5105f4f156e51213993212a4f77854432466e8996fd6dfc539cf9b2660f4a6d8c5e65351b2a2fa4ab21cf2903a0616ebb611ec14aadf6f8a9df7e3bf09cb9370da23343603ea44c02d4a1ebc6ba15e522ae036456a4d02d53616a701d9c7c6009f774b9e1b697eb24680fd25061b2ff84c", 0x91}, {&(0x7f0000000580)="a630375d0cd15fd24af9b686383b31b1e32ab5", 0x13}, {&(0x7f0000000900)="f66dc127ad0c1a95c002787b6b1a9980f4537b2c1096739ef640bb07b7b33dad627034f7d30aa605676a855ee7b97c7fd70388fe8b2473c1f3ef9ad60a1118fe1bfcf03b3abda553db2d946dc7935cfc71b7143eefdf0a0a91d9fd1c1da0b1aca11823fc39aed25116dd157af3fba67f77ef6310ec4fd1783a9ba3e2ab63ea30d79cf415e31c8fc7", 0x88}, {&(0x7f00000005c0)="55c4ae85f07aab72b4a23dbde36f79a9456013c9eef54b264bf221d797c925af59bdbf4000c7014bdee0cecfdbb0f26b0a04101e6e", 0x35}, {&(0x7f0000000a00)="86550a1f7e4395e6954bc4168ca00670da3de72383eb21dd08993cd11bf827abf287006162660632b8d8fd1c3735f2ad7aba7ff7d725dcbcbb7882d3d7c4ac453241b47874f7fa2e2214aa1324d221b2b1c6a4468fba1379573e9fbbb8ecd2689accc6380c22af7ea672d3f6181c8e75f523539580936337c1228903df8546cb19a9e0c5b8725d14d2e79f4a84256e22c2804ea57e6d67f62a0fd8e3730ab58ef2", 0xa1}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="e8f69fe05b7d101328fc4609827807ea22a1c5c82fe44de39040bca75104c8a4dd5a6427cb25dd7dd1f9dbe97661923ecabb909285c6ccc9a8479ff972ab27d949141bb3f5e6ebffc0bcdd1e27bdecdb9359c83fc2c845180e7775318b7adf57f368411ab745af5e3c99f0a71014709a7af9a8e5f62930987ec51d614d0c1d5af8bccdd30b6c42591b52ca4de7b4b319a92c028b190ec76ff9c3657090e3ebcfbb2c461679b7", 0xa6}], 0x7, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x20000005}, {0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c80)="24607b2c75b662b9c59a2f9b6c3d83aa3e18fd59b953f43d22a9a4ed6f4953943a946f1e2e5b62b2d040829fe21bf6695588c965672741f2e795d0cf9ae46681e6e36244a858d8c785e29e890675aa3366ada0aadc8ebded450bfc06ed0eeae28c48095a414706e8d5e21c652f6944f3637be86c7c26e622cdb80bb6803d518e27ab914fed8ef77ee0089827aa04048524f666b4cd6096fe0efbfa6baf6f3e9a015686546fbf3ab7a828fac647aac61583399fcb2c4a8fe1a4731fb5806efc6fa5ef3fa82ed571d4a34c2102db44bd86c6a059cf", 0xd4}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="0e73a2e5b1da637366eb438ce10f134ed992344c41d556dac03d658433593854cee3c39a1b4291903037f8cd9537511700f82774709eb22cfab8fe91af8a65b82230fccea489dcf6f1fb75f088e7ea9c6424e5476f2f50f50cf1f206200ff7038236175613f198779c74788cf963a4985b7415299e79fb3e2202006044ab3020af64c1129859b20c2074a0f4aa4c623a2e509b6da24e1a4d6b935e21cd4db3ee8cfc2ae8", 0xa4}, {&(0x7f0000000480)="366287b7014b5545", 0x8}, {&(0x7f0000000ec0)="5cffabb98451bb6a336099ad0cd39c6fdb9daeaa6d1a95470f4a71aa270a4203ee277629bca31b4e84540c1d47e9e4a2184b736af3de9dc69752280db39d4f092be1013b396180d12df5a23b7debec1b75866c97cfdabc0cc57d", 0x5a}], 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000017010000030000000100000000000000000017010000030000000000000000000000200000000000000017010000020000000b000000d1f91d8ac40b1eae2b98c900000000000000a539f8f4ead7f0620f35da7afb938338d32470073b86dae8d50d4e24ff4a95918795fdddeef60e852cb660bb089c064bbc2c9db9"], 0x50}, {0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001040)="d14475f3d70ab5bc8a38162e22fe2eb6173562453491cb976efacdc46bd308a6b7837017b181bd3308f97c1583b7f8e0ae02d5b4c8333eeb7d3c226baa9dee87d0a69e0ec4010ed60b59de69aa6c3727b59c4df992fec3da776a98b8621a0a455fbb1ba244bdd672af66d9c79532cdf607289d99ef01dce28a6c99eec0d39d8d368e6e182151312bd19bcaaff8f332ea155fd33ec281919de79663c30b271e8fab5da2e486d114570ec472d5cd38b6b524112f12d80a0371c6fe5d968b3ce1ff634e140c5d3fd7e6db4a1aed7e74f5c5be53d0477d6f28e6cbb06d5f247382441612961f7a0b908d358f896c5c7cbafc7390319cd9fad3e2f410ab65e8c27a2218500bb5e4c4afd2688b4825858cd806b587c4e3f047b0a5fb3367ec9ff7a27ad81a11a702ba576bf03e928ec5233badb42a2655c88ce53099f43c08f693ca47b9413721f69e8919abbba1a79f04d64255b369392a06939e074352abffe1be4f27adc4c16930b0efd52f692968ed7fc3688fb7ea46ce9acd63aadcc9507c1d6a5b2b0de5081f52d2ef7c5fa00fcfcba10f6ca5c52b12eaa9c8461456a95c98cb468974fddd3c7ccfbfe996c308b7583f3f101eb57cdf83217883656780199af0e474ad9cb5272551dc5a5c7e63d8f0d08c6078fce800470d4963021b38d3b985fe19b0d0f236f479a135e4cef9d18056e085ed34cd2479ab237d9ed3dd06a4c53e777e591302b677fd43950071050a6307ba6956294fb78d702f229a4d923f7655bfb2a5e52b811125cc605c8edb748d67f390971399893227fc03103bc59c602fe1c5852754faa16d3fa247daf0b1550bc45fe54d8f67493586b14cdb319aa887cba74143dfc21ed71d7175aa2d98d5858af3f95335c71feaa3f3d4fd70933647d8a7686c0401a3c6dfbf6081495ccc6c30e0d518470ad00e11e70a3efd579b47ae7b6ac63ae9f603a6afbec2e1834e68938307fba017f33a58a2f9de13fcb7fa5ab2637353523387524afa994d10a218810e9c9e9209afbd76491c510166265efa789a4e1a2b19a81313fa0f6bbecfe4d258725183d3db1005f9f0f618612bb383697305e27c887095536b0b94bcc8d66d89576316747d755ad9203c53056eb11bc7c795003693d78a1ca10f4358fec926062f150d124cc2932c85cf111f8aa0fe120aa3a427bfc1b1695f8cf5c10ff0607d9f7ffb37eeb219a58a0a5512c9a5177a43a9fc61d0d47eac36d8b4374f2f4cae9788f384be513e09116c4ca870f09632f6b4aaa1b85d7c32b8f8381d48606d2d6ff451359a9703e8b6f34c90160da352d673a260b68bb0b9860e1440ad4eb1e7a57059d9f0395652afa08130abfc2d54ed37ac90ec23a4810be65dd66547b144f9310d20b5dd641c9b77b7b76bcd256617bcf064f92b1d1758ec1da2769204bfa4ac39c3f35fbd69bd57a837045959cf35afcd5393c5a7c801a74e57a03cd238e6538904f40bd5fdd385a684a03d830a3e7e886751d7d1d93df82c2392ce2a18afc7dd0d7ff7d9a65575c9c857177af6f8660987b482a66126564f67ff108d32df2e1c4f4a3d6084476631bbff876eb991a1367235314819179014b819840f6da3936189d2fff719f9c8182a8d0ee2f293c20a05aa8bb19a98ece0da0f63802d45903dddc8b5618c6d7e94994d2926f255c4eef3a2da3a4bc3a6a4a19cdb6c89a066dbeb963c3cfc95b8a8bdc778f5f32b853377b10eaacbfcdc3857b535ef26a722ffcc7a9016787f7b7a931d3dee1ab0fd32b0e7959dc49de4d383249baefb7e5ec7c0730a1227555543b8ea240e6e85de962fc7990e7b2c9edaf69f97dc61cbd5c6c18deb67a0a714a40651fbee35ab39a5bc8c4756d0972195499d224c20a9d1883725c720ee2b3e5e52828c46c466c9f3f6b6920ad4b6c03399ad296fec477c3ae497b97b97573eb87b1b827a0138c2aba5c0e090cb90db22fa926d10c61da716b3e7900b68556a96836a344cd603a4c9f4615d1c98283c2017f4b3151107a1d456c73eb8366aa90b6b7a0e758ad1eab7fd9f791ec019633fa489aea7c57250fcdda6bb80c55518b86e47b355b0339cc8abbf14e873d549eff8ec13278c7b1e0af2c9ef18bb374985a8474c67e5da52c3b729f7c2cf71b799c2f48a6b5e0f0233cd48ea7e53b7ea75ea90c8ee856e21bf7d4c24c499366a95f0069c0bb3dfdfb886681debbd1badce85f2ccecc9987865b3e4316d728704eb094d0340e866b95a5b9af063f2474ed90017c28963dd9935816343df78da48e1d4e5864beb719f8de65573fcc72c5ef738f207f8a59c14cfcdaa3e827d3ea69558b7edbb6055c2c6a0b195de64513760c23816784f44a50f678ab9694860818e2852954dfb9ee1b248eb3b03710ef205782f6ea90d78102888d96e9fde8dba110b7c084055b9ee39023afffe66264b1e3f2bf8683867a9c2310feed497566ad1d2f35621f94494269aabb62de23bee747d07ce06bb4e8524b47d7a8ab0a81824950cc77aad7518308c6c8a842f4e0651e7ec1b7dc022fef5d5a8823541f95c8b12c5fc518eeb490c56b989205951de275d69fc8f36381357699513e9e89a540484bbe2f393ec9844e044faaaecee019808463c1ef1e6996942f038b400d71bd1fe9cc5bd08c2a45aa98c756a34cd1e00ccf9f3f5d1c908cf548064ef2865065497cfce68c47a63d55db911df2991e2ace654a622679afb7f52e707667585e681fde484372120cddd342faaa79486bfd410b5985ab3c591d768dbf510ba31428bb3a19f5bf08ab2f5c0415505f71c45362c8df60979186493f9e3cacb8f414945b0ad3cbe85e07d5caac11a562902edee3b07402d259d0d8888f7c74f561f5c0568301ce00d5c23dcebf236b1f559b3849ea382524b972d16cf068b4b9e938dabda9594e0f0101fdc9c9128488b5ab2cbd3c61aad842ab4f5cb6aa1fcf6a341d7147090880b5542052059adcf20321ffd4bd023c8cee6af4f6dd806ca1ca488c48d93b19a2df31967b22c6f8c6beb4c0562c68a4b2c298222a6cd500fa19e630f076805a7d5b1828f37726c220bd6348c4764bc98013ce017ba8f2784662d7cecfae9948f8920f55619424af9adc35fe698c06de714bb564e40770e2382dd6894ba970183cb5353782ddcd8bd3c18297a7eba9a44f70559809fffc3d2449db19eed1a48575f3cde04448fc12e1cc7a20b7dc6258c022befe5e7632a63b7ab901540d1543ccb064f5674c3fb385d4824d434d7d92a591e85abb65a92143eaf6abe00a7e4d80b39d12f51ce05f172e9b1cdd7d2fdcd4899d350eb8a65c09ef52b84bf2ae714f118514ea082988438e417bedee2774bd7917af7839be45d773957b409134bd03ee6163cbcf85d361822f56fb0a81072bd2ce9ef103462b185c8775fcb5e1718367535d8db30eeaa6080c6c07803f83cdfe808eb244b5b55bd5fdbb9482a574f849980c05bb53a147368c6853236088675238a374752f64bd0c8955d835e7d75a9b91500dbb6e243f1a0dd348eae8dd34dd322a8f892cb0023436dc04a4c235ebf5bdbb73ab1deed64274a98f2943caff15abb31ec4cf536b402489ff001fd46accf082414920bbfea7780a1cbd82b07015cdeb8316ad4b56a9fd4d876d332cab40b1445ed0c60893184e6974cf6b15df070cccb121c999433bb2f627a139082adc5f57e1106e18fc28be3678bff570db1ffa1d94667d1eea394ea7feefbc384a7fa6e66eab94cd9b72bbdf5578c6596686bfde6434744fbc9a6cdd00445890083dc088580387ded0b38934a25e60c9c42ea6a00437d2ce54da157da31088c039222ee2944d11b7c88dd5d268a6bf2253634e9ee99617f56b9fc2c5319e4d0357a8f8b3c63b6de62361dcef7230da9aa9e2bdbbcce2cc584e254afe49d93556284cf625a1b65b5d7d758cfb52406e5259a9f7295466136451be11344828723c6d0e7b0d5733646a3fa14e9e05f5ee91201031e499c23b58d9c520c3a39cc5cf75b55d40c94092710ce9319529310182acf0d8cb344b1dfa427e322d3b1944d109ace75115bd44ab65bd5c7ad29a09f93ad9daadde13c69983b53a12438e03b23140055159d41a02f37c7691f57c8251ca32ca624c07cce8b8922e9bd9d3c6471cf399b4eb44838b6e57a74a5a20212d19a562cf410e6f91be337bd53740dfafeb594390b83db0164ca646036bda85464950c1971c4282f93b5df91673ad53c300c4c70a5e7f6979878ae6bddfb29578e62637e9b71c667642bad7c99563b25df20d404b7ecbdd62604a81527e896cf354a8dbb87a676ba7237b21117df7c5569be1b60cd4a8075aaade167467a8a0e99ea5a1ef8276a81176b8f716c3eddd493cb1703faff7f66a62e7a879ae9c69faaca7dfdcd9e600a4a543b54649fb66fd785abc4c665239e43cb717b1568ee443f6a5500615d500affb8a475b8af27e64c63b6c1bf6fecfc5310bcf56cfd64e73d7ff3b8877f71f70ace0ca0dff38992d928b77293312006000f6fb936b34e9954e19c04ae6a4edd6c7215ddeeb83385c09790d43efaf176bca7c79e4952cc1aabfd566d7f7254caa5f9b4e44e31802dfc5f0372032b1102e6be72d5e9f39f6ba49c0932b3ec2bf2603f467f7022842ada6a6ae9ffd4eeb3739cbff7a27f62d868ca8bd5473518a223c75c8346307499615739b60059c1f3424f94d99c83d1a18c9ea709f92ecad62ea6d934802b4bc08828759682af05cdb7343a86957ae78773bfa7d3d226c40348fbdd5f252d3e29247a2dd718325337e1a223f0786a85db0a76f7400b279b68b925dfb5fe9c8bb515271b2a7397a4f30413a285d4169839e85082ff5de2247a99a61cf62f395a5b429254ff4d91a782c59ee85e33f00bb362e7b46bb74410c52de332436acb015e342357ae5f82b504394239c2078e58c6325d426db67b648ab21048ebd7298def2fac526c0ac11383016c62d33b16569dd12805283280fa9c8c09a830722657113bdd3757e7fc25e2d8dbb3eb21733556c530975ef9e6cd0997aa5a126caf7a608dfc04965822377d6c88289240ef84d92f6d71aa7b298855a921e1fb1372bf02aed90e4df0f0c6634fdd12b730aa82d922eca71008481669f865b1d3dcd19fc7a747c35ec08ffdeb07f1100548bbfd7474b235b47d8fedc66e94b43bd0f5c0ee9a25d6c48b8c9d45159a8c253088aa249f6f451352de19bb5f93850fc3b2ea2c0500537cffdc49cba8132db7dff6d90426c090219dad9bf2d601f24cfeea60e2380dac7bd0dae354919f5f47ab591041c88923b80cb08cb4bdddb7f2712e75a529e91f01dca377b79a6e05b5e83b11cb6e2265d9ec7bb81d520d0d42c6c5a92fc5889b99595386faacfbc2dee4c0c0acf2d8e2e5c236d99155edb9a2a455f8f5ed5505d659ea5d89b05e49a36438ca255de46a8309adecdc76206d76c4c11d813833e075d68c2b6f131bf6cbeeb3de649eb70cc2391ce226a2965c83dab5d55c448cd5a6e5f6fc8a06b75d54533fa90892321c0a93d93120b363745736bc555fcbad69350d3f833015036d51bfa2964c8d422fd0f35562ccebefcf0d507b48334d1506c8c257abd1ef991a1b89ab395debacd425a2c3df91c6867353e51e1ffe7f5397a954f1e57d95faf16bb783c56a59304eb7a36b429c7970555de3370e2568e3b49750b0a491c860628b080a685ef5abe87ce4011d115eb76535ef4296545dc321b26a93fe7dbc3b6c4033d2780c177af352de6919b4dede3f2da9e51ef4cf49864267773b12d38fafc031fd1b", 0x1000}, {&(0x7f0000002040)="c2bc51bd750f99f94a20cdf227fad2b05074441c30ee49d9f4a98d1a5eeea93d5b12f5d028b778bc4c69f146c41942", 0x2f}, {&(0x7f0000002080)="be5fffba0256827ef60f0b9a8ddcebcf8db2ff933460c9c903cda0360596c9752dcb569da9dbf6b546bb9584cd3d58e45e96942c52f7ff81c37fa445259b8f1fc0b9b8b2a9fea6ffb7d3556b1ff4260e11d9c0a336a16df6ec2973e1a5ae0b94b59fafe782d78bbb0ee29294b0b508153841b754114936c2607772608f30f4d94340b05837069585e68e5cad95aef706756a6b04254e6f263df3366e5e4928e7592dcdc6258c6e452bc847bc14ede5bf600685d47eaf876b2a93b5b119c3f5c32cc1bdaa543d25eb87b927e77df30292f3f42cf9ef8a8121eea6a3451472319f5fc9750f7d9fae325cdebd961c378a3cf0fd3a83", 0xf4}, {&(0x7f0000002180)="bb6e374a247745d6b5667ccad5b33b9b3029b1f2b7f124bbd12a97", 0x1b}, {&(0x7f00000021c0)="bbf826d3ee05f8ef93b344baea3cb0f27d042e02cef3fe1a6f1ad2221aa7cdbe1651ba76633cceb7adb22e708a06a84748c2ed34a1e343fd325ec93ca3e05b48068180b48c2f99f8f59b0b040d63c65a93f5c13695310614c2b99f6de6c0624bf72ec17863425e4119ea1654bb72cd577f9bf564f7c3ffa3be00e82fa60c9c470714e6002fc1a9c39c76b95e203b5b9e3f69f9d27751211b326fcaab39bf944c98df53634bc6c610", 0xa8}, {&(0x7f00000006c0)="b145841ace701a3eeff0fd0ee1687a982f6f5e371aa99b092295df8fcb328a53429786f4595116892b570599f1fdee16a17ddad3c6e2d49d75", 0x39}, {&(0x7f00000022c0)="5a3eeaf4d0ee7bf6be69964e8de743619e6a97b51f7f31a8b3f269", 0x1b}, {&(0x7f0000002300)="a5c2017867224866aac4e3577b2924ef1a5828b24f04022ff9d6a93c9ed12129c8c5ae6be45fee5209f0a6b3bfdfd5d552e60b13c0a8fe99427e6594b2b434f9bb25190c261d283b", 0x48}, {&(0x7f0000002380)="ca857790c026bd76e3c428be04a19827245df98fd6cc369cdd37e76ac4846a3d41ac757c0ee80f9c99fd49ade9e7c4c456005e74093ce99b32dec1a1e858b69aed06cbb9559ae19ee9aa87921fc371fc0b3655224558f6d027c7246a5a21426bd854ee36f6df777b19c1cf7b699a966404337bb662508d3ed642bed9e0c7963eb02e81977f43743ec23900bdad9bab42c978547d61c564e319e548436e44006034270066bcaf47093ffe4bfb55c3faa546", 0xb1}], 0x9, &(0x7f0000002500)=[@op={0x18}], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002700), 0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="180000000000000017010000040000000000000000000000c8000000000000001701000002000000ad000000e51016da3a87f1ba8eb0dd0073b1fb49165d6ea1b063fd262b01605abd9c18fca31d50854a3ac7efbb3c0fb7e46a05452201e58f24c553085e774eeca3456f69ec2ebe812aa4fedab56ff5192b16d4969e3c3b26016c9051085d053efa6b53f45e027a80c9530bbe8f4114fb8e49ac8363ba6c05873a443f1201b362f1a9ac3a814b5ca19d2a045a223328cd87d2c5da439ed13faeb6a62c62870ec6d0dd59fac6144518542ea0b5300c0e9c1600000000000000"], 0xe0, 0xc4}, {0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002840)="497645bbf95f72c7821049f9656f84f0f3f4caca7da31d90750cecf7889aa0a0de67c73b2592cc3de7ca039e5d9bfa933495f68f9e1975ae69caa43896c1b3de189d309ff94972438ad31688a909e9cfb7db4340", 0x54}, {&(0x7f0000000700)="9092a3be828e4b5dc6eeea7ff7224666e39d5e5a346a5f763974dc1000e46bd2059d0370f8138fec39db917ddcce93837aa90f7f0903b88036d74a34650accfbe24f1d2bd39036afb588f5b9d00f7ac2ebbb0908a58a8db2d4a9cf63c03a27610d04c8345846ae863a8869d19723a383b7650342ecc20c968a245e1ea4d3d3c4a83d183d", 0x84}, {&(0x7f0000000200)="4fd090287c4559", 0x7}], 0x3, &(0x7f0000002a00)=[@iv={0x28, 0x117, 0x2, 0xd, "daddc79a24e64f85e10c7dfeac"}], 0x28, 0x804}, {0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000002a40)="7da6eef2de93ae249b8f4f649a2d", 0xe}, {&(0x7f0000002a80)="4ae6167e26096184dd718b288d62664a750297f4103d63bfac8a908d78324c492c1b5c", 0x23}, {&(0x7f0000002ac0)="73e47a80155e96bdc8c78380c89a58350b4b44279befbbb597f57c46c2ca57f67902146f9f90c03848039bc288677dbd077918435431c10f469e294892ca9dc869daf5e0da52ab6397200994aa46d3e36fd3a3c4c4db6d4d008c130fa3bc65191a93bbbdc805c215e7cc6e944a674231ffd7", 0x72}, {&(0x7f0000002b40)="1ce4d170d47f88d305acc3db12fd0e70bf1ffd49de46780a0e57592b3dabffdb712f0e729026fcd46c2e1a808ec02e2338d414c8ecefbe11afdbc29b2d513d207984a35efeb54e2d086bdd57476377f10d152220798df5b253484e3480ceb483e3ed715e71ef509a2c60de0ac539ba53bebd60123eab1cacf1c2c5faa0329318b88b14702c1b", 0x86}, {&(0x7f0000002c00)="bb25827b13db2a45bd8441e860254936ffa21651622938507ae6ba6bb408c880d907e25f94ba6c57e81a275e778c8fbb2fc67a6af50939690e6456d979a7af80ef185ea858800a905653dc8386f34c312739c2fc0f8bd669f0c5d94589d339e3dd95974eeb41f563d5b6bf4316e7262c666e03ea4a96010987bf9a775e1153cdf58d8ec5c54a987d3e2b375372dde307700c", 0x92}, {&(0x7f0000002cc0)="da1f71a38ad04e7c49e80221e64665193c7db740c292ed39357cde70e79ab6660b638942a00fab3b0deae53f127151b647f6f189fe654ab9bf57d393f9902bf133dbb2473c842d7e552a0a99f6d56f0837851a0791f515d7f29287ee6d7595ea97d9f7919024ba7bc4593251c914cb315b105e114bcf54072f60366f83bfa66263600c523b83eeee300addfe7be890900605a8fa8963615aa6e65c2efda272aef95499405a3e71458d0bb6c4914b58dc8132c6cc74afcbdc119cbfbd53d70a32e90d83c2a29d089fe21c6aa39b1d3d7d24ea6d27b98c5cc5526e9119e8e0dc758630b0186cab3c8ad8b17d22df701759ea26c241d0c2353ae779d18afc07a7091a7b598d85c9619c05a880cfd9e62ff5622ccbd43baad9e32790bbe690bae92ade18eb05404ea5fcddf2e1f88a7b55742e10269e296d7e4086742c163ee9d16a3c63dbc2fad2e4d38dc504966e0c8d3a62f3fab0911bcaa688638164c534806fe4a8b5297a211b12ac5ec1a16efb35c30dcfad0b5a7c14798d7335f4edf7650852d59401704a85a23538cc13c7ca231e5471752e72b410e3a083532c33fcb74414e9f31a59fa52b1f4d2473a39c3dc2d01b711fa5299e98df17fcd7cbf327decf439bddb3ca1ca1e38a457e540cfebe65d2eca08048afd2de8181c0cb9ed7f67b6746453e22440648ed34898fc487596e2dd19cb3fcb23c91a94e1449d4a66219354342698a93cdde96769eae9a5602714aad1ad69085055e836d0b992d6f5bacbcb1d90ad8134ad1c0b6d507edfa52a1f41eda2c584658c23095850fb74c6ec753898e539a1cb9093536abaa504af1b02baa207fa4d45c2b6953510cf83936759d3978580e098148e8b8568aa2a4ebdec9ce878bb675b518e8acea93b2561412696114d1b05b8226372b247653eaeacff435e9267ba0445fa08cbc6a3f2bc57f906b9b2b3a032660eaa1c4a01a305eeca2ff0840f6ed244447bc1b4b0cead7306f949a21f0c14ade723d097908a63d9fc524b08ab90a9fa7f6e13daa5e6314e466981058cf2782d38c51797f5497d856c5e6fedb7437fe74bea01453b6ef66eeb7b1e7409b111b0d4d058728ff526e7535920a9d663864d79a925bcc2f4d74935986d734a71a8327153d96bd7cf541aa439f3d71d0a47871bae2455305a542c5bd05a5a4e010e3d3ea12c38c012ceb012377969a76fdbb30965de66c14c0dca965b4727d15be94a6a37640ff7ff78f59425a8d2305ac3bfa44a71162293552cd5d8a129c76164394470825925919990524c353bba99453f978f88f13136a8ea10db0559654c8e910afe9e3ad2312d1e4bf4b74ace7d46bbca900ee17e8212e99780586aa62b807ea3051d30b0e691bb42b305a41e3486a2201c17be8ff693b5ae9054bb523033de324c82dba5c90485bfbc98f3ba9cd618b18bf14b94ad8e926f5f78c9e70af573ba92253b09179bf826fd76700df33f0230a24d17a50de11a2010355d4aa182bef2d18e658cadda3578ffa072fd489f904b8e60935857360a8f088dd5fc5e6fd55a6346209ea6f03709759b992671ca28d120e5ca8226346104475e1112e44cc41b724fc70c227422756708b12f21b1d2803bf0f7e6edb944c1b2b556536507dfca119aeff5c8be756ec37a66ad2cee87429cc07eceeb7d0fc8eb316fdc8629d992014a2ef5e052aba4b2e2ffa6aa0e44263f0f6ebe669887f2e279382a6692d5464ff8b90ccd3fff8580f814d2027c0f0972af58551227b851540120a9d656e914d3637dfc3da393f80d22bb7657752ee7fe1225cd6220fe8c786e4b94ec03e5c3cdd5f3ee999c59c160e48837b94e39ef7b47d509b68ba1f26f9f957d22a026260139dda208e6dd6d6c19e0eef49b022c05ac334cbdfc209ff9052c657676d756632656dcd6dca369fef544197b45bac05ca9828f9514dcb227e9a54b37229ff92a9375bfa80e87bb25f135759932c66e402f11bbe36baabae2da5322d85422255aa6c7c63a075d7eb589d2609bed238eef67cb4a4af41945c81dc868bc6a2d286fd581919c9c90474254d9deb73a323f71680b7b02abe806ecd9b35b90f5797b8b4f066d375c2dac9ab5aa92ed26361fb7651b4c62fa14d727a9bf76363bc07f8ccbd4eaefa27a05878fbcb9ef16ee799dc495b4a527b36efe66880704e8802c8639e557fb806bf243c33dc9dba8cd75d2af5475008233d91acb8bb3b838f23e0cabf7bb9b71ce55f713bdca03c4c1423ebfc9d436be956dc1276c1122d2ce4eafe052fc5043bbdc37edbfc93c8e276347aeba036b694c03e1c8dd4e0eeeff4de597b29a2b8e3ad92998f6988a3a524146423883a1c32e98f0823cd6f7572498fda6bbbf9519e3aa5b55d89bc2689fb185edff1efd4596660b8a8530cf704787d51006713b81fd8ee162433933e43c4d0e3958a8c5fda0d8a55467be2b7c55a58e39742eef2420500f9d09d50c6375b46c8235f3277c1edf62f0090f9acdf148baa75be30bd768d7518e57eb65bd7e5d400a99bf67ff6b6536f66c42e3c9a9efc3cbb9760650cc6651fe0d3216490ebf3cf5f74bf082724e6b7beda35bb1ee1c6e8bbc22b40008b3d22e9d8d2fc84165ee650109e353c3225618bd9420edd994a6bbbc0677c9b6a2907c9dc38750b9cc60d5aeb41d4fcf344b8382accc2152f5383b9c539fc42aace76aff969d47de7b94bba06925cd80aa78bf161838b060537b24e440697e309bb1d1703071f9842a4430f279bbb6b8ddaf87ba4e119abe02d7dbcad6fba0ae955b50a300768930a431579f9b861734257786ad7b5bd2de66e084f900b64db9c5c9dac900f0f2ea95d5a0f558999adf032a62c0e1292f88d05b33496ffb85fad3683550a4fcbe5ce0b085f2a6d8251d31f51af6135692e6ed33c19b365bf846adb910d5237d16081a57cf46bc21ef57b93f05599d2890c59a0f42622ea81d2e0d03160edbca92d0a6828ad71e1cc9d72f5d91a5d3c8f047cd30c250f1ac5d584ab213d1adaa0e6676593b6f622e2b37b5081984a2ab077d3f06452ca935894112f8884c5d54999624a58cb09dd6d29e4477721db8cf9086eb268c773cdaf32278be368919dcfaf39e1344f81bfffeecf1c21ee392023f48330b972d43bc7793f0ca6f51f6dd38fd06b091df363f47a3905d389eb2ef76d7163be4f2ca29c1f05ebe6e1e38b5ad1424a918079ac4e5e5aa4805b0c157158ae73b905f8a717d443a5803fe824ac8e00ebd5a5246b592eb065eed651f14444531f0b6f72d28d6b4fe93395329f892dff5278b696034fcd0eb0220ce01a0d2bb9753ccfd36e1413f665748da66009d45311d44368aabc6fd90fd0c26a8a9bbdb8a4ede6ee3f685a028bdb57d0a91474e88d7ca81b8f017c38f411e56b57653fe294213b176b2fb9189b3164c9aebbac7b934fd911c2ba8d7ad8ee62ca80f43b605af61ae649dde86707314004d8010f5745128965a8f9e1679907ccaaa06b58e9a5acf4b70e4b5a17d6d60e16be3bc0ca808b94c4b928babde734d1c1e172f2e35414de57efb69f48afa5dcf3cf9cdf16cd1dc4d1797a96b681dd48657e8160190488e597119f480977bb83522bbdb3fcf182e091a412a5af4c212520f1c08cbb7ea88314ee66327475602eedca945e9778990517d445cfc2c8441b4affcd6f8c07a218b20adedc29ac6cb20bff48a689037482497d1c0456ac9172a0395896ea06566b4310fa59a65c54db02267059b8b104084460813b69642b4c9d39c783581497200ddb036c57c9f1742d3cb7f6e56f989cfd36509b4d18e0cb3742ab155d6fc972c393a5ab5dbc39cc1f63adfe9398f8780cb2e750ee40218e7c83ec8dd2636a11942b8e8e8c98c622975b96d2ce8d6ca317a9b1c6baa96f1028d7360fc12ee346381d5d39ea466c0ab70b8ae53d3c2f2ebbb5199ae6bfd18159fcc7fb918f94818280bba212a9ea7ee6251dcb514d541a9587005e642b55f4b3861030f4a674671c691d41b256313082f48190f7c49c9be70968af4857ff5b4dd52815b245b7b5b7a3e35bbba9aa3796a5d11fba2d981bb500593970a9f778d78d47f72a42197d3961415fb9d6dc79a74cc75982bfbb8ac69c3faacf9532b6dc567ac378c41076dac1cbc114acf96ddc1657c6d5c0cb3d335d98122c79d6e18e2a58616c222f6c0b115a4700b1a6972b4126fe2721b3221d70037ebb2e7e9456bb115693717fd6a7650ce9ecb998023790f8c50b5f0b85a0a5a7b782ae7e217a0c9b7966ffb8740e4752da51ec0e28cee483b19301080518f29ad802d8a9268bab36fb303347156899ad80a2180fe6596afc2f40b408fa3a8c62134b2a66951f518e0760fe420b18d0e118354a397ca2ef46eac1704b39203513db28e727f32205f774f50ca2e48b9da8a15efe34f32aeaa43ee2c01a892f324aa9ed88f20fa62805ea1443032f2d444852a13c2d5994953144e8bd22bb114c16f09bdb0bfd7b77d972d82b42c0693cdeb4102fc4108170a5023c01d9385b20918e8968c8345da985e3ce87d98d381229b1be993bd2d0c6d0d174e0a478d91725a0e3923446d083e801048d8cf63317d9a9db100980cac714da17a779b4373890764e0806353c0f1440e9a28f1960a401ff818412ab5e220370d8ff8cb5ba5ed2afe342b7456b7a09d1215c83db98beadf8844c94c89a2999da8438ab53c84fea8bc0d3a68c7a35f8de82aad5ad15c91afeac014d0df0a6244c84cd9159b4da979bb1a45a6243e8ef1819b4c683467d7f0e1194e1df0eacfb24a1142b5e9995388f61207f8eeff2e645be7751ad19eae46d43d7f7d824c3f36737785d98b63da2ac8df730e0dfb4d625eb6d144f143e9dc946dd1b9ef20d18c14764c729d9c1dc170c1f8b01f5a9965757f3b780ec4e7c4d2823a06eea2eb9400166939e8d814baa5bb612036028be0b239e5dedea2a66df87c01bdb9397ed6ab0c008538272b2994f0dd6e5d7459a8d9e381e5485f2f9b5233775e25b93c5fa11a4dfc276f8c63e795865a0d5b6936f92f86b97c704a5e36189d9d296827820f2d48ea15bac2d5916f2d0fb73ab803d4bf40f42b8d539c74568d5ee1d730af43d9e307642bd809d9d2a32b71a8c1f8b3c4d41af9107a4f987bfcd2956c79a822911b9ef85e14581d6cacb6d7a45982b57f83993f83715daa76106c8f9ec1226f9c7618c398bfe2f87ba6d1729b2cb546579737669a745e7e6c763e3c026af97a6369644842819c6b07ec03d94e9720dddea4942c772632b054112a5fca9e87927727ce6c336e859d61a335686f018dd831495c0e2d5e3fce6890fa6a8916da6b846497f39f11b02aa83bd87536d1ab595f39061905126d2c9032e58567c47d68f676079751771832deb7bd38bd1879471fb2207d4a0ba74c7a53b4667b6981840477144aeecb5898595d0aa667e937cbe8fcac1b92555f8692083abc2887597d4c5b8367b495b87df4b9e11ed31c3e496bcb7912a54bd0211bfc590d91e0cf88ac8f2fbfe73b7883c3ef5389350a8bbeeaced529e23d9d9ce7b83559714102c54034bf1e3e2c2e6ae4dfd710ee2baa4d1cf647745447aaa20c4c86dcd4e0f5021f6c338410142f78c4129b7ccbf4eb95c7cb9dcb1f3363b5b925ddeea801e13220948e2d7fff1d45b74c00298d2efa6e0791f96c1a7943c21ddf2681a7a574045e0ad4bfe857271f42779ef6b7ec75903dc855dbdc7ca61dfc612bf946c3e522a5d2d6a336c7832f2541513f1fcd3afca36f85cb7e164a9b6ce4a5602452198fb1589bf99205b163", 0x1000}, {&(0x7f0000003cc0)="b7f25b1bba6ae355b6f15cc3d599171644243e9444cb6d35d347bce950630065ae16d1613cff31a3e39750e7ecf552df9a5a32bd589767f2e99e083266a8750ab477c7daff0f650ca00a467191206119bcb0b819b806d5e38fecb8cf0ccaf66f6f127416c106345f4d72dba085f842c0ae409e6e8330235b734c5e217c4638bd2e9ecd94bad63a6643", 0x89}, {&(0x7f0000003d80)="ab7597a708f574167db065c3fce07750cf6170fc81482bb760b5bad3129fdcaa945624dc9eeaaf9d96e41f55912bfc72bf69ee52c1ae5debcb9c95716f3446d6939680b4a161b167d8faa210985c78e7ae0a003b799066a0c4c739fe4dca2978d7404fa01bdda65fb12472dbb83a04b3ac3ea14d1461b22b4ad80e66c858d1d31af3a80513cdcdc7a01e01d6f5c8a1876b11728c4c16cf97f47dd2863be6b5e979834986cc73933957b306c8", 0xac}, {&(0x7f0000003e40)="82c5a4b28b9cb3d47add0bb8e53df54655adba5cdc851df84cdf7623b0fa6b63decbee2b0780a5e88302b5b2f176e44c3f611404b398f76bf1621c8a9c14e22b59953fd96093ca7fe8da4fa93500be1d803c799f454e0f6d56404906fa4e7e77e36f9bc820dc128032004b858ea63a7d14378796ca6ec34af1f79575d9113ece478e732e35caca94fcba8d2c94aad8d69f7f0befca26a1a45f0b38cf1a818363be9ba531fc7f954c462ea4986d30cbc0", 0xb0}], 0x9, 0x0, 0x0, 0x4008080}, {0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003fc0)="2440782e4ad71466431ddef6327ec6d08c6423f5bad6b68954adce4f207ff01591929fbd00435e056874dcb3716ebf83", 0x30}, {&(0x7f0000004000)="d210fbf23cc75375bd026ae40ebbd588a599ad90ddc738d1470ba64beea94a12afefcc632b36a6b27842a6a903484413cfe138b2b7c2ccdaa1572e3877e2056f2bbf3a2c4e6fea863933cd9da3627ab2c96958a8f093c06e3464c9174ee71e74bbc688d77f424293d409f1", 0x6b}, {&(0x7f0000004080)="8353bc16e96c66a555a60494f00903d0b485d1952c3938d62f147b5e098ade2ef706dce2d90cf72cf5c24bedde533fd133dd766939182ddee99fe108fa52e5b7c81e68f4355e36459e1319e12f0f34334d3af2f4abc9f69368944ea81c8f8f11d069370f31d24e7b2b67065af77b055501df63dde86ef88699af0af2a53e30bfde26d252a5a1531fc61c0296f61286964533006e681b58a7790c392c581dc98308b5fb39b0c0b975c5a140267a42245d5bf1", 0xb2}, {&(0x7f0000004140)="5fb44fa3f10c4bbe538a90f75f74611a163c399d6e0a4a15c19dac4e57e19da8d8d1b899c1a243de9949ea6f5185fb562faa21f6256cee1d4721ece947265ca3b05bf75cb5c9e4e78fbb0173bb278f4066e338287f881a5f9e3e858e0971b563c8e38a5650116772bbf72fd8352bba182eeeebc7a6f9c79d6b9fe2e18ffd48d43c2882c809a5774674921832c7a8f5511468d714ea5efe8937cc85fd172dd64b76a83d3fed9291c49faafd542a4d7326ac157c220ececcbc531726dc3e2d82012968c3543da6d4a286ee348accaaf8daa2fb251a4387e09225491f8a05c776b2b0da233a489f665592b8b892c5c94db496c0f115aad8f95b", 0xf8}, {&(0x7f0000004240)="73ec306dd271180edc43ef27d6ab6665d6893c3e605fa3d22d99248b128fdfeeb3ec194a18a36be908ec8e893b2b53304b0b5824fbad4145954d32110361668556426281ed93f6fd96b328d6d22b02f6748ee0d3ed807794c9a3c0702fd538051422aaf4f36b9c89eaa0c12fc462e782995eeaaa671a8baf64f7a7409fea9dfc9e03f466e7669ed87100d9c66440cd1995abf955f0c4d0e8f0fc6e6e8e955cb08cee8d31cdd056aa6ae8f34f82b1e950d9", 0xb1}], 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="300000000000000017010000020000001c000000fde34381829ac86f5f8225bf79ac5f8245919e6cd7569a820e2db820180000000000000017010000040fe2ba9e3beb7915000000"], 0x48, 0x20004100}], 0x7, 0x20000084) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4010) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r8, 0x40047452, 0xffffffffffffffff) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r13 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r13) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r14, 0x8982, &(0x7f0000000080)={0x8, 'ip6gretap0\x00', {'vlan0\x00'}, 0x3}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r13) sendmsg$NL80211_CMD_VENDOR(r13, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000045c0)=ANY=[@ANYBLOB="78010000", @ANYRES16=r15, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4000000}, 0x240440c1) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r7) 2m28.234113205s ago: executing program 2 (id=2134): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000000180)) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xd, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe95b}}], &(0x7f0000000800)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff3}, {0x0, 0x3}}}, 0x24}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r8, 0x25, 0x0, @val=@netfilter={0x5, 0x0, 0x7, 0x1}}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003200010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8) 2m24.977134537s ago: executing program 32 (id=1994): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf25060000009092994fca4e6e4525edabaab78b234c2e6b34"], 0x14}}, 0x24048000) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}}) (async) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r7 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000140), 0x4) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000200), 0x12) 2m13.166836132s ago: executing program 33 (id=2134): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000000180)) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xd, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe95b}}], &(0x7f0000000800)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff3}, {0x0, 0x3}}}, 0x24}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r8, 0x25, 0x0, @val=@netfilter={0x5, 0x0, 0x7, 0x1}}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003200010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8) 4.01569368s ago: executing program 6 (id=3196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x4040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xfffffffffffffdd5) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000080), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x15, 0x5, 0x0) connect$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40007, 0x200004}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2de7cca6023850ac}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x3, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8088}, 0x808) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000440)=0x1c, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000480)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r11, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x21, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0xd4, r6, 0xc4fc9e906872308b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc0, 0x11d, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xfff, 0x8, 0x2, 0x6a, 0x4, 0x5c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x6c, 0x48, 0x6, 0x60, 0xb]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x7}, {0x7, 0x3}, {0x2, 0x2}, {0x5, 0x4}, {0x6}, {0x3, 0x5}, {0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xff}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x5}, {0x0, 0x5}, {0x5}, {0x0, 0x4}, {0x3, 0x6}, {0x3, 0x1}, {0x0, 0x6}, {0x4, 0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x6}, {0x4, 0x3}, {0x2, 0xa}, {0x7, 0x9}, {0x3, 0x9}, {0x1}, {0x4, 0xa}, {0x5, 0xa}, {0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6}, {0x5, 0x5}, {0x6, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x5, 0x7}, {0x1}, {0x6, 0x2}, {0x4, 0xa}, {0x5, 0x8}, {}, {0x0, 0x4}, {0x7, 0x3}, {0x5, 0x3}, {0x1, 0x6}, {0x6}, {0x3, 0x4}, {0x1, 0x7}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x8}, {}, {}, {0x6, 0x5}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e5f, 0x7, 0x3ff, 0x21, 0xd15, 0x5, 0x7ef, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x8000, 0x1, 0x30, 0x35, 0x8, 0x7]}}]}]}]}]}]}, 0xd4}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xb8825000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="040008", @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRES8=r1, @ANYRESOCT=r2, @ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3.393435526s ago: executing program 6 (id=3204): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x123) close(0x4) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r5, &(0x7f0000000200)='ns/pid\x00') unshare(0x6a040000) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 1.756962742s ago: executing program 3 (id=3207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3}, 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0xc9, 0x5fdb6c8796dbf155, 0x54df, 0x7fffffff, {{0xf, 0x4, 0x1, 0x2, 0x3c, 0x68, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@lsrr={0x83, 0x13, 0x8d, [@rand_addr=0x64010102, @private=0xa010100, @multicast1, @local]}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x9, [0x9]}, @rr={0x7, 0xb, 0xee, [@remote, @dev={0xac, 0x14, 0x14, 0x14}]}]}}}}}) sendmsg$nl_route_sched_retired(r4, &(0x7f0000001200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000000900)=@deltclass={0x8c0, 0x29, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfffb, 0xffe0}, {0xfff1, 0x3}, {0xffec, 0x6}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x4}}}, @c_cbq={{0x8}, {0x87c, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x59, 0x8, 0x2, 0xde, 0x6, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x80, 0x1, 0x6, 0xc1, 0x7, 0xc}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x2, 0x7, 0x7ff, 0x8000, 0x6ec1df5a, 0x757c, 0x6, 0x7f, 0x4, 0x4, 0x2321, 0x1000, 0x6, 0xe4, 0x0, 0x63a, 0x3eb8d01e, 0x401, 0x2, 0x84ff, 0x9, 0xffffff80, 0xb, 0x6, 0x4, 0x9, 0x49b6, 0x6, 0x8, 0x8001, 0x10001, 0x1, 0x9, 0x7, 0xa7, 0x1ffc, 0x1, 0x3a77, 0xf69, 0x1, 0x4, 0x6, 0x0, 0x5, 0x7fffffff, 0x80000000, 0x8, 0x7, 0x8, 0x8, 0x9, 0xa, 0x9, 0x9, 0xe, 0x1, 0x3, 0x9, 0x7, 0x9, 0x4, 0x7, 0x7d, 0xa68b, 0x7, 0x0, 0x80, 0x7, 0x3f, 0x2, 0xb2, 0x6, 0x7, 0x6337, 0x5, 0x4, 0xff, 0x81, 0x1, 0x0, 0x5, 0x1, 0x2, 0x0, 0x9, 0x9, 0xf, 0x8, 0x7, 0x3, 0xffff, 0x4, 0x4, 0x9, 0x7, 0x5, 0x2, 0x8, 0x4, 0xd, 0x3, 0xf2f, 0x0, 0x6, 0x1, 0x6, 0x0, 0x4ff3, 0x7fff, 0x8, 0x7, 0x2, 0xb, 0x280, 0x2, 0x1, 0xffff8000, 0x5, 0x4, 0x1, 0x8001, 0x7, 0x3, 0x5390, 0x40, 0x68, 0x200, 0x7, 0xb090, 0x6, 0x7, 0x3, 0x1, 0x1, 0xfff, 0xceac, 0xe, 0x401, 0xffffffff, 0x7fff, 0x0, 0x8, 0xffffffff, 0x200, 0x3, 0xfffffff9, 0x1, 0xc, 0xfffffffb, 0xe, 0x3, 0x6, 0x1c, 0x9, 0x8, 0x9, 0x9, 0x8, 0xa05, 0x2, 0x4, 0x9, 0x39, 0x2, 0x4, 0x86, 0x9, 0x8, 0x1, 0x5, 0x7, 0x4, 0x2, 0x5, 0x6, 0x0, 0x200, 0xfffff917, 0x30, 0x3, 0x6, 0x3, 0x100, 0x2aae, 0x1, 0x8, 0xc896, 0xe2, 0x8, 0x7fffffff, 0x4, 0xa2, 0xfff, 0x69, 0xfffffffb, 0x101, 0x9, 0x7ff, 0x5, 0x10001, 0x7, 0x6, 0x1, 0x10000, 0x3, 0x8, 0x8964, 0x4, 0x1ff, 0x0, 0x9000000, 0x80, 0x101, 0x3, 0x2, 0x40, 0x1, 0x6, 0x8, 0x2, 0x5, 0x0, 0x9, 0x1ff, 0x6, 0x2, 0x58000000, 0xb, 0x0, 0xffff, 0x8, 0x1, 0x401, 0x7, 0x8000, 0x0, 0x4c, 0x1, 0x7f, 0x80000001, 0xa, 0x7, 0x7f, 0x8001, 0x80000001, 0x101, 0x6, 0x1, 0xff, 0x80000000, 0xf1f2, 0x80, 0x9, 0x2c6577ae, 0x3d]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2d, 0x2, 0x1b, 0x5, 0x0, 0x1000, 0x6, 0x8000}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7ff, 0xad83, 0x9, 0x9, 0x401, 0xfffffffb, 0x80000000, 0x8, 0x9, 0x3, 0x6, 0x81, 0xe13, 0x39f, 0x2, 0x9, 0x6, 0x4, 0x5, 0x3, 0x800, 0x1, 0x3, 0xef, 0xe6, 0x3, 0x1ff, 0xcd7a, 0x6, 0x5, 0x1, 0x9, 0xc2, 0x1, 0xf, 0x3, 0x26, 0x80000000, 0x1, 0x9, 0x5, 0x81, 0x9, 0x1, 0x4, 0x4, 0x5, 0x4, 0x30, 0x8, 0x7, 0xfff, 0x8001, 0x6, 0xffff, 0x8, 0x1000000, 0xb, 0xe649, 0x81, 0x4, 0xe802, 0x3, 0x7fff, 0x3, 0xfffffffa, 0x1, 0x3, 0x0, 0xb, 0x0, 0x9, 0x2, 0xfffff800, 0x7, 0x6, 0xc640, 0x1, 0xa, 0x2, 0xd4, 0xb, 0x10, 0x6, 0x8, 0x5, 0x80000001, 0x1, 0x1800, 0x5, 0x18, 0x8000, 0x9, 0x80, 0x9a3, 0x5, 0xf3, 0xfffffffe, 0x3ff, 0x0, 0x1, 0x4, 0x8, 0x1000, 0xd9, 0x400, 0x700, 0x0, 0x2, 0x10, 0x8, 0x8, 0x2, 0x8000, 0x8001, 0x80, 0x2, 0x81, 0x23, 0x0, 0x7, 0x8000, 0x9, 0x6, 0x868, 0x0, 0xfffffed3, 0x2, 0x7, 0xfff, 0x6, 0x5, 0x2b34, 0xffffff81, 0x4, 0xfff, 0x80000000, 0x10, 0x0, 0xd, 0x4, 0x4, 0x4, 0x5, 0x10, 0x9, 0x7, 0x2, 0xffffffff, 0x3, 0xd, 0x6, 0x900c, 0x1000, 0xe21, 0x2, 0x401, 0x2e, 0xff, 0x8, 0x8, 0x2, 0xa662, 0xfffffffa, 0x8000, 0x40, 0xfffffffb, 0x5, 0x40, 0x400, 0x5b, 0x60000000, 0x0, 0x6, 0xa582, 0x69d, 0x21, 0x4, 0x5, 0x1, 0xf, 0x1, 0x3ff, 0xa, 0x1, 0x1, 0x0, 0xffff, 0x2, 0x4, 0xb4b5, 0x3, 0x1, 0x7, 0xfffff800, 0x6, 0x7, 0xfffffbec, 0x1ff, 0x9, 0x0, 0x7, 0x7ff, 0x7fff, 0x81, 0x9, 0x9427, 0x8, 0xffffffff, 0xde9d, 0x6, 0x87d, 0x10000, 0x3, 0x1, 0x1d, 0x7fff, 0x3, 0x8000, 0x8, 0x8, 0x80000001, 0x1, 0x6, 0x10, 0x2, 0x7, 0x4, 0x1, 0x0, 0xfffff801, 0xd397, 0x2, 0x4, 0x2, 0x2ac, 0x1, 0x3, 0x87, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0xa, 0xa, 0x7, 0x87, 0x64, 0x9, 0x56, 0x0, 0x4, 0x7, 0x8000, 0x4]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x4, 0x9, 0x5, 0x7, 0x3}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xb, 0x3, 0x6, 0x5, 0x7, 0x0, 0x7, 0x100}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xff, 0x6, 0x8, 0x7, 0x80000000, 0x4}}]}}]}, 0x8c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000080)}, 0x20) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000001240)={0x7, 'veth1_to_batadv\x00', {0x1ff}, 0x39ca}) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) recvmmsg(r6, &(0x7f00000007c0)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/15, 0xf}, 0xf75}, {{&(0x7f0000000240)=@caif=@rfm, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/119, 0x77}], 0x5, &(0x7f0000000580)=""/127, 0x7f}, 0x8}, {{&(0x7f0000000600)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/162, 0xa2}], 0x1, &(0x7f0000000780)}, 0x8}], 0x3, 0x2000, 0x0) 1.755827931s ago: executing program 5 (id=3208): r0 = socket$kcm(0x10, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3001000046b1b2817e84dca912f455e76b7b7adc19dc61feaec0de919fe7d9716222462a3c978f4a42f176701e1630ccd6ac904360e490259a3e8bab21b707de5279dd476fe21460599e06c7bd9ea203b79d61a44b1a93cbb1d7743e9430bcec18500801f2ead42d49d0974ae3682000937720df08f5536948654b8e56c391dc7bb8bf7b75ee140000000000000000000000000000b372f5", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r8, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r10, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r13, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x0, 0x80, {{0x16, 0x4, 0x0, 0x4, 0x58, 0x65, 0x0, 0x27, 0x29, 0x0, @broadcast, @broadcast, {[@timestamp={0x44, 0x28, 0xa6, 0x0, 0x3, [0x5, 0xb7, 0x9, 0x6, 0x8, 0x1, 0x8001, 0x1, 0x8]}, @timestamp={0x44, 0x1c, 0xbf, 0x0, 0xc, [0x2, 0x1, 0x1, 0x4, 0x2f, 0x8]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x234825e169a0f2bd}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20009010) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) sendmsg$NFT_BATCH(r1, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x13c}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x19c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_USERDATA={0xee, 0xc, "8c1815ddf5607a4f90a11c68d09faab213ec1873f4bd4210a1126dba47efa19713eb23e0107cb288198397ba8947d29223530d02d012b118f05b1b3881f4dcb82f5c5921606c2342189d66f94cb2e5c59bf4f2474e295e1e85b20d89f8be90e9f7a96dbc06ae0c7f8d3beb742626da4ed324a0bb0091ee17db2da3a18d830e1e437d1eee1448b18af8180b0c15dab07068a1b0036ce63cad663f2ee334322ae3b64515207df95bb491af369427bf4dc937f4d09e0f5e696899213bbb39923243bdd176976130a6735e0c9aa1c1a131c56c86b0ec9514b51e9daf05eb978ec5597cc191712096dc2b1710"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x34eef3d2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x11, 0xc, "42b4eccea57bf07dedb73444ce"}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x105f9c2a}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xc4, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x81}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3b0}, 0x1, 0x0, 0x0, 0xc4}, 0x4000004) 1.67485645s ago: executing program 1 (id=3209): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x2, 'erspan0\x00', {0x4}, 0x3}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x1, @bcast, @bpq0, 0x8001, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xffffffff, 0x3, 0x0, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="180000001600010000000000000000000a00c3"], 0x18}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r8, 0x5, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x1c}}, 0x80) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000007fbd", @ANYRES16=r5, @ANYBLOB="00082abd7000fedbdf255100000008000300", @ANYRES32=r9, @ANYBLOB="05008a000100000005008a00010000000a00060008021100000000000a000600ffffffffffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad94c) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) accept$alg(r11, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 1.555905846s ago: executing program 0 (id=3210): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x3ff, 0x1, 0x1, 0x3, 0x1, 0x100, 0xd, 0x80000001, 0x0}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={r4, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @empty}]}, &(0x7f0000000340)=0x10) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x88c0}, 0x40) r9 = accept4(r0, &(0x7f00000000c0)=@can, &(0x7f0000000040)=0x80, 0x800) getsockopt$inet6_tcp_int(r9, 0x6, 0x17, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x40408c4) 1.552560992s ago: executing program 3 (id=3211): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="800061f0", @ANYRES16, @ANYBLOB="000826bd7000fcdbdf25150000000c009900000000005c0000000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a"], 0x80}, 0x1, 0x0, 0x0, 0x2fb35f4c3adc677e}, 0x41) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000ec0)={{r0}, "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"}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c20000030806000108"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000e80)={&(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0}, 0x20000000) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) write$tun(r1, &(0x7f0000000140)={@void, @void, @ipv4=@igmp={{0x5a, 0x4, 0x1, 0x1f, 0x22f, 0x66, 0x0, 0x8, 0x2, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x1f, 0x34, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @multicast1, @local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x29}]}, @ssrr={0x89, 0x1b, 0xf6, [@rand_addr=0x64010102, @local, @multicast2, @multicast1, @private=0xa010101, @empty]}, @cipso={0x86, 0x6e, 0x3, [{0x7, 0xd, "b8b3f5e30dd5538dea987e"}, {0x0, 0x8, "370c8f1022b1"}, {0x1, 0x7, "96baba40af"}, {0x6, 0x10, "4673f4ba05eb4ec8b0e6e8c3dd12"}, {0x2, 0x8, "3db253a4f36e"}, {0x1, 0x3, "e9"}, {0x2, 0x9, "360f285348c3da"}, {0x5, 0xb, "47ede18ce4626f635b"}, {0x5, 0xb, "1ff47f1772ec9e0f01"}, {0x6, 0x12, "23e068cc6372cff991c849ebfc277bbf"}]}, @ssrr={0x89, 0x13, 0x3d, [@loopback, @local, @rand_addr=0x64010101, @multicast2]}, @rr={0x7, 0x17, 0xd3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x19}]}, @ssrr={0x89, 0x13, 0xf7, [@broadcast, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @cipso={0x86, 0x48, 0x1, [{0x2, 0x12, "02569ae4c7d2a4fa42bfe3dcc0a10ec5"}, {0x2, 0xf, "b087f37e0b7a257c4703df5719"}, {0x7, 0x3, '.'}, {0x7, 0x2}, {0x1, 0x3, "8f"}, {0x0, 0x3, '@'}, {0x2, 0xe, "25d4083b8672c83800ed4d8d"}, {0x6, 0x8, "9f20e8c389f6"}]}, @noop, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0x7, [{@empty, 0xef7a}, {@empty, 0x5}]}, @generic={0x7, 0x10, "64fa856a3622faa2e7f6e5b64e7c"}]}}, {0x1e, 0x6, 0x0, @multicast1, "771dc655ed777dd3b96d7f8b2cecf1c436b4c430030a739fbc33e1d2b7d330ab3346740d84fc8f109844e55851615832ceb95bf4e1445d2e0f5264cfc01426e388b5a9bce3d1e8becbf882cd8da2ce5c56f34eaacfc0c7bbd491b9e916877f3e5888e86b8af86104024b11531a2beb556a9b70e28d7b0affb927ba5f25be59b9e391503a4cf0ec35a11f25548e409c74faa2e386d114b45f829f599d1b9310d73067d514ced392329ef5197b817acbc8b7f85a647e874c2ad63c52e1f531db"}}}, 0x22f) sendmsg$netlink(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="10f79a4c8be87642a7aec21171bd6db700"/31], 0x10}, {&(0x7f0000000100)=ANY=[@ANYBLOB="10000000ed03"], 0x10}], 0x2, 0x0, 0x0, 0xc0c0}, 0x4000080) 1.417338923s ago: executing program 5 (id=3212): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x2) (async) connect$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x2) (async) epoll_create1(0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000000240)=""/201, 0xc9}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x3c, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x347}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000400)=0x10001, 0x4) 1.38917556s ago: executing program 0 (id=3213): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0) (async) r2 = epoll_create1(0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001400)={0xe0000017}) (async) epoll_wait(r2, &(0x7f0000001940)=[{}], 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) (async) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000000d}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r4, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1ff}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0xffff, 0x1, 0x335, 0x8]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xef}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r9, 0x29, 0xd3, 0x0, 0x0) socket(0x5, 0xa, 0xffff8000) 1.279923696s ago: executing program 5 (id=3214): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @empty}}}}}}, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030069087a300000000060000000060a010400000000000000000500400008000b400000000038000480340001800b00010074756e6e656c0000240002800800034000000000080001400000000908000340000000f5080002400000000c0900010073797a3000"], 0xd4}}, 0x0) 1.249228809s ago: executing program 1 (id=3215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x2f, 0x0, "ea1405f7ed3afb477e97815317dd90b0a9f242cdedf08f407b4090210f80a0719e68fabccef0ed7facb62bf4b908fe0781eb04f51226b4e01641b245e500000000000000000000004600"}, 0xd8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xbc, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_USERDATA={0x7d, 0xd, 0x1, 0x0, "877bdbbc0330ccc0d35c27abf0ed2dbc886003c558790e0963ca138a1d4d117e8e68a2a93e19de9bcd76c7f748c4bd656414852df6e143870bf6268f48d8c5346d3af35600e3c79add29f9609790bc9e05fb33a77710d3dea585ba06180a09d5dea1644dae21b77d01225e96ab192ec43d0e80d254ad278daa"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 1.145285735s ago: executing program 0 (id=3216): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x18, 0x3e, 0x107, 0x70bd27, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x117}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x440) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)="15", &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r2}, 0x38) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x2400d091, &(0x7f0000000340)={0x11, 0x11, r4, 0x1, 0x4, 0x6, @link_local}, 0x14) (async) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100800000000000000005000000180001801400020074756e6c3000000000000000000000000500070005"], 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000ff0200000800008c7b35812a1200"/27, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bind$inet(r5, 0x0, 0xfffffd7d) (async) r9 = socket$igmp(0x2, 0x3, 0x2) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x104, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1bc}}, 0x0) (async) setsockopt$MRT_DEL_MFC(r9, 0x0, 0xcd, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffffffffffffff, "822013573606e8de93b01f708edfe31fca9690d22823d061f320c89347970cb8", 0x4, 0x4, 0x6, 0x1}, 0x3c) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) write(r0, &(0x7f0000000040)="09000000010000", 0x7) 1.112810638s ago: executing program 6 (id=3217): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=@base={0xa, 0x16, 0x8, 0x400007f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1.07113398s ago: executing program 5 (id=3218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.02094867s ago: executing program 3 (id=3219): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @private=0xa010100, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901", 0x3d}], 0x1}, 0x48002) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600000001"], 0x0, 0xfffe}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="85000000900000003765040004000000ac8618712eb512b84002448d19a8ec42fb341dceac82229871ebdc104f52b98b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x3, 0x4d8, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x52, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000107800"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="72c0b475", @ANYRES16=r7, @ANYBLOB="010125bd7000fbdbdf251500000008000100", @ANYRES32=0x0, @ANYBLOB="0500140000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x35, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060086dd"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 966.809863ms ago: executing program 1 (id=3220): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x22051, r0, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x3) (async) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000)={0xdd, 0x4, 0x3, 0x21, 0x0, 0x9, 0xe8, 0xa0, 0x7, 0x3, 0x3, 0x3, 0x86, 0xf}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000300)={0x4, 0x200, 0xd18, 0x2, r6}, &(0x7f0000000380)=0x10) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r7, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x40812) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r8, 0x0, 0x12b, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000000240)=""/76, 0xfffffffc, 0x0, 0x44, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17efe691d10022b7742709c46bef17c4cbb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x200}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2400c081}, 0x80) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x10c, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_csum={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x6}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) 874.974971ms ago: executing program 5 (id=3221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4c088}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r5, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x10, 0x1, 0xc}], 0x10}}], 0x1, 0x20000040) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xc, 0x24, 0x4}, 0x20) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008844}, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 759.680666ms ago: executing program 1 (id=3222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109540, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x4005) 759.202996ms ago: executing program 0 (id=3223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = getgid() ioctl$TUNSETGROUP(r5, 0x400454ce, r6) ioctl$TUNSETGROUP(r0, 0x400454ce, r6) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xf0}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040800) 639.364184ms ago: executing program 6 (id=3224): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000380)={0x10001, {{0x2, 0x4e1d, @empty}}}, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380), 0x200002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000140)=0x20) r6 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000340)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 524.690786ms ago: executing program 3 (id=3225): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000400000000000c000200"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x0) 397.219412ms ago: executing program 6 (id=3226): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) (async) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) (async) 324.071935ms ago: executing program 0 (id=3227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa35}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r4, 0xc, 0x0, @val=@perf_event={0x54c}}, 0x18) syz_emit_ethernet(0x1b6, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @gre={{0x20, 0x4, 0x0, 0x9, 0x1a8, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@generic={0x44, 0x6, "210f3458"}, @rr={0x7, 0x23, 0xe2, [@loopback, @loopback, @multicast2, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1]}, @ssrr={0x89, 0x17, 0xfd, [@private=0xa010100, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x9, 0x1, 0x9, [{@empty, 0x8}, {@empty, 0x9}, {@empty, 0x5}]}, @rr={0x7, 0x7, 0x7f, [@broadcast]}, @ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x3, 0x3, [0x2, 0xfffc], "f03e3a"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x81, 0x1, 0x8001], "733b8b744eda1e6226b7a872b76fb5463c0a7281bf1d2e6381c490532c206ae6ff7e3eac00f1042088ae6d4702476b8807ee34bad4d7abcb80b39274120c5a6edf24bf39b44a0a76feef589b76b83d958605bccbde468ef6e7f30f55696d8169940ec5a83a138c6e75a9b0b18b658771b89acefd4ab7bfbfe5fff68cd5d1e81ffa4dab6d3669d83d0d42b3616afa506db86df78eafb28e5457f779cb9a4688"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x5, 0x0], "218fbebf47cf0f3be99f1564537f91a04ed32d899fb4ca44a4a0accc27424f638b1975bce56595"}, {0x8, 0x88be, 0x4, {{0x9, 0x1, 0xc, 0x2, 0x0, 0x2, 0x3, 0xe}, 0x1, {0xc}}}, {0x8, 0x22eb, 0x3, {{0x0, 0x2, 0x0, 0x3, 0x0, 0x3, 0x1, 0xf5}, 0x2, {0x7, 0x7, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "bb9123a7eb2b196063b6472709"}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r5) 318.469436ms ago: executing program 1 (id=3228): getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffdac, &(0x7f0000000140)="5b030023e0f6f1", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_HOOK={0x78, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6b54c6ba}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb92f36f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x402ef5f5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5f10788}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 265.363915ms ago: executing program 3 (id=3229): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xb329, 0x4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000000100002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900"/144], 0x90) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000000100002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900"/144], 0x90) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51", 0xb3, 0x12, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51", 0xb3, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r0) socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r2, 0x409, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4028044) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r2, 0x409, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4028044) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000280)={r5}, &(0x7f0000000380)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) 195.557714ms ago: executing program 1 (id=3230): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtfilter={0x30, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0x0, 0x1}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a080001"], 0x80}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYRES32=r1], 0x32600) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1100000004000000040000003100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000080d0f980137458027c60b1b9b3ef6a62738ddeb537771bc5cb633f44163dd3ba176a9052acdf796eb814368d3b197c45d552ff4e9bc8a7de9fbd32f97b183c8fc13f68ca67a4eee4e762c40d1f66c2cdc0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000600000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r5) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_SIOCGIFCONF(r4, 0x8912, 0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="5afb194ddebc95dcd8839fc0a5ecb47d498a28c6f1629ecdec359aee4b872cc2753b44553912fd97ad3b86df16dd3ba0465a6a68cb4fec9712bb5fe10da4f0e483728ae89dcf7127be9d57662b0c5c94756ee06aa974e31712ef08efca6679a7b4415d06f00ec4d9b6b01ad324764bd4fb736c3d60bc4e528111746972772f", 0x7f}], 0x1, 0x0, 0x0, 0xc000}], 0x1, 0x41) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 193.492317ms ago: executing program 6 (id=3231): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r0, &(0x7f0000000100)='\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0x1, 0x8000]}, {0x2, 0x8, 0xfffffffd, 0x39f3}}, 0x9, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x44, r3, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000800000000000000f8ffffff40a50400", @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000022ef500000000000c00000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4, 0x4000010, r4, 0xef47a000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f0000000040)={'virt_wifi0\x00', @multicast}) 133.006373ms ago: executing program 5 (id=3232): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) accept(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x2, 0xfffffffd, {0x2, 0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @binary="edcaf499"}]}, 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x11, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x1b8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25030100800c0002"], 0x114}], 0x1}, 0x0) 51.010486ms ago: executing program 0 (id=3233): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r0, 0xd7735000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/235, 0xeb}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000180)=""/201, 0xc9}], 0x4}, 0xf}, {{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000400)=""/113, 0x71}], 0x2, &(0x7f00000004c0)=""/76, 0x4c}, 0xd}, {{&(0x7f0000000540)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/227, 0xe3}, {&(0x7f00000006c0)=""/250, 0xfa}, {&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000940)=""/70, 0x46}, {&(0x7f00000009c0)=""/192, 0xc0}, {&(0x7f0000000a80)=""/11, 0xb}], 0x7, &(0x7f0000000b40)=""/79, 0x4f}, 0x4}], 0x3, 0x1, 0x0) 0s ago: executing program 3 (id=3234): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x66}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x36}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x37c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 60900 - 0 [ 263.246338][T12573] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 60900 - 0 [ 263.305069][T10558] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 60900 - 0 [ 263.364437][T13162] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 263.388240][T10558] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 60900 - 0 [ 263.531543][T13178] IPVS: length: 4096 != 24 [ 263.592705][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 263.767001][T13182] ip6_vti0 speed is unknown, defaulting to 1000 [ 263.985813][T13198] netlink: 'syz.1.1967': attribute type 32 has an invalid length. [ 264.047704][T13198] bond6: option coupled_control: invalid value (20) [ 264.077427][T13198] bond6 (unregistering): Released all slaves [ 264.133385][T13203] Unsupported ieee802154 address type: 0 [ 264.338332][T13182] lo speed is unknown, defaulting to 1000 [ 264.355310][T13212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.410507][ T5886] lo speed is unknown, defaulting to 1000 [ 264.632646][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.705635][T13220] sctp: [Deprecated]: syz.0.1974 (pid 13220) Use of int in max_burst socket option. [ 264.705635][T13220] Use struct sctp_assoc_value instead [ 264.753673][T13208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.672618][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 265.920687][T13244] __nla_validate_parse: 7 callbacks suppressed [ 265.920709][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1980'. [ 265.985137][T13248] block nbd2: NBD_DISCONNECT [ 265.990099][T13248] block nbd2: Send disconnect failed -32 [ 266.022642][T13248] block nbd2: shutting down sockets [ 266.313442][T13261] vlan2: entered allmulticast mode [ 266.318709][T13261] bond0: entered allmulticast mode [ 266.339159][T13261] bond_slave_0: entered allmulticast mode [ 266.346198][T13261] bond_slave_1: entered allmulticast mode [ 266.355261][T13261] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1986'. [ 266.376538][T13263] ipt_REJECT: TCP_RESET invalid for non-tcp [ 266.474631][T13261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.507037][T13261] bond_slave_0: left allmulticast mode [ 266.525648][T13261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.550208][T13261] bond_slave_1: left allmulticast mode [ 266.556811][T13261] bond0 (unregistering): Released all slaves [ 266.601682][T13275] syzkaller0: entered promiscuous mode [ 266.617602][T13275] syzkaller0: entered allmulticast mode [ 266.639509][T13275] 0: reclassify loop, rule prio 0, protocol 800 [ 266.712797][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.802342][T13279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1993'. [ 267.015642][T13299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1997'. [ 267.048608][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 267.647400][T13340] netlink: 'syz.3.2011': attribute type 1 has an invalid length. [ 267.762882][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 267.779497][T13340] 8021q: adding VLAN 0 to HW filter on device bond15 [ 267.822062][T13341] bond6: (slave veth0_to_bond): Releasing active interface [ 267.840770][T13341] bond15: (slave veth0_to_bond): making interface the new active one [ 267.851309][T13341] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 268.096562][T13377] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2022'. [ 268.106423][T13377] netlink: ct family unspecified [ 268.107494][T13369] bond16: invalid ARP target 0.0.0.0 specified for addition [ 268.122112][T13369] bond16: option arp_ip_target: invalid value (0) [ 268.135018][T13369] bond16 (unregistering): Released all slaves [ 268.222830][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'. [ 268.397962][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2028'. [ 268.418832][T13394] netlink: 'syz.1.2026': attribute type 1 has an invalid length. [ 268.545599][T13400] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 268.698386][T13406] netlink: 'syz.2.2032': attribute type 10 has an invalid length. [ 268.709545][T13406] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 268.802860][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.845157][T13410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.896203][T13410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.932115][T13410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 269.127670][T13430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.152949][T13430] netlink: 'syz.0.2038': attribute type 14 has an invalid length. [ 269.161502][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2038'. [ 269.181422][T13430] netlink: 'syz.0.2038': attribute type 14 has an invalid length. [ 269.182211][T12573] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.192506][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2038'. [ 269.218156][T12573] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.230374][T12573] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.305012][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.321480][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.331830][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.341555][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.351815][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.360241][T13440] netlink: 'syz.0.2042': attribute type 8 has an invalid length. [ 269.363135][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.384507][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.394371][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.403614][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.415366][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.424606][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.434983][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.452798][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.463817][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.473549][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.483262][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.492243][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.502277][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.514698][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.524523][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.542339][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.553208][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.562274][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.571508][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.580888][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.590924][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.601070][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.625760][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.645474][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.655497][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.664952][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.675373][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.684619][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.694478][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.704400][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.713646][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.723256][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.732306][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.751687][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.775094][T13410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.786565][T13410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.797686][T13410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 269.817236][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.826497][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.836275][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.842647][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 269.845654][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.861244][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.870370][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.896024][T13410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.906682][T13410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.918620][T13410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 269.936705][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.945808][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.954882][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.964428][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.973705][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.982754][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 269.991790][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 270.001619][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 270.010864][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 270.020021][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 270.029069][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 270.038432][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 270.057108][T13410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.067605][T13410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.078853][T13410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 270.094185][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 270.103526][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 270.112406][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 270.121472][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 270.130535][T13437] bridge_slave_1: default FDB implementation only supports local addresses [ 270.225549][ T106] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.242598][ T106] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 270.271215][ T106] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.350624][ T106] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.366943][ T106] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 270.375933][ T106] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.399517][ T106] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.408290][ T106] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 270.417939][ T106] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.442251][ T106] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.472878][ T106] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 270.481193][ T106] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.875220][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 271.912769][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.325439][T13525] __nla_validate_parse: 9 callbacks suppressed [ 272.325464][T13525] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2067'. [ 272.367048][T13524] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2067'. [ 272.455980][T13528] bond16: option fail_over_mac: invalid value (16) [ 272.485429][T13528] bond16 (unregistering): Released all slaves [ 272.630847][T13530] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 272.677101][T13527] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 272.894863][T13549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2073'. [ 272.905138][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 272.952791][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.986135][T13553] netlink: 'syz.3.2076': attribute type 9 has an invalid length. [ 273.061287][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'. [ 273.148846][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'. [ 273.260046][T13566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2080'. [ 273.330477][T13569] netlink: 'syz.3.2080': attribute type 1 has an invalid length. [ 273.341826][T13568] netlink: 'syz.2.2081': attribute type 8 has an invalid length. [ 273.553982][T13582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.621773][T13584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2086'. [ 273.695886][T13588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2088'. [ 273.711172][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'. [ 273.909729][T13598] netlink: 'syz.0.2091': attribute type 2 has an invalid length. [ 273.992971][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 274.412213][T13611] netlink: 'syz.3.2096': attribute type 2 has an invalid length. [ 275.032833][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 275.384138][T13635] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.401544][T13635] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 275.417443][ T24] lo speed is unknown, defaulting to 1000 [ 275.425884][ T24] syz0: Port: 1 Link DOWN [ 275.460519][T13643] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 275.477457][ T24] lo speed is unknown, defaulting to 1000 [ 275.755582][T13662] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 275.768913][T13662] x_tables: duplicate underflow at hook 1 [ 276.072781][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 276.244086][T13685] syzkaller0: entered promiscuous mode [ 276.249619][T13685] syzkaller0: entered allmulticast mode [ 277.112685][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.037081][T13715] netlink: 'syz.3.2123': attribute type 1 has an invalid length. [ 278.108869][T13718] s5ÿÿø: renamed from vlan1 [ 278.117937][T13718] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 278.123861][T13721] __nla_validate_parse: 41 callbacks suppressed [ 278.123880][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'. [ 278.141545][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'. [ 278.153834][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.189920][T13719] 8021q: adding VLAN 0 to HW filter on device bond17 [ 278.199048][T13719] bond16: (slave bond17): making interface the new active one [ 278.207930][T13719] bond16: (slave bond17): Enslaving as an active interface with an up link [ 278.214779][T13727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2128'. [ 278.229445][T13715] bond16: (slave gretap4): Enslaving as a backup interface with an up link [ 278.240548][T13715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2123'. [ 278.252109][T13715] 8021q: adding VLAN 0 to HW filter on device bond16 [ 278.288825][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 278.317589][T13727] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.324883][T13727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.354081][T13735] netlink: 'syz.0.2130': attribute type 21 has an invalid length. [ 278.475579][T13739] netlink: 'syz.1.2133': attribute type 7 has an invalid length. [ 278.542884][T13745] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2133'. [ 278.563681][T13739] netlink: 'syz.1.2133': attribute type 7 has an invalid length. [ 278.594047][T13750] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2137'. [ 278.805527][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 278.834112][T13768] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2140'. [ 278.915092][T13767] netlink: 'syz.0.2141': attribute type 4 has an invalid length. [ 279.038626][T13781] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2144'. [ 279.192701][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 279.650525][T13820] tipc: Enabling of bearer rejected, failed to enable media [ 279.745898][T13829] wireguard0: entered promiscuous mode [ 279.751429][T13829] wireguard0: entered allmulticast mode [ 279.902229][T13836] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 280.232797][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 281.272643][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 281.571705][T13907] syzkaller0: entered promiscuous mode [ 281.579306][T13907] syzkaller0: entered allmulticast mode [ 281.862195][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.878782][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.894298][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.909394][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.928839][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.965612][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.974973][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.984430][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.995513][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.003633][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.315936][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 283.154661][T13909] tipc: Invalid UDP bearer configuration [ 283.154698][T13909] tipc: Enabling of bearer rejected, failed to enable media [ 283.174034][T13910] tipc: Invalid UDP bearer configuration [ 283.174091][T13910] tipc: Enabling of bearer rejected, failed to enable media [ 283.219327][T13917] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.352737][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 283.365350][T13924] __nla_validate_parse: 8 callbacks suppressed [ 283.365370][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'. [ 283.391478][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2183'. [ 283.506357][T13926] netlink: 'syz.0.2186': attribute type 83 has an invalid length. [ 283.634347][T13932] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 283.658833][T13935] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2190'. [ 283.699890][T13932] bond7: entered promiscuous mode [ 283.705846][T13932] 8021q: adding VLAN 0 to HW filter on device bond7 [ 283.715761][T13935] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.732599][T13917] lo speed is unknown, defaulting to 1000 [ 283.738698][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2189'. [ 283.766168][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2189'. [ 283.845590][T13943] syzkaller0: entered promiscuous mode [ 283.851612][T13943] syzkaller0: entered allmulticast mode [ 284.072943][ T5832] Bluetooth: hci5: command tx timeout [ 284.402664][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 285.250214][T13932] bond7: (slave bridge7): making interface the new active one [ 285.257937][T13932] bridge7: entered promiscuous mode [ 285.264775][T13932] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 285.397555][T13951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2195'. [ 285.432689][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 285.448079][T13951] netlink: 'syz.3.2195': attribute type 1 has an invalid length. [ 285.473655][T13952] netlink: 'syz.3.2195': attribute type 1 has an invalid length. [ 285.709623][T13917] chnl_net:caif_netlink_parms(): no params data found [ 285.784035][T13967] netlink: 'syz.3.2198': attribute type 12 has an invalid length. [ 285.803719][T13967] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2198'. [ 286.027720][T13917] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.052687][T13917] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.068187][T13917] bridge_slave_0: entered allmulticast mode [ 286.105991][T13917] bridge_slave_0: entered promiscuous mode [ 286.126513][T13917] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.143917][T13917] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.151317][T13917] bridge_slave_1: entered allmulticast mode [ 286.162040][ T5832] Bluetooth: hci5: command tx timeout [ 286.180570][T13917] bridge_slave_1: entered promiscuous mode [ 286.283696][T13917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.371062][T13917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.482658][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.512691][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 288.232841][ T5832] Bluetooth: hci5: command tx timeout [ 288.407656][T13917] team0: Port device team_slave_0 added [ 288.419481][T13917] team0: Port device team_slave_1 added [ 288.487182][T13991] syzkaller0: entered promiscuous mode [ 288.502599][T13991] syzkaller0: entered allmulticast mode [ 288.563044][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.602681][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.083524][T13917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.090539][T13917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.132695][T13917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.155178][T13917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.171455][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 290.172012][T13917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.244995][T13917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.268887][T14021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2209'. [ 290.322589][ T5832] Bluetooth: hci5: command tx timeout [ 290.376709][T13917] hsr_slave_0: entered promiscuous mode [ 290.385331][T13917] hsr_slave_1: entered promiscuous mode [ 290.391949][T13917] debugfs: 'hsr0' already exists in 'hsr' [ 290.398900][T13917] Cannot create hsr debugfs directory [ 290.521915][T14034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2211'. [ 290.569185][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'. [ 290.633446][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.078369][T14041] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2214'. [ 291.088169][T14041] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 291.395853][T14032] syz.0.2213 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 291.429225][T14032] CPU: 0 UID: 0 PID: 14032 Comm: syz.0.2213 Not tainted syzkaller #0 PREEMPT(full) [ 291.429255][T14032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.429267][T14032] Call Trace: [ 291.429275][T14032] [ 291.429284][T14032] dump_stack_lvl+0xe8/0x150 [ 291.429318][T14032] dump_header+0xd3/0x4c0 [ 291.429344][T14032] oom_kill_process+0x3ab/0x970 [ 291.429370][T14032] out_of_memory+0x106c/0x1410 [ 291.429390][T14032] ? percpu_ref_put+0x19/0x180 [ 291.429414][T14032] ? __pfx___mutex_lock+0x10/0x10 [ 291.429443][T14032] ? __pfx_out_of_memory+0x10/0x10 [ 291.429465][T14032] ? do_raw_spin_unlock+0xf5/0x210 [ 291.429497][T14032] try_charge_memcg+0xc53/0x1560 [ 291.429531][T14032] ? __lock_acquire+0x6b5/0x2cf0 [ 291.429571][T14032] ? __pfx_try_charge_memcg+0x10/0x10 [ 291.429589][T14032] ? xa_load+0x60/0x210 [ 291.429622][T14032] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 291.429649][T14032] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 291.429676][T14032] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 291.429702][T14032] __swap_cache_prepare_and_add+0x52a/0x700 [ 291.429751][T14032] swap_cache_alloc_folio+0xf1/0x240 [ 291.429782][T14032] swap_cluster_readahead+0x369/0x690 [ 291.429818][T14032] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 291.429860][T14032] ? get_vma_policy+0x27b/0x3c0 [ 291.429887][T14032] swapin_readahead+0x196/0xc50 [ 291.429928][T14032] ? __pfx_swapin_readahead+0x10/0x10 [ 291.429957][T14032] ? swap_table_get+0x1e/0x260 [ 291.429982][T14032] ? swap_table_get+0x1e/0x260 [ 291.430004][T14032] ? swap_table_get+0x1e/0x260 [ 291.430030][T14032] ? swap_table_get+0x216/0x260 [ 291.430056][T14032] ? swap_cache_get_folio+0x513/0x520 [ 291.430090][T14032] do_swap_page+0x54f/0x58d0 [ 291.430115][T14032] ? __lock_acquire+0x6b5/0x2cf0 [ 291.430163][T14032] ? do_swap_page+0x12c/0x58d0 [ 291.430186][T14032] ? __pfx_do_swap_page+0x10/0x10 [ 291.430209][T14032] ? __pte_offset_map+0x1ae/0x240 [ 291.430240][T14032] ? pte_offset_map_rw_nolock+0xea/0x160 [ 291.430271][T14032] handle_mm_fault+0x12d2/0x3310 [ 291.430316][T14032] ? handle_mm_fault+0xee/0x3310 [ 291.430352][T14032] ? __pfx_handle_mm_fault+0x10/0x10 [ 291.430376][T14032] ? lock_vma_under_rcu+0x45a/0x500 [ 291.430429][T14032] do_user_addr_fault+0xa73/0x1340 [ 291.430462][T14032] ? rcu_is_watching+0x15/0xb0 [ 291.430490][T14032] ? trace_page_fault_user+0x84/0x210 [ 291.430529][T14032] exc_page_fault+0x6a/0xc0 [ 291.430559][T14032] asm_exc_page_fault+0x26/0x30 [ 291.430579][T14032] RIP: 0033:0x7f514506a110 [ 291.430598][T14032] Code: c4 4c 0f 42 e0 83 3d ba dc 3a 00 00 0f 8e d9 fd ff ff e8 33 83 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 7e b5 ed 00 e8 03 00 00 48 8d 1d 7f be 3a 00 e8 8a 31 13 00 [ 291.430616][T14032] RSP: 002b:00007ffd2668d040 EFLAGS: 00010212 [ 291.430635][T14032] RAX: 00000000000471cb RBX: 00007f5145417da0 RCX: 00000000000470b8 [ 291.430648][T14032] RDX: 0000000000000113 RSI: 00007ffd2668d020 RDI: 00000000106fed84 [ 291.430661][T14032] RBP: 00007f5145417da0 R08: 7fffffffffffffff R09: 3fffffffffffffff [ 291.430675][T14032] R10: 4000000000000000 R11: 0000000000000246 R12: 00000000000471e4 [ 291.430688][T14032] R13: 00007f514541636c R14: 0000000000047035 R15: 00007f5145416360 [ 291.430725][T14032] [ 291.747281][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.753572][T14032] memory: usage 305380kB, limit 307200kB, failcnt 462 [ 291.760942][T14032] memory+swap: usage 305612kB, limit 9007199254740988kB, failcnt 0 [ 291.793963][T14032] kmem: usage 297352kB, limit 9007199254740988kB, failcnt 0 [ 291.801352][T14032] Memory cgroup stats for /syz0: [ 291.801674][T14032] cache 0 [ 291.810331][T14032] rss 20480 [ 291.813934][T14032] rss_huge 0 [ 291.817175][T14032] shmem 0 [ 291.820144][T14032] mapped_file 0 [ 291.824322][T14032] dirty 0 [ 291.827307][T14032] writeback 0 [ 291.830699][T14032] workingset_refault_anon 12 [ 291.836105][T14032] workingset_refault_file 4 [ 291.840652][T14032] swap 221184 [ 291.844408][T14032] swapcached 249856 [ 291.848374][T14032] pgpgin 29518 [ 291.851866][T14032] pgpgout 29511 [ 291.855894][T14032] pgfault 76577 [ 291.859522][T14032] pgmajfault 10 [ 291.863716][T14032] inactive_anon 0 [ 291.867513][T14032] active_anon 28672 [ 291.871563][T14032] inactive_file 0 [ 291.876427][T14032] active_file 0 [ 291.879981][T14032] unevictable 0 [ 291.886987][T14032] hierarchical_memory_limit 314572800 [ 291.892790][T14032] hierarchical_memsw_limit 9223372036854771712 [ 291.899201][T14032] total_cache 0 [ 291.903186][T14032] total_rss 20480 [ 291.906894][T14032] total_rss_huge 0 [ 291.910781][T14032] total_shmem 0 [ 291.914815][T14032] total_mapped_file 0 [ 291.918879][T14032] total_dirty 0 [ 291.922962][T14032] total_writeback 0 [ 291.926866][T14032] total_workingset_refault_anon 12 [ 291.932054][T14032] total_workingset_refault_file 4 [ 291.937778][T14032] total_swap 221184 [ 291.941662][T14032] total_swapcached 249856 [ 291.946628][T14032] total_pgpgin 29518 [ 291.950681][T14032] total_pgpgout 29511 [ 291.955135][T14032] total_pgfault 76577 [ 291.959192][T14032] total_pgmajfault 10 [ 291.963748][T14032] total_inactive_anon 0 [ 291.967976][T14032] total_active_anon 28672 [ 291.972842][T14032] total_inactive_file 0 [ 291.977161][T14032] total_active_file 0 [ 291.981211][T14032] total_unevictable 0 [ 291.989904][T14032] anon_cost 0 [ 291.997153][T14032] file_cost 0 [ 292.000859][T14032] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2213,pid=14032,uid=0 [ 292.017527][T14032] Memory cgroup out of memory: Killed process 14032 (syz.0.2213) total-vm:110960kB, anon-rss:1256kB, file-rss:31504kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 292.792817][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.388833][T14025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.406221][T13917] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 293.482059][T13917] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.561952][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2216'. [ 293.589065][T13917] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.589636][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2216'. [ 293.611396][T13917] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 293.684591][T14052] syzkaller0: entered promiscuous mode [ 293.690197][T14052] syzkaller0: entered allmulticast mode [ 293.716115][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 293.726086][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 293.735248][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 293.747803][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 293.756213][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.832868][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.872811][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.225317][T14055] ip6_vti0 speed is unknown, defaulting to 1000 [ 295.320726][T13917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.393030][T13917] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.402253][T14070] netlink: 'syz.0.2221': attribute type 1 has an invalid length. [ 295.435809][T12576] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.443056][T12576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.667978][T14072] 8021q: adding VLAN 0 to HW filter on device bond9 [ 295.701849][T14072] bond8: (slave bond9): making interface the new active one [ 295.723280][T14072] bond8: (slave bond9): Enslaving as an active interface with an up link [ 295.763760][T12576] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.770979][T12576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.804720][T14055] lo speed is unknown, defaulting to 1000 [ 295.832769][ T51] Bluetooth: hci6: command tx timeout [ 295.912754][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.035404][T14096] netlink: 'syz.1.2227': attribute type 1 has an invalid length. [ 296.180875][T14099] syzkaller0: entered promiscuous mode [ 296.189799][T14099] syzkaller0: entered allmulticast mode [ 296.367104][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 296.386600][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 296.423763][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 296.434435][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 296.455083][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 296.464776][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 296.474456][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 296.484703][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 296.502814][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 296.519151][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 296.952839][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.886718][T14110] netlink: 'syz.1.2231': attribute type 12 has an invalid length. [ 297.895699][T14110] netlink: 'syz.1.2231': attribute type 29 has an invalid length. [ 297.912563][ T51] Bluetooth: hci6: command tx timeout [ 297.981624][T14128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.992785][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 298.061861][T13917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.321328][T14055] chnl_net:caif_netlink_parms(): no params data found [ 298.592857][T14156] netlink: 'syz.3.2240': attribute type 1 has an invalid length. [ 298.599155][T14055] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.608899][T14055] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.633263][T14055] bridge_slave_0: entered allmulticast mode [ 298.641403][T14055] bridge_slave_0: entered promiscuous mode [ 298.667967][T14055] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.680786][T14055] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.702740][T14055] bridge_slave_1: entered allmulticast mode [ 298.710784][T14055] bridge_slave_1: entered promiscuous mode [ 298.941826][T14177] syzkaller0: entered promiscuous mode [ 298.948041][T14177] syzkaller0: entered allmulticast mode [ 299.032878][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.996058][ T51] Bluetooth: hci6: command tx timeout [ 300.072861][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 300.460633][T14055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.481647][T14055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.553110][T14055] team0: Port device team_slave_0 added [ 300.566366][T14055] team0: Port device team_slave_1 added [ 300.599043][T14055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.606190][T14055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.633042][T14055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.647222][T14055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.654429][T14055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.681048][T14055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.745893][T14055] hsr_slave_0: entered promiscuous mode [ 300.752752][T14055] hsr_slave_1: entered promiscuous mode [ 300.758989][T14055] debugfs: 'hsr0' already exists in 'hsr' [ 300.765309][T14055] Cannot create hsr debugfs directory [ 300.790626][T13917] veth0_vlan: entered promiscuous mode [ 300.854754][T13917] veth1_vlan: entered promiscuous mode [ 300.945464][T13917] veth0_macvtap: entered promiscuous mode [ 300.968530][T13917] veth1_macvtap: entered promiscuous mode [ 301.021069][T13917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.031337][T14055] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 301.045930][T14055] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 301.056877][T13917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.065868][T14055] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 301.076427][T14055] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 301.096763][T10577] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.106800][T10577] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.112814][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 301.128195][T10577] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.141249][T10577] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.248420][T10577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.264632][T10577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.297074][T10577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.305872][T10577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.337794][T14055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.364892][T14055] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.393554][T10577] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.400748][T10577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.436757][T12573] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.443960][T12573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.764564][T14055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.966650][T14055] veth0_vlan: entered promiscuous mode [ 301.980376][T14055] veth1_vlan: entered promiscuous mode [ 302.010641][T14055] veth0_macvtap: entered promiscuous mode [ 302.022016][T14055] veth1_macvtap: entered promiscuous mode [ 302.041581][T14055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.055683][T14055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.068829][T12573] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.078306][T12573] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.084057][ T51] Bluetooth: hci6: command tx timeout [ 302.097773][T12573] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.107225][T12573] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.152892][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 302.179059][T12573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.197015][T12573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.226230][T10577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.238207][T10577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.193155][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 304.233005][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 305.272970][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 306.312932][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 307.352916][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 308.392909][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.432870][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 310.472914][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 311.512892][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 312.552923][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 313.602925][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 314.632896][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 315.672874][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 316.712900][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.752847][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 318.802934][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 319.832986][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 320.698169][T14227] __nla_validate_parse: 25 callbacks suppressed [ 320.698190][T14227] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.2246'. [ 320.714855][T14227] bridge_slave_1: default FDB implementation only supports local addresses [ 320.758263][T14226] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 320.812928][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'. [ 320.872876][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 321.116219][T14258] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2256'. [ 321.291141][T14248] syzkaller0: entered promiscuous mode [ 321.296999][T14248] syzkaller0: entered allmulticast mode [ 321.646970][T14286] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2263'. [ 321.847547][T14295] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2263'. [ 321.917813][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 322.952970][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 323.465045][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 323.548666][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2267'. [ 323.578402][T14309] netlink: 'syz.5.2267': attribute type 1 has an invalid length. [ 323.593456][T14309] netlink: 'syz.5.2267': attribute type 2 has an invalid length. [ 323.644616][T14317] netlink: 'syz.0.2270': attribute type 83 has an invalid length. [ 323.822189][T14332] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2271'. [ 323.938586][T14341] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2273'. [ 324.002706][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 324.130342][T14348] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2276'. [ 324.140310][T14344] syzkaller0: entered promiscuous mode [ 324.146233][T14344] syzkaller0: entered allmulticast mode [ 324.210396][T14351] netlink: 'syz.0.2277': attribute type 1 has an invalid length. [ 324.494197][T14364] netlink: 'syz.3.2282': attribute type 1 has an invalid length. [ 324.703082][T14373] netlink: 'syz.3.2282': attribute type 1 has an invalid length. [ 325.035837][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 325.855735][T14384] __nla_validate_parse: 1 callbacks suppressed [ 325.855756][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2287'. [ 326.073755][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.177501][T14364] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 326.193749][T14367] gretap6: entered promiscuous mode [ 326.334616][T14389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2288'. [ 326.382682][T14395] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 326.444939][T14401] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 326.454091][T14401] netlink: 'syz.3.2292': attribute type 4 has an invalid length. [ 326.463447][T14401] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.2292'. [ 326.478572][T14397] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2290'. [ 326.930811][T14429] syzkaller0: entered promiscuous mode [ 326.936492][T14429] syzkaller0: entered allmulticast mode [ 327.118683][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 328.163237][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 328.317565][ T51] Bluetooth: hci6: command tx timeout [ 328.709063][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2304'. [ 328.883399][T14456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2307'. [ 329.041520][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2309'. [ 329.085931][T14463] erspan0: entered promiscuous mode [ 329.104513][T14463] vlan2: entered promiscuous mode [ 329.192807][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 329.374956][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2317'. [ 329.441007][T14493] xt_connbytes: Forcing CT accounting to be enabled [ 329.452800][T14487] syzkaller0: entered promiscuous mode [ 329.459228][T14487] syzkaller0: entered allmulticast mode [ 329.472969][T14500] xt_hashlimit: size too large, truncated to 1048576 [ 329.645661][T14507] netlink: 'syz.5.2321': attribute type 1 has an invalid length. [ 329.653789][T14507] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2321'. [ 330.237299][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.282710][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.451250][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2326'. [ 331.488767][T14528] syzkaller1: entered allmulticast mode [ 331.752235][T14546] netlink: 'syz.3.2333': attribute type 21 has an invalid length. [ 331.778365][T14546] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2333'. [ 332.065274][T14560] syzkaller0: entered promiscuous mode [ 332.071406][T14560] syzkaller0: entered allmulticast mode [ 332.318249][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 333.362722][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 334.001513][T14588] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2344'. [ 334.018843][T14588] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2344'. [ 334.269766][T14594] netlink: 'syz.6.2348': attribute type 10 has an invalid length. [ 334.282223][T14598] geneve3: entered promiscuous mode [ 334.294480][T14594] team0: Device vxcan1 is of different type [ 334.392706][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 334.544904][T14615] ip6erspan0: entered promiscuous mode [ 334.557053][T14615] netlink: 'syz.3.2352': attribute type 1 has an invalid length. [ 334.842582][T14623] syzkaller0: entered promiscuous mode [ 334.859455][T14623] syzkaller0: entered allmulticast mode [ 335.031019][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2363'. [ 335.444036][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.479249][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.926663][T14662] sctp: [Deprecated]: syz.5.2367 (pid 14662) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.926663][T14662] Use struct sctp_sack_info instead [ 337.054317][T14668] syzkaller0: entered promiscuous mode [ 337.060166][T14668] syzkaller0: entered allmulticast mode [ 337.120531][T14668] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2369'. [ 337.434309][T14686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 337.449136][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2374'. [ 337.466015][T14686] netlink: 'syz.0.2374': attribute type 12 has an invalid length. [ 337.475101][T14686] netlink: 'syz.0.2374': attribute type 11 has an invalid length. [ 337.522764][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 337.573717][T14694] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2377'. [ 337.905980][T14708] netlink: 'syz.1.2382': attribute type 58 has an invalid length. [ 337.916162][T14708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2382'. [ 338.068747][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2386'. [ 338.116953][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2386'. [ 338.279987][T14735] netem: change failed [ 338.300623][T14737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2391'. [ 338.325829][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2393'. [ 338.545934][T14743] netlink: 'syz.1.2392': attribute type 1 has an invalid length. [ 338.560737][T14752] syzkaller0: entered promiscuous mode [ 338.562668][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.567897][T14752] syzkaller0: entered allmulticast mode [ 338.596625][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2392'. [ 338.760352][T14743] 8021q: adding VLAN 0 to HW filter on device bond7 [ 338.798133][T14771] netlink: 'syz.6.2398': attribute type 10 has an invalid length. [ 338.851423][T14753] bond7: entered promiscuous mode [ 338.875818][T14753] bond7: entered allmulticast mode [ 338.956807][T14771] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.999014][T14771] bridge_slave_1: left allmulticast mode [ 339.016566][T14771] bridge_slave_1: left promiscuous mode [ 339.023184][T14771] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.066965][T14771] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 339.433586][T14797] netlink: 'syz.1.2405': attribute type 1 has an invalid length. [ 339.441476][T14797] netlink: 'syz.1.2405': attribute type 2 has an invalid length. [ 339.561974][T14805] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20003 [ 339.602697][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 339.700310][T14816] netlink: 'syz.0.2407': attribute type 24 has an invalid length. [ 339.849390][T14820] ip6_vti0 speed is unknown, defaulting to 1000 [ 339.899312][T14815] netlink: 'syz.1.2410': attribute type 3 has an invalid length. [ 339.928697][T14815] netlink: 'syz.1.2410': attribute type 1 has an invalid length. [ 340.156851][T14838] dvmrp0: entered allmulticast mode [ 340.205224][T14840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.346043][ T24] IPVS: starting estimator thread 0... [ 340.410421][T14820] lo speed is unknown, defaulting to 1000 [ 340.445003][T14850] IPVS: using max 30 ests per chain, 72000 per kthread [ 340.642777][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.642289][T14897] bond10: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 341.672789][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.822505][T14897] bond10: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 341.977700][T14897] bond10: (slave ip6gre3): making interface the new active one [ 342.049946][T14897] bond10: (slave ip6gre3): Enslaving as an active interface with an up link [ 342.171586][T14917] syzkaller1: entered promiscuous mode [ 342.183227][T14917] syzkaller1: entered allmulticast mode [ 342.712736][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 342.766235][T14950] __nla_validate_parse: 4 callbacks suppressed [ 342.766256][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2437'. [ 342.861160][T14955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2438'. [ 342.891599][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2439'. [ 342.914278][T14957] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.922882][T14957] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.176036][T14975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2443'. [ 343.208767][T14975] xt_cgroup: xt_cgroup: no path or classid specified [ 343.216362][T14975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2443'. [ 343.752890][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.792746][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 345.830005][T15042] validate_nla: 1 callbacks suppressed [ 345.830021][T15042] netlink: 'syz.6.2462': attribute type 10 has an invalid length. [ 345.835965][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 345.857605][T15042] team0: Device vxcan1 is of different type [ 345.964264][T15051] netlink: 'syz.6.2464': attribute type 4 has an invalid length. [ 345.972275][T15051] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2464'. [ 345.989921][T15051] .`: renamed from bond0 (while UP) [ 346.000786][T15052] netlink: 'syz.6.2464': attribute type 4 has an invalid length. [ 346.009777][T15052] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2464'. [ 346.379192][T14989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.389557][T15007] netlink: 'syz.1.2452': attribute type 1 has an invalid length. [ 346.399401][T15007] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2452'. [ 346.408977][T15007] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2452'. [ 346.429567][T15007] netlink: 'syz.1.2452': attribute type 1 has an invalid length. [ 346.439955][T15007] netlink: 618 bytes leftover after parsing attributes in process `syz.1.2452'. [ 346.751184][T15072] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 346.872703][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 346.906207][T15084] IPv6: NLM_F_CREATE should be specified when creating new route [ 346.958575][T15084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.965990][T15084] IPv6: NLM_F_CREATE should be set when creating new route [ 347.505653][T15100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.912700][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.937440][T15125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.981058][T15129] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 348.011930][T15119] __nla_validate_parse: 2 callbacks suppressed [ 348.011955][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2487'. [ 348.030694][T15129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.050958][T15119] netlink: 'syz.3.2487': attribute type 30 has an invalid length. [ 348.065051][T15134] bridge_slave_0: invalid flags given to default FDB implementation [ 348.075736][T15119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2487'. [ 348.167554][T15138] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 348.196470][T15139] tipc: Enabled bearer , priority 0 [ 348.204706][T15139] syzkaller0: entered promiscuous mode [ 348.210388][T15139] syzkaller0: entered allmulticast mode [ 348.273358][T15141] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2492'. [ 348.325813][T15139] tipc: Resetting bearer [ 348.354876][T15137] tipc: Resetting bearer [ 348.391647][T15137] tipc: Disabling bearer [ 348.414634][T15148] syzkaller1: entered promiscuous mode [ 348.421203][T15148] syzkaller1: entered allmulticast mode [ 348.430992][T15141] bridge0: port 3(gretap0) entered blocking state [ 348.439240][T15141] bridge0: port 3(gretap0) entered disabled state [ 348.447914][T15141] gretap0: entered allmulticast mode [ 348.454756][T15141] gretap0: entered promiscuous mode [ 348.460537][T15141] bridge0: port 3(gretap0) entered blocking state [ 348.467267][T15141] bridge0: port 3(gretap0) entered forwarding state [ 348.952888][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 349.206206][T15191] syzkaller1: entered promiscuous mode [ 349.211916][T15191] syzkaller1: entered allmulticast mode [ 349.644313][T15204] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 349.992746][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 350.034579][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2521'. [ 350.061581][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2521'. [ 350.182944][T15237] xt_TPROXY: Can be used only with -p tcp or -p udp [ 350.224974][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2523'. [ 350.244913][T15237] xt_TPROXY: Can be used only with -p tcp or -p udp [ 350.458242][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2527'. [ 350.487734][T15258] gretap0: left allmulticast mode [ 350.505677][T15258] gretap0: left promiscuous mode [ 350.521070][T15258] bridge0: port 3(gretap0) entered disabled state [ 350.586336][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2528'. [ 350.609490][T15258] bridge_slave_0: left allmulticast mode [ 350.619285][T15262] netlink: 'syz.5.2528': attribute type 3 has an invalid length. [ 350.628918][T15258] bridge_slave_0: left promiscuous mode [ 350.641081][T15258] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.675724][T15258] bridge_slave_1: left allmulticast mode [ 350.681525][T15258] bridge_slave_1: left promiscuous mode [ 350.692025][T15258] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.714927][T15258] bond0: (slave bond_slave_0): Releasing backup interface [ 350.741164][T15258] bond0: (slave bond_slave_1): Releasing backup interface [ 350.773194][T15258] team0: Port device team_slave_0 removed [ 350.807617][T15258] team0: Port device team_slave_1 removed [ 350.825752][T15258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.835512][T15258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.848582][T15258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.856864][T15258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.872912][T15258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 351.032785][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 351.101125][T15290] lo: entered allmulticast mode [ 351.117928][T15293] lo: left allmulticast mode [ 351.219352][T15299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2539'. [ 351.382143][T15299] bond8: entered promiscuous mode [ 351.414796][T15299] 8021q: adding VLAN 0 to HW filter on device bond8 [ 351.428624][T15317] netlink: 'syz.6.2541': attribute type 21 has an invalid length. [ 351.440548][T15317] netlink: 'syz.6.2541': attribute type 22 has an invalid length. [ 351.449045][T15317] netlink: 'syz.6.2541': attribute type 23 has an invalid length. [ 351.457943][T15317] netlink: 'syz.6.2541': attribute type 25 has an invalid length. [ 351.474961][T15317] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2541'. [ 351.756905][T15327] macvtap1: entered promiscuous mode [ 351.773065][T15327] macvtap1: entered allmulticast mode [ 351.783238][T15327] veth1_vlan: entered allmulticast mode [ 352.072823][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 352.342249][T15358] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.370154][T15358] netlink: 'syz.6.2550': attribute type 1 has an invalid length. [ 352.786790][T15386] dvmrp6: entered allmulticast mode [ 352.895104][T15397] bridge_slave_1: left allmulticast mode [ 352.900925][T15397] bridge_slave_1: left promiscuous mode [ 352.913226][T15397] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.923697][T15390] xt_TPROXY: Can be used only with -p tcp or -p udp [ 352.924636][T15397] bridge_slave_0: left promiscuous mode [ 352.936395][T15397] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.113888][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.152830][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.192916][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.329141][T15361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.616287][T15412] __nla_validate_parse: 1 callbacks suppressed [ 355.616311][T15412] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2564'. [ 355.775086][T15419] tipc: Can't bind to reserved service type 0 [ 355.867809][T15427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2569'. [ 356.020235][T15430] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2570'. [ 356.046841][T15437] team0 (unregistering): Port device team_slave_0 removed [ 356.061692][T15437] team0 (unregistering): Port device team_slave_1 removed [ 356.238722][ T30] audit: type=1107 audit(1772408115.081:7): pid=15446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Y‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™ló*ºYGÍ©˜…t¿Ý•/' [ 356.255534][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 356.308229][T15447] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2574'. [ 356.355544][T15447] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2574'. [ 356.480988][T15460] openvswitch: netlink: Flow key attr not present in new flow. [ 356.534673][T15463] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2579'. [ 356.566704][T15463] netem: invalid attributes len -24 [ 356.571966][T15463] netem: change failed [ 356.680562][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'. [ 356.955878][T15486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.259562][T15493] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2589'. [ 357.282621][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 358.323443][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 358.836436][T15511] netlink: 'syz.3.2592': attribute type 1 has an invalid length. [ 358.867263][T15511] netlink: 'syz.3.2592': attribute type 7 has an invalid length. [ 358.887492][T15511] netlink: 'syz.3.2592': attribute type 8 has an invalid length. [ 358.914031][T15511] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2592'. [ 358.924463][T15511] NCSI netlink: No device for ifindex 65584 [ 358.930750][T15512] netlink: 'syz.3.2592': attribute type 1 has an invalid length. [ 358.939422][T15512] netlink: 'syz.3.2592': attribute type 7 has an invalid length. [ 359.009186][T15512] netlink: 'syz.3.2592': attribute type 8 has an invalid length. [ 359.055842][T15512] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2592'. [ 359.105543][T15512] NCSI netlink: No device for ifindex 65584 [ 359.352609][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 359.413235][T15539] netlink: 'syz.6.2600': attribute type 5 has an invalid length. [ 359.541728][T15545] netlink: 'syz.3.2603': attribute type 1 has an invalid length. [ 359.895095][T15571] openvswitch: netlink: Message has 6 unknown bytes. [ 360.212704][T15588] netlink: 'syz.1.2615': attribute type 1 has an invalid length. [ 360.278496][T15588] 8021q: adding VLAN 0 to HW filter on device bond9 [ 360.368217][T15589] netlink: 'syz.1.2615': attribute type 3 has an invalid length. [ 360.392620][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.700133][T15617] __nla_validate_parse: 5 callbacks suppressed [ 360.700154][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2620'. [ 360.719482][T15617] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 360.989638][T15607] veth0_macvtap: left promiscuous mode [ 361.164589][T15607] macvtap0: entered allmulticast mode [ 361.180360][T15607] macvtap0: refused to change device tx_queue_len [ 361.374079][T15633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2625'. [ 361.433671][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 361.606594][T15645] syzkaller0: entered promiscuous mode [ 361.627319][T15645] syzkaller0: entered allmulticast mode [ 361.692765][T15646] tipc: Enabled bearer , priority 0 [ 361.708092][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2630'. [ 361.789335][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2631'. [ 361.865609][T15662] vxcan2: entered allmulticast mode [ 361.957464][T15644] tipc: Resetting bearer [ 362.070810][T15644] tipc: Disabling bearer [ 362.086344][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 362.120486][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 362.272342][T15678] siw: device registration error -23 [ 362.372980][T15676] syz.0.2637 (15676) used greatest stack depth: 16904 bytes left [ 362.472635][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.559426][T15691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.598310][T15695] smc: removing ib device syz2 [ 362.915072][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2647'. [ 363.047293][T15707] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 363.133060][T15707] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 363.149608][T15707] gretap1: entered promiscuous mode [ 363.160053][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.170250][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.180073][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.192558][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.200467][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.220864][T15707] gretap1: entered allmulticast mode [ 363.328095][T15713] IPv6: sit1: Disabled Multicast RS [ 363.350664][T15713] sit1: entered allmulticast mode [ 363.512990][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 363.666860][T15710] lo speed is unknown, defaulting to 1000 [ 364.154105][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 364.167612][T15732] validate_nla: 3 callbacks suppressed [ 364.167632][T15732] netlink: 'syz.0.2655': attribute type 3 has an invalid length. [ 364.562690][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 364.934065][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2662'. [ 365.273914][ T5832] Bluetooth: hci7: command tx timeout [ 365.592643][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 365.772182][T15778] bridge_slave_0: entered promiscuous mode [ 366.111050][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2671'. [ 366.321906][T15793] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.396901][T15710] chnl_net:caif_netlink_parms(): no params data found [ 366.570652][T15793] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.642633][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 366.759378][T15793] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.841877][T15823] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2680'. [ 366.860277][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2680'. [ 366.990222][T15793] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.062937][T15710] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.070159][T15710] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.090175][T15828] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2682'. [ 367.114640][T15710] bridge_slave_0: entered allmulticast mode [ 367.121908][T15710] bridge_slave_0: entered promiscuous mode [ 367.144055][T15710] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.165031][T15710] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.173043][T15710] bridge_slave_1: entered allmulticast mode [ 367.200062][T15710] bridge_slave_1: entered promiscuous mode [ 367.339211][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2685'. [ 367.353354][ T5832] Bluetooth: hci7: command tx timeout [ 367.392881][T15710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.476610][T10577] nci: nci_rx_work: unknown MT 0x7 [ 367.488136][T15710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.588893][T10558] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.631045][T10558] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.647694][T15710] team0: Port device team_slave_0 added [ 367.660164][T10558] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.672632][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 367.674629][T15710] team0: Port device team_slave_1 added [ 367.721967][T10577] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.763412][T15710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.771682][T15710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.800235][T15710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.815689][T15710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.825057][T15710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.866413][T15710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.996849][T15710] hsr_slave_0: entered promiscuous mode [ 368.004876][T15710] hsr_slave_1: entered promiscuous mode [ 368.011493][T15710] debugfs: 'hsr0' already exists in 'hsr' [ 368.018450][T15710] Cannot create hsr debugfs directory [ 368.035481][T15873] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2694'. [ 368.198492][T15846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.393211][T15883] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2697'. [ 368.630198][T15710] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.644302][T15710] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 368.676587][T15895] geneve2: entered promiscuous mode [ 368.712609][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.771938][T15897] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.803966][T10558] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 42109 - 0 [ 368.829268][T10558] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 42109 - 0 [ 368.846167][T15906] netlink: 'syz.0.2705': attribute type 1 has an invalid length. [ 368.914601][T15906] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2705'. [ 368.924437][T15906] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2705'. [ 368.934622][T15906] netlink: 'syz.0.2705': attribute type 1 has an invalid length. [ 368.943126][T15906] netlink: 'syz.0.2705': attribute type 8 has an invalid length. [ 368.944958][T15710] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.954904][T15906] netlink: 606 bytes leftover after parsing attributes in process `syz.0.2705'. [ 368.983328][T15710] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 369.040030][T10558] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 42109 - 0 [ 369.176027][T15710] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.199610][T15710] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 369.260078][T15923] 8021q: adding VLAN 0 to HW filter on device bond11 [ 369.280505][T15923] bond0: (slave bond11): Enslaving as an active interface with an up link [ 369.289928][T15925] macvlan0: entered promiscuous mode [ 369.317637][T15930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.334331][T15930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.351675][T15930] bond0 (unregistering): (slave bond11): Releasing backup interface [ 369.365051][T15930] bond0 (unregistering): Released all slaves [ 369.397152][T15710] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.408462][T15710] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 369.444578][ T5832] Bluetooth: hci7: command tx timeout [ 369.680036][T15950] tipc: Enabling of bearer rejected, failed to enable media [ 369.752729][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 369.804378][T15710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.827232][T15710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.856027][T15710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.880631][T15710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.899202][T15952] ip6gretap0: entered promiscuous mode [ 370.044754][T15710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.081536][T15972] veth0_to_team: entered promiscuous mode [ 370.088509][T15972] veth0_to_team: left promiscuous mode [ 370.103416][T15710] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.115703][T12575] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.123065][T12575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.138525][T15973] netlink: 'syz.0.2720': attribute type 4 has an invalid length. [ 370.139979][T12575] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.153625][T12575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.165999][T15974] netlink: 'syz.0.2720': attribute type 4 has an invalid length. [ 370.188369][T15972] netlink: 'syz.0.2720': attribute type 4 has an invalid length. [ 370.346526][T15897] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.361351][T15897] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 42109 - 0 [ 370.469520][T15897] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.481315][T15897] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 42109 - 0 [ 370.627586][T15897] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.640322][T15897] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 42109 - 0 [ 370.695200][T15710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.792649][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 370.798276][T15710] veth0_vlan: entered promiscuous mode [ 370.846132][T15710] veth1_vlan: entered promiscuous mode [ 370.915233][T10558] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 42109 - 0 [ 370.924101][T10558] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.925408][T15998] netlink: 'syz.1.2726': attribute type 1 has an invalid length. [ 371.023392][T10558] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 42109 - 0 [ 371.031971][T10558] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 371.094667][T10558] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 42109 - 0 [ 371.109132][T10558] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 371.125533][T10558] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 42109 - 0 [ 371.134010][T10558] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 371.143746][T16005] __nla_validate_parse: 10 callbacks suppressed [ 371.143765][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2726'. [ 371.215033][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803af8fc00: rx timeout, send abort [ 371.315220][T15710] veth0_macvtap: entered promiscuous mode [ 371.350266][T15710] veth1_macvtap: entered promiscuous mode [ 371.365754][T16013] syzkaller0: entered promiscuous mode [ 371.371350][T16013] syzkaller0: entered allmulticast mode [ 371.416461][T15710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.459007][T15710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.468207][T16017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2731'. [ 371.513968][ T5832] Bluetooth: hci7: command tx timeout [ 371.554536][T12575] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.580750][T12575] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.609593][T12575] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.643912][T12575] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.710317][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803af8e800: rx timeout, send abort [ 371.724720][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803af8fc00: abort rx timeout. Force session deactivation [ 371.767750][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 371.832676][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.935862][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2737'. [ 371.946381][T16029] hsr_slave_0 (unregistering): left promiscuous mode [ 372.040585][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2737'. [ 372.145939][T16043] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2739'. [ 372.174411][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.203033][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.218646][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803af8e800: abort rx timeout. Force session deactivation [ 372.294940][T10558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.327478][T10558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.489454][T16057] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.2742'. [ 372.518391][T16057] bridge_slave_1: default FDB implementation only supports local addresses [ 372.854341][T16078] netlink: 'syz.5.2748': attribute type 1 has an invalid length. [ 372.872692][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 373.120832][T16103] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2754'. [ 373.279917][T16115] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 373.288361][T16115] team0: Device macvlan2 is already an upper device of the team interface [ 373.426154][T16122] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 373.922635][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.952722][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 375.954029][T16086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.992896][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 376.178942][T16138] IPVS: length: 8 != 1152 [ 376.665887][T16160] netlink: 'syz.6.2769': attribute type 1 has an invalid length. [ 376.745736][T16164] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2767'. [ 376.814360][T16160] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 377.032627][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 377.055874][T16185] syzkaller0: entered promiscuous mode [ 377.061408][T16185] syzkaller0: entered allmulticast mode [ 377.346263][T16198] netlink: 'syz.5.2781': attribute type 9 has an invalid length. [ 377.379692][T16198] netlink: 'syz.5.2781': attribute type 11 has an invalid length. [ 377.399627][T16200] syzkaller0: entered promiscuous mode [ 377.407070][T16200] syzkaller0: entered allmulticast mode [ 377.414311][T16205] netlink: 'syz.5.2781': attribute type 1 has an invalid length. [ 377.416025][T16198] netlink: 'syz.5.2781': attribute type 12 has an invalid length. [ 377.438359][T16198] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.2781'. [ 377.471534][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2781'. [ 377.751885][T16222] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2788'. [ 377.774028][T16221] netlink: 'syz.0.2787': attribute type 30 has an invalid length. [ 377.800810][T16224] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2788'. [ 377.890966][T16226] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2784'. [ 377.921132][T16226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2784'. [ 378.070295][T16237] atomic_op ffff88803d49e998 conn xmit_atomic 0000000000000000 [ 378.078310][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.438342][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2792'. [ 378.455416][ T106] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.455485][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2792'. [ 378.464652][ T106] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.487328][T10557] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.497056][T10557] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.112701][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 380.152677][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 380.558312][T16213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.569092][T16217] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2785'. [ 380.891978][T16247] bond10: Invalid ad_actor_system MAC address. [ 380.898459][T16247] bond10: option ad_actor_system: invalid value (1) [ 380.910466][T16247] bond10 (unregistering): Released all slaves [ 381.193418][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.496037][T16292] netlink: 'syz.1.2807': attribute type 61 has an invalid length. [ 381.548527][T16296] netlink: 'syz.1.2807': attribute type 21 has an invalid length. [ 381.605034][T16284] bond0: Invalid ad_actor_system MAC address. [ 381.611781][T16284] bond0: option ad_actor_system: invalid value (1) [ 381.625606][T16284] bond0 (unregistering): Released all slaves [ 381.725779][T16296] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 381.748926][T16296] bond10 (unregistering): Released all slaves [ 381.889715][T16306] __nla_validate_parse: 7 callbacks suppressed [ 381.889739][T16306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2808'. [ 382.013211][T16312] netlink: 'syz.1.2811': attribute type 1 has an invalid length. [ 382.066684][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 382.079224][T16312] 8021q: adding VLAN 0 to HW filter on device bond10 [ 382.178342][T16312] veth1: entered promiscuous mode [ 382.232640][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.324770][T16318] 8021q: adding VLAN 0 to HW filter on device bond10 [ 382.344044][T16318] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 382.357144][T16318] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 382.950507][T16371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.124080][T16384] x_tables: duplicate underflow at hook 2 [ 383.141741][T16384] block nbd0: Unsupported socket: should be TCP or UNIX. [ 383.171731][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'. [ 383.240398][T16388] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 383.277184][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.424656][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2832'. [ 384.318704][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.097181][T16379] netem: change failed [ 385.111249][T16377] syzkaller1: entered promiscuous mode [ 385.119853][T16377] syzkaller1: entered allmulticast mode [ 385.352646][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.508465][T16422] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2840'. [ 385.615165][T16427] netlink: 'syz.3.2842': attribute type 13 has an invalid length. [ 385.648513][T16427] netlink: 'syz.3.2842': attribute type 58 has an invalid length. [ 385.667815][T16427] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2842'. [ 385.971338][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2847'. [ 386.001955][T16453] netlink: 'syz.3.2847': attribute type 1 has an invalid length. [ 386.044031][T16453] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2847'. [ 386.070150][T16460] syzkaller0: entered promiscuous mode [ 386.075996][T16460] syzkaller0: entered allmulticast mode [ 386.359631][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2853'. [ 386.393369][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 386.626948][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2860'. [ 386.644045][T16489] netlink: 'syz.5.2861': attribute type 32 has an invalid length. [ 386.695159][T16491] block nbd2: Unsupported socket: should be TCP or UNIX. [ 386.755506][T16489] bond1: Setting coupled_control to off (0) [ 387.432776][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.603408][T16521] syzkaller1: entered promiscuous mode [ 387.609068][T16521] syzkaller1: entered allmulticast mode [ 387.820589][T16530] __nla_validate_parse: 3 callbacks suppressed [ 387.820613][T16530] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2868'. [ 388.124318][T16541] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2871'. [ 388.147630][T16541] netlink: 35 bytes leftover after parsing attributes in process `syz.6.2871'. [ 388.169119][T16541] netlink: 'syz.6.2871': attribute type 5 has an invalid length. [ 388.213342][T16541] netlink: 'syz.6.2871': attribute type 6 has an invalid length. [ 388.221479][T16541] netlink: 35 bytes leftover after parsing attributes in process `syz.6.2871'. [ 388.251975][T16544] netlink: 'syz.6.2871': attribute type 6 has an invalid length. [ 388.284684][ T6044] hid-generic 0005:0003:0008.0001: unknown main item tag 0x5 [ 388.316476][ T6044] hid-generic 0005:0003:0008.0001: item fetching failed at offset 1/9 [ 388.348358][T16551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2875'. [ 388.374355][T16552] netlink: 'syz.0.2876': attribute type 1 has an invalid length. [ 388.378635][T16551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2875'. [ 388.392755][ T6044] hid-generic 0005:0003:0008.0001: probe with driver hid-generic failed with error -22 [ 388.401400][T16551] netlink: 'syz.1.2875': attribute type 1 has an invalid length. [ 388.422121][T16551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2875'. [ 388.472642][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 388.505839][T16556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2877'. [ 388.527009][T16556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 388.601074][T16554] bond0: (slave gretap2): making interface the new active one [ 388.646296][T16554] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 388.858018][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2883'. [ 388.946383][T16572] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2883'. [ 389.005318][T16587] bridge_slave_0: left allmulticast mode [ 389.018226][T16587] bridge_slave_0: left promiscuous mode [ 389.039145][T16572] netlink: 'syz.6.2883': attribute type 13 has an invalid length. [ 389.048529][T16572] netlink: 'syz.6.2883': attribute type 17 has an invalid length. [ 389.050512][T16587] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.083651][T16587] bridge_slave_1: left allmulticast mode [ 389.089530][T16587] bridge_slave_1: left promiscuous mode [ 389.095918][T16587] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.111894][T16587] bond0: (slave bond_slave_0): Releasing backup interface [ 389.124658][T16587] bond0: (slave bond_slave_1): Releasing backup interface [ 389.144470][T16587] team0: Port device team_slave_0 removed [ 389.156605][T16587] team0: Port device team_slave_1 removed [ 389.164054][T16587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.171579][T16587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.180714][T16587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.188974][T16587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.199368][T16587] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 389.258231][T16572] ip6gretap0: left promiscuous mode [ 389.280327][T16572] 8021q: adding VLAN 0 to HW filter on device .` [ 389.301451][T16572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.512661][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.519540][T16610] syzkaller0: entered promiscuous mode [ 389.527387][T16610] syzkaller0: entered allmulticast mode [ 389.919923][T16633] netlink: 'syz.5.2897': attribute type 3 has an invalid length. [ 390.023825][T16640] tunl0: entered promiscuous mode [ 390.038034][T16640] netlink: 'syz.3.2901': attribute type 3 has an invalid length. [ 390.552648][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 390.761310][T16681] SET target dimension over the limit! [ 390.877351][T16688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.169273][T16704] sock: sock_set_timeout: `syz.0.2919' (pid 16704) tries to set negative timeout [ 391.180140][T16706] ip6t_REJECT: ECHOREPLY is not supported [ 391.267573][T16709] tipc: Failed to remove unknown binding: 66,0,0/0:3924948901/3924948902 [ 391.409885][T16722] netlink: 'syz.1.2923': attribute type 1 has an invalid length. [ 391.482131][T16718] bond1: option min_links: invalid value (18446744073709551614) [ 391.491566][T16718] bond1: option min_links: allowed values 0 - 2147483647 [ 391.517121][T16718] bond1 (unregistering): Released all slaves [ 391.592703][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.697235][T16726] bond11: (slave bridge5): making interface the new active one [ 391.707452][T16726] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 391.911065][T16745] x_tables: duplicate underflow at hook 3 [ 391.986415][T16754] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20000 [ 392.117759][T16764] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 392.149949][T16764] openvswitch: netlink: Message has 4 unknown bytes. [ 392.632620][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.806351][T16794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.816760][T16794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.825958][T16794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.844850][T16794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.856821][T16794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.002792][T16803] netem: unknown loss type 0 [ 393.008078][T16803] netem: change failed [ 393.062018][T16806] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 393.272924][T16793] lo speed is unknown, defaulting to 1000 [ 393.368173][T16817] __nla_validate_parse: 13 callbacks suppressed [ 393.368195][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 393.391573][T16813] syzkaller1: entered promiscuous mode [ 393.415128][T16813] syzkaller1: entered allmulticast mode [ 393.569360][T16824] tipc: Started in network mode [ 393.569595][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2956'. [ 393.575374][T16824] tipc: Node identity ac14140f, cluster identity 4711 [ 393.575676][T16824] tipc: New replicast peer: 255.255.255.255 [ 393.576331][T16824] tipc: Enabled bearer , priority 10 [ 393.609675][T16830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2957'. [ 393.672715][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 393.769131][T16835] validate_nla: 2 callbacks suppressed [ 393.769150][T16835] netlink: 'syz.6.2959': attribute type 1 has an invalid length. [ 393.888873][T16843] netlink: 'syz.1.2962': attribute type 1 has an invalid length. [ 393.905651][T16840] bond0: entered promiscuous mode [ 393.910950][T16840] bond0: entered allmulticast mode [ 393.917624][T16840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.949019][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2961'. [ 393.949262][T16848] bridge0: Device is already in use. [ 394.072154][T16843] bond12: (slave vcan1): The slave device specified does not support setting the MAC address [ 394.086365][T16852] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 394.104977][T16843] bond12: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 394.119765][T16843] bond12: (slave vcan1): making interface the new active one [ 394.144700][T16843] bond12: (slave vcan1): Enslaving as an active interface with an up link [ 394.256209][T16855] IPVS: set_ctl: invalid protocol: 137 172.20.20.10:20002 [ 394.295733][T16855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2965'. [ 394.645695][T16793] chnl_net:caif_netlink_parms(): no params data found [ 394.713105][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.756937][ T6044] tipc: Node number set to 2886997007 [ 394.950382][T16793] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.961295][T16793] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.968801][T16794] Bluetooth: hci0: command tx timeout [ 394.976770][T16793] bridge_slave_0: entered allmulticast mode [ 394.985915][T16793] bridge_slave_0: entered promiscuous mode [ 395.021968][T16793] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.043847][T16793] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.051107][T16793] bridge_slave_1: entered allmulticast mode [ 395.068532][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2976'. [ 395.089669][T16793] bridge_slave_1: entered promiscuous mode [ 395.205402][T16793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.239213][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036e18000: rx timeout, send abort [ 395.248220][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888036e18000: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 395.295590][T16793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.476212][T16904] lo speed is unknown, defaulting to 1000 [ 395.527250][ T10] IPVS: starting estimator thread 0... [ 395.595305][T16793] team0: Port device team_slave_0 added [ 395.610817][T16793] team0: Port device team_slave_1 added [ 395.622707][T16912] IPVS: using max 28 ests per chain, 67200 per kthread [ 395.738121][T16793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.749981][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.776464][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.844671][T16793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.871761][T16926] delete_channel: no stack [ 395.896822][T16793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.912664][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.975818][T16793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.121861][T16928] syzkaller1: entered promiscuous mode [ 396.133511][T16928] syzkaller1: entered allmulticast mode [ 396.215227][T16793] hsr_slave_0: entered promiscuous mode [ 396.221711][T16793] hsr_slave_1: entered promiscuous mode [ 396.228904][T16793] debugfs: 'hsr0' already exists in 'hsr' [ 396.237965][T16793] Cannot create hsr debugfs directory [ 396.367207][T16942] netlink: 'syz.5.2988': attribute type 5 has an invalid length. [ 396.467932][T16942] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2988'. [ 396.700976][T16955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2990'. [ 396.792617][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.819626][T16959] tipc: Enabled bearer , priority 0 [ 396.905542][T16959] tipc: Disabling bearer [ 396.988212][T16793] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.034928][T16793] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.045341][T16794] Bluetooth: hci0: command tx timeout [ 397.072984][T16793] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 397.104571][T16793] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 51988 - 0 [ 397.192110][T16969] netlink: 'syz.1.2996': attribute type 3 has an invalid length. [ 397.238499][T16983] IPv6: addrconf: prefix option has invalid lifetime [ 397.367663][T16793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.387310][T16793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.398397][T16793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 397.418855][T16793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 51988 - 0 [ 397.421748][T16994] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 397.567246][T16793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.591528][T16793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.604324][T16793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 397.615187][T16793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 51988 - 0 [ 397.622217][T17002] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3005'. [ 397.799099][T17007] bond13: option mode: invalid value (133) [ 397.807375][T17007] bond13 (unregistering): Released all slaves [ 397.832609][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.873354][T17018] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3008'. [ 397.897792][T17009] team0: Port device ip6gre1 added [ 398.225028][T16793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 398.285848][T16793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 398.333418][T16793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 398.358619][T16793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.510411][T17050] syzkaller0: entered promiscuous mode [ 398.516098][T17050] syzkaller0: entered allmulticast mode [ 398.607601][T17058] __nla_validate_parse: 2 callbacks suppressed [ 398.607621][T17058] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3019'. [ 398.700040][T17060] 8021q: VLANs not supported on ip6tnl0 [ 398.717052][T17066] IPVS: set_ctl: invalid protocol: 12 172.30.0.2:20003 [ 398.737118][T16793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.801677][T16793] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.852784][T12573] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.860000][T12573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.872801][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 398.906004][T12573] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.913482][T12573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.112902][T16794] Bluetooth: hci0: command tx timeout [ 399.529423][T17104] xfrm1: entered allmulticast mode [ 399.574463][T16793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.604312][T17106] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3035'. [ 399.652557][T17106] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 399.695301][T17106] syzkaller1: entered promiscuous mode [ 399.701032][T17106] syzkaller1: entered allmulticast mode [ 399.761028][T16793] veth0_vlan: entered promiscuous mode [ 399.772234][T17115] IPv6: NLM_F_CREATE should be specified when creating new route [ 399.787946][T17115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.794270][T17117] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 399.795631][T17115] IPv6: NLM_F_CREATE should be set when creating new route [ 399.814824][T16793] veth1_vlan: entered promiscuous mode [ 399.852635][T17115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.859994][T17115] IPv6: NLM_F_CREATE should be set when creating new route [ 399.912713][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.956624][T16793] veth0_macvtap: entered promiscuous mode [ 399.987457][T16793] veth1_macvtap: entered promiscuous mode [ 400.154689][T16793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.197080][T16793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.260923][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3041'. [ 400.271100][T12575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.297351][T12575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.345818][T12575] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.372563][T12575] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.663113][T17147] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3046'. [ 400.669715][T10574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.712054][T10574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.880304][T12575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.903594][T12575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.953132][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.197508][T16794] Bluetooth: hci0: command tx timeout [ 401.422873][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3053'. [ 401.506483][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 401.525292][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 401.534293][T17188] sit0: entered promiscuous mode [ 401.539513][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 401.553335][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 401.561251][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 401.579294][T17188] netlink: 'syz.0.3056': attribute type 1 has an invalid length. [ 401.637344][T17188] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3056'. [ 401.697999][T17186] lo speed is unknown, defaulting to 1000 [ 401.992628][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.015367][T17208] netlink: 'syz.3.3059': attribute type 3 has an invalid length. [ 402.038026][T17208] netlink: 'syz.3.3059': attribute type 1 has an invalid length. [ 402.047975][ T6044] IPVS: starting estimator thread 0... [ 402.055515][T17207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3058'. [ 402.070178][T17208] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3059'. [ 402.162571][T17210] IPVS: using max 33 ests per chain, 79200 per kthread [ 402.217238][T17213] pimreg: entered allmulticast mode [ 402.462950][T17220] nbd6: detected capacity change from 0 to 63 [ 402.471101][T17219] nbd: nbd6 already in use [ 402.625419][ T5832] block nbd6: Receive control failed (result -104) [ 402.691990][T17186] chnl_net:caif_netlink_parms(): no params data found [ 403.037230][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.313643][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3069'. [ 403.605036][ T5832] Bluetooth: hci2: command tx timeout [ 404.072684][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.112859][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.435402][T17289] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.3078'. [ 405.449770][T17186] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.487080][T17186] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.494715][T17186] bridge_slave_0: entered allmulticast mode [ 405.505554][T17186] bridge_slave_0: entered promiscuous mode [ 405.514994][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.522303][T17186] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.529845][T17186] bridge_slave_1: entered allmulticast mode [ 405.539790][T17186] bridge_slave_1: entered promiscuous mode [ 405.567889][T12575] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.589480][T12575] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 405.608808][T12575] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 405.683351][ T5832] Bluetooth: hci2: command tx timeout [ 405.745835][T17186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.777359][T12575] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.814443][T12575] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 405.824984][T12575] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 405.878983][T17186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.051447][T12575] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.064175][T12575] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 406.075435][T12575] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 406.088445][T17326] netlink: 'syz.5.3085': attribute type 64 has an invalid length. [ 406.096479][T17326] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3085'. [ 406.112354][T17186] team0: Port device team_slave_0 added [ 406.121391][T17327] netlink: 'syz.3.3087': attribute type 7 has an invalid length. [ 406.151405][T17186] team0: Port device team_slave_1 added [ 406.157305][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.233371][T12575] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.253890][T12575] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 406.283989][T12575] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 406.395504][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 406.487861][T17340] ip6_vti0: entered promiscuous mode [ 406.511877][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 406.549961][T17186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.558257][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.594309][T17186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.618222][T17341] syzkaller0: entered promiscuous mode [ 406.624577][T17341] syzkaller0: entered allmulticast mode [ 406.648340][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3093'. [ 406.658720][T17343] syzkaller0: entered promiscuous mode [ 406.665114][T17343] syzkaller0: entered allmulticast mode [ 406.679616][T17186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.702955][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.760044][T17186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.809314][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3097'. [ 406.840541][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3096'. [ 407.041891][T17186] hsr_slave_0: entered promiscuous mode [ 407.060770][T17186] hsr_slave_1: entered promiscuous mode [ 407.081445][T17186] debugfs: 'hsr0' already exists in 'hsr' [ 407.089881][T17186] Cannot create hsr debugfs directory [ 407.169420][T17368] xt_l2tp: v2 doesn't support IP mode [ 407.186020][T17366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3100'. [ 407.195372][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.310306][T17368] netlink: 'syz.5.3101': attribute type 11 has an invalid length. [ 407.318940][T17368] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3101'. [ 407.454140][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3103'. [ 407.474354][T17372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.501127][T12575] bridge_slave_0: left allmulticast mode [ 407.509034][T12575] bridge_slave_0: left promiscuous mode [ 407.530633][T12575] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.647971][T17393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3106'. [ 407.757816][T16794] Bluetooth: hci2: command tx timeout [ 407.838557][T12575] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 408.089578][T12575] dvmrp6 (unregistering): left allmulticast mode [ 408.118414][T12575] bond2 (unregistering): (slave geneve3): Releasing active interface [ 408.188265][T12575] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 408.232632][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 408.396992][T12575] bond11 (unregistering): (slave bridge5): Releasing active interface [ 408.438115][T12575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.447693][T12575] bond_slave_0: left allmulticast mode [ 408.456395][T12575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.465718][T12575] bond_slave_1: left allmulticast mode [ 408.479370][T12575] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 408.489407][T12575] bridge_slave_1: left allmulticast mode [ 408.495857][T12575] bond0 (unregistering): Released all slaves [ 408.506639][T12575] bond1 (unregistering): Released all slaves [ 408.520072][T12575] bond2 (unregistering): Released all slaves [ 408.535416][T12575] bond3 (unregistering): Released all slaves [ 408.549277][T12575] bond4 (unregistering): Released all slaves [ 408.573308][T12575] bond5 (unregistering): Released all slaves [ 408.588073][T12575] bond6 (unregistering): Released all slaves [ 408.602365][T12575] bond7 (unregistering): Released all slaves [ 408.624495][T12575] bond8 (unregistering): Released all slaves [ 408.639569][T12575] bond9 (unregistering): Released all slaves [ 408.660903][T12575] bond10 (unregistering): Released all slaves [ 408.676056][T12575] bond11 (unregistering): Released all slaves [ 408.691584][T12575] bond12 (unregistering): (slave vcan1): Releasing backup interface [ 408.701906][T12575] bond12 (unregistering): Released all slaves [ 408.751227][T17368] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 408.885348][ T5713] IPVS: starting estimator thread 0... [ 408.921431][T17410] IPVS: set_ctl: invalid protocol: 0 255.7.48.0:1280 [ 408.996771][T12575] tipc: Left network mode [ 409.009098][T17411] IPVS: using max 32 ests per chain, 76800 per kthread [ 409.019257][T17417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 409.085128][T12575] IPVS: stopping backup sync thread 13836 ... [ 409.141584][T17424] netlink: 'syz.3.3109': attribute type 11 has an invalid length. [ 409.272677][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 409.615367][T17441] netlink: 'syz.5.3114': attribute type 1 has an invalid length. [ 409.833464][T16794] Bluetooth: hci2: command tx timeout [ 410.312618][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 410.983471][T17512] netlink: 'syz.6.3126': attribute type 8 has an invalid length. [ 411.126319][T17186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.189591][T17186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.227873][T17522] __nla_validate_parse: 3 callbacks suppressed [ 411.227894][T17522] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3130'. [ 411.276215][T12575] hsr_slave_1: left promiscuous mode [ 411.306618][T12575] veth1_macvtap: left promiscuous mode [ 411.312654][T12575] veth0_macvtap: left promiscuous mode [ 411.318604][T12575] veth1_vlan: left promiscuous mode [ 411.325262][T12575] veth0_vlan: left promiscuous mode [ 411.353476][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 411.793867][T12575] team0 (unregistering): Port device team_slave_1 removed [ 411.991723][T12569] smc: removing ib device syz0 [ 412.009454][T17186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 412.106001][T17522] dvmrp10: entered allmulticast mode [ 412.132539][T17186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 412.396712][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.422233][T17546] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3134'. [ 412.655769][T17186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.729994][T17186] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.785285][T12573] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.792825][T12573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.888944][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.896507][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.432704][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 413.459653][T17562] wg1: entered promiscuous mode [ 413.487877][T17562] wg1: entered allmulticast mode [ 413.597821][T17563] dvmrp0: entered allmulticast mode [ 413.699622][T17572] : entered promiscuous mode [ 413.996745][T17186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.120790][T17186] veth0_vlan: entered promiscuous mode [ 414.173714][T17589] macvlan2: entered promiscuous mode [ 414.179084][T17589] macvlan2: entered allmulticast mode [ 414.236038][T17589] bridge0: entered allmulticast mode [ 414.241400][T17589] bridge0: entered promiscuous mode [ 414.286302][T17594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3142'. [ 414.354770][T17589] team0: Port device macvlan2 added [ 414.472612][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 414.594799][T17186] veth1_vlan: entered promiscuous mode [ 414.830214][T17186] veth0_macvtap: entered promiscuous mode [ 414.910700][T17186] veth1_macvtap: entered promiscuous mode [ 415.090627][T17186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.159668][T17186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.239786][T10574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.284113][T10577] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.365047][T10577] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.384971][T10577] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.512795][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 415.934757][T10558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.981170][T10558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.321711][T10577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.342624][T10577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.552718][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 417.181037][T17656] syzkaller1: entered promiscuous mode [ 417.186729][T17656] syzkaller1: entered allmulticast mode [ 417.592596][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 418.468432][T17690] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3161'. [ 418.632644][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 418.819028][T17696] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 418.856005][T17696] bond1: option packets_per_slave: allowed values 0 - 65535 [ 418.897365][T17700] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3164'. [ 418.927034][T17696] bond1 (unregistering): Released all slaves [ 418.945197][T17700] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3164'. [ 418.990476][T17700] netlink: 'syz.1.3164': attribute type 6 has an invalid length. [ 419.030810][T17700] netlink: 'syz.1.3164': attribute type 5 has an invalid length. [ 419.073353][T17700] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3164'. [ 419.086338][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3163'. [ 419.114004][T17697] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3163'. [ 419.181706][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3163'. [ 419.220422][T17697] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3163'. [ 419.234836][T10558] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.250220][T10558] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.294023][T10558] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.318443][T10558] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.432822][T17718] netlink: 'syz.5.3167': attribute type 1 has an invalid length. [ 419.480113][T17722] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3168'. [ 419.530335][T17722] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.648610][T12575] IPVS: stop unused estimator thread 0... [ 419.686133][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 420.101783][T17750] openvswitch: netlink: Missing key (keys=40, expected=80) [ 420.461937][T17766] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3179'. [ 420.712689][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 421.314141][T17785] netlink: 'syz.6.3183': attribute type 3 has an invalid length. [ 421.401778][T17793] syzkaller0: entered promiscuous mode [ 421.435894][T17793] syzkaller0: entered allmulticast mode [ 421.459440][T17782] 0: reclassify loop, rule prio 0, protocol 800 [ 421.752680][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 421.817027][T17810] 8021q: VLANs not supported on ip6tnl0 [ 421.828581][T17810] netlink: 'syz.6.3187': attribute type 10 has an invalid length. [ 421.864944][T17810] team0: Device vxcan1 is of different type [ 422.447363][T17829] netlink: 'syz.6.3192': attribute type 10 has an invalid length. [ 422.474699][T17829] team0: Device vxcan1 is of different type [ 422.792640][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 422.996159][T17606] Set syz1 is full, maxelem 65536 reached [ 423.049710][T17854] netlink: 'syz.5.3199': attribute type 16 has an invalid length. [ 423.057920][T17854] netlink: 'syz.5.3199': attribute type 17 has an invalid length. [ 423.276202][T17854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.833091][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 423.994680][T17864] bridge_slave_0: left promiscuous mode [ 424.526888][T17864] veth1_vlan: left allmulticast mode [ 424.533226][T17864] macvtap1: left promiscuous mode [ 424.538313][T17864] macvtap1: left allmulticast mode [ 424.553709][T17864] gretap1: left promiscuous mode [ 424.558750][T17864] gretap1: left allmulticast mode [ 424.570932][T17864] geneve2: left promiscuous mode [ 424.617362][T17864] xfrm1: left allmulticast mode [ 424.634744][T17864] bridge0: left allmulticast mode [ 424.641559][T17864] macvlan2: left promiscuous mode [ 424.647638][T17864] macvlan2: left allmulticast mode [ 424.703640][T17879] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 424.716793][T17880] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 424.799832][T17882] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 424.835245][T17882] bond1 (unregistering): Released all slaves [ 424.872656][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 424.966867][T10558] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 42109 - 0 [ 424.993433][T10558] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 425.015413][T10558] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 42109 - 0 [ 425.027448][T10558] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 425.087479][T10558] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 42109 - 0 [ 425.096577][T10558] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 425.105312][T10558] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 42109 - 0 [ 425.114575][T17907] netlink: 'syz.5.3208': attribute type 10 has an invalid length. [ 425.142552][T10558] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 425.170866][T17907] team0: Device vxcan1 is of different type [ 425.239167][T17913] __nla_validate_parse: 1 callbacks suppressed [ 425.239192][T17913] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3209'. [ 425.912651][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 425.955902][T17946] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3219'. [ 425.969100][T17946] openvswitch: netlink: Missing key (keys=40, expected=100) [ 426.030262][T17959] syzkaller0: entered promiscuous mode [ 426.060425][T17959] syzkaller0: entered allmulticast mode [ 426.135555][T17968] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3223'. [ 426.211138][T17973] xt_ipcomp: unknown flags 1D [ 426.250096][T17975] openvswitch: netlink: IP tunnel dst address not specified [ 426.617567][T17997] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3230'. [ 426.662634][T17997] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 426.717280][ T31] INFO: task syz.2.2134:13741 blocked for more than 143 seconds. [ 426.732929][ T31] Not tainted syzkaller #0 [ 426.746748][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 426.773676][ T31] task:syz.2.2134 state:D stack:24960 pid:13741 tgid:13740 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 426.819368][ T31] Call Trace: [ 426.829855][ T31] [ 426.843697][ T31] __schedule+0x1585/0x5340 [ 426.856729][ T31] ? __pfx___schedule+0x10/0x10 [ 426.873198][ T31] ? schedule+0x90/0x360 [ 426.882087][ T31] schedule+0x164/0x360 [ 426.890957][ T31] schedule_preempt_disabled+0x13/0x30 [ 426.897388][ T31] __mutex_lock+0x7fe/0x1300 [ 426.902245][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.910615][ T31] ? __mutex_lock+0x5ac/0x1300 [ 426.917646][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 426.925072][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 426.930313][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 426.937401][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 426.952651][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.962137][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 426.973322][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 426.979124][ T31] ? __asan_memcpy+0x40/0x70 [ 426.992748][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 426.999150][ T31] ? bpf_lsm_capable+0x9/0x20 [ 427.004513][ T31] ? security_capable+0x7e/0x2c0 [ 427.011188][ T31] genl_rcv_msg+0x61c/0x7a0 [ 427.022951][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.028067][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 427.036531][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 427.041801][ T31] netlink_rcv_skb+0x232/0x4b0 [ 427.048597][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.054221][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.059673][ T31] ? down_read+0x272/0x2e0 [ 427.064734][ T31] ? genl_rcv+0xd/0x40 [ 427.069026][ T31] genl_rcv+0x28/0x40 [ 427.073198][ T31] netlink_unicast+0x80f/0x9b0 [ 427.078184][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 427.083912][ T31] ? netlink_sendmsg+0x650/0xb40 [ 427.088972][ T31] ? skb_put+0x11b/0x210 [ 427.093609][ T31] netlink_sendmsg+0x813/0xb40 [ 427.098520][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.104104][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.111069][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.116876][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.122306][ T31] ____sys_sendmsg+0xa68/0xad0 [ 427.127516][ T31] ? futex_unqueue+0x211/0x240 [ 427.135486][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.140938][ T31] ? import_iovec+0x73/0xa0 [ 427.145932][ T31] ___sys_sendmsg+0x2a5/0x360 [ 427.150798][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.156224][ T31] ? futex_wait+0x29a/0x380 [ 427.160888][ T31] ? __fget_files+0x2a/0x420 [ 427.165691][ T31] ? __fget_files+0x3a0/0x420 [ 427.170529][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.176173][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.181878][ T31] ? rcu_is_watching+0x15/0xb0 [ 427.187075][ T31] do_syscall_64+0x14d/0xf80 [ 427.191828][ T31] ? trace_irq_disable+0x3b/0x150 [ 427.197086][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.203748][ T31] ? clear_bhb_loop+0x40/0x90 [ 427.208569][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.216025][ T31] RIP: 0033:0x7f038b39c799 [ 427.220555][ T31] RSP: 002b:00007f038c243028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.229098][ T31] RAX: ffffffffffffffda RBX: 00007f038b615fa0 RCX: 00007f038b39c799 [ 427.237776][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000007 [ 427.246791][ T31] RBP: 00007f038b432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 427.255310][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.263636][ T31] R13: 00007f038b616038 R14: 00007f038b615fa0 R15: 00007ffe848ed8c8 [ 427.274645][ T31] [ 427.278847][ T31] [ 427.278847][ T31] Showing all locks held in the system: [ 427.289908][ T31] 1 lock held by khungtaskd/31: [ 427.309375][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 427.346434][ T31] 3 locks held by kworker/u8:5/106: [ 427.351751][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 427.366587][ T31] #1: ffffc900026e7c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 427.380076][ T31] #2: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 427.391553][ T31] 4 locks held by klogd/5180: [ 427.396647][ T31] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 427.407500][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 427.417488][ T31] #2: ffff8880355b2890 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x66/0x1390 [ 427.426915][ T31] #3: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 427.437491][ T31] 2 locks held by getty/5577: [ 427.442190][ T31] #0: ffff8880368b90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 427.452114][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 427.463304][ T31] 4 locks held by kworker/u8:17/10558: [ 427.468789][ T31] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 427.478908][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 427.488065][ T31] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 427.497544][ T31] #3: ffffffff9a490648 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 427.507998][ T31] 2 locks held by syz.4.1994/13284: [ 427.514236][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 427.524254][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 427.534651][ T31] 2 locks held by syz.2.2134/13741: [ 427.539942][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 427.548537][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 427.559049][ T31] 1 lock held by udevd/14310: [ 427.563856][ T31] #0: ffff888026317358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 427.573894][ T31] [ 427.576243][ T31] ============================================= [ 427.576243][ T31] [ 427.585811][ T31] NMI backtrace for cpu 1 [ 427.585824][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 427.585838][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.585845][ T31] Call Trace: [ 427.585851][ T31] [ 427.585856][ T31] dump_stack_lvl+0xe8/0x150 [ 427.585877][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 427.585892][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 427.585910][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 427.585926][ T31] sys_info+0x135/0x170 [ 427.585938][ T31] watchdog+0xfd9/0x1030 [ 427.585958][ T31] ? watchdog+0x21a/0x1030 [ 427.585979][ T31] kthread+0x388/0x470 [ 427.585991][ T31] ? __pfx_watchdog+0x10/0x10 [ 427.586006][ T31] ? __pfx_kthread+0x10/0x10 [ 427.586018][ T31] ret_from_fork+0x51e/0xb90 [ 427.586035][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 427.586049][ T31] ? __switch_to+0xc7d/0x1450 [ 427.586064][ T31] ? __pfx_kthread+0x10/0x10 [ 427.586079][ T31] ret_from_fork_asm+0x1a/0x30 [ 427.586122][ T31] [ 427.586130][ T31] Sending NMI from CPU 1 to CPUs 0: [ 427.702389][ C0] NMI backtrace for cpu 0 [ 427.702410][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 427.702428][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.702438][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 427.702468][ C0] Code: 5e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 fd 1b 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 427.702482][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 427.702497][ C0] RAX: 0000000000171923 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 427.702517][ C0] RDX: 0000000000000001 RSI: ffffffff8def2f90 RDI: ffffffff8c27aa00 [ 427.702528][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 427.702540][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901186b0 [ 427.702551][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 427.702562][ C0] FS: 0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 427.702575][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.702586][ C0] CR2: 00007ffed636af52 CR3: 0000000033610000 CR4: 00000000003526f0 [ 427.702602][ C0] Call Trace: [ 427.702610][ C0] [ 427.702616][ C0] default_idle+0x9/0x20 [ 427.702633][ C0] default_idle_call+0x72/0xb0 [ 427.702651][ C0] do_idle+0x1bd/0x500 [ 427.702672][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 427.702697][ C0] ? __pfx_do_idle+0x10/0x10 [ 427.702722][ C0] cpu_startup_entry+0x43/0x60 [ 427.702743][ C0] rest_init+0x2de/0x300 [ 427.702762][ C0] start_kernel+0x385/0x3d0 [ 427.702787][ C0] x86_64_start_reservations+0x24/0x30 [ 427.702807][ C0] x86_64_start_kernel+0x143/0x1c0 [ 427.702825][ C0] common_startup_64+0x13e/0x147 [ 427.702850][ C0] [ 427.703693][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 427.703710][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 427.703731][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.703743][ T31] Call Trace: [ 427.703751][ T31] [ 427.703759][ T31] vpanic+0x56c/0xa60 [ 427.703788][ T31] ? __pfx___schedule+0x10/0x10 [ 427.703815][ T31] ? __pfx_vpanic+0x10/0x10 [ 427.703848][ T31] panic+0xc5/0xd0 [ 427.703872][ T31] ? __pfx_panic+0x10/0x10 [ 427.703898][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 427.703924][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 427.703952][ T31] watchdog+0x1023/0x1030 [ 427.703984][ T31] ? watchdog+0x21a/0x1030 [ 427.704018][ T31] kthread+0x388/0x470 [ 427.704037][ T31] ? __pfx_watchdog+0x10/0x10 [ 427.704061][ T31] ? __pfx_kthread+0x10/0x10 [ 427.704081][ T31] ret_from_fork+0x51e/0xb90 [ 427.704109][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 427.704132][ T31] ? __switch_to+0xc7d/0x1450 [ 427.704156][ T31] ? __pfx_kthread+0x10/0x10 [ 427.704175][ T31] ret_from_fork_asm+0x1a/0x30 [ 427.704216][ T31] [ 427.999679][ T31] Kernel Offset: disabled [ 428.003998][ T31] Rebooting in 86400 seconds..