last executing test programs: 13.582971824s ago: executing program 1 (id=1971): r0 = socket(0x848000000011, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)=@newlink={0x1c4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x13990}, [@IFLA_VF_PORTS={0x1a4, 0x18, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xc0}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "33af2d7f5a302a0f2cd275cb8da5827a"}, @IFLA_PORT_VF={0x8, 0x1, 0x100}, @IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e3fcd63184a82f8bf20e82fc551ff89c"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "25e59bf468c1894da76d067b6cb82503"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dd0beb1f746875d8d04ce6dfe7348614"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x10}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f5927c9c8b56476f0997afadb708c105"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "86f5a4c8d925e4f7c1e573a8258d6873"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ca83f3442b00348b7465c466998553b6"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d3c38a38c39636eab1a4051719c8c1e5"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xbf}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a33888c44c5658440600bc261d889059"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1cad99fd9ccf1d7859e4dc52c256c84f"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4a8ab32c95c5f14d7af1c3a0e0d167cc"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "b038f0f9f7bcd179252e0541b18f8dbb"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7ffcba1c8427fd66bac214b8d3d2c634"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5ffb8aea43c6226e22bbab96a0e37807"}]}]}]}, 0x1c4}}, 0x0) 13.340180251s ago: executing program 1 (id=1974): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) read$alg(r1, &(0x7f0000000040)=""/136, 0x88) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, 0x0, 0xc814) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x30, 0x1410, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20000006) accept(r3, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000180)=0xfffffffffffffff9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) (async) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="b896a15f48052eec7bc7fe285f228824877bd9d7deef9ae32aa7eaa025f93fb406", 0x21}], 0x1}}], 0x1, 0x0) 13.154692336s ago: executing program 1 (id=1976): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB='\b'], 0x24}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x400}]}, @NFT_MSG_DELFLOWTABLE={0x19c, 0x18, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1e4}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x468}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x30}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x1fc, 0x1e, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d0, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}]}, {0x4}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb}, @NFTA_SET_ELEM_KEY={0xf8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4a, 0x1, "63235893f582114df8a82fb320b59b6a042ce7bed430057e7cbd1008f07109ddf622884478bded1bdb227ac9e347489d106559d19899dadd00e1ac052db20b29add2a3c840e6"}, @NFTA_DATA_VALUE={0x7d, 0x1, "6159499ab6cfb2cc0a1fee8e11775107d3faffab25759d7944797aac4cf4c949a1144388de92b9c7b1f2a114b2c821b8fac7ce3a41e7f1843c69b2c64d9a7848f207c04ef926024fcf82ba156d7c33b3356de7e3aa776f57d131ae38efac182be20b69a6331e3abc555084f31b4c4907156a25db0f97954c95"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0xa0, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x90, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x84, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x48, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x280}}, 0x0) 12.866597852s ago: executing program 1 (id=1980): sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x83f08be18976c1e4) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x10, 0x722, 0xd, 0x6, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x64, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @multicast2, {[@ssrr={0x89, 0x7, 0x9d, [@dev={0xac, 0x14, 0x14, 0x2c}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x10, 0x40, 0x6, 0x5, {{0x36, 0x4, 0x1, 0x9, 0xd8, 0x68, 0x0, 0x10, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@noop, @timestamp_addr={0x44, 0x14, 0xb5, 0x1, 0x3, [{@multicast1, 0x1}, {@multicast2, 0x3}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x12, 0x0, 0x7, [0x1]}, @lsrr={0x83, 0x7, 0xa4, [@local]}, @cipso={0x86, 0x56, 0x3, [{0x0, 0x6, "1fd80119"}, {0x1, 0xf, "26aa58e685dfe376a42d2b44ff"}, {0x2, 0x9, "673ab29cc55bca"}, {0x6, 0x9, "38c456a768608b"}, {0x2, 0xb, "0b2b50c061e30722ae"}, {0x6, 0x10, "412d53341285bfb198c4ab7381e8"}, {0x7, 0xe, "8f825a60366aa61c00f45da6"}]}, @end, @ssrr={0x89, 0x2b, 0x4b, [@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @multicast2, @empty, @loopback, @remote, @local, @private=0xa010100, @remote, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0xad, 0x0, 0x5, [0x10000, 0xfff, 0x7, 0x400, 0x3]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x9, 0x3, 0x20, @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x700, 0x3, 0x7}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x8, 0x40, 0x1ff, 0xfff, {{0xa, 0x4, 0x3, 0x2, 0x28, 0x67, 0x0, 0xc, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@generic={0x44, 0x11, "6f06a0c048a22a415371992ab3ad2d"}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000009c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x124, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x45}, 0x4000) (async) close(r0) (async) r14 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000a00)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x5, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x6a, 0x0, 0x25, 0x6}, @var={0x9, 0x0, 0x0, 0xe, 0x2, 0x2}, @fwd={0xe}, @enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x2, 0x8, 0xffffff93}, {0x1, 0x3, 0x7f}]}, @enum64={0x2, 0x5, 0x0, 0x13, 0x1, 0xd, [{0x6, 0x2, 0xa}, {0xe, 0x5, 0xa}, {0xd, 0xfb, 0x3}, {0xf, 0x53, 0x3}, {0x10, 0x401, 0x8}]}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @ptr={0xa}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000000b40)=""/4096, 0xcd, 0x1000, 0x1, 0x1, 0x0, @void, @value}, 0x28) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d00)=@bpf_ext={0x1c, 0x4, &(0x7f0000001b80)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @ldst={0x0, 0x0, 0x3, 0x0, 0x4, 0x50, 0xfffffffffffffffc}], &(0x7f0000001bc0)='GPL\x00', 0x401, 0x14, &(0x7f0000001c00)=""/20, 0x41000, 0x1, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001c80)={0x2, 0x3, 0x17f, 0x5}, 0x10, 0xcb1e, 0xffffffffffffffff, 0x0, &(0x7f0000001cc0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xfffff800, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={r16, 0xe0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001dc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000001e00)=[0x0], &(0x7f0000001e40)=[0x0, 0x0], 0x0, 0xd1, &(0x7f0000001e80)=[{}, {}], 0x10, 0x10, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8, 0x31, 0x8, 0x8, &(0x7f0000001f40)}}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) r17 = socket$inet6(0xa, 0x2, 0x7fffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r17, 0x29, 0x20, &(0x7f00000020c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x158, 0x2, 0x0, 0x2, 0x8001, 0x6469}, 0x20) (async) ioctl$sock_bt_hci(r15, 0x400448cb, &(0x7f0000002100)="2fe29eff912be5706aa358ff1a4130df9729c111b61cd1fc6187c482d5749265b62897ee3405a5bda56fb92dbdd158cbddfe6bfbb37abd2e1f4147ac3c46090994aa5e291f718ba8d17a27cf1a754e924f017001edcafc7fb9a3480dd2") (async) recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002180)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002200)=""/12, 0xc}, {&(0x7f0000002240)=""/30, 0x1e}, {&(0x7f0000002280)=""/90, 0x5a}, {&(0x7f0000002300)=""/12, 0xc}, {&(0x7f0000002340)=""/172, 0xac}], 0x5, &(0x7f0000002480)=""/242, 0xf2}, 0x48d3}, {{&(0x7f0000002580)=@nl, 0x80, &(0x7f0000002800)=[{&(0x7f0000002600)=""/93, 0x5d}, {&(0x7f0000002680)=""/235, 0xeb}, {&(0x7f0000002780)=""/128, 0x80}], 0x3, &(0x7f0000002840)=""/229, 0xe5}, 0x8}], 0x2, 0x12000, &(0x7f00000029c0)={0x77359400}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x8, 0x3f, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) 12.759398606s ago: executing program 1 (id=1982): sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) 5.003382992s ago: executing program 1 (id=1982): sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) 4.312600856s ago: executing program 2 (id=2082): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x140f, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0x9, [@const={0x3, 0x0, 0x0, 0xa, 0x4}, @union={0xc, 0x6, 0x0, 0x5, 0x0, 0x9, [{0x5, 0x4, 0x8}, {0x7, 0x3, 0xd}, {0xd, 0x2, 0x4}, {0x10}, {0x1, 0x2, 0x6584}, {0x5, 0x5, 0x3}]}, @enum={0xb, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x172000}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x73}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0xfffffe01}}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x54, 0x3}, @float={0x6, 0x0, 0x0, 0x10, 0x2}, @struct={0x1, 0x3, 0x0, 0x4, 0x0, 0x821, [{0x1, 0x4, 0x8}, {0x10, 0x1}, {0x2, 0x1, 0x7}]}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f, 0x5e7b3cbc187c0818, 0x61, 0x5f, 0x0, 0x5f, 0x30]}}, &(0x7f00000001c0)=""/34, 0x115, 0x22, 0x0, 0x9, 0x10000, @value}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x12, &(0x7f0000000740)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}], &(0x7f0000000800)='syzkaller\x00', 0x1000, 0x35, &(0x7f0000000840)=""/53, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x9, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r8, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xb, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x1fed, 0x85, &(0x7f0000000500)=""/133, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, r4, 0x8, &(0x7f0000000700)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r2, r5, 0x0, &(0x7f0000000a40)=[r6, r1, r1, r1, r7, r8, r1, r1, r1, r1], 0x0, 0x10, 0x8, @void, @value}, 0x94) r9 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg$inet(r9, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)="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", 0x3b2}, {&(0x7f0000000240)="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", 0x1c9}, {&(0x7f0000000140)="94ed0c0455bc37e9034e6b5a4a9cf0cae15353dff8", 0x15}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x40844) 4.073786353s ago: executing program 3 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000003d0009000000eaffffffffff0300000004001700080009"], 0x20}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18040000000000000000000000000000711236000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.947859942s ago: executing program 2 (id=2087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdea, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 3.755623391s ago: executing program 3 (id=2090): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1ff) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001400010026bd7000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fc02000000000000000000001d0000011400010020010000000000000000020000000001"], 0x40}, 0x1, 0x0, 0x0, 0x80c}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000300), 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000940)={r8, 0x1c, &(0x7f0000000900)=[@in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x307a8}]}, &(0x7f0000000a00)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @broadcast}}, 0x1, 0xfffe}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x100002}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20040040) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000000)=0x59, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000009000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40000000000080079109100000000006300400000000000950000a731e931a2a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) recvmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}, 0xfffff092}], 0x1, 0x40000000, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r11, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000003800)=""/4100, 0x1004}, {&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f0000000980)=""/67, 0x43}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000140)=""/205, 0xcd}, {&(0x7f00000006c0)=""/122, 0x7a}], 0xa, 0x0, 0x0, 0xb00}}], 0x1, 0x2100, 0x0) 3.407280246s ago: executing program 4 (id=2093): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x40, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x5, 0x10000, @vifc_lcl_addr=@multicast2, @initdev={0xac, 0x1e, 0x31, 0x0}}, 0x10) 3.370594319s ago: executing program 0 (id=2094): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0}, &(0x7f0000001840), &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18844f95cf9a062cc80fae6e70bd00000000000000000000000000efffb7080000000000007b8af8ff00000000b70800000000000000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702575b95c1ec8b0b3f0000000000000000000000009a75ec6ac85509f0759740c9c496cf2d058bbd2581b6d3f91900390d001567a998", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.347772338s ago: executing program 4 (id=2095): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x3757f80800a7abc5) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000043000900fcfffffffddbdf2503"], 0x14}}, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f000000cc80)={0xffffffffffffffff}) splice(r5, &(0x7f000000ccc0)=0xffffffff, r4, 0x0, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc7}]}, 0x34}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0xfc, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xd0, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0xb4, 0x1, [@m_sample={0xb0, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "9200fd45cfbfaf345fb3a8a997749fefa053a1e631f289e2733a34bfda3a1983d7027974d46e922209e9f418398e634151458aec78c3e590819e1ab74e5f08ce9f128c78176c6afb718af7f892cc43aa236ae8553e2bcb9475712e849a72c8618a556ea37252caba7ed994f095c56da51cd5d78c3a9aeb9b782ad180c9"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000c000300686173683a6970000c00078008000600000000000900020073797a300000000005000500020000005778040000000000"], 0x50}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r10}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x3, &(0x7f0000000100)=""/218, &(0x7f0000000000)=0x616378a3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='rxrpc_recvmsg\x00', r12}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.202116917s ago: executing program 0 (id=2096): r0 = socket(0x11, 0x800000003, 0x1000000) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r2 = socket$inet(0x2, 0x80001, 0x84) listen(r2, 0x2f) listen(r2, 0xaca) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0xfffff2f9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffb}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}], 0x7c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@delchain={0x34, 0x65, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfc8e182c54386c5c, 0x4}, {0x2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7c, 0xcd}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) socket(0x11, 0x800000003, 0x1000000) (async) socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) (async) socket$inet(0x2, 0x80001, 0x84) (async) listen(r2, 0x2f) (async) listen(r2, 0xaca) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0xfffff2f9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffb}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}], 0x7c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@delchain={0x34, 0x65, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfc8e182c54386c5c, 0x4}, {0x2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7c, 0xcd}}]}, 0x34}}, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) (async) 1.705798856s ago: executing program 4 (id=2097): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/56, 0x38}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.703584284s ago: executing program 3 (id=2098): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000004c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) r6 = socket(0x22, 0x2, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x0, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={r7, 0x1}, &(0x7f00000002c0)=0x8) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$rxrpc(r3, 0x0, 0x0, 0x40, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe25, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}]}, 0x1c}], 0x1}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0xb, 0x2, 0x4, 0x3, 0x12, 0x3, 0x2, 0x9, r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000180)=@req={0x1, 0x80, 0x8, 0x6}, 0x10) 1.672090549s ago: executing program 2 (id=2099): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x1}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x208, 0x240, 0x0, {}, [@common=@rt={{0x138}, {0x2, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @loopback, @loopback, @local, @local, @loopback, @remote]}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.61460181s ago: executing program 0 (id=2100): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) getsockopt$inet6_opts(r3, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f0000000840)) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r1, 0x201, 0x0, 0x0, {0x4, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002}, 0x0) 1.478854242s ago: executing program 3 (id=2101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r0, &(0x7f0000000380)="afada6a273", 0x0}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mmap(&(0x7f0000469000/0x1000)=nil, 0x1000, 0xa, 0x2010, r1, 0xfd71a000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="10010000220001000000000000000000020100800c000100000000000000000014000b"], 0x110}], 0x1}, 0x80) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x14}, {0x80}, {0x0, 0x6, 0xff}, {0x6}]}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.315505908s ago: executing program 4 (id=2102): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000340)="cf1b5172115cf2c9298d67df6ae3f81f856620ad8ecab2fa49fcbe1940c755e0", 0x20, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000000)=0x2) shutdown(r1, 0x1) 1.251884136s ago: executing program 0 (id=2103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x24, r1, 0x201, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xffffa848}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x103, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x3, 0x12) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000200)="2d43918ddee6d01a5c21d5c4e177ec8a6bd6f5509de59fcef5d9ba9613b4da77e7319c75dd4a4215845ac518746ebe0662747c3bd5bea714c1eb5a73003e5db216d1ae40af80881142e19ea89e73fda9617f73c7580a4aad189731e6c638c6934fb30b7d5a0bbdb54d02b640b4b85d4dfb7e34d44b800d8a8fca2dffcb1b3cb3825c35d630396f35980ea728abf79d1f82f67755ec1538c49388c1882ba69eeb04229aa315e5d87be6cf6d7d2582ff8eefc2d9184cf00395bb5eee210bd35667249bedb013b3a7e74664b4c7b9045eb59ee4e5", 0xd3) 1.246384248s ago: executing program 2 (id=2104): r0 = epoll_create1(0x0) close(r0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x42, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0xa000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) 622.327091ms ago: executing program 0 (id=2105): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r1, 0x7, 0x400}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4f7be2f741051ca18b00000000000000000000000000000015000000"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000380001002cbd7000ffdb81fdc28edf250bfa0400"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r6, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r6}, 0x10) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000080)={0x1100, 0x2, 0x80000008, 0x10003}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100001982c48e1654d65c6d74963c9daa6697499b2548f40d7dda8c9b2bb514f9788b39d14415b461c773595af1", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in, 0x0, 0x0, 0x4, 0x0, 0x300}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000001c00)={0x0, @in, 0x0, 0x0, 0xffffffff}, &(0x7f0000001cc0)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) 591.736197ms ago: executing program 4 (id=2106): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x101, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x8, [0x8001, 0x9], 0xd8d6}, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000540)={0x6, &(0x7f0000000480)=[{0xfffffff9, 0xc7, &(0x7f00000000c0)="77667d851d9f3f8d36a9896c1b3febb89fc168c005327a45b8c36d728e2801426daf5a8597a36c29a9a1bd7639369ee13061f24362ec6b4323a5a0cd9d6ad7926fc595c1ad36fc29d9fa26d5af5e077f6632ab853f4115ff7f2dbda7ce6cf4ccbb12c527ca43614fa52c4e5d35436bad190385d73fb6f74a0a40c487a84bc162ec7e32edd0492998553332409aa910667a1ada779bcf38476769695246b6d0a4d4d0ae1734ff5c10d85e91cd7caa3a25176759a178db80e194a64ac803e1011b0add64f89d7cc7", 0x1, 0x1}, {0x8, 0x4, &(0x7f00000001c0)="c8331aa8", 0x1, 0x1}, {0xc, 0x5e, &(0x7f0000000200)="643e70013385f341fb1ca91d3e47e9318d47a2ef4647ce5ec29d3b59b493d7a94a383824da34fd0c99075d49d359810d0ff0cf134ee1be059027bff88c37a3721d11161d8b78947fab838d5a992d5625191c12a51b757839c702862cf71b", 0x0, 0x1}, {0x1, 0xe4, &(0x7f0000000280)="22f7b85847e5d105a19173120dc408bb993c1c6e0de2888732e597ff3b21c6c19d80c2c8266aa1a1a0698363c9a4b7ac4b9cfa5a0368cd5ccbfffdbef558a78b466588412b7e5c8c425135bc47358a13a3bf880eec51481653081fabfaff45fa0446668bc16f874eee8179757ae23382d7a84dea91ac18750e83026ab3f84a28a5ff3bc1d4ad8fb9040351c610ea8c9bec23a536b9f61a140e221df0f2891aae0821b2b222b9184763612c739f8ee61069cc3621484c96c4307d9ed7a8b267c81331374effcd2517a19ce6e9e5aae511a9577307acb5a19af05cb9db378217ffa8ebcb76", 0x1}, {0x1000, 0x88, &(0x7f0000000380)="69dc2a5e25f0eb023f90b4d9e38defc8398d479050a6bd0584c37dcfda977ac008eb047fe74a367f7f5231bddca9cbc8927a2cf45b8e39bdb15afd5f7eb023bb6acc8e0ce48d280397412183dd0bc0f0c5160358f4d9f7e4cb070592c6ccbaedb1be9da142d1637aef03f607707a9ad4131b8c78a2ae4bfa58358965b1606a1098af3d45388bb939", 0x1, 0x1}, {0x6, 0x36, &(0x7f0000000440)="9cf493f3380b7a559c4c495ff24b6aba2f6231436b91f876e4d12a1a701efa7b82bf06c4e92d391a0cc332f4c844f5d3bd6891c71184", 0x0, 0x1}]}) r2 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r2, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000640)={0x63}, 0x4) setsockopt$inet_buf(r3, 0x0, 0x2e, &(0x7f0000000680)="1ebb638071b3175c78b023f9bce78e275bf4238b832dc628ed14c2449deaae1b4f571dfedce98749d457ccc2847771f6770c8ad42ffabbe1e61ef2c0730711c6184a87548598cc366086420646ab8faf308f5d370c28bf2f9816d9736d70f19f21af2afd4b1e14a0beb65f2f1554de2782ab9d3223df877d5d9a4e710fa2e96cc01ad209277a87d4b23a4fa7c99c555ef0aed61b3d959834ebdb47619b65ce8e447fda59c14da6d3f9d98cb02808b2f0b975d502f39fe4c72de87e228fcaf57bc8ba0a0b50b8fa899411207541b970b5f1ea69705f6f69c09eb5f8968f26c5d305f415be118fba84f25f002d319bc77a", 0xf0) (async) setsockopt$inet_buf(r3, 0x0, 0x2e, &(0x7f0000000680)="1ebb638071b3175c78b023f9bce78e275bf4238b832dc628ed14c2449deaae1b4f571dfedce98749d457ccc2847771f6770c8ad42ffabbe1e61ef2c0730711c6184a87548598cc366086420646ab8faf308f5d370c28bf2f9816d9736d70f19f21af2afd4b1e14a0beb65f2f1554de2782ab9d3223df877d5d9a4e710fa2e96cc01ad209277a87d4b23a4fa7c99c555ef0aed61b3d959834ebdb47619b65ce8e447fda59c14da6d3f9d98cb02808b2f0b975d502f39fe4c72de87e228fcaf57bc8ba0a0b50b8fa899411207541b970b5f1ea69705f6f69c09eb5f8968f26c5d305f415be118fba84f25f002d319bc77a", 0xf0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000780)=@assoc_value, &(0x7f00000007c0)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000780)=@assoc_value, &(0x7f00000007c0)=0x8) connect$unix(r2, &(0x7f0000000800)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) connect$unix(r2, &(0x7f0000000800)=@abs={0x1, 0x0, 0x4e23}, 0x6e) accept(r3, 0x0, &(0x7f0000000880)) (async) r4 = accept(r3, 0x0, &(0x7f0000000880)) r5 = accept4$netrom(r4, &(0x7f00000008c0)={{0x3, @netrom}, [@null, @remote, @remote, @bcast, @null, @rose, @null]}, &(0x7f0000000940)=0x48, 0x800) r6 = socket$isdn_base(0x22, 0x3, 0x0) r7 = accept4$ax25(r4, &(0x7f0000000980)={{0x3, @rose}, [@bcast, @netrom, @remote, @bcast, @remote, @netrom, @default, @bcast]}, &(0x7f0000000a00)=0x48, 0x800) poll(&(0x7f0000000a40)=[{r0, 0x8}, {0xffffffffffffffff, 0x1000}, {r0, 0x6002}, {r5, 0x2000}, {r0, 0x800c}, {r6, 0x104}, {r7, 0x40}, {r1, 0x8008}, {r4, 0x10}], 0x9, 0xbd) ioctl$IMGETVERSION(r6, 0x80044942, &(0x7f0000000ac0)) (async) ioctl$IMGETVERSION(r6, 0x80044942, &(0x7f0000000ac0)) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r8, 0xc010f508, &(0x7f0000000b00)={0x9, 0xfffffffffffffff9}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x19, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfef0, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@cb_func={0x18, 0x5}, @ldst={0x3, 0x3, 0x6, 0x4, 0x6, 0x10, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x2, 0x4, 0x6, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x1000, 0x7b, &(0x7f0000000c80)=""/123, 0x0, 0x5c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x3, 0xb, 0xc8, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000d80)=[0x1], &(0x7f0000000dc0)=[{0x5, 0x3, 0x2, 0xa}, {0x4, 0x1, 0x7, 0x4}, {0x2, 0x3, 0x9, 0x5}, {0x1, 0x3, 0x7}, {0x1, 0x5, 0xe, 0x4}, {0x0, 0x2, 0xd, 0x4}, {0x0, 0x3, 0x5, 0x7}, {0x3, 0x4, 0xb, 0x3}, {0x1, 0x4, 0x10}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001080)={r9, 0x0, 0x6b, 0x0, &(0x7f0000000f40)="aa36ccbc5a288406d7ecd0351dc625fcc7cbd822b3adbfa1bf5872a7912c399bd151582b9e706ad62a240075481c12cba659c8b945e50c1f8631ab4f7fe7467490fceb7a83dd3d02f106e068d262b659b85550f84381142df7de1301e17ac6513b6a648275e5bd49053a15", 0x0, 0xff, 0x0, 0x96, 0x0, &(0x7f0000000fc0)="a0648b8c863d783629a0f5ccf26db0eac74df40b2929af1899f3486dbccd99de3d1db0535e16ebc603dc3ed2cd01254793954b6566dee838576d5e71dba3a5cca4fd99c31896554426cfab9b5facee6b235f624611e87016a726b4f73252ca0042fff72c1e442b33404e7f57615b57eba5248c3bc99c3b5d56e1bc9d14035c1203a09b70b366bef54193a79c98dc6ececa9a6dc8b5b8", 0x0, 0x2, 0x0, 0x10000}, 0x50) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001100)={0x0, 0x3, 0x4, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001500)={r10, "56b02a1e1e4d1b35e94b738d6aeca16e"}) bind$unix(0xffffffffffffffff, &(0x7f0000002500)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FIBMAP(r6, 0x1, &(0x7f0000002580)=0x6) (async) ioctl$FIBMAP(r6, 0x1, &(0x7f0000002580)=0x6) ioctl$VFAT_IOCTL_READDIR_SHORT(r9, 0x82307202, &(0x7f00000025c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) tee(r1, r6, 0x5, 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002800)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/219, 0xdb}], 0x1, &(0x7f00000029c0)=""/135, 0x87}, 0x10000) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002800)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/219, 0xdb}], 0x1, &(0x7f00000029c0)=""/135, 0x87}, 0x10000) 531.904534ms ago: executing program 2 (id=2107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000340)=[{}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtaction={0xa8, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x94, 0x1, [@m_mirred={0x90, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x20000000, 0x1, 0x8}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 423.882832ms ago: executing program 0 (id=2108): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x27, 0x25, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0xfffffe49}], 0x1}, 0x48005) (async) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008b0"], 0x178}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x70bd26, 0x4, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2}, 0x0) 415.297296ms ago: executing program 3 (id=2109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x2000000000000, 0x4000000000000}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0xa, @in6=@mcast1, 0xfffffffe, 0x4, 0x2}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) r4 = socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x5, &(0x7f0000001e00)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r3, @ANYRES8, @ANYBLOB="a813297a212aaadd594b5007db882457f4879587d3e358f590a47d5510ce4cdada92f105d985741d8dd117a146c6da009f2c95e30bfe919ba6a5e54097346e01a4b1822643b039dd0baab684f453f53647387bc735c98ed305c062fa36a884320885d22a840e2aa7bb2de5868a689c499e9f31911bf010256ccf9b79c962d4cd3c1a8f17a7daf028f5faa0df4e88adc13d01a7a7f83d336e5c4423fc915e22beb93ad44abb96c88e75dc0a048abaa8db5e926fad4660e132"], &(0x7f00000028c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002800)=@bpf_ext={0x1c, 0x15, &(0x7f0000001c00)=@raw=[@generic={0x5, 0x0, 0x0, 0x6, 0xffffff83}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x4b7e4ee80583316d, 0x1, 0x1, 0x3, 0xfffffffffffffffc, 0x10}, @jmp={0x5, 0x0, 0xb, 0xb, 0xb, 0x6, 0xffffffffffffffff}], &(0x7f00000017c0)='syzkaller\x00', 0xff, 0xcc, &(0x7f0000001cc0)=""/204, 0x41000, 0x3, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x2, 0x0, 0x400, 0x6}, 0x10, 0x2548a, r6, 0x0, &(0x7f0000001dc0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="fa0a286b5d1c96274cceb840d200", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) clock_gettime(0x0, &(0x7f0000001a00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001940)=[{{&(0x7f0000000140)=@generic, 0x80, &(0x7f0000001300)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/102, 0x66}, {&(0x7f0000001280)=""/107, 0x6b}], 0x4, &(0x7f0000001340)=""/140, 0x8c}, 0x401}, {{&(0x7f0000001400)=@isdn, 0x80, &(0x7f0000001640)=[{&(0x7f0000001480)=""/76, 0x4c}, {&(0x7f0000001500)=""/67, 0x43}, {&(0x7f0000001580)=""/61, 0x3d}, {&(0x7f00000015c0)=""/78, 0x4e}], 0x4, &(0x7f0000001680)=""/116, 0x74}, 0x3}, {{&(0x7f0000001700)=@rc={0x1f, @none}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001ac0)=""/109, 0x6d}, {&(0x7f0000001800)=""/240, 0xf0}], 0x2}, 0x7a}], 0x3, 0x40010000, &(0x7f0000001a80)={r8, r9+10000000}) r10 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r10, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r11, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r11, 0x84, 0x5, &(0x7f00000001c0)={r13, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000001b40)={r13, @in6={{0xa, 0x4e21, 0x9d, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfef}}}, &(0x7f0000001780)=0x84) 409.544707ms ago: executing program 2 (id=2110): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d3000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f0000000700)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005a00000226bd7000fcdbdf1d0008001a298e160000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x24048000) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0xd, &(0x7f0000000200)={@initdev, @multicast2, @broadcast}, &(0x7f0000000580)=0xc) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, 0x0, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x28, r7, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "602382c44e797c83"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000171eda56f5c76d19daa9d3a4699dff545d690d8d90a63de84f980bf0909081", @ANYRES16=r7, @ANYBLOB="000129bd7000fddbdf257c0000000c00990010000000170000000a00060008021100000100000a0006000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="2e00000800008188040f80ec592d7808a54484ba11954ce83cd99cd244acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x3e}], 0x1}, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r11, 0x40047452, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 284.706143ms ago: executing program 4 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x67}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x4, 0x0, 0x3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000340)={0x43}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="000000000000000000850000000c000000b70000000000000095000200"/40], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x1000}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\a'], 0x50}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00', 0x0}) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r10, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x20021) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0xc3, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001c0016801800018014000b000000f29c00000000000008000000000008000d"], 0x44}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x110, r0, 0xbce6000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r12, 0x0, 0x30, 0x0, &(0x7f00000000c0)) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r13, 0x11b, 0x6, &(0x7f0000000180)=0x5, 0x4) 0s ago: executing program 3 (id=2112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 5.823983][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.838420][ T5843] veth0_vlan: entered promiscuous mode [ 95.848326][ T5846] veth1_vlan: entered promiscuous mode [ 95.882832][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.890707][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.919197][ T5843] veth1_vlan: entered promiscuous mode [ 95.952808][ T5841] veth0_macvtap: entered promiscuous mode [ 95.968296][ T5841] veth1_macvtap: entered promiscuous mode [ 96.008687][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.020637][ T5843] veth0_macvtap: entered promiscuous mode [ 96.029747][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.066825][ T5843] veth1_macvtap: entered promiscuous mode [ 96.097994][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.113367][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.125283][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.138369][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.153696][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.166871][ T5846] veth0_macvtap: entered promiscuous mode [ 96.192703][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.214372][ T5846] veth1_macvtap: entered promiscuous mode [ 96.238820][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.250675][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.261907][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.275643][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.296097][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.363681][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.388983][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.406332][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.421246][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.445994][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.461642][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.476801][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.488705][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.510001][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.525147][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.558396][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.570550][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.586714][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.596822][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.612529][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.623652][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.635739][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.647095][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.657886][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.671681][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.708697][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.735119][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.747933][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.758798][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.776192][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.807353][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.820415][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.830501][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.848287][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.861825][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.873547][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.884812][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.896420][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.906769][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.922695][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.945202][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.974068][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.984692][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.997171][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.008320][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.059880][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.071448][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.081355][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.090095][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.249719][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.265994][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.365789][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 97.389838][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.414606][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.449604][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.465571][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.498645][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.516140][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.646719][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.667121][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.679633][ T55] Bluetooth: hci1: command tx timeout [ 97.712599][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.720463][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.752119][ T55] Bluetooth: hci0: command tx timeout [ 97.756426][ T5856] Bluetooth: hci4: command tx timeout [ 97.757594][ T5153] Bluetooth: hci2: command tx timeout [ 97.799072][ T5960] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13'. [ 97.831455][ T55] Bluetooth: hci3: command tx timeout [ 97.906294][ T5961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.975190][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 98.174169][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 98.273355][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 98.282560][ T5976] hsr_slave_0: left promiscuous mode [ 98.311430][ T5976] hsr_slave_1: left promiscuous mode [ 98.446695][ T5989] syz.2.17 uses obsolete (PF_INET,SOCK_PACKET) [ 98.716502][ T5997] vlan2: entered promiscuous mode [ 98.750629][ T5997] vlan2: entered allmulticast mode [ 98.997954][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 99.022928][ T6015] sctp: [Deprecated]: syz.1.26 (pid 6015) Use of int in maxseg socket option. [ 99.022928][ T6015] Use struct sctp_assoc_value instead [ 99.067736][ T6021] sctp: [Deprecated]: syz.1.26 (pid 6021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.067736][ T6021] Use struct sctp_sack_info instead [ 99.397924][ T6034] tipc: Started in network mode [ 99.408424][ T5989] syz.2.17: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 99.415719][ T6034] tipc: Node identity fe3fff13d692, cluster identity 4711 [ 99.434908][ T5989] CPU: 0 UID: 0 PID: 5989 Comm: syz.2.17 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 99.434939][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.434955][ T5989] Call Trace: [ 99.434964][ T5989] [ 99.434973][ T5989] dump_stack_lvl+0x241/0x360 [ 99.435020][ T5989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.435050][ T5989] ? __pfx__printk+0x10/0x10 [ 99.435077][ T5989] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 99.435110][ T5989] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 99.435139][ T5989] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 99.435172][ T5989] warn_alloc+0x27c/0x410 [ 99.435198][ T5989] ? __pfx_warn_alloc+0x10/0x10 [ 99.435226][ T5989] ? __do_replace+0xce/0xc60 [ 99.435264][ T5989] ? __get_vm_area_node+0x1c8/0x2d0 [ 99.435293][ T5989] ? __get_vm_area_node+0x25c/0x2d0 [ 99.435331][ T5989] __vmalloc_node_range_noprof+0x634/0x1390 [ 99.435354][ T5989] ? translate_table+0x1852/0x22e0 [ 99.435410][ T5989] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 99.435441][ T5989] ? __do_replace+0xce/0xc60 [ 99.435470][ T5989] vzalloc_noprof+0x79/0x90 [ 99.435489][ T5989] ? __do_replace+0xce/0xc60 [ 99.435520][ T5989] __do_replace+0xce/0xc60 [ 99.435553][ T5989] ? __pfx_translate_table+0x10/0x10 [ 99.435601][ T5989] ? __pfx___do_replace+0x10/0x10 [ 99.435641][ T5989] ? copy_from_sockptr_offset+0x60/0xb0 [ 99.435693][ T5989] do_arpt_set_ctl+0x10dd/0x1650 [ 99.435731][ T5989] ? __mutex_trylock_common+0x184/0x2e0 [ 99.435770][ T5989] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 99.435802][ T5989] ? __pfx___mutex_trylock_common+0x10/0x10 [ 99.435847][ T5989] ? __mutex_unlock_slowpath+0x229/0x800 [ 99.435880][ T5989] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.435903][ T5989] ? aa_sk_perm+0x96f/0xac0 [ 99.435933][ T5989] ? __lock_acquire+0xad5/0xd80 [ 99.435953][ T5989] ? __pfx_aa_sk_perm+0x10/0x10 [ 99.435981][ T5989] nf_setsockopt+0x295/0x2c0 [ 99.436015][ T5989] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 99.436041][ T5989] do_sock_setsockopt+0x3b1/0x710 [ 99.436067][ T5989] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 99.436084][ T5989] ? __fget_files+0x2a/0x420 [ 99.436106][ T5989] ? __fget_files+0x39d/0x420 [ 99.436121][ T5989] ? __fget_files+0x2a/0x420 [ 99.436146][ T5989] __x64_sys_setsockopt+0x1ee/0x280 [ 99.436172][ T5989] do_syscall_64+0xf3/0x230 [ 99.436196][ T5989] ? clear_bhb_loop+0x45/0xa0 [ 99.436219][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.436246][ T5989] RIP: 0033:0x7f3a0f38d169 [ 99.436267][ T5989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.436282][ T5989] RSP: 002b:00007f3a10149038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 99.436303][ T5989] RAX: ffffffffffffffda RBX: 00007f3a0f5a6080 RCX: 00007f3a0f38d169 [ 99.436317][ T5989] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000009 [ 99.436328][ T5989] RBP: 00007f3a0f40e990 R08: 0000000000000068 R09: 0000000000000000 [ 99.436340][ T5989] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 99.436352][ T5989] R13: 0000000000000000 R14: 00007f3a0f5a6080 R15: 00007ffc8a59e548 [ 99.436381][ T5989] [ 99.436388][ T5989] Mem-Info: [ 99.488182][ T6034] tipc: Enabled bearer , priority 0 [ 99.567416][ T5989] active_anon:4772 inactive_anon:0 isolated_anon:0 [ 99.567416][ T5989] active_file:1120 inactive_file:38303 isolated_file:0 [ 99.567416][ T5989] unevictable:768 dirty:1417 writeback:0 [ 99.567416][ T5989] slab_reclaimable:9874 slab_unreclaimable:96263 [ 99.567416][ T5989] mapped:28468 shmem:1426 pagetables:837 [ 99.567416][ T5989] sec_pagetables:0 bounce:0 [ 99.567416][ T5989] kernel_misc_reclaimable:0 [ 99.567416][ T5989] free:1337215 free_pcp:397 free_cma:0 [ 99.844474][ T5989] Node 0 active_anon:19200kB inactive_anon:0kB active_file:4536kB inactive_file:153136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121656kB dirty:5664kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10960kB pagetables:3788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 99.883279][ T6049] tipc: Resetting bearer [ 99.901963][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 99.914628][ T5989] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 99.946346][ T6041] vlan0: entered promiscuous mode [ 99.955210][ T6041] vlan0: entered allmulticast mode [ 99.960108][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 99.964688][ T6041] veth0_vlan: entered allmulticast mode [ 99.976393][ T5989] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.021242][ T5989] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 100.028064][ T5989] Node 0 DMA32 free:1428528kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:19192kB inactive_anon:0kB active_file:4536kB inactive_file:153044kB unevictable:1536kB writepending:5656kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:1528kB local_pcp:348kB free_cma:0kB [ 100.028715][ T6031] tipc: Disabling bearer [ 100.080423][ T5989] lowmem_reserve[]: 0 0 0 0 0 [ 100.085887][ T5989] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:8kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 100.113542][ T5989] lowmem_reserve[]: 0 0 0 0 0 [ 100.122313][ T5989] Node 1 Normal free:3903644kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.158145][ T5989] lowmem_reserve[]: 0 0 0 0 0 [ 100.170081][ T5989] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 100.187883][ T5989] Node 0 DMA32: 1*4kB (M) 2*8kB (UE) 59*16kB (UME) 8*32kB (UE) 7*64kB (UE) 2*128kB (U) 1*256kB (U) 4*512kB (ME) 5*1024kB (M) 5*2048kB (M) 344*4096kB (M) = 1428612kB [ 100.205121][ T5989] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 100.216960][ T5989] Node 1 Normal: 225*4kB (UME) 55*8kB (UM) 38*16kB (UME) 222*32kB (UME) 101*64kB (UME) 40*128kB (UME) 16*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3903644kB [ 100.238833][ T5989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.370968][ T5989] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 100.423506][ T5989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.483267][ T6067] netlink: 'syz.1.36': attribute type 1 has an invalid length. [ 100.494913][ T5989] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 100.508450][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36'. [ 100.526211][ T30] audit: type=1800 audit(1744423388.506:2): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.39" name=45CB390407251FA4188CC219BFFC053ED5A81F25EF0D0F976994AFB2C8BF6AE44A44659AF5EBC90174AD57D7D2BBF87F229A90AB05087FBD84ADD787AACFFDD153137BF89BCF9532CE96AEF1DC32D611F082D5F13DC317FCCBB8E4DA254609889183436067EABA5B151D313B57CF20567D4E8DC59DEC9EE307C0E373938D3701605066668BF7352A437106179353B938DE1CF93EF57CB6325F48E25527 dev="tmpfs" ino=44 res=0 errno=0 [ 100.577685][ T6071] Zero length message leads to an empty skb [ 100.586325][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 100.597058][ T5989] 40864 total pagecache pages [ 100.645210][ T5989] 0 pages in swap cache [ 100.730056][ T5989] Free swap = 124996kB [ 100.740908][ T5989] Total swap = 124996kB [ 100.766358][ T5989] 2097051 pages RAM [ 100.770220][ T5989] 0 pages HighMem/MovableOnly [ 100.779586][ T5989] 428585 pages reserved [ 100.803154][ T5989] 0 pages cma reserved [ 100.863671][ T6067] tipc: Started in network mode [ 100.875091][ T6067] tipc: Node identity ac14140c, cluster identity 4711 [ 100.896708][ T6067] tipc: New replicast peer: 255.255.255.255 [ 100.912353][ T6067] tipc: Enabled bearer , priority 10 [ 101.020985][ T6071] syz.4.38 (6071) used greatest stack depth: 19256 bytes left [ 101.195237][ T6098] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.209681][ T6100] hsr0: entered promiscuous mode [ 101.526324][ T6099] hsr0: left promiscuous mode [ 101.603995][ T6116] IPv4: Oversized IP packet from 172.20.20.24 [ 101.611591][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 101.618203][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 101.688761][ T6119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.821941][ T6128] netlink: 'syz.3.54': attribute type 8 has an invalid length. [ 101.867165][ T6129] netlink: 'syz.3.54': attribute type 8 has an invalid length. [ 102.033180][ T5893] tipc: Node number set to 2886997004 [ 103.326085][ T6197] wireguard: wg1: Could not create IPv4 socket [ 103.685446][ T6214] __nla_validate_parse: 4 callbacks suppressed [ 103.685467][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'. [ 103.718976][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'. [ 103.730499][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'. [ 103.730648][ T6218] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 104.211826][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.85'. [ 104.219537][ T6243] netlink: 76 bytes leftover after parsing attributes in process `syz.0.86'. [ 104.340697][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 104.419549][ T6242] bridge0: entered promiscuous mode [ 104.427299][ T6245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.87'. [ 104.438466][ T6242] macvlan2: entered promiscuous mode [ 104.482375][ T6243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 104.921558][ T6262] netlink: 80 bytes leftover after parsing attributes in process `syz.2.91'. [ 104.999594][ T6268] netlink: 9 bytes leftover after parsing attributes in process `syz.4.93'. [ 105.064452][ T6268] Oܼ: renamed from hsr0 (while UP) [ 105.120756][ T6268] Oܼ: entered promiscuous mode [ 105.164483][ T6268] A link change request failed with some changes committed already. Interface Oܼ may have been left with an inconsistent configuration, please check. [ 105.353952][ T6283] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 105.985242][ T6317] openvswitch: netlink: Message has 3 unknown bytes. [ 105.993336][ T6317] openvswitch: netlink: Actions may not be safe on all matching packets [ 106.234047][ T6325] netlink: 'syz.2.111': attribute type 142 has an invalid length. [ 106.432410][ T6337] gretap0: entered promiscuous mode [ 106.438085][ T6337] macsec1: entered promiscuous mode [ 106.447861][ T6337] gretap0: left promiscuous mode [ 107.085329][ T6362] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 107.138622][ T6366] dccp_invalid_packet: P.Data Offset(0) too small [ 107.448903][ T6371] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 107.460430][ T6371] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 107.531077][ T6385] dvmrp1: entered allmulticast mode [ 108.073431][ T6406] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 108.285426][ T6416] netlink: 'syz.4.139': attribute type 2 has an invalid length. [ 108.329795][ T6414] veth3: entered allmulticast mode [ 108.432187][ T6417] netlink: 'syz.3.140': attribute type 39 has an invalid length. [ 108.574083][ T6427] netlink: 'syz.1.144': attribute type 10 has an invalid length. [ 108.592656][ T6427] veth0_macvtap: left promiscuous mode [ 108.863240][ T6440] __nla_validate_parse: 10 callbacks suppressed [ 108.863273][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 108.944690][ T6430] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.972379][ T6445] openvswitch: netlink: Flow key attribute not present in set flow. [ 109.069203][ T6452] netlink: 'syz.1.151': attribute type 10 has an invalid length. [ 109.126561][ T6452] team0: Device veth0_macvtap failed to register rx_handler [ 109.352654][ T6452] syz.1.151 (6452) used greatest stack depth: 19120 bytes left [ 109.447453][ T6472] Bluetooth: MGMT ver 1.23 [ 109.466932][ T6476] warning: `syz.3.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.552618][ T6481] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 109.713894][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 110.059866][ T6513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.167'. [ 110.105368][ T6513] vlan3: entered allmulticast mode [ 110.113714][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.166'. [ 110.141444][ T6513] batadv0: entered allmulticast mode [ 110.158791][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 111.073523][ T6557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'. [ 111.091178][ T6557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'. [ 111.183514][ T6562] netlink: 810 bytes leftover after parsing attributes in process `syz.4.183'. [ 111.240773][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 111.297609][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.184'. [ 111.494645][ T6572] sctp: [Deprecated]: syz.4.188 (pid 6572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.494645][ T6572] Use struct sctp_sack_info instead [ 111.699741][ T6578] unsupported nlmsg_type 40 [ 111.873239][ T6588] xt_NFQUEUE: number of total queues is 0 [ 111.893707][ T6581] syzkaller0: entered promiscuous mode [ 111.899249][ T6581] syzkaller0: entered allmulticast mode [ 111.961789][ T6590] xt_NFQUEUE: number of total queues is 0 [ 111.990311][ T6594] x_tables: duplicate underflow at hook 1 [ 112.062396][ T5951] IPVS: starting estimator thread 0... [ 112.160613][ T6605] sctp: [Deprecated]: syz.1.198 (pid 6605) Use of int in maxseg socket option. [ 112.160613][ T6605] Use struct sctp_assoc_value instead [ 112.207539][ T6599] IPVS: using max 26 ests per chain, 62400 per kthread [ 113.432539][ T6598] tipc: Started in network mode [ 113.437634][ T6598] tipc: Node identity ac1414aa, cluster identity 4711 [ 113.450106][ T6598] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 113.461684][ T6598] tipc: Enabled bearer , priority 10 [ 113.581652][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 113.721437][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 113.861438][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 113.968142][ T6639] __nla_validate_parse: 6 callbacks suppressed [ 113.968164][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'. [ 114.001435][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 114.141463][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 114.179796][ T6639] bond1: entered promiscuous mode [ 114.223047][ T6639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.281363][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 114.421498][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 114.544719][ T6670] netlink: 240 bytes leftover after parsing attributes in process `syz.3.212'. [ 114.562242][ T120] tipc: Node number set to 2886997162 [ 114.653674][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 114.701585][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 114.971524][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 115.314059][ T6718] netlink: 56 bytes leftover after parsing attributes in process `syz.0.228'. [ 115.331821][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'. [ 115.364750][ T6718] netlink: 31 bytes leftover after parsing attributes in process `syz.0.228'. [ 115.386629][ T6718] netlink: 'syz.0.228': attribute type 2 has an invalid length. [ 115.397977][ T6718] netlink: 31 bytes leftover after parsing attributes in process `syz.0.228'. [ 115.798219][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 116.202318][ T6746] trusted_key: syz.1.236 sent an empty control message without MSG_MORE. [ 116.337341][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 116.396807][ T6758] netlink: 172 bytes leftover after parsing attributes in process `syz.4.239'. [ 116.847021][ T6781] ipvlan2: entered allmulticast mode [ 116.879869][ T6781] veth0_vlan: entered allmulticast mode [ 117.042192][ T6785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.060480][ T6788] netlink: 'syz.4.252': attribute type 19 has an invalid length. [ 117.604980][ T6806] netlink: 'syz.3.259': attribute type 12 has an invalid length. [ 117.613273][ T6806] netlink: 'syz.3.259': attribute type 29 has an invalid length. [ 117.646398][ T6806] netlink: 'syz.3.259': attribute type 2 has an invalid length. [ 117.664308][ T6806] netlink: 'syz.3.259': attribute type 3 has an invalid length. [ 117.735775][ T6813] netlink: 'syz.4.261': attribute type 4 has an invalid length. [ 117.792340][ T6810] block nbd1: server does not support multiple connections per device. [ 117.825656][ T6810] block nbd1: shutting down sockets [ 118.001582][ T5895] IPVS: starting estimator thread 0... [ 118.122708][ T6823] IPVS: using max 29 ests per chain, 69600 per kthread [ 118.631385][ C1] net_ratelimit: 3 callbacks suppressed [ 118.631432][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 119.069616][ T6887] __nla_validate_parse: 10 callbacks suppressed [ 119.069637][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.277'. [ 119.128811][ T6890] netlink: 516 bytes leftover after parsing attributes in process `syz.3.278'. [ 119.672045][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 120.058044][ T6886] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 120.313632][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 120.329701][ T6901] netlink: 'syz.2.282': attribute type 3 has an invalid length. [ 120.420709][ T6900] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 120.443631][ T6909] netlink: 'syz.0.285': attribute type 1 has an invalid length. [ 120.452373][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.285'. [ 120.490406][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 120.504937][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.281'. [ 120.661477][ T6920] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 120.711486][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 120.722578][ T6920] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 120.765307][ T6927] sctp: [Deprecated]: syz.2.288 (pid 6927) Use of int in maxseg socket option. [ 120.765307][ T6927] Use struct sctp_assoc_value instead [ 120.974591][ T6934] Cannot find set identified by id 0 to match [ 121.005615][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 121.036935][ T6936] Cannot find set identified by id 0 to match [ 121.094894][ T6947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.294'. [ 121.167385][ T6947] netlink: 192 bytes leftover after parsing attributes in process `syz.2.294'. [ 121.226073][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 121.685831][ T6966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.761407][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 121.822192][ T6966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.849445][ T6966] bond0 (unregistering): Released all slaves [ 122.096480][ T6982] gretap0: entered promiscuous mode [ 122.132558][ T6982] macvtap1: entered promiscuous mode [ 122.162886][ T6982] macvtap1: entered allmulticast mode [ 122.168327][ T6982] gretap0: entered allmulticast mode [ 122.542355][ T7005] netlink: 'syz.2.312': attribute type 21 has an invalid length. [ 122.562928][ T7005] netlink: 'syz.2.312': attribute type 33 has an invalid length. [ 122.791588][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 123.038243][ T7028] IPVS: Unknown mcast interface: pim6reg1 [ 123.054118][ T7028] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 123.222836][ T7039] --map-set only usable from mangle table [ 123.488102][ T7059] tipc: Enabling of bearer rejected, failed to enable media [ 123.574112][ T7063] geneve2: entered promiscuous mode [ 123.579397][ T7063] geneve2: entered allmulticast mode [ 123.834353][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 124.000636][ T7077] syzkaller0: entered promiscuous mode [ 124.033190][ T7077] syzkaller0: entered allmulticast mode [ 124.140708][ T7077] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.193052][ T2987] tipc: Subscription rejected, illegal request [ 124.410935][ T7100] __nla_validate_parse: 11 callbacks suppressed [ 124.410966][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 124.881492][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 125.746433][ T7107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.343'. [ 125.911436][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 126.040075][ T7124] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 126.053155][ T7123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.350'. [ 126.124570][ T7129] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 126.194981][ T7129] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 126.220971][ T7129] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 126.724887][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.363'. [ 126.793710][ T7165] raw_sendmsg: syz.0.364 forgot to set AF_INET. Fix it! [ 126.894138][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 126.951430][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 126.966919][ T7174] openvswitch: netlink: Message has 3 unknown bytes. [ 126.974684][ T7174] openvswitch: netlink: Actions may not be safe on all matching packets [ 127.991437][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 128.211268][ T7222] x_tables: duplicate underflow at hook 3 [ 128.279042][ T7227] unknown channel width for channel at 909000KHz? [ 128.302752][ T7227] unknown channel width for channel at 909000KHz? [ 128.309256][ T7227] unknown channel width for channel at 909000KHz? [ 128.395154][ T7234] xt_policy: neither incoming nor outgoing policy selected [ 128.463410][ T7239] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 128.517286][ T7237] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 128.768502][ T7261] netlink: 'syz.1.391': attribute type 2 has an invalid length. [ 129.031430][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 129.147090][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.396'. [ 129.197899][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.396'. [ 129.605985][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 129.615067][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 129.646650][ T7301] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 129.668727][ T7301] netlink: 10 bytes leftover after parsing attributes in process `syz.3.402'. [ 129.711902][ T7308] netlink: 80 bytes leftover after parsing attributes in process `syz.3.402'. [ 129.783676][ T7301] nbd: socks must be embedded in a SOCK_ITEM attr [ 129.790306][ T7301] block nbd0: shutting down sockets [ 129.938001][ T7320] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.003071][ T7320] batadv0: entered allmulticast mode [ 130.011801][ T7322] netlink: 'syz.0.410': attribute type 4 has an invalid length. [ 130.029868][ T7318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.071545][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 130.073708][ T7318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.474065][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 130.556711][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 131.111422][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 131.128615][ T7379] netlink: 64 bytes leftover after parsing attributes in process `syz.2.427'. [ 131.960104][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 132.152042][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 132.455799][ T7435] netlink: 316 bytes leftover after parsing attributes in process `syz.2.443'. [ 132.468766][ T7429] dccp_close: ABORT with 100 bytes unread [ 132.511687][ T7438] x_tables: duplicate underflow at hook 1 [ 132.800585][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.807075][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.191561][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 133.214093][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 133.478694][ T7487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.553716][ T7494] netlink: 'syz.0.459': attribute type 2 has an invalid length. [ 133.561167][ T7487] netlink: 'syz.3.456': attribute type 16 has an invalid length. [ 133.588804][ T7487] netlink: 'syz.3.456': attribute type 3 has an invalid length. [ 133.918372][ T7512] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 133.927470][ T7512] netlink: 'syz.0.465': attribute type 4 has an invalid length. [ 134.174218][ T7521] Bluetooth: MGMT ver 1.23 [ 134.231615][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 134.731918][ T7550] __nla_validate_parse: 6 callbacks suppressed [ 134.731939][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 134.807748][ T7554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.477'. [ 134.819734][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 134.830871][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 134.911249][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 134.967660][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 135.043227][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 135.091817][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 135.116229][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 135.146839][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 135.271590][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 135.407245][ T7588] netlink: 'syz.1.482': attribute type 4 has an invalid length. [ 135.480945][ T7593] netlink: 'syz.1.482': attribute type 4 has an invalid length. [ 135.516970][ T7592] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 135.572355][ T7599] Oܼ: renamed from hsr0 (while UP) [ 135.609839][ T7599] Oܼ: entered promiscuous mode [ 135.637525][ T7599] A link change request failed with some changes committed already. Interface Oܼ may have been left with an inconsistent configuration, please check. [ 136.311895][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 136.583977][ T7656] tipc: Enabling of bearer rejected, failed to enable media [ 136.663869][ T7658] tipc: Enabling of bearer rejected, failed to enable media [ 136.778023][ T7667] netlink: 'syz.0.500': attribute type 8 has an invalid length. [ 136.798708][ T7659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.007714][ T7676] syz_tun: entered promiscuous mode [ 137.055533][ T7676] syz_tun: left promiscuous mode [ 137.141795][ T7687] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 137.361441][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 137.376173][ T7692] netlink: 'syz.2.507': attribute type 1 has an invalid length. [ 137.403398][ T7694] netlink: 'syz.3.508': attribute type 6 has an invalid length. [ 138.151500][ T7726] Cannot find map_set index 0 as target [ 138.187255][ T7726] veth0: entered promiscuous mode [ 138.203427][ T7726] veth0: left promiscuous mode [ 138.227467][ T7732] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 138.391506][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 138.418275][ T7737] tc_dump_action: action bad kind [ 138.445906][ T7740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.929429][ T7771] netlink: 'syz.4.527': attribute type 32 has an invalid length. [ 138.984766][ T7765] can: request_module (can-proto-0) failed. [ 139.114707][ T7779] netlink: 'syz.0.531': attribute type 1 has an invalid length. [ 139.431555][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 139.685703][ T7807] netlink: 'syz.2.537': attribute type 11 has an invalid length. [ 139.770277][ T7815] __nla_validate_parse: 64 callbacks suppressed [ 139.770301][ T7815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.540'. [ 139.941245][ T7821] IPVS: Unknown mcast interface: pim6reg1 [ 139.948001][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.544'. [ 139.957616][ T7821] IPVS: Unknown mcast interface: pim6reg1 [ 139.966033][ T7821] IPVS: Unknown mcast interface: pim6reg1 [ 139.976068][ T7821] IPVS: Unknown mcast interface: pim6reg1 [ 139.984450][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.544'. [ 139.993945][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.544'. [ 140.003782][ T7821] IPVS: Unknown mcast interface: pim6reg1 [ 140.020759][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.544'. [ 140.061789][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.544'. [ 140.094781][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 140.258372][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.544'. [ 140.305588][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.544'. [ 140.354059][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.544'. [ 140.471874][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 140.600121][ T7854] netlink: 'syz.3.551': attribute type 1 has an invalid length. [ 140.817748][ T7867] netem: invalid attributes len -24 [ 140.841504][ T7867] netem: change failed [ 140.916451][ T7871] netlink: 'syz.2.557': attribute type 5 has an invalid length. [ 141.197058][ T7889] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 141.210830][ T7892] netlink: 'syz.4.564': attribute type 5 has an invalid length. [ 141.414618][ T7903] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 141.511435][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 141.550896][ T7907] ip6gre1: entered allmulticast mode [ 142.147667][ T7938] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 142.159562][ T7938] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 142.202760][ T7941] netlink: 'syz.0.577': attribute type 33 has an invalid length. [ 142.216507][ T7940] netlink: 'syz.1.578': attribute type 21 has an invalid length. [ 142.259364][ T7945] netlink: 'syz.1.578': attribute type 21 has an invalid length. [ 142.358287][ T74] tipc: Subscription rejected, illegal request [ 142.561562][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 142.749111][ T7956] policy can only be matched on NF_INET_PRE_ROUTING [ 142.749142][ T7956] unable to load match [ 143.233858][ T7984] netlink: 'syz.0.592': attribute type 10 has an invalid length. [ 143.261084][ T7985] vlan2: entered allmulticast mode [ 143.286929][ T7985] bond0: entered allmulticast mode [ 143.327510][ T7985] bond_slave_0: entered allmulticast mode [ 143.347725][ T7985] bond_slave_1: entered allmulticast mode [ 143.417597][ T7985] bridge0: port 3(vlan2) entered blocking state [ 143.451757][ T7985] bridge0: port 3(vlan2) entered disabled state [ 143.504194][ T7985] vlan2: entered promiscuous mode [ 143.509376][ T7985] bond0: entered promiscuous mode [ 143.561835][ T7985] bond_slave_0: entered promiscuous mode [ 143.569049][ T7985] bond_slave_1: entered promiscuous mode [ 143.576528][ T7985] bridge0: port 3(vlan2) entered blocking state [ 143.583637][ T7985] bridge0: port 3(vlan2) entered forwarding state [ 143.591782][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 144.366853][ T8034] xt_hashlimit: overflow, try lower: 4294967295/0 [ 144.631544][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 144.935460][ T8069] tipc: Enabled bearer , priority 10 [ 144.986112][ T8070] __nla_validate_parse: 34 callbacks suppressed [ 144.986134][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 145.032066][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 145.316977][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 145.377411][ T8086] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 145.410370][ T8089] netlink: 6 bytes leftover after parsing attributes in process `syz.0.624'. [ 145.430490][ T8089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.556902][ T8094] x_tables: duplicate underflow at hook 2 [ 145.581761][ T8093] macvlan2: entered promiscuous mode [ 145.587124][ T8093] macvlan2: entered allmulticast mode [ 145.599593][ T8093] batadv0: entered promiscuous mode [ 145.605774][ T8093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.616316][ T8093] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 145.671583][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 145.809223][ T8103] netlink: 48 bytes leftover after parsing attributes in process `syz.2.629'. [ 145.874556][ T8108] netlink: 'syz.0.627': attribute type 11 has an invalid length. [ 145.904101][ T8108] netlink: 224 bytes leftover after parsing attributes in process `syz.0.627'. [ 146.061419][ T5951] tipc: Node number set to 682491667 [ 146.583692][ T8141] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 146.607777][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 146.635384][ T8141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'. [ 146.711578][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 146.821134][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.645'. [ 146.835671][ T8148] pim6reg1: entered promiscuous mode [ 146.845860][ T8148] pim6reg1: entered allmulticast mode [ 146.873404][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.645'. [ 147.345044][ T8169] netlink: 'syz.2.651': attribute type 10 has an invalid length. [ 147.373670][ T8169] team0: Device hsr_slave_0 failed to register rx_handler [ 147.751458][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 148.412447][ T8211] netlink: 'syz.4.660': attribute type 30 has an invalid length. [ 148.436277][ T8209] openvswitch: netlink: Message has 8 unknown bytes. [ 148.791769][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 148.905650][ T8233] tipc: Started in network mode [ 148.913440][ T8233] tipc: Node identity ffffa848, cluster identity 4711 [ 148.920260][ T8233] tipc: Node number set to 4294944840 [ 148.961594][ T8239] xt_TCPMSS: Only works on TCP SYN packets [ 149.093899][ T8244] netlink: 'syz.4.671': attribute type 2 has an invalid length. [ 149.842236][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 150.871580][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 151.002338][ T8282] __nla_validate_parse: 3 callbacks suppressed [ 151.002358][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 151.352994][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 151.370605][ T8305] netlink: 2 bytes leftover after parsing attributes in process `syz.2.685'. [ 151.472794][ T8302] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 151.480515][ T8302] netlink: 232 bytes leftover after parsing attributes in process `syz.3.686'. [ 151.911355][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 152.951354][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 154.001377][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 155.031370][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 155.974565][ T8429] x_tables: duplicate underflow at hook 3 [ 156.071370][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 156.213037][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 156.222249][ T8441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.237764][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'. [ 156.258631][ T8442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.274659][ T8439] netlink: zone id is out of range [ 156.280521][ T8439] netlink: zone id is out of range [ 156.288397][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 156.297878][ T8439] netlink: zone id is out of range [ 156.311707][ T8439] netlink: zone id is out of range [ 156.323347][ T8439] netlink: zone id is out of range [ 156.350537][ T8439] netlink: zone id is out of range [ 156.524487][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d8a8400: rx timeout, send abort [ 156.787266][ T8459] bond2: entered promiscuous mode [ 156.794702][ T8459] bond2: entered allmulticast mode [ 156.800735][ T8459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.025941][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d8a8800: rx timeout, send abort [ 157.039847][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d8a8400: abort rx timeout. Force session deactivation [ 157.112564][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 157.328956][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.715'. [ 157.543294][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d8a8800: abort rx timeout. Force session deactivation [ 158.040329][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 158.151497][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 158.502669][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 158.595572][ T8504] Bluetooth: MGMT ver 1.23 [ 158.617001][ T8508] x_tables: ip_tables: udp match: only valid for protocol 17 [ 158.682610][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.725'. [ 158.758620][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'. [ 158.776305][ T8511] netlink: 'syz.3.726': attribute type 1 has an invalid length. [ 158.800449][ T8511] netlink: 220 bytes leftover after parsing attributes in process `syz.3.726'. [ 158.820302][ T8511] netlink: 'syz.3.726': attribute type 1 has an invalid length. [ 158.985820][ T8522] netlink: 'syz.4.728': attribute type 1 has an invalid length. [ 158.994342][ T8523] netlink: 'syz.4.728': attribute type 1 has an invalid length. [ 158.994416][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'. [ 159.140707][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d8a9000: rx timeout, send abort [ 159.149328][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d8a8c00: rx timeout, send abort [ 159.157942][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d8a9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 159.173445][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d8a8c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 159.546139][ T8547] netlink: 'syz.1.739': attribute type 10 has an invalid length. [ 159.620025][ T8547] team0: Cannot enslave team device to itself [ 159.636358][ T8552] dvmrp1: left allmulticast mode [ 160.184000][ T8550] syzkaller0: entered promiscuous mode [ 160.189727][ T8550] syzkaller0: entered allmulticast mode [ 160.231385][ C1] net_ratelimit: 3 callbacks suppressed [ 160.231406][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 161.281364][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 161.639483][ T8590] netlink: 'syz.2.749': attribute type 5 has an invalid length. [ 161.914180][ T8617] __nla_validate_parse: 3 callbacks suppressed [ 161.914204][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 162.198459][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 162.251506][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 162.311411][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 162.446890][ T8635] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 162.513464][ T8635] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 162.555250][ T8635] gretap1: entered promiscuous mode [ 162.560542][ T8635] gretap1: entered allmulticast mode [ 162.618396][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 163.239007][ T8677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.771'. [ 163.343213][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 163.352330][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.793911][ T8696] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 163.839811][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 164.129075][ T8718] netlink: 256 bytes leftover after parsing attributes in process `syz.0.777'. [ 164.391346][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 164.751918][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 164.848554][ T8778] netlink: 'syz.1.782': attribute type 58 has an invalid length. [ 165.008822][ T8778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.782'. [ 165.431851][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 165.835269][ T8786] lo: entered promiscuous mode [ 165.845261][ T8786] tunl0: entered promiscuous mode [ 165.877651][ T8786] gre0: entered promiscuous mode [ 165.911985][ T8786] gretap0: entered promiscuous mode [ 166.010633][ T8786] erspan0: entered promiscuous mode [ 166.023017][ T8786] ip_vti0: entered promiscuous mode [ 166.215396][ T8803] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 166.472115][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 166.616026][ T8826] netlink: 'syz.0.794': attribute type 58 has an invalid length. [ 166.626053][ T8824] netlink: 'syz.0.794': attribute type 58 has an invalid length. [ 166.645024][ T8827] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 167.505655][ T8867] __nla_validate_parse: 9 callbacks suppressed [ 167.505677][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 167.508862][ T8864] netlink: 'syz.2.804': attribute type 15 has an invalid length. [ 167.512015][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 167.559457][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 167.590337][ T8864] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 168.038309][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 168.060473][ T8895] netlink: 2 bytes leftover after parsing attributes in process `syz.3.809'. [ 168.067678][ T8890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.808'. [ 168.128878][ T8895] netlink: 'syz.3.809': attribute type 1 has an invalid length. [ 168.190892][ T8895] netlink: 244 bytes leftover after parsing attributes in process `syz.3.809'. [ 168.234237][ T55] Bluetooth: hci0: command tx timeout [ 168.469991][ T8915] netlink: 72 bytes leftover after parsing attributes in process `syz.3.815'. [ 168.551388][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 168.643896][ T8923] xt_hashlimit: size too large, truncated to 1048576 [ 168.803259][ T8930] netlink: 'syz.1.818': attribute type 6 has an invalid length. [ 168.828176][ T8934] netlink: 'syz.4.820': attribute type 11 has an invalid length. [ 168.868667][ T8934] netlink: 'syz.4.820': attribute type 10 has an invalid length. [ 168.926674][ T8937] netlink: 72 bytes leftover after parsing attributes in process `syz.4.820'. [ 168.995953][ T8941] netlink: 'syz.0.819': attribute type 21 has an invalid length. [ 169.006123][ T8940] netlink: 36 bytes leftover after parsing attributes in process `syz.2.821'. [ 169.023003][ T8934] veth0_macvtap: left promiscuous mode [ 169.128045][ T8941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.819'. [ 169.591463][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.631459][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.937153][ T9038] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 171.671339][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 171.904276][ T9093] atomic_op ffff8881437a5198 conn xmit_atomic 0000000000000000 [ 172.711368][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 172.756699][ T9144] __nla_validate_parse: 6 callbacks suppressed [ 172.756719][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 173.269114][ T9158] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.309224][ T9164] netlink: 'syz.4.885': attribute type 10 has an invalid length. [ 173.338038][ T9158] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 173.751471][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 173.808100][ T9181] netlink: 'syz.3.891': attribute type 3 has an invalid length. [ 174.090813][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'. [ 174.137339][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 174.173157][ T9198] netlink: 32 bytes leftover after parsing attributes in process `syz.2.896'. [ 174.269609][ T55] block nbd0: Receive control failed (result -107) [ 174.333281][ T9198] nbd0: detected capacity change from 0 to 256 [ 174.353921][ T9211] syzkaller0: entered promiscuous mode [ 174.360702][ T9211] syzkaller0: entered allmulticast mode [ 174.361826][ T8262] block nbd0: Dead connection, failed to find a fallback [ 174.418181][ T8262] block nbd0: shutting down sockets [ 174.451602][ T8262] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.491045][ T8262] Buffer I/O error on dev nbd0, logical block 0, async page read [ 174.545572][ T8262] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.577527][ T8262] Buffer I/O error on dev nbd0, logical block 0, async page read [ 174.616673][ T8262] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.641408][ T8262] Buffer I/O error on dev nbd0, logical block 0, async page read [ 174.665574][ T8262] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.679137][ T8262] Buffer I/O error on dev nbd0, logical block 0, async page read [ 174.703835][ T8262] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.730147][ T8262] Buffer I/O error on dev nbd0, logical block 0, async page read [ 174.750586][ T8262] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.760508][ T8262] Buffer I/O error on dev nbd0, logical block 0, async page read [ 174.775924][ T8262] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.790028][ T8262] Buffer I/O error on dev nbd0, logical block 0, async page read [ 174.799644][ T8262] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.801430][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 174.809384][ T8262] Buffer I/O error on dev nbd0, logical block 0, async page read [ 174.824068][ T8262] ldm_validate_partition_table(): Disk read failed. [ 174.836722][ T8262] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.847186][ T8262] Buffer I/O error on dev nbd0, logical block 0, async page read [ 174.859091][ T8262] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.868806][ T8262] Buffer I/O error on dev nbd0, logical block 0, async page read [ 174.884511][ T8262] Dev nbd0: unable to read RDB block 0 [ 174.891234][ T8262] nbd0: unable to read partition table [ 174.919499][ T8262] ldm_validate_partition_table(): Disk read failed. [ 174.933587][ T8262] Dev nbd0: unable to read RDB block 0 [ 174.939639][ T8262] nbd0: unable to read partition table [ 175.832447][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 176.375587][ T9260] xt_socket: unknown flags 0x2 [ 176.393867][ T9254] gtp0: entered promiscuous mode [ 176.398885][ T9254] gtp0: entered allmulticast mode [ 176.875350][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 177.058439][ T9273] sctp: [Deprecated]: syz.1.916 (pid 9273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.058439][ T9273] Use struct sctp_sack_info instead [ 177.076661][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 177.239386][ T9279] netlink: 'syz.1.917': attribute type 10 has an invalid length. [ 177.855552][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 177.889790][ T9279] vlan0: entered allmulticast mode [ 177.895434][ T9279] veth0_vlan: entered allmulticast mode [ 177.910351][ T9279] team0: Port device vlan0 added [ 177.915445][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 178.031227][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 178.105486][ T9294] netlink: 'syz.4.921': attribute type 23 has an invalid length. [ 178.146822][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 178.190746][ T9302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.925'. [ 178.566855][ T9327] netlink: 'syz.4.931': attribute type 1 has an invalid length. [ 178.586440][ T9327] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.931'. [ 178.600941][ T9321] netlink: 76 bytes leftover after parsing attributes in process `syz.4.931'. [ 178.835403][ T9339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.936'. [ 178.851125][ T9339] netlink: 32 bytes leftover after parsing attributes in process `syz.0.936'. [ 178.951343][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 178.976239][ T9346] netlink: 52 bytes leftover after parsing attributes in process `syz.2.938'. [ 179.056041][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'. [ 179.198727][ T9358] bridge_slave_0: left allmulticast mode [ 179.202798][ T9363] Driver unsupported XDP return value 0 on prog (id 433) dev N/A, expect packet loss! [ 179.217356][ T9358] bridge_slave_0: left promiscuous mode [ 179.232895][ T9358] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.269640][ T9358] bridge_slave_1: left allmulticast mode [ 179.275700][ T9358] bridge_slave_1: left promiscuous mode [ 179.296285][ T9358] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.335017][ T9358] bond0: (slave bond_slave_0): Releasing backup interface [ 179.369142][ T9358] bond0: (slave bond_slave_1): Releasing backup interface [ 179.398674][ T9358] team0: Port device team_slave_0 removed [ 179.418676][ T9358] team0: Port device team_slave_1 removed [ 179.426343][ T9358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.435023][ T9358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.445552][ T9358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.453472][ T9358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.474278][ T36] tipc: Subscription rejected, illegal request [ 179.541218][ T9365] team0: Mode "?)balance" not found [ 179.811687][ T9398] netlink: 'syz.1.950': attribute type 10 has an invalid length. [ 179.874872][ T9398] team0: Port device geneve0 added [ 179.991343][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 180.020750][ T9409] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 180.038271][ T9407] IPVS: stopping backup sync thread 9409 ... [ 181.031425][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.071404][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.298540][ T9478] bridge_slave_1: left allmulticast mode [ 182.319731][ T9478] bridge_slave_1: left promiscuous mode [ 182.335692][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.360345][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.759359][ T9492] team0: Port device vlan0 removed [ 182.946358][ T9508] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 182.955144][ T9508] syzkaller0: linktype set to 774 [ 183.042594][ T9513] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 183.058891][ T9513] syzkaller1: linktype set to 825 [ 183.111481][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 183.974792][ T9556] __nla_validate_parse: 7 callbacks suppressed [ 183.974812][ T9556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1008'. [ 184.086587][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'. [ 184.151387][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 184.489327][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 184.869782][ T9587] syz.3.1022 (9587) used greatest stack depth: 18640 bytes left [ 184.899774][ T9591] team0: Mode changed to "loadbalance" [ 185.128305][ T9606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1033'. [ 185.191353][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 185.390526][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 185.699080][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c0b6c00: rx timeout, send abort [ 185.869597][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 186.008694][ T9656] netlink: 5064 bytes leftover after parsing attributes in process `syz.3.1057'. [ 186.018176][ T9656] netlink: 5064 bytes leftover after parsing attributes in process `syz.3.1057'. [ 186.176697][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e564800: rx timeout, send abort [ 186.207415][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c0b6c00: abort rx timeout. Force session deactivation [ 186.231349][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 186.498896][ T9676] openvswitch: netlink: Flow key attr not present in new flow. [ 186.676808][ C0] vcan0: j1939_tp_rxtimer: 0xffff888011c0f000: rx timeout, send abort [ 186.685140][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e564800: abort rx timeout. Force session deactivation [ 186.985249][ T9700] syzkaller1: entered promiscuous mode [ 186.990927][ T9700] syzkaller1: entered allmulticast mode [ 187.071208][ T9704] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1081'. [ 187.137495][ T9708] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 187.175387][ T9708] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 187.177762][ C0] vcan0: j1939_tp_rxtimer: 0xffff888011c0d000: rx timeout, send abort [ 187.199707][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888011c0d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 187.214427][ C0] vcan0: j1939_tp_rxtimer: 0xffff888011c0f000: abort rx timeout. Force session deactivation [ 187.271457][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 187.370565][ T9715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1085'. [ 187.410545][ T9715] netlink: 'syz.1.1085': attribute type 6 has an invalid length. [ 187.596501][ T9719] syzkaller0: entered promiscuous mode [ 187.602195][ T9719] syzkaller0: entered allmulticast mode [ 188.311437][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 189.351451][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 189.501087][ T9770] __nla_validate_parse: 2 callbacks suppressed [ 189.501108][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1111'. [ 189.641764][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 189.738169][ T9777] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1113'. [ 189.908673][ T9786] netlink: 'syz.0.1116': attribute type 10 has an invalid length. [ 190.376886][ T9818] veth0: entered promiscuous mode [ 190.391452][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 190.415133][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 190.443592][ T9816] veth0: left promiscuous mode [ 190.470277][ T9822] netlink: 'syz.0.1129': attribute type 8 has an invalid length. [ 190.499372][ T9822] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 190.688076][ T9837] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 190.724865][ T9840] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 190.762427][ T9841] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1136'. [ 191.092566][ T9867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1142'. [ 191.186928][ T9872] netlink: 'syz.4.1144': attribute type 4 has an invalid length. [ 191.199030][ T9876] Bluetooth: MGMT ver 1.23 [ 191.431337][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 191.439640][ T9892] netlink: 'syz.4.1149': attribute type 1 has an invalid length. [ 191.470209][ T9892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1149'. [ 191.820531][ T9913] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1154'. [ 191.848806][ T9903] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1153'. [ 191.863371][ T9861] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 191.911638][ T9903] Oܼ: renamed from hsr0 (while UP) [ 191.939694][ T9903] Oܼ: entered promiscuous mode [ 191.948301][ T9903] A link change request failed with some changes committed already. Interface Oܼ may have been left with an inconsistent configuration, please check. [ 192.028240][ T9903] syz.1.1153 (9903) used greatest stack depth: 18176 bytes left [ 192.288164][ T9933] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1160'. [ 192.319172][ T9937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.356928][ T9938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.412716][ T9940] tun0: tun_chr_ioctl cmd 1074025675 [ 192.425215][ T9940] tun0: persist disabled [ 192.454133][ T9946] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 192.462987][ T9945] netlink: 'syz.1.1165': attribute type 3 has an invalid length. [ 192.471812][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 192.720511][ T9967] netlink: 'syz.1.1169': attribute type 1 has an invalid length. [ 193.218005][ T9995] netlink: 'syz.2.1179': attribute type 10 has an invalid length. [ 193.225168][ T9999] netlink: 'syz.4.1180': attribute type 21 has an invalid length. [ 193.244419][ T9995] syz_tun: entered promiscuous mode [ 193.286808][ T9995] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 193.511364][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 193.719390][T10033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.760268][T10033] team0: Port device bond0 added [ 193.761134][T10035] netlink: 'syz.3.1191': attribute type 64 has an invalid length. [ 193.865821][T10044] : renamed from vlan0 (while UP) [ 194.005162][T10061] netlink: 'syz.3.1196': attribute type 7 has an invalid length. [ 194.236821][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.243444][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.244727][T10072] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 194.465802][T10087] netlink: 'syz.0.1207': attribute type 10 has an invalid length. [ 194.477589][T10085] batadv_slave_1: entered allmulticast mode [ 194.492501][T10083] batadv_slave_1: left allmulticast mode [ 194.551485][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 194.570808][T10087] team0: Device veth0_macvtap failed to register rx_handler [ 194.755791][T10102] __nla_validate_parse: 12 callbacks suppressed [ 194.755812][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'. [ 195.112408][T10133] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 195.583681][T10165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.592009][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 195.655551][T10169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1231'. [ 195.706427][T10172] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1232'. [ 195.771769][T10174] netlink: 'syz.4.1233': attribute type 1 has an invalid length. [ 195.813272][T10176] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 196.366459][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 196.493827][T10212] netlink: 'syz.4.1240': attribute type 10 has an invalid length. [ 196.631326][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 196.885319][T10212] syz_tun: entered promiscuous mode [ 196.935867][T10222] dvmrp1: entered allmulticast mode [ 197.055518][ T5895] IPVS: starting estimator thread 0... [ 197.171409][T10235] IPVS: using max 27 ests per chain, 64800 per kthread [ 197.214394][T10245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1249'. [ 197.243896][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 197.403129][T10256] x_tables: duplicate underflow at hook 2 [ 197.442396][ T5895] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 197.511863][ T5922] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 197.574437][ T5922] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 197.621021][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1255'. [ 197.671504][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.673999][ T5922] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 197.752546][ T5922] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 197.788290][T10277] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1258'. [ 197.863394][ T5973] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 197.933112][ T5973] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 197.981646][ T5973] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 198.106130][ T5895] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 198.181567][ T5895] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 198.194446][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 198.248882][T10298] tc_dump_action: action bad kind [ 198.526841][T10314] xt_NFQUEUE: number of total queues is 0 [ 198.535257][T10314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1267'. [ 198.700600][T10325] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 198.712041][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 199.751328][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 200.203645][T10404] bridge_slave_0: left allmulticast mode [ 200.220067][T10404] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.243930][T10404] bridge_slave_1: left allmulticast mode [ 200.263154][T10404] bridge_slave_1: left promiscuous mode [ 200.274748][T10404] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.298051][T10404] bond0: (slave bond_slave_0): Releasing backup interface [ 200.333420][T10404] bond_slave_0: left promiscuous mode [ 200.350846][T10404] bond_slave_0: left allmulticast mode [ 200.375922][T10404] bond0: (slave bond_slave_1): Releasing backup interface [ 200.386487][T10404] bond_slave_1: left promiscuous mode [ 200.396102][T10404] bond_slave_1: left allmulticast mode [ 200.431584][T10404] team0: Port device team_slave_0 removed [ 200.451936][T10404] team0: Port device team_slave_1 removed [ 200.460385][T10404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.468995][T10404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.479658][T10404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.489978][T10404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.507851][T10404] vlan2: left promiscuous mode [ 200.512933][T10404] bond0: left promiscuous mode [ 200.518612][T10404] bridge0: port 3(vlan2) entered disabled state [ 200.535620][T10404] bond0: (slave macvlan2): Releasing backup interface [ 200.546152][T10404] batadv0: left promiscuous mode [ 200.578427][T10407] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 200.602115][T10413] __nla_validate_parse: 6 callbacks suppressed [ 200.602136][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'. [ 200.618575][T10407] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 200.788205][T10431] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 200.798489][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.184881][T10450] sctp: [Deprecated]: syz.0.1299 (pid 10450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.184881][T10450] Use struct sctp_sack_info instead [ 201.254416][T10448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.496535][T10467] macvlan1: entered allmulticast mode [ 201.504317][T10467] veth1_vlan: entered allmulticast mode [ 201.550705][T10472] netlink: 'syz.3.1310': attribute type 2 has an invalid length. [ 201.831326][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.908024][T10499] sctp: [Deprecated]: syz.1.1317 (pid 10499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.908024][T10499] Use struct sctp_sack_info instead [ 201.928273][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 201.953992][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1316'. [ 201.975851][T10500] netlink: 'syz.4.1316': attribute type 7 has an invalid length. [ 201.997566][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 202.010082][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1316'. [ 202.020920][T10500] netlink: 'syz.4.1316': attribute type 7 has an invalid length. [ 202.035773][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 202.048179][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1316'. [ 202.061219][T10500] netlink: 'syz.4.1316': attribute type 7 has an invalid length. [ 202.075950][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 202.086345][T10503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1318'. [ 202.098597][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1316'. [ 202.109262][T10500] netlink: 'syz.4.1316': attribute type 7 has an invalid length. [ 202.144202][T10500] netlink: 'syz.4.1316': attribute type 7 has an invalid length. [ 202.160695][T10500] netlink: 'syz.4.1316': attribute type 7 has an invalid length. [ 202.176192][T10500] netlink: 'syz.4.1316': attribute type 7 has an invalid length. [ 202.187568][T10500] netlink: 'syz.4.1316': attribute type 7 has an invalid length. [ 202.197872][T10500] netlink: 'syz.4.1316': attribute type 7 has an invalid length. [ 202.206722][T10507] xt_l2tp: missing protocol rule (udp|l2tpip) [ 202.263400][T10507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.317957][T10507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.560844][T10519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.666057][T10519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.871336][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 203.911330][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.168190][T10519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.351612][ T5895] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 204.351632][ T5895] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 204.413539][T10519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.427703][ T5895] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 204.678415][T10519] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.746081][T10519] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.808980][T10519] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.837317][T10579] bond0: entered promiscuous mode [ 204.849111][T10579] bond_slave_0: entered promiscuous mode [ 204.855451][T10579] bond_slave_1: entered promiscuous mode [ 204.864265][T10579] bond0: left promiscuous mode [ 204.869217][T10579] bond_slave_0: left promiscuous mode [ 204.876018][T10579] bond_slave_1: left promiscuous mode [ 204.921423][T10584] unsupported nla_type 52263 [ 204.944962][T10519] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.953316][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 205.632375][T10629] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.642322][T10629] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.652102][T10629] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.661774][T10629] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.680811][T10637] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.986026][T10652] __nla_validate_parse: 136 callbacks suppressed [ 205.986047][T10652] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1367'. [ 205.992679][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.007490][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1369'. [ 206.031433][T10652] A link change request failed with some changes committed already. Interface Oܼ may have been left with an inconsistent configuration, please check. [ 206.237205][T10670] tipc: Can't bind to reserved service type 2 [ 206.443702][T10676] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 206.476954][T10675] xt_CT: No such helper "syz1" [ 206.499095][T10676] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 206.662664][T10696] validate_nla: 64 callbacks suppressed [ 206.662687][T10696] netlink: 'syz.1.1378': attribute type 1 has an invalid length. [ 206.704623][T10696] netlink: 'syz.1.1378': attribute type 1 has an invalid length. [ 206.713963][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1382'. [ 206.734219][T10696] netlink: 'syz.1.1378': attribute type 1 has an invalid length. [ 206.747691][T10696] netlink: 'syz.1.1378': attribute type 2 has an invalid length. [ 206.755919][T10696] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1378'. [ 206.907129][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1383'. [ 206.976345][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 207.031864][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 207.260914][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'. [ 207.283775][T10737] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 207.459354][T10746] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1391'. [ 208.071341][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 208.138795][T10785] netlink: 'syz.3.1402': attribute type 10 has an invalid length. [ 208.271964][T10785] team0: Cannot enslave team device to itself [ 208.332339][T10792] gtp0: entered promiscuous mode [ 208.341508][T10792] gtp0: entered allmulticast mode [ 208.425031][T10798] netlink: 'syz.1.1404': attribute type 1 has an invalid length. [ 208.713343][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 208.756267][T10819] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1409'. [ 208.900968][T10814] xt_CT: No such helper "snmp_trap" [ 209.111462][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.156320][T10845] openvswitch: netlink: IP tunnel TTL not specified. [ 209.431464][ T55] Bluetooth: hci4: link tx timeout [ 209.437298][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.514138][T10870] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 209.560975][T10873] : renamed from bond0 (while UP) [ 209.583762][T10879] netlink: 'syz.2.1426': attribute type 2 has an invalid length. [ 209.618740][T10879] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 209.697906][T10879] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 209.937677][T10898] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.151435][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.196525][T10914] dvmrp0: entered allmulticast mode [ 210.311157][T10920] netlink: 'syz.4.1435': attribute type 12 has an invalid length. [ 210.778387][T10944] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 210.842645][T10944] team0: Device ipvlan0 is already an upper device of the team interface [ 211.127817][T10968] __nla_validate_parse: 8 callbacks suppressed [ 211.127836][T10968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1443'. [ 211.191319][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.513080][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 211.557589][T11001] pimreg: entered allmulticast mode [ 211.583902][T11000] pimreg: left allmulticast mode [ 211.673533][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 211.680411][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 211.686907][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 212.021913][T11015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1455'. [ 212.231328][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 212.296742][T11033] tipc: Enabled bearer , priority 10 [ 212.752554][T11064] validate_nla: 2 callbacks suppressed [ 212.752574][T11064] netlink: 'syz.0.1470': attribute type 2 has an invalid length. [ 212.850600][T11066] netlink: 'syz.4.1472': attribute type 4 has an invalid length. [ 213.271877][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.527077][T11102] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 213.639296][T11109] netlink: 'syz.3.1485': attribute type 21 has an invalid length. [ 213.669547][T11109] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1485'. [ 213.711990][T11109] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1485'. [ 213.754142][T11113] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1487'. [ 213.774418][T11113] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1487'. [ 213.863931][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'. [ 214.096082][T11133] tipc: Enabling of bearer rejected, failed to enable media [ 214.144371][T11136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1494'. [ 214.167100][T11136] netlink: 'syz.2.1494': attribute type 7 has an invalid length. [ 214.186489][T11136] netlink: 'syz.2.1494': attribute type 8 has an invalid length. [ 214.194774][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 214.311472][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 214.517571][T11158] netlink: 'syz.0.1501': attribute type 1 has an invalid length. [ 214.535224][T11158] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1501'. [ 215.039122][T11195] netlink: 'syz.3.1509': attribute type 4 has an invalid length. [ 215.077766][T11195] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 215.351508][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 215.578686][T11231] xt_NFQUEUE: number of total queues is 0 [ 215.610356][T11233] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 215.763143][T11239] sch_fq: defrate 0 ignored. [ 216.046863][T11257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.168327][T11269] __nla_validate_parse: 3 callbacks suppressed [ 216.168348][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1531'. [ 216.223992][T11269] tipc: Started in network mode [ 216.248121][T11269] tipc: Node identity 7, cluster identity 5 [ 216.254827][T11269] tipc: Node number set to 7 [ 216.279346][T11274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1533'. [ 216.313790][T11281] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1534'. [ 216.391315][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.928071][T11316] netlink: 'syz.3.1543': attribute type 1 has an invalid length. [ 216.962672][T11317] netlink: 'syz.3.1543': attribute type 1 has an invalid length. [ 217.079198][T11316] bond2: entered promiscuous mode [ 217.086798][T11316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.146959][T11330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.291088][T11330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.431534][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.565733][T11356] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 217.611858][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'. [ 217.632957][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'. [ 217.642651][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1553'. [ 217.703859][T11366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1555'. [ 217.718503][T11364] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 217.731968][T11364] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 217.740872][T11364] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 217.753887][T11364] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 217.764854][T11371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 217.768045][T11364] bond0: (slave geneve2): making interface the new active one [ 217.784276][T11364] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 217.846329][T11371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.080589][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'. [ 218.147136][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 218.471476][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 218.723046][T11414] block nbd2: server does not support multiple connections per device. [ 218.751662][T11414] block nbd2: shutting down sockets [ 218.760758][T11409] validate_nla: 2 callbacks suppressed [ 218.760773][T11409] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 219.148570][T11459] No such timeout policy "syz0" [ 219.227762][T11462] delete_channel: no stack [ 219.493231][T11482] netlink: 'syz.0.1581': attribute type 4 has an invalid length. [ 219.507711][T11483] netlink: 'syz.0.1581': attribute type 4 has an invalid length. [ 219.511476][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.344414][T11543] netlink: 'syz.2.1597': attribute type 4 has an invalid length. [ 220.361547][T11546] netlink: 'syz.2.1597': attribute type 4 has an invalid length. [ 220.411882][T11538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.437261][T11538] bond1: (slave bridge6): Enslaving as an active interface with an up link [ 220.551351][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.580790][T11544] netlink: 'syz.0.1598': attribute type 4 has an invalid length. [ 220.792237][T11571] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 221.284637][T11597] __nla_validate_parse: 12 callbacks suppressed [ 221.284659][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1611'. [ 221.317537][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'. [ 221.353487][T11607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1613'. [ 221.480800][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 221.502585][T11607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1613'. [ 221.539614][T11607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1613'. [ 221.591413][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 221.625925][T11616] xt_CT: No such helper "snmp_trap" [ 221.890190][T11633] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1619'. [ 222.443756][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'. [ 222.484344][T11664] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 222.631418][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.805799][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 222.844868][T11686] netlink: 'syz.0.1632': attribute type 5 has an invalid length. [ 222.871481][T11686] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1632'. [ 222.888521][T11693] x_tables: unsorted entry at hook 3 [ 223.132248][T11713] veth0: entered promiscuous mode [ 223.155690][T11713] veth0: left promiscuous mode [ 223.671998][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 223.862484][T11752] sit0: entered promiscuous mode [ 223.937043][T11752] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 224.481434][T11787] sctp: [Deprecated]: syz.0.1652 (pid 11787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.481434][T11787] Use struct sctp_sack_info instead [ 224.575921][T11789] vlan0: entered promiscuous mode [ 224.711494][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 225.296718][T11813] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 225.751416][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 225.811042][T11855] sctp: [Deprecated]: syz.0.1665 (pid 11855) Use of int in max_burst socket option deprecated. [ 225.811042][T11855] Use struct sctp_assoc_value instead [ 225.864296][T11855] sctp: [Deprecated]: syz.0.1665 (pid 11855) Use of int in max_burst socket option deprecated. [ 225.864296][T11855] Use struct sctp_assoc_value instead [ 225.928949][T11855] sctp: [Deprecated]: syz.0.1665 (pid 11855) Use of int in max_burst socket option deprecated. [ 225.928949][T11855] Use struct sctp_assoc_value instead [ 225.951479][T11855] sctp: [Deprecated]: syz.0.1665 (pid 11855) Use of int in max_burst socket option deprecated. [ 225.951479][T11855] Use struct sctp_assoc_value instead [ 226.003250][T11855] sctp: [Deprecated]: syz.0.1665 (pid 11855) Use of int in max_burst socket option deprecated. [ 226.003250][T11855] Use struct sctp_assoc_value instead [ 226.042622][T11855] sctp: [Deprecated]: syz.0.1665 (pid 11855) Use of int in max_burst socket option deprecated. [ 226.042622][T11855] Use struct sctp_assoc_value instead [ 226.076482][T11855] sctp: [Deprecated]: syz.0.1665 (pid 11855) Use of int in max_burst socket option deprecated. [ 226.076482][T11855] Use struct sctp_assoc_value instead [ 226.123790][T11880] netlink: 'syz.2.1670': attribute type 12 has an invalid length. [ 226.139414][T11855] sctp: [Deprecated]: syz.0.1665 (pid 11855) Use of int in max_burst socket option deprecated. [ 226.139414][T11855] Use struct sctp_assoc_value instead [ 226.188776][T11880] netlink: 'syz.2.1670': attribute type 75 has an invalid length. [ 226.236424][T11855] sctp: [Deprecated]: syz.0.1665 (pid 11855) Use of int in max_burst socket option deprecated. [ 226.236424][T11855] Use struct sctp_assoc_value instead [ 226.286905][T11855] sctp: [Deprecated]: syz.0.1665 (pid 11855) Use of int in max_burst socket option deprecated. [ 226.286905][T11855] Use struct sctp_assoc_value instead [ 226.331658][T11886] __nla_validate_parse: 9 callbacks suppressed [ 226.331681][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1671'. [ 226.378491][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1671'. [ 226.791586][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.870854][T11919] netlink: 'syz.3.1679': attribute type 1 has an invalid length. [ 226.880311][T11918] x_tables: duplicate underflow at hook 2 [ 226.902339][T11920] netlink: 'syz.3.1679': attribute type 1 has an invalid length. [ 226.910120][T11920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1679'. [ 226.979155][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1682'. [ 226.981293][T11919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1679'. [ 227.005236][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 227.019156][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 227.260528][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 227.373311][T11941] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.525755][T11941] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.725880][T11941] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.831542][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.929400][T11941] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.251563][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1693'. [ 228.355200][T11987] netlink: 'syz.3.1694': attribute type 10 has an invalid length. [ 228.387956][T11941] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.388150][T11989] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20003 [ 228.440789][T11941] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.564633][T11941] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.653837][T11941] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.872776][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.395214][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1710'. [ 229.453692][T12051] bridge0: entered promiscuous mode [ 229.459912][T12051] macvlan3: entered promiscuous mode [ 229.616902][T12064] veth0: entered promiscuous mode [ 229.636650][T12062] veth0: left promiscuous mode [ 229.798884][T12072] xt_hashlimit: size too large, truncated to 1048576 [ 229.911521][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.995488][T12086] netlink: 'syz.1.1718': attribute type 11 has an invalid length. [ 230.254813][T12091] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 230.304317][ T8771] tipc: Subscription rejected, illegal request [ 230.438932][T12108] ipt_REJECT: TCP_RESET invalid for non-tcp [ 230.954712][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.014083][T12139] netlink: 'syz.1.1735': attribute type 10 has an invalid length. [ 231.492035][T12154] netlink: 'syz.1.1739': attribute type 1 has an invalid length. [ 231.523037][T12154] __nla_validate_parse: 7 callbacks suppressed [ 231.523054][T12154] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1739'. [ 231.741874][T12167] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1741'. [ 231.860578][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 231.992599][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.032008][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.096245][T12178] netlink: 'syz.1.1745': attribute type 29 has an invalid length. [ 233.113649][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'. [ 233.160901][T12172] macsec0: entered promiscuous mode [ 233.656716][T12217] netlink: 'syz.3.1756': attribute type 11 has an invalid length. [ 233.926841][T12236] bridge_slave_0: left allmulticast mode [ 233.978513][T12236] bridge_slave_0: left promiscuous mode [ 233.995801][T12236] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.031779][T12236] bridge_slave_1: left allmulticast mode [ 234.037594][T12236] bridge_slave_1: left promiscuous mode [ 234.047068][T12236] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.071568][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.112503][T12236] team0: Port device team_slave_0 removed [ 234.142855][T12236] team0: Port device team_slave_1 removed [ 234.160322][T12236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.170756][T12236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.183972][T12236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.193126][T12236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.544120][T12266] veth1_to_bond: entered allmulticast mode [ 234.550906][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 234.608946][T12266] veth1_to_bond: left allmulticast mode [ 234.849336][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1782'. [ 235.099280][T12300] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1785'. [ 235.111450][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 235.178799][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 235.220517][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1787'. [ 235.387586][T12308] : entered promiscuous mode [ 235.450487][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 235.483992][T12328] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 235.514677][T12328] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 235.536597][T12328] gretap1: entered promiscuous mode [ 235.546280][T12328] gretap1: entered allmulticast mode [ 235.546333][T12331] sctp: [Deprecated]: syz.1.1795 (pid 12331) Use of int in maxseg socket option. [ 235.546333][T12331] Use struct sctp_assoc_value instead [ 235.758814][T12346] xfrm0 speed is unknown, defaulting to 1000 [ 235.773032][T12346] xfrm0 speed is unknown, defaulting to 1000 [ 235.785111][T12346] xfrm0 speed is unknown, defaulting to 1000 [ 235.849046][T12346] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 235.939022][T12346] xfrm0 speed is unknown, defaulting to 1000 [ 235.977042][T12361] sch_fq: defrate 0 ignored. [ 236.005786][T12346] xfrm0 speed is unknown, defaulting to 1000 [ 236.040699][T12346] xfrm0 speed is unknown, defaulting to 1000 [ 236.063472][T12346] xfrm0 speed is unknown, defaulting to 1000 [ 236.087145][T12346] xfrm0 speed is unknown, defaulting to 1000 [ 236.151434][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.163572][T12369] netlink: 'syz.1.1807': attribute type 6 has an invalid length. [ 236.175997][T12371] FAULT_INJECTION: forcing a failure. [ 236.175997][T12371] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 236.192660][T12371] CPU: 1 UID: 0 PID: 12371 Comm: syz.4.1809 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 236.192689][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 236.192702][T12371] Call Trace: [ 236.192711][T12371] [ 236.192718][T12371] dump_stack_lvl+0x241/0x360 [ 236.192767][T12371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.192797][T12371] ? __pfx__printk+0x10/0x10 [ 236.192846][T12371] should_fail_ex+0x424/0x570 [ 236.192872][T12371] _copy_to_user+0x31/0xb0 [ 236.192902][T12371] simple_read_from_buffer+0xc4/0x170 [ 236.192934][T12371] proc_fail_nth_read+0x1ef/0x260 [ 236.192960][T12371] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.192984][T12371] ? rw_verify_area+0x246/0x630 [ 236.193003][T12371] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.193024][T12371] vfs_read+0x21f/0xb90 [ 236.193050][T12371] ? __pfx___mutex_lock+0x10/0x10 [ 236.193075][T12371] ? __pfx_vfs_read+0x10/0x10 [ 236.193100][T12371] ? __fget_files+0x2a/0x420 [ 236.193118][T12371] ? __fget_files+0x39d/0x420 [ 236.193134][T12371] ? __fget_files+0x2a/0x420 [ 236.193160][T12371] ksys_read+0x19d/0x2d0 [ 236.193184][T12371] ? __pfx_ksys_read+0x10/0x10 [ 236.193212][T12371] ? do_syscall_64+0xb6/0x230 [ 236.193238][T12371] do_syscall_64+0xf3/0x230 [ 236.193261][T12371] ? clear_bhb_loop+0x45/0xa0 [ 236.193285][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.193303][T12371] RIP: 0033:0x7f74c638bb7c [ 236.193324][T12371] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 236.193340][T12371] RSP: 002b:00007f74c7140030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.193367][T12371] RAX: ffffffffffffffda RBX: 00007f74c65a5fa0 RCX: 00007f74c638bb7c [ 236.193381][T12371] RDX: 000000000000000f RSI: 00007f74c71400a0 RDI: 0000000000000005 [ 236.193392][T12371] RBP: 00007f74c7140090 R08: 0000000000000000 R09: 0000000000000000 [ 236.193403][T12371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.193419][T12371] R13: 0000000000000000 R14: 00007f74c65a5fa0 R15: 00007ffcc0b5e0f8 [ 236.193450][T12371] [ 236.445071][T12377] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 236.477008][T12377] netlink: 'syz.3.1808': attribute type 3 has an invalid length. [ 237.166990][T12420] sctp: [Deprecated]: syz.1.1816 (pid 12420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.166990][T12420] Use struct sctp_sack_info instead [ 237.191311][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 237.889623][T12454] __nla_validate_parse: 3 callbacks suppressed [ 237.889644][T12454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1830'. [ 238.084050][T12464] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.095678][T12464] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.106343][T12465] netlink: 'syz.4.1832': attribute type 8 has an invalid length. [ 238.115113][T12464] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.157313][T12464] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 238.195821][T12470] netlink: 'syz.0.1835': attribute type 33 has an invalid length. [ 238.214560][T12472] netlink: 'syz.0.1835': attribute type 33 has an invalid length. [ 238.224636][T12471] netlink: 'syz.3.1834': attribute type 21 has an invalid length. [ 238.231438][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 238.233029][T12471] netlink: 'syz.3.1834': attribute type 1 has an invalid length. [ 238.313213][T12464] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.348122][T12464] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.382863][T12464] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.409785][T12464] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.431150][T12464] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.457178][T12478] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 238.489203][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 238.560355][T12478] netlink: 'syz.4.1837': attribute type 13 has an invalid length. [ 238.580217][T12478] netlink: 'syz.4.1837': attribute type 58 has an invalid length. [ 238.593436][T12478] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1837'. [ 238.723258][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 238.741561][T12495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1841'. [ 238.817588][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1841'. [ 239.006693][T12511] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1849'. [ 239.080304][T12515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1849'. [ 239.106749][T12515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1849'. [ 239.136418][T12515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1849'. [ 239.150762][T12516] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.271527][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.510044][T12537] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 239.780815][T12557] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 240.314913][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 240.464582][T12589] : renamed from bridge_slave_0 (while UP) [ 241.224101][T12638] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 241.243583][T12642] veth0: entered promiscuous mode [ 241.249939][T12631] veth0: left promiscuous mode [ 241.351409][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.680908][T12656] xfrm0 speed is unknown, defaulting to 1000 [ 241.689480][T12656] virt_wifi0 speed is unknown, defaulting to 1000 [ 241.804406][T12664] vlan0: entered allmulticast mode [ 241.809589][T12664] batadv0: entered allmulticast mode [ 242.214458][T12687] validate_nla: 3 callbacks suppressed [ 242.214479][T12687] netlink: 'syz.3.1902': attribute type 30 has an invalid length. [ 242.391520][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.874549][T12718] bond0: entered promiscuous mode [ 242.879655][T12718] bond_slave_0: entered promiscuous mode [ 242.895036][T12718] bond_slave_1: entered promiscuous mode [ 242.917622][T12718] batadv0: entered promiscuous mode [ 242.957130][T12718] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 242.986233][T12718] bond0: left promiscuous mode [ 243.000270][T12718] bond_slave_0: left promiscuous mode [ 243.006289][T12718] bond_slave_1: left promiscuous mode [ 243.017367][T12718] batadv0: left promiscuous mode [ 243.057037][T12731] __nla_validate_parse: 13 callbacks suppressed [ 243.057060][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 243.289025][T12743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1915'. [ 243.441312][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.470488][T12752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1915'. [ 243.851410][T12771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1920'. [ 243.876130][T12771] netlink: 'syz.2.1920': attribute type 7 has an invalid length. [ 243.899070][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 243.902455][T12771] netlink: 'syz.2.1920': attribute type 8 has an invalid length. [ 243.998280][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'. [ 244.082530][T12795] netlink: 'syz.2.1920': attribute type 4 has an invalid length. [ 244.197400][T12798] netlink: 'syz.3.1925': attribute type 39 has an invalid length. [ 244.214220][T12771] dummy0: entered promiscuous mode [ 244.254223][T12771] dummy0: left promiscuous mode [ 244.471560][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.532418][T12810] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 244.847593][T12837] nft_compat: unsupported protocol 0 [ 244.866859][T12837] xt_hashlimit: invalid rate [ 245.449677][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 245.465639][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 245.511316][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 245.602275][T12870] veth0_to_hsr: entered promiscuous mode [ 245.611989][T12870] openvswitch: netlink: Message has 3 unknown bytes. [ 245.634701][T12870] openvswitch: netlink: Actions may not be safe on all matching packets [ 245.647485][T12872] openvswitch: netlink: Key type 14358 is out of range max 32 [ 245.716400][T12869] veth0_to_hsr: left promiscuous mode [ 245.895867][T12890] netlink: 'syz.3.1948': attribute type 3 has an invalid length. [ 246.287748][T12912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1955'. [ 246.369734][T12920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1958'. [ 246.551622][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 247.601419][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 248.142012][T13024] __nla_validate_parse: 3 callbacks suppressed [ 248.142033][T13024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1983'. [ 248.631456][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.309328][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.320573][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.329126][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.341359][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.349327][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.412788][T13080] xfrm0 speed is unknown, defaulting to 1000 [ 249.423642][T13080] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.671306][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.799918][T13080] chnl_net:caif_netlink_parms(): no params data found [ 250.165655][T13080] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.182265][T13080] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.198361][T13080] bridge_slave_0: entered allmulticast mode [ 250.207296][T13080] bridge_slave_0: entered promiscuous mode [ 250.219477][T13127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.257663][T13080] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.266555][T13080] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.281555][T13080] bridge_slave_1: entered allmulticast mode [ 250.299168][T13080] bridge_slave_1: entered promiscuous mode [ 250.439896][T13080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.450865][T13129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.476565][T13080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.606002][T13080] team0: Port device team_slave_0 added [ 250.626374][T13080] team0: Port device team_slave_1 added [ 250.654643][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2015'. [ 250.690501][T13080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.698357][T13080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.724656][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 250.732585][T13080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.746526][T13080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.774957][T13080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.843876][T13080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.991044][T13080] hsr_slave_0: entered promiscuous mode [ 251.013595][T13080] hsr_slave_1: entered promiscuous mode [ 251.030927][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 251.413706][T13184] x_tables: duplicate underflow at hook 3 [ 251.426583][T13080] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.437138][ T5856] Bluetooth: hci2: command tx timeout [ 251.466514][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 251.510300][T13187] sctp: [Deprecated]: syz.0.2026 (pid 13187) Use of int in maxseg socket option. [ 251.510300][T13187] Use struct sctp_assoc_value instead [ 251.589330][T13080] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.627306][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 251.697937][T13080] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.752072][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.790202][T13200] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2030'. [ 251.850389][T13080] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.991118][T13211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2032'. [ 252.022660][T13211] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2032'. [ 252.052623][T13210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2032'. [ 252.079329][T13210] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2032'. [ 252.102894][T13080] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 252.124930][T13080] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.305283][T13080] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.325517][T13080] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.527372][T13228] tipc: Enabled bearer , priority 10 [ 252.644711][T13080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.714298][T13080] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.766018][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.773292][ T8771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.791445][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.859811][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.867088][ T8777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.950095][T13241] netlink: 'syz.3.2039': attribute type 5 has an invalid length. [ 253.162295][T13251] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 253.249223][T13254] bond3: (slave ipip1): The slave device specified does not support setting the MAC address [ 253.297551][T13254] bond3: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 253.370216][T13254] bond3: (slave ipip1): making interface the new active one [ 253.406687][T13254] bond3: (slave ipip1): Enslaving as an active interface with an up link [ 253.511744][ T5856] Bluetooth: hci2: command tx timeout [ 253.540159][T13261] bond3: entered promiscuous mode [ 253.557231][T13261] bond3: entered allmulticast mode [ 253.570040][T13261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.637128][T13080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.667824][T13249] netlink: 'syz.0.2041': attribute type 5 has an invalid length. [ 253.749355][T13080] veth0_vlan: entered promiscuous mode [ 253.792678][T13080] veth1_vlan: entered promiscuous mode [ 253.831558][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 253.928135][T13080] veth0_macvtap: entered promiscuous mode [ 253.948565][T13080] veth1_macvtap: entered promiscuous mode [ 254.020387][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.057129][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.079727][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.100810][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.138872][T13080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.186659][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.214496][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.230548][T13080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.298950][T13080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.315004][T13080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.323896][T13080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.333022][T13080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.470248][T13304] xt_TPROXY: Can be used only with -p tcp or -p udp [ 254.476138][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.493258][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.543449][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.553079][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.593469][T13308] macvlan1: entered allmulticast mode [ 254.599102][T13308] veth1_vlan: entered allmulticast mode [ 254.871502][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.323535][T13346] netlink: 'syz.2.2068': attribute type 32 has an invalid length. [ 255.479360][T13354] xt_CT: No such helper "syz1" [ 255.694734][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.701104][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.803572][T13376] openvswitch: netlink: Actions may not be safe on all matching packets [ 255.836231][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.911611][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 256.262325][T13397] __nla_validate_parse: 5 callbacks suppressed [ 256.262347][T13397] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2080'. [ 256.366307][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.640508][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.943730][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.951669][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 256.966302][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.974545][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.983454][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.997366][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.165271][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2092'. [ 257.226332][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.237307][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2093'. [ 257.439863][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2096'. [ 257.599333][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2095'. [ 257.992920][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.924757][T13426] xfrm0 speed is unknown, defaulting to 1000 [ 258.933858][T13426] virt_wifi0 speed is unknown, defaulting to 1000 [ 259.031392][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.038761][ T5856] Bluetooth: hci2: command tx timeout [ 259.073287][T13469] Cannot find add_set index 0 as target [ 259.160350][T13473] tap0: tun_chr_ioctl cmd 1074025672 [ 259.182473][T13473] tap0: ignored: set checksum disabled [ 259.379263][ T53] bridge_slave_1: left allmulticast mode [ 259.388010][ T53] bridge_slave_1: left promiscuous mode [ 259.404419][T13480] netlink: 'syz.3.2101': attribute type 1 has an invalid length. [ 259.430846][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.454012][T13480] netlink: 'syz.3.2101': attribute type 11 has an invalid length. [ 259.466404][ T53] bridge_slave_0: left allmulticast mode [ 259.472709][ T53] bridge_slave_0: left promiscuous mode [ 259.478639][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.488534][T13480] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2101'. [ 259.894903][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.908820][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.920143][ T53] bond0 (unregistering): Released all slaves [ 260.071301][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.135814][T13426] chnl_net:caif_netlink_parms(): no params data found [ 260.331462][T13502] netlink: 'syz.3.2109': attribute type 21 has an invalid length. [ 260.351336][T13502] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2109'. [ 260.384537][T13509] netlink: 'syz.3.2109': attribute type 21 has an invalid length. [ 260.407229][T13509] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2109'. [ 260.427720][T13502] netlink: 'syz.3.2109': attribute type 4 has an invalid length. [ 260.437409][T13502] netlink: 'syz.3.2109': attribute type 5 has an invalid length. [ 260.445698][T13502] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2109'. [ 260.455186][T13509] netlink: 'syz.3.2109': attribute type 4 has an invalid length. [ 260.463362][T13509] netlink: 'syz.3.2109': attribute type 5 has an invalid length. [ 260.471970][T13509] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2109'. [ 260.642851][T13520] [ 260.645241][T13520] ====================================================== [ 260.652279][T13520] WARNING: possible circular locking dependency detected [ 260.659406][T13520] 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 Not tainted [ 260.666533][T13520] ------------------------------------------------------ [ 260.673568][T13520] syz.4.2111/13520 is trying to acquire lock: [ 260.679629][T13520] ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x11ae/0x2ba0 [ 260.688699][T13520] [ 260.688699][T13520] but task is already holding lock: [ 260.696060][T13520] ffff888059c766a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 260.706171][T13520] [ 260.706171][T13520] which lock already depends on the new lock. [ 260.706171][T13520] [ 260.716577][T13520] [ 260.716577][T13520] the existing dependency chain (in reverse order) is: [ 260.725612][T13520] [ 260.725612][T13520] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 260.734228][T13520] lock_acquire+0x116/0x2f0 [ 260.739257][T13520] __mutex_lock+0x1a5/0x10c0 [ 260.744389][T13520] smc_switch_to_fallback+0x35/0xda0 [ 260.750218][T13520] smc_sendmsg+0x11f/0x530 [ 260.755173][T13520] __sock_sendmsg+0x221/0x270 [ 260.760382][T13520] __sys_sendto+0x365/0x4c0 [ 260.765405][T13520] __x64_sys_sendto+0xde/0x100 [ 260.770685][T13520] do_syscall_64+0xf3/0x230 [ 260.775734][T13520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.782296][T13520] [ 260.782296][T13520] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 260.789973][T13520] lock_acquire+0x116/0x2f0 [ 260.795018][T13520] lock_sock_nested+0x48/0x100 [ 260.800315][T13520] do_ip_setsockopt+0x17e9/0x39c0 [ 260.805872][T13520] ip_setsockopt+0x63/0x100 [ 260.810916][T13520] do_sock_setsockopt+0x3b1/0x710 [ 260.816459][T13520] __x64_sys_setsockopt+0x1ee/0x280 [ 260.822177][T13520] do_syscall_64+0xf3/0x230 [ 260.827206][T13520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.833669][T13520] [ 260.833669][T13520] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 260.840888][T13520] validate_chain+0xa69/0x24e0 [ 260.846183][T13520] __lock_acquire+0xad5/0xd80 [ 260.851401][T13520] lock_acquire+0x116/0x2f0 [ 260.856449][T13520] __mutex_lock+0x1a5/0x10c0 [ 260.861580][T13520] do_ip_getsockopt+0x11ae/0x2ba0 [ 260.867231][T13520] ip_getsockopt+0xef/0x2e0 [ 260.872271][T13520] tcp_getsockopt+0x16f/0x1d0 [ 260.877479][T13520] smc_getsockopt+0x1c6/0x400 [ 260.882767][T13520] do_sock_getsockopt+0x391/0x740 [ 260.888311][T13520] __x64_sys_getsockopt+0x2a3/0x370 [ 260.894029][T13520] do_syscall_64+0xf3/0x230 [ 260.899059][T13520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.905479][T13520] [ 260.905479][T13520] other info that might help us debug this: [ 260.905479][T13520] [ 260.915707][T13520] Chain exists of: [ 260.915707][T13520] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 260.915707][T13520] [ 260.929383][T13520] Possible unsafe locking scenario: [ 260.929383][T13520] [ 260.936827][T13520] CPU0 CPU1 [ 260.942190][T13520] ---- ---- [ 260.947548][T13520] lock(&smc->clcsock_release_lock); [ 260.952930][T13520] lock(sk_lock-AF_INET); [ 260.959872][T13520] lock(&smc->clcsock_release_lock); [ 260.967772][T13520] lock(rtnl_mutex); [ 260.971759][T13520] [ 260.971759][T13520] *** DEADLOCK *** [ 260.971759][T13520] [ 260.979905][T13520] 1 lock held by syz.4.2111/13520: [ 260.985020][T13520] #0: ffff888059c766a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 260.995579][T13520] [ 260.995579][T13520] stack backtrace: [ 261.001473][T13520] CPU: 0 UID: 0 PID: 13520 Comm: syz.4.2111 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 261.001498][T13520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.001520][T13520] Call Trace: [ 261.001529][T13520] [ 261.001540][T13520] dump_stack_lvl+0x241/0x360 [ 261.001569][T13520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.001592][T13520] ? __pfx__printk+0x10/0x10 [ 261.001615][T13520] ? print_lock+0x171/0x1a0 [ 261.001636][T13520] print_circular_bug+0x2e1/0x300 [ 261.001658][T13520] check_noncircular+0x142/0x160 [ 261.001682][T13520] validate_chain+0xa69/0x24e0 [ 261.001703][T13520] ? filemap_map_pages+0x230/0x1900 [ 261.001734][T13520] __lock_acquire+0xad5/0xd80 [ 261.001755][T13520] lock_acquire+0x116/0x2f0 [ 261.001769][T13520] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 261.001794][T13520] __mutex_lock+0x1a5/0x10c0 [ 261.001813][T13520] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 261.001832][T13520] ? __lock_acquire+0xad5/0xd80 [ 261.001851][T13520] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 261.001871][T13520] ? __pfx___mutex_lock+0x10/0x10 [ 261.001900][T13520] do_ip_getsockopt+0x11ae/0x2ba0 [ 261.001921][T13520] ? count_memcg_event_mm+0x96/0x440 [ 261.001942][T13520] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 261.001961][T13520] ? count_memcg_event_mm+0x388/0x440 [ 261.001983][T13520] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 261.002004][T13520] ? mtree_range_walk+0x700/0x8e0 [ 261.002022][T13520] ? look_up_lock_class+0x7b/0x170 [ 261.002041][T13520] ? register_lock_class+0x54/0x330 [ 261.002059][T13520] ? __lock_acquire+0xad5/0xd80 [ 261.002076][T13520] ? __mutex_trylock_common+0x184/0x2e0 [ 261.002101][T13520] ? __pfx___mutex_trylock_common+0x10/0x10 [ 261.002127][T13520] ip_getsockopt+0xef/0x2e0 [ 261.002157][T13520] ? __pfx_ip_getsockopt+0x10/0x10 [ 261.002176][T13520] ? __up_read+0x2c4/0x6b0 [ 261.002197][T13520] ? smc_getsockopt+0x131/0x400 [ 261.002222][T13520] tcp_getsockopt+0x16f/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 261.002247][T13520] ? __pfx_tcp_getsockopt+0x10/0x10 [ 261.002290][T13520] ? sock_common_getsockopt+0x2e/0xb0 [ 261.002315][T13520] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 261.002337][T13520] smc_getsockopt+0x1c6/0x400 [ 261.002358][T13520] ? __pfx_smc_getsockopt+0x10/0x10 [ 261.002378][T13520] ? rep_movs_alternative+0xf/0x90 [ 261.002404][T13520] ? __pfx_smc_getsockopt+0x10/0x10 [ 261.002424][T13520] do_sock_getsockopt+0x391/0x740 [ 261.002444][T13520] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 261.002459][T13520] ? __fget_files+0x2a/0x420 [ 261.002476][T13520] ? __fget_files+0x39d/0x420 [ 261.002489][T13520] ? __fget_files+0x2a/0x420 [ 261.002507][T13520] __x64_sys_getsockopt+0x2a3/0x370 [ 261.002528][T13520] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 261.002549][T13520] ? do_syscall_64+0xb6/0x230 [ 261.002571][T13520] do_syscall_64+0xf3/0x230 [ 261.002591][T13520] ? clear_bhb_loop+0x45/0xa0 [ 261.002611][T13520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.002634][T13520] RIP: 0033:0x7f74c638d169 [ 261.002649][T13520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.002664][T13520] RSP: 002b:00007f74c711f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 261.002681][T13520] RAX: ffffffffffffffda RBX: 00007f74c65a6080 RCX: 00007f74c638d169 [ 261.002694][T13520] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 000000000000000e [ 261.002704][T13520] RBP: 00007f74c640e990 R08: 00002000000000c0 R09: 0000000000000000 [ 261.002715][T13520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.002725][T13520] R13: 0000000000000000 R14: 00007f74c65a6080 R15: 00007ffcc0b5e0f8 [ 261.002747][T13520] [ 261.151471][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.221409][ T5856] Bluetooth: hci2: command tx timeout [ 261.420392][T13426] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 261.450379][T13513] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 261.544827][T13523] gtp1: entered promiscuous mode [ 261.549832][T13523] gtp1: entered allmulticast mode [ 261.681560][ T53] hsr_slave_0: left promiscuous mode [ 261.714129][ T53] hsr_slave_1: left promiscuous mode [ 261.719984][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.751433][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.794613][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.802167][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.836776][ T53] veth1_macvtap: left promiscuous mode [ 261.861323][ T53] veth0_macvtap: left promiscuous mode [ 261.866938][ T53] veth1_vlan: left promiscuous mode [ 261.891507][ T53] veth0_vlan: left promiscuous mode [ 262.083394][ T53] team0 (unregistering): Port device team_slave_1 removed [ 262.104696][ T53] team0 (unregistering): Port device team_slave_0 removed [ 262.231734][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 262.262878][ T5840] bond0: (slave syz_tun): Releasing backup interface [ 263.281593][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.311551][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.351581][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.391522][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.431595][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.471664][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.511625][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 270.551538][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available