last executing test programs: 8.929586262s ago: executing program 2 (id=2367): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@arena={0x21, 0x0, 0x0, 0x3c, 0x20400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000300)=""/168, 0xa8, 0x0, &(0x7f00000003c0)=""/99, 0x63}}, 0x10) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x74fc}, {}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0xb, 0x2e, &(0x7f00000005c0)=""/46, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0x3, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0xffffffffffffffff, 0x1], &(0x7f0000000680)=[{0x5, 0x4, 0xf, 0xc}, {0x1, 0x5, 0x2, 0xb}], 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x12, &(0x7f0000000140)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb47, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x10, 0x80000001, 0xca40}, 0x10, r3, r4, 0x1, 0x0, &(0x7f0000000780)=[{0x0, 0x4, 0xf, 0xb}], 0x10, 0xe}, 0x94) (async) syz_emit_ethernet(0x56, &(0x7f0000000880)={@random="adf43c9f28ef", @local, @void, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0x26, 0x2, 0x0, 0x0, "a80f66b582f2c49cbdd6e1d3e35445f22c38874322a02232636b3f374216e8b24e675e466321bbe58c729786936bb52dbe2032e20b2767ca5f7373e9addbeec7"}}}}, &(0x7f0000000900)={0x0, 0x2, [0x741, 0x5f2, 0x489, 0x5fa]}) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000940)="ae58ce6e8f9dde8bc90556f7d28c22f832fcc15e768436a5d2efdd46e932954d6dbc145edd64637f914526af4c282bf332124d29bb706dd399c33e59f3fbc138a45ee926661386febea6703104845e0588874bc835482774d6a22b6290ccd7fc85db574bad4706637af88b067848960b941702fde2eb4679da7089e0b17848b2d7f9e0ca01598c", 0x87) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a00)={'wlan1\x00'}) (async) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000c00)={'filter\x00', 0x0, 0x3, 0xcb, [0x100000001, 0x8, 0x6, 0x7fffffff, 0x2, 0xd6], 0x9, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000b00)=""/203}, &(0x7f0000000c80)=0x78) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x10000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000d00)={'bridge_slave_0\x00', 0x200}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000d40)={0x0, 'bond_slave_1\x00', 0x3}, 0x18) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r8, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x280c}, 0x40881) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000ec0)={0x1, 0xffffffffffffffff}, &(0x7f0000000f00)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000f40)={0x1, 0xb2ec, 0x201, 0x7, 0x63, 0x8, 0x3, 0x1ff, 0x0}, &(0x7f0000000f80)=0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000fc0)={r10, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x6}}}, 0x84) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r11, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x20, r12, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000011c0)={r10, 0xe, "e98e9e4022b64fbdbbf6856f11e2"}, &(0x7f0000001200)=0x16) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r11, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000001340)={0x0, 0xfffffffe}, 0x8) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001380)={r2, 0x1, 0x6, @local}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r6, 0x84, 0x7a, &(0x7f00000013c0)={r10, 0xffffffffffffffff, 0x800}, &(0x7f0000001400)=0xc) ioctl$sock_inet_sctp_SIOCINQ(r13, 0x541b, &(0x7f0000001440)) (async) syz_emit_ethernet(0x45, &(0x7f0000001480)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x5, 0x1}}, {@arp={0x806, @generic={0x8, 0x8847, 0x6, 0xb, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "6a24848b6a8bbc183b8ed3", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "93d0a490f6791bdea5861cb95bf57157"}}}}, &(0x7f0000001500)={0x1, 0x4, [0x3b6, 0xc3, 0x36, 0x3c6]}) 6.49240605s ago: executing program 1 (id=2402): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002d40)={0x0}, &(0x7f0000002d80)=0xc) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, &(0x7f0000002e00)=0xc) r7 = gettid() (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002e40)={0x0, 0x0, 0x0}, &(0x7f0000002e80)=0xc) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002ec0)={0xffffffffffffffff, 0x7, 0x10}, 0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002f00), &(0x7f0000002f40)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002f80), &(0x7f0000002fc0)=0xc) (async) r10 = socket$kcm(0x29, 0x5, 0x0) (async) r11 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003940)={0x0, 0x0}, &(0x7f0000003980)=0xc) (async) r13 = getgid() sendmmsg$unix(r0, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)="d5295bd3524bf8b8ba21b369e66ea98b2b551fbc706f34894ee391caefbe2076e7710d4301bceba43d1d470222e9597836daa22e388a07d7f99daad7f5e689f779465f42478c410c22fc2319408dc9b26151bc976b695118e5662d918fd86e3f31e3e781e767dfb259729f4fdc5b123eee937de25e72bbe3d8", 0x79}, {&(0x7f0000000700)="41d903bb4ed00023de82df67a17811ab9c2236a26434900556206382521cd57509e45a35782655c7b084f5432cb1514ba22561dd2d2d7c572817298c8cabe49116462b078ae162c7782acb065c3aec146a59edc0ad7e3edefe130965d4ec9508969736e06ee5638a957c49e67a4bed83aca84daee7abf6dd0ce52e68df41b6d0bebe255bb82ac792cd9b537be31569ad22c7faff06dc0e0bb925db622d6fb13aa5ec5b4385b9c83f20a50e34d3ddff2058c55e99ea77f714da257707b847fd463b4ba4c976c6ec546ae70aa80d94e7c6f261a51123500fd09b027c58ba6f437581c37269bc503f090479", 0xea}, {&(0x7f0000000800)="5cb3dea2fad52a058cc2aded25ece13819cd728f30bb2a0cd5a2861ba56677f913c91b2f97dc42f7bde04623fe24d2ed0b42b54282431a6e", 0x38}], 0x3, &(0x7f0000000fc0)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r1, r1]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [r3, r1, r3, r3]}}], 0xe0, 0x40000}}, {{&(0x7f00000010c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001140)="de8531052d219b068b06422bb5e70ae123cd209ac1fb21d2d25cc675956fd661069292a72ca7d8f311a5123d64a7fe4b578ed2edabc01eb56f752d2b71958f", 0x3f}, {&(0x7f0000001180)="02300891fc41d9d7f6b710b47d1ab67515939b64e3a1dc57edbe8e3563d6353c3d6a06171407c4c6bd9f5fa586e3ad32dd1f8510f2822abb55da113af79e7b824d4dd64c2be2d18d144a731b1ddcfdb96bb1878166b9d2411dd6135ba42d385398243647402d582e6b2cc59fe44ec93d47129b2ee990e7a95e021afb02b1a0c71fa715a2ac696e437fdc4f89315b7943e2e53cc72d2b00099554d3aa8c3f6c1f8acc96fd02461ebfb6ef7f8e13573797c4ec1ae54656fa5d0c62f5836303a66888c2230b3a9c7a4814a3307f8361cfea56aae5e38295b699", 0xd8}, {&(0x7f0000001280)}, {&(0x7f00000012c0)="91fc90cb352cf2353e9c1c14ac946b9ff00ae2b5d94260751cb44ffbbb4ea351e9033f52a4a7575659dc26bb3d37541c8205bd71da59c8cd9a01e27ab9a4d6b3b2ba1cf3b97e65d4f401d7c6a4200a8b04bb9c6e9087a915928caa70f6801fa0ef0a9e615410f294f2ad0cd3202a6cef977da8561ed08ef14bd8e5e61e66a47b6d430e46c2b9879fb34b1fdca6e1cd5a9ac3479b5e01154930c9e60c", 0x9c}, {&(0x7f0000000880)="2ae7fce958ad60e6c6947836a1ef06a9c53abb9e65ccbf859587f668d957a4b31e00e5189632ea187f1b2b17a5dfaf7d7809e3a12d6217a8af02c23cfe717e480cfb4183ae8ed34261a1eff5f8fa12412f4506866c73424488803601ece2ea1a4bb001f17bb791be524c22624a49c66b6e4555c46688f440582313f6fd2eab76de9fd7db581b9983f5527c3332d7a223519cddd07c616cab6edfe99f6b427b7632a2b40aeb93755f54", 0xa9}, {&(0x7f0000001440)="9862c486f980d355deeeda503831bb776c357b81111e9663c916687abbbba4ca0e18f4cc762fc1f7492173c561", 0x2d}], 0x6, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001500)="1a1267c9428ff69b9c805bf082d7a9aba55a64f7a009ae120ab70397d72d4db37309d910ee6946b25036575dc41c6f68a0e31181e95248dbe7a42548870875b2f7a257229b40dcf57581b0d86b97a01898a3ebc138012a0083dcb6cba108d875a34500de6eef019e56cc114a42531fdc7764290bfff10ff4fdc4e1f764ad9b0e1facb2cbff1350751345948e92e62d43e5bcbf5be27635f5d505d78dcf225b638a3b5e18da02768c4202ae7563c4f63d62ef7e535ede28b53ba6caba259ff4889c0926b6f38ccfeac5dc461df85ff0cf160b15edb5ca9b3b536118f6109f8a0ae1108fd54ed02300", 0xe8}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="b6605acc41225701dcca5a035d64fd5690649e937c34d5ec5757ef77402f2935f8a7d212a1caef13652bd1b5ceb5ed54103188a26cda41a5ad2c25154b64129103d88aeb20bf78d4a0b9c5ac29fa73a5a9ad116f4de4e2aba1feb516689f7f92131f37a36b0d2e736c7a7fad37d38e91ba46408e8054c99e9a591ba6a09a09cc658b6e5343b7d1489d3404465495a2d3238d592a373c901244d8ac1a7d7bb7ecf481f9e5e390bd2a429360e27fefde754451a2dafb13c0df494b247fe14706be11c0ae50d2147a3dc35bc116de6e682c608ed6a4a8bf", 0xd6}, {&(0x7f0000002700)="45bb5dc21b9ff9e9270c9e1621abe1e59d95251d7aa7b119ee4e906ba6b253eb07ce61aa7fdfa667ff90aedb4c84e1d3f0af187033df51151351cf3bfe030f4ad80b5802daeec4c5b0d02c5eb583ca22", 0x50}, {&(0x7f0000002780)="c126e87ce5bd08fbaaf80f4dfe6f10052af711c64ed20ec6ae8708b3a911cd4a0d6e3cbb0832a6b535fa334780a9a10c50031c05af09e07b5fca66295c60d170656fd19ba7658271d6927f4a201334433c6146a7085660b135281c0a832517b73c2c8b0837d1ed4373a2d3d500b7", 0x6e}, {&(0x7f0000002800)="19ddef50aa2a8e7f90e15a5ef7031fd04d1bc9cf7b62af148cda327c9c2bb72d37b45de5158532514e17d25dee87d6e1d53073ede0530f81648e30e52aabbcc443652e057818e4fc0c59746afd", 0x4d}, {&(0x7f0000002880)="415a6955b089c767a81b835408e99b3a99801ff0278f54b7fda880ba144b3982d6e495a39a76e09a0a1d4b95664b95d0a467942dc4ca89077e77e7416458787fda941c3c82b1bee8fb74723b7eb80f150d13de05490704477c2dd1e4eb0b1f6d27c4bb1d541e5c262de3cdc538dda468b344f31b63ffe7d78dfc0f11dbadfe714e5aad6a", 0x84}, {&(0x7f0000002940)="b035b6bd814bd8119f8ea4ca437a77243cc6a6e575f2c903f829b657d891f9cd8c76cdc936a83b621c4fbdbd0e02eb777351fe7424cb10e5f89d62197772623c8358140e6cbf50e02fe8071fcebd43ff46acfc49628bbcc96f000000", 0x5c}], 0x8, &(0x7f0000003000)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, r1, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, r8}}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r9, 0xffffffffffffffff, r2]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r10, r0, r2, r2, r3, r1, r0]}}], 0x170, 0x800}}, {{&(0x7f0000003180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003880)=[{&(0x7f0000003200)="5c198b764242254e9563da1245fd3a64431169c14d9ea5fd32f2f66ee412aa67e08bfe2e6c70aa2ce464b4de00440b69d4f406fcd10c9b80dcbf6fbd87f0dc99047e0f6fcfe79bc2b2daf3098e9238d8391904630e2cee6b299bca0fe20ca75fc6c4c9e0bfa725bee23ced3d2393fe494c54917ca857d272c566864c7f7cbbd95c71021b091111dae34cafc7a1f46d", 0x8f}, {&(0x7f00000032c0)}, {&(0x7f0000003300)="e9707fceeef55072477186cb1a13a63b76ee410a9cc84765a1a75eb8726dacb232904e7db2b248249777e03e22333f508d8fd89ed4d295dbe4ba7578d9d9e6f3c2870e10d6b9d89be9a49434963713ce85b3a6dfe1edb8e5cdeb0d93ca250db541d312d272730fac2f52035f76ee93c8f2824649abeca429ed7cf4b67e02f0bfeeca83c7f364068f409da1757b6a507c2686738a92c397e469458db3d3886e15d88658f0fd9eda646d74494a86bc2f19549668ab32c9bc092fa1bed1021167054108d47820baa98cd0a0bc3d92e20171", 0xd0}, {&(0x7f0000003400)="b6ae2fc71d6f0451162d27b51769db75990356d51828099415858fab50dfca82a19a0d3ab575d93086cd711d36e4e3e34ea6e032697210ca40f2e6c46cf83acdd281c9d6e4057aeba69b1d798ac55edcd5b75303c3110016d8755581311627fd9061c2e18759130e6194", 0x6a}, {&(0x7f0000003480)="47c1a2666edc6f58c219b7d1d50417d9fbea75b82de1a1b8ddced4566908cd9a9fb8d057cbb4b2ddc25ccee7e2a58eb347e6a0b30145cd61ef4a217b5c1ed8f91c89d5d9ebd67078d9c295db353d33d9bcdca90cd9df04aa26df8c3480bc0693d6ba9968916dc2f7e0df9860764389d5f8cfc96ef8b2dd2be009d821a3321729b12a57a21d12f1d1b6befed85d7853aa2a8f9d37523300a7c635e3cda653309f16f5895dac1c14dac8d6e5dc155c9326c195c0d94de256192392de881c8161b7eb60a7411157942a920fddaf963d4004d2a696be41b06fc5a24b4ae44555f5f05a", 0xe1}, {&(0x7f0000003580)="9d90abe38c6441b0707cdd20af844018c3f57696c15a4d6b69f1fdd90389ec6416ae415d43336f7f63b02f4af222a5ee16367d63c608d5b889b3d501497bb963ae7e54e829649aee6910444488e0c26d2013195384211540548e58c143956353664a6965d9cf8844", 0x68}, {&(0x7f0000003600)="6689f527a9ac80b155334f3b6fb51c30f560cbed7fc6b27bee4eba13236c948a8b467d9a7a5549538fe2ed72628583f9cba90aa23be1075f0d7ee4694e1037fb09abf874038fc13bdf4dab757cda4d374274ae56909c59c2404468aa5e38f7d057258a801c2143017d1f568ab86484", 0x6f}, {&(0x7f0000003680)="1985bd782746c48e6ddc64444b9bb54e530cd90bcd60c3cc50e1dfc0fe43810da61eb778eb3c3f655e88dcc747c7ed47c519129765ae1be7dd7b6fd7259346fc251d446e980d9ea05570d3fa1541dda4862a87715063b63674ba3df181e6132ed6704bcf489ff0749149c89f4e1fcd3b164d3a2c85635962150b360ce39b0aa265b57ac023d62a539bf98b95d6c06ee84126c41547d2c378e7301c69e77cb7272b5b95851cd9736eea211173", 0xac}, {&(0x7f0000003740)="e0d5841b61676a59bc22117d2b3a2e294417d5652e072615ecb0d45408143640b14abea481ae694e57a060", 0x2b}, {&(0x7f0000003780)="30189280d160da003a15a2e286abb90e27f41f1eba2f70a103e91fd19d2b1a3f8aa711bef21189e43be15cb8b601fcee5a6a3b75887e70555327ce668f7f975c744ce0a5f629ecfc9e1782ca293e5813a86e11aade71eb79920375482c2f30f7e6dee3d123c62fac3f76f2ccba90cb6b4c55dbbcfe6a26c5b230317ede8c545bcd2d3d4bc73bdf067bf5c61323507a3185b9bac494b2fc3e0e413bbe758e1d943e7a319f7feacbd869efbda3c57bb2ea034a8ee37d786f37ba9884a106637c92b0c3f7d5a63d7357a415f7e76794cc99316fd9cc1971cb03809f7c44a3aac449ce3fa79a393299b5", 0xe8}], 0xa, &(0x7f00000039c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x20, 0x8081}}], 0x4, 0x20000000) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={0x0, 0x80}}, 0x2000c001) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000400)=""/31, &(0x7f0000000440)=0x1f) r14 = socket(0x21, 0x6, 0xfffffff1) (async) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="120000005400012c000000000000000007"], 0x18}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r14, 0x84, 0x71, &(0x7f0000000280)={r16, 0x10}, 0x8) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r17, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="050027bd7400fedbdf250600000008000300", @ANYRES32=r19, @ANYBLOB="08000500040000000500530040000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 6.326940972s ago: executing program 1 (id=2405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'hsr0\x00', 0x0}) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendto$packet(r3, &(0x7f00000004c0)="01154e0001000011222859c55819", 0xe, 0x44011, &(0x7f0000000500)={0x11, 0x0, r4, 0x0, 0x0, 0x0}, 0x14) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newtaction={0x128, 0x30, 0xb, 0x0, 0x0, {}, [{0x114, 0x1, [@m_nat={0x110, 0x12, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x4, 0x0, 0xffffffff, 0x8}, @multicast2, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffb, 0xfffffff7, 0x0, 0x3, 0x3}, @local, @private=0xa010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x6, 0x5, 0x7}, @multicast2, @multicast2, 0x7f800000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x5, 0x2, 0x6, 0x5}, @rand_addr=0x64010102, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x200, 0x10000000, 0x2, 0xe}, @multicast2, @private=0xa010102, 0xffffff00, 0x1}}]}, {0x1d, 0x6, "39ece969393f487ad9616a0bbd6e7f8c511ec0fcd683dfd987"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x128}}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000580)) (async) r7 = socket$nl_crypto(0x10, 0x3, 0x15) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x40, 0x2, [@m_bpf={0x3c, 0x1f, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r9}]}, {0x9, 0x6, "eb8d4e3027"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x84}}, 0x40010) (async, rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (rerun: 64) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000240)=0x4, 0x4) (async) getsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) tee(r0, r0, 0x7, 0x2) (async) sendmsg$nl_crypto(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300040000000800f2ff04000000"], 0x44}}, 0x0) 4.784444636s ago: executing program 1 (id=2425): bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sendmsg$AUDIT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x3e9, 0x1, 0x70bd28, 0x25dfdbfe, {0x20, 0x1, 0x2, r2, 0x1, 0xfffffffd, 0x0, 0x234c, 0x0, 0x3, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040844) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x0) (async) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x0) poll(&(0x7f00000002c0)=[{r3, 0x205}, {r4, 0x101}, {r1, 0x8000}, {r0, 0x260}, {r5, 0x2400}, {r3, 0x5c}, {r1, 0x1120}], 0x7, 0x7f) (async) poll(&(0x7f00000002c0)=[{r3, 0x205}, {r4, 0x101}, {r1, 0x8000}, {r0, 0x260}, {r5, 0x2400}, {r3, 0x5c}, {r1, 0x1120}], 0x7, 0x7f) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000300)=@ieee802154, 0x80, &(0x7f0000001540)=[{&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/131, 0x83}], 0x4, &(0x7f0000001580)=""/84, 0x54}, 0x6e6}], 0x1, 0x40002152, &(0x7f0000001640)={0x0, 0x989680}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000001680)={'TPROXY\x00'}, &(0x7f00000016c0)=0x1e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000001700)={0x4, 0xef, 0x7, 0x5, 0x5, 0x0, [{0x3, 0x2, 0x6}, {0x3, 0x7c53, 0x0, '\x00', 0x1000}, {0x3f43, 0x5, 0x0, '\x00', 0x2004}, {0x1, 0x7, 0xb, '\x00', 0x2000}, {0x5, 0x2, 0x7ff}]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000001840)) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000001840)) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d80)=@bpf_lsm={0x1d, 0x11, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8ec8}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @generic={0xa, 0x0, 0x5, 0x4, 0x3}, @call={0x85, 0x0, 0x0, 0xcb}]}, &(0x7f0000001b80)='GPL\x00', 0x1, 0x5a, &(0x7f0000001bc0)=""/90, 0x41000, 0x70, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001c40)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001c80)={0x3, 0xd, 0x52, 0x7ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001cc0)=[r4, r4, r4, r4], &(0x7f0000001d00)=[{0x2, 0x1, 0xc, 0x3}, {0x4, 0x4, 0x8, 0x6}, {0x1, 0x1, 0xd}, {0x1, 0x1, 0x0, 0x7}, {0x0, 0x1, 0xb, 0x6}, {0x0, 0x4, 0x7, 0x1}, {0x2, 0x5, 0x2, 0x4}, {0x4, 0x1, 0xa, 0x6}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x10, 0x1c, &(0x7f0000001880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001980)='GPL\x00', 0x4, 0x80, &(0x7f00000019c0)=""/128, 0x40f00, 0x0, '\x00', r6, @sk_msg, r4, 0x8, &(0x7f0000001a40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001a80)={0x5, 0x8, 0x3}, 0x10, 0xffffffffffffffff, r8, 0x4, &(0x7f0000001e40)=[0xffffffffffffffff], &(0x7f0000001e80)=[{0x1, 0x1, 0xe, 0x9}, {0x1, 0x5, 0xd, 0x9}, {0x5, 0x1, 0xc, 0x7}, {0x5, 0x2, 0x8, 0x7}], 0x10, 0x291f}, 0x94) sendmsg$rds(r4, &(0x7f00000021c0)={&(0x7f0000001f80)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f0000001fc0)=""/212, 0xd4}, {&(0x7f00000020c0)=""/105, 0x69}, {&(0x7f0000002140)=""/10, 0xa}], 0x3, 0x0, 0x0, 0x80801}, 0x20000010) (async) sendmsg$rds(r4, &(0x7f00000021c0)={&(0x7f0000001f80)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f0000001fc0)=""/212, 0xd4}, {&(0x7f00000020c0)=""/105, 0x69}, {&(0x7f0000002140)=""/10, 0xa}], 0x3, 0x0, 0x0, 0x80801}, 0x20000010) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)=@mpls_delroute={0x30, 0x19, 0x2, 0x70bd2c, 0x25dfdbfb, {0x1c, 0x20, 0x0, 0x50, 0xfe, 0x4, 0x0, 0x0, 0x3600}, [@RTA_MULTIPATH={0xc, 0x9, {0xa, 0x11, 0x7, r6}}, @RTA_DST={0x8, 0x1, {0x26100}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)=@mpls_delroute={0x30, 0x19, 0x2, 0x70bd2c, 0x25dfdbfb, {0x1c, 0x20, 0x0, 0x50, 0xfe, 0x4, 0x0, 0x0, 0x3600}, [@RTA_MULTIPATH={0xc, 0x9, {0xa, 0x11, 0x7, r6}}, @RTA_DST={0x8, 0x1, {0x26100}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000002340), r4) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x7c, r10, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x904}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000002480)={0x8, 'team_slave_1\x00', {'ip6gretap0\x00'}, 0x5231}) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x2c, 0x1, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x2c, 0x1, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$phonet(r4, &(0x7f00000025c0)="f1cb451ba6b895ef0bb7434c7af4dbad4467cd5f4771c5786342073514a02e3d6837f9561c2069cd23fb7b6e89e00c94157145129d3963d6592719eab1ae21ba3661bc0b170bcf227abf83c2019f184b6a5e2b42f26c800c84f92d607c1971eabf1d21f44b333bca93b2c3a2c44d885ab1dd3b9241e0879f32b322d33915769824587ec428efe3fb1bbe01fc26545171029596ef2ce7be0ca4e63640f9730e3637fd1428e8b9e1564e3e804c1678d72722e1f63c52a568b14899f0a06c16f90e6030abaaf75041cd86abd2e4662f649e55bc208f707ac0cc37d62693dad86779697426d3f684387b4c1a83665e2bd9059d", 0xf1, 0x40814, &(0x7f00000026c0)={0x23, 0x0, 0x1, 0xc0}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000002740), r4) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002740), r4) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000002880)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002840)={&(0x7f0000002780)={0x88, r11, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xdc97}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc1e}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0xc180) openat$cgroup_procs(r4, &(0x7f00000028c0)='tasks\x00', 0x2, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), r4) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x34, r12, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7d}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040800}, 0x800) 4.50932581s ago: executing program 1 (id=2428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007966726d3100000000e4ffffffffffff07000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000000000000014100000018001700000000000000006574683a7465616d300000006d6f0078c04fd4c083261d13cee6f340275d"], 0x34}}, 0x20042000) 4.103718612s ago: executing program 1 (id=2430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r2, 0x6a98047402e98331, 0x70bd26, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094013000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8084) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000210029bd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a8904004a90000008001b00000000001700220044111eaf03d9f84d8a8eaa27dcc9991020f56a9364bc9f5fb49852607f2b004c56e082724109f5aa5b2aec1613aa19bc0a77ab631b25437a0fe55a16e2cd526ed50b321453210ce54f9984075c701cef369678b1a9c5580897245b9e26f1b80cfc8eca1a2fb4492fbabdaddaf03b6251058c82e761c4502ccc7ed5b295e8e057404a2829efb490f4569a2869f7427ea6ee41b819fc0497ecc5862fda060d6de0a250616071feeb2d1c9d0075d0b952a865c8c8d3"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3.921202128s ago: executing program 1 (id=2434): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x5, &(0x7f00000003c0)=@framed={{}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0xfe33) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xc7, 0x0, 0xffffffffffffffff, 0x20200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@arena={0x21, 0x0, 0x0, 0x6, 0x400, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f00000005c0)='@/!-/\x00', 0x2000, &(0x7f0000000600)={@_ha_fsid={[0x0, 0xf]}, {0x1b, 0x200, 0x400, 0x106c}}, 0x0, &(0x7f0000000640), &(0x7f0000000680)=0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x6, &(0x7f0000000040)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0xd, 0xc, 0x0, 0x1, 0x4}, @alu={0x7, 0x1, 0x6, 0x5, 0x4, 0xffffffffffffffff, 0x4}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xa5, &(0x7f0000000140)=""/165, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000700)=[r0, r1, r2, r3, r4, 0x1], &(0x7f0000000740)=[{0x2, 0x5, 0xc, 0xa}, {0x2, 0x4, 0x8, 0xa}, {0x5, 0x1, 0x0, 0xb}, {0x3, 0x3, 0xd, 0x6}, {0x2, 0x2, 0xb, 0xa}, {0x0, 0x2, 0xa}, {0x4, 0x1, 0xd, 0x5}, {0x3, 0x5, 0x10, 0x8}, {0x0, 0x2, 0x7, 0x3}], 0x10, 0xa}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x1}, 0x6) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000008c0)=@nat={'nat\x00', 0x19, 0x3, 0xcd0, [0x200000003980, 0x0, 0x0, 0x2000000039b0, 0x200000004548], 0x0, 0x0, &(0x7f0000000940)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x22, 0x890d, 'netpci0\x00', 'veth0_macvtap\x00', 'pim6reg0\x00', 'dummy0\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0xff], 0x0, 0x9b8, 0xa40, 0xa70, [@among={{'among\x00', 0x0, 0x8b0}, {{@offset=0xc, @offset=0x480, 0x2, {[0x1, 0x6, 0x27d, 0x3, 0x9, 0x7e1, 0x8, 0x4, 0x9, 0xfffffffa, 0x3, 0x5, 0x1, 0x3, 0x3, 0x4, 0x4, 0xaa83, 0x7, 0x46a, 0x2, 0xfffffffb, 0x2, 0x6, 0x6, 0x3ff, 0xe9, 0x7, 0x0, 0x1, 0x1, 0x7fffffff, 0x0, 0x8, 0x7, 0xaa8e, 0xa, 0xfffffffe, 0x0, 0x2, 0x8, 0x7f, 0x3, 0x6, 0x1, 0x9a, 0x9, 0xa0c, 0x9, 0x4, 0xf6, 0x0, 0x9, 0x3, 0x7cb, 0xcd, 0x8, 0x5, 0xffffff5e, 0x4, 0x6, 0x1, 0x131, 0x4, 0x3, 0x5, 0x8, 0x2, 0x1fd4, 0x1, 0x4, 0x8, 0xc, 0xb, 0x3, 0xd, 0x7, 0x80000001, 0xfff, 0x8, 0xffff2ba4, 0xffffffff, 0x64, 0x3, 0xb, 0x0, 0xf, 0x16, 0x8, 0x40, 0x8, 0x506a, 0x63, 0x5, 0x81, 0x1ff, 0x0, 0x5, 0x9, 0x3, 0xbee2, 0x2c, 0xfffffffb, 0x0, 0x3, 0x100, 0x6, 0x81, 0x3, 0x81, 0x80, 0x8, 0xb, 0x10001, 0x400, 0xffffffff, 0x9, 0x0, 0x6, 0x7, 0x0, 0x0, 0x977, 0xfffffec0, 0x800, 0x80000, 0x8, 0x2, 0x0, 0x2, 0x3, 0xffff, 0x668b, 0x7, 0x0, 0x2, 0x10000, 0x8, 0xfffffed9, 0x8, 0x74fa0ddd, 0x7, 0x2, 0xbd, 0x800, 0xb, 0x5, 0xb7, 0x81, 0x7fff, 0xa01, 0x7, 0x1, 0x102c, 0x5, 0x80000000, 0xfff, 0xe08, 0x1, 0x6, 0x1, 0x4, 0x7ff, 0x4, 0x8000, 0xf1135a8f, 0x7, 0x401, 0x180, 0x114, 0xc9e1, 0xc1e, 0x2, 0x77c, 0x80, 0x7ff, 0xfffffff8, 0x401, 0x6fce, 0x6, 0x9, 0x9, 0x7, 0x55a, 0x200, 0x3, 0xf0, 0x5, 0x9, 0x1a, 0x90, 0xf, 0x0, 0x1, 0x9, 0xb, 0xc49b, 0x5, 0x8000, 0x7, 0x8, 0x2, 0xc78, 0xc4, 0x7, 0xc96e, 0x6, 0xdc, 0x800, 0xdad, 0x6, 0x8, 0x7, 0x7ff, 0x9e, 0x0, 0xe3, 0x2, 0x1, 0x4, 0xffffffb3, 0x401, 0xc0000, 0x63, 0x8, 0xfff, 0x4, 0xffff, 0x401, 0x8, 0xb76, 0x1, 0x400000, 0xc8a, 0x3, 0x6, 0x1, 0x54, 0x9, 0x4, 0xbb, 0x6, 0x638, 0xfffffffd, 0x1, 0x8, 0x7, 0x1, 0xfe, 0x7, 0x80000001, 0x8, 0x5, 0x2, 0x6365, 0x77e2db41, 0x6], 0x9, [{[0x2, 0x81], @broadcast}, {[0x443, 0xffffffff], @empty}, {[0x4, 0x3d], @dev={0xac, 0x14, 0x14, 0x1d}}, {[0x7f, 0x7f], @multicast1}, {[0x7, 0x5], @empty}, {[0x8], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x4, 0xa8], @multicast2}, {[0x9, 0x9], @dev={0xac, 0x14, 0x14, 0x26}}, {[0x8, 0x1], @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {[0x400, 0x9, 0xe, 0x2, 0x7ff, 0x0, 0x7ff, 0x100, 0xfffffcda, 0x80000001, 0x8, 0x9, 0x900, 0x0, 0x8, 0xfffffff9, 0x0, 0x4, 0x0, 0x4, 0x400, 0x1, 0x5, 0x5, 0x218, 0x0, 0xe36, 0xffffff27, 0x2a, 0x9, 0xffffffff, 0x7ff, 0x4, 0xfffffffb, 0x4, 0xb532, 0x4, 0x5, 0x4, 0x7, 0x8, 0x5, 0x5, 0x4, 0x2, 0xa, 0x6, 0x1, 0xe, 0x4, 0x688000, 0x80, 0x2, 0x5, 0x5cd, 0x1, 0x2cbb, 0xff, 0x7, 0x6b10, 0x5, 0x8, 0x9, 0x6, 0x7, 0x426a, 0x7, 0x28, 0x1, 0x8000, 0x5, 0x5, 0x100, 0x4, 0x7fff, 0x7e, 0x7f, 0x3ff, 0x22, 0x6, 0x0, 0xe, 0x400, 0x4, 0x2, 0x82, 0x5, 0xfaf2, 0x2, 0x4, 0x2, 0x5, 0xaec, 0xfffffff0, 0x1, 0x9e, 0x100, 0x3, 0x200, 0x1000, 0x7, 0x6, 0x6, 0x80, 0x5, 0x7, 0x9e1, 0x9, 0x2, 0x4, 0x0, 0x7ff, 0x9, 0x2, 0x3f, 0x9, 0x4, 0xcde, 0x2, 0x1, 0x7, 0x5d88711a, 0x5, 0x6, 0x8, 0x3, 0x10, 0x1, 0xb7d, 0xe, 0x6, 0x4, 0x6, 0x200, 0x0, 0x9, 0xb, 0x0, 0x80, 0x2, 0x3, 0x2, 0x8, 0x6, 0x5, 0x4, 0x4, 0x4, 0x3, 0x9000000, 0x1ff, 0x80000000, 0x4, 0xa, 0x4, 0x9, 0x1ff, 0x0, 0x3ff, 0xe0b, 0x1, 0xa, 0x1, 0x8000, 0x9, 0xd, 0x5, 0x6, 0x6, 0x5, 0x21c, 0x1, 0xffffffff, 0x8, 0x4, 0x562, 0x3ff, 0x153d, 0x81, 0x0, 0x6, 0x54ce, 0xfffffffa, 0x5, 0x9, 0x7, 0x8d1, 0x5, 0x0, 0x5, 0x7, 0x2, 0x6, 0x3, 0xff, 0x7ff, 0xdc2f, 0x9, 0x4, 0x7, 0x2, 0xfffffffe, 0x1d57d23, 0xe2, 0x6, 0x7, 0x3, 0x7, 0x6, 0x9, 0x5, 0x7, 0x4, 0x2, 0xe26, 0x0, 0x1, 0x3, 0xd9, 0x9, 0x6, 0x3, 0x9, 0x8000, 0x0, 0x6, 0x6, 0x7, 0x1, 0xff, 0x2, 0x4, 0x5, 0xb84, 0xfffffffc, 0x80, 0x3, 0x9, 0x2, 0x80000001, 0x1, 0x2, 0x8, 0x8, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x602a, 0x2, 0x5, 0x4, 0xfffffffa, 0x4], 0x3, [{[0x7, 0x9], @dev={0xac, 0x14, 0x14, 0x10}}, {[0x2, 0xfffffffe], @loopback}, {[0x3, 0x1], @multicast2}]}}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x5, {0x3, 0x3a6, 0x1, @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xa, 0x5, 0x9, 0x8, @empty, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x4e22, 0x4e22, 0x0, 0x7, 0x3, 0x3, 0x8, 0x5, 0x8, 0x5}, 0x4a0, 0x4}}}], [@common=@log={'log\x00', 0x28, {{0x5, "c8b74bdeedad59677d4a4539c7fc8b3fb08237cf59a67067206f71d30f21", 0xc}}}, @snat={'snat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}, {0x3, 0x0, 0x7, 'team_slave_1\x00', 'veth1_to_team\x00', 'wg2\x00', 'veth1_to_bridge\x00', @remote, [0x0, 0xff, 0xff, 0xff, 0x0, 0x80], @random="a3cb2decf3d6", [0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xc0, 0xc0, 0xf8, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1}}}], [], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0x67, 0xf7, 'bridge0\x00', 'bridge_slave_1\x00', 'macvlan1\x00', 'wg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @multicast, [0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}}]}]}, 0xd48) write(r5, &(0x7f0000000000)="4a00000011007f0314066f9a70eaa1490675bc58080600", 0x17) 2.156325433s ago: executing program 4 (id=2455): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000240)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x408}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r3, @ANYRES8=r3, @ANYRES64], 0x78}}, 0x0) poll(&(0x7f0000000040)=[{r0, 0xa028}, {r0, 0x4}], 0x2, 0x8) 1.961941392s ago: executing program 4 (id=2456): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xc021, 0x1}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg(r4, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @remote}, 0x3, 0x4, 0x2}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000140)="c7b75eba4d6ddb403a983455cd98648e8629977101968385314a3364cfa9f0dc5b7205afa6a2cbff10498cb0311fae109790168e63e71eb0c5a956a2f7d0bdca76cf31fb999fa91bf9aabed4ba918655fe6d944ea174", 0x56}, {&(0x7f00000001c0)="43cc30e903ac4af2e7a4bd5270be68dd5727e062cb0e397245094ece155895706c613829a5b6ffc5ee54b9f5b89384b6d60069dbf2b4a9da85fe46a1fac69a7c5faeae7effde6c72665ef6981f6deee64590a1f0a883edd6913a0d6c939b90cc5d9bb06615f69ebd386dd57162cb1e0ac070b7232c361babaa1445fa0559b9ea3c88e21eed7edc115a6eebe3f56992c227ae9244ada1de997a85cb877025598e888a942fe3d1fb172fe0ba6e", 0xac}, {&(0x7f0000000280)="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", 0x1000}], 0x3, &(0x7f00000012c0)=[{0x28, 0x10e, 0x284, "74cca7d74f42a5274ea07211ad2dadc4c13d"}, {0x40, 0x111, 0xffff, "f36bfd3fb14718c9a90bee40e46e4eaead49f6d17eb807e6a8118ad5a7ad495a3f1c6e171ea321beb53537"}, {0x98, 0x1, 0x6, "7304bfa8b03a2da40692a1ff9609f111da7f9ab0b7ce08988f7aab907f7157449c3b37f5b7e5cb9d6e72ef030d75795ccefe06896a657a6261825f01f194e27a1d6d0cb51ce8d48c4849c75273aedd88e9204c7f2cbc9f8fb26e91bbee6c32fd6e8284d828c79488dcea8f17305999bc505c168ef6b91117285db93d8e62b82fd73ac4"}], 0x100}}, {{&(0x7f00000013c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001440)="eed9603f200121a9a924c7857af3420d6b0c0efc7db3ca688d98c2e10c2d1d9e7232988271784482cdbd5ddc1c55d5004e5f60b0ce4ef76ce0c454", 0x3b}, {&(0x7f0000001480)="2c7e2b3e3befdf70357a3652853862202212acf89f1b3ddca06bc9fe967804eaefc28e26f8aeaf0d109c325684142d35d918ecf37be9cff95f0e81864c2498ccf5a3d4188780470bce0ef67439a542c9262a2a66038a3c8860c5ccc080bbb2113c6f48779e63731403c5a8f6373ac25e352cee3796b0fb61d1beb29dd0188b111ee7c07beae86aec32ff76bc8b2516eaa7caf063dedca3cc8e598b92ef1724c71c248524ba5e66316b1edd9673e695c8cbf2cf53d397a18ae12c4c27d79509a2c7342c3bc3ed3af71b983628e1d73c68837dc8d86924665fb36b7ebff8646464a8975739a69505956851ea739ab877", 0xef}], 0x2, &(0x7f00000015c0)=[{0x98, 0x119, 0x7, "de36a36715238614abf4bd1cef81c5449fb9fa0ac341299923e2e0f9bfc245360eb5272a093610e8c209630708c2d7c17277c57e760d34cd8aa69527ad4d8cae6f50cf3faaa5bfc443be8ef7470080933379d15c8e322fca4f8b5ba032252a82a86499aec665db727fcd344776a1aa3b0e2f68fc070eed007e840c859ed86c553f9179decc4d4a"}, {0xb8, 0x10c, 0x1, "ec4aeb6a347fa9901b275fa47d4f2d25acf398dccbe2788d5b9a96f11b0c9ba8a4397369215ff1531d1736bc4b0963eaa33d444e9d51d9210cef5c8faeaa3796fb37aaae49a8cfa256dff0257e72a929b0166106b1f9b5a4921b52fb302e891f52d0da94c5bb2a6e2d5cfdd9c75e2ad0a70ec9c9dd36d95e881b4f3f8be4987331cacd535e4e6f2e2c76fca6c771e7ff6f46b21b89d943e401a368e70cbc88a96a37"}, {0xf8, 0x111, 0xa, "1ce93fcc50fb1edaa97a0bea8a8ca5a540f8052074110d866328c5d498c469fedbb9716ab92efb901a6878b0ba0a84bcc0735d7b8dbcaad5b240a040b3131958be9635e5af2e911c21d02ff16a6dc752f6b940c67b294dc53f1a365aa5dfd8988f1f03f2b5c7b55e291dd3dd2292f64bd71dffe0551f00ed20675771d6bface41381eb0785d20557e3bf2df385cbc11fcf2b7ce44d4d3bf2caa1f95fc73548b4e2f725983113bcd45656acb0a48893d07a07c4e48e9d8233eba6e5eb4853513b7756ff4f23215cd94c39944dadf4f29c9add1c9c74d76340b568771720ee3a3b66f608"}, {0xb0, 0x10b, 0x8, "ad5082ed0f8b84ae3fa3986d2128df7020ec52018eaee8b4ead5267f5b09f4531a33d4f0a9c3029de25e5d020c02e9202df3bac8c70cb015322efc07296c648d92ce2d3f0553944d9a28bb535f9f8665e2358ef2d15b1f84f0c4b2978a0112b779919065f263bf8c45553f6aad7e9e413aad71f8b67d83850a2095c5c0ae6ad4773c66cbbfe9527e1067e784539f7c42bb40bdb0b3907ead8a67778fcaa3"}, {0x68, 0x107, 0xfb, "a43050156d85ffa98e6c19bed638b27ed5a2d822406a692293a04d2ba542c22ee333fad3fcdec935866957d2a75d1bf81dcadcc2f286f0f78bafe0785e41773f731008859db0979730e1e87b6e7696e4539d4416214eb7e9"}, {0x50, 0x113, 0x5, "e92c9831c85d66e4f3c1843953d1beea685256698f73bd2c96546913221832235922681e23c2429db986fadbfc6a79ad4297e681945fbe881b25"}, {0x60, 0x11, 0x8, "8c0215df5a8f2cd8329bcb243a6b5b0e0f4c6c0334f04060421e3447f124a5905c5dae79a5bfb3bbaa1ffeb97598082be6dfee6afdd6f195929083bd8a94462e3d7517203d2aa2817aa081"}], 0x410}}, {{&(0x7f0000001a00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001a80)="1d3b575f19b72f0b577aba977b4a27e632971dae79745f4180da4c51a047ade039ff8677bef0d933c8204302b1b2", 0x2e}, {&(0x7f0000001ac0)="6cf720570107d8f58ed4150ca4683728c75d091985224e98b232d50b0d9ae7fe3146cf22323dfb0a6872b7675c5dcdc9bbb288aef496a3dd57976ccc690bae72c3a3c1369ce79ad021c598d86ea9d74f21bc86bd65d0539aa9bacaeb142be5788b6ffb646bb7a6d05c11c05c20ba56fbd23e3d1fe22459b8d4bccfc5b4903270e5878e23521f358f8b9c0fef256adf3d6b7bca08ec4c19dc7cfa614efab11da42b35689e8f50e677c0c4304d573ca75d951908220bbc5fb8361fa1a7b576aeeb24c38f98ac2aef22d9fd6ab51c73d1783ca935f4e1ef82693cbc566ad38c2eb3", 0xe0}], 0x2}}], 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x7c, r5, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x8d0) read$alg(r4, &(0x7f0000001e40)=""/76, 0x4c) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001ec0)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x28, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xa42a, 0x32}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000040}, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000002040)) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000020c0), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x34, r9, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair(0x26, 0x2, 0x8, &(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000002240)) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r12, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x74, r5, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x2c008085}, 0x20000041) getsockname$packet(r11, &(0x7f00000023c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002400)=0x14) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000002440)={"6895c7489f64ee83b1a75945f1b77183", 0x0, 0x0, {0x40, 0x570}, {0xf312, 0x6}, 0x5, [0x3, 0x40, 0xb, 0x9, 0x6, 0x5f, 0x1, 0x2, 0xffffffffffffff81, 0x8, 0x0, 0x7, 0x5, 0x9, 0x3, 0x9]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000002540)=r13) ioctl$sock_inet_tcp_SIOCINQ(r12, 0x541b, &(0x7f0000002580)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000025c0)={'geneve0\x00'}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f0000002600), 0x4) 1.9039207s ago: executing program 0 (id=2457): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x16, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="b40000000000000079b0900000000000620040000000000095"], &(0x7f00000012c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) (async) r7 = socket(0xa, 0x3, 0x3a) (async) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000b00)=@broute={'broute\x00', 0x20, 0x5, 0x430, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000e80], 0x0, 0x0, &(0x7f0000000b80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x7, 0x8914, 'vlan0\x00', 'veth0_to_team\x00', 'ip6gre0\x00', 'dvmrp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0x0, 0xff], @link_local, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x70, 0x70, 0xa8, [], [], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x9, 0x0, 0x6004, 'pimreg0\x00', 'veth1_virt_wifi\x00', '\x00', 'team0\x00', @random="46aafcc3cd06", [0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0xc4, "0eda5d467cde600e4b09dcbb068dfecb4c27ea8d6481ec1680a6cb53e5c4", 0xb}}}}, {0x5, 0x8, 0x4305, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', 'wlan1\x00', 'pimreg\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xcdb7, 0x7, 0x0, 0x0, "36699c45c98ea2561510bc5af0e8ab823a9815a16c24929eba27cc5ed8e8e1a5723cbd8352b08035b68c3bd52a5300b175ba19c69d9c5a5ed4b527f2f8717c9d"}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{0x3, 0x1, 0xc, 'veth0_to_batadv\x00', 'batadv_slave_1\x00', 'veth0\x00', 'veth0\x00', @empty, [0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}}, {0x9, 0x21, 0x16, 'pimreg1\x00', 'batadv_slave_0\x00', 'virt_wifi0\x00', 'ip6erspan0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, 0xffffffffffffffff}}}}]}]}, 0x4a8) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000900)={0x4, 0x0, 0x0, r9}, 0xc) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3e}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48005}, 0x4000800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xf9, 0x8, 0x8, &(0x7f00000001c0)}}, 0x3a) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28f94174f9f5ffff07003d"], 0x28}}, 0x0) (async, rerun: 32) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r14, @ANYBLOB="0100000002"], 0x40) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020080000000", @ANYRES32=0x1, @ANYBLOB="c50f00"/20, @ANYRES32=r11, @ANYRES32=r14, @ANYBLOB="01000000040000000200"/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x1c, &(0x7f0000000fc0)=ANY=[@ANYRESDEC=r7, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c50904000410ffd0c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYBLOB="87b23fc2fb5e2ea954d610376cd2f9c1a0b630dad3030dce57bf2c1531013c726869ba156b53d2fc262a5192b69553bcd4fbad8ba1ab776c82bde994b2169ac28f64d4571d5e8f6df5df3b5876ef0fdf6631539f590a9dfd3e8ee1d3645789f760597d4551af96f151319566ea4561a14684977d6668b9935d540c88024261bd3a47b6f0d3ef519e87871764562a318ff386f31693bc72532559f6ad2f7fcb2dedfabdae7c477b89a2dbd3aa687f35ff1ebf9ad2c402385d303a10d64d4c1e519876c13671423e7c931797", @ANYBLOB="ac66e7bab0c5d18710000000a216fe7d9432532600435941d62be585fb767293e6dd12a82b7892412f6b4f372d06a8958c61ec9a8df4b77082beeded581d3abb53e65b234ae57617e2518b8c456fa2957545297f4ddcbed8accf5da72fa3bbd41e1ff46e0cc32671104e6ab02f7b991835e4e71f8d9f0c7c49b4fbccdeae40bcb709d9a6b36cf1477b"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x47, 0x0, 0x0, 0x0}, 0x94) 1.725236686s ago: executing program 0 (id=2459): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0xb8, 0xb, 0x148, 0x0, 0x148, 0x1a8, 0x230, 0x242, 0x1a8, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0x0, 0x0, 'team_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73, 0x0, 0x58}, 0x0, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xf6, 0xb5, 0xf3e1, 'syz0\x00', {0x7fffffff}}}}, {{@ip={@broadcast, @broadcast, 0xffffff00, 0xff000000, 'netpci0\x00', 'sit0\x00', {0xff}, {}, 0x73, 0x1, 0x41}, 0xec010000, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x401, 0x0, 0x1}}, @common=@ah={{0x30}, {[0x1, 0x7d5]}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x6, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 1.604047861s ago: executing program 4 (id=2460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@ipv4_newaddr={0x30, 0x14, 0x100, 0x70bd26, 0x25dfdbfc, {0x2, 0x1f, 0x1, 0xff, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x580}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x4010088) (async) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@ipv4_newaddr={0x30, 0x14, 0x100, 0x70bd26, 0x25dfdbfc, {0x2, 0x1f, 0x1, 0xff, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x580}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x4010088) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfffff8c9, r7, 0x4}, 0x38) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff, 0x7}, {0xfff3, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) sendmmsg$alg(r8, &(0x7f0000000840), 0x492492492492627, 0x0) (async) sendmmsg$alg(r8, &(0x7f0000000840), 0x492492492492627, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x11, 0x3, 0x1) setsockopt$inet_tcp_int(r10, 0x6, 0x2, &(0x7f0000000840), 0x4) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_ext={0x1d, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000040000000000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x27754, r11, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) listen(r12, 0xb1cb) getpeername$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) (async) getpeername$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000100003042cbd31000000000000000000", @ANYRES32=r13, @ANYBLOB="000000000000000008001c00", @ANYRES32=r11, @ANYBLOB], 0x28}, 0x1, 0x2000000000000000, 0x0, 0x4000084}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000100003042cbd31000000000000000000", @ANYRES32=r13, @ANYBLOB="000000000000000008001c00", @ANYRES32=r11, @ANYBLOB], 0x28}, 0x1, 0x2000000000000000, 0x0, 0x4000084}, 0x0) 1.588819562s ago: executing program 0 (id=2461): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x700, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}}}}}) 1.53644435s ago: executing program 2 (id=2462): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x81}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x5}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x338, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x8, 0x6}}}, {{@uncond, 0x0, 0x128, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x6b, 0x0, 0x5, 0x401, 0x0, 0x7, 0x5}}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x1, 0x1, 0x0, "ea1ee5d1c9601b30deb958a92fe3434d35835e19b49a3ba41abc1c94d6a2fafc10325c60f0f8e407c0ad2bf4a9bcbc2a6c01a85913d84289f09effeb1b724612"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010a29bd7010334085828c679b0008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20004000) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10, 0x67}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10, 0x67}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.328792631s ago: executing program 0 (id=2464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fcfeffff7f20000000000000000350007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c0100000435"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1.318772441s ago: executing program 3 (id=2465): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000100)=@ethtool_cmd={0x27, 0x0, 0xf, 0xd1cd, 0x9, 0x9, 0x7, 0x6, 0x5, 0x2, 0xa, 0x6, 0x3, 0x2, 0x6, 0x20000000, [0x9, 0x45de]}}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @mcast1, 0x9}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000bc0)=""/4102, &(0x7f0000001c00)=0x1006) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) sendmmsg$inet(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="99cc6a27d9685c66b6dc476a3dd9c7af61e29d8168b55116c6710445eee400542c40b9319e855c7c6b95a3d67d6b1df6a2a8caf13728d2f90366324e30f5ae53097ce2980d1fcd7ada3d16733577642cd12b0d01d9cd1b4582f4fadf8eb90e037334", 0x62}, {&(0x7f0000000980)="437ef70cd5d9cf63ea0472f97821c07884214f7d2bd40df11c014d52aede", 0x1e}], 0x2}}], 0x2, 0x20005000) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000100)=@ethtool_cmd={0x27, 0x0, 0xf, 0xd1cd, 0x9, 0x9, 0x7, 0x6, 0x5, 0x2, 0xa, 0x6, 0x3, 0x2, 0x6, 0x20000000, [0x9, 0x45de]}}) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @mcast1, 0x9}, 0x1c) (async) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10) (async) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000bc0)=""/4102, &(0x7f0000001c00)=0x1006) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) (async) sendmmsg$inet(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="99cc6a27d9685c66b6dc476a3dd9c7af61e29d8168b55116c6710445eee400542c40b9319e855c7c6b95a3d67d6b1df6a2a8caf13728d2f90366324e30f5ae53097ce2980d1fcd7ada3d16733577642cd12b0d01d9cd1b4582f4fadf8eb90e037334", 0x62}, {&(0x7f0000000980)="437ef70cd5d9cf63ea0472f97821c07884214f7d2bd40df11c014d52aede", 0x1e}], 0x2}}], 0x2, 0x20005000) (async) 1.256014778s ago: executing program 4 (id=2466): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r1, 0x9}, &(0x7f0000000080)=0x8) 1.175352617s ago: executing program 3 (id=2467): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r3, 0xaa0f4000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) (async) sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x41) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f00000003c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) (async) mmap(&(0x7f0000362000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r0, 0x1e, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0}, 0x40) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@fallback=r9, r0, 0x12, 0x2010, 0x0, @value=r11, @void, @void, @void, r10}, 0x20) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) (async, rerun: 64) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) 1.129851719s ago: executing program 0 (id=2468): pipe(0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x400000, 0x25dfdbfa, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) write(r4, &(0x7f0000000200)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000e0000000000020000180080002007463700014000100000000000000000200000000e08f0000", 0x54) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x410) 1.059822038s ago: executing program 2 (id=2469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$inet(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000880)="775091966eee7a", 0x7}, {&(0x7f0000000700)="09be9e39fe15f0a1ed3409b3b63201705e4de406add9563605b2306a63de5debc09cd8ae8dde008793657b9e1b203727250c6408f40cec73ca21cd4f41b067a8f6", 0x41}, {&(0x7f0000000780)="e15631566202f500c6757eac83323151d689c28701e95f898c087c8a64f504656299cf9ea28d4dfe5ec86158642d3c6f13cd596696ef3c290846b65066e9423adb3bcd99083bda", 0x47}], 0x3, &(0x7f0000000840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}], 0x30}, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000011c0)=@xdp={0x2c, 0xa888, 0x0, 0x2042}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001280)='\'', 0x1}], 0x1}, 0x4005) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001300)={'gretap0\x00', &(0x7f00000012c0)={'gre0\x00', 0x0, 0x7, 0x3613e62856ec23c3, 0x5, 0x5, {{0x8, 0x4, 0x2, 0x1d, 0x20, 0x67, 0x0, 0x8, 0x2f, 0x0, @loopback, @remote, {[@noop, @timestamp={0x44, 0x8, 0x38, 0x0, 0x8, [0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001400)={'syztnl2\x00', &(0x7f0000001340)={'tunl0\x00', 0x0, 0x7800, 0x700, 0xfffffffb, 0xe0000, {{0x26, 0x4, 0x1, 0x0, 0x98, 0x64, 0x0, 0x10, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x44, 0x8, "09d2fbf41fcc"}, @timestamp={0x44, 0x14, 0x9e, 0x0, 0x1, [0x7f, 0x100, 0x8, 0xffff]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x2c, 0x8d, 0x0, 0x8, [0x200d05e2, 0x0, 0x507, 0xf, 0x5, 0x77c6658f, 0x7, 0x6, 0x1, 0x5b9a]}, @ssrr={0x89, 0x2b, 0x5d, [@local, @remote, @rand_addr=0x64010100, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}]}, @generic={0x94, 0x4, "c189"}, @ssrr={0x89, 0x7, 0x92, [@broadcast]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={r6, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x400000, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000017c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a40)={'ip6_vti0\x00', &(0x7f00000019c0)={'syztnl0\x00', 0x0, 0x2b, 0x80, 0x7f, 0x6, 0x49, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8707, 0x8000, 0x7e, 0x7}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000001cc0)={&(0x7f0000000640), 0xc, &(0x7f0000001c80)={&(0x7f0000001a80)={0x1d8, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20040040}, 0x8011) connect$pppoe(r2, &(0x7f00000005c0)={0x18, 0x0, {0x1, @local, 'wg0\x00'}}, 0xfffffc48) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@flushpolicy={0x10, 0x12, 0x105, 0x6, 0x25dfdbff}, 0x10}}, 0x20040840) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000600)) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ec0), 0x210842, 0x0) ioctl(r13, 0x40047438, &(0x7f0000000680)) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r16}, @CGW_SRC_IF={0x8, 0x9, r16}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r17, 0x1, 0x32, &(0x7f0000000d80), 0x4) 1.055886068s ago: executing program 4 (id=2470): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c80)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000d00)={0x1d, r1, 0x0, {0x0, 0xf0, 0x4}, 0x2}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000001c0)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="255a095b4f7f135116", 0x9}], 0x1}, 0x4004044) (async) readv(r0, &(0x7f0000000fc0)=[{&(0x7f0000001000)=""/71, 0x47}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="3800000007060108000000000000000007000001f5ff0000070000000900020073797a3000000000080006405d0bbc38050001000700000055d015435873549a3b89550850c725b83b1500efe01dd98fac0fc6fa26383de9b8186e0eae4b00d3f01bac07ba5f66becbfb9742c58d44d18f9a239516f8e76b2f9cabb5d974f11a019e51f04c107606c9363c38105582fdd345b56c1a00360f"], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x4004854) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x12, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r4, @ANYRES32=r7, @ANYRES32=r9], &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES64=r6, @ANYRES32=r6], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001200)=ANY=[], 0x20) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000006c008c316cc4d8d9e2ab000027311ec29bee3e90cc2ba2ce62c5df30286c9d0b94f81ae5b7bc5f046c86e8a05e5bd92c4964fa63dee44705d23dc500b517bb5b6200000100000000005444527562a2daf1fd3bf2700390827f6b18ffd914d22dba84390800000000000000d08b2295c0a83b0ddc439dbdd68a5d3867f1330fe5f64e4ae7e89b79d4d0afa92c6d9b076ec618e3351896ae79e6faf3398129b4b9a750b9326731412dfebf46beb4fece864ea948a1d8c507c3e1000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, 0x0, &(0x7f0000000140)=""/53}, 0x20) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r11, &(0x7f0000000dc0)={0x1f, @none}, 0x8) r12 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) recvmsg$unix(r12, &(0x7f00000005c0)={&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)=""/24, 0x18}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f00000004c0)=""/146, 0x92}], 0x4}, 0x2000) (async) r13 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r13, 0x8940, &(0x7f0000000000)=@generic={0x3, 0x1, 0x7}) 731.166436ms ago: executing program 3 (id=2471): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000540)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x10, 0x0, 0x7, 0x4], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000780)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x140c, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 641.142535ms ago: executing program 2 (id=2472): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) (async) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r0, 0x84, 0x80, &(0x7f0000000040)={0x2, 0xbb}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r0, 0x84, 0x25, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e20, @multicast2}}, 0x800, 0x6, 0x9}, 0x90) 496.199561ms ago: executing program 3 (id=2473): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="6a0afaff270f0000bfa20000ffffffb007020000f0ffffffb70300000a000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000008800000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 491.178216ms ago: executing program 2 (id=2474): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x4, 0x0, 0x0, r2}, 0xc) (async) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) (async) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xc010}, 0x40080) 395.224516ms ago: executing program 3 (id=2475): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bda7, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000380)=0x7fff, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40400c4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x39, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts], "fb"}}}}}}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000206030000000000000000000000280005000100070000000900020073797a31000000000c00078005001400750000000500050002000000050004000000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc04132478543c0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x83e29f5c14b60d7e) 80.181825ms ago: executing program 0 (id=2476): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xe, 0x3, &(0x7f00000001c0)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0x1c, 0x4000000, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x3}, @fwd={0xe}]}, {0x0, [0x2e, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000380)=""/245, 0x36, 0xf5, 0x0, 0x7, 0x10000, @value=r1}, 0x28) 79.282122ms ago: executing program 3 (id=2477): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000540)={@local, @empty, 0x0}, &(0x7f0000000880)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wg0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000900)=@allocspi={0x274, 0x16, 0x10, 0x70bd25, 0x25dfdbfe, {{{@in6=@mcast2, @in6=@empty, 0x4e22, 0x8, 0x4e23, 0x6, 0x2, 0x80, 0x20, 0x6c, r0}, {@in=@dev={0xac, 0x14, 0x14, 0x36}, 0x4d4}, @in6=@private2, {0x1000, 0x2, 0x1, 0x0, 0x100, 0x5, 0x3ff, 0x2}, {0x0, 0x7, 0x4, 0x1c}, {0x100, 0xa, 0xffffff81}, 0x70bd2b, 0x3502, 0xa, 0x1}, 0x0, 0x1000}, [@proto={0x5, 0x19, 0x6c}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @offload={0xc, 0x1c, {r1, 0x2}}, @sa_dir={0x5, 0x21, 0x3}, @lifetime_val={0x24, 0x9, {0x2b, 0x2, 0x1, 0xfffffffffffffffd}}, @migrate={0x134, 0x11, [{@in=@empty, @in6=@loopback, @in6=@mcast2, @in6=@private2, 0x33, 0x0, 0x0, 0x3500, 0x0, 0xa}, {@in6=@mcast1, @in=@rand_addr=0x64010101, @in6=@remote, @in6=@mcast1, 0x6c, 0x3, 0x0, 0x0, 0x2, 0x2}, {@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x2d}, @in=@empty, @in6=@remote, 0x6c, 0x4, 0x0, 0x3500, 0xa, 0x2}, {@in6=@remote, @in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x32, 0x1, 0x0, 0x34ff, 0xa, 0x2}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r11}, &(0x7f00000005c0), &(0x7f0000000600)=r10}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r11}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x1c, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000840)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f00000000c0), 0x40) 11.697394ms ago: executing program 4 (id=2478): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fcfeffff7f20000000000000000000037688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c0100000435"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 0s ago: executing program 2 (id=2479): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x4c) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (async) close(0x4) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@getchain={0x34, 0x66, 0x300, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x1, 0x1}, {0x10, 0x9}, {0xffe0, 0x4}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x12, &(0x7f0000001000)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r8, @ANYBLOB="000000000100000025000400fcffffffbc91100000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f00000010c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) (async) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x8848, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x339}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}}, 0x40) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001280)=ANY=[@ANYBLOB="44000000100003052abd700004000000000000008e009bab8dbbc0b7908d5a6417a6875dd0c31c430e912e7271f7248a9602dff0636cba2104d26b20a0dc652de1cd7d1f30c50be7aefde27d00189471c2093c852b982fa0728f26539fa42f1b2c4065388b44f2de2133084a9b7a594943831de04537704df0f9c06002eb98388bcfaa8dff1f7a2bfc98d921e7928248d2ddc7ecf8ea14fb1bd4b95c4b66e66c3d8f83d6f8d905ca3694e3ad21e0d2cc96cca2d07a8a9bc98644c6fc480f9fe18d5dea33af413e90e64bf50f6cab196cb3f4dd45b273c280a003c501cb064973d9b1d60c362fe11ddf8689", @ANYRES32=0x0, @ANYRES16=r11, @ANYRES32=r13, @ANYBLOB="08001f000b000000", @ANYRESDEC=r9, @ANYRESDEC=r14], 0x44}}, 0x800) (async) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a88000000060a010400000000000000000a0000050900010073797a31000000005c000480580001800a000100696e6e657200000048000280080004400000001724000580090001006d6574610000000014000280080002400000001008000140000000140800034000000000080002400000008408000140000000000900020073797a32000000"], 0xb0}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x24000000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)=0x0) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f0000000000), 0xc, &(0x7f0000000780)={&(0x7f0000000500)=@getpolicy={0x24c, 0x15, 0x800, 0x70bd2d, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x4e22, 0xfff, 0x4e20, 0x0, 0x2, 0x20, 0x90, 0x3c, r4, r11}, 0x6e6bbe, 0x1}, [@algo_comp={0xab, 0x3, {{'lzs\x00'}, 0x318, "8d9e3f71d0a89e43c6ff8388cde32516c52adc119a39d8f76d8feafef074402a45d7a414d38c8a27f078ccf7f13eceeebf63d4820a7bbe1c219b132123f74b90303f914670ac0907ced12035d70a65919e2f30f98ab01d41239cc29a258eed357a708f"}}, @sa={0xe4, 0x6, {{@in6=@private1, @in6=@remote, 0x4e22, 0x2, 0x4e21, 0x0, 0x2, 0x110, 0x0, 0x0, r13, r16}, {@in6=@mcast2, 0x4d3, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x2, 0xfffffffffffff801, 0x2, 0x4, 0x7, 0x4, 0x4, 0x6}, {0x4, 0x7, 0x4, 0xc52}, {0x7, 0x2, 0xfffffffd}, 0x70bd27, 0x3504, 0x2, 0x2, 0x3, 0x20}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@loopback}}, @srcaddr={0x14, 0xd, @in6=@private1}, @sa_dir={0x5, 0x21, 0x2}, @lifetime_val={0x24, 0x9, {0x9, 0x2, 0x0, 0xba69}}, @iptfs_init_delay={0x8, 0x27, 0x4}, @iptfs_pkt_size={0x8, 0x29, 0x7}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) kernel console output (not intermixed with test programs): [ 125.756443][ T8340] netlink: 17 bytes leftover after parsing attributes in process `syz.0.662'. [ 125.757155][ T8337] netlink: 'syz.1.661': attribute type 34 has an invalid length. [ 125.757171][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 125.830694][ T8345] netlink: 3080 bytes leftover after parsing attributes in process `syz.3.663'. [ 125.830716][ T8345] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.663'. [ 126.709413][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.893758][ T8408] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.042324][ T13] net_ratelimit: 22 callbacks suppressed [ 127.042343][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.057238][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.128831][ T8423] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 127.302336][ T8417] smbdirect: ib_dev[rxe0] renamed to [syz2] [ 127.404323][ T8442] netlink: 'syz.2.690': attribute type 21 has an invalid length. [ 127.404350][ T8442] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.454751][ T1968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.611963][ T5613] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 127.612551][ T5613] Bluetooth: hci0: command 0x0c13 tx timeout [ 127.660419][ T8452] netlink: 'syz.2.693': attribute type 2 has an invalid length. [ 127.790765][ T8463] netlink: 'syz.2.693': attribute type 2 has an invalid length. [ 127.821221][ T8469] __nla_validate_parse: 12 callbacks suppressed [ 127.821242][ T8469] netlink: 224 bytes leftover after parsing attributes in process `syz.0.697'. [ 128.100578][ T8477] netlink: 'syz.3.698': attribute type 9 has an invalid length. [ 128.145994][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.216282][ T8482] xt_socket: unknown flags 0x8 [ 128.216400][ T8482] xt_socket: unknown flags 0x8 [ 128.216514][ T8482] xt_socket: unknown flags 0x8 [ 128.216608][ T8482] xt_socket: unknown flags 0x8 [ 128.216702][ T8482] xt_socket: unknown flags 0x8 [ 128.216790][ T8482] xt_socket: unknown flags 0x8 [ 128.216887][ T8482] xt_socket: unknown flags 0x8 [ 128.216981][ T8482] xt_socket: unknown flags 0x8 [ 128.217077][ T8482] xt_socket: unknown flags 0x8 [ 128.217169][ T8482] xt_socket: unknown flags 0x8 [ 128.267010][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.319385][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.699'. [ 128.319410][ T8485] openvswitch: netlink: Flow key attr not present in new flow. [ 128.488048][ T8502] veth0: entered promiscuous mode [ 128.496900][ T1968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.688112][ T8494] veth0: left promiscuous mode [ 128.911859][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 128.911983][ T8532] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 128.914852][ T8532] netlink: 152 bytes leftover after parsing attributes in process `syz.3.708'. [ 129.212109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.271217][ T8546] ip_tables: iptables: counters copy to user failed while replacing table [ 129.282360][ T6954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.446827][ T8554] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 129.489813][ T8554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.497514][ T8558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.498645][ T8554] batadv0: entered promiscuous mode [ 129.525907][ T8554] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 129.752696][ T8572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.721'. [ 129.954749][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'. [ 130.020388][ T8582] 8021q: adding VLAN 0 to HW filter on device bond6 [ 130.062564][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 130.086718][ T8583] 0ªX¹¦Dö»: left allmulticast mode [ 130.225731][ T8587] macvlan2: entered promiscuous mode [ 130.225753][ T8587] macvlan2: entered allmulticast mode [ 130.227759][ T8587] bond6: (slave macvlan2): Error -22 calling dev_set_mtu [ 130.289297][ T8596] veth7: entered promiscuous mode [ 130.289319][ T8596] veth7: entered allmulticast mode [ 130.572246][ T8617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'. [ 130.575103][ T8615] netlink: 'syz.1.731': attribute type 1 has an invalid length. [ 130.637802][ T8625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'. [ 130.656592][ T8625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.914132][ T8644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.739'. [ 131.004223][ T8651] netlink: 'syz.2.741': attribute type 1 has an invalid length. [ 131.005644][ T8651] netlink: 'syz.2.741': attribute type 2 has an invalid length. [ 131.091218][ T8653] netlink: 'syz.4.742': attribute type 2 has an invalid length. [ 131.267988][ T8666] bridge0: entered allmulticast mode [ 131.269175][ T8666] bridge_slave_1: left allmulticast mode [ 131.269196][ T8666] bridge_slave_1: left promiscuous mode [ 131.269414][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.323690][ T8666] bridge0 (unregistering): left allmulticast mode [ 131.457759][ T8672] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 132.093908][ T6951] net_ratelimit: 9 callbacks suppressed [ 132.093926][ T6951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.146247][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.147098][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.612753][ T6954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.652173][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.726685][ T5613] block nbd0: Receive control failed (result -32) [ 132.727572][ T5621] block nbd1: Receive control failed (result -32) [ 132.733419][ T52] block nbd1: Receive control failed (result -32) [ 132.733531][ T4932] block nbd0: Receive control failed (result -32) [ 132.733548][ T5630] block nbd3: Receive control failed (result -32) [ 132.735209][ T5628] block nbd4: Receive control failed (result -32) [ 132.740214][ T8741] block nbd4: Receive control failed (result -32) [ 132.740315][ T5625] block nbd3: Receive control failed (result -32) [ 132.741185][ T5623] block nbd2: Receive control failed (result -32) [ 132.749689][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.749743][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.750775][ T5622] block nbd2: Receive control failed (result -32) [ 132.951392][ T8757] __nla_validate_parse: 3 callbacks suppressed [ 132.951412][ T8757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.770'. [ 133.378287][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.691791][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.723110][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.015013][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.732132][ T8595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.587459][ T8739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.671334][ T8798] tipc: Started in network mode [ 135.671363][ T8798] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 135.671532][ T8798] tipc: Enabled bearer , priority 10 [ 135.755345][ T8801] netlink: 'syz.2.783': attribute type 97 has an invalid length. [ 135.755364][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 135.755378][ T8801] netlink: 'syz.2.783': attribute type 97 has an invalid length. [ 135.755388][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 135.845464][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.785'. [ 135.971853][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.784'. [ 136.039729][ T8831] netlink: 'syz.1.787': attribute type 10 has an invalid length. [ 136.101257][ T8830] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 136.169521][ T8831] team0: Device wg2 is of different type [ 136.227667][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 136.348265][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 136.598088][ T8864] netlink: 80 bytes leftover after parsing attributes in process `syz.2.794'. [ 136.679474][ T8871] xt_HMARK: spi-set and port-set can't be combined [ 136.709117][ T8871] trusted_key: syz.4.796 sent an empty control message without MSG_MORE. [ 136.709235][ T8877] xt_HMARK: spi-set and port-set can't be combined [ 136.762158][ T8875] syzkaller0: entered promiscuous mode [ 136.762178][ T8875] syzkaller0: entered allmulticast mode [ 136.793027][ T8597] tipc: Node number set to 10136234 [ 136.915038][ T8886] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.920463][ T8887] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.080747][ T8897] netlink: 44 bytes leftover after parsing attributes in process `syz.4.803'. [ 137.080772][ T8897] netlink: 43 bytes leftover after parsing attributes in process `syz.4.803'. [ 137.080785][ T8897] netlink: 'syz.4.803': attribute type 6 has an invalid length. [ 137.080797][ T8897] netlink: 'syz.4.803': attribute type 5 has an invalid length. [ 137.126058][ T8901] Cannot find add_set index 34 as target [ 137.139515][ T8901] geneve2: entered promiscuous mode [ 137.152598][ T6954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 48755 - 0 [ 137.164040][ T6948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 48755 - 0 [ 137.169233][ T6954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 48755 - 0 [ 137.169269][ T6954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 48755 - 0 [ 137.312791][ T8915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.314100][ T6954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.314141][ T6954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.650026][ T8934] syzkaller0: entered promiscuous mode [ 137.650049][ T8934] syzkaller0: entered allmulticast mode [ 137.670534][ T8935] net_ratelimit: 37 callbacks suppressed [ 137.670553][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.670744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.831351][ T8939] syzkaller0: entered promiscuous mode [ 137.831374][ T8939] syzkaller0: entered allmulticast mode [ 137.846779][ T8939] tipc: Enabled bearer , priority 0 [ 137.853985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.862875][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.152317][ T6951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.859598][ T8963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.860276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.904220][ T8595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.274234][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.452049][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.455011][ T8940] tipc: Resetting bearer [ 139.491039][ T8938] tipc: Resetting bearer [ 139.518306][ T8938] tipc: Disabling bearer [ 139.550078][ T8968] __nla_validate_parse: 2 callbacks suppressed [ 139.550096][ T8968] netlink: 224 bytes leftover after parsing attributes in process `syz.2.824'. [ 139.580298][ T8971] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.825'. [ 139.766284][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'. [ 139.921110][ T9006] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 139.946855][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 140.009751][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.835'. [ 140.185121][ T9022] netlink: 44 bytes leftover after parsing attributes in process `syz.4.831'. [ 140.185145][ T9022] netlink: 43 bytes leftover after parsing attributes in process `syz.4.831'. [ 140.185159][ T9022] netlink: 'syz.4.831': attribute type 5 has an invalid length. [ 140.185170][ T9022] netlink: 43 bytes leftover after parsing attributes in process `syz.4.831'. [ 140.396093][ T9032] netlink: 'syz.0.839': attribute type 10 has an invalid length. [ 141.021282][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 141.436104][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 141.685864][ T9094] veth5: entered promiscuous mode [ 141.849093][ T9119] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 142.920256][ T9185] bond7 (unregistering): Released all slaves [ 142.976768][ C1] net_ratelimit: 10 callbacks suppressed [ 142.976790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.079253][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.116525][ T9195] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.275295][ T9204] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 143.319244][ T9205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.387306][ T9210] tunl0: entered promiscuous mode [ 143.397540][ T9210] netlink: 'syz.1.882': attribute type 4 has an invalid length. [ 143.623614][ T8594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.713628][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.834385][ T9228] ip_tables: iptables: counters copy to user failed while replacing table [ 144.094153][ T8594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.099403][ T9250] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 144.110223][ T9250] bond3 (unregistering): Released all slaves [ 144.249273][ T9249] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 144.277964][ T9249] bond3 (unregistering): Released all slaves [ 144.289010][ T9259] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 144.320319][ T9259] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 144.375833][ T9266] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.398134][ T9259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.487110][ T9259] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 144.642627][ T9272] __nla_validate_parse: 10 callbacks suppressed [ 144.642645][ T9272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.901'. [ 144.813593][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.136037][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.255430][ T9307] syzkaller0: entered promiscuous mode [ 145.255456][ T9307] syzkaller0: entered allmulticast mode [ 145.334981][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'. [ 145.354171][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.913'. [ 145.912067][ T6625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.867221][ T9303] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 146.970388][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 147.002634][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.915'. [ 147.292683][ T9345] netlink: 'syz.3.918': attribute type 10 has an invalid length. [ 147.470384][ T9347] syzkaller0: entered promiscuous mode [ 147.470405][ T9347] syzkaller0: entered allmulticast mode [ 147.849650][ T9359] netlink: 36 bytes leftover after parsing attributes in process `syz.1.924'. [ 147.862387][ T9360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.924'. [ 147.862406][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 147.883633][ T9359] netlink: 36 bytes leftover after parsing attributes in process `syz.1.924'. [ 147.885589][ T9362] tipc: Can't bind to reserved service type 2 [ 147.886933][ T9360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.924'. [ 148.131908][ T6625] net_ratelimit: 6 callbacks suppressed [ 148.131928][ T6625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.236241][ T9377] dvmrp0: left allmulticast mode [ 148.236346][ T9377] batadv_slave_1: left allmulticast mode [ 148.253107][ T8595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.459134][ T9383] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.459255][ T9383] bridge0: port 2(bridge_slave_1) entered listening state [ 148.459599][ T9383] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.459710][ T9383] bridge0: port 1(bridge_slave_0) entered listening state [ 148.506966][ T9388] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.234787][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.294106][ T8595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.343806][ T9414] netlink: 'syz.0.940': attribute type 83 has an invalid length. [ 149.372348][ T9425] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.375032][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.415195][ T9427] netlink: 'syz.2.942': attribute type 1 has an invalid length. [ 149.692218][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.711195][ T9445] bond0: entered promiscuous mode [ 149.711227][ T9445] bond_slave_0: entered promiscuous mode [ 149.711430][ T9445] bond_slave_1: entered promiscuous mode [ 149.848379][ T9455] __nla_validate_parse: 104 callbacks suppressed [ 149.848399][ T9455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.951'. [ 149.983370][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 150.206702][ T9482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.956'. [ 150.248616][ T9484] netlink: 'syz.3.958': attribute type 1 has an invalid length. [ 150.333874][ T8595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.335514][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.920369][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 150.986349][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.968'. [ 150.987984][ T9529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.968'. [ 151.064731][ T9532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'. [ 151.096525][ T9541] batadv_slave_1: entered promiscuous mode [ 151.097673][ T9540] batadv_slave_1: left promiscuous mode [ 151.459851][ T9561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.977'. [ 151.459872][ T9561] netlink: 13 bytes leftover after parsing attributes in process `syz.3.977'. [ 151.510047][ T9561] veth5: entered promiscuous mode [ 151.510997][ T9569] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 151.511015][ T9569] netlink: 72 bytes leftover after parsing attributes in process `syz.2.979'. [ 151.524323][ T9569] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 151.607187][ T9577] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 151.617630][ T9579] netlink: 'syz.3.984': attribute type 10 has an invalid length. [ 151.647598][ T9569] bond3: (slave veth0_to_bond): making interface the new active one [ 151.660073][ T9569] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 151.667685][ T9579] veth1_macvtap: left promiscuous mode [ 151.694963][ T9579] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 151.797813][ T9586] SET target dimension over the limit! [ 152.081848][ T9607] netlink: 'syz.4.992': attribute type 3 has an invalid length. [ 152.128827][ T9609] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 152.129877][ T9609] bond3 (unregistering): Released all slaves [ 152.580600][ T9640] team0: Cannot enslave team device to itself [ 152.595428][ T9640] team0: No ports can be present during mode change [ 152.883217][ T9654] geneve0: Caught tx_queue_len zero misconfig [ 152.930035][ T9659] vcan0: tx address claim with broadcast sa [ 152.989762][ T9661] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 153.054348][ T9661] bond4: entered promiscuous mode [ 153.055287][ T9661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.126166][ T9661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.126610][ T9661] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 153.126628][ T9661] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 153.129375][ T9661] bond4: (slave xfrm1): making interface the new active one [ 153.129394][ T9661] xfrm1: entered promiscuous mode [ 153.173923][ T9661] xfrm1: left promiscuous mode [ 153.206274][ T9671] lo: Caught tx_queue_len zero misconfig [ 153.235805][ T6625] IPVS: starting estimator thread 0... [ 153.326135][ T9684] IPVS: using max 28 ests per chain, 67200 per kthread [ 153.454219][ T8597] net_ratelimit: 6 callbacks suppressed [ 153.454236][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.487583][ T9697] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 153.502831][ T9693] wg2: Caught tx_queue_len zero misconfig [ 153.506968][ T9693] tipc: Started in network mode [ 153.506993][ T9693] tipc: Node identity f2dce7029728, cluster identity 4711 [ 153.507141][ T9693] tipc: Enabled bearer , priority 0 [ 153.558786][ T9699] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.635302][ T6625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.767258][ T9712] netlink: 'syz.3.1028': attribute type 1 has an invalid length. [ 153.802302][ T9712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.883305][ T9718] batadv0: entered promiscuous mode [ 153.884338][ T9718] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 153.886120][ T9718] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 154.343854][ T9751] vcan0: entered promiscuous mode [ 154.347965][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.349856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.474455][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.522922][ T8595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.531203][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.671126][ T9] tipc: Node number set to 1710548738 [ 154.743327][ T6954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.803956][ T9778] tls_set_device_offload: netdev not found [ 154.856396][ T9781] __nla_validate_parse: 17 callbacks suppressed [ 154.856415][ T9781] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1051'. [ 154.856658][ T9780] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1051'. [ 154.892725][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.932750][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 154.932783][ T9788] netlink: 'syz.1.1053': attribute type 10 has an invalid length. [ 154.932796][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1053'. [ 154.939393][ T9788] geneve2: entered promiscuous mode [ 154.939413][ T9788] geneve2: entered allmulticast mode [ 155.002052][ T6954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.012413][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.177760][ T9808] xt_CONNSECMARK: invalid mode: 0 [ 155.181467][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.186660][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 155.445154][ T9825] netlink: 'syz.1.1061': attribute type 7 has an invalid length. [ 155.490443][ T9825] netlink: 'syz.1.1061': attribute type 7 has an invalid length. [ 155.528165][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.534681][ T6954] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.534879][ T6954] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.535407][ T6954] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.184065][ T9876] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1075'. [ 156.208985][ T9856] syzkaller0: entered promiscuous mode [ 156.209010][ T9856] syzkaller0: entered allmulticast mode [ 156.629760][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 156.629883][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 158.049258][ T9888] bridge_slave_1: left allmulticast mode [ 158.049282][ T9888] bridge_slave_1: left promiscuous mode [ 158.049594][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.075720][ T9888] bridge_slave_0: left allmulticast mode [ 158.075744][ T9888] bridge_slave_0: left promiscuous mode [ 158.075958][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.445703][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 158.548210][ T9921] netlink: 'syz.3.1088': attribute type 1 has an invalid length. [ 158.575764][ T9914] net_ratelimit: 24 callbacks suppressed [ 158.575784][ T9914] netlink: Failed to add %pB helper -22 [ 158.575824][ T9914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.642314][ T9921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.659353][ T8595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.697774][ T9922] bond4: (slave veth7): Enslaving as an active interface with a down link [ 158.812292][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.953646][ T9940] smc: net device lo applied user defined pnetid SYZ0 [ 158.976146][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.994370][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1095'. [ 159.061988][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.262215][ T6954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.344291][ T9974] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 159.346098][ T9974] bond5 (unregistering): Released all slaves [ 159.380030][ T9982] netlink: 'syz.0.1101': attribute type 3 has an invalid length. [ 159.380192][ T9982] netlink: 'syz.0.1101': attribute type 3 has an invalid length. [ 159.380348][ T9982] netlink: 'syz.0.1101': attribute type 3 has an invalid length. [ 159.380495][ T9982] netlink: 'syz.0.1101': attribute type 3 has an invalid length. [ 159.380656][ T9982] netlink: 'syz.0.1101': attribute type 3 has an invalid length. [ 159.380808][ T9982] netlink: 'syz.0.1101': attribute type 3 has an invalid length. [ 159.578472][ T9996] ip_tables: iptables: counters copy to user failed while replacing table [ 159.694809][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.779814][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.945650][T10020] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.975963][T10021] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.998468][T10021] bond4: (slave team0): making interface the new active one [ 160.000776][T10021] bond4: (slave team0): Enslaving as an active interface with an up link [ 160.139743][ T12] bond4: (slave team0): link status definitely down, disabling slave [ 160.152495][ T12] bond4: now running without any active interface! [ 160.210293][T10033] __nla_validate_parse: 3 callbacks suppressed [ 160.210312][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 160.236384][T10033] syzkaller0: entered promiscuous mode [ 160.236405][T10033] syzkaller0: entered allmulticast mode [ 160.304314][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1117'. [ 160.555436][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 160.648414][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 160.929640][T10067] validate_nla: 60 callbacks suppressed [ 160.929661][T10067] netlink: 'syz.3.1128': attribute type 4 has an invalid length. [ 160.981347][T10067] netlink: 'syz.3.1128': attribute type 4 has an invalid length. [ 161.069832][T10075] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1131'. [ 161.960369][T10121] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 161.966883][T10121] bond5 (unregistering): Released all slaves [ 162.133289][T10127] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 162.138573][T10127] bond5 (unregistering): Released all slaves [ 162.363358][T10151] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 162.385102][T10151] bond5: entered promiscuous mode [ 162.385530][T10151] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.391336][T10151] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1144'. [ 162.683266][T10156] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 163.712106][ T6954] net_ratelimit: 14 callbacks suppressed [ 163.712126][ T6954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.852189][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.579122][T10108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.706017][T10166] IPv6: sit1: Disabled Multicast RS [ 164.753632][T10169] netlink: 'syz.1.1148': attribute type 7 has an invalid length. [ 164.753651][T10169] netlink: 'syz.1.1148': attribute type 8 has an invalid length. [ 164.814980][ T6627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.852120][ T5622] Bluetooth: hci4: ISO packet too small [ 164.874247][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1154'. [ 164.875315][T10178] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 164.877937][T10178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1154'. [ 164.893685][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.898771][ T8595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.022417][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 165.022440][T10189] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 165.055347][T10196] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 165.064365][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1156'. [ 165.255863][T10201] bond5: option fail_over_mac: invalid value (16) [ 165.260024][T10201] bond5 (unregistering): Released all slaves [ 165.300645][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'. [ 165.300900][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'. [ 165.315513][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 165.745304][T10229] netlink: 'syz.4.1170': attribute type 1 has an invalid length. [ 165.804498][T10229] 8021q: adding VLAN 0 to HW filter on device bond7 [ 165.826431][ T5623] Bluetooth: hci3: unexpected event 0x10 length: 11 > 1 [ 165.828427][ T5625] Bluetooth: hci3: hardware error 0xc2 [ 165.848950][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1173'. [ 165.901762][ T5623] Bluetooth: hci3: unexpected event 0x10 length: 11 > 1 [ 165.905458][T10229] macvlan2: entered promiscuous mode [ 165.905504][T10229] macvlan2: entered allmulticast mode [ 165.905921][T10229] bond7: entered allmulticast mode [ 165.905989][T10229] bond7: entered promiscuous mode [ 165.908048][T10229] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.910528][T10229] team0: Port device macvlan2 added [ 165.912227][ T6627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.942048][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.027511][T10252] ip_tables: iptables: counters copy to user failed while replacing table [ 166.190349][T10267] netlink: 'syz.1.1181': attribute type 4 has an invalid length. [ 166.220855][T10267] netlink: 'syz.1.1181': attribute type 9 has an invalid length. [ 166.339706][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 166.558291][T10278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1185'. [ 166.570404][T10287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1187'. [ 166.719588][T10300] veth0: entered promiscuous mode [ 166.734696][T10302] veth0: left promiscuous mode [ 166.736612][T10300] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1190'. [ 166.736851][T10300] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1190'. [ 166.737054][T10300] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1190'. [ 167.132117][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 167.933903][ T5625] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 167.933993][ T5625] Bluetooth: hci3: hardware error 0xc2 [ 168.165694][T10397] netlink: 'syz.0.1218': attribute type 4 has an invalid length. [ 168.909612][T10384] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 168.920670][T10397] .`: renamed from bond0 [ 169.052748][ T8597] net_ratelimit: 19 callbacks suppressed [ 169.052768][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.272571][ T6627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.278550][T10418] vlan1: left allmulticast mode [ 169.278573][T10418] veth0_vlan: left allmulticast mode [ 169.388393][T10410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.388414][T10410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.514306][T10438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.653118][T10410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.653151][T10410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.981515][T10410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.982011][T10410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.016115][ T5625] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 170.091883][ T8595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.176900][T10410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.176934][T10410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.405736][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.552000][ T6951] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.552032][ T6951] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.652863][ T6951] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.652893][ T6951] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.654832][ T6627] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.654859][ T6627] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.671810][ T6948] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.671840][ T6948] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.748846][T10503] __nla_validate_parse: 38 callbacks suppressed [ 170.748864][T10503] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1248'. [ 170.973089][T10520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.977812][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.134109][ T8594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.221073][T10534] Cannot find add_set index 4 as target [ 171.276163][T10537] syzkaller0: entered promiscuous mode [ 171.276193][T10537] syzkaller0: entered allmulticast mode [ 171.512011][ T6627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.582632][T10559] netlink: 'syz.2.1266': attribute type 83 has an invalid length. [ 171.950508][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1275'. [ 171.999266][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 172.098286][T10592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.124512][T10592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.127664][T10597] ip_tables: iptables: counters copy to user failed while replacing table [ 172.145922][T10597] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1281'. [ 172.177792][T10593] ip6_vti0: entered promiscuous mode [ 172.179551][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 172.445405][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 172.499093][T10622] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 172.939599][T10654] netlink: 'syz.2.1293': attribute type 12 has an invalid length. [ 172.954026][T10654] ip6t_srh: unknown srh match flags 5F28 [ 173.047466][T10663] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1297'. [ 173.051069][T10663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1297'. [ 173.181871][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1297'. [ 173.247279][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1302'. [ 173.247540][T10675] lo: left promiscuous mode [ 173.678828][T10712] netlink: 'syz.2.1314': attribute type 8 has an invalid length. [ 173.707666][T10710] netlink: 'syz.0.1313': attribute type 6 has an invalid length. [ 174.253102][ T8597] net_ratelimit: 9 callbacks suppressed [ 174.253120][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.856904][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.208666][T10834] xt_connbytes: Forcing CT accounting to be enabled [ 175.208892][T10834] set match dimension is over the limit! [ 175.294033][ T8595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.769006][T10858] netlink: 'syz.4.1346': attribute type 10 has an invalid length. [ 175.769027][T10858] __nla_validate_parse: 16 callbacks suppressed [ 175.769037][T10858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1346'. [ 175.773696][T10858] dummy0: entered promiscuous mode [ 175.789798][T10867] netlink: Unknown conntrack attr (0) [ 175.792703][T10869] bridge0: port 3(syz_tun) entered blocking state [ 175.795449][T10869] bridge0: port 3(syz_tun) entered disabled state [ 175.795604][T10869] syz_tun: entered allmulticast mode [ 175.801483][T10869] syz_tun: entered promiscuous mode [ 175.804041][T10869] bridge0: port 3(syz_tun) entered blocking state [ 175.804145][T10869] bridge0: port 3(syz_tun) entered listening state [ 175.875800][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 175.965014][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.979758][T10882] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1353'. [ 176.030192][T10878] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 176.030348][T10878] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 176.033828][T10885] netlink: 'syz.2.1351': attribute type 64 has an invalid length. [ 176.285344][T10909] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.287765][T10910] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.417315][T10914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1359'. [ 176.417462][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1359'. [ 176.442105][T10917] gre1: entered promiscuous mode [ 176.478804][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 176.478822][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 176.479147][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 176.479163][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 176.485127][T10914] bond0: (slave 30): Releasing backup interface [ 176.588153][T10914] : entered promiscuous mode [ 176.588168][T10914] : entered allmulticast mode [ 176.629744][T10923] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.646645][T10923] bridge_slave_0 (unregistering): left allmulticast mode [ 176.646973][T10923] bridge_slave_0 (unregistering): left promiscuous mode [ 176.647891][T10923] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.989907][T10949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1368'. [ 177.011533][T10947] ip6tnl0: Caught tx_queue_len zero misconfig [ 177.037311][T10947] netlink: 'syz.3.1367': attribute type 11 has an invalid length. [ 177.176281][T10958] bond8: option fail_over_mac: invalid value (16) [ 177.178745][T10958] bond8 (unregistering): Released all slaves [ 177.315305][T10967] bond8: option fail_over_mac: invalid value (16) [ 177.336563][T10967] bond8 (unregistering): Released all slaves [ 177.376283][T10978] netlink: 'syz.2.1376': attribute type 1 has an invalid length. [ 177.495454][T10982] syzkaller1: entered promiscuous mode [ 177.495499][T10982] syzkaller1: entered allmulticast mode [ 177.583753][T10989] netlink: 'syz.2.1380': attribute type 1 has an invalid length. [ 177.651250][T10998] netlink: 'syz.2.1381': attribute type 8 has an invalid length. [ 177.707400][T11000] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 178.432657][T11035] syzkaller0: entered promiscuous mode [ 178.432679][T11035] syzkaller0: entered allmulticast mode [ 178.557333][T11045] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 178.608595][T11052] netlink: 'syz.2.1392': attribute type 30 has an invalid length. [ 178.715132][T11051] syzkaller1: entered promiscuous mode [ 178.715163][T11051] syzkaller1: entered allmulticast mode [ 178.788133][T11060] ipt_rpfilter: unknown options [ 178.788266][T11060] ipt_rpfilter: unknown options [ 178.788381][T11060] ipt_rpfilter: unknown options [ 178.788476][T11060] ipt_rpfilter: unknown options [ 178.788571][T11060] ipt_rpfilter: unknown options [ 178.788666][T11060] ipt_rpfilter: unknown options [ 178.788756][T11060] ipt_rpfilter: unknown options [ 178.788855][T11060] ipt_rpfilter: unknown options [ 178.788948][T11060] ipt_rpfilter: unknown options [ 178.789042][T11060] ipt_rpfilter: unknown options [ 178.814063][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 178.913747][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 178.913944][T11072] xt_hashlimit: max too large, truncated to 1048576 [ 178.914004][T11072] xt_hashlimit: invalid rate [ 178.914138][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 178.914159][T11072] xt_hashlimit: max too large, truncated to 1048576 [ 178.914168][T11072] xt_hashlimit: invalid rate [ 178.914267][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 178.914276][T11072] xt_hashlimit: max too large, truncated to 1048576 [ 178.914285][T11072] xt_hashlimit: invalid rate [ 178.914384][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 178.914393][T11072] xt_hashlimit: max too large, truncated to 1048576 [ 178.914401][T11072] xt_hashlimit: invalid rate [ 178.914497][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 178.914506][T11072] xt_hashlimit: max too large, truncated to 1048576 [ 178.914514][T11072] xt_hashlimit: invalid rate [ 178.914609][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 178.914618][T11072] xt_hashlimit: max too large, truncated to 1048576 [ 178.914627][T11072] xt_hashlimit: invalid rate [ 178.915627][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 178.915640][T11072] xt_hashlimit: max too large, truncated to 1048576 [ 178.915648][T11072] xt_hashlimit: invalid rate [ 178.915783][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 178.915793][T11072] xt_hashlimit: max too large, truncated to 1048576 [ 178.915802][T11072] xt_hashlimit: invalid rate [ 178.915898][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 178.915907][T11072] xt_hashlimit: max too large, truncated to 1048576 [ 178.915916][T11072] xt_hashlimit: invalid rate [ 178.916080][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 178.916090][T11072] xt_hashlimit: max too large, truncated to 1048576 [ 178.916098][T11072] xt_hashlimit: invalid rate [ 179.165849][T11080] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 179.862937][T11118] ip6t_hbh: too many supported opts specified [ 179.906046][T11127] xt_l2tp: v2 doesn't support IP mode [ 180.106827][T11140] x_tables: duplicate underflow at hook 2 [ 180.837739][T11191] x_tables: duplicate underflow at hook 2 [ 180.864400][T11191] ip6gre1: entered allmulticast mode [ 180.881036][T11197] x_tables: duplicate underflow at hook 2 [ 181.003767][T11148] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.003791][T11148] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 181.096743][T11211] __nla_validate_parse: 74 callbacks suppressed [ 181.096763][T11211] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1432'. [ 181.132408][T11148] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.132430][T11148] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 181.181294][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 181.238741][T11148] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 181.238764][T11148] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 181.342596][T11223] net_ratelimit: 2 callbacks suppressed [ 181.342610][T11223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.399360][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 181.466706][T11224] hsr0: entered allmulticast mode [ 181.466727][T11224] hsr_slave_0: entered allmulticast mode [ 181.466744][T11224] hsr_slave_1: entered allmulticast mode [ 182.077716][T11252] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1440'. [ 182.081164][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 182.167488][T11221] hsr0: left allmulticast mode [ 182.167511][T11221] hsr_slave_0: left allmulticast mode [ 182.167527][T11221] hsr_slave_1: left allmulticast mode [ 182.218520][T11263] netlink: 'syz.0.1441': attribute type 23 has an invalid length. [ 182.621364][T11276] geneve3: entered promiscuous mode [ 182.621387][T11276] geneve3: entered allmulticast mode [ 182.643198][ T12] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 182.643242][ T12] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 182.643273][ T12] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 182.643308][ T12] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 182.735103][T11288] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 182.736347][T11288] ipt_REJECT: TCP_RESET invalid for non-tcp [ 182.819862][T11285] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1447'. [ 183.059505][T11305] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1453'. [ 183.126536][T11310] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1454'. [ 183.301920][T11314] team0: Device gtp1 is up. Set it down before adding it as a team port [ 183.326623][T11324] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1456'. [ 183.423618][T11334] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1456'. [ 183.459195][T11331] team0: Device gtp1 is up. Set it down before adding it as a team port [ 183.789833][T11361] netlink: 'syz.2.1467': attribute type 10 has an invalid length. [ 183.975378][T11377] openvswitch: netlink: IP tunnel dst address not specified [ 183.975410][T11377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.059967][T11382] openvswitch: netlink: IP tunnel dst address not specified [ 184.608870][T11407] smc: net device lo erased user defined pnetid SYZ0 [ 184.945785][T11426] syzkaller0: entered promiscuous mode [ 184.945809][T11426] syzkaller0: entered allmulticast mode [ 185.170410][T11448] bond8 (unregistering): Released all slaves [ 185.967639][T11501] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 186.032599][T11506] openvswitch: netlink: Duplicate key (type 6). [ 186.155849][T11510] __nla_validate_parse: 5 callbacks suppressed [ 186.155870][T11510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1500'. [ 186.157127][T11511] netlink: 12616 bytes leftover after parsing attributes in process `syz.1.1502'. [ 186.324380][T11517] nbd: nbd3 already in use [ 186.328181][T11517] block nbd3: NBD_DISCONNECT [ 186.328260][T11517] block nbd3: Send disconnect failed -32 [ 186.328277][T11517] block nbd3: Send disconnect failed -32 [ 186.328293][T11517] block nbd3: shutting down sockets [ 186.367024][T11510] 8021q: adding VLAN 0 to HW filter on device bond7 [ 186.404433][T11510] bond7: entered promiscuous mode [ 186.409853][T11510] bond0: (slave bond7): Enslaving as an active interface with an up link [ 187.065892][T11551] veth7: entered promiscuous mode [ 187.065915][T11551] veth7: entered allmulticast mode [ 187.379498][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'. [ 187.472414][T11584] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 187.737829][T11596] netlink: 'syz.3.1524': attribute type 8 has an invalid length. [ 188.022953][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'. [ 188.154503][T11619] Bluetooth: hci1: too big key_count value 32778 [ 188.774239][T11646] smc: net device team0 applied user defined pnetid SYZ2 [ 188.927013][T11648] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 189.203733][T11659] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1542'. [ 189.204470][T11664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1544'. [ 189.337622][T11659] veth9: entered promiscuous mode [ 189.461979][T11678] netlink: 'syz.4.1549': attribute type 11 has an invalid length. [ 189.509435][T11678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1549'. [ 189.575959][ T6627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.578009][ T6627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.603453][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.902237][ T8597] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.332748][ T8597] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.523196][T11734] gre0: Caught tx_queue_len zero misconfig [ 190.679443][T11747] syzkaller1: entered promiscuous mode [ 190.679464][T11747] syzkaller1: entered allmulticast mode [ 190.989605][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 191.036182][T11762] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1572'. [ 191.077579][T11766] Bluetooth: hci0: unsupported parameter 5134 [ 191.077601][T11766] Bluetooth: hci0: unsupported parameter 8192 [ 191.077611][T11766] Bluetooth: hci0: unsupported parameter 5134 [ 191.077621][T11766] Bluetooth: hci0: unsupported parameter 8192 [ 191.079384][T11766] netlink: 'syz.2.1573': attribute type 3 has an invalid length. [ 191.170332][T11768] SET target dimension over the limit! [ 191.184788][T11762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1572'. [ 191.256251][T11775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.131040][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1582'. [ 192.326301][T11827] ip_tables: iptables: counters copy to user failed while replacing table [ 192.435527][T11840] nbd4: detected capacity change from 0 to 50 [ 192.446102][ T2509] block nbd4: Dead connection, failed to find a fallback [ 192.446128][ T2509] block nbd4: shutting down sockets [ 192.446226][ T2509] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.446315][ T2509] Buffer I/O error on dev nbd4, logical block 0, async page read [ 192.452428][ T2509] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.452458][ T2509] Buffer I/O error on dev nbd4, logical block 1, async page read [ 192.452579][ T2509] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.452600][ T2509] Buffer I/O error on dev nbd4, logical block 2, async page read [ 192.456402][ T2509] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.456444][ T2509] Buffer I/O error on dev nbd4, logical block 3, async page read [ 192.457058][ T2509] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.457110][ T2509] Buffer I/O error on dev nbd4, logical block 0, async page read [ 192.457212][ T2509] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.457238][ T2509] Buffer I/O error on dev nbd4, logical block 1, async page read [ 192.457343][ T2509] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.457377][ T2509] Buffer I/O error on dev nbd4, logical block 2, async page read [ 192.457486][ T2509] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.457506][ T2509] Buffer I/O error on dev nbd4, logical block 3, async page read [ 192.457686][ T2509] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.457726][ T2509] Buffer I/O error on dev nbd4, logical block 0, async page read [ 192.457823][ T2509] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.457932][ T2509] Buffer I/O error on dev nbd4, logical block 1, async page read [ 192.469342][T11713] ldm_validate_partition_table(): Disk read failed. [ 192.474847][T11713] Dev nbd4: unable to read RDB block 0 [ 192.483368][T11713] nbd4: unable to read partition table [ 192.544472][T11713] ldm_validate_partition_table(): Disk read failed. [ 192.548312][T11713] Dev nbd4: unable to read RDB block 0 [ 192.550774][T11713] nbd4: unable to read partition table [ 192.677445][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1588'. [ 192.728967][T11843] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 192.828031][T11854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1592'. [ 193.054430][T11867] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1593'. [ 193.301756][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.370737][T11881] netlink: 'syz.0.1596': attribute type 3 has an invalid length. [ 193.399734][T11881] ip_tables: iptables: counters copy to user failed while replacing table [ 193.495670][T11891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1598'. [ 193.502237][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1598'. [ 193.585961][T11898] syzkaller1: entered promiscuous mode [ 193.585981][T11898] syzkaller1: entered allmulticast mode [ 193.587649][T11898] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1600'. [ 193.745367][T11907] bridge_slave_0: left allmulticast mode [ 193.745392][T11907] bridge_slave_0: left promiscuous mode [ 193.745620][T11907] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.181323][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.181416][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.224462][T11907] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.228283][T11907] bond0: (slave bond_slave_1): Releasing backup interface [ 194.268443][T11907] team0: Port device team_slave_0 removed [ 194.278624][T11907] team0: Port device team_slave_1 removed [ 194.279277][T11907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.279294][T11907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.282912][T11907] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 194.337708][T11929] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 194.476417][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 194.476451][T11933] netlink: 'syz.4.1608': attribute type 5 has an invalid length. [ 194.476464][T11933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1608'. [ 194.838981][T11954] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 194.906202][T11954] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.028748][T11954] team0: Device xfrm0 is of different type [ 195.072211][T11964] tipc: Enabled bearer , priority 0 [ 195.459213][T11981] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.836135][T12010] netlink: 'syz.0.1633': attribute type 11 has an invalid length. [ 196.017951][T12025] xt_hl: Unknown Hop Limit match mode: 206 [ 196.030179][T12024] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 196.070406][T12015] netlink: 'syz.4.1634': attribute type 5 has an invalid length. [ 196.118281][T12031] xt_hl: Unknown Hop Limit match mode: 206 [ 196.274147][T12041] bond6: (slave bridge3): making interface the new active one [ 196.276300][T12041] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 196.326315][T12024] __nla_validate_parse: 7 callbacks suppressed [ 196.326335][T12024] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1636'. [ 196.607855][T12071] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 196.710230][T12081] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1652'. [ 196.710252][T12081] openvswitch: netlink: Flow key attr not present in new flow. [ 196.731029][T12081] tipc: Started in network mode [ 196.731058][T12081] tipc: Node identity f219eb45e5dc, cluster identity 4711 [ 196.731231][T12081] tipc: Enabled bearer , priority 0 [ 196.752928][T12081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1652'. [ 196.752958][T12081] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 196.981735][T12076] veth1_to_bond: Caught tx_queue_len zero misconfig [ 197.029046][T12097] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode [ 197.029071][T12097] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode [ 197.090486][T12101] netlink: 'syz.1.1657': attribute type 29 has an invalid length. [ 197.099366][T12103] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1657'. [ 197.368152][T12125] netlink: 'syz.4.1665': attribute type 64 has an invalid length. [ 197.387020][T12127] x_tables: unsorted entry at hook 4 [ 197.497273][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 197.585533][T12135] gretap1: entered promiscuous mode [ 197.586450][T12135] batman_adv: batadv0: Adding interface: gretap1 [ 197.586462][T12135] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.586482][T12135] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 197.656385][T12141] netlink: 'syz.2.1670': attribute type 2 has an invalid length. [ 197.659815][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.659835][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.659846][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.659856][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.660056][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.660067][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.660077][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.673867][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.674133][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.674145][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.674155][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.674164][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.674864][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.674876][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.674885][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.674894][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.675194][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.675205][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.675214][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.675223][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.675448][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.717924][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.717942][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.717952][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.718179][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.718190][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.718199][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.718209][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.718387][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.718397][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.718406][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.718415][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.718593][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.718603][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.718613][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.718622][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.718811][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.718822][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.718831][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.718840][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.723981][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.723999][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.724009][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.724019][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.728531][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.728548][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.728557][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.728567][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.728864][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.728875][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.728884][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.728893][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.729088][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.729098][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.729107][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.729116][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.729291][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.729302][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.729311][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.729321][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.736512][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.738599][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.738614][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.738624][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.738837][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.738848][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.742429][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.742443][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.742643][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.742654][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.742663][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.742673][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.746275][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.746291][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.746301][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.746311][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.746549][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.746561][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.746571][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.746580][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.746764][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.746774][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.746783][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.746793][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.746970][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.746980][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.749429][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.749442][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.753706][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.753721][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.753739][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.753749][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.754081][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.754093][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.754102][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.754112][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.754291][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.754301][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.757170][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.757184][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.757810][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.757823][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.757833][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.757843][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.758020][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.758031][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.758040][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.758049][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.759954][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.759969][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.759979][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.759988][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.760179][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.760190][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.760199][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.760209][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.760383][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.760394][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.760403][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.760412][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.764861][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.764875][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.764885][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.764895][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.765078][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.765088][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.765097][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.765107][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.768302][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.768316][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.768326][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.768335][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.769428][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.769442][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.769452][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.769461][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.770682][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.770695][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.770880][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.770892][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.771080][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.771091][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.771101][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.771110][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.771285][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.771296][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.773309][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.773322][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.773519][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.773530][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.773539][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.773548][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.773736][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.773747][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.773756][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.773765][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.775323][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.775337][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.775346][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.775356][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.776142][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.776155][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.776164][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.776173][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.777146][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.777158][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.777168][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.777178][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.779081][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.779095][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.779105][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.779577][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.780810][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.780824][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.780834][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.780843][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.786354][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.786369][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.786380][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.786390][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.786570][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.786580][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.786590][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.786599][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.788201][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.788214][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.788224][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.788234][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.788414][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.788425][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.788433][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.788443][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.788980][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.788992][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.789002][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.789012][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.789198][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.789208][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.789217][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.789226][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.790214][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.790233][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.790243][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.790252][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.790432][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.790443][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.790452][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.790460][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.790636][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.790646][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.790655][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.790664][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.790846][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.790856][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.790864][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.790874][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.791048][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.793038][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.793052][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.793062][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.793289][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.793345][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.793355][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.793365][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.795131][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.795145][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.795154][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.795164][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.795385][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.795396][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.795405][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.795415][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.795656][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.795666][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.795676][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.797062][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.797257][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.797269][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.797278][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.797287][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.797463][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.797474][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.797483][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.797493][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.797668][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.797679][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.797688][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.797697][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.798991][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.799005][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.799084][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.799095][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.799773][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.799785][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.799795][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.799805][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.800007][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.800018][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.800027][T12142] Bluetooth: hci0: unsupported parameter 5161 [ 197.800037][T12142] Bluetooth: hci0: unsupported parameter 8192 [ 197.846276][ T988] tipc: Node number set to 398846789 [ 197.887022][T12151] siw: device registration error -23 [ 198.075347][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 198.092455][T12159] x_tables: unsorted underflow at hook 1 [ 199.048510][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1683'. [ 199.760385][T12236] bond5: entered allmulticast mode [ 199.775137][T12236] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode [ 199.775163][T12236] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode [ 199.998815][T12252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1698'. [ 200.038536][T12267] netlink: 'syz.1.1702': attribute type 1 has an invalid length. [ 200.078661][T12267] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.246858][T12275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1704'. [ 200.270997][T12277] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1705'. [ 200.330214][T12281] netlink: 'syz.1.1707': attribute type 8 has an invalid length. [ 200.474189][T12292] gre0: Caught tx_queue_len zero misconfig [ 200.581886][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.726184][T12304] gretap0: entered promiscuous mode [ 200.739574][T12304] vlan4: entered promiscuous mode [ 200.897825][T12317] netlink: 'syz.1.1717': attribute type 8 has an invalid length. [ 200.919323][T12317] netlink: 'syz.1.1717': attribute type 8 has an invalid length. [ 200.968185][T12315] geneve2: entered promiscuous mode [ 201.202838][T12335] xfrm1: entered promiscuous mode [ 201.202858][T12335] xfrm1: entered allmulticast mode [ 201.411118][T12348] bond3: option downdelay: invalid value (18446744073709551615) [ 201.411141][T12348] bond3: option downdelay: allowed values 0 - 2147483647 [ 201.428351][T12348] bond3 (unregistering): Released all slaves [ 201.463196][T12361] netlink: 'syz.3.1730': attribute type 3 has an invalid length. [ 201.463216][T12361] __nla_validate_parse: 6 callbacks suppressed [ 201.463226][T12361] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1730'. [ 201.467387][T12352] bond0: invalid NS target ff00:: specified for addition [ 201.470700][T12352] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 201.740560][T12376] xt_CT: No such helper "pptp" [ 201.804124][T12380] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1735'. [ 201.829570][T12382] netlink: 'syz.1.1735': attribute type 8 has an invalid length. [ 201.913908][T12396] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 201.914436][T12396] batman_adv: batadv0: Adding interface: gretap1 [ 201.914446][T12396] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.914468][T12396] batman_adv: batadv0: Interface activated: gretap1 [ 201.944141][T12390] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1738'. [ 202.222338][T12408] bond8: Removing last ns target with arp_interval on [ 202.264220][T12418] netlink: 'syz.1.1746': attribute type 2 has an invalid length. [ 202.282806][T12414] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 202.306493][T12417] netlink: 'syz.1.1746': attribute type 29 has an invalid length. [ 202.444251][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 202.521852][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 202.881932][T12450] v: renamed from veth0_vlan [ 203.060136][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1757'. [ 203.061140][T12465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1757'. [ 203.098776][T12465] netlink: 'syz.3.1757': attribute type 1 has an invalid length. [ 203.295163][T12470] bond8: (slave bridge4): making interface the new active one [ 203.295773][T12470] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 203.435432][T12487] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1763'. [ 203.460673][T12473] bond10 (unregistering): Released all slaves [ 203.652321][T12503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1766'. [ 203.698113][T12503] bridge5: entered promiscuous mode [ 203.698134][T12503] bridge5: entered allmulticast mode [ 203.718319][T12503] team0: Port device bridge5 added [ 203.780800][T12503] bridge0: port 1(team0) entered blocking state [ 203.784186][T12503] bridge0: port 1(team0) entered disabled state [ 203.784469][T12503] team0: entered allmulticast mode [ 203.784488][T12503] team_slave_0: entered allmulticast mode [ 203.784506][T12503] team_slave_1: entered allmulticast mode [ 203.872509][T12503] team0: entered promiscuous mode [ 203.872531][T12503] team_slave_0: entered promiscuous mode [ 203.872940][T12503] team_slave_1: entered promiscuous mode [ 203.873095][T12503] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 203.873960][T12503] bridge0: port 1(team0) entered blocking state [ 203.874049][T12503] bridge0: port 1(team0) entered listening state [ 203.936830][ T12] IPVS: starting estimator thread 0... [ 203.964726][T12508] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1769'. [ 204.031717][T12528] IPVS: using max 29 ests per chain, 69600 per kthread [ 204.657720][ T5276] v: left promiscuous mode [ 204.729393][ T988] v: entered promiscuous mode [ 205.040499][T12575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.068855][T12574] veth0: Caught tx_queue_len zero misconfig [ 205.832792][T12627] Bluetooth: MGMT ver 1.23 [ 205.833150][T12626] sctp: [Deprecated]: syz.3.1798 (pid 12626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.833150][T12626] Use struct sctp_sack_info instead [ 205.842154][T12629] netlink: 'syz.2.1796': attribute type 62 has an invalid length. [ 205.885648][T12621] netlink: 'syz.4.1797': attribute type 7 has an invalid length. [ 206.262936][T12621] netlink: 'syz.4.1797': attribute type 7 has an invalid length. [ 206.334859][ C1] bridge0: port 3(syz_tun) entered learning state [ 206.482689][T12659] __nla_validate_parse: 6 callbacks suppressed [ 206.482708][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'. [ 206.818273][T12678] syzkaller0: left promiscuous mode [ 206.818295][T12678] syzkaller0: left allmulticast mode [ 206.955472][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1812'. [ 207.094989][T12690] netlink: 'syz.2.1815': attribute type 10 has an invalid length. [ 207.395211][T12704] syzkaller0: entered promiscuous mode [ 207.395231][T12704] syzkaller0: entered allmulticast mode [ 207.648282][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'. [ 207.648301][T12727] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1829'. [ 207.763739][T12734] IPv6: Can't replace route, no match found [ 207.764042][T12734] IPv6: Can't replace route, no match found [ 207.913534][T12740] netlink: 'syz.2.1834': attribute type 1 has an invalid length. [ 208.057900][T12760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.182027][T12757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.270534][T12758] dvmrp0: entered allmulticast mode [ 208.435894][T12782] hashlimit_mt_check_common: 25 callbacks suppressed [ 208.435913][T12782] xt_hashlimit: size too large, truncated to 1048576 [ 208.496731][T12791] xt_hashlimit: size too large, truncated to 1048576 [ 208.891782][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.891806][ C0] bridge0: topology change detected, propagating [ 209.118838][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1866'. [ 209.220136][T12834] ip_tables: iptables: counters copy to user failed while replacing table [ 209.454939][T12853] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 209.580824][T12855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.599499][T12855] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1873'. [ 209.666358][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'. [ 209.688928][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'. [ 209.707407][T12868] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1873'. [ 209.713293][T12864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.918747][T12879] bond9: option fail_over_mac: invalid value (16) [ 209.926655][T12879] bond9 (unregistering): Released all slaves [ 209.961300][T12880] geneve3: entered promiscuous mode [ 209.961321][T12880] geneve3: entered allmulticast mode [ 209.971852][ T6627] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 209.971940][ T6627] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 209.971973][ T6627] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 209.972004][ T6627] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 210.086826][T12890] netlink: 'syz.2.1878': attribute type 1 has an invalid length. [ 210.277460][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'. [ 210.343204][T12910] syzkaller1: entered promiscuous mode [ 210.343226][T12910] syzkaller1: entered allmulticast mode [ 210.365499][T12910] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 210.365520][T12910] syzkaller1: Linktype set failed because interface is up [ 210.673951][T12932] netlink: 'syz.4.1889': attribute type 10 has an invalid length. [ 210.673989][T12932] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 210.674698][T12937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.674713][T12937] IPv6: NLM_F_CREATE should be set when creating new route [ 210.676361][T12932] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 210.865410][T12949] rxe_eth0 speed is unknown, defaulting to 1000 [ 214.011886][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.491727][ C0] bridge0: port 1(team0) entered learning state [ 236.411720][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 236.411747][ C1] bridge0: topology change detected, propagating [ 239.550519][T12994] ip_tables: iptables: counters copy to user failed while replacing table [ 239.569929][T13000] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 239.623633][T12999] __nla_validate_parse: 3 callbacks suppressed [ 239.623652][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1896'. [ 239.623670][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1896'. [ 239.623684][T12999] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1896'. [ 239.778738][T13010] netlink: 'syz.2.1901': attribute type 62 has an invalid length. [ 239.780218][T13013] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.807329][T13015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.822375][T13013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1905'. [ 239.827464][T13013] tipc: Resetting bearer [ 240.049330][T13030] netlink: 'syz.3.1908': attribute type 1 has an invalid length. [ 240.108166][T13030] bond9: entered promiscuous mode [ 240.108641][T13030] 8021q: adding VLAN 0 to HW filter on device bond9 [ 240.130223][T13034] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1907'. [ 240.130245][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1907'. [ 240.130258][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 240.166138][T13030] ipvlan3: entered allmulticast mode [ 240.166159][T13030] bond9: entered allmulticast mode [ 240.166423][T13030] bond9: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 240.166441][T13030] bond9: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 240.166455][T13030] bond9: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 240.193237][T13030] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 240.259089][T13038] netlink: 'syz.0.1909': attribute type 15 has an invalid length. [ 240.259113][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 240.397323][T13048] netlink: 'syz.0.1915': attribute type 2 has an invalid length. [ 240.514660][T13056] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1916'. [ 240.564541][T13055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1917'. [ 240.569957][T13059] team_slave_1: Caught tx_queue_len zero misconfig [ 240.695967][T13067] team0: No ports can be present during mode change [ 240.891790][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 241.489469][T13122] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 241.489724][T13123] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 241.998371][T13153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.083815][T13168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.140617][T13153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.987361][T13227] veth0: Caught tx_queue_len zero misconfig [ 242.991525][T13227] syzkaller0: entered promiscuous mode [ 243.006391][T13227] syzkaller0: entered allmulticast mode [ 243.011075][T13234] netlink: 'syz.1.1964': attribute type 2 has an invalid length. [ 243.022189][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022228][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022251][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022273][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022295][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022317][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022339][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022361][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022383][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022405][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022427][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022448][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022470][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022491][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022514][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022542][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022565][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022585][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022607][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022629][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022651][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022673][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022694][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022716][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022738][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022760][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022782][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022804][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022826][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022848][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022870][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022891][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022913][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022935][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.022988][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023010][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023036][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023058][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023080][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023102][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023123][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023144][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023166][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023188][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023210][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023231][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023253][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023275][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023296][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023318][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023340][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023362][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023383][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023405][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023426][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023448][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023470][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023491][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023513][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023541][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023563][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023586][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023607][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023628][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 243.023650][T13229] IPVS: set_ctl: invalid protocol: 72 172.20.20.187:20002 [ 244.028233][T13296] netlink: 'syz.3.1981': attribute type 15 has an invalid length. [ 244.039119][T13296] netlink: 'syz.3.1981': attribute type 15 has an invalid length. [ 244.053126][ T6948] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 244.053170][ T6948] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 244.053201][ T6948] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 244.053239][ T6948] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 244.420205][T13328] block nbd2: NBD_DISCONNECT [ 244.420232][T13328] block nbd2: Send disconnect failed -32 [ 244.420248][T13328] block nbd2: Send disconnect failed -32 [ 244.420264][T13328] block nbd2: shutting down sockets [ 244.696539][T13340] ip_tables: iptables: counters copy to user failed while replacing table [ 244.783038][T13353] netlink: 'syz.0.1997': attribute type 11 has an invalid length. [ 244.783058][T13353] netlink: 'syz.0.1997': attribute type 11 has an invalid length. [ 244.783070][T13353] __nla_validate_parse: 22 callbacks suppressed [ 244.783080][T13353] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1997'. [ 244.805884][T13350] bond10: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 244.845661][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'. [ 244.846248][T13350] bond10 (unregistering): Released all slaves [ 244.914217][T13357] ip6tnl0: Caught tx_queue_len zero misconfig [ 245.114704][T13372] netlink: 'syz.3.2004': attribute type 1 has an invalid length. [ 245.222738][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2005'. [ 245.255527][T13385] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 245.306786][T13390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2009'. [ 245.306821][T13390] netlink: 'syz.4.2009': attribute type 7 has an invalid length. [ 245.306840][T13390] netlink: 'syz.4.2009': attribute type 8 has an invalid length. [ 245.306851][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2009'. [ 245.331477][T13390] erspan0: entered promiscuous mode [ 245.340280][T13390] gretap0: entered promiscuous mode [ 245.347512][T13390] erspan0: left promiscuous mode [ 245.353222][T13390] gretap0: left promiscuous mode [ 245.482930][T13399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2012'. [ 245.483073][T13399] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 245.558608][T13402] veth0: entered promiscuous mode [ 245.561171][T13401] veth0: left promiscuous mode [ 245.703116][T13417] netlink: NAT attribute has 8 unknown bytes [ 245.703147][T13417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.802719][T13424] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 245.981336][T13426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2021'. [ 246.331338][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2027'. [ 246.510304][T13468] netlink: 'syz.0.2029': attribute type 1 has an invalid length. [ 246.547648][T13468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.553937][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2030'. [ 246.635037][T13472] ip_tables: iptables: counters copy to user failed while replacing table [ 246.684485][T13474] pimreg: entered allmulticast mode [ 246.686824][T13478] ip6t_hbh: unknown flags 38 [ 246.864582][T13488] bond10: entered promiscuous mode [ 246.865315][T13488] bond10: entered allmulticast mode [ 246.865759][T13488] 8021q: adding VLAN 0 to HW filter on device bond10 [ 246.921381][T13500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2041'. [ 246.923808][T13499] netlink: 'syz.2.2041': attribute type 1 has an invalid length. [ 246.956089][T13489] bond11: entered promiscuous mode [ 246.956115][T13489] bond11: entered allmulticast mode [ 246.956651][T13489] 8021q: adding VLAN 0 to HW filter on device bond11 [ 247.327877][T13526] netlink: 'syz.4.2052': attribute type 1 has an invalid length. [ 247.349260][T13529] xt_hashlimit: size too large, truncated to 1048576 [ 247.484310][T13547] ip_tables: iptables: counters copy to user failed while replacing table [ 247.867209][T13617] openvswitch: netlink: IP tunnel dst address not specified [ 247.867240][T13617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.895717][T13617] openvswitch: netlink: IP tunnel dst address not specified [ 248.135865][T13660] macvlan0: entered promiscuous mode [ 248.476006][T13683] netlink: 'syz.1.2064': attribute type 49 has an invalid length. [ 249.104684][T13709] netlink: 'syz.3.2072': attribute type 15 has an invalid length. [ 249.105420][T13709] netlink: 'syz.3.2072': attribute type 15 has an invalid length. [ 249.955731][T13748] __nla_validate_parse: 79 callbacks suppressed [ 249.955753][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2080'. [ 250.088317][T13753] netlink: 'syz.2.2082': attribute type 2 has an invalid length. [ 250.088338][T13753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2082'. [ 250.223365][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'. [ 250.224605][T13762] validate_nla: 1 callbacks suppressed [ 250.224620][T13762] netlink: 'syz.3.2084': attribute type 1 has an invalid length. [ 250.291982][T13765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2084'. [ 250.669630][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2090'. [ 250.828884][T13801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2094'. [ 250.884321][T13803] net_ratelimit: 99 callbacks suppressed [ 250.884341][T13803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.976615][T13808] bond5: Removing last arp target with arp_interval on [ 250.979374][T13808] netlink: 'syz.0.2096': attribute type 1 has an invalid length. [ 251.216805][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2099'. [ 251.255473][T13815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.523164][T13827] bond9: option min_links: invalid value (18446744073709551614) [ 251.523191][T13827] bond9: option min_links: allowed values 0 - 2147483647 [ 251.553640][T13827] bond9 (unregistering): Released all slaves [ 252.250447][T13882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2116'. [ 252.301213][T13887] SET target dimension over the limit! [ 252.308620][T13887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2119'. [ 252.368127][T13893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2121'. [ 252.441015][T13901] netlink: 'syz.1.2123': attribute type 1 has an invalid length. [ 252.585709][T13908] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 252.665289][T13915] netlink: 'syz.1.2126': attribute type 32 has an invalid length. [ 252.688637][T13915] bond7: Setting coupled_control to off (0) [ 252.758021][T13920] xt_hashlimit: size too large, truncated to 1048576 [ 252.984189][T13932] tipc: Enabling of bearer rejected, failed to enable media [ 253.039966][T13935] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 253.068603][T13937] ipt_REJECT: ECHOREPLY no longer supported. [ 253.131945][T13944] ip6t_srh: unknown srh match flags 5F28 [ 253.133662][T13944] syzkaller0: entered promiscuous mode [ 253.133681][T13944] syzkaller0: entered allmulticast mode [ 253.317350][T13956] netlink: 'syz.4.2140': attribute type 3 has an invalid length. [ 253.407180][T13961] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20002 [ 253.416575][T13963] syzkaller0: left promiscuous mode [ 253.416595][T13963] syzkaller0: left allmulticast mode [ 253.589629][T13978] netlink: 'syz.1.2144': attribute type 1 has an invalid length. [ 253.625774][T13978] 8021q: adding VLAN 0 to HW filter on device bond8 [ 253.631142][T13975] tipc: Enabling of bearer rejected, failed to enable media [ 253.776423][T13990] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 254.072887][T14004] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 254.072996][T14004] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 254.073026][T14004] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 254.430263][T14042] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 254.472651][T14048] netlink: 'syz.4.2166': attribute type 1 has an invalid length. [ 254.525600][T14048] bond12: (slave bridge3): making interface the new active one [ 254.530214][T14048] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 254.642450][T14065] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 254.668339][T14063] ipt_ah: unknown flags FF [ 255.107227][T14093] wg0: Caught tx_queue_len zero misconfig [ 255.108826][T14097] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 255.109601][T14093] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 255.213951][T14107] syzkaller1: entered promiscuous mode [ 255.213973][T14107] syzkaller1: entered allmulticast mode [ 255.217389][T14107] __nla_validate_parse: 26 callbacks suppressed [ 255.217406][T14107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2182'. [ 255.614099][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.614154][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.649477][T14139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.666660][T14140] veth0_macvtap: Caught tx_queue_len zero misconfig [ 255.735523][T14141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.738275][T14141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.741822][T14141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.745243][T14141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.752283][T14141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.755117][T14141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.759193][T14141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.775356][T14141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.797900][T14147] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 255.832717][ T6955] IPVS: starting estimator thread 0... [ 255.844827][T14144] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2194'. [ 255.844846][T14144] tc_dump_action: action bad kind [ 255.852531][T14144] netlink: 'syz.3.2194': attribute type 11 has an invalid length. [ 255.852549][T14144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2194'. [ 255.892527][T14151] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2196'. [ 255.929400][T14155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2197'. [ 255.931501][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 255.939653][T14145] IPVS: using max 33 ests per chain, 79200 per kthread [ 255.943750][T14155] netlink: 'syz.3.2197': attribute type 3 has an invalid length. [ 255.982174][T14151] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2196'. [ 256.037817][T14165] tipc: Started in network mode [ 256.037846][T14165] tipc: Node identity 02bd1d76aec8, cluster identity 9 [ 256.037994][T14165] tipc: Enabled bearer , priority 0 [ 256.116088][T14165] syzkaller0: entered promiscuous mode [ 256.116113][T14165] syzkaller0: entered allmulticast mode [ 256.116913][T14165] tipc: Resetting bearer [ 256.119680][T14167] tipc: Enabling of bearer rejected, failed to enable media [ 256.151206][T14164] tipc: Resetting bearer [ 256.198248][T14171] xt_nat: multiple ranges no longer supported [ 256.427621][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 256.795686][T14195] netlink: 'syz.2.2206': attribute type 4 has an invalid length. [ 256.796544][T14196] netlink: 'syz.2.2206': attribute type 4 has an invalid length. [ 258.116428][T14164] tipc: Disabling bearer [ 258.123274][T14190] gtp1: entered promiscuous mode [ 258.123294][T14190] gtp1: entered allmulticast mode [ 258.138666][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2203'. [ 258.169494][T14201] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 258.170337][ T988] tipc: Node number set to 2893356406 [ 258.191884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.242223][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.333477][T14212] syzkaller1: entered promiscuous mode [ 258.333498][T14212] syzkaller1: entered allmulticast mode [ 258.441994][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.744536][T14257] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 258.754531][T14266] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 258.757011][T14266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2227'. [ 258.779661][T14264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.781748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.818333][T14264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.819301][ T6624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.834769][T14262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.050796][T14285] tipc: New replicast peer: 255.255.255.255 [ 259.067713][T14285] tipc: Enabled bearer , priority 10 [ 259.068099][T14287] ipvlan0: entered promiscuous mode [ 259.068145][T14287] ipvlan0: entered allmulticast mode [ 259.068157][T14287] veth0_vlan: entered allmulticast mode [ 259.114016][T14291] netlink: 'syz.3.2234': attribute type 64 has an invalid length. [ 260.262994][T14378] __nla_validate_parse: 8 callbacks suppressed [ 260.263014][T14378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2257'. [ 260.293307][T14387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2259'. [ 260.293337][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2259'. [ 260.334909][T14387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2259'. [ 260.334942][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2259'. [ 260.628120][T14400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2263'. [ 260.657438][T14405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2263'. [ 260.934917][T14423] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2268'. [ 261.590845][T14458] netlink: 'syz.1.2277': attribute type 1 has an invalid length. [ 261.653017][T14458] 8021q: adding VLAN 0 to HW filter on device bond9 [ 261.750431][T14465] geneve3: entered promiscuous mode [ 261.750455][T14465] geneve3: entered allmulticast mode [ 261.782322][ T158] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 261.782377][ T158] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 261.782423][ T158] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 261.782452][ T158] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 261.949472][T14489] block nbd0: reconnected socket [ 261.961054][ T5625] block nbd0: Receive control failed (result -32) [ 262.208797][T14512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2291'. [ 262.228207][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2291'. [ 262.237303][T14514] syzkaller0: entered promiscuous mode [ 262.237327][T14514] syzkaller0: entered allmulticast mode [ 262.515101][T14532] macvlan0: entered promiscuous mode [ 262.581514][T14537] netlink: 'syz.0.2300': attribute type 58 has an invalid length. [ 262.767094][T14542] bond10: entered allmulticast mode [ 262.767646][T14542] 8021q: adding VLAN 0 to HW filter on device bond10 [ 263.292424][ C0] net_ratelimit: 34 callbacks suppressed [ 263.292463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.293156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.315439][T14583] ip6t_rt: unknown flags 36 [ 263.455718][T14589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.455991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.527117][T14591] netlink: 'syz.1.2314': attribute type 23 has an invalid length. [ 263.635721][T14602] syzkaller0: entered promiscuous mode [ 263.635742][T14602] syzkaller0: entered allmulticast mode [ 263.833702][ T6955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.138962][T14631] netlink: 'syz.0.2323': attribute type 3 has an invalid length. [ 264.334456][T14635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.480666][T14635] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 264.571656][ C0] bridge0: port 1(team0) entered forwarding state [ 264.571682][ C0] bridge0: topology change detected, propagating [ 264.573706][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.712644][T14642] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 264.847448][T14654] GUP no longer grows the stack in syz.0.2327 (14654): 200000003000-20000000a000 (200000001000) [ 264.847507][T14654] CPU: 0 UID: 0 PID: 14654 Comm: syz.0.2327 Not tainted syzkaller #0 PREEMPT(full) [ 264.847558][T14654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.847592][T14654] Call Trace: [ 264.847603][T14654] [ 264.847612][T14654] dump_stack_lvl+0xe8/0x150 [ 264.847655][T14654] __get_user_pages+0x23b6/0x2750 [ 264.847688][T14654] ? lock_acquire+0x115/0x350 [ 264.847725][T14654] ? __gup_longterm_locked+0xc3b/0x15c0 [ 264.847763][T14654] __gup_longterm_locked+0xd52/0x15c0 [ 264.847795][T14654] ? lock_acquire+0x115/0x350 [ 264.847834][T14654] gup_fast_fallback+0x1d92/0x20e0 [ 264.847895][T14654] ? __pfx_gup_fast_fallback+0x10/0x10 [ 264.847926][T14654] ? lock_acquire+0x115/0x350 [ 264.847944][T14654] ? is_valid_gup_args+0x11f/0x200 [ 264.847974][T14654] ? get_user_pages_fast+0x4d/0xb0 [ 264.848005][T14654] __iov_iter_get_pages_alloc+0x378/0xa40 [ 264.848041][T14654] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 264.848068][T14654] iov_iter_get_pages2+0x5e/0xa0 [ 264.848099][T14654] __se_sys_vmsplice+0x7b5/0x1660 [ 264.848136][T14654] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 264.848157][T14654] ? __pfx_futex_wait+0x10/0x10 [ 264.848236][T14654] do_syscall_64+0x166/0x520 [ 264.848256][T14654] ? trace_irq_disable+0x3b/0x140 [ 264.848277][T14654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.848297][T14654] ? clear_bhb_loop+0x70/0xc0 [ 264.848319][T14654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.848338][T14654] RIP: 0033:0x7f672c59e559 [ 264.848372][T14654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.848388][T14654] RSP: 002b:00007f672d500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 264.848412][T14654] RAX: ffffffffffffffda RBX: 00007f672c825fa0 RCX: 00007f672c59e559 [ 264.848426][T14654] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000006 [ 264.848439][T14654] RBP: 00007f672c6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 264.848451][T14654] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 264.848462][T14654] R13: 00007f672c826038 R14: 00007f672c825fa0 R15: 00007ffdefec98f8 [ 264.848493][T14654] [ 264.932983][ T6949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.937526][T14660] netlink: 'syz.1.2330': attribute type 12 has an invalid length. [ 264.937753][T14660] netlink: 'syz.1.2330': attribute type 12 has an invalid length. [ 265.124334][T14665] 8021q: adding VLAN 0 to HW filter on device bond10 [ 265.206078][T14670] macvlan2: entered promiscuous mode [ 265.206100][T14670] macvlan2: entered allmulticast mode [ 265.206783][T14670] bond10: (slave macvlan2): Error -22 calling dev_set_mtu [ 265.217392][T14672] netlink: 'syz.3.2334': attribute type 32 has an invalid length. [ 265.286813][T14672] bond11: Setting coupled_control to off (0) [ 265.294110][T14677] __nla_validate_parse: 11 callbacks suppressed [ 265.294129][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2335'. [ 265.348789][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2334'. [ 265.646993][T14697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.715394][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 265.843582][T14708] syzkaller0: entered promiscuous mode [ 265.843598][T14708] syzkaller0: entered allmulticast mode [ 266.188056][T14730] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2350'. [ 266.302016][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 266.422955][T14737] bond12: Invalid ad_actor_system MAC address. [ 266.422975][T14737] bond12: option ad_actor_system: invalid value (1) [ 266.464823][T14737] bond12 (unregistering): Released all slaves [ 266.611895][T14741] veth1_virt_wifi: entered allmulticast mode [ 266.639628][T14750] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 266.639766][T14750] syzkaller1: linktype set to 823 [ 266.664725][T14757] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2358'. [ 267.207664][T14768] smc: net device dummy0 applied user defined pnetid SYZ2 [ 267.207895][T14768] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2 [ 267.306329][T14770] tipc: Enabling not permitted [ 267.306360][T14770] tipc: Enabling of bearer rejected, failed to enable media [ 267.409715][T14786] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2366'. [ 267.680653][T14803] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2371'. [ 268.155369][T14827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2377'. [ 268.554521][T14849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2382'. [ 269.134135][T14882] nbd: must specify at least one socket [ 269.351955][T14894] netlink: 'syz.1.2397': attribute type 10 has an invalid length. [ 269.360478][T14894] team0: Device wg2 is of different type [ 269.367339][ T6621] net_ratelimit: 10 callbacks suppressed [ 269.367356][ T6621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.513070][T14907] netlink: 'syz.1.2399': attribute type 1 has an invalid length. [ 269.575379][T14907] bond11: entered promiscuous mode [ 269.575825][T14907] 8021q: adding VLAN 0 to HW filter on device bond11 [ 269.589791][T14908] macvtap1: entered allmulticast mode [ 269.610795][T14909] bond11: (slave bridge10): making interface the new active one [ 269.610816][T14909] bridge10: entered promiscuous mode [ 269.618510][T14909] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 269.625970][ T6949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.312066][T14954] Bluetooth: MGMT ver 1.23 [ 270.312612][T14954] xt_nat: multiple ranges no longer supported [ 270.456911][T14957] syzkaller1: entered promiscuous mode [ 270.456934][T14957] syzkaller1: entered allmulticast mode [ 270.458710][T14957] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 270.459006][T14957] lo: Caught tx_queue_len zero misconfig [ 270.473826][ T6621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.484275][T14965] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 270.728257][T14967] netlink: 'syz.3.2414': attribute type 15 has an invalid length. [ 270.728280][T14967] __nla_validate_parse: 5 callbacks suppressed [ 270.728291][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 270.766345][T14967] netlink: 'syz.3.2414': attribute type 15 has an invalid length. [ 270.766367][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 270.781913][ T6621] netdevsim netdevsim3 netdevsim3: set [0, 2] type 1 family 0 port 2816 - 0 [ 270.781954][ T6621] netdevsim netdevsim3 netdevsim2: set [0, 2] type 1 family 0 port 2816 - 0 [ 270.781992][ T6621] netdevsim netdevsim3 netdevsim1: set [0, 2] type 1 family 0 port 2816 - 0 [ 270.792538][ T6621] netdevsim netdevsim3 netdevsim0: set [0, 2] type 1 family 0 port 2816 - 0 [ 270.831038][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 270.892797][ T6624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.893047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.447738][T14997] netlink: 'syz.3.2423': attribute type 2 has an invalid length. [ 271.447760][T14997] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 271.592996][ T6621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.720469][T15004] bond5: left allmulticast mode [ 271.873751][T15022] erspan0: left allmulticast mode [ 271.873776][T15022] erspan0: left promiscuous mode [ 271.873992][T15022] bridge1: port 1(erspan0) entered disabled state [ 271.978078][T15022] bond0: (slave bond_slave_0): Releasing backup interface [ 271.998428][T15022] bond0: (slave bond_slave_1): Releasing backup interface [ 272.030520][T15022] team0: Port device team_slave_0 removed [ 272.063778][T15022] team0: Port device team_slave_1 removed [ 272.065818][T15022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.065838][T15022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.068164][T15022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.068182][T15022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.077812][T15022] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 272.185978][T15029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2429'. [ 272.186003][T15029] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2429'. [ 272.186048][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 272.226947][T15032] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2430'. [ 272.362837][T15035] xt_IDLETIMER: label is empty or not nul-terminated [ 272.652593][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.703296][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.140506][T15069] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 273.568825][T15094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2447'. [ 273.585959][T15094] netlink: 'syz.0.2447': attribute type 1 has an invalid length. [ 273.762991][T15094] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 273.764493][T15094] bond7 (unregistering): Released all slaves [ 274.058435][T15108] veth0: Caught tx_queue_len zero misconfig [ 274.618567][T15130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.818710][ T59] net_ratelimit: 1 callbacks suppressed [ 274.818729][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.862522][T15139] IPv6: syztnl1: Disabled Multicast RS [ 274.905764][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'. [ 274.923726][ T6949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.338403][T15172] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2470'. [ 275.365696][T15172] set match dimension is over the limit! [ 275.657033][T15185] openvswitch: netlink: Message has 8 unknown bytes. [ 275.889123][T15194] bridge0: entered allmulticast mode [ 275.997359][T15197] xt_TCPMSS: Only works on TCP SYN packets [ 276.011416][T15197] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 276.013037][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.013278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.023838][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.359503][T15201] [ 276.361877][T15201] ====================================================== [ 276.368901][T15201] WARNING: possible circular locking dependency detected [ 276.375941][T15201] syzkaller #0 Not tainted [ 276.380363][T15201] ------------------------------------------------------ [ 276.387387][T15201] syz.3.2477/15201 is trying to acquire lock: [ 276.393455][T15201] ffff88801d2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 276.404019][T15201] [ 276.404019][T15201] but task is already holding lock: [ 276.411388][T15201] ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 276.421506][T15201] [ 276.421506][T15201] which lock already depends on the new lock. [ 276.421506][T15201] [ 276.431921][T15201] [ 276.431921][T15201] the existing dependency chain (in reverse order) is: [ 276.440937][T15201] [ 276.440937][T15201] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 276.448690][T15201] cpus_read_lock+0x42/0x160 [ 276.453820][T15201] static_key_slow_inc+0x12/0x30 [ 276.459296][T15201] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 276.465542][T15201] nbd_genl_foreach_sock+0x265/0x450 [ 276.471343][T15201] nbd_genl_reconfigure+0xbbb/0x1040 [ 276.477139][T15201] genl_family_rcv_msg_doit+0x233/0x340 [ 276.483201][T15201] genl_rcv_msg+0x614/0x7a0 [ 276.488214][T15201] netlink_rcv_skb+0x226/0x4a0 [ 276.493486][T15201] genl_rcv+0x28/0x40 [ 276.497987][T15201] netlink_unicast+0x8ef/0xa80 [ 276.503256][T15201] netlink_sendmsg+0x813/0xb40 [ 276.508527][T15201] sock_sendmsg_nosec+0x13a/0x180 [ 276.514064][T15201] ____sys_sendmsg+0x54e/0x850 [ 276.519361][T15201] ___sys_sendmsg+0x2a5/0x360 [ 276.524548][T15201] __x64_sys_sendmsg+0x1b1/0x290 [ 276.529994][T15201] do_syscall_64+0x166/0x520 [ 276.535098][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.541504][T15201] [ 276.541504][T15201] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 276.549139][T15201] __mutex_lock+0x19d/0x1550 [ 276.554239][T15201] nbd_queue_rq+0x373/0xff0 [ 276.559257][T15201] blk_mq_dispatch_rq_list+0x499/0x1990 [ 276.565319][T15201] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 276.572162][T15201] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 276.578655][T15201] blk_mq_run_work_fn+0x16c/0x300 [ 276.584185][T15201] process_scheduled_works+0xc3d/0x1630 [ 276.590242][T15201] worker_thread+0xa47/0xfb0 [ 276.595346][T15201] kthread+0x38b/0x480 [ 276.599921][T15201] ret_from_fork+0x514/0xb70 [ 276.605019][T15201] ret_from_fork_asm+0x1a/0x30 [ 276.610294][T15201] [ 276.610294][T15201] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 276.617490][T15201] __mutex_lock+0x19d/0x1550 [ 276.622595][T15201] nbd_queue_rq+0xc1/0xff0 [ 276.627523][T15201] blk_mq_dispatch_rq_list+0x499/0x1990 [ 276.633580][T15201] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 276.640425][T15201] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 276.646925][T15201] blk_mq_run_work_fn+0x16c/0x300 [ 276.652457][T15201] process_scheduled_works+0xc3d/0x1630 [ 276.658523][T15201] worker_thread+0xa47/0xfb0 [ 276.663630][T15201] kthread+0x38b/0x480 [ 276.668243][T15201] ret_from_fork+0x514/0xb70 [ 276.673342][T15201] ret_from_fork_asm+0x1a/0x30 [ 276.678613][T15201] [ 276.678613][T15201] -> #4 (set->srcu){.+.+}-{0:0}: [ 276.685724][T15201] __synchronize_srcu+0xc9/0x2f0 [ 276.691176][T15201] elevator_switch+0x1e8/0x7b0 [ 276.696448][T15201] elevator_change+0x2fa/0x480 [ 276.701729][T15201] elevator_set_default+0x375/0x440 [ 276.707439][T15201] blk_register_queue+0x3f3/0x4e0 [ 276.712982][T15201] __add_disk+0x6b8/0xdb0 [ 276.718168][T15201] add_disk_fwnode+0x100/0x3a0 [ 276.723438][T15201] nbd_dev_add+0x733/0xb60 [ 276.728380][T15201] nbd_init+0x168/0x1f0 [ 276.733042][T15201] do_one_initcall+0x250/0x870 [ 276.738319][T15201] do_initcall_level+0x10a/0x1a0 [ 276.743770][T15201] do_initcalls+0x59/0xa0 [ 276.748610][T15201] kernel_init_freeable+0x29d/0x3e0 [ 276.754321][T15201] kernel_init+0x22/0x1d0 [ 276.759162][T15201] ret_from_fork+0x514/0xb70 [ 276.764261][T15201] ret_from_fork_asm+0x1a/0x30 [ 276.769532][T15201] [ 276.769532][T15201] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 276.777341][T15201] __mutex_lock+0x19d/0x1550 [ 276.782441][T15201] elevator_change+0x1af/0x480 [ 276.787731][T15201] elevator_set_none+0xb5/0x140 [ 276.793109][T15201] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 276.799438][T15201] nbd_start_device+0x189/0xb30 [ 276.804818][T15201] nbd_genl_connect+0x167d/0x1cd0 [ 276.810362][T15201] genl_family_rcv_msg_doit+0x233/0x340 [ 276.816430][T15201] genl_rcv_msg+0x614/0x7a0 [ 276.821564][T15201] netlink_rcv_skb+0x226/0x4a0 [ 276.826866][T15201] genl_rcv+0x28/0x40 [ 276.831374][T15201] netlink_unicast+0x8ef/0xa80 [ 276.836651][T15201] netlink_sendmsg+0x813/0xb40 [ 276.841927][T15201] sock_sendmsg_nosec+0x13a/0x180 [ 276.847468][T15201] ____sys_sendmsg+0x54e/0x850 [ 276.852742][T15201] ___sys_sendmsg+0x2a5/0x360 [ 276.857926][T15201] __x64_sys_sendmsg+0x1b1/0x290 [ 276.863377][T15201] do_syscall_64+0x166/0x520 [ 276.868481][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.874882][T15201] [ 276.874882][T15201] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 276.883481][T15201] blk_alloc_queue+0x544/0x690 [ 276.888767][T15201] __blk_mq_alloc_disk+0x194/0x390 [ 276.894396][T15201] nbd_dev_add+0x494/0xb60 [ 276.899324][T15201] nbd_init+0x168/0x1f0 [ 276.903989][T15201] do_one_initcall+0x250/0x870 [ 276.909265][T15201] do_initcall_level+0x10a/0x1a0 [ 276.914722][T15201] do_initcalls+0x59/0xa0 [ 276.919579][T15201] kernel_init_freeable+0x29d/0x3e0 [ 276.925301][T15201] kernel_init+0x22/0x1d0 [ 276.930153][T15201] ret_from_fork+0x514/0xb70 [ 276.935251][T15201] ret_from_fork_asm+0x1a/0x30 [ 276.940529][T15201] [ 276.940529][T15201] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 276.947726][T15201] fs_reclaim_acquire+0x71/0x100 [ 276.953178][T15201] kmem_cache_alloc_noprof+0x5f/0x600 [ 276.959063][T15201] __kernfs_iattrs+0xdd/0x380 [ 276.964254][T15201] kernfs_iop_setattr+0xe6/0x3f0 [ 276.969706][T15201] notify_change+0xbba/0xea0 [ 276.974809][T15201] do_truncate+0x1c2/0x250 [ 276.979746][T15201] path_openat+0x15b5/0x1d60 [ 276.984843][T15201] do_file_open+0x23e/0x4a0 [ 276.989860][T15201] do_sys_openat2+0x115/0x200 [ 276.995048][T15201] __x64_sys_openat+0x138/0x170 [ 277.000411][T15201] do_syscall_64+0x166/0x520 [ 277.005510][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.011915][T15201] [ 277.011915][T15201] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 277.020421][T15201] __lock_acquire+0x164c/0x2de0 [ 277.025789][T15201] lock_acquire+0x115/0x350 [ 277.030806][T15201] down_read+0x4a/0x330 [ 277.035508][T15201] kernfs_iop_permission+0x7f/0x430 [ 277.041218][T15201] inode_permission+0x3de/0x5f0 [ 277.046582][T15201] cgroup_attach_permissions+0x28e/0x9f0 [ 277.052735][T15201] __cgroup_procs_write+0x24b/0x320 [ 277.058443][T15201] cgroup_threads_write+0x24/0x50 [ 277.063974][T15201] cgroup_file_write+0x331/0x8f0 [ 277.069437][T15201] kernfs_fop_write_iter+0x3a4/0x540 [ 277.075237][T15201] vfs_write+0x612/0xba0 [ 277.079989][T15201] ksys_write+0x150/0x270 [ 277.084831][T15201] do_syscall_64+0x166/0x520 [ 277.089932][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.096343][T15201] [ 277.096343][T15201] other info that might help us debug this: [ 277.096343][T15201] [ 277.106557][T15201] Chain exists of: [ 277.106557][T15201] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 277.106557][T15201] [ 277.120542][T15201] Possible unsafe locking scenario: [ 277.120542][T15201] [ 277.127985][T15201] CPU0 CPU1 [ 277.133340][T15201] ---- ---- [ 277.138690][T15201] rlock(cpu_hotplug_lock); [ 277.143272][T15201] lock(&nsock->tx_lock); [ 277.150197][T15201] lock(cpu_hotplug_lock); [ 277.157208][T15201] rlock(&root->kernfs_iattr_rwsem); [ 277.162566][T15201] [ 277.162566][T15201] *** DEADLOCK *** [ 277.162566][T15201] [ 277.170692][T15201] locks held by syz.3.2477/15201: 5, last CPU#0: [ 277.177002][T15201] #0: ffff88807b265970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 277.186040][T15201] #1: ffff888036dea460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 277.194908][T15201] #2: ffff888055971c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 277.204643][T15201] #3: ffffffff8fd9c7a0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 277.214376][T15201] #4: ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 277.224899][T15201] [ 277.224899][T15201] stack backtrace: [ 277.230772][T15201] CPU: 0 UID: 0 PID: 15201 Comm: syz.3.2477 Not tainted syzkaller #0 PREEMPT(full) [ 277.240127][T15201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.250171][T15201] Call Trace: [ 277.253444][T15201] [ 277.256363][T15201] dump_stack_lvl+0xe8/0x150 [ 277.260948][T15201] print_circular_bug+0x2e2/0x300 [ 277.265971][T15201] check_noncircular+0x12f/0x150 [ 277.270905][T15201] __lock_acquire+0x164c/0x2de0 [ 277.275751][T15201] ? __lock_acquire+0x747/0x2de0 [ 277.280682][T15201] lock_acquire+0x115/0x350 [ 277.285174][T15201] ? kernfs_iop_permission+0x7f/0x430 [ 277.290537][T15201] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 277.296337][T15201] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 277.302136][T15201] down_read+0x4a/0x330 [ 277.306286][T15201] ? kernfs_iop_permission+0x7f/0x430 [ 277.311663][T15201] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 277.317893][T15201] kernfs_iop_permission+0x7f/0x430 [ 277.323082][T15201] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 277.328879][T15201] inode_permission+0x3de/0x5f0 [ 277.333729][T15201] cgroup_attach_permissions+0x28e/0x9f0 [ 277.339358][T15201] __cgroup_procs_write+0x24b/0x320 [ 277.344548][T15201] cgroup_threads_write+0x24/0x50 [ 277.349561][T15201] ? __pfx_cgroup_threads_write+0x10/0x10 [ 277.355264][T15201] cgroup_file_write+0x331/0x8f0 [ 277.360198][T15201] ? __pfx_cgroup_file_write+0x10/0x10 [ 277.365650][T15201] ? __kmalloc_noprof+0x38c/0x720 [ 277.370668][T15201] ? __pfx_cgroup_file_write+0x10/0x10 [ 277.376119][T15201] kernfs_fop_write_iter+0x3a4/0x540 [ 277.381399][T15201] vfs_write+0x612/0xba0 [ 277.385640][T15201] ? __pfx_vfs_write+0x10/0x10 [ 277.390394][T15201] ? __fget_files+0x2a/0x420 [ 277.394980][T15201] ksys_write+0x150/0x270 [ 277.399301][T15201] ? __pfx_ksys_write+0x10/0x10 [ 277.404141][T15201] do_syscall_64+0x166/0x520 [ 277.408726][T15201] ? trace_irq_disable+0x3b/0x140 [ 277.413741][T15201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.419795][T15201] ? clear_bhb_loop+0x70/0xc0 [ 277.424489][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.430380][T15201] RIP: 0033:0x7fbf0139e559 [ 277.434793][T15201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.454393][T15201] RSP: 002b:00007fbf0221a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.462807][T15201] RAX: ffffffffffffffda RBX: 00007fbf01625fa0 RCX: 00007fbf0139e559 [ 277.470773][T15201] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000005 [ 277.478736][T15201] RBP: 00007fbf014358b0 R08: 0000000000000000 R09: 0000000000000000 [ 277.486694][T15201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.494654][T15201] R13: 00007fbf01626038 R14: 00007fbf01625fa0 R15: 00007ffc578c7528 [ 277.502625][T15201] [ 277.578674][T15207] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2479'. [ 277.982963][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.175824][ T6623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.281990][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.382030][ T6621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.572132][ T6949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.491946][ T6949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.852248][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.852377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.602072][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.612359][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.722005][ T6621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.831934][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.692091][ T6621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.951858][ T6623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog