last executing test programs: 47.698721679s ago: executing program 4 (id=2929): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006b0000000500000000000001"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006b0000000500000000000001"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000280)=0x14) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 46.789331307s ago: executing program 4 (id=2934): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x200, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 46.119407012s ago: executing program 4 (id=2938): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x100}, 0x8080) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)=0x38) r5 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f00000008c0), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="d76e", 0x1}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x17c, 0x17, 0x1, 0x70bd25, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@remote, {@in=@remote, @in6=@private0}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@iptfs_dont_frag={0x4}, @tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@mcast2}]}, @mark={0xc, 0x15, {0x0, 0x37}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x48841}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x20}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x8}, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r7, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r7, 0x0, r1, 0x0, 0xfea8, 0xa) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000100), &(0x7f00000001c0)=0x4) 44.903133663s ago: executing program 4 (id=2942): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@allocspi={0x120, 0x16, 0x1, 0x70bd2a, 0x0, {{{@in6=@remote, @in6=@mcast2, 0xe21, 0x0, 0x4e23, 0x0, 0x0, 0xa0, 0x0, 0x1d}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {0x10000, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfff, 0xffffffffffdffffb}, {0x0, 0x4}, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x1032}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@mcast1, 0xa, 0x9}}]}, 0x120}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000400)=0x3, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@multicast, @random="e278c8b9b5d9", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x20, 0xfffd, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty=0xe0000001}, {0x8000, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x100, @void}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40002040}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x43}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffff7, 0x40}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 43.562180225s ago: executing program 4 (id=2945): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) write(r1, &(0x7f0000000000)="9cdf2db013dd11ee1e628deb0c9d85db82490426815be91632442a7a64a5927867fc069e6ec86e0fbd16e15f09f8519d0e86f850d76ae3f7399dcb10dea754e6f384cf3d2a300a8f9226b2d7fd2cc01d2c5743aaabad197f8c3cda5e3209382dcf2d2c6da684bd50eda623eb64e09d38cdcc88f90368fa", 0x77) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000008c0)={0x8, 0x6, 0x2, 0x8, 0x4, 0x1, 0x9, 0xd, 0x0}, &(0x7f0000000900)=0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000940)={r6, 0xffff}, 0x8) writev(r4, &(0x7f00000015c0)=[{&(0x7f00000000c0)="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", 0x76b}, {0x0, 0x3f}, {&(0x7f00000014c0)="7c777bed69c439e3bdbdc41bec6e33ffdd0000000000006f482e541eef5985cad306f12c266f5673283d0b084ba05a4f2643b6ed1e546eda3081cc", 0x9d}, {&(0x7f0000001540)="107674a2b78942565c3166f523eea9e05974acb71d94fd928ee008b1a0f28cbd91cb38cccd83c735ce4ffaaf54a0e9f9bead9a98faa3bcc29fdfc4c68239a45474a54ce5", 0x44}], 0x4) accept4$bt_l2cap(r4, &(0x7f0000000980)={0x1f, 0x0, @fixed}, &(0x7f00000009c0)=0xe, 0x80000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x3c}}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) (async) write(r1, &(0x7f0000000000)="9cdf2db013dd11ee1e628deb0c9d85db82490426815be91632442a7a64a5927867fc069e6ec86e0fbd16e15f09f8519d0e86f850d76ae3f7399dcb10dea754e6f384cf3d2a300a8f9226b2d7fd2cc01d2c5743aaabad197f8c3cda5e3209382dcf2d2c6da684bd50eda623eb64e09d38cdcc88f90368fa", 0x77) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000008c0)={0x8, 0x6, 0x2, 0x8, 0x4, 0x1, 0x9, 0xd}, &(0x7f0000000900)=0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000940)={r6, 0xffff}, 0x8) (async) writev(r4, &(0x7f00000015c0)=[{&(0x7f00000000c0)="e219d541f92d27c359fef03cc62f166a9c6d51f1a61d7dad8cd62678c16c965eccc0031ba0dd8006303bdaf3eb2a1c38db004f61005b1cefc125a66dfb25ea38fbcd9ebd54df2a49ac3716c01dc8dc1e3e454cf1058456330c22b0bb484be1763746a5a1fdbde049e3a999d8a4524a9b126b611a823c9a6c27310afc7d2545e325707a6b1f8ab623e90b299efabc3efb32b9db8e3a717052881ca248dd27bac7fa8a54bb24f3cf1ddaf906792382f5ccbb9db0ef06a3adcc6b9f47184f74c12d9410b827220a9e65d7319fdf03575a56fd0694d57396a0636137532bb840947208002a763cb163ebbc882d31558e4dc5fb264967fe6e4f3b0a7efefa7bc6bcc4d6b2024c517bcb269199df6c925f85cc4d2b6e0883a425025b2e36986fdfc3c17d4f2f0adf74fb04f0afd6d1e6790278c6aad179fd3c52948ebf54ac3324357a79cfde542c52b0e7352f2dc965a2a07323fcdace6b83250bcaaf6c2297f194720a0c8362c9d799e4388d66a9a75fffec8fa88905184a5bc9a0cdfa12108b50ae74aa73ac073cd3ab76726c12099d413de7a84a6ea330058e76f304b52592c83520fbfeda1e6771a639c682c54c18f19b51840715ad3179f54c4ed25b17523b189c2fb149993a58ca9d38a699d5a9961a50494a0ef5b166d7109d2610da58a16350f03c9723ee6a9cb838e19d56524df047e422863c255124cdcdf2d4c984a810934cde76731b3f5b0366aa1ca67433d37ba89cd262eeed6bfbe0e240b0684711fb0b8a2ab895a9bc657df6541a83e4dc7d056fde1970d2445530ff417c1e7a990447c4336fa7b40ff07a39a2b56580c18407cf7265d6d489c519f7a227515a838df93dd3fc93467f09bbeb3351ad5b31e009fe2a7f428525ba5f0528153dbdcbad92c329e399518c047ac0e63d2cc32bafc30b7308242b95d01ce06738f4d53d0b85669e4ecd7ab2c58cb4217e02b0077b6dec045e759a7dc8ea82cb102d8e29e1f72605d38e7a5d9ee52676ae62ee4e83fe49338534a77ffca83424be1b8cbb8acab56a99acd54fe2393b20cd1953d41d2b7f77089341f2b95a81bfc5111a487b9c9f477a0b422c1dd4461556bf5163ad443be41921e7aafb4b7efa9067a1c8e333d0bedd0053c49c9bc0e5980bbe44188fe0fdc059f80bf3b8a8af95aff5c964a77cab907d5c8fcc826255d0c9e476bf4eafc2a2e1e2be8eef75b569722a5673875320ee30fd6623a4858901ad1ea8affb02c1782195a1ad40535b12156fd9800f65dd9e7b4775d59130eba217b584767e0bc166352ee04b5826f40b72a73cfb8e1838c6b80b61c4fee64509d967f939e554d12274d9446132af4c131274bb13fecfb6dbf859d20a2f93292b0f1a1ed16afd3e502f571a2a99f83702fe1163f8f6aa515459e01ef268ba3ec1ff597364d539589a9e3a4c43e6ef61b3954f74cf1b059ddf793a7ab83c1fcdd7b6ad6ccc83b24c78f4018e7af02f5e6892d7ee925f8dd51f72ec85e3a1e454a32681f1122e42c57043d76462c3ac9b3e3a6f0e34552704ec2bf6b043d555ff01e29f3dad872eb9d0e1a12a5dbe562bda78d977c29ec523dee21ae525390b1b299d45a5ff105ab60fdc9cf84705e436f149bf19b43926bb5621ddfb1fa3946edff7f1ecdff0ee7f4e71bf9ca6d5d2ac0a1cb1bacb3ab27b691b451f5a85fbdc598b332b44ca007d0e9a42d07bbca10e97645cf5f377b9506469f3e3ff4d6500fa6f44551612284ff9601e14321058a867e9dbc8b09594e0d8a1bb5c95eb7f3564c52ac126036ab3759ceeb13bd2d0f232963d64f9ca748726145000d9f8086d02643b0730fb66e08e63f28885dbf351a074a166ddc056e05becdc931209c7f1e92d17c5a26f30e10cbbc798db714693b99e9de371b5920e8c3ab3cd2f972d1db00bc5941b111c2b1bd94dcea9c5120ebffea3d3adeb2bdc87bcfe82de44c58d1531a3339b82cb6529d8cfcf37b663a1399308eb7d42b08dd7a99437e6154e2dd0b3c7522a1dd4c056945c9c7ffcab008b1e082aa275ee9370087bfd55394bdad40ecf3b654f83e1a7b397ebefad0c0166740145a202b50d0bf0f5383171fa0ba02352a978166949c5657cefc7cb40d6f3a562fcfac01d6d5146bc57fb16068206b4bcdf8ba80b02254f3e3c306c80fdb3af2118d9cc9990764a4e9c96fb0059b23288441c80d81fb0c9b273fb5c6c4c0232f86532401684b2f86031d8b4320e7c386dd869dcd1b9d851972d036ce9e5e452e75687a2c9a345e2f4203379ac92d6a08dff960e0506dea73f51aca9d1a7d6ec2a936bd2be88f79e8c99479dc6a188af2e023c3fc3196fe649d3a251314a70b615f8d7c204bc78571b953f7b8ec703fc40a32ab8b1bfc22cd09824110bff71a609c7540dbd126eddc2156c619ed65d497534041b4f66550ecd9edb375431ff0e19eb65029528e1b70d4dfacb4a04496c593737ec7acfc14516b18e534ff52a44b8c1886f085628b553fb3e388add7cc8770e061771d7388cf937c0165c26dd8cb0983916db3746ef4fbc4bcbaf51796f5130af3e288e83ee039e0100eee358ff97893e8cc52d35c3f2016c5c7a807e138aa0cc1c1bde35478d41097a6f8ea367b8a33d2e0792e0dcbc4ba39f5a9a21b622da881ee02d9d10567c4748caac6ccea9fb000000000000000000000051f6392d01a060979a1f6b424ace53177ad68718f78ed1412256c1964b3b9f7b54e7d39bdc161f799eebb60d370a41e031e139f3dda4bc358b80475c3574c493450692851a802d29d27a2b45f71faadcffb0f16b0591b8bb1e27579c43e12181221749162c3b8b0c6b", 0x76b}, {0x0, 0x3f}, {&(0x7f00000014c0)="7c777bed69c439e3bdbdc41bec6e33ffdd0000000000006f482e541eef5985cad306f12c266f5673283d0b084ba05a4f2643b6ed1e546eda3081cc", 0x9d}, {&(0x7f0000001540)="107674a2b78942565c3166f523eea9e05974acb71d94fd928ee008b1a0f28cbd91cb38cccd83c735ce4ffaaf54a0e9f9bead9a98faa3bcc29fdfc4c68239a45474a54ce5", 0x44}], 0x4) (async) accept4$bt_l2cap(r4, &(0x7f0000000980)={0x1f, 0x0, @fixed}, &(0x7f00000009c0)=0xe, 0x80000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x3c}}, 0x20008000) (async) 41.923403341s ago: executing program 4 (id=2952): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e00cbd73001a000000000000a9a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x200}, 0x80, 0x9, 0x4, 0x1, 0x16, 'syz1\x00', "9f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b33", "5a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a", [{0x864b, 0x6, {0x2, 0x3ff}}, {0x3, 0x3, {0x2, 0x3}}, {0x2, 0x28, {0x3, 0x3}}, {0x7, 0xfff8, {0x1, 0x1}}, {0x9d40, 0x2, {0x1, 0x8}}, {0xca, 0xc4f2, {0x3, 0xe02f}}, {0xfffa, 0x17, {0x3, 0x80}}, {0x9, 0x8001, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0xfffffffd}}, {0x200, 0x3, {0x0, 0x4}}, {0x7, 0x80, {0x3, 0x8}}, {0xb1, 0x0, {0x1, 0x5}}, {0x1, 0x2dc, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xb}}, {0x9, 0x96}, {0x2, 0x2, {0x1, 0x9}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x5, {0x1, 0x67}}, {0xffd6, 0x1d97, {0x3}}, {0x8, 0xdb4d, {0x2, 0xffffffff}}, {0x3, 0x7fff, {0x0, 0x2}}, {0x401, 0xc, {0x3, 0x10001}}, {0x21, 0x9, {0x2, 0x2}}, {0x3, 0x6, {0x3, 0x5}}, {0x2, 0x200, {0x3, 0x5}}, {0x7, 0x1, {0x2, 0xa6}}, {0x3, 0x101, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0xffffffff}}, {0x6, 0x81, {0x0, 0x6}}, {0xd, 0xc3e, {0x2, 0x1}}, {0x0, 0x84d, {0x1, 0x1}}, {0x5, 0x65, {0x2, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x1}}, {0x1, 0x40, {0x0, 0x1}}, {0xfed9, 0x6, {0x3, 0x1}}, {0x40, 0x6, {0x1, 0xff800000}}, {0x370d, 0x800, {0x1, 0x4}}, {0x101, 0x8, {0x3, 0x10001}}, {0x5, 0x3, {0x2}}, {0x401, 0x5, {0x3, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async, rerun: 64) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000480)={r0, &(0x7f00000000c0)='$[\x00', 0x404800, &(0x7f00000003c0)={@align=0x120, {0x4, 0xff80, 0x4000000, 0xffffffffffffffe4}}, 0x1, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0xe73}) (rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000004c0)={'wg2\x00'}) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x1, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, 0x88}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000001c00000000000000bc26000000000000bf67000000000000070300000fff07006702000020000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) 37.081577029s ago: executing program 3 (id=2969): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @multicast1}}}}}}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, 0x0, 0xfffffffffffffe40, 0xc005, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r3, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x144, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x118, 0x2, [@TCA_U32_SEL={0x114, 0x5, {0xd, 0x8, 0x10, 0x4e, 0x6, 0x5, 0x7, 0x1, [{0x8000, 0xd4cb, 0xc, 0x2}, {0xd617, 0x1, 0x3, 0x8}, {0x7, 0x104, 0x5, 0x2b1}, {0xb, 0x7, 0x7, 0x101}, {0xb944, 0xa0, 0x2d, 0x9447}, {0x7ff, 0x5c, 0xff, 0x474}, {0x7, 0x1, 0x0, 0x1}, {0x5, 0x5, 0x5, 0x4}, {0xbe58, 0x7, 0x46, 0x3}, {0x5, 0x4, 0x5, 0x7}, {0x4, 0x8587, 0x3, 0x7ffc}, {0x2, 0x1, 0x0, 0x9}, {0xf0000001, 0x8, 0x5, 0x2}, {0x2, 0x2, 0x90de, 0x7}, {0x9, 0x4, 0x9, 0x9}, {0x4000, 0x1, 0x9, 0x9b1}]}}]}}]}, 0x144}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r9}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xd, &(0x7f00000006c0)=@raw=[@call={0x85, 0x0, 0x0, 0xc8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], &(0x7f0000000740)='syzkaller\x00', 0xe4e, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x6, 0xfffffc01, 0x7fffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000800)=[{0x0, 0x4, 0x4, 0x67fb614b2b6676a4}, {0x2, 0x3, 0xd, 0x3}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x17, 0x3f, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x9b, &(0x7f00000005c0)=""/155, 0x41000, 0x0, '\x00', r8, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, r10, r12, 0x57, 0x0, 0x0, 0x10, 0x3}, 0x94) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r14, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r14, 0x1d, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r14, 0xffffffffffffffff, 0x24, 0x2010, 0x0, @value=r3, @void, @void, @void, r15}, 0x20) 36.845139677s ago: executing program 2 (id=2971): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001200)={0x6, {{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x1, 0x7, [{{0xa, 0x4e20, 0x2, @private1, 0x7}}, {{0xa, 0x4e20, 0x9, @empty, 0x5}}, {{0xa, 0x4e24, 0xffffffff, @private0, 0x7fffffff}}, {{0xa, 0x4e24, 0x1, @local, 0x81}}, {{0xa, 0x4e24, 0x9, @private1, 0x9}}, {{0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}}, {{0xa, 0x4e22, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}]}, 0x410) (async) r1 = socket(0x18, 0x3, 0x3) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000680)={{0x2f, @multicast2, 0x4e24, 0x0, 'none\x00', 0x1c, 0x6, 0x70}, {@local, 0x4e24, 0x3, 0x100, 0xfffffffd, 0x8}}, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000018c0)={&(0x7f0000001640)="74723c1215d8e34eebe9fd35508e34fae154bf6f9df96dc3e36f098478ea88768ac5e13a86a1af7eb93e8a04329271152bced78bb78b38febfc828d42027ff3fb217cf49d8727656b7803bab364d2b75b39aa55b6a54e70ed6a8ba0bf22a0e4b3f2972cf50fac833e889edf16a5da541f48ac858db6f6ab6674535b206b7f6e4b3200b1c6436d9331cc86f4209ed4377ee1b10", &(0x7f0000001700)=""/118, &(0x7f0000001780)="728aca54390a5c9dbb07d79d5a093db3ed1dbda6719c7a8611c7a8ae3afa76d23cc813bc2e1e25fb", &(0x7f00000017c0)="6006a44d57d8e4f5b9c4a404401aa77a3bf43c84e973fa44a7007db4b8a5cb965acce912455b8896e3c58b0c0ee6ebf8a7b600a127d9343fb8cccae29633b9256bc5155138b39b31aa39b5d998faf4a22ba8c64c414ec965388bf1185cd867c9aac62669919e98083185acaa6b09080426f5661fc48c49b6e63bd3428ccb481f46cfb17da003f500efcdce09af463fbf293ae2fa00cedbf8997349d10b18ce436cd26b8e1271f05126e5011e712f916b6aeb88d3245bba0fd85976af46d201123bb877ed95", 0x9, r4, 0x4}, 0x38) (async) r6 = socket(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000107000000000000000001"], 0x114}], 0x1}, 0x0) (async) getsockopt$sock_linger(r6, 0x1, 0x4b, 0x0, &(0x7f0000000240)) recvmsg$can_bcm(r6, &(0x7f0000000d80)={&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000580)=""/148, 0x94}, {&(0x7f00000008c0)=""/105, 0x69}, {&(0x7f0000000940)=""/155, 0x9b}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/124, 0x7c}, {&(0x7f0000000b00)=""/82, 0x52}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/33, 0x21}], 0x9, &(0x7f0000000d00)=""/119, 0x77}, 0x2001) (async) write$cgroup_int(r5, &(0x7f0000000040), 0x12) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={&(0x7f00000001c0)="2f377576d39c9cbf6f95f3577d48a43400241da33a646d07fc94e3d45dacba602fe80003b3cb2f6206d6d18420efb9000a66c14c1a844b104d46ee8b7c97ed2ca943d9bb1008dc1c526a5fae8ef8f2634f00b41ce541d66f026219a145776dc16298535f604daec535d694c0707f08fdc40b6b165bc282bffe426b64d6124fe9d7233657529e6c2f88809b8f0356315de5a4d1faf561cf52a60d825516b5a0fb4f65b0cca13c81f1762f3e06139f426ce9e4b5d53ae4b32564f430af93d50062119b3d9c220e492a855bc383a4b66d5870e64ccea99f5bac46d931414939efff827e5639dbf6cea799841e7b49979e4907", &(0x7f00000007c0)=""/200, &(0x7f0000000700)="ffa5bd7364b4fb6b7e9781205ce4131860ff8d88ad4255b910b48b0fc2bfc745478d5d0b8c9b2f3cc1f7aeaccb6b5f6a43f0e82f2a1e1d5071d70de58af6bc225f686f642332509ebaa92e09ee3a62af59a666daf6dec56b17201c06b89dc364802b88dd3411416353cd50611c2446f0c0adc840faa1854ed2eb2fb04c33c02ce3617d4be3060f30b5deb7c55097b0ebba131ccc565b0c405ffc66b4773954bbef6148ae43c1d8f98e875aec9234d9a076463373cfaf85f0b5", &(0x7f0000000500)="946022ec67ae358966e08c2927009a8ec4d5865fa3cf5331b893656bc4b668ca81701104bbb1c59c273f4e4ac588aa09d7c006399bcbcea2d701f21159c6ac30fedf36c6d877d1edaeb7c533", 0x5, r5}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r4, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000dc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f0000000e80)=[{}], 0x8, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) (async) getsockname$packet(r5, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001100)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000001140)={0x88, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x4c084}, 0x40090) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r10) 36.687708406s ago: executing program 0 (id=2972): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0x3b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x216}, [@jmp={0x5, 0x1, 0x1, 0x2, 0x5, 0x18}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 36.01736438s ago: executing program 0 (id=2973): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x5, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x61, 0x61, 0x5f, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000140)=""/14, 0x2d, 0xe, 0x1, 0x7, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x20) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)={0x40, r8, 0x1, 0x70bd28, 0x1, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xaf}, @device_a, @device_b, @random="b0a1c5701950", {0x4, 0x9}}, 0x0, 0x1, 0xb, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000080)="e19dabcf", 0x4, 0x20000040, 0x0, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000400)=0x83) splice(r5, 0x0, r4, 0x0, 0xfea5, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, 0x6e6bb7}, [@migrate={0x50, 0x11, [{@in6=@mcast1, @in=@private=0xa010100, @in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in6=@private2, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc060}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r11, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xffffffff}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) 35.522855704s ago: executing program 3 (id=2975): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x804) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=r4, @ANYRESHEX], 0x48}}, 0x0) 35.385859911s ago: executing program 2 (id=2976): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) 34.99158922s ago: executing program 3 (id=2978): syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r1) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf251b00000008001500020000000400190008000100", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000008010100000000000000000500000706000240886300000400048009000100738e3430faffffff050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x40080) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r6 = socket$inet6(0xa, 0x3, 0x7) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x6a, 0xfffff034}, {0x6, 0x0, 0x0, 0xffff}]}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f00000001c0)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x40, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2c, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x8106, @void}, "134a318536459f4c076600ffeffff600000000111740a673d82a5c006694d13f"}}}}}}}, 0x52) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4fca7822b9a1db6c67867c5708405fa823886fb19a21fb17e4d12757f6ab568ba9f3ed745727ee27dc623901048a930a7dc5f681d2f6d7900ae6abb35c8188af992c8e3c7e98275ebac8b8e57f", @ANYRES64=r0, @ANYRESOCT=r3, @ANYRESDEC=r4, @ANYRES8=r5], 0x100}, 0x1, 0x0, 0x0, 0x4008004}, 0x2800c010) r10 = socket$key(0xf, 0x3, 0x2) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x405, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x800) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r10, 0x8b27, &(0x7f0000000040)) 34.990917316s ago: executing program 2 (id=2979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="180000001400011100000000000000000a00000018cb80d777c36744ebb8a3da86e6b219a40af6c0492036838296ca0c5b6db61bdc8347", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="180000001400011100000000000000000a00000018cb80d777c36744ebb8a3da86e6b219a40af6c0492036838296ca0c5b6db61bdc8347", @ANYRES32=0x0], 0x18}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000540)=0x12, 0x80000) (async) r3 = accept4$x25(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000540)=0x12, 0x80000) connect$x25(r3, &(0x7f0000000580), 0x12) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000300), &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80001, 0x0) (async) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000040)={0x5, {{0xa, 0x4e21, 0x4042, @mcast1, 0x6}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000040)={0x5, {{0xa, 0x4e21, 0x4042, @mcast1, 0x6}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r1}, 0x20) socketpair(0xa, 0x0, 0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x68, "0ac2b3e7a138033f524afb15bf83ebaea037ac6f3cc544180c9dcf7660f38fcc40d32d66bd4067bad9c974548e6a6aa9bca1ebd41c4d831fbdd4c7743f5e3a7a3fbac94636e327224aca58551c9d6e929fefe050aff6ca6ab930d2208f2f0e860a0ec41c02aecc2f"}, &(0x7f0000000400)=0x70) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r8, 0x5b}, &(0x7f0000000480)=0x8) (async) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r8, 0x5b}, &(0x7f0000000480)=0x8) sendto(r1, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff3}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x2b}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 34.399641511s ago: executing program 0 (id=2981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x40c4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x10) 33.60890187s ago: executing program 2 (id=2982): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4c23, 0xffffff7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffefffff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) read(r0, &(0x7f0000000100)=""/153, 0x99) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) 33.487116401s ago: executing program 0 (id=2983): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000200"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@gettaction={0xc0, 0x32, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x3fff, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40e1}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24000040}, 0x40051) 33.263371551s ago: executing program 1 (id=2984): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000040)=0xfff7) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x1c, r2, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e21, 0x4, @empty, 0x409}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x82}, 0x9c) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000100)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r8 = socket(0x29, 0x3, 0x100003) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r8, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x20, 0x0) recvmsg$can_bcm(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000002c0)={r7, 0x7}, 0x8) 33.261359621s ago: executing program 3 (id=2985): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmmsg$inet6(r2, &(0x7f00000000c0), 0x0, 0x800) recvfrom(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000080)=0x0) bind$nfc_llcp(r3, &(0x7f0000000280)={0x27, r6, 0x1, 0x5, 0x3, 0x7, "87560a271d4d68aeaf18b1ad5705f9c3ca6896eb734378e57e92bb90a307e0dca6a1c2a45b984359038db57e888c21ad3438d2cb2479ec4b372708c115cc16", 0x21}, 0x60) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'geneve1\x00', &(0x7f0000000300)=@ethtool_cmd={0x3e, 0x7, 0x3, 0x8000, 0xe, 0x7, 0xb4, 0x9, 0x5, 0xe, 0x8, 0x4, 0x6, 0x0, 0xf3, 0xfffffa66, [0x5, 0x2]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000c80)={0x0, 0x0, "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", "220b77e1d1c4d9648a9dee23c56099b8884b3fc4510f110d3dfe3c2ab069b0f3ad29c52494441fd0935e0d790202b38541d107a46ee8fe352125f76db9e7a3c1721332dca0cb68513819fb86cc5143b471557033a40be09f05d68ce4575ecae2a7a139dee8019b77fb76203fae9e677b20a049cde0e7b5acdafd1aa4ac0366c628bd976705b5a20a8a60d59df51aedeecd30f820c90ebc291abe5b724aa1b711e4dc5bbe0182ca8f30b04b040f9856dce8859bbc150b52d7ef1df0afdb62a6e0cc6f1f82228f4e6c3083f1874fb2bd28d9542839af1072cf1ff0f2ec61ce6d336cd815b9b0580903e8364527dc184179658a66779a8b77f76be0032e9cc5bf7d8525f02f3871f228f929909059ea0215a43497447c5522f7380470f1ae9901f7bcf5c1408a3717b5bfeeb351f65413b4eaa4cb11cbfc059ce554a9e115301cca5c9234b918a77a9ec05c393a2421245e31885c37c9d9658fcd8e12db98f887d891905e46ea03913a5ee8f8d0510d121a51cd501f33c2952a1deb2b55f7d440dc54a271825fce8c297a6ac883e2028cb979cfec47df02808aa3d0bf132897569a1ced389500b4beca87e7b79ffbb01136750733ce184fdb2d61aa859f60ca41712115e9a83e379c9bd3855a7f4fbcbcfec5e672b201cfa53a5a413c26bcb6f859103b0be5919264c5e6f851f6a456267bcc12a668e4e913afc85a186f540ccc11bc84e6771510e15b63f82f3b97150cf0460d2a8a7dbd442597585635b632305e7208b810a6e56c4c2884637460bf69c965e23790a7f4359026489bb0aa1e50276dbb49ac7b081223a569e3b3131738e48679c2fe5f148515dcb3adb363c600476aa8692dfba33df02dbbb1d73c32b01024d054af55fb10cf399a12a8390201bf4317f2e464539228892b642e58aa5a81ae5c46df6a5e03ad4f71d7826b85c4feccabab8c124854b8a49f578b646c4cc8ef8c20dca0e053c3a014cb0efec592b9d8aee61bd0b3c7d7a482ea343dc74662126be3c98ff3e37799ee2a0783b683e5bc5c4e7767a3da309b30de3140aaa4c58a095bd5f34ebc7f83416a9c985c670b5728d1a8ebaf794460145f2807aae8b4975741fc8268e7d07953a70a9d3ef6d86066904d1acc2974a889dfa5e8735a0ab39a42672018b58c3c1a71c443cdf2d5a17b9be8e8b0f71ec76c6f78c8ec98b5b2d333e338f3ff7e04a8987f78d295be0a76a8fa70523c7f3e6d43069e66dba57c01ede6821e9a76f49dac60713d2a6d05e511dfe66db1d0bdecec09fc4db7ec630e28bee069f0787c330c7a5e7575b613e2155e87e5fcc40989acfba38fe4f58629e3756678d82147b67aef83ec45dd594dd20bdf321bb1ac99e41c1c10dfe38728ce1ade65dee4c2cfd8e1097da49b0483ee42971c1c5de162720d0a0f6ffcb4a8a32e7ae82e7d015a4307c89744c0b3c29e5b8ab21843663be1654ca992dd128bf7e9f7c6dcdbefe6b3bff2481c0ac980007f331e03bb56d3d3f7c75a3cbbbfd218921dbf0684b6e4af9c5be1cd6b45bf80d3fa85de9c848e11161b6a49bfe848e480d2fc60c078dfdbc38494fe543a984a48f31a4f627634e3309585c3dbcc340126b8b477d3d794a3f939cfc44eae351194ccef6ac3fb58120c1fdb078f4f3d76b9d41cfed818599c96274d7424a8adbba4c6f38d95e160e620929759fb2fd5e175730dfad977b73d10c2a4d74e9ef056de18a46805dcf98eb72234fc69adaefd2807f002544cbf421e1f1dd023fa790c326e718e681027fe308c63fe52f74b6359a19bc96ccfb8e4dd92ce0e3ca86034b676cea0d21c58e5a7731460344dd49e3f3cde75b957314ae02bdf626a8cf9a6c79cbf9e805dd91bf18738aa2e76ad49907216959daa80db56ad4a3ff8180e4a8036f7f0a2b49515ef4600a75774a0947421b60461deee2aa9728375a1e7b9f0cf2f4b40c1d5d707e26e6d4895ac7b94cdb0dbeac8b61e3e816e8b5d23415c811bf2e229205cb7398b6d93d978e8f09c32ac827ba7de6c1c56da12b1a80beb265f6acc3ac54488d26483c00326f7db90f497c671923d7ae05ff227566472d8d051c8af8c3946babedb769e49544f8cd6d8fdb31a5da38959fff44ca2024fbe8de395b8c1c04138c83e6bd60934312337ed9c5ee90b9c1da15da5011912350daaea3e9e5fd3f57bb4886d76c394658bd59b2e4eefe88897486994b9f2b98220df7e71579022523c4e66f10bc3e9925a14852d7aa4605036ba246e2bd4afb164efe1ac8f7476ff1c8ee5661d46f4a0bc3cc4686475f1fcf79cde878bc15a1a13fc1e263af96b9dbf5477520460882cdea3e8960b262fa78997fa2b8a781215acfbc7ebb497419c8a1506dcab471df55aee9edbf966df040c53956d3bff1f3769c496b88a1eff35ef8237c023d199f1ef6bf85bca8cb2a51f4c57f981153dbf4223840ee629e8c621aa76e4b503229973fe8906408363cde9b4f7ab3becf7896120a2c8687616b5b69678dbfbdcf13fc57862009490da19decff08cdffbb1e1edc7fee12af4cb6c823d34f5fffc49e816821df73877d78b328c762c44c56284bc6aed3f9754cce1174e6a9e91229f677f48e66e74acdce2945a6e83c12ebe629f8d82f6bce3b4884f6746876c7dcbfb15bd907c76fb442fe4f921b37459ef54d572b29209369149e29f10f3e7c00e2eb85238fd9cf3519de7a07f56b56fed81d2a63fa8348c8408c27a1e33d6b8eebf5f3c6dde815141c277e1c3501ba35f2b40da2496cb9b1a741afb9a95149373c0cbdde64dbdecfcee6099f4ba36c4b853e2be9b439c8b628aad02bac44116c1b9530fd460f9afe00605a3190242d9457f1b8ef16b2f60e01a0775218b85b3d5e82693cd24430f5482d10c708a8ca4e8dd6624e22e3a59d462eb4352b18f06f38c72e15fc453bc32454de2305b4b646e21b9684bcd8372be92490e0215769914ee5b9567a159f4f8563b1743b74093725ef563de9f2f34ed14abd3c6458cf560e19a8d29e0dfc77fd22aac0d48a17fb2d8a6fffb2edc4af1c0e36c67987609bf7a2970a10182f1bf29914b33c9e5a1422e0e37c4908dbf458eeb4d918a1a9e01479557d3ba4c95dcbac3e6e84907866a52af40e9fd53f7515e505d48e0970f441c670442890bbd981111f98326566ead87bcea032047288abc42d7ecf91bbef097f6ca55a669cb33ec21a82d443d542c6eb41bfb89f73a4b6a1b0b7fc4495fcf9f6eba69ead20f65ec6e9de25d8ba4ea3eacbd4b58434345440509cd945c2595d7485e80acbbedfff3af433cd4c6ccc536b0f7ef45ee3b8353f0c3c7e55f6dfde11f426e8b51e73fa74641b93d016d22750efe5dcf1770a9aeecb3f23f9332d338d65864722f0a4dcce49b5fa5403ed74da9986e53d4aa33020f5ea20c44ea67c95bc3f734a6b4d5234c5a99ac5dd98d7ce417af38564fd3d678fceac4ec8509c276f5a5383c69a1d9e85ad152b9d801a1d4174d8f9d011d2c210a6e55c7d3817f1040bd60f8982735587110bc3a87641a8f1a974cbf9d077bb121ec6be6659d66d9f5e7a01398c5715cc22ea1680840c33e36738933eed4f5663fdb04fd2b138baa21fa7cda39fcc34cde5c9a68a98b0f7a93503586ec8480e80933f7f0ff64b61b920a09453f31a6ddfac4035915797896e4a11c381d78acf569087deb878519458557e8f4ce4189f70ac50abea4ec187011ae9dec3102471d68cd3ff1d6554809db23a0df6cf27bba5d3e7ee47b0f395db8869ecc036d390f374ceeac34ca492e085cc11006f080e43fbaed71b30b2131a7917ba664461f324f700f4571c7e9114cb9092d4ea60eedbbb32a575ee4ff265594d56c2a7e4dadae9f5e4819b99b2ffef82d571cd347d82e520fd579ac277e0c6f9aaae9580ba2bf0987c5fa018d8b301c1a3d7fc799c6e4ebd20c2993ab9d9e85755f5926b1bfed4d483f6a50d51b12f1bf1f10a898dc4f89e38a677ec2cc941e4e742c984c2094bff4aaadc5f313bd1c5bf31ffe95796b2f8a659d8621a11fb25131cffb747ec9f3dfc149ac6f42eb8b0be86b09995423ae45d117f53935400e4f2340395d9576ce0e6a8e445ad2dafc80ad521d71e400c558e3dc150105553366e324b0f88587f29aa47a535897dd65418ccbf71c7c4c0b13ba726a7b411e4d4afc945ae144ac25195b6e952b639f32e262e60c8c61ec8c717d67e7d6e76e1bd079d7fc92c2e0fb475d2a97bb578ac7c3dfbaf762e90c54e09c1f6662339d51cdd78b1fe3a57a3b96fa3c4308eb7640154e7f0da5663b6b66605376e6a53b69726a10553f95b0a8d75816ec0aa142d6c2de00330f0b90400620400c25ed69a18fc13c3ccaa24aa550b60ce68e0389f417e69b62f0bd3051f97c0ec8540dab09dcf9fa9aafb766d616ef0204601689bfc6eaf7415836ac6a5ce8020deaa6b575befabc6070d93027ab70e5a3a05b30bde9891f03853bf21137b8f59dbfed230f836d31d2057a18f7b65848933094105e78a615ca8ef2498b4baf1df2e93c39f99d5f0478ed8584c9f79a408bb000990742193e1d52eb09b6e4be4887053d123d1f14652e29f42e2b7e48d2b0f0b10a0ffa3d6c52b7f0005edfc36c64f474dd2993c74cf4069a36fa01146769956a905f62d4c80c03236068ac4a065d75af7df1e779949f3ff4d64ab1d8273c87325e4597c0101f43fb48db00363c15135f351843ed5d4de0beabee8820dadb3b23e696f9ac948414f9f45a7aca6334659a72249f013fa605b0c7b817f37d9c538529c5475bc0946194a239e33f82aea1fe9cfe1e1f10a8004583f5aac638d828fc977594cea3553cbf6213b213efa86f357a7e3115216c241afbe6bbe47de8b17c0a7e03a36cc64c71aaa25d54de69345046618f48a1894957e5294d955c8d35d5c745e209699ecd1034ca9b0f8f79c1f10ee92a82529bb2c8b918217203a259df3993ea7131d6132aba870e5a5dd4b645e571f31fee64d83ee29b035916c5fbd1d91fb65fbf687152a549b5737fe2abb4b8db5cf62fa950b04879c31bdf32c115e26054ce8621002b8148c718bffd24f64d2fbe6ebca3e123f690382bcdf76c9e27f9f8fee4bf36ec138b8ba8873c0fd975b36e84cb782a8f348b54b70d6b1fdbdb87721f0ee40c401c2d186a6964428eef9b2f58b1ff29123d7991fa2c8d4fe4d45fdd1f5220b491868a16ead25dc5919e2636d10a6df78764b3cabef97dabf9299165cc78122a556bf462caacd1f65c86e678fd3d1c7db348c09160583e80be0f0d4b8789fac0f6c241124fa24733ea4b863f9e6ada78fd38df3b81b230d5f1aef7724a86d8d7a4daf1d0160fc2907cefbc011c4337512b2170df56ed8e68c6a35e1708e97c5722ca2e4b214b000235cb777fbbd8aceef61c9de3f5fe2f"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001c80)={{r7, 0x100000001, 0x80, 0x8, 0x3, 0x2, 0x4, 0x1, 0x0, 0x0, 0xfffffffa, 0x6, 0xf45, 0x7f, 0xfffffffffffffff7}, 0x18, [0x0, 0x0, 0x0]}) 32.850224892s ago: executing program 0 (id=2986): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000200)=@udp6, 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 32.641847363s ago: executing program 1 (id=2987): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000200)={&(0x7f0000000100)=[{&(0x7f0000000040)="adc4416614f42f7b6f4f6207e788e3e32007bd87349ce87923476e7dc1e245e22f1a9b71092c2a4fd8e855f37afbf17f862e75838017930da22789b10c46332051cf78f618d5599d3af887cfed154f59f9eb13b343edf65761a4ef61991d894987abb576a2b1b770778fb6fa5ea6d75f16fafb66b71f680275269f4a29bc11e75655", 0x82}], 0x1, 0x2, 0x0, 0x80000001, 0xb, 0x7, 0x7, 0xf}) 32.270942899s ago: executing program 2 (id=2988): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r4, &(0x7f0000002180)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000280)=0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x498b, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x3ff, 0x18}, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x1d, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x0, 0x3, 0x6, 0xd9d42dd262a43bd2, 0x2, 0x6, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xd, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000740)=[r3, r5, r6, r7], &(0x7f0000000780)=[{0x3, 0x5, 0xe, 0x1}, {0x2, 0x1, 0x4, 0x1}], 0x10, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r8 = socket$alg(0x26, 0x5, 0x0) close(0x3) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040), 0x4) 32.014801522s ago: executing program 1 (id=2989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0xa7, 0x6d8, 0x43, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x1, 0x8000, 0xe}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000420001000000000000000000030100000f0000003c00010000112233445566778899aabb86dd2c00001c00002bff07000000000000010253aa58fe6cbdf0357065ae44132403b1fd606412c32500006704000280040003"], 0x5c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x0, 0x4000010, r6, 0x58781000) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000003c0)={r9, 0x9, 0xf, 0x73f, 0x10001, 0x9a}, &(0x7f0000000400)=0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r12, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x50}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x11}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000240)={r10, 0x0, 0x0, 0x5, 0x6}, &(0x7f0000000280)=0x18) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000028180000", @ANYRES32=0x1, @ANYBLOB="0000000000000000130000000000ffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r15}, 0x8) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000018000109000000000000000002140000798db2a7db08ef90de130f67d36900c3c9e6f81f7d47fd2847f1ce1d449b624216005d8ed622431185cb9d1266334ec4eadb2c810579d67218b8444ef7187209004ef7db5e2bd29fb7c1c9c83c116f915cd01ce1c44de2cac151974ee7b46e7053b9d29bb853bbc9ce7a2beef0bc2829bdad6d5401c86b528993f2bf2c0441cefcedbc1f4014a7690fc6e5c1b63d942c7fa388daff9acb8d864b48906425af34384796"], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1a, 0x2d, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x1, 0x8, 0x9, 0x3, 0xffffffffffffffc0, 0x4}, @alu={0x0, 0x0, 0x3, 0x3, 0x4, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0xa, 0x2, 0x0, r16, 0x0, 0x0, 0x0, 0x73b}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x4, 0x0, 0xd, 0x8, 0x9, 0x6, 0x10}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0xf3, 0x0, 0x0, 0x40f00, 0x3b, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x0, 0xf, 0x2, 0x40}, 0x10, 0x0, r1, 0x6, 0x0, &(0x7f00000008c0)=[{0x3, 0x3, 0xc, 0x8}, {0x2, 0x5, 0x6, 0xb}, {0x3, 0x2, 0x10, 0x4}, {0x0, 0x2, 0x5, 0x4}, {0x1, 0x2, 0x0, 0x9}, {0x3, 0x4, 0x4, 0xb}], 0x10, 0x1}, 0x94) unshare(0x28000600) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r5) 31.667271155s ago: executing program 3 (id=2990): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc3, 0x0, 0xebb0ae970bcc6f0a, 0x58009}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x2d, 0x0, &(0x7f0000000040)) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)) 30.666840419s ago: executing program 2 (id=2991): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000040000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011"], 0x20}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r3}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000b40)={&(0x7f0000000880)="c2ae47fba79967a629ac8ab7219c19103101dfedc4ce1b994e6677616113e221192eb08f033b70a6050c0c16f4ba5a6c47edb3dae0445b273a276a03f4aa7ceab6d534447613cbf846a67147d6c2d7c6ce418fb37385a20bf23c3c2e72e010286d11127091ff39b36d03606f1b2844ad35f180435dabe9046df6a6c00bfcf2839a", &(0x7f0000000940)=""/3, &(0x7f0000000980)="9a925e5fae956a2dfea76703153c37962b800cffde740e540f6468f49f0e2f87910774cfa18f38e054a6e8deb41cc14218b8f7d610dec8fe668498d42d827938b44c16d4d25caf91b99f584cdce06354c0206d6c202fe3a5868429497b7dd5d2eda2044ca4ac3b948c3f19582450b33b1ac7bf52a9640d734ad49bbfdac78cb9d94a21b6c8bbb06640d9c4cbeb31b30a9158a68be127b9694432ab5e8b", &(0x7f0000000a40)="6aac8e0bf6fa0f1e5f3f0a40116ce23c1db6d017ecb0", 0x9174, r5}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001ffffffff00000000000000000ec1258205096bbfc4fe1f000000000a01020000050000000000010000010900010073797a3000000d0000000000160a01000000eaffffffffff000000000900010073797a30000000000900020073797a300000000004000380140000001000010000000023000000000000000a"], 0x78}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newtclass={0x24, 0x28, 0xff, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x5, 0xd}, {0xffff, 0xc}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x3f, &(0x7f0000000000)=0xeb, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r14, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 30.124800931s ago: executing program 0 (id=2992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r7 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0xde1a, @mcast1, 0x4}, @in6={0xa, 0x4e22, 0x8, @private0, 0xf}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x64) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000140)={@private0, 0x0}, &(0x7f0000000180)=0x14) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r9, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r9, &(0x7f0000000280)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x200004}, 0x1}}, 0x80, 0x0}}], 0x1, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@getqdisc={0x4c, 0x26, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0x4, 0x2}, {0xa, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}}, 0x2404c004) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x24, r12, 0x1, 0x70bd2c, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}]]}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000093", @ANYRES16=r10, @ANYBLOB="000426bd7000fbdbdf257f00000008000300", @ANYRES32=r14, @ANYBLOB="140055009800815dece58dfade1be85eb462df35"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc0) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="000000f60204010006"], 0x59) 27.90057666s ago: executing program 3 (id=2993): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x1, 0x0, 0x2, 0x768, {{0x2e, 0x4, 0x1, 0x1b, 0xb8, 0x66, 0x0, 0x5, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x2c, 0xf9, 0x3, 0x3, [{@private=0xa010101, 0x9}, {@loopback, 0x5}, {@broadcast, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0x6}]}, @noop, @rr={0x7, 0x2b, 0x21, [@loopback, @remote, @local, @multicast1, @broadcast, @rand_addr=0x64010100, @multicast1, @loopback, @private=0x9, @dev={0xac, 0x14, 0x14, 0xb}]}, @timestamp={0x44, 0x20, 0xd1, 0x0, 0xa, [0xc92f, 0x800, 0x2, 0x5, 0x4, 0x80, 0x400]}, @timestamp_addr={0x44, 0x2c, 0xa0, 0x1, 0x2, [{@private=0xa010102, 0x3}, {@multicast1, 0xc13}, {@local, 0x1ba3}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6557}]}]}}}}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @multicast2}, &(0x7f0000000280)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8081}, 0x44041) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 27.674538515s ago: executing program 1 (id=2994): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, r0, 0x215eb000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2d) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000eeffffff4b260f0000000000000000000000000005000000f47ea43fad2fcce2d709e31f240ae5fd035cd8973b841cf3fae9188fa220ac5c3ec0976fa6b25956e3bdbef8050000002200000000010004433b1ba6a20e50d00097a80d7525f1dd67f8236c0bb72103e172cc160bbeeceb6debdfcf69b083b521622643b079721d1e2e5c05cafd7188645876b9accc65649159279d1da941fe3047e746a414211672325cda348f9503fd2a4ed887be52fedea4cacecd9b5c3daf83cd4424c8193950e565a5a50c160f925686ddc7e06e060c98de000000000000"], &(0x7f0000000100)=0x2d) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) bind$802154_raw(r2, &(0x7f00000004c0)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000803028"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.746233556s ago: executing program 1 (id=2995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000100001000000000000000000032ebdd8f87eac91a40a010c00f70000000000000a0000010900010073797a310000000024000480200001800700010067740000140002800800044000000015080002400000000409000213cb11a5e8b90e0000080000000000002faf06e90ad437f90ecb06280b41e787c456295ca689e769c7f284394ce9b1aac3d5a5dabfb3625d059b519c80bdd3cc609ab3e49648bff32ed58100"/181], 0x78}, 0x1, 0x0, 0x0, 0x2400c0f0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="3c986e5974f07df4587f10e94508f3a1d36e4fd418eac83af790b5bf0b43be27eec7e8f81ba6447904e2c49a06f58bbe", @ANYRESHEX=r1, @ANYRES64=r1], 0x6c}, 0x1, 0x0, 0x0, 0xd1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f0000000300)="458c0bb2716244438f518b1e26c7d1da8fb41f40356dfb6c4b784fef12d8b639c8ac02aeed67108a697756279989dade57e31a06906c02e8196b8b5e6c2cb70c0abc2ad9b9eee3e73b447e71fad7300f6f8a0bd8bd931afa3ddfd6616dbbb8e8c98014248ec88d637b7cdc6730ae845e09072977933b86ed3a230baa1309b346884828922c4e391872a0a5105a48f8a935ec8ccb857e4c0b5c2609078baf906352f4a3761571a32f958c237dc55c31ed9462cee239b4ab396204cf0fc47025f17dffbf67a8a83b9e52da2269f5c2e3ef07d395e8c19e597d5832a3fba191820d39191f", &(0x7f0000000400)=""/123, &(0x7f0000000480)="fd53d46a00f138ea0dbae66a032130164e31948fa50a0f8dcd54b053a79ca7481476a25379af9804e34d9a26d7dd9221aa99080c40e4189d342c54682a7cc46c93664cbb15edb37daef6bfc3c41035ed5d0da4df8e40db0759e3637713f810b1e6b44fbc6a69723cbbbc5fe8b4600e5e9283fb00cb4b0a93222897a0e551086ee4ba87e4791be9461106c6c5f778", &(0x7f0000000540)="591bccfb6fb9f7012f07fccfa5ed31900cd36a5a22e6a46e7ecef3fd575101fd0aa725ff8700867e5e01a43a81b9e50999a09bcc7992e9ba3185d452a29fd205624f067934473c3f3c5ea2590afe2f470254de350e24b7e1a96f6709d97736c033975972b63c6e17bddbf0b43f2ceca806bce66acb799defd92a34c6a3056a77f56f7bae7af61aafa7c0dcf6c27887", 0x7f, r2}, 0x38) 17.035508155s ago: executing program 1 (id=2996): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xe}, {0x5, 0xfff3}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x1080) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x3}, 0x18}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=r1, @ANYBLOB="000800002199d80fea9166c9a000"], 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES16=r5, @ANYBLOB="3f0429bd7000ffdbdf253b0000000c00900040000000780000000a00cd00050006000700000004006c000400870008005700260c0000"], 0x3c}}, 0x40840) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0)='veth\x00', 0x200100, &(0x7f0000000300)={@_ha_fsid={[0x7fff, 0x7]}, {0x2, 0x1, 0x1, 0x7fffffffffffffff}}, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x7fffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="997425bd7000fbdbdf2515000000400001800d0001007564703a9058f43a82"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000400)={r1, @multicast2, @multicast1}, 0x4c) 14.263661643s ago: executing program 32 (id=2992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r7 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0xde1a, @mcast1, 0x4}, @in6={0xa, 0x4e22, 0x8, @private0, 0xf}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x64) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000140)={@private0, 0x0}, &(0x7f0000000180)=0x14) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r9, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r9, &(0x7f0000000280)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x200004}, 0x1}}, 0x80, 0x0}}], 0x1, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@getqdisc={0x4c, 0x26, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0x4, 0x2}, {0xa, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}}, 0x2404c004) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x24, r12, 0x1, 0x70bd2c, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}]]}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000093", @ANYRES16=r10, @ANYBLOB="000426bd7000fbdbdf257f00000008000300", @ANYRES32=r14, @ANYBLOB="140055009800815dece58dfade1be85eb462df35"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc0) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="000000f60204010006"], 0x59) 12.781683833s ago: executing program 33 (id=2991): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000040000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011"], 0x20}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r3}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000b40)={&(0x7f0000000880)="c2ae47fba79967a629ac8ab7219c19103101dfedc4ce1b994e6677616113e221192eb08f033b70a6050c0c16f4ba5a6c47edb3dae0445b273a276a03f4aa7ceab6d534447613cbf846a67147d6c2d7c6ce418fb37385a20bf23c3c2e72e010286d11127091ff39b36d03606f1b2844ad35f180435dabe9046df6a6c00bfcf2839a", &(0x7f0000000940)=""/3, &(0x7f0000000980)="9a925e5fae956a2dfea76703153c37962b800cffde740e540f6468f49f0e2f87910774cfa18f38e054a6e8deb41cc14218b8f7d610dec8fe668498d42d827938b44c16d4d25caf91b99f584cdce06354c0206d6c202fe3a5868429497b7dd5d2eda2044ca4ac3b948c3f19582450b33b1ac7bf52a9640d734ad49bbfdac78cb9d94a21b6c8bbb06640d9c4cbeb31b30a9158a68be127b9694432ab5e8b", &(0x7f0000000a40)="6aac8e0bf6fa0f1e5f3f0a40116ce23c1db6d017ecb0", 0x9174, r5}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001ffffffff00000000000000000ec1258205096bbfc4fe1f000000000a01020000050000000000010000010900010073797a3000000d0000000000160a01000000eaffffffffff000000000900010073797a30000000000900020073797a300000000004000380140000001000010000000023000000000000000a"], 0x78}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newtclass={0x24, 0x28, 0xff, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x5, 0xd}, {0xffff, 0xc}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x3f, &(0x7f0000000000)=0xeb, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r14, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 10.229402896s ago: executing program 34 (id=2993): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x1, 0x0, 0x2, 0x768, {{0x2e, 0x4, 0x1, 0x1b, 0xb8, 0x66, 0x0, 0x5, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x2c, 0xf9, 0x3, 0x3, [{@private=0xa010101, 0x9}, {@loopback, 0x5}, {@broadcast, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0x6}]}, @noop, @rr={0x7, 0x2b, 0x21, [@loopback, @remote, @local, @multicast1, @broadcast, @rand_addr=0x64010100, @multicast1, @loopback, @private=0x9, @dev={0xac, 0x14, 0x14, 0xb}]}, @timestamp={0x44, 0x20, 0xd1, 0x0, 0xa, [0xc92f, 0x800, 0x2, 0x5, 0x4, 0x80, 0x400]}, @timestamp_addr={0x44, 0x2c, 0xa0, 0x1, 0x2, [{@private=0xa010102, 0x3}, {@multicast1, 0xc13}, {@local, 0x1ba3}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6557}]}]}}}}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @multicast2}, &(0x7f0000000280)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8081}, 0x44041) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 0s ago: executing program 35 (id=2996): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xe}, {0x5, 0xfff3}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x1080) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x3}, 0x18}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=r1, @ANYBLOB="000800002199d80fea9166c9a000"], 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES16=r5, @ANYBLOB="3f0429bd7000ffdbdf253b0000000c00900040000000780000000a00cd00050006000700000004006c000400870008005700260c0000"], 0x3c}}, 0x40840) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0)='veth\x00', 0x200100, &(0x7f0000000300)={@_ha_fsid={[0x7fff, 0x7]}, {0x2, 0x1, 0x1, 0x7fffffffffffffff}}, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x7fffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="997425bd7000fbdbdf2515000000400001800d0001007564703a9058f43a82"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000400)={r1, @multicast2, @multicast1}, 0x4c) kernel console output (not intermixed with test programs): syz.0.1714'. [ 438.554995][T12547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1715'. [ 439.908555][T12573] sctp: [Deprecated]: syz.3.1718 (pid 12573) Use of int in maxseg socket option. [ 439.908555][T12573] Use struct sctp_assoc_value instead [ 440.201213][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.623542][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'. [ 440.680883][T12591] vlan4: entered allmulticast mode [ 441.964287][T12604] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1730'. [ 442.184965][T12617] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1732'. [ 442.710117][T12624] netlink: 'syz.4.1736': attribute type 1 has an invalid length. [ 442.833975][T12632] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1735'. [ 442.898276][T12634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1736'. [ 443.074578][T12626] bond5 (unregistering): Released all slaves [ 443.188403][T12641] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 443.237758][T12640] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1738'. [ 443.784842][T12629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 443.798562][T12629] bond5: (slave bond6): making interface the new active one [ 443.806533][T12629] bond5: (slave bond6): Enslaving as an active interface with an up link [ 444.068921][T12633] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 444.093025][T12634] 8021q: adding VLAN 0 to HW filter on device bond5 [ 444.149856][T12648] netlink: 'syz.1.1738': attribute type 12 has an invalid length. [ 444.150331][T12648] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1738'. [ 444.218626][T12659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1742'. [ 444.545826][T12649] kthread_run failed with err -4 [ 444.759564][T12662] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1743'. [ 444.799330][T12662] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.079430][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 445.092179][T12666] tipc: Enabling of bearer rejected, failed to enable media [ 445.298301][T12672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1747'. [ 445.603955][T12675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.887027][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 446.426243][T12693] xt_TCPMSS: Only works on TCP SYN packets [ 446.470310][T12697] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1755'. [ 446.626812][T12698] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1754'. [ 446.961805][T12698] xt_TCPMSS: Only works on TCP SYN packets [ 448.053020][T12725] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1761'. [ 448.393386][T12740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1763'. [ 448.513598][T12720] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 449.487417][T12755] v: renamed from veth0_vlan (while UP) [ 449.714589][ T5616] Bluetooth: hci4: command 0x0405 tx timeout [ 449.902932][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1768'. [ 450.180756][T12777] netlink: 'syz.1.1772': attribute type 12 has an invalid length. [ 450.316439][T12777] bond10: option primary_reselect: invalid value (255) [ 450.330937][T12777] bond10 (unregistering): Released all slaves [ 450.607691][T12779] syzkaller1: entered promiscuous mode [ 450.607786][T12779] syzkaller1: entered allmulticast mode [ 451.075601][T12796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.100619][T12797] netlink: 'syz.4.1774': attribute type 17 has an invalid length. [ 451.101011][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'. [ 451.101093][T12797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1774'. [ 451.136533][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1773'. [ 451.137794][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1773'. [ 451.217643][T12797] erspan0: entered promiscuous mode [ 451.226945][T12797] gretap0: entered promiscuous mode [ 451.802593][T12806] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1777'. [ 451.802852][T12806] veth0_to_bond: default FDB implementation only supports local addresses [ 451.962341][T12823] smc: net device lo applied user defined pnetid SYZ0 [ 451.962762][T12823] smc: smcd device lo applied user defined pnetid SYZ0 [ 453.611687][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 454.269813][T12940] netlink: 'syz.4.1790': attribute type 5 has an invalid length. [ 454.526755][T12945] sock: sock_set_timeout: `syz.1.1791' (pid 12945) tries to set negative timeout [ 454.718556][T12948] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 454.757781][T12948] bond1: (slave lo): Enslaving as an active interface with an up link [ 455.079183][T12948] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 456.089594][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 456.308055][T12973] xt_addrtype: ipv6 does not support BROADCAST matching [ 456.697747][T12970] hsr_slave_1 (unregistering): left promiscuous mode [ 456.783307][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 456.783441][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 456.783556][T12979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1797'. [ 456.815755][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 456.815981][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 456.816205][T12975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1797'. [ 456.948920][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'. [ 457.684851][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 458.752415][T13020] netlink: 'syz.4.1808': attribute type 24 has an invalid length. [ 458.791453][T13010] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 458.810444][T13010] bond5 (unregistering): Released all slaves [ 458.948148][T13022] __nla_validate_parse: 1 callbacks suppressed [ 458.953521][T13022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1809'. [ 460.127505][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'. [ 460.154219][T13032] netlink: 'syz.2.1812': attribute type 4 has an invalid length. [ 460.154473][T13032] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1812'. [ 460.406599][T13030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.427603][T13032] .`: renamed from bond0 (while UP) [ 460.555853][T13041] netlink: 'syz.4.1811': attribute type 1 has an invalid length. [ 460.722869][T13031] xt_TPROXY: Can be used only with -p tcp or -p udp [ 460.887183][T13047] netlink: 'syz.4.1811': attribute type 10 has an invalid length. [ 460.899526][T13047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1811'. [ 461.630293][T13065] netlink: 'syz.2.1817': attribute type 1 has an invalid length. [ 461.850656][T13069] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1817'. [ 462.100302][T13041] bond7: option mode: invalid value (7) [ 462.147817][T13041] bond7 (unregistering): Released all slaves [ 462.868377][T13047] dummy0: entered promiscuous mode [ 463.040804][T13065] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 463.309836][T13068] veth5: entered promiscuous mode [ 464.581174][T13106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1826'. [ 464.581335][T13106] netlink: 'syz.4.1826': attribute type 7 has an invalid length. [ 464.581408][T13106] netlink: 'syz.4.1826': attribute type 8 has an invalid length. [ 464.581466][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1826'. [ 465.469146][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 465.469277][T13123] netlink: 'syz.3.1831': attribute type 22 has an invalid length. [ 465.469371][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 465.582010][T13112] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 466.691073][T13149] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1836'. [ 466.767372][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 467.935800][T13176] netlink: 'syz.4.1841': attribute type 1 has an invalid length. [ 468.168374][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'. [ 468.248918][T13176] 8021q: adding VLAN 0 to HW filter on device bond7 [ 468.519221][T13181] bond7: (slave gretap4): making interface the new active one [ 468.532953][T13181] bond7: (slave gretap4): Enslaving as an active interface with an up link [ 468.691357][T13194] netlink: 'syz.2.1847': attribute type 1 has an invalid length. [ 468.700461][T13194] netlink: 14690 bytes leftover after parsing attributes in process `syz.2.1847'. [ 468.800929][T13177] syzkaller0: entered promiscuous mode [ 468.801033][T13177] syzkaller0: entered allmulticast mode [ 471.642106][T13219] veth0: entered promiscuous mode [ 471.724872][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 471.728324][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 471.731200][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 471.768089][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 471.904363][T13218] veth0: left promiscuous mode [ 471.921529][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 471.921652][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1857'. [ 472.382992][T13237] netlink: 'syz.4.1860': attribute type 1 has an invalid length. [ 472.383396][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1860'. [ 472.453009][T13242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1861'. [ 472.453665][T13242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1861'. [ 472.454250][T13242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1861'. [ 473.163154][T13254] xt_CONNSECMARK: invalid mode: 0 [ 474.514174][T13276] netlink: 'syz.4.1867': attribute type 13 has an invalid length. [ 474.689403][T13276] gretap0: refused to change device tx_queue_len [ 474.694179][T13276] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 474.846582][T13281] batadv_slave_1: entered promiscuous mode [ 474.857305][T13280] netlink: 'syz.3.1868': attribute type 1 has an invalid length. [ 474.973826][T13292] netlink: 'syz.2.1869': attribute type 16 has an invalid length. [ 474.973928][T13292] netlink: 'syz.2.1869': attribute type 17 has an invalid length. [ 475.070233][T13293] xt_connbytes: Forcing CT accounting to be enabled [ 475.105932][T13296] netlink: 'syz.3.1868': attribute type 12 has an invalid length. [ 475.106163][T13296] netlink: 'syz.3.1868': attribute type 11 has an invalid length. [ 475.227571][T13285] batadv_slave_1: left promiscuous mode [ 475.246106][T13284] batadv_slave_1: entered promiscuous mode [ 475.661586][T13306] netlink: 'syz.4.1872': attribute type 5 has an invalid length. [ 475.673905][T13306] netlink: 'syz.4.1872': attribute type 6 has an invalid length. [ 475.733605][T13292] 8021q: adding VLAN 0 to HW filter on device .` [ 475.862846][T13292] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 475.873301][T13292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.913707][T13292] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 475.926087][T13292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.942590][T13292] syzkaller0: left promiscuous mode [ 475.979064][T13292] syzkaller0: left allmulticast mode [ 476.018796][T13292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.070567][T13292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.090359][T13292] bond4: left promiscuous mode [ 476.090490][T13292] ipip1: left promiscuous mode [ 476.159507][T13292] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.669486][T13278] batadv_slave_1: left promiscuous mode [ 477.909108][T13336] __nla_validate_parse: 34 callbacks suppressed [ 477.909860][T13336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1880'. [ 479.048914][T13361] netlink: 'syz.2.1884': attribute type 11 has an invalid length. [ 479.078696][T13360] netlink: 'syz.2.1884': attribute type 11 has an invalid length. [ 479.125310][T13349] syzkaller1: entered promiscuous mode [ 479.126170][T13349] syzkaller1: entered allmulticast mode [ 479.216034][T13367] netlink: 'syz.3.1885': attribute type 1 has an invalid length. [ 479.231115][T13360] debugfs: 'netdev:' already exists in 'phy5' [ 480.301389][T13384] netlink: 'syz.1.1886': attribute type 1 has an invalid length. [ 480.587914][T13363] veth11: entered allmulticast mode [ 480.591620][T13363] bond6: (slave veth11): Enslaving as an active interface with a down link [ 480.633618][T13370] bond6: (slave veth0_to_bond): making interface the new active one [ 480.649216][T13370] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 480.993967][T13372] macvlan0: entered promiscuous mode [ 481.009959][T13372] macvlan0: entered allmulticast mode [ 481.031007][T13372] bond6: entered promiscuous mode [ 481.031237][T13372] veth0_to_bond: entered promiscuous mode [ 481.081852][T13372] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 481.108438][T13372] bond6: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 481.134445][T13372] bond6: left promiscuous mode [ 481.139348][T13372] veth0_to_bond: left promiscuous mode [ 481.557975][T13384] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 481.681563][T13396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.611034][T13411] xt_nat: multiple ranges no longer supported [ 483.105469][T13409] netlink: 'syz.0.1892': attribute type 5 has an invalid length. [ 483.851725][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 484.039562][T13435] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1898'. [ 486.385787][T13475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.397442][T13477] block nbd0: not configured, cannot reconfigure [ 486.406735][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 486.415993][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 486.516462][T13477] macsec1: entered promiscuous mode [ 486.525008][T13477] macsec1: entered allmulticast mode [ 486.570205][T13477] bridge0: port 3(macsec1) entered blocking state [ 486.571731][T13477] bridge0: port 3(macsec1) entered disabled state [ 486.859370][T13479] macsec1: entered promiscuous mode [ 486.867783][T13479] macsec1: entered allmulticast mode [ 486.879120][T13479] bridge0: port 3(macsec1) entered blocking state [ 486.887252][T13479] bridge0: port 3(macsec1) entered disabled state [ 487.478238][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1916'. [ 487.478297][T13504] netlink: 'syz.0.1916': attribute type 30 has an invalid length. [ 487.588591][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1914'. [ 487.885682][T12854] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.892362][T12856] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.894195][T12856] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.894306][T12856] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.432621][T13516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1919'. [ 488.471470][T13516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1919'. [ 488.488531][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 488.895691][T13532] rdma_rxe: rxe_newlink: failed to add wg0 [ 489.126283][T13538] vlan0: entered promiscuous mode [ 489.131651][T13538] vlan0: entered allmulticast mode [ 489.138781][T13538] veth0_vlan: entered allmulticast mode [ 489.568782][T13483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.574169][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1911'. [ 490.393326][T13553] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1926'. [ 490.461636][T13551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.038300][T13556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1927'. [ 491.120236][T13559] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20003 [ 492.390591][T13584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1935'. [ 492.464454][T13585] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1935'. [ 492.576923][T13593] geneve4: entered promiscuous mode [ 493.350669][T13611] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 493.421200][T13613] ip6t_srh: unknown srh invflags 4000 [ 493.510061][T13615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1941'. [ 493.520988][T13615] netlink: 'syz.2.1941': attribute type 1 has an invalid length. [ 494.002327][T13617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1943'. [ 494.002478][T13617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1943'. [ 494.052139][T13617] gretap2: entered promiscuous mode [ 494.062178][T13617] gretap2: entered allmulticast mode [ 494.258213][T13628] ªªªªª»_wmem: renamed from bond_slave_0 (while UP) [ 494.372111][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'. [ 494.511213][T13635] netlink: 'syz.3.1948': attribute type 1 has an invalid length. [ 494.894507][T13639] netlink: 'syz.3.1948': attribute type 1 has an invalid length. [ 495.141598][T13635] bond7: entered promiscuous mode [ 495.141759][T13635] bond7: entered allmulticast mode [ 495.142901][T13635] 8021q: adding VLAN 0 to HW filter on device bond7 [ 495.408732][T13640] erspan1: entered allmulticast mode [ 495.441534][T13639] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 497.229864][T13651] veth0_macvtap: entered allmulticast mode [ 497.252499][T13651] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 498.118491][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 498.343456][T13696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1959'. [ 498.369591][T13693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1959'. [ 498.471670][T13697] Bluetooth: hci0: unsupported parameter 5135 [ 498.478951][T13697] Bluetooth: hci0: unsupported parameter 8192 [ 498.486424][T13697] Bluetooth: hci0: unsupported parameter 5135 [ 498.492582][T13697] Bluetooth: hci0: unsupported parameter 8192 [ 498.506056][T13693] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 498.779413][T13694] xt_hashlimit: size too large, truncated to 1048576 [ 499.465578][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 499.580997][T13721] netlink: 'syz.0.1965': attribute type 11 has an invalid length. [ 501.639660][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.683928][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1974'. [ 502.182427][T13769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1977'. [ 503.402235][T13793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1980'. [ 504.248035][T13795] netlink: Failed to add helper -22 [ 504.248318][T13795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.631198][T13827] Bluetooth: hci0: unsupported parameter 5161 [ 504.631324][T13827] Bluetooth: hci0: unsupported parameter 8192 [ 504.631360][T13827] Bluetooth: hci0: unsupported parameter 5161 [ 504.631632][T13827] Bluetooth: hci0: unsupported parameter 8192 [ 504.667505][T13826] Bluetooth: hci0: unsupported parameter 5161 [ 504.667558][T13826] Bluetooth: hci0: unsupported parameter 8192 [ 504.667590][T13826] Bluetooth: hci0: unsupported parameter 5161 [ 504.667609][T13826] Bluetooth: hci0: unsupported parameter 8192 [ 505.516217][T13850] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 505.689282][T13852] netlink: 'syz.0.1991': attribute type 1 has an invalid length. [ 505.835158][T13854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1994'. [ 506.008778][T13854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1994'. [ 506.444398][T13872] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1998'. [ 506.637699][T13857] bond0: option mode: invalid value (10) [ 506.658092][T13878] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 506.729527][T13857] bond0 (unregistering): Released all slaves [ 506.851261][T13882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 506.876030][T13882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.132418][T13858] xfrm2: entered allmulticast mode [ 507.622741][T13878] 8021q: adding VLAN 0 to HW filter on device bond9 [ 507.639831][T13884] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1999'. [ 507.875129][T13893] ªªªªª»: renamed from dummy0 (while UP) [ 508.609321][T13915] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2006'. [ 508.625315][T13906] wireguard0: entered promiscuous mode [ 510.557641][T13952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2015'. [ 510.613993][T13954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2015'. [ 511.178057][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2018'. [ 511.904303][T13969] 8021q: VLANs not supported on syzkaller0 [ 512.121996][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'. [ 512.148782][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'. [ 512.200194][T13945] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 512.259157][T13945] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 514.406518][T13985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2023'. [ 514.424075][T14013] netdevsim0 speed is unknown, defaulting to 1000 [ 514.440414][T13986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2023'. [ 516.370294][T13997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.432100][T14023] netlink: 'syz.1.2030': attribute type 1 has an invalid length. [ 516.432589][T14023] netlink: 756 bytes leftover after parsing attributes in process `syz.1.2030'. [ 516.903607][T14032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2033'. [ 518.810909][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 519.974967][T14085] netlink: 768 bytes leftover after parsing attributes in process `syz.0.2044'. [ 520.175693][T14085] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2044'. [ 520.315450][T14093] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2044'. [ 520.547354][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 520.579800][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 520.580528][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 520.777426][T14100] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 521.070424][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2051'. [ 521.070854][T14109] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 521.110594][T14109] openvswitch: netlink: Missing key (keys=40, expected=100) [ 521.891513][T14116] netlink: 'syz.0.2053': attribute type 21 has an invalid length. [ 521.891757][T14116] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2053'. [ 522.319488][T14130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.343653][T14130] Bluetooth: hci0: unsupported parameter 5135 [ 522.365017][T14130] Bluetooth: hci0: unsupported parameter 8192 [ 522.366135][T14130] Bluetooth: hci0: unsupported parameter 5135 [ 522.366186][T14130] Bluetooth: hci0: unsupported parameter 8192 [ 522.475533][T14123] bond0 (unregistering): Released all slaves [ 523.106226][T14134] netlink: 'syz.1.2057': attribute type 10 has an invalid length. [ 523.611939][T14136] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 523.840077][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.940917][T14134] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 524.071027][T14134] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 526.052615][T14160] netlink: 'syz.1.2064': attribute type 2 has an invalid length. [ 526.369666][T14165] vlan5: entered allmulticast mode [ 526.369907][T14165] bond0: entered allmulticast mode [ 526.370130][T14165] ªªªªª»_wmem: entered allmulticast mode [ 526.370669][T14165] bond_slave_1: entered allmulticast mode [ 526.401196][T14165] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 526.415381][T14165] veth0_to_bond: entered allmulticast mode [ 526.422280][T14178] netlink: 'syz.3.2067': attribute type 1 has an invalid length. [ 526.422332][T14178] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2067'. [ 526.422392][T14178] netlink: 2060 bytes leftover after parsing attributes in process `syz.3.2067'. [ 526.476310][T14184] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 526.505194][T14181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2066'. [ 527.700897][T14208] ip_tables: iptables: counters copy to user failed while replacing table [ 527.764309][T14203] veth1_to_batadv: entered allmulticast mode [ 527.900537][T14208] tipc: Started in network mode [ 527.901098][T14208] tipc: Node identity ac1414aa, cluster identity 4711 [ 527.903512][T14208] tipc: New replicast peer: 172.20.20.187 [ 527.943552][T14208] tipc: Enabled bearer , priority 10 [ 527.989557][T14208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2075'. [ 528.740811][T14203] veth1_to_batadv: entered promiscuous mode [ 528.775609][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'. [ 528.952758][T14210] veth1_to_batadv: left promiscuous mode [ 528.981464][T14210] veth1_to_batadv: left allmulticast mode [ 529.595531][T14236] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2080'. [ 529.730510][ T5728] tipc: Node number set to 2886997162 [ 529.741352][T14240] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2081'. [ 529.920664][T14242] netlink: 13439 bytes leftover after parsing attributes in process `syz.2.2080'. [ 530.034014][T14245] tipc: Started in network mode [ 530.034142][T14245] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 530.041759][T14245] tipc: Enabled bearer , priority 10 [ 530.841237][T14263] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 530.855964][T14263] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 530.856615][T14263] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 530.857201][T14263] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 530.857779][T14263] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 530.900503][T14263] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 530.900767][T14263] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 530.901008][T14263] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 530.901238][T14263] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 530.901464][T14263] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 530.991753][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'. [ 531.168112][ T5728] tipc: Node number set to 10136234 [ 533.219195][ T31] audit: type=1804 audit(1788245588.483:5): pid=14299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2100" name="/newroot/430/cgroup.controllers" dev="tmpfs" ino=2214 res=1 errno=0 [ 533.219350][ T31] audit: type=1800 audit(1788245588.483:6): pid=14299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2100" name="cgroup.controllers" dev="tmpfs" ino=2214 res=0 errno=0 [ 533.309937][ T31] audit: type=1804 audit(1788245588.573:7): pid=14299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2100" name="/newroot/430/cgroup.controllers" dev="tmpfs" ino=2214 res=1 errno=0 [ 533.342041][T14301] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 533.384538][T14301] bond11 (unregistering): Released all slaves [ 535.200515][T14324] tipc: Started in network mode [ 535.200942][T14324] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 535.273545][T14324] tipc: Enabled bearer , priority 10 [ 535.863202][T14333] syzkaller0: left promiscuous mode [ 535.863650][T14333] syzkaller0: left allmulticast mode [ 535.911617][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2111'. [ 536.000738][T14337] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 536.084276][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'. [ 536.142157][T14340] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 536.209957][T14338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2110'. [ 536.256524][T14338] validate_nla: 55 callbacks suppressed [ 536.264119][T14338] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 536.273194][T14338] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2110'. [ 536.380711][T14353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2116'. [ 536.397061][ T5747] tipc: Node number set to 4269801491 [ 536.413493][T14353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.414226][T14353] IPv6: NLM_F_CREATE should be set when creating new route [ 536.433133][T14353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2116'. [ 537.069999][T14356] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 537.070446][T14356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.749273][T14369] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 537.768886][T14369] bond11 (unregistering): Released all slaves [ 537.927797][T14379] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 538.627386][T14387] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2128'. [ 538.728511][T14390] netlink: 'syz.1.2128': attribute type 4 has an invalid length. [ 538.806938][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 538.807498][T14391] netlink: 'syz.1.2128': attribute type 10 has an invalid length. [ 538.807550][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2128'. [ 539.018180][T14391] geneve5: entered promiscuous mode [ 539.024510][T14391] geneve5: entered allmulticast mode [ 539.367152][T14404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2131'. [ 539.408415][T14404] gretap0: entered promiscuous mode [ 539.525930][T14404] gretap0: left promiscuous mode [ 539.802622][T14405] gretap0: entered promiscuous mode [ 539.850407][T14410] netlink: 'syz.3.2132': attribute type 2 has an invalid length. [ 539.866837][T14405] gretap0: left promiscuous mode [ 539.951862][T14382] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 540.276378][T14410] : entered promiscuous mode [ 540.404144][T14415] netlink: 'syz.1.2134': attribute type 1 has an invalid length. [ 540.681742][T14415] bond1: (slave veth0_to_bond): Releasing backup interface [ 541.139091][T14420] tipc: Enabled bearer , priority 7 [ 541.660742][T14427] xt_l2tp: v2 doesn't support IP mode [ 541.697372][T14433] xt_TPROXY: Can be used only with -p tcp or -p udp [ 541.837028][T14424] ipip0: entered promiscuous mode [ 541.837298][T14424] ipip0: entered allmulticast mode [ 542.080055][T14444] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 542.341049][T14445] netlink: 'syz.2.2140': attribute type 21 has an invalid length. [ 543.648692][T14472] netlink: 'syz.1.2149': attribute type 21 has an invalid length. [ 543.648936][T14472] netlink: 'syz.1.2149': attribute type 22 has an invalid length. [ 543.648984][T14472] netlink: 'syz.1.2149': attribute type 23 has an invalid length. [ 543.649021][T14472] netlink: 'syz.1.2149': attribute type 25 has an invalid length. [ 543.649067][T14472] netlink: 'syz.1.2149': attribute type 26 has an invalid length. [ 543.649100][T14472] __nla_validate_parse: 3 callbacks suppressed [ 543.649131][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2149'. [ 544.724438][T14490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2153'. [ 544.829271][T14495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2152'. [ 547.735878][T14555] netlink: 'syz.3.2164': attribute type 1 has an invalid length. [ 547.736115][T14555] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2164'. [ 547.994004][T14564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2167'. [ 548.073694][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 548.259171][T14567] netlink: 'syz.1.2169': attribute type 1 has an invalid length. [ 548.379730][T14575] netlink: 'syz.1.2169': attribute type 29 has an invalid length. [ 548.500547][T14564] hsr_slave_1 (unregistering): left promiscuous mode [ 548.733592][T14567] 8021q: adding VLAN 0 to HW filter on device bond11 [ 548.743570][T14571] bond11: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 548.823278][T14571] bond11: entered allmulticast mode [ 548.951316][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2171'. [ 548.951414][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2171'. [ 549.571733][T14574] veth7: entered allmulticast mode [ 550.001633][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 551.169415][T14612] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2180'. [ 551.584258][T14622] openvswitch: netlink: Missing key (keys=40, expected=100) [ 552.005308][T14637] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 552.100014][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 552.832507][T14641] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 552.891164][T14641] bond0 (unregistering): Released all slaves [ 553.382969][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'. [ 553.440669][T14646] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 553.917907][T14665] Bluetooth: hci0: unsupported parameter 5135 [ 553.918142][T14665] Bluetooth: hci0: unsupported parameter 8192 [ 553.918377][T14665] Bluetooth: hci0: unsupported parameter 5135 [ 553.918583][T14665] Bluetooth: hci0: unsupported parameter 8192 [ 554.049297][T14675] Bluetooth: hci0: unsupported parameter 5135 [ 554.049479][T14675] Bluetooth: hci0: unsupported parameter 8192 [ 554.049704][T14675] Bluetooth: hci0: unsupported parameter 5135 [ 554.049905][T14675] Bluetooth: hci0: unsupported parameter 8192 [ 554.252660][T14685] netlink: 'syz.1.2197': attribute type 16 has an invalid length. [ 555.534455][T14703] netlink: 'syz.2.2199': attribute type 1 has an invalid length. [ 558.010298][T14738] netlink: 'syz.4.2207': attribute type 1 has an invalid length. [ 558.236438][T14743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2209'. [ 558.421211][T14747] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2210'. [ 558.853258][T14740] bond0: (slave veth0_to_bond): Releasing backup interface [ 558.875507][T14740] veth0_to_bond: left allmulticast mode [ 558.930915][T14740] bond10: (slave veth0_to_bond): making interface the new active one [ 558.956519][T14740] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 559.819450][T14763] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2213'. [ 559.901697][T14763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2213'. [ 560.066296][T14764] veth1_to_bond: entered allmulticast mode [ 560.111647][T14765] openvswitch: netlink: IPv6 tunnel dst address is zero [ 560.135454][T14762] veth1_to_bond: left allmulticast mode [ 560.142471][T14763] netlink: 'syz.2.2213': attribute type 25 has an invalid length. [ 563.081522][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.241539][T14860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2237'. [ 565.582229][T14861] veth3: entered allmulticast mode [ 565.762652][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2241'. [ 567.501109][T14902] batman_adv: batadv0: Adding interface: gretap3 [ 567.501580][T14902] batman_adv: batadv0: The MTU of interface gretap3 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.501676][T14902] batman_adv: batadv0: Interface activated: gretap3 [ 567.713227][T14915] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 568.501200][T14925] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.2251'. [ 569.447660][T14944] netlink: 'syz.3.2253': attribute type 1 has an invalid length. [ 569.447764][T14944] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2253'. [ 569.508870][T14941] vlan0: entered promiscuous mode [ 569.515397][T14941] bridge0: entered promiscuous mode [ 569.547411][T14941] netlink: 'syz.3.2253': attribute type 5 has an invalid length. [ 569.547512][T14941] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2253'. [ 569.680452][T14944] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2253'. [ 570.836842][T14955] syzkaller0: entered promiscuous mode [ 570.837707][T14955] syzkaller0: entered allmulticast mode [ 571.471826][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2260'. [ 571.797448][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2260'. [ 571.797948][T14973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2260'. [ 571.798006][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2260'. [ 571.798796][T14973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2260'. [ 571.889696][T14974] xt_CONNSECMARK: invalid mode: 0 [ 572.012521][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2263'. [ 572.158309][T14941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.735597][T14982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2264'. [ 574.383099][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 575.350145][T14995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2265'. [ 575.388120][T15032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2276'. [ 576.069576][T15036] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 576.395428][T15042] sock: sock_set_timeout: `syz.3.2280' (pid 15042) tries to set negative timeout [ 578.771722][T15076] netlink: 'syz.3.2290': attribute type 10 has an invalid length. [ 578.882154][T15076] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 580.141940][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'. [ 580.142339][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'. [ 580.185786][T15095] 8021q: adding VLAN 0 to HW filter on device bond7 [ 581.513036][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2299'. [ 581.760380][T15134] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2299'. [ 582.322037][T15142] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 582.460833][T15151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2302'. [ 583.203030][T15162] ieee802154 phy1 wpan1: encryption failed: -22 [ 584.264849][T15170] team0: Device xfrm0 is of different type [ 584.352007][T15182] netlink: 'syz.2.2312': attribute type 1 has an invalid length. [ 584.423513][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2311'. [ 585.139847][T15188] bond8: (slave bridge1): making interface the new active one [ 585.157152][T15188] bond8: (slave bridge1): Enslaving as an active interface with an up link [ 585.288125][T15197] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 588.403435][T15274] netlink: 524 bytes leftover after parsing attributes in process `syz.2.2330'. [ 589.310846][T15284] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2332'. [ 590.207526][T15298] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 590.357846][T15298] bond11 (unregistering): Released all slaves [ 590.636221][T15318] IPv6: NLM_F_CREATE should be specified when creating new route [ 590.669968][T15318] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2340'. [ 590.738586][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2340'. [ 592.031232][T15335] SET target dimension over the limit! [ 595.006623][T15384] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 595.119250][T15388] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2359'. [ 595.493127][T15393] x_tables: duplicate underflow at hook 1 [ 598.190650][T15431] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2377'. [ 598.236538][T15431] syzkaller1: entered promiscuous mode [ 598.236582][T15431] syzkaller1: entered allmulticast mode [ 598.354856][ T5616] block nbd0: Receive control failed (result -32) [ 598.576151][T15440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.696507][T15437] veth1_macvtap: left promiscuous mode [ 599.068930][T12876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.069028][T12876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.264090][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2381'. [ 599.303095][T15442] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 599.515686][T15445] 8021q: adding VLAN 0 to HW filter on device bond11 [ 599.712178][T15448] macvlan2: entered promiscuous mode [ 599.712279][T15448] macvlan2: entered allmulticast mode [ 599.742828][T15448] bond11: entered promiscuous mode [ 599.755675][T15448] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 599.773890][T15448] bond11: left promiscuous mode [ 599.892769][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2385'. [ 600.149200][T15459] macsec1: entered promiscuous mode [ 600.149657][T15459] bridge0: entered promiscuous mode [ 600.152676][T15459] macsec1: entered allmulticast mode [ 600.170062][T15459] bridge0: port 2(macsec1) entered blocking state [ 600.171728][T15459] bridge0: port 2(macsec1) entered disabled state [ 600.192412][T15469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.252772][T15459] bridge0: left promiscuous mode [ 600.461996][T15475] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2389'. [ 601.540083][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2393'. [ 603.656294][T15543] netlink: 'syz.1.2405': attribute type 33 has an invalid length. [ 604.129138][T15484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.122437][ T5279] veth1_macvtap: entered promiscuous mode [ 605.923175][T15571] netlink: 'syz.2.2410': attribute type 2 has an invalid length. [ 606.860018][T15586] openvswitch: netlink: Message has 513 unknown bytes. [ 607.651546][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'. [ 607.752979][T15592] tipc: Resetting bearer [ 608.063858][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'. [ 608.549505][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2420'. [ 608.575897][T15615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2419'. [ 608.803018][T15626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2421'. [ 609.634454][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 610.674447][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 610.992542][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2427'. [ 611.385348][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 611.714447][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 611.829070][T15688] syzkaller0: entered promiscuous mode [ 611.829169][T15688] syzkaller0: entered allmulticast mode [ 612.373077][T15688] veth0: entered promiscuous mode [ 612.403300][T15687] veth0: left promiscuous mode [ 612.611926][T15706] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 612.754462][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 613.042204][T15719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.650342][T15729] syzkaller0: left promiscuous mode [ 613.650436][T15729] syzkaller0: left allmulticast mode [ 613.677752][T15723] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2436'. [ 613.794456][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 614.643979][T15749] syzkaller0: mtu less than device minimum [ 614.834542][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 615.061660][T15757] netlink: 'syz.1.2442': attribute type 30 has an invalid length. [ 615.390502][T15751] bond13: Removing last ns target with arp_interval on [ 615.572658][T15757] bond12: option arp_missed_max: invalid value (0) [ 615.572788][T15757] bond12: option arp_missed_max: allowed values 1 - 255 [ 615.648679][T15757] bond12 (unregistering): Released all slaves [ 615.874458][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 616.119293][T15751] syzkaller1: entered promiscuous mode [ 616.119414][T15751] syzkaller1: entered allmulticast mode [ 616.914459][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 617.867377][T15802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2450'. [ 617.900358][T15802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.078756][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 618.142304][T15808] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2453'. [ 618.341628][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'. [ 618.364980][T15807] block nbd0: Unsupported socket: should be TCP or UNIX. [ 618.582989][T15815] netlink: 'syz.4.2456': attribute type 15 has an invalid length. [ 619.154736][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 619.707387][T15837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2463'. [ 619.755660][T15821]  speed is unknown, defaulting to 1000 [ 620.194470][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 621.234630][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 622.274458][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 623.314614][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 624.354461][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 624.427703][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2477'. [ 624.450599][T15899] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 624.520263][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.882703][T15907] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2479'. [ 624.904414][T15907] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2479'. [ 624.906833][T15907] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2479'. [ 625.385333][T15911] Bluetooth: hci0: unsupported parameter 5161 [ 625.392695][T15911] Bluetooth: hci0: unsupported parameter 8192 [ 625.395069][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 625.413679][T15911] Bluetooth: hci0: unsupported parameter 5161 [ 625.413778][T15911] Bluetooth: hci0: unsupported parameter 8192 [ 626.434714][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 626.941622][T15940] netlink: 'syz.0.2485': attribute type 1 has an invalid length. [ 627.427637][T15944] veth13: entered allmulticast mode [ 627.454946][T15944] bond14: (slave veth13): Enslaving as an active interface with a down link [ 627.474620][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 627.570965][T15948] bond14: (slave veth0_to_bond): making interface the new active one [ 627.592458][T15948] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 627.662783][T15946] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 627.810439][T15950] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 628.066727][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2488'. [ 628.514465][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 629.298392][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 629.554657][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 630.105943][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2498'. [ 630.317102][T16004] FAULT_INJECTION: forcing a failure. [ 630.317102][T16004] name failslab, interval 1, probability 0, space 0, times 1 [ 630.363554][T16004] CPU: 0 UID: 0 PID: 16004 Comm: syz.1.2499 Not tainted syzkaller #0 PREEMPT(full) [ 630.363587][T16004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 630.363611][T16004] Call Trace: [ 630.363692][T16004] [ 630.363760][T16004] dump_stack_lvl+0xe8/0x150 [ 630.363908][T16004] should_fail_ex+0x410/0x560 [ 630.364015][T16004] should_failslab+0xa8/0x100 [ 630.364069][T16004] ? skb_clone+0x212/0x3a0 [ 630.364195][T16004] kmem_cache_alloc_noprof+0xa1/0x600 [ 630.364244][T16004] ? skb_clone+0x212/0x3a0 [ 630.364276][T16004] skb_clone+0x212/0x3a0 [ 630.364304][T16004] __netlink_deliver_tap+0x413/0x860 [ 630.364394][T16004] ? netlink_deliver_tap+0x2e/0x1b0 [ 630.364420][T16004] netlink_deliver_tap+0x19c/0x1b0 [ 630.364447][T16004] netlink_dump+0x95b/0xee0 [ 630.364484][T16004] ? __pfx_netlink_dump+0x10/0x10 [ 630.364522][T16004] ? genl_start+0x497/0x6d0 [ 630.364561][T16004] __netlink_dump_start+0x589/0x7b0 [ 630.364595][T16004] genl_family_rcv_msg_dumpit+0x213/0x310 [ 630.364634][T16004] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 630.364676][T16004] ? __pfx_genl_start+0x10/0x10 [ 630.364704][T16004] ? __pfx_genl_dumpit+0x10/0x10 [ 630.364733][T16004] ? __pfx_genl_done+0x10/0x10 [ 630.364770][T16004] ? bpf_lsm_capable+0x9/0x20 [ 630.364839][T16004] ? security_capable+0x7e/0x2c0 [ 630.365005][T16004] genl_rcv_msg+0x5e1/0x7a0 [ 630.365045][T16004] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.365077][T16004] ? __pfx_l2tp_nl_cmd_session_dump+0x10/0x10 [ 630.365168][T16004] ? irqentry_exit+0x218/0x910 [ 630.365251][T16004] netlink_rcv_skb+0x226/0x4a0 [ 630.365278][T16004] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.365312][T16004] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 630.365357][T16004] ? down_read+0x2be/0x330 [ 630.365426][T16004] genl_rcv+0x28/0x40 [ 630.365456][T16004] netlink_unicast+0x7bd/0x940 [ 630.365493][T16004] netlink_sendmsg+0x813/0xb40 [ 630.365531][T16004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.365567][T16004] ? apparmor_socket_sendmsg+0x98/0x360 [ 630.365628][T16004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.365653][T16004] sock_sendmsg_nosec+0x13a/0x180 [ 630.365743][T16004] ____sys_sendmsg+0x54e/0x850 [ 630.365774][T16004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.365815][T16004] ? import_iovec+0x73/0xa0 [ 630.365906][T16004] ___sys_sendmsg+0x2a5/0x360 [ 630.365929][T16004] ? __lock_acquire+0x6df/0x2e50 [ 630.365979][T16004] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.366045][T16004] ? __fget_files+0x2a/0x420 [ 630.366085][T16004] ? __fget_files+0x3a2/0x420 [ 630.366127][T16004] __x64_sys_sendmsg+0x1b1/0x290 [ 630.366155][T16004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.366203][T16004] do_syscall_64+0x166/0x520 [ 630.366259][T16004] ? trace_irq_disable+0x3b/0x140 [ 630.366298][T16004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.366343][T16004] ? clear_bhb_loop+0x70/0xc0 [ 630.366372][T16004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.366407][T16004] RIP: 0033:0x7fbb8619e159 [ 630.366443][T16004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.366464][T16004] RSP: 002b:00007fbb8709c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.366520][T16004] RAX: ffffffffffffffda RBX: 00007fbb86425fa0 RCX: 00007fbb8619e159 [ 630.366538][T16004] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 630.366553][T16004] RBP: 00007fbb8709c090 R08: 0000000000000000 R09: 0000000000000000 [ 630.366568][T16004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.366582][T16004] R13: 00007fbb86426038 R14: 00007fbb86425fa0 R15: 00007ffda3f92d98 [ 630.366621][T16004] [ 630.594667][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 630.757754][T16000] 8021q: adding VLAN 0 to HW filter on device bond12 [ 631.054146][T16003] bond12: entered promiscuous mode [ 631.054246][T16003] bond12: entered allmulticast mode [ 631.359339][T16005] macvlan2: entered promiscuous mode [ 631.360267][T16005] macvlan2: entered allmulticast mode [ 631.393975][T16005] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 631.551316][T16021] netlink: 'syz.3.2500': attribute type 24 has an invalid length. [ 631.634697][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 632.674957][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 633.201334][T16053] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 633.714782][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 634.375776][T16072] FAULT_INJECTION: forcing a failure. [ 634.375776][T16072] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 634.408335][T16072] CPU: 1 UID: 0 PID: 16072 Comm: syz.1.2512 Not tainted syzkaller #0 PREEMPT(full) [ 634.408368][T16072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.408382][T16072] Call Trace: [ 634.408391][T16072] [ 634.408401][T16072] dump_stack_lvl+0xe8/0x150 [ 634.408440][T16072] should_fail_ex+0x410/0x560 [ 634.408479][T16072] _copy_to_user+0x31/0xb0 [ 634.408504][T16072] simple_read_from_buffer+0xe1/0x170 [ 634.408546][T16072] proc_fail_nth_read+0x1bb/0x230 [ 634.408611][T16072] ? common_file_perm+0x20e/0x2b0 [ 634.408703][T16072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 634.408741][T16072] ? rw_verify_area+0x24a/0x4c0 [ 634.408782][T16072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 634.408815][T16072] vfs_read+0x213/0xa80 [ 634.408853][T16072] ? __pfx___mutex_lock+0x10/0x10 [ 634.408886][T16072] ? __pfx_vfs_read+0x10/0x10 [ 634.408919][T16072] ? __fget_files+0x2a/0x420 [ 634.408962][T16072] ? __fget_files+0x3a2/0x420 [ 634.408989][T16072] ? __fget_files+0x2a/0x420 [ 634.409028][T16072] ksys_read+0x150/0x270 [ 634.409071][T16072] ? __pfx_ksys_read+0x10/0x10 [ 634.409115][T16072] do_syscall_64+0x166/0x520 [ 634.409146][T16072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.409170][T16072] ? clear_bhb_loop+0x70/0xc0 [ 634.409199][T16072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.409222][T16072] RIP: 0033:0x7fbb8615e98e [ 634.409244][T16072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 634.409264][T16072] RSP: 002b:00007fbb8709bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 634.409289][T16072] RAX: ffffffffffffffda RBX: 00007fbb8709c6c0 RCX: 00007fbb8615e98e [ 634.409306][T16072] RDX: 000000000000000f RSI: 00007fbb8709c0a0 RDI: 0000000000000006 [ 634.409320][T16072] RBP: 00007fbb8709c090 R08: 0000000000000000 R09: 0000000000000000 [ 634.409335][T16072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 634.409348][T16072] R13: 00007fbb86426038 R14: 00007fbb86425fa0 R15: 00007ffda3f92d98 [ 634.409385][T16072] [ 634.754835][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 635.794732][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 636.834446][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 637.521718][T16124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2519'. [ 637.527327][T16119] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2521'. [ 637.874601][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 638.510776][T16135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2524'. [ 638.541907][T16134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2524'. [ 638.607505][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2524'. [ 638.914459][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 639.094078][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2525'. [ 639.163155][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 639.163200][T16147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2528'. [ 639.302106][T16152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2528'. [ 639.320157][T16152] netlink: 'syz.4.2528': attribute type 7 has an invalid length. [ 639.330625][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2528'. [ 639.954679][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 640.994450][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 641.675914][T16139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.034624][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 642.962042][T16199] set match dimension is over the limit! [ 643.074504][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 643.414449][T16204] netlink: 'syz.3.2538': attribute type 2 has an invalid length. [ 643.414999][T16204] __nla_validate_parse: 1 callbacks suppressed [ 643.415236][T16204] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2538'. [ 643.640513][T16209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 644.114597][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 645.154477][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 645.231246][T16233] netlink: 'syz.0.2548': attribute type 1 has an invalid length. [ 645.451205][T16237] netlink: 1320 bytes leftover after parsing attributes in process `syz.0.2551'. [ 645.968548][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2554'. [ 645.968971][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2554'. [ 646.194644][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 646.374075][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2555'. [ 646.731323][T16266] netlink: 'syz.0.2556': attribute type 1 has an invalid length. [ 646.796333][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2556'. [ 647.154095][T16266] 8021q: adding VLAN 0 to HW filter on device bond15 [ 647.234505][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 647.630103][T16271] bond15: (slave geneve3): making interface the new active one [ 647.734962][T16271] bond15: (slave geneve3): Enslaving as an active interface with an up link [ 648.124967][T16290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2559'. [ 648.274597][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 648.965745][T16302] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2564'. [ 649.126739][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 649.275833][T16312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2569'. [ 649.314479][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 649.420931][T16322] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2568'. [ 649.785947][T16312] bond8: entered promiscuous mode [ 649.797634][T16312] 8021q: adding VLAN 0 to HW filter on device bond8 [ 650.289887][T16326] 8021q: adding VLAN 0 to HW filter on device bond8 [ 650.310660][T16326] bond8: (slave sit1): The slave device specified does not support setting the MAC address [ 650.324615][T16326] bond8: (slave sit1): Error -95 calling set_mac_address [ 650.354665][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 651.269499][T16352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.343131][T12869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.343254][T12869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.394728][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 651.677466][T16358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.282677][T16376] netlink: 193 bytes leftover after parsing attributes in process `syz.0.2583'. [ 652.434611][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 652.843388][T16386] veth1_to_bond: entered allmulticast mode [ 652.943168][T16382] veth1_to_bond: left allmulticast mode [ 653.449170][T16394] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 653.474442][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 653.490278][T16395] netlink: 'syz.3.2591': attribute type 1 has an invalid length. [ 653.490373][T16395] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2591'. [ 653.490453][T16395] netlink: 'syz.3.2591': attribute type 2 has an invalid length. [ 653.490509][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2591'. [ 654.276344][T16405] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 654.276876][T16405] syzkaller1: linktype set to 823 [ 654.463786][T16419] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2596'. [ 654.494242][T16418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2596'. [ 654.515356][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 654.569455][T16419] netlink: 'syz.0.2596': attribute type 16 has an invalid length. [ 654.569556][T16419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2596'. [ 655.065419][T16429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2598'. [ 655.065579][T16429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2598'. [ 655.329737][T16432] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 655.554440][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 656.594600][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 656.782410][T16446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2603'. [ 656.782575][T16446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2603'. [ 657.543249][T16435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'. [ 657.634448][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 657.768046][T16421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 658.675141][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 659.715312][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 659.856804][T16477] sctp: [Deprecated]: syz.0.2607 (pid 16477) Use of int in maxseg socket option. [ 659.856804][T16477] Use struct sctp_assoc_value instead [ 659.992430][T16489] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2609'. [ 660.540064][T16497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2614'. [ 660.674610][T16501] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2613'. [ 660.754598][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 661.236102][T16509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.685391][T16510] 8021q: adding VLAN 0 to HW filter on device bond9 [ 661.794545][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 662.808064][T16529] tipc: New replicast peer: 172.20.20.187 [ 662.814503][T16529] tipc: Enabled bearer , priority 10 [ 662.834701][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 662.976489][T16532] netlink: 'syz.2.2621': attribute type 29 has an invalid length. [ 662.977126][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2621'. [ 663.711675][T16543] netlink: 'syz.1.2626': attribute type 17 has an invalid length. [ 663.727279][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2626'. [ 663.727438][T16543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2626'. [ 663.874492][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 663.883924][T16543] gretap0: entered promiscuous mode [ 663.897483][T16550] openvswitch: netlink: Multiple metadata blocks provided [ 663.949195][T16543] gretap0: left promiscuous mode [ 664.590474][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2631'. [ 664.914670][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 665.315083][T16566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2634'. [ 665.560476][T16581] ip6t_rt: unknown flags 36 [ 665.959137][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 666.069939][T16573] openvswitch: netlink: Invalid VLAN frame [ 666.074045][T16573] openvswitch: netlink: Invalid VLAN frame [ 666.131550][T16598] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2637'. [ 666.994735][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 668.034609][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 668.691160][T16621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2643'. [ 668.703083][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2643'. [ 668.703146][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 668.897473][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 669.076834][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 669.620361][T16640] netlink: 'syz.3.2647': attribute type 12 has an invalid length. [ 669.863643][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2648'. [ 670.114463][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 671.154626][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 671.996913][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 672.194477][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 672.352496][T16664] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2652'. [ 672.399505][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2652'. [ 672.403364][T16664] openvswitch: netlink: Message has 4 unknown bytes. [ 673.103696][T16670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2655'. [ 673.234853][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 673.471460][T16679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2657'. [ 673.489164][T16679] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2657'. [ 674.274529][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 674.824409][T16692] netlink: 'syz.2.2661': attribute type 1 has an invalid length. [ 675.273413][T16692] Bluetooth: MGMT ver 1.23 [ 675.296468][T16696] bond10: (slave gretap4): making interface the new active one [ 675.308627][T16696] bond10: (slave gretap4): Enslaving as an active interface with an up link [ 675.315517][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 675.488742][T16704] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 675.542829][T16707] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2666'. [ 676.067101][T16711] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2667'. [ 676.067233][T16711] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2667'. [ 676.154266][T16711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2667'. [ 676.354498][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 676.656516][T16717] veth0: entered promiscuous mode [ 676.664391][T16723] syzkaller0: left promiscuous mode [ 676.669703][T16723] syzkaller0: left allmulticast mode [ 676.694782][T16720] tipc: MTU too low for tipc bearer [ 676.768876][T16721] batadv_slave_1: entered promiscuous mode [ 676.778028][T16727] gre0: entered promiscuous mode [ 676.778117][T16727] gre0: entered allmulticast mode [ 677.253729][T16714] batadv_slave_1: left promiscuous mode [ 677.260278][T16714] veth0: left promiscuous mode [ 677.394885][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 678.096873][T16744] syzkaller0: entered promiscuous mode [ 678.096977][T16744] syzkaller0: entered allmulticast mode [ 678.297234][T16754] __nla_validate_parse: 1 callbacks suppressed [ 678.308267][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2679'. [ 678.435395][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 679.474589][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 680.514579][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 681.392226][T16798] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 681.554582][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 682.594561][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 683.634726][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 683.844514][T16837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2696'. [ 684.444222][T16846] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 684.674514][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 685.031052][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'. [ 685.714701][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 685.959985][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.615992][T16880] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 686.754549][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 687.200289][T16883] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 687.366398][T16883] team0: Device is already in use. [ 687.794586][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 687.936378][T16889] netlink: 'syz.1.2713': attribute type 1 has an invalid length. [ 688.322282][T16889] 8021q: adding VLAN 0 to HW filter on device bond12 [ 688.834526][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 689.726872][T16936] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2723'. [ 689.874772][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 690.447387][T16946] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2726'. [ 690.477221][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.477601][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.477952][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.478387][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.479231][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.758582][T16948] net_ratelimit: 9 callbacks suppressed [ 690.769129][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.799376][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.820322][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.832111][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.833187][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.834120][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.914429][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 690.951688][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.953726][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 690.954725][T16948] ip_tables: iptables: counters copy to user failed while replacing table [ 691.303035][T16949] bond11: option min_links: invalid value (18446744073709551614) [ 691.303106][T16949] bond11: option min_links: allowed values 0 - 2147483647 [ 691.379088][T16949] bond11 (unregistering): Released all slaves [ 692.751999][T16979] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 693.263928][T16988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2736'. [ 693.728230][T17002] x_tables: unsorted underflow at hook 3 [ 693.798754][T17003] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2739'. [ 693.812067][T17002] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2739'. [ 693.847313][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2739'. [ 693.847415][T17002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2739'. [ 694.034055][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2743'. [ 694.651225][T17028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2744'. [ 694.681541][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'. [ 695.233294][T17031] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 695.252527][T17031] batman_adv: batadv0: Adding interface: gretap5 [ 695.259914][T17031] batman_adv: batadv0: The MTU of interface gretap5 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.286345][T17031] batman_adv: batadv0: Interface activated: gretap5 [ 695.534828][T17041] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 696.114713][ C1] net_ratelimit: 46 callbacks suppressed [ 696.114774][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 696.229165][T17051] gretap0: entered promiscuous mode [ 696.237637][T17051] vlan2: entered promiscuous mode [ 696.983019][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2755'. [ 697.155401][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 697.356841][T17074] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2758'. [ 697.366848][T17071] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2756'. [ 698.091784][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2759'. [ 698.138240][T17084] bond11: entered promiscuous mode [ 698.194587][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 698.304000][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2759'. [ 698.470728][T17075] xt_CT: No such helper "netbios-ns" [ 698.907967][T17084] bond12: entered promiscuous mode [ 699.234506][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 699.979015][T17136] x_tables: duplicate underflow at hook 4 [ 700.275767][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 701.290035][T17148] syzkaller1: entered promiscuous mode [ 701.296372][T17148] syzkaller1: entered allmulticast mode [ 701.314508][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 701.935928][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2770'. [ 702.354688][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 703.395142][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 703.598652][T17191] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2779'. [ 703.608379][T17191] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2779'. [ 704.434688][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 705.444425][T17214] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 705.445034][T17214] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 705.474418][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 706.252771][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2787'. [ 706.514648][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 706.607478][T17207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.620156][T17207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.953858][T17207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 707.068760][T17207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 707.111322][T17207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 707.205272][T17207] 8021q: adding VLAN 0 to HW filter on device bond6 [ 707.238406][T17207] 8021q: adding VLAN 0 to HW filter on device bond7 [ 707.253372][T17207] 8021q: adding VLAN 0 to HW filter on device bond8 [ 707.262955][T17207] 8021q: adding VLAN 0 to HW filter on device bond9 [ 707.363994][T17207] 8021q: adding VLAN 0 to HW filter on device bond10 [ 707.554459][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 707.837021][T17207] 8021q: adding VLAN 0 to HW filter on device bond12 [ 707.874804][T17207] 8021q: adding VLAN 0 to HW filter on device bond13 [ 707.933136][T17207] 8021q: adding VLAN 0 to HW filter on device bond14 [ 708.168270][T17215] bridge0: left allmulticast mode [ 708.418779][T17215] 0·: left allmulticast mode [ 708.423859][T17215] hsr_slave_0: left allmulticast mode [ 708.492518][T17215] vlan0: left allmulticast mode [ 708.500425][T17215] veth0_vlan: left allmulticast mode [ 708.542671][T17243] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 708.594545][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 708.635211][T17243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2790'. [ 708.646680][T17215] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 708.682277][T17215] bond4: left allmulticast mode [ 708.747865][T17215] veth7: left allmulticast mode [ 708.813900][T17215] veth13: left allmulticast mode [ 708.864404][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2787'. [ 708.914069][T12856] bond14: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 709.504079][T17249] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2793'. [ 709.535798][T17250] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2793'. [ 709.637447][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 709.746508][T17254] netlink: 13340 bytes leftover after parsing attributes in process `syz.2.2791'. [ 710.677517][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 711.102094][T17272] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2799'. [ 711.412079][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2801'. [ 711.444689][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2801'. [ 711.714721][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 712.643508][T17308] Bluetooth: ISO socket layer initialized [ 712.754584][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 713.794431][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 714.651271][T17323] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 714.651863][T17323] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 714.834582][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 715.028011][T17332] syzkaller1: entered promiscuous mode [ 715.028645][T17332] syzkaller1: entered allmulticast mode [ 715.066905][T17334] openvswitch: netlink: Missing key (keys=40, expected=100) [ 715.083913][T17332] openvswitch: netlink: Missing key (keys=40, expected=100) [ 715.606164][T17351] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2817'. [ 715.874500][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 716.153427][T17345] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 716.840298][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2820'. [ 716.914908][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 717.005044][T17350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 717.013159][T17350] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 717.468312][T17350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 717.468416][T17350] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 717.609687][T17350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 717.609816][T17350] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 717.738713][T17350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 717.739050][T17350] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 717.954441][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 718.756700][T17381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2825'. [ 718.994755][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 719.131404][T17350] bridge0: port 3(wlan0) entered disabled state [ 719.965126][T17401] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2830'. [ 720.034501][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 720.703504][T17390] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.074661][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 721.615561][T17411] syzkaller0: entered promiscuous mode [ 721.615698][T17411] syzkaller0: entered allmulticast mode [ 722.076416][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2835'. [ 722.114418][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 723.129967][T17448] netlink: 'syz.4.2841': attribute type 1 has an invalid length. [ 723.154854][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 723.222948][T17442] netlink: 'syz.1.2838': attribute type 17 has an invalid length. [ 723.223043][T17442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2838'. [ 723.223170][T17442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2838'. [ 723.470570][T17442] erspan0: entered promiscuous mode [ 723.497050][T17453] x_tables: duplicate underflow at hook 2 [ 723.553261][T17442] erspan0: left promiscuous mode [ 723.839399][T17457] xt_hashlimit: size too large, truncated to 1048576 [ 724.194466][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 724.599598][T17461] xt_CT: No such helper "snmp_trap" [ 725.234547][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 725.651624][T17474] netlink: 'syz.0.2846': attribute type 2 has an invalid length. [ 725.651723][T17474] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2846'. [ 725.711085][T17474] netlink: 'syz.0.2846': attribute type 2 has an invalid length. [ 726.274434][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 727.130953][T17489] syzkaller0: entered promiscuous mode [ 727.132245][T17489] syzkaller0: entered allmulticast mode [ 727.314745][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 728.174203][T17499] bridge0: port 3(veth1_to_bridge) entered blocking state [ 728.180203][T17499] bridge0: port 3(veth1_to_bridge) entered disabled state [ 728.180634][T17499] veth1_to_bridge: entered allmulticast mode [ 728.354406][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 728.424239][T17499] veth1_to_bridge: entered promiscuous mode [ 728.498318][T17504] netlink: 'syz.4.2855': attribute type 1 has an invalid length. [ 729.263096][T17519] bridge2: entered promiscuous mode [ 729.307001][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2859'. [ 729.394644][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 729.440038][T17519] bond13: (slave bridge2): making interface the new active one [ 729.489066][T17519] bond13: (slave bridge2): Enslaving as an active interface with an up link [ 729.805645][T17510] bridge3: entered promiscuous mode [ 729.869641][T17510] bond13: (slave bridge3): Enslaving as a backup interface with an up link [ 729.987025][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2863'. [ 729.988360][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2863'. [ 730.083888][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2863'. [ 730.098130][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2863'. [ 730.098691][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2863'. [ 730.160969][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2863'. [ 730.161492][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2863'. [ 730.161973][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2863'. [ 730.162442][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2863'. [ 730.434435][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 731.081804][T17557] bond15: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 731.128458][T17560] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 731.214447][T17557] bond15 (unregistering): Released all slaves [ 731.476892][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 732.514525][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 732.649666][T17583] netlink: 'syz.3.2871': attribute type 13 has an invalid length. [ 733.208108][T17583] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.208323][T17583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.554764][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 734.594989][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 734.901691][T17606] __nla_validate_parse: 16 callbacks suppressed [ 734.902328][T17606] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2878'. [ 734.990357][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2880'. [ 735.634558][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 735.866728][T17629] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2884'. [ 736.172885][T17637] netlink: 'syz.2.2885': attribute type 23 has an invalid length. [ 736.674414][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 737.555670][T17614] ªªªªª»: renamed from dummy0 (while UP) [ 737.706145][T17643] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 737.715292][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 738.392657][T17665] smc: net device lo erased user defined pnetid SYZ0 [ 738.412649][T17665] smc: smcd device lo erased user defined pnetid SYZ0 [ 738.622465][T17665] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2891'. [ 738.754428][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 739.249563][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'. [ 739.283681][T17679] IPVS: set_ctl: invalid protocol: 640 0.32.0.0:29696 [ 739.323153][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'. [ 739.794542][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 740.194269][T17700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2899'. [ 740.311809][T17701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2899'. [ 740.710075][T17706] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 740.834531][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 741.598677][T17720] bond15: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 741.761353][T17720] bond15 (unregistering): Released all slaves [ 741.874548][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 742.601086][T17742] bridge0: port 1(vlan2) entered blocking state [ 742.623234][T17742] bridge0: port 1(vlan2) entered disabled state [ 742.623722][T17742] vlan2: entered allmulticast mode [ 742.623815][T17742] geneve0: entered allmulticast mode [ 742.633614][T17742] vlan2: entered promiscuous mode [ 742.633634][T17742] geneve0: entered promiscuous mode [ 742.914739][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 742.992444][T17755] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2907'. [ 743.035339][T17751] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2907'. [ 743.313326][T17758] x_tables: duplicate underflow at hook 2 [ 743.840375][T17769] netlink: 'syz.0.2911': attribute type 1 has an invalid length. [ 743.864723][T17766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 743.925134][T17769] erspan2: entered allmulticast mode [ 743.954567][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 744.287211][T17781] ip_tables: iptables: counters copy to user failed while replacing table [ 744.728216][T17770] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2914'. [ 744.994428][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 745.144396][T17786] tipc: Enabling of bearer rejected, already enabled [ 745.308194][T15578] block nbd2: Receive control failed (result -32) [ 745.317597][ T5616] block nbd1: Receive control failed (result -32) [ 745.973412][T17796]  speed is unknown, defaulting to 1000 [ 746.034692][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 747.074404][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 747.405640][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.114755][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 748.580280][T17863] netlink: 'syz.0.2936': attribute type 1 has an invalid length. [ 748.935979][T17863] bond16: entered promiscuous mode [ 748.944933][T17863] 8021q: adding VLAN 0 to HW filter on device bond16 [ 749.083759][T17863] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 749.154398][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 749.308528][T17886] netlink: 'syz.1.2937': attribute type 83 has an invalid length. [ 749.403364][T17877] 8021q: adding VLAN 0 to HW filter on device bond16 [ 749.425612][T17877] bond16: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 749.451858][T17877] bond16: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 749.567726][T17888] xt_hashlimit: size too large, truncated to 1048576 [ 749.577832][T17877] bond16: (slave ip6gre1): making interface the new active one [ 749.578480][T17877] ip6gre1: entered promiscuous mode [ 749.612011][T17877] bond16: (slave ip6gre1): Enslaving as an active interface with an up link [ 750.194541][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 750.970929][T17894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2941'. [ 751.234508][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 751.521069][T17901] syzkaller0: Caught tx_queue_len zero misconfig [ 752.215130][T17928] syzkaller0: left promiscuous mode [ 752.274694][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 752.334254][T17921] tipc: Enabled bearer , priority 0 [ 752.462283][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2949'. [ 752.473528][T17921] syzkaller0: mtu less than device minimum [ 753.314425][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 754.354632][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 754.469915][T17964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2957'. [ 755.313945][T15578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 755.342276][T15578] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 755.361622][T15578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 755.388130][T15578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 755.394659][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 755.401974][T15578] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 755.501211][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 755.514708][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 755.527755][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 755.541488][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 755.574468][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 756.434559][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 756.483794][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'. [ 756.795665][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'. [ 756.908872][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077c1e000: rx timeout, send abort [ 757.004069][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'. [ 757.235184][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'. [ 757.474512][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 757.553866][T18005] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 757.718752][ T5616] Bluetooth: hci5: command tx timeout [ 758.252106][T18020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2970'. [ 758.252240][T18020] netlink: 'syz.1.2970': attribute type 7 has an invalid length. [ 758.252339][T18020] netlink: 'syz.1.2970': attribute type 8 has an invalid length. [ 758.252395][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2970'. [ 758.265825][T12872] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.265925][T12872] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.428394][T18027] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2970'. [ 758.514576][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 758.544393][T18022] netlink: 'syz.2.2971': attribute type 1 has an invalid length. [ 759.240061][T12872] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.274026][T12872] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.347479][T18039] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2975'. [ 759.554439][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 759.639969][T12872] bond0: (slave netdevsim1): Releasing backup interface [ 759.651085][T12872] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 759.794687][ T5616] Bluetooth: hci5: command tx timeout [ 759.842631][T12872] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.843347][T12872] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.308819][T12872] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.308922][T12872] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.594551][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 761.136769][T17973]  speed is unknown, defaulting to 1000 [ 761.634508][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 761.875840][ T5616] Bluetooth: hci5: command tx timeout [ 762.342692][T18083] bond0: option ad_select: unable to set because the bond device is up [ 762.674574][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 763.714397][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 763.957774][ T5616] Bluetooth: hci5: command tx timeout [ 764.263777][T18101] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2989'. [ 764.522287][T12876] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.522556][T12876] bridge0: port 2(bridge_slave_1) entered listening state [ 764.566164][T12876] bridge0: port 3(veth1_to_bridge) entered blocking state [ 764.566452][T12876] bridge0: port 3(veth1_to_bridge) entered listening state [ 764.754617][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 764.996714][ C1] bridge0: port 3(veth1_to_bridge) entered blocking state [ 765.130743][T18096] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.794399][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 766.458652][T12872] vlan4: left allmulticast mode [ 766.458996][T12872] geneve0: left allmulticast mode [ 766.529846][T12872] vlan4: left promiscuous mode [ 766.753516][T12872] geneve0: left promiscuous mode [ 766.762399][T12872] bridge0: port 1(vlan4) entered disabled state [ 766.834549][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 767.875351][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 768.914562][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 769.366521][T12872] batman_adv: batadv0: Interface deactivated: gretap5 [ 769.954397][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 770.994636][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 772.034413][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 773.074529][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 774.114423][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 775.154535][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 776.194433][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 777.234524][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 778.274401][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 779.314556][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 780.354400][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 781.394547][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 781.828083][T18153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2996'. [ 782.434387][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 783.474540][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 784.514524][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 785.554546][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 786.594399][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 787.634548][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 788.674388][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 789.443445][T15578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 789.498553][T15578] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 789.508054][T15578] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 789.533043][T15578] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 789.544272][T15578] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 789.714542][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 790.754388][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 791.714601][T15578] Bluetooth: hci2: command tx timeout [ 791.794546][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 792.344216][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 792.377120][ T5616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 792.388514][ T5616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 792.399630][ T5616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 792.455887][ T5616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 792.834611][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 793.817298][ T5616] Bluetooth: hci2: command tx timeout [ 793.874540][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 794.524927][ T5616] Bluetooth: hci6: command tx timeout [ 794.612137][T15578] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 794.623856][T15578] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 794.633708][T15578] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 794.725417][T15578] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 794.745137][T15578] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 794.760317][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 794.914380][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 795.954547][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 796.221807][T15578] Bluetooth: hci2: command tx timeout [ 796.598324][ T5616] Bluetooth: hci6: command tx timeout [ 796.836364][ T5616] Bluetooth: hci7: command tx timeout [ 796.994400][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 798.034609][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 798.289249][ T5616] Bluetooth: hci2: command tx timeout [ 798.714913][ T5616] Bluetooth: hci6: command tx timeout [ 798.955001][ T5616] Bluetooth: hci7: command tx timeout [ 799.074380][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 800.114709][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 800.756020][ T5616] Bluetooth: hci6: command tx timeout [ 800.995854][ T5616] Bluetooth: hci7: command tx timeout [ 801.154792][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 802.194528][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 803.134445][ T5616] Bluetooth: hci7: command tx timeout [ 803.234403][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 803.895841][T15578] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 803.908458][T15578] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 803.917388][T15578] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 804.035871][T15578] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 804.052749][T15578] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 804.274524][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 804.357892][ C0] sched: DL replenish lagged too much [ 805.314386][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 806.130261][ T5616] Bluetooth: hci8: command tx timeout [ 806.354521][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 807.394428][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 808.195016][ T5616] Bluetooth: hci8: command tx timeout [ 808.434527][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 808.818075][T12872] gretap0 (unregistering): left promiscuous mode [ 808.840863][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.474447][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 810.454712][ T5616] Bluetooth: hci8: command tx timeout [ 810.514544][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 811.554380][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 811.922516][T12872] bond5 (unregistering): (slave gretap2): Releasing backup interface [ 812.514943][ T5616] Bluetooth: hci8: command tx timeout [ 812.594541][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 813.634388][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 814.285789][T12872] bond7 (unregistering): (slave gretap4): Releasing active interface [ 814.674545][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 815.609254][T12872] batman_adv: batadv0: Removing interface: gretap5 [ 815.714397][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 816.754535][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 817.794439][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 818.834615][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 819.874368][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 820.914598][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 821.954499][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 822.135409][T12872] bond1 (unregistering): (slave geneve2): Releasing active interface [ 822.994764][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 824.035594][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 824.844849][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.846616][ C0] bridge0: topology change detected, propagating [ 824.846958][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.847154][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.847375][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.847590][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.847825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.847927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 825.924416][ C0] net_ratelimit: 5430 callbacks suppressed [ 825.924478][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 825.924478][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.924741][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.925040][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.925301][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 825.925312][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.925567][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.925832][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.925988][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.926089][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.934342][ C1] net_ratelimit: 26984 callbacks suppressed [ 830.934391][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.934408][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 830.934662][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.934966][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.935254][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.935256][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 830.935517][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.935781][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.936042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.936045][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.944392][ C1] net_ratelimit: 27285 callbacks suppressed [ 835.944448][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.944690][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.944809][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.944996][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.945236][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.945430][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 835.945487][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.945767][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.946016][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.946217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 840.954411][ C1] net_ratelimit: 27341 callbacks suppressed [ 840.954477][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.954877][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.954930][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.955240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.955540][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.955757][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 840.956008][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.956325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.956623][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.956771][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 845.964388][ C1] net_ratelimit: 25764 callbacks suppressed [ 845.964450][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.964719][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.964984][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.964984][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 845.965296][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.965567][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.965760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.965829][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.966091][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.966361][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.974381][ C0] net_ratelimit: 27929 callbacks suppressed [ 850.974462][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 850.974461][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.974726][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.975025][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.975126][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 850.975288][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.975548][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.975754][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.975851][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.976120][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.984444][ C1] net_ratelimit: 27173 callbacks suppressed [ 855.984495][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.984518][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 855.984762][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.985092][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.985277][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.985356][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.985618][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.985808][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 855.985880][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.986149][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.994538][ C1] net_ratelimit: 27586 callbacks suppressed [ 860.994587][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.994854][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.994903][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.995116][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.995377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.995492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 860.995647][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.995910][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.996172][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.996276][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 866.004470][ C1] net_ratelimit: 27118 callbacks suppressed [ 866.004528][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.004746][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.004804][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.005065][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.005281][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 866.005373][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.005635][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.005897][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.006007][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 866.006166][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.014376][ C1] net_ratelimit: 27803 callbacks suppressed [ 871.014435][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.014676][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 871.014681][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.014921][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.015171][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.015389][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 871.015413][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.015711][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.015956][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.016048][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.035892][ C1] net_ratelimit: 25404 callbacks suppressed [ 876.035924][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 877.078972][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 878.119499][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 879.157381][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 880.194689][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 881.239506][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 882.279317][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 883.315159][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 884.359808][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 885.400829][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 886.438507][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 886.770163][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 887.478710][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 888.514358][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 889.559961][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 890.079752][T15578] Bluetooth: hci5: command 0x0406 tx timeout [ 890.602322][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 891.639399][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 892.680160][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 893.722238][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 894.760481][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 895.800767][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 896.837192][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 897.880481][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 898.919476][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 899.962375][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 900.995733][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 902.037899][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 903.077578][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 904.117659][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 905.156094][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 906.198603][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 907.237386][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 908.276648][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 909.315873][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 910.361706][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 911.394411][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 912.435201][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 913.478198][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 914.516188][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 915.559464][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 916.601241][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 917.644399][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 918.679413][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 919.716110][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 920.761919][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 921.800630][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 922.122895][T15578] Bluetooth: hci2: command tx timeout [ 922.840804][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 923.880372][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 924.208096][T15578] Bluetooth: hci6: command 0x0406 tx timeout [ 924.216954][T15578] Bluetooth: hci7: command tx timeout [ 924.918381][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 925.954336][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 927.001144][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 928.040404][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 929.077347][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 930.115717][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 931.157164][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 932.200445][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 933.238378][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 933.424668][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.740155][ T5616] Bluetooth: hci8: command tx timeout [ 934.276486][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 935.319578][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 936.359076][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 937.394507][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 938.434665][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 939.480211][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 940.515489][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 941.561736][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 942.596025][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 942.868171][ T32] INFO: task dhcpcd:5279 blocked for more than 148 seconds. [ 942.876186][ T32] Not tainted syzkaller #0 [ 942.884434][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 942.892367][ T32] task:dhcpcd state:D stack:21384 pid:5279 tgid:5279 ppid:5278 task_flags:0x400140 flags:0x00080000 [ 942.908699][ T32] Call Trace: [ 942.917465][ T32] [ 942.929136][ T32] __schedule+0x17d4/0x5820 [ 942.937468][ T32] ? __pfx___schedule+0x10/0x10 [ 942.946085][ T32] ? schedule+0x90/0x2b0 [ 942.954624][ T32] schedule+0x164/0x2b0 [ 942.971583][ T32] schedule_preempt_disabled+0x13/0x30 [ 942.980373][ T32] __mutex_lock+0x7c1/0x1550 [ 942.988871][ T32] ? __mutex_lock+0x5d4/0x1550 [ 943.638254][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 944.681436][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 944.810490][ T32] ? devinet_ioctl+0x2fb/0x1c50 [ 944.820062][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 944.829812][ T32] ? bpf_lsm_capable+0x9/0x20 [ 944.839372][ T32] ? security_capable+0x7e/0x2c0 [ 944.849214][ T32] devinet_ioctl+0x2fb/0x1c50 [ 944.859143][ T32] ? __pfx_devinet_ioctl+0x10/0x10 [ 944.868278][ T32] ? get_user_ifreq+0x12b/0x180 [ 944.877809][ T32] inet_ioctl+0x42a/0x560 [ 944.887696][ T32] ? __pfx_inet_ioctl+0x10/0x10 [ 944.897192][ T32] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 944.906653][ T32] sock_do_ioctl+0x101/0x320 [ 944.916541][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 944.926012][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 944.935659][ T32] sock_ioctl+0x57a/0x7e0 [ 944.945492][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 944.955063][ T32] ? fd_install+0x94/0x3d0 [ 944.964454][ T32] ? fd_install+0x309/0x3d0 [ 944.974364][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 944.993235][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 945.002839][ T32] __se_sys_ioctl+0xfc/0x170 [ 945.016265][ T32] do_syscall_64+0x166/0x520 [ 945.025754][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.035280][ T32] ? clear_bhb_loop+0x70/0xc0 [ 945.045132][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.054574][ T32] RIP: 0033:0x7fc37f6fd378 [ 945.064254][ T32] RSP: 002b:00007ffd928f24a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.093501][ T32] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00007fc37f6fd378 [ 945.720317][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 946.758723][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 947.797914][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 948.774619][ T32] RDX: 00007ffd929026a0 RSI: 0000000000008914 RDI: 0000000000000018 [ 948.774645][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 948.774660][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd92912840 [ 948.774676][ T32] R13: 00007fc37f5fd708 R14: 0000000000000028 R15: 0000000000008914 [ 948.774725][ T32] [ 948.774765][ T32] INFO: task kworker/1:6:5728 blocked for more than 175 seconds. [ 948.774782][ T32] Not tainted syzkaller #0 [ 948.774793][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 948.774804][ T32] task:kworker/1:6 state:D stack:23816 pid:5728 tgid:5728 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 948.774867][ T32] Workqueue: events netdev_work_proc [ 948.775004][ T32] Call Trace: [ 948.775013][ T32] [ 948.775026][ T32] __schedule+0x17d4/0x5820 [ 948.775087][ T32] ? __pfx___schedule+0x10/0x10 [ 948.775126][ T32] ? schedule+0x90/0x2b0 [ 948.775156][ T32] schedule+0x164/0x2b0 [ 948.775186][ T32] schedule_preempt_disabled+0x13/0x30 [ 948.775231][ T32] __mutex_lock+0x7c1/0x1550 [ 948.775269][ T32] ? __mutex_lock+0x5d4/0x1550 [ 948.775305][ T32] ? netdev_work_proc+0x6f/0x770 [ 948.775333][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 948.775375][ T32] ? do_raw_spin_lock+0x12b/0x2f0