last executing test programs: 22.061773552s ago: executing program 0 (id=1875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f0000000080)="69cf1c52e35cbb7b8d67404cbfd32e92c14aa86c351da9621a5be8e1c62f0da606ae2df42a0946416d71392bfaba25ac", 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f0000000040)={0x2, 0x8, 0x2, 0x3, 0x9, 0xb, 0x7fff, 0xfff3615}, &(0x7f0000000080)={0x7, 0x1, 0x8, 0xb, 0x100000000, 0x400, 0x1}, &(0x7f0000000180)={0x8, 0x30, 0xffffffff, 0x7fffffffffffffff, 0x7, 0x7fffffffffffffff, 0x9ec, 0xff}, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r4, 0x0, 0xfffffffffffffffe}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x11c8, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r6, 0x1, 0x22, &(0x7f0000000180)=""/7, &(0x7f0000005bc0)=0x7) r7 = epoll_create(0x4) r8 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r8, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000280)={0x30000010}) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r5, 0x0) 21.682202265s ago: executing program 0 (id=1877): unshare(0x2040400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0xfffe, 0x1}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) socket$kcm(0x10, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2}}, 0x0, 0x9}, &(0x7f0000000080)=0x90) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000001880)="aeba885d8a65b80be79d9d3190b18a16172dd38175035ad7b91bc4d3cf8115d0a8ae4478c24a8546475c3f91326880b04ef83a3f4713a30bdea95003788bab0cfa0c613b825a4f2b27b4145a66c1a0a1d51fd8a7632420f5359d2c90fa56148b92b74c2bf191cce523b3c6508dcdb386ef8addb1f3558f4e31f4620413c59cf30db8d95704c19eba7e494c5cce5315119208517174e167ac9a7f19e78fc70d9338524e83a520119a3e9e70e7f283c89dde970746da68401682c35e37e7c195d83497eb642079c70e706061257e14d640785800a6dc5510ea3fb3fa7f4d6418e82ce2ca72bd241d65a9600b4934efc3dcc21cb34dc66214", 0xf7}], 0x2}, 0x20008844) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbec, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r6) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000ab05f25bfe3ec91a0fa34d6a1114eaa4db04da705ff16f0c", @ANYRES16, @ANYRES32=r5, @ANYRES16=0x0, @ANYRES8], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @const={0x0, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x38e869a5bbd4abba, 0x2e, 0x5f]}}, 0x0, 0x66}, 0x28) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "8f1151239582"}}) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x4, 0x35, &(0x7f0000001e40)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf", @ANYRES16=r8, @ANYBLOB="00000000000000001859000001000000000000000000000018450000feffffff0000000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000f3c9efd272aaa53f5d076a241b1bb6bd8e9349e775e75e50c2fc7584980730fc3dec7b8ccc3b5a9287fd84a39cbc1b19fa36dbf3909ea0c2729c3be3fdd08dbe5d58ddc3836a565a67543d8c1e461dcaf1c5cc50136cb4fc9ff7b21d8cb4b7732e28722239202f9a3604b63c"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, 0x0, 0x40000) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)="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", 0x109}, {0x0}], 0x2}, 0xc8f0) r9 = socket$igmp(0x2, 0x3, 0x2) writev(r9, &(0x7f0000000300)=[{0x0}, {&(0x7f00000002c0)}], 0x2) 20.331830605s ago: executing program 0 (id=1892): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="3ea3764af1449a26b20a3e221608000000000000bcf43b890cb3ee373dabf223638995a4eac8e40773eb83ecc02c3dda33aa8d3a2fd7bc2d63e639b4a9790bada57523d3fdede239ddef5611f929c9e7f9f8b3a5ec15f7755b9737ee16417b9ea3d6acc918592fbd11d0", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x242, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000007c0), 0x0, 0x40088d4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x31, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4e"}}, 0x3f) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000240)={0xffffffffffffffff, 0x1, 0x10, 0x1000002, @vifc_lcl_ifindex, @rand_addr=0x64010101}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="32c402ec18f332c5ce2000000002000000000000090000000008000b0000000000100000"], 0x24}}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x101, 0x9}, &(0x7f00000000c0)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400)) 13.765329327s ago: executing program 0 (id=1904): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5b000009000000032800"/20], 0x14}}, 0x40) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4008004) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESHEX=r3, @ANYRES16=r1, @ANYRESDEC=r2, @ANYRESHEX=0x0, @ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xffffffffffffff7c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0xffffffffffffffe3, 0x0}}], 0x1, 0x4000840) listen(0xffffffffffffffff, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) unshare(0x64000600) 11.763584647s ago: executing program 4 (id=1910): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'pimreg0\x00', {0x2, 0x0, @private}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r2, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x1c, r5, 0x207, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1041}, 0x4040000) 10.951410681s ago: executing program 4 (id=1915): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=@udp6=r5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x4, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.312194088s ago: executing program 4 (id=1919): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffc}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 9.886408297s ago: executing program 3 (id=1920): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, 0x0, 0x4000000) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) sendfile(r5, r5, 0x0, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c000080280001802300"], 0xe8}}, 0x8040) 8.775236487s ago: executing program 4 (id=1924): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 7.418520484s ago: executing program 1 (id=1928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5452, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$llc(r3, 0x0, 0x0) write$tun(r2, &(0x7f0000000480)={@val={0x0, 0xfbfb}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @empty, @loopback, @broadcast, @rand_addr=0x64010100}}, 0x20) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x3, @none, 0x800, 0x1}, 0xe) close(0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=[{0xfa, 0x7, 0x1, 0x4}, {0xfffe, 0x8, 0x1}, {0x7ff, 0x2, 0x8, 0x5}, {0xce, 0x7f, 0x3, 0x8}]}, 0x10) close(0x4) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x5c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x4040080) 7.020231603s ago: executing program 2 (id=1929): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=@udp6=r5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x24}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x4, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.50114492s ago: executing program 1 (id=1930): socket$igmp6(0xa, 0x3, 0x2) socket(0x21, 0x3, 0xa) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="23000000010006", 0x7) r1 = socket$inet6(0xa, 0x80000, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0008000007500500340012800b0001006272696467650000240002800500190002000000050017000000000008000400810000000500160001000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x48}}, 0x0) 6.387054676s ago: executing program 2 (id=1931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677c65001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r7, 0x6) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r6, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 5.181222177s ago: executing program 3 (id=1932): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYRESDEC=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) close(r7) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 5.180319448s ago: executing program 2 (id=1942): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, 0x0, 0x4000000) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) sendfile(r5, r5, 0x0, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c000080280001802300"], 0xe8}}, 0x8040) 5.060404649s ago: executing program 2 (id=1933): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 4.609371243s ago: executing program 3 (id=1934): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffc}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.827652679s ago: executing program 3 (id=1935): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}]}, &(0x7f0000000080)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010326bd7000030000000000000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.625189999s ago: executing program 1 (id=1936): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b00000002"], 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xe8}}, 0x8040) 2.622388741s ago: executing program 3 (id=1937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="d2664e3de44e5781659d1c2224a19de44fba87cf2fcf751c9b2186", 0x1b, 0x2c000891, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4, 0x40, @empty, 0x1}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.51009436s ago: executing program 1 (id=1938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000740), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r1) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 2.310099765s ago: executing program 2 (id=1939): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='sched_switch\x00', r4, 0x0, 0xffffffffc}, 0x18) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/25], 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0xa, 0x3, 0x3a) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.026220669s ago: executing program 4 (id=1940): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000025c0)=ANY=[@ANYBLOB="14000000010205"], 0x14}, 0x1, 0x0, 0x0, 0x14800}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r11}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x2c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x101}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x400c080) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r13], 0x20}}, 0x0) 894.395394ms ago: executing program 0 (id=1941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xff}]}) write$ppp(r2, &(0x7f0000000300)="4daf", 0x2) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x1, 0x1, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x8004) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e22, 0x0, 0x4e22, 0xfff, 0xa, 0x0, 0x0, 0x3a}, {0x3, 0xd4, 0x6, 0x8, 0x3, 0x3, 0x5, 0x8001}, {0x7f, 0x10000, 0x8000000000000000}, 0xc, 0x6e6bc0, 0x0, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4d2, 0x3c}, 0x2, @in6=@mcast1, 0x34ff, 0x3, 0x3, 0x1, 0xa9, 0x8001, 0x1}}, 0xe8) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 797.476802ms ago: executing program 4 (id=1943): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\"\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x18}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001ccab"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x64, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x2}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008801}, 0x14004804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000000), &(0x7f0000000140)=r7}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x101}, 0x50) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x3c2392026b23f4e4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002400000000000010000020a0500000000000000000000000004090001"], 0x190}}, 0x0) 426.351725ms ago: executing program 1 (id=1944): socket$nl_generic(0x10, 0x3, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0xf, 0x6, 0x8, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x10, 0x40, 0x1000, 0xffff0000}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="34000000140009050000000000000000020100fd", @ANYRES32=0x0, @ANYBLOB="d152ed6f762cd488140006000600000000000003000000000000000008000b725e414fd1c8acfdf588716781ba622aa7c802629b37dfb82e38d4005ba4c4efa6f28fbd7cb7d0d1497fc0f0aa40449d3ea60ba304626c0eb81a70a8db2639fff2fe4c1b5e58fe21c3a95e21eae6efa28ef688e970c5b89d336ae431f4727806"], 0x34}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) syz_emit_ethernet(0x46, &(0x7f0000000480)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x11, 0x7, 0x65, 0x0, 0x9, 0x33, 0x6b6, @broadcast, @private=0xa010100}, "55e56d81075a2bef"}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1e, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000540)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x4d, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}, {"8a72294aaf59a2420882fafe60c614c0ef01907ee72dc0a5403b5cc6090b1cee633596201a5f05ed8640e1ddecde2a6957e26987c7e2cff077"}}}}}}}, 0x0) 413.5788ms ago: executing program 3 (id=1945): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x200000, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) bind$tipc(r2, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000080)={@private0, r5}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000000140)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="140100003300010028bd7000ffdbdf25010100800c0001000300002000000000140003002001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f0797"], 0x114}, {0x0}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000004000700000505000100070000000500010007000000050000000900020073797a32000000000900020073797a31000000001daa58c9ef1ddca57c405473acca6dd64e2469c6c78a0000000000"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) 398.859014ms ago: executing program 0 (id=1946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(0x0, r5) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x1, 0x8000}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r7 = socket(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e23, 0x3, 'dh\x00', 0x21, 0x6, 0x47}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) 198.230844ms ago: executing program 2 (id=1947): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x1000003, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff, 0x2}, 0xe) writev(r2, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d3862950f91ace0319f430925fda88089e3fe65327bef7730896f40535d8cc3c9e2357f8ac13729dd5377c9c47936647690105b100149bfde44adf0e4fae811ad40bb7d9385a4ba07521d9382b1183789c743d76db805ea62c6116d31e6ba78ad33b098cae1289b4b8f007241dff6f9fad1a5f0d161c275d54cbe561ae3842222b780bf1d11"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) recvmmsg(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0x10000}, {{&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000100)=""/35, 0x23}], 0x3, &(0x7f0000000880)=""/144, 0x90}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f00000011c0)=[{&(0x7f00000009c0)=""/176, 0xb0}, {&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/193, 0xc1}, {&(0x7f0000000e00)=""/142, 0x8e}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000ec0)=""/158, 0xfffffffffffffd81}, {&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f00000010c0)=""/223, 0xdf}, {&(0x7f0000000a80)=""/21, 0x15}], 0x9}, 0x100}], 0x3, 0x40001023, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x40000083) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="4000000000000000060012810b000100627269646765000100010000ff0f00003004000000242d4400000000"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@o_path={0x0, 0x0, 0x8, r8}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYRES8=r4], &(0x7f00000022c0)='GPL\x00', 0x1008, 0x1b, &(0x7f0000002300)=""/27, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, r5, 0x8, &(0x7f0000002340)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002380)={0x2, 0xe, 0x7, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000200), &(0x7f0000002400)=[{0x3, 0x3, 0xf, 0x7}], 0x10, 0x81}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r9}, &(0x7f00000021c0), &(0x7f0000002500)=r10}, 0x20) socket(0x2, 0x80805, 0x0) 0s ago: executing program 1 (id=1948): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}]}, &(0x7f0000000080)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010326bd7000030000000000000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) kernel console output (not intermixed with test programs): 4.234455][ T6371] bridge0: port 1(bridge_slave_0) entered listening state [ 134.309642][ T6371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.987826][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 135.896877][ T6395] bridge0: port 1(veth0_to_bridge) entered blocking state [ 135.921149][ T6395] bridge0: port 1(veth0_to_bridge) entered disabled state [ 135.951526][ T6395] veth0_to_bridge: entered allmulticast mode [ 135.976425][ T6395] veth0_to_bridge: entered promiscuous mode [ 135.992323][ T6395] bridge0: port 1(veth0_to_bridge) entered blocking state [ 135.999795][ T6395] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 136.114151][ T6374] lo speed is unknown, defaulting to 1000 [ 136.400577][ T6403] netlink: 'syz.1.76': attribute type 7 has an invalid length. [ 136.427556][ T6403] netlink: 'syz.1.76': attribute type 8 has an invalid length. [ 136.444595][ T6403] netlink: 'syz.1.76': attribute type 4 has an invalid length. [ 136.489666][ T6403] netlink: 204 bytes leftover after parsing attributes in process `syz.1.76'. [ 136.775289][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 137.138009][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 137.232889][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 137.270659][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 137.552608][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 139.070324][ T6453] syzkaller0: entered promiscuous mode [ 139.077361][ T6453] syzkaller0: entered allmulticast mode [ 139.617390][ T6460] lo speed is unknown, defaulting to 1000 [ 139.745227][ T6466] Bluetooth: MGMT ver 1.23 [ 139.861315][ T6469] geneve2: entered promiscuous mode [ 139.896580][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 140.338903][ T6484] netlink: 'syz.4.95': attribute type 1 has an invalid length. [ 140.350468][ T6484] netlink: 224 bytes leftover after parsing attributes in process `syz.4.95'. [ 140.449239][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.457413][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.529575][ T6486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.897084][ T6486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.958080][ T6463] lo speed is unknown, defaulting to 1000 [ 141.365914][ T6486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.677413][ T6486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.249136][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.370793][ T6517] bridge1: entered allmulticast mode [ 142.487818][ T6523] netlink: 'syz.1.102': attribute type 303 has an invalid length. [ 142.532607][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 142.666275][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.801875][ T1153] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.012138][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.111764][ T6527] lo speed is unknown, defaulting to 1000 [ 143.807619][ T6542] batman_adv: batadv0: Adding interface: ip6gretap1 [ 143.824131][ T6542] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.894731][ T6542] batman_adv: batadv0: Interface activated: ip6gretap1 [ 144.910846][ T6553] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 144.980529][ T6553] netlink: 224 bytes leftover after parsing attributes in process `syz.3.109'. [ 145.974799][ T6566] tipc: Enabled bearer , priority 0 [ 146.026979][ T6568] syzkaller0: entered promiscuous mode [ 146.032548][ T6568] syzkaller0: entered allmulticast mode [ 146.110654][ T6566] tipc: Resetting bearer [ 146.179534][ T6565] tipc: Resetting bearer [ 146.264734][ T6565] tipc: Disabling bearer [ 147.405353][ T6585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'. [ 148.762947][ T6604] netlink: 96 bytes leftover after parsing attributes in process `syz.2.122'. [ 149.173060][ T6614] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 149.326457][ T6613] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 149.460837][ T6617] bridge_slave_0: left allmulticast mode [ 149.470842][ T6617] bridge_slave_0: left promiscuous mode [ 149.480599][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.500929][ T6617] bridge_slave_1: left allmulticast mode [ 149.538240][ T6615] netlink: 'syz.3.124': attribute type 10 has an invalid length. [ 149.546269][ T6617] bridge_slave_1: left promiscuous mode [ 149.559814][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.586622][ T6617] bond0: (slave bond_slave_0): Releasing backup interface [ 149.659324][ T6617] bond0: (slave bond_slave_1): Releasing backup interface [ 149.779252][ T6617] team0: Port device team_slave_0 removed [ 149.820384][ T6617] team0: Port device team_slave_1 removed [ 149.840527][ T6617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.859322][ T6617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.925038][ T6617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.959243][ T6617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.207319][ T6617] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 150.251673][ T6617] batman_adv: batadv0: Removing interface: ip6gretap1 [ 150.321790][ T5972] lo speed is unknown, defaulting to 1000 [ 150.347947][ T6624] tipc: Enabled bearer , priority 0 [ 150.373763][ T6615] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 150.469219][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.555951][ T6615] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.225333][ T6625] syzkaller0: entered promiscuous mode [ 151.231252][ T6625] syzkaller0: entered allmulticast mode [ 151.415993][ T6638] tipc: Resetting bearer [ 151.522541][ T6620] tipc: Resetting bearer [ 151.636946][ T6656] netlink: 'syz.3.128': attribute type 8 has an invalid length. [ 151.756576][ T6620] tipc: Disabling bearer [ 151.937620][ T6661] tipc: Started in network mode [ 151.942731][ T6661] tipc: Node identity 4, cluster identity 4711 [ 151.949088][ T6661] tipc: Node number set to 4 [ 151.973051][ T6659] lo speed is unknown, defaulting to 1000 [ 152.100775][ T5842] Bluetooth: hci3: link tx timeout [ 152.114525][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.164416][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 154.986638][ T6709] tipc: Enabled bearer , priority 0 [ 154.994776][ T6709] syzkaller0: entered promiscuous mode [ 155.000323][ T6709] syzkaller0: entered allmulticast mode [ 155.041419][ T6709] tipc: Resetting bearer [ 155.086658][ T6708] tipc: Resetting bearer [ 155.315234][ T6708] tipc: Disabling bearer [ 156.135849][ T6532] Set syz1 is full, maxelem 65536 reached [ 156.195408][ T6726] netlink: 'syz.3.142': attribute type 1 has an invalid length. [ 156.525850][ T6729] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 156.749679][ T6726] bond1 (unregistering): (slave ip6gretap2): Releasing backup interface [ 156.838066][ T6726] bond1 (unregistering): Released all slaves [ 157.316068][ T6751] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 157.589756][ T6758] bond1 (unregistering): Released all slaves [ 160.322137][ T6799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.156'. [ 160.366272][ T6801] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 160.521880][ T6807] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 160.534885][ T6805] tipc: Started in network mode [ 160.540362][ T6805] tipc: Node identity 720917c0fc4a, cluster identity 4711 [ 160.550310][ T6805] tipc: Enabled bearer , priority 0 [ 160.595416][ T6801] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 160.622925][ T6801] bond1 (unregistering): Released all slaves [ 160.674866][ T6815] netlink: 'syz.3.162': attribute type 1 has an invalid length. [ 160.698559][ T6805] syzkaller0: entered promiscuous mode [ 160.712462][ T6805] syzkaller0: entered allmulticast mode [ 160.956029][ T6805] tipc: Resetting bearer [ 160.976284][ T6802] tipc: Resetting bearer [ 161.322821][ T6802] tipc: Disabling bearer [ 161.498102][ T6823] bond1 (unregistering): Released all slaves [ 162.003450][ T6839] lo speed is unknown, defaulting to 1000 [ 162.028699][ T6839] lo speed is unknown, defaulting to 1000 [ 162.145098][ T6839] lo speed is unknown, defaulting to 1000 [ 162.190717][ T6839] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.433888][ T6839] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 162.634990][ T6839] lo speed is unknown, defaulting to 1000 [ 162.668416][ T6839] lo speed is unknown, defaulting to 1000 [ 162.722074][ T6839] lo speed is unknown, defaulting to 1000 [ 162.760094][ T6839] lo speed is unknown, defaulting to 1000 [ 162.797701][ T6839] lo speed is unknown, defaulting to 1000 [ 164.167954][ T6857] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 164.367925][ T6857] bond1 (unregistering): Released all slaves [ 164.653683][ T6869] netlink: 'syz.3.176': attribute type 1 has an invalid length. [ 164.725964][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 164.735480][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 164.814652][ T6872] netlink: 'syz.0.177': attribute type 1 has an invalid length. [ 164.838902][ T6869] bond1 (unregistering): Released all slaves [ 165.060203][ T6883] syzkaller0: entered promiscuous mode [ 165.066604][ T6883] syzkaller0: entered allmulticast mode [ 165.161701][ T6877] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 165.175773][ T6880] tipc: Enabled bearer , priority 0 [ 165.209990][ T6881] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 165.252727][ T6881] bond2 (unregistering): Released all slaves [ 165.294214][ T6873] tipc: Resetting bearer [ 165.383846][ T6873] tipc: Disabling bearer [ 165.812217][ T6912] netlink: 'syz.2.187': attribute type 1 has an invalid length. [ 166.597264][ T6914] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 166.648447][ T6920] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 166.693641][ T6920] bond1 (unregistering): Released all slaves [ 166.981752][ T6927] siw: device registration error -23 [ 167.662406][ T6943] tipc: Enabled bearer , priority 0 [ 167.672902][ T6943] syzkaller0: entered promiscuous mode [ 167.682703][ T6943] syzkaller0: entered allmulticast mode [ 167.710091][ T6943] tipc: Resetting bearer [ 167.726666][ T6942] tipc: Resetting bearer [ 167.795248][ T6942] tipc: Disabling bearer [ 168.254340][ T6958] tipc: Started in network mode [ 168.279251][ T6958] tipc: Node identity 8e318676a932, cluster identity 4711 [ 168.317730][ T6958] tipc: Enabled bearer , priority 0 [ 168.384376][ T6964] syzkaller0: entered promiscuous mode [ 168.389961][ T6964] syzkaller0: entered allmulticast mode [ 168.456964][ T6956] tipc: Resetting bearer [ 168.605845][ T6956] tipc: Disabling bearer [ 169.094411][ T6977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.203'. [ 169.516081][ T6981] netlink: 'syz.4.206': attribute type 1 has an invalid length. [ 169.671777][ T6986] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 169.749927][ T6987] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 169.793606][ T6987] bond1 (unregistering): Released all slaves [ 170.054803][ T6990] tipc: Enabled bearer , priority 0 [ 170.083417][ T6990] syzkaller0: entered promiscuous mode [ 170.105359][ T6990] syzkaller0: entered allmulticast mode [ 170.150137][ T6990] tipc: Resetting bearer [ 170.182145][ T6989] tipc: Resetting bearer [ 170.281502][ T6989] tipc: Disabling bearer [ 171.587476][ T7024] siw: device registration error -23 [ 171.908092][ T7031] netlink: 'syz.4.219': attribute type 1 has an invalid length. [ 172.612192][ T7037] bond1 (unregistering): Released all slaves [ 172.918358][ T7043] tipc: Enabled bearer , priority 0 [ 172.935842][ T7043] syzkaller0: entered promiscuous mode [ 172.995338][ T7043] syzkaller0: entered allmulticast mode [ 173.054221][ T7043] tipc: Resetting bearer [ 173.074941][ T7040] tipc: Resetting bearer [ 173.150427][ T7040] tipc: Disabling bearer [ 173.568519][ T7058] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 174.098609][ T7069] bond1 (unregistering): Released all slaves [ 174.926068][ T7084] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 175.118238][ T7084] bond1 (unregistering): Released all slaves [ 175.602586][ T7099] tipc: Enabled bearer , priority 0 [ 175.945195][ T7099] syzkaller0: entered promiscuous mode [ 175.953882][ T7099] syzkaller0: entered allmulticast mode [ 176.042222][ T7099] tipc: Resetting bearer [ 176.187216][ T7098] tipc: Resetting bearer [ 176.285158][ T7098] tipc: Disabling bearer [ 177.021801][ T7119] tipc: Enabled bearer , priority 0 [ 177.040296][ T7119] tipc: Resetting bearer [ 177.223737][ T7115] tipc: Disabling bearer [ 177.893271][ T7129] netlink: 'syz.2.247': attribute type 1 has an invalid length. [ 178.150572][ T7129] bond1 (unregistering): Released all slaves [ 178.701153][ T7148] tipc: Enabled bearer , priority 0 [ 178.726227][ T7148] syzkaller0: entered promiscuous mode [ 178.746428][ T7148] syzkaller0: entered allmulticast mode [ 178.786512][ T7148] tipc: Resetting bearer [ 178.854563][ T7147] tipc: Resetting bearer [ 178.888700][ T7153] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 178.919746][ T7147] tipc: Disabling bearer [ 179.070219][ T7153] bond2 (unregistering): Released all slaves [ 179.234399][ T7160] siw: device registration error -23 [ 180.088863][ T7175] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 180.366384][ T7175] bond2 (unregistering): Released all slaves [ 181.314281][ T7194] tipc: Enabled bearer , priority 0 [ 181.345428][ T7194] syzkaller0: entered promiscuous mode [ 181.351000][ T7194] syzkaller0: entered allmulticast mode [ 181.497086][ T7194] tipc: Resetting bearer [ 181.524354][ T7193] tipc: Resetting bearer [ 181.552445][ T7193] tipc: Disabling bearer [ 182.189625][ T7205] siw: device registration error -23 [ 182.396541][ T7210] tipc: Enabled bearer , priority 0 [ 182.404631][ T7210] syzkaller0: entered promiscuous mode [ 182.410186][ T7210] syzkaller0: entered allmulticast mode [ 182.514779][ T7210] tipc: Resetting bearer [ 182.564760][ T7209] tipc: Resetting bearer [ 182.676237][ T7209] tipc: Disabling bearer [ 182.902570][ T7221] netlink: 'syz.1.274': attribute type 1 has an invalid length. [ 183.127565][ T7221] bond1 (unregistering): Released all slaves [ 184.624836][ T7247] tipc: Enabled bearer , priority 0 [ 184.635271][ T7247] syzkaller0: entered promiscuous mode [ 184.640831][ T7247] syzkaller0: entered allmulticast mode [ 185.177728][ T7247] tipc: Resetting bearer [ 185.297963][ T7246] tipc: Resetting bearer [ 185.739174][ T7246] tipc: Disabling bearer [ 186.821557][ T7276] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 187.011201][ T7288] tipc: Enabling of bearer rejected, failed to enable media [ 187.070558][ T7276] bond1 (unregistering): Released all slaves [ 188.145104][ T7295] lo speed is unknown, defaulting to 1000 [ 188.270291][ T7315] netlink: 'syz.4.295': attribute type 1 has an invalid length. [ 190.256404][ T7295] lo speed is unknown, defaulting to 1000 [ 191.199472][ T7360] tipc: Enabled bearer , priority 0 [ 191.231660][ T7360] syzkaller0: entered promiscuous mode [ 191.256293][ T7360] syzkaller0: entered allmulticast mode [ 191.353923][ T7360] tipc: Resetting bearer [ 191.414314][ T7359] tipc: Resetting bearer [ 191.465598][ T7366] netlink: 'syz.3.307': attribute type 1 has an invalid length. [ 191.506423][ T7359] tipc: Disabling bearer [ 193.180042][ T7391] siw: device registration error -23 [ 193.798744][ T7403] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 193.891586][ T7407] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 194.215028][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.320'. [ 194.718736][ T7421] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 194.805355][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.812683][ C1] bridge0: topology change detected, propagating [ 194.819684][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.827034][ C1] bridge0: topology change detected, propagating [ 194.903316][ T7431] siw: device registration error -23 [ 194.983562][ T7421] bond3 (unregistering): Released all slaves [ 195.382379][ T7450] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 195.901519][ T7466] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 195.993459][ T7455] tipc: Enabled bearer , priority 0 [ 196.018162][ T7448] syzkaller0: entered promiscuous mode [ 196.124147][ T7448] syzkaller0: entered allmulticast mode [ 196.262750][ T7464] tipc: Resetting bearer [ 196.399618][ T7446] tipc: Resetting bearer [ 196.445734][ T7446] tipc: Disabling bearer [ 196.702091][ T7475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.335'. [ 196.929665][ T7479] tipc: Enabled bearer , priority 0 [ 196.938790][ T7479] syzkaller0: entered promiscuous mode [ 196.944897][ T7479] syzkaller0: entered allmulticast mode [ 197.059644][ T7479] tipc: Resetting bearer [ 197.111051][ T7478] tipc: Resetting bearer [ 197.170469][ T7478] tipc: Disabling bearer [ 197.556764][ T7502] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 198.008906][ T7524] tipc: Enabled bearer , priority 0 [ 198.048289][ T7524] syzkaller0: entered promiscuous mode [ 198.073300][ T7524] syzkaller0: entered allmulticast mode [ 198.229838][ T7533] tipc: Resetting bearer [ 198.245606][ T7531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.349'. [ 198.260544][ T7534] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 198.270697][ T7523] tipc: Resetting bearer [ 198.328314][ T7523] tipc: Disabling bearer [ 198.735163][ T7551] tipc: Enabled bearer , priority 0 [ 198.757145][ T7551] syzkaller0: entered promiscuous mode [ 198.763739][ T7551] syzkaller0: entered allmulticast mode [ 199.052297][ T7563] tipc: Resetting bearer [ 199.117357][ T7549] tipc: Resetting bearer [ 199.516098][ T7549] tipc: Disabling bearer [ 201.379861][ T7606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.363'. [ 201.715756][ T7613] tipc: Enabled bearer , priority 0 [ 201.772921][ T7618] syzkaller0: entered promiscuous mode [ 201.794166][ T7618] syzkaller0: entered allmulticast mode [ 201.871197][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.965029][ T7618] tipc: Resetting bearer [ 202.014281][ T7612] tipc: Resetting bearer [ 202.069538][ T7612] tipc: Disabling bearer [ 202.100870][ T7633] syzkaller0: entered promiscuous mode [ 202.123415][ T7633] syzkaller0: entered allmulticast mode [ 203.815128][ T7672] siw: device registration error -23 [ 204.360400][ T7682] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 204.460548][ T7685] netlink: 'syz.0.378': attribute type 1 has an invalid length. [ 206.112400][ T7733] tipc: Enabled bearer , priority 0 [ 206.152657][ T7736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.387'. [ 206.194299][ T7734] syzkaller0: entered promiscuous mode [ 206.219303][ T7734] syzkaller0: entered allmulticast mode [ 206.301290][ T7734] tipc: Resetting bearer [ 206.349238][ T7732] tipc: Resetting bearer [ 206.501289][ T7732] tipc: Disabling bearer [ 207.672498][ T7758] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 207.814791][ T7760] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 208.562594][ T7782] siw: device registration error -23 [ 209.047252][ T7804] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 209.317047][ T7810] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 209.518576][ T7813] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 210.265059][ T7842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.411'. [ 210.556589][ T7852] siw: device registration error -23 [ 210.641580][ T7856] netlink: 'syz.0.415': attribute type 1 has an invalid length. [ 210.839678][ T7862] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 211.762059][ T7889] netlink: 'syz.0.420': attribute type 1 has an invalid length. [ 213.558298][ T7924] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 213.643208][ T7927] netlink: 'syz.4.430': attribute type 1 has an invalid length. [ 214.811569][ T7950] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 217.421220][ T7975] tipc: Enabled bearer , priority 0 [ 217.446690][ T7975] syzkaller0: entered promiscuous mode [ 217.452336][ T7975] syzkaller0: entered allmulticast mode [ 217.545782][ T7981] netlink: 'syz.1.441': attribute type 1 has an invalid length. [ 217.592185][ T7975] tipc: Resetting bearer [ 217.624474][ T7974] tipc: Resetting bearer [ 217.749421][ T7974] tipc: Disabling bearer [ 217.753253][ T7985] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 220.138159][ T8028] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 220.209969][ T8031] tipc: Enabled bearer , priority 0 [ 220.227629][ T8031] syzkaller0: entered promiscuous mode [ 220.239280][ T8031] syzkaller0: entered allmulticast mode [ 220.581291][ T8038] tipc: Resetting bearer [ 220.635371][ T8030] tipc: Resetting bearer [ 220.825093][ T8030] tipc: Disabling bearer [ 222.046775][ T8059] netlink: 'syz.1.464': attribute type 1 has an invalid length. [ 222.070157][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.465'. [ 222.571886][ T8073] siw: device registration error -23 [ 222.887143][ T8081] tipc: Enabled bearer , priority 0 [ 222.921138][ T8081] syzkaller0: entered promiscuous mode [ 222.955171][ T8081] syzkaller0: entered allmulticast mode [ 223.076835][ T8081] tipc: Resetting bearer [ 223.121143][ T8080] tipc: Resetting bearer [ 223.221549][ T8080] tipc: Disabling bearer [ 224.020009][ T8105] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 224.181715][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.478'. [ 224.426189][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 224.432317][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 224.440559][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 224.446093][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 225.416524][ T8134] siw: device registration error -23 [ 225.959705][ T8156] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 226.531975][ T8160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.492'. [ 226.596089][ T8163] tipc: Enabled bearer , priority 0 [ 226.618582][ T8163] syzkaller0: entered promiscuous mode [ 226.625246][ T8163] syzkaller0: entered allmulticast mode [ 226.745704][ T8162] tipc: Resetting bearer [ 226.826233][ T8162] tipc: Disabling bearer [ 228.241243][ T8193] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 229.947916][ T8215] tipc: Enabled bearer , priority 0 [ 230.080826][ T8215] syzkaller0: entered promiscuous mode [ 230.155223][ T8215] syzkaller0: entered allmulticast mode [ 230.439143][ T8214] tipc: Resetting bearer [ 230.550643][ T8214] tipc: Disabling bearer [ 231.323304][ T8244] siw: device registration error -23 [ 231.703316][ T8256] syzkaller0: entered promiscuous mode [ 231.766385][ T8256] syzkaller0: entered allmulticast mode [ 231.820326][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.519'. [ 233.022102][ T8283] tipc: Enabled bearer , priority 0 [ 233.073524][ T8283] syzkaller0: entered promiscuous mode [ 233.094114][ T8283] syzkaller0: entered allmulticast mode [ 233.220315][ T8282] tipc: Resetting bearer [ 233.241719][ T8290] siw: device registration error -23 [ 233.281824][ T8282] tipc: Disabling bearer [ 233.632510][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.531'. [ 235.294286][ T8344] siw: device registration error -23 [ 235.503306][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.544'. [ 235.825118][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 237.135482][ T8390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.555'. [ 237.355882][ T8399] siw: device registration error -23 [ 239.877426][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 240.400931][ T8437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.568'. [ 240.626818][ T8441] siw: device registration error -23 [ 241.355159][ T8464] syzkaller0: entered promiscuous mode [ 241.361263][ T8464] syzkaller0: entered allmulticast mode [ 242.002139][ T8474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.580'. [ 242.078348][ T8476] netlink: 'syz.0.577': attribute type 303 has an invalid length. [ 242.260061][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 243.808760][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.595'. [ 243.951111][ T8525] lo speed is unknown, defaulting to 1000 [ 244.461745][ T8525] lo speed is unknown, defaulting to 1000 [ 245.518075][ T8571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.608'. [ 247.233789][ T8601] lo speed is unknown, defaulting to 1000 [ 247.436737][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'. [ 247.871055][ T8601] lo speed is unknown, defaulting to 1000 [ 247.946071][ T8617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.621'. [ 248.648516][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.629'. [ 249.135097][ T8658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'. [ 250.845747][ T8693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.641'. [ 251.110053][ T8701] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 251.117999][ T8701] netlink: 224 bytes leftover after parsing attributes in process `syz.3.644'. [ 251.330599][ T8706] tipc: New replicast peer: 255.255.255.255 [ 251.345707][ T8706] tipc: Enabled bearer , priority 10 [ 251.643523][ T8713] lo speed is unknown, defaulting to 1000 [ 251.671636][ T8716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.649'. [ 251.689337][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 251.720169][ T8716] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 251.998167][ T8713] lo speed is unknown, defaulting to 1000 [ 252.008559][ T8726] siw: device registration error -23 [ 254.256909][ T8770] lo speed is unknown, defaulting to 1000 [ 254.889907][ T8770] lo speed is unknown, defaulting to 1000 [ 254.969782][ T8777] lo speed is unknown, defaulting to 1000 [ 255.318403][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.666'. [ 255.688554][ T8777] lo speed is unknown, defaulting to 1000 [ 255.711405][ T8786] siw: device registration error -23 [ 255.916548][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.669'. [ 257.469647][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.678'. [ 258.093710][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.683'. [ 259.054295][ T8870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.191157][ T8870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.688'. [ 259.255857][ T8874] sctp: [Deprecated]: syz.1.690 (pid 8874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.255857][ T8874] Use struct sctp_sack_info instead [ 259.353702][ T8877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.691'. [ 262.332308][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.702'. [ 263.056877][ T8936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.705'. [ 263.290457][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.424433][ T8950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.709'. [ 263.833321][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 264.338226][ T8978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.717'. [ 265.985711][ T9000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.722'. [ 266.453295][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'. [ 266.981106][ T9030] netlink: 104 bytes leftover after parsing attributes in process `syz.1.730'. [ 267.893902][ T9051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'. [ 269.754666][ T9084] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.533741][ T9084] bond4 (unregistering): Released all slaves [ 271.700096][ T9137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.473667][ T9144] bond5 (unregistering): Released all slaves [ 272.526566][ T9145] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.242798][ T9145] bond3 (unregistering): Released all slaves [ 273.489956][ T9170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.761'. [ 273.593285][ T9176] netlink: 'syz.2.760': attribute type 4 has an invalid length. [ 274.133642][ T9184] lo speed is unknown, defaulting to 1000 [ 274.461648][ T9193] : entered promiscuous mode [ 274.509416][ T9193] trusted_key: syz.2.768 sent an empty control message without MSG_MORE. [ 274.789398][ T9184] lo speed is unknown, defaulting to 1000 [ 274.818670][ T9190] siw: device registration error -23 [ 275.124497][ T9196] lo speed is unknown, defaulting to 1000 [ 275.658612][ T9194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.241308][ T9196] lo speed is unknown, defaulting to 1000 [ 278.324904][ T9266] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.968963][ T9259] bond5 (unregistering): Released all slaves [ 279.265732][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 279.327884][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 279.355280][ T9289] netlink: 32 bytes leftover after parsing attributes in process `syz.2.791'. [ 282.142976][ T9351] siw: device registration error -23 [ 282.428879][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 282.443181][ T9359] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 282.536658][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'. [ 282.613436][ T9359] bridge_slave_0: left allmulticast mode [ 282.895744][ T9359] bridge_slave_0: left promiscuous mode [ 282.995946][ T9357] netlink: 'syz.1.806': attribute type 11 has an invalid length. [ 283.043737][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.263186][ T9359] bridge_slave_1: left allmulticast mode [ 283.280834][ T9359] bridge_slave_1: left promiscuous mode [ 283.300813][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.385594][ T9359] bond0: (slave bond_slave_0): Releasing backup interface [ 283.415490][ T9372] netlink: 'syz.4.807': attribute type 10 has an invalid length. [ 283.433763][ T9359] bond0: (slave bond_slave_1): Releasing backup interface [ 283.489379][ T9359] team0: Port device team_slave_0 removed [ 283.532464][ T9359] team0: Port device team_slave_1 removed [ 283.560733][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.595167][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.636814][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.645589][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.832337][ T9372] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 283.892874][ T9372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.939304][ T9372] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 283.996412][ T9376] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 284.099203][ T9376] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 284.115541][ T9376] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 284.822189][ T9395] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 284.909436][ T9396] netlink: 'syz.4.814': attribute type 4 has an invalid length. [ 284.938555][ T9396] netlink: 152 bytes leftover after parsing attributes in process `syz.4.814'. [ 284.972425][ T9396] wlan1: mtu less than device minimum [ 285.385400][ T9413] netlink: 'syz.0.820': attribute type 24 has an invalid length. [ 285.696779][ T9424] lo speed is unknown, defaulting to 1000 [ 285.733433][ T1212] IPVS: starting estimator thread 0... [ 285.834115][ T9427] IPVS: using max 24 ests per chain, 57600 per kthread [ 287.386443][ T9424] lo speed is unknown, defaulting to 1000 [ 287.481108][ T9447] lo speed is unknown, defaulting to 1000 [ 287.974447][ T9447] lo speed is unknown, defaulting to 1000 [ 289.967628][ T9465] siw: device registration error -23 [ 290.027511][ T9468] : entered promiscuous mode [ 290.109573][ T9470] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 290.335460][ T9475] IPv6: syztnl1: Disabled Multicast RS [ 291.350244][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'. [ 292.277038][ T9512] siw: device registration error -23 [ 292.301886][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 292.323400][ T9512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'. [ 292.457757][ T9510] lo speed is unknown, defaulting to 1000 [ 292.963260][ T9524] bond0: option mode: unable to set because the bond device has slaves [ 294.443853][ T9514] netlink: 'syz.1.842': attribute type 4 has an invalid length. [ 294.456475][ T9559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.855'. [ 294.895334][ T9510] lo speed is unknown, defaulting to 1000 [ 294.922274][ T5972] lo speed is unknown, defaulting to 1000 [ 295.097222][ T9555] siw: device registration error -23 [ 295.638441][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 296.185514][ T9586] GUP no longer grows the stack in syz.4.861 (9586): 200000006000-20000000a000 (200000005000) [ 296.202041][ T9586] CPU: 1 UID: 0 PID: 9586 Comm: syz.4.861 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 296.202077][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.202137][ T9586] Call Trace: [ 296.202152][ T9586] [ 296.202188][ T9586] dump_stack_lvl+0x189/0x250 [ 296.202289][ T9586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.202317][ T9586] ? __pfx__printk+0x10/0x10 [ 296.202345][ T9586] ? find_vma+0xe7/0x160 [ 296.202394][ T9586] __get_user_pages+0x2a60/0x30b0 [ 296.202455][ T9586] ? __pfx___get_user_pages+0x10/0x10 [ 296.202481][ T9586] ? __gup_longterm_locked+0xbf7/0x15b0 [ 296.202514][ T9586] ? down_read_killable+0x1d1/0x350 [ 296.202541][ T9586] ? try_get_folio+0x633/0x660 [ 296.202577][ T9586] __gup_longterm_locked+0xd66/0x15b0 [ 296.202612][ T9586] ? try_grab_folio_fast+0x1be/0x4f0 [ 296.202663][ T9586] ? gup_fast_fallback+0x1afc/0x2260 [ 296.202700][ T9586] gup_fast_fallback+0x1cd4/0x2260 [ 296.202777][ T9586] ? __pfx_gup_fast_fallback+0x10/0x10 [ 296.202806][ T9586] ? __mutex_lock+0x335/0x1340 [ 296.202845][ T9586] ? futex_unqueue+0x22/0x240 [ 296.202871][ T9586] ? futex_unqueue+0x22/0x240 [ 296.202906][ T9586] ? futex_unqueue+0x22/0x240 [ 296.202926][ T9586] ? is_valid_gup_args+0x11f/0x200 [ 296.202958][ T9586] ? get_user_pages_fast+0x4d/0xb0 [ 296.202991][ T9586] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 296.203036][ T9586] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 296.203061][ T9586] ? wait_for_space+0x24d/0x2d0 [ 296.203099][ T9586] iov_iter_get_pages2+0x5e/0xa0 [ 296.203133][ T9586] __se_sys_vmsplice+0x548/0x10d0 [ 296.203178][ T9586] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 296.203214][ T9586] ? __pfx_futex_wait+0x10/0x10 [ 296.203260][ T9586] ? __lock_acquire+0xab9/0xd20 [ 296.203342][ T9586] ? rcu_is_watching+0x15/0xb0 [ 296.203383][ T9586] ? do_syscall_64+0xbe/0x3b0 [ 296.203422][ T9586] do_syscall_64+0xfa/0x3b0 [ 296.203452][ T9586] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.203482][ T9586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.203506][ T9586] ? clear_bhb_loop+0x60/0xb0 [ 296.203533][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.203555][ T9586] RIP: 0033:0x7f1de158e9a9 [ 296.203591][ T9586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.203617][ T9586] RSP: 002b:00007f1de23fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 296.203692][ T9586] RAX: ffffffffffffffda RBX: 00007f1de17b5fa0 RCX: 00007f1de158e9a9 [ 296.203710][ T9586] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f [ 296.203725][ T9586] RBP: 00007f1de1610d69 R08: 0000000000000000 R09: 0000000000000000 [ 296.203740][ T9586] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 296.203753][ T9586] R13: 0000000000000000 R14: 00007f1de17b5fa0 R15: 00007ffd32b6c798 [ 296.203790][ T9586] [ 296.654633][ T9577] veth0: entered promiscuous mode [ 296.664958][ T9580] veth0: left promiscuous mode [ 296.818662][ T750] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.052825][ T750] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.082213][ T9601] netlink: 120 bytes leftover after parsing attributes in process `syz.2.863'. [ 297.099852][ T750] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.122220][ T750] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.301796][ T9596] veth3: entered promiscuous mode [ 297.328973][ T9609] netlink: 'syz.4.866': attribute type 1 has an invalid length. [ 297.771150][ T9613] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.940015][ T9614] bond4 (unregistering): Released all slaves [ 298.677782][ T9635] Bluetooth: MGMT ver 1.23 [ 299.193871][ T9639] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 299.255298][ T9639] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 299.267344][ T9639] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 299.590126][ T9645] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 299.870185][ T9665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.878'. [ 299.887013][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 299.954882][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.877'. [ 299.965986][ T9670] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 300.702955][ T9677] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 300.753388][ T9683] netlink: 'syz.0.881': attribute type 4 has an invalid length. [ 300.769642][ T9683] netlink: 152 bytes leftover after parsing attributes in process `syz.0.881'. [ 300.807787][ T9683] Ã: renamed from bond0 [ 302.281067][ T9714] netlink: 136 bytes leftover after parsing attributes in process `syz.0.891'. [ 303.361939][ T9730] netlink: zone id is out of range [ 303.473215][ T9730] netlink: zone id is out of range [ 303.494650][ T9730] netlink: zone id is out of range [ 303.547741][ T9730] netlink: zone id is out of range [ 303.569377][ T9730] netlink: zone id is out of range [ 303.587798][ T9730] netlink: zone id is out of range [ 303.597799][ T9730] netlink: zone id is out of range [ 303.628794][ T9730] netlink: zone id is out of range [ 303.645105][ T9730] netlink: zone id is out of range [ 304.925538][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 305.880196][ T9777] netlink: 'syz.3.903': attribute type 83 has an invalid length. [ 306.131815][ T9777] syz_tun: entered promiscuous mode [ 306.151018][ T9777] batadv_slave_0: entered promiscuous mode [ 306.159425][ T9790] net_ratelimit: 7 callbacks suppressed [ 306.159460][ T9790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.167218][ T9777] debugfs: 'hsr1' already exists in 'hsr' [ 306.181497][ T9777] Cannot create hsr debugfs directory [ 306.187699][ T9777] hsr1: entered allmulticast mode [ 306.193082][ T9777] syz_tun: entered allmulticast mode [ 306.201145][ T9777] batadv_slave_0: entered allmulticast mode [ 308.253482][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 308.445666][ T9831] bond0: (slave wlan1): Releasing backup interface [ 308.919776][ T9855] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 308.976956][ T9855] bridge_slave_0: left allmulticast mode [ 308.983126][ T9855] bridge_slave_0: left promiscuous mode [ 308.992917][ T9855] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.024599][ T9855] bridge_slave_1: left allmulticast mode [ 309.030328][ T9855] bridge_slave_1: left promiscuous mode [ 309.036287][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.051026][ T9855] bond0: (slave bond_slave_0): Releasing backup interface [ 309.063888][ T9855] bond0: (slave bond_slave_1): Releasing backup interface [ 309.080817][ T9857] netlink: 'syz.2.924': attribute type 10 has an invalid length. [ 309.094815][ T9855] team0: Port device team_slave_0 removed [ 309.108417][ T9855] team0: Port device team_slave_1 removed [ 309.117969][ T9855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.127166][ T9855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.139158][ T9855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.147891][ T9855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.177265][ T9857] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 309.190092][ T9857] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 309.276688][ T9831] team0: Mode changed to "activebackup" [ 309.538097][ T5935] IPVS: starting estimator thread 0... [ 309.634659][ T9867] IPVS: using max 25 ests per chain, 60000 per kthread [ 309.636576][ T9877] netlink: 'syz.0.930': attribute type 2 has an invalid length. [ 309.693019][ T9877] k›*·]‘: entered promiscuous mode [ 309.943038][ T9874] infiniband syz1: set down [ 309.947716][ T9874] infiniband syz1: added veth1_to_bond [ 310.000791][ T9886] Illegal XDP return value 16128 on prog (id 464) dev syz_tun, expect packet loss! [ 310.028470][ T9880] 8021q: adding VLAN 0 to HW filter on device à [ 310.048922][ T9874] RDS/IB: syz1: added [ 310.053108][ T9874] smc: adding ib device syz1 with port count 1 [ 310.063341][ T9880] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.064159][ T9874] smc: ib device syz1 port 1 has pnetid [ 310.080536][ T9880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.112095][ T9884] veth0_to_team: entered promiscuous mode [ 310.133216][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 310.137206][ T9884] veth0_to_team: entered allmulticast mode [ 310.209675][ T9888] tipc: Enabled bearer , priority 10 [ 310.306509][ T9888] tipc: Resetting bearer [ 310.365681][ T9865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.434862][ T13] tipc: Resetting bearer [ 310.490832][ T9887] tipc: Resetting bearer [ 310.734280][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 311.334386][ T5935] tipc: Node number set to 1552616882 [ 313.220001][ T9887] tipc: Disabling bearer [ 313.466822][ T9917] netlink: 'syz.0.936': attribute type 16 has an invalid length. [ 313.475368][ T9917] netlink: 'syz.0.936': attribute type 17 has an invalid length. [ 313.548908][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 313.646249][ T9917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.098912][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.943'. [ 314.286824][ T9930] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 314.624699][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'. [ 315.032927][ T9944] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 315.076694][ T9944] netlink: 224 bytes leftover after parsing attributes in process `syz.3.947'. [ 316.065924][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 316.640981][ T9970] tipc: Enabling of bearer rejected, failed to enable media [ 317.860177][ T5935] IPVS: starting estimator thread 0... [ 317.954683][ T9991] IPVS: using max 27 ests per chain, 64800 per kthread [ 318.135022][T10001] netlink: 'syz.4.963': attribute type 8 has an invalid length. [ 318.542225][T10008] lo speed is unknown, defaulting to 1000 [ 318.716425][T10014] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.072678][T10027] netlink: 96 bytes leftover after parsing attributes in process `syz.4.969'. [ 319.763868][T10034] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 319.947817][T10008] lo speed is unknown, defaulting to 1000 [ 320.791516][T10060] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 320.802352][T10058] netlink: 'syz.1.976': attribute type 16 has an invalid length. [ 320.832248][T10058] netlink: 'syz.1.976': attribute type 17 has an invalid length. [ 320.876809][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 320.981069][T10063] IPv6: NLM_F_REPLACE set, but no existing node found! [ 321.224975][T10058] bridge0: port 1(veth0_to_bridge) entered disabled state [ 321.257750][T10068] netlink: 'syz.3.978': attribute type 16 has an invalid length. [ 321.266739][T10068] netlink: 'syz.3.978': attribute type 17 has an invalid length. [ 321.287960][T10058] tipc: Resetting bearer [ 322.099039][ T44] lo speed is unknown, defaulting to 1000 [ 322.111896][ T44] syz2: Port: 1 Link DOWN [ 322.273363][T10068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.335037][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.348676][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.429420][T10082] netlink: 'syz.1.981': attribute type 8 has an invalid length. [ 322.453816][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.481375][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.882643][T10098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.996834][T10089] lo speed is unknown, defaulting to 1000 [ 323.013070][T10101] netlink: 'syz.4.985': attribute type 303 has an invalid length. [ 323.537897][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 323.687575][T10089] lo speed is unknown, defaulting to 1000 [ 324.442725][T10110] lo speed is unknown, defaulting to 1000 [ 325.205848][T10110] lo speed is unknown, defaulting to 1000 [ 325.295551][T10135] netlink: 'syz.4.994': attribute type 16 has an invalid length. [ 325.303380][T10135] netlink: 'syz.4.994': attribute type 17 has an invalid length. [ 326.004339][T10135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.366161][T10146] netlink: 'syz.0.995': attribute type 8 has an invalid length. [ 327.274346][T10158] wireguard0: entered promiscuous mode [ 327.280850][T10158] wireguard0: entered allmulticast mode [ 327.711168][T10168] netlink: 'syz.4.1002': attribute type 10 has an invalid length. [ 327.742745][T10169] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1001'. [ 327.795325][T10168] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1002'. [ 328.076503][ T30] audit: type=1804 audit(1753910005.318:2): pid=10172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1003" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1051 res=1 errno=0 [ 328.142777][ T30] audit: type=1800 audit(1753910005.358:3): pid=10172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1003" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1051 res=0 errno=0 [ 328.191950][T10179] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 328.322153][T10179] bond3 (unregistering): Released all slaves [ 328.562056][T10197] netlink: 'syz.2.1009': attribute type 8 has an invalid length. [ 329.234940][T10212] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 329.527426][T10221] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 329.536314][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 329.553414][T10221] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1013'. [ 329.910696][T10227] IPVS: Scheduler module ip_vs_sip not found [ 329.921065][T10233] IPVS: length: 8 != 446622349272 [ 329.922319][T10239] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 329.978520][T10242] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1019'. [ 330.062773][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.080912][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.290060][T10250] bond3 (unregistering): Released all slaves [ 331.084764][T10258] ipvlan2: entered promiscuous mode [ 333.520014][T10265] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 333.673074][T10269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.699548][T10274] netlink: 'syz.1.1024': attribute type 16 has an invalid length. [ 333.708115][T10274] netlink: 'syz.1.1024': attribute type 17 has an invalid length. [ 333.737907][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.772706][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.827176][T10274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.836824][T10274] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.845035][T10274] tipc: Resetting bearer [ 333.859480][T10274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.876766][ T5972] lo speed is unknown, defaulting to 1000 [ 333.883734][ T5972] syz2: Port: 1 Link ACTIVE [ 333.889362][T10265] netlink: 'syz.4.1026': attribute type 10 has an invalid length. [ 333.927786][T10265] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 333.989947][T10265] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 334.523534][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 334.568164][T10283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1029'. [ 335.475088][T10299] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 335.700078][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 336.541130][T10308] tipc: New replicast peer: 255.255.255.255 [ 336.572733][T10308] tipc: Enabled bearer , priority 10 [ 337.031040][T10315] batman_adv: batadv0: Adding interface: ip6gretap2 [ 337.069325][T10315] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.132742][T10315] batman_adv: batadv0: Interface activated: ip6gretap2 [ 337.857146][T10327] lo speed is unknown, defaulting to 1000 [ 338.017921][T10335] ipvlan2: entered promiscuous mode [ 338.336350][T10338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.482885][T10338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1041'. [ 339.878628][T10327] lo speed is unknown, defaulting to 1000 [ 340.233446][T10353] lo speed is unknown, defaulting to 1000 [ 340.353527][T10358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.622842][T10356] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.021214][T10356] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.198816][T10356] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.229948][T10353] lo speed is unknown, defaulting to 1000 [ 341.332799][T10356] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.538894][ T1106] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.585644][ T750] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.636242][ T1090] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.729891][ T1090] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.182571][T10378] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1046'. [ 343.230752][ T5908] IPVS: starting estimator thread 0... [ 343.293047][T10383] netlink: 'syz.1.1050': attribute type 10 has an invalid length. [ 343.334942][T10382] IPVS: using max 27 ests per chain, 64800 per kthread [ 343.362840][T10383] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1050'. [ 343.423579][T10386] lo speed is unknown, defaulting to 1000 [ 343.734622][T10386] lo speed is unknown, defaulting to 1000 [ 343.900675][T10389] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 343.967425][T10389] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1053'. [ 344.267893][T10399] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 344.321803][T10399] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1057'. [ 344.416596][T10399] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1057'. [ 345.379151][T10414] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 345.407342][T10414] tipc: Resetting bearer [ 345.416923][T10414] veth0_to_bridge: left allmulticast mode [ 345.422823][T10414] veth0_to_bridge: left promiscuous mode [ 345.456294][T10414] bridge0: port 1(veth0_to_bridge) entered disabled state [ 345.489896][T10414] team0: Port device vlan0 removed [ 345.496852][T10415] netlink: 'syz.1.1060': attribute type 10 has an invalid length. [ 345.520674][T10415] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 345.587495][T10415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.630427][T10415] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 345.799928][T10421] netlink: 1360 bytes leftover after parsing attributes in process `syz.4.1062'. [ 345.862677][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 346.342046][T10438] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 346.854655][T10453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.950629][T10453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1070'. [ 348.238756][T10468] syz_tun: entered allmulticast mode [ 348.256646][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 348.268904][T10468] dvmrp8: entered allmulticast mode [ 348.333330][T10468] dvmrp1: entered allmulticast mode [ 348.440904][T10467] syz_tun: left allmulticast mode [ 348.458641][T10467] dvmrp1: left allmulticast mode [ 348.612545][T10477] siw: device registration error -23 [ 348.909219][T10484] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 349.495084][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 349.512374][T10497] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.536222][T10497] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1084'. [ 349.628744][T10499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1085'. [ 350.141775][T10517] siw: device registration error -23 [ 351.269798][T10527] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 351.422545][T10530] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 351.485111][T10533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1094'. [ 351.526718][T10530] bond0: (slave wlan1): Releasing backup interface [ 351.648030][T10542] netlink: 'syz.3.1095': attribute type 10 has an invalid length. [ 351.668384][T10542] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 351.701973][T10542] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 351.982982][T10539] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 352.381854][T10557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1099'. [ 353.857590][T10586] netlink: 'syz.3.1108': attribute type 8 has an invalid length. [ 353.972967][T10591] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1109'. [ 354.082824][T10596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1111'. [ 354.096564][T10594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.186059][T10594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1110'. [ 355.389740][T10614] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 355.604726][T10627] netlink: 'syz.2.1117': attribute type 10 has an invalid length. [ 355.693354][T10619] bond0: (slave wlan1): Releasing backup interface [ 355.756426][T10619] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 355.813097][T10619] batman_adv: batadv0: Removing interface: ip6gretap2 [ 355.851395][T10624] veth1_macvtap: left promiscuous mode [ 355.988760][T10624] veth1_macvtap: entered promiscuous mode [ 356.070088][T10627] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 356.127429][T10627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.170872][T10627] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 356.206484][T10628] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 356.269764][T10628] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 356.296445][T10628] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 356.571652][T10638] !: renamed from dummy0 (while UP) [ 356.717493][T10644] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 356.852625][T10644] lo speed is unknown, defaulting to 1000 [ 357.136510][T10654] netlink: 'syz.3.1124': attribute type 8 has an invalid length. [ 357.780170][T10667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1128'. [ 358.632809][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1131'. [ 358.733611][T10644] lo speed is unknown, defaulting to 1000 [ 358.748853][T10689] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1131'. [ 360.028834][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 360.286446][T10725] netlink: 'syz.4.1136': attribute type 72 has an invalid length. [ 360.366660][T10725] netlink: 1016 bytes leftover after parsing attributes in process `syz.4.1136'. [ 360.420607][T10728] netlink: 'syz.0.1133': attribute type 10 has an invalid length. [ 361.236223][T10737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1137'. [ 361.599277][T10744] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 361.805405][ T44] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1 [ 361.816519][ T44] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22 [ 362.175365][T10759] netlink: 'syz.3.1142': attribute type 1 has an invalid length. [ 362.324328][T10758] bond5 (unregistering): Released all slaves [ 362.577445][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 362.757338][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 362.852094][T10777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1149'. [ 363.808600][T10790] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.1152'. [ 363.839811][T10790] raw_sendmsg: syz.2.1152 forgot to set AF_INET. Fix it! [ 363.870897][T10779] lo speed is unknown, defaulting to 1000 [ 364.191701][T10799] bridge0: port 1(macsec0) entered blocking state [ 364.199801][T10799] bridge0: port 1(macsec0) entered disabled state [ 364.213363][T10799] macsec0: entered allmulticast mode [ 364.230545][T10799] macsec0: entered promiscuous mode [ 364.276306][T10801] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.354382][T10802] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 364.370454][T10779] lo speed is unknown, defaulting to 1000 [ 364.393139][T10801] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.466986][T10801] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.569936][T10801] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.736878][T10806] netlink: 'syz.2.1156': attribute type 1 has an invalid length. [ 364.800924][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.843605][T10806] bond3 (unregistering): Released all slaves [ 364.863613][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.919465][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.931438][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.222731][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 365.289650][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'. [ 365.312661][T10819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'. [ 365.343631][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1167'. [ 365.538525][T10822] ipvlan2: entered promiscuous mode [ 365.662187][T10824] siw: device registration error -23 [ 366.328534][T10826] IPVS: Scheduler module ip_vs_sip not found [ 366.412243][T10835] netlink: 'syz.2.1163': attribute type 8 has an invalid length. [ 366.846408][T10842] lo speed is unknown, defaulting to 1000 [ 367.155758][T10842] lo speed is unknown, defaulting to 1000 [ 367.630427][T10853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.036388][T10856] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 368.131153][T10853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.367801][T10853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.566171][T10865] lo speed is unknown, defaulting to 1000 [ 368.702162][T10853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.222959][T10853] Failed to register nexthop notifier [ 369.894201][T10875] tipc: Resetting bearer [ 370.045965][ T5935] lo speed is unknown, defaulting to 1000 [ 370.046059][T10865] lo speed is unknown, defaulting to 1000 [ 370.051774][ T5935] syz2: Port: 1 Link DOWN [ 371.522393][T10890] netlink: 'syz.4.1175': attribute type 8 has an invalid length. [ 371.599813][T10889] lo speed is unknown, defaulting to 1000 [ 372.117520][T10889] lo speed is unknown, defaulting to 1000 [ 372.755765][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1177'. [ 372.980556][T10901] syz0: rxe_newlink: already configured on lo [ 373.023410][T10900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.442488][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 373.689294][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1182'. [ 373.740890][T10916] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1182'. [ 373.956444][T10914] pimreg: entered allmulticast mode [ 374.000243][T10920] vxcan2: entered promiscuous mode [ 374.815452][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1187'. [ 374.866896][T10934] bridge2: port 1(veth3) entered blocking state [ 374.873448][T10934] bridge2: port 1(veth3) entered disabled state [ 374.881010][T10934] veth3: entered allmulticast mode [ 374.892683][T10934] veth3: entered promiscuous mode [ 374.918282][T10935] bridge2: port 2(veth0_to_bond) entered blocking state [ 374.926115][T10935] bridge2: port 2(veth0_to_bond) entered disabled state [ 374.933460][T10935] veth0_to_bond: entered allmulticast mode [ 374.941886][T10935] veth0_to_bond: entered promiscuous mode [ 374.993105][T10934] vlan2: entered allmulticast mode [ 375.018256][T10934] veth1: entered allmulticast mode [ 375.042019][T10934] bridge2: port 3(vlan2) entered blocking state [ 375.062466][T10934] bridge2: port 3(vlan2) entered disabled state [ 375.100067][T10934] vlan2: entered promiscuous mode [ 375.126313][T10934] veth1: entered promiscuous mode [ 375.191132][T10942] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 375.317540][T10942] bond3: entered promiscuous mode [ 375.346888][T10942] bond3: entered allmulticast mode [ 375.359999][T10939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1198'. [ 375.450522][T10950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1190'. [ 375.505870][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 375.572350][T10942] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 375.745035][T10954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1192'. [ 375.804856][T10959] siw: device registration error -23 [ 375.817835][T10954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1192'. [ 376.433756][T10976] netlink: 'syz.2.1197': attribute type 8 has an invalid length. [ 377.058633][T10989] syzkaller0: entered promiscuous mode [ 377.085065][T10989] syzkaller0: entered allmulticast mode [ 377.261982][T10994] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 377.433622][T10998] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 377.937848][T11005] syz1: rxe_newlink: already configured on veth1_to_bond [ 379.212941][T11021] netlink: 'syz.3.1211': attribute type 8 has an invalid length. [ 379.451676][T11028] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 379.823220][T11024] veth3: left promiscuous mode [ 379.851755][T11024] bond3: left promiscuous mode [ 379.857161][T11024] bond3: left allmulticast mode [ 379.957240][T11031] bond4 (unregistering): Released all slaves [ 379.994804][ T1090] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.055043][ T1090] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.099446][ T1090] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.121116][ T1090] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.307409][T11040] netlink: 'syz.2.1217': attribute type 1 has an invalid length. [ 380.341354][T11041] __nla_validate_parse: 7 callbacks suppressed [ 380.341379][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 380.386295][T11040] 8021q: adding VLAN 0 to HW filter on device bond4 [ 380.935773][T11055] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 381.409422][T11058] lo speed is unknown, defaulting to 1000 [ 381.771805][T11065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1223'. [ 381.895104][T11065] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1223'. [ 382.003812][T11058] lo speed is unknown, defaulting to 1000 [ 382.085671][T11074] tipc: Enabled bearer , priority 0 [ 382.122004][T11074] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 382.140083][T11074] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 382.170446][T11074] tipc: Resetting bearer [ 382.187593][ T1153] tipc: Resetting bearer [ 382.279195][T11075] tipc: Resetting bearer [ 382.549980][T11081] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 382.666953][T11066] siw: device registration error -23 [ 382.928244][T11089] netlink: 'syz.4.1228': attribute type 1 has an invalid length. [ 383.793614][T11105] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 384.445546][T11117] netlink: 'syz.1.1236': attribute type 3 has an invalid length. [ 385.237389][T11131] siw: device registration error -23 [ 385.390429][T11138] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1237'. [ 385.596643][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'. [ 385.844989][ T5846] Bluetooth: hci0: command tx timeout [ 386.061386][ T5846] Bluetooth: hci3: link tx timeout [ 386.076579][ T5846] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 386.294520][T11158] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1246'. [ 387.566235][T11190] siw: device registration error -23 [ 388.169961][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 388.717575][T11210] netlink: 'syz.1.1259': attribute type 8 has an invalid length. [ 389.394961][T11213] tipc: Enabled bearer , priority 0 [ 389.437859][T11214] syzkaller0: entered promiscuous mode [ 389.443427][T11214] syzkaller0: entered allmulticast mode [ 389.583146][T11214] tipc: Resetting bearer [ 389.749414][T11212] tipc: Resetting bearer [ 389.755281][T11220] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1262'. [ 389.835372][T11212] tipc: Disabling bearer [ 389.959350][T11226] siw: device registration error -23 [ 390.391527][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 390.477351][T11234] netlink: 'syz.0.1267': attribute type 10 has an invalid length. [ 390.592448][T11236] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1267'. [ 390.646038][T11237] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1267'. [ 390.676184][T11237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.796779][T11239] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 391.173399][T11240] netlink: 'syz.0.1267': attribute type 12 has an invalid length. [ 391.182315][T11240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1267'. [ 391.249506][T11243] 8021q: adding VLAN 0 to HW filter on device bond5 [ 393.104560][T11282] dvmrp8: entered allmulticast mode [ 393.115990][T11285] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 393.226504][T11293] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 393.300928][T11293] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.441416][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1282'. [ 393.562231][T11293] bond3 (unregistering): Released all slaves [ 393.615262][T11280] dvmrp8: left allmulticast mode [ 393.823652][T11306] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1284'. [ 393.844253][T11306] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1284'. [ 393.897340][T11306] rdma_rxe: rxe_newlink: failed to add lo [ 394.017305][T11306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.041582][T11306] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.062635][T11306] tipc: Resetting bearer [ 394.090895][T11306] tipc: Resetting bearer [ 394.148510][T11306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.192659][ T5935] lo speed is unknown, defaulting to 1000 [ 394.209479][ T5935] syz2: Port: 1 Link ACTIVE [ 394.222950][T11308] netlink: 'syz.3.1285': attribute type 3 has an invalid length. [ 394.380104][T11308] siw: device registration error -23 [ 394.458621][T11308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.895552][T11329] netlink: 'syz.3.1292': attribute type 1 has an invalid length. [ 394.961583][T11326] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 395.354187][T11344] netlink: 'syz.2.1293': attribute type 8 has an invalid length. [ 395.524290][T11345] netlink: 'syz.3.1295': attribute type 16 has an invalid length. [ 395.537771][T11345] netlink: 'syz.3.1295': attribute type 17 has an invalid length. [ 395.562947][T11345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.651844][T11352] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1297'. [ 396.018074][T11364] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 396.749726][T11376] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 396.995362][T11385] netlink: 'syz.3.1306': attribute type 8 has an invalid length. [ 397.739790][T11404] netlink: 'syz.3.1314': attribute type 29 has an invalid length. [ 397.772135][T11404] netlink: 'syz.3.1314': attribute type 29 has an invalid length. [ 398.009781][T11410] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1316'. [ 398.246939][T11417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1318'. [ 398.406722][T11417] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1318'. [ 398.500277][T11422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1320'. [ 398.571362][T11422] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1320'. [ 398.743802][T11426] netlink: 'syz.3.1321': attribute type 8 has an invalid length. [ 398.828948][T11428] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 399.555495][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 399.617010][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'. [ 399.626967][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 399.653683][T11440] netlink: 'syz.2.1325': attribute type 5 has an invalid length. [ 399.679725][T11440] netlink: 'syz.2.1325': attribute type 6 has an invalid length. [ 400.256329][T11465] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1329'. [ 400.281500][T11447] veth0_to_team: left promiscuous mode [ 400.293425][T11447] veth0_to_team: left allmulticast mode [ 400.349720][T11447] geneve2: left promiscuous mode [ 400.884020][ T5158] Bluetooth: hci0: command tx timeout [ 401.072008][T11484] netlink: 'syz.0.1333': attribute type 8 has an invalid length. [ 401.315022][T11487] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 401.317901][T11486] IPVS: stopping backup sync thread 11487 ... [ 403.326472][T11514] syz.2.1351 uses old SIOCAX25GETINFO [ 403.369465][T11512] lo speed is unknown, defaulting to 1000 [ 404.645944][T11512] lo speed is unknown, defaulting to 1000 [ 404.653179][T11521] lo speed is unknown, defaulting to 1000 [ 405.044526][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 405.440535][T11541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1347'. [ 405.452082][T11544] netlink: 'syz.2.1345': attribute type 8 has an invalid length. [ 405.496822][T11541] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1347'. [ 405.819655][T11551] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 405.822023][T11521] lo speed is unknown, defaulting to 1000 [ 405.886163][T11552] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1347'. [ 406.395097][T11561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1350'. [ 406.985330][T11572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1354'. [ 407.109239][T11572] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1354'. [ 407.371221][T11576] tipc: Failed to remove unknown binding: 66,1,1/11578026:792071535/792071537 [ 407.399256][T11576] tipc: Failed to remove unknown binding: 66,1,1/11578026:792071535/792071537 [ 407.499761][T11576] tipc: Failed to remove unknown binding: 66,1,1/11578026:792071535/792071537 [ 407.690965][T11583] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1357'. [ 408.293411][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 409.380274][T11604] pim6reg: entered allmulticast mode [ 409.414953][T11604] pim6reg: left allmulticast mode [ 409.618930][T11613] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 409.777758][T11613] bond5: entered promiscuous mode [ 409.818561][T11613] 8021q: adding VLAN 0 to HW filter on device bond5 [ 409.956617][T11620] bond5: (slave bridge4): making interface the new active one [ 409.982603][T11620] bridge4: entered promiscuous mode [ 410.012775][T11620] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 410.278114][T11639] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 411.968954][T11657] lo speed is unknown, defaulting to 1000 [ 412.871438][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 413.028803][T11676] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1379'. [ 413.055746][T11676] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1379'. [ 413.101288][T11676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 413.144451][T11676] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1379'. [ 413.150429][T11678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.253142][T11680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.495860][T11657] lo speed is unknown, defaulting to 1000 [ 413.495891][T11673] lo speed is unknown, defaulting to 1000 [ 413.926460][T11673] lo speed is unknown, defaulting to 1000 [ 414.381123][T11690] lo speed is unknown, defaulting to 1000 [ 414.540468][T11701] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1384'. [ 414.865764][T11690] lo speed is unknown, defaulting to 1000 [ 415.167805][T11683] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 415.184257][T11699] siw: device registration error -23 [ 415.329094][T11707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1385'. [ 415.451012][T11710] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 415.589020][T11709] netlink: 'syz.2.1387': attribute type 16 has an invalid length. [ 415.598152][T11709] netlink: 'syz.2.1387': attribute type 17 has an invalid length. [ 415.758894][T11709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.840836][T11709] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.913473][T11709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.877988][T11743] syzkaller1: entered promiscuous mode [ 417.883572][T11743] syzkaller1: entered allmulticast mode [ 417.914695][T11743] netlink: 'syz.1.1397': attribute type 15 has an invalid length. [ 418.036549][T11748] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1394'. [ 418.061244][T11750] siw: device registration error -23 [ 418.391639][T11756] dvmrp8: entered allmulticast mode [ 418.443827][T11752] dvmrp8: left allmulticast mode [ 418.826412][T11765] netlink: 'syz.4.1402': attribute type 9 has an invalid length. [ 418.876312][T11765] netlink: 'syz.4.1402': attribute type 7 has an invalid length. [ 418.910331][T11764] lo speed is unknown, defaulting to 1000 [ 418.963182][T11765] netlink: 'syz.4.1402': attribute type 8 has an invalid length. [ 419.209608][T11773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1403'. [ 419.289528][T11764] lo speed is unknown, defaulting to 1000 [ 419.885959][T11778] netlink: 'syz.2.1404': attribute type 10 has an invalid length. [ 420.645795][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 421.112488][T11789] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1407'. [ 421.126339][T11789] netlink: 'syz.2.1407': attribute type 29 has an invalid length. [ 421.808294][T11802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1411'. [ 422.009001][T11808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1414'. [ 422.158796][T11811] lo speed is unknown, defaulting to 1000 [ 422.345828][T11804] dvmrp8: entered allmulticast mode [ 422.370572][T11803] dvmrp8: left allmulticast mode [ 422.598974][T11826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1417'. [ 422.838533][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 423.442188][T11832] lo speed is unknown, defaulting to 1000 [ 423.472520][T11811] lo speed is unknown, defaulting to 1000 [ 423.927892][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1422'. [ 424.165320][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 424.165355][T11847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1424'. [ 424.577411][T11848] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1419'. [ 425.097858][T11832] lo speed is unknown, defaulting to 1000 [ 425.528388][T11865] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1427'. [ 427.142981][T11884] tipc: Enabling of bearer rejected, failed to enable media [ 428.376374][T11906] netlink: 'syz.1.1436': attribute type 8 has an invalid length. [ 429.489826][T11917] lo speed is unknown, defaulting to 1000 [ 430.997095][T11933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1442'. [ 431.135658][T11935] netlink: 'syz.0.1441': attribute type 13 has an invalid length. [ 431.296228][T11937] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1443'. [ 431.418904][T11917] lo speed is unknown, defaulting to 1000 [ 431.967357][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1448'. [ 433.669390][T11984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1454'. [ 434.158802][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1458'. [ 434.384614][T11999] netlink: 'syz.2.1460': attribute type 1 has an invalid length. [ 434.626309][T11999] 8021q: adding VLAN 0 to HW filter on device bond6 [ 435.223317][T12022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 435.297756][T12022] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1463'. [ 435.602874][T12002] bond6 (unregistering): Released all slaves [ 435.776937][T12022] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1463'. [ 435.822710][T12027] lo speed is unknown, defaulting to 1000 [ 436.167469][T12037] netlink: 'syz.3.1467': attribute type 8 has an invalid length. [ 436.441850][T12047] netlink: 'syz.1.1470': attribute type 8 has an invalid length. [ 436.816355][T12027] lo speed is unknown, defaulting to 1000 [ 436.826933][T12046] lo speed is unknown, defaulting to 1000 [ 437.784092][T12062] bond0: (slave wlan1): Releasing backup interface [ 437.891560][T12062] bond0: Destroying bond [ 438.313321][T12062] bond0 (unregistering): Released all slaves [ 438.372172][T12046] lo speed is unknown, defaulting to 1000 [ 438.542806][T12074] netlink: 'syz.1.1476': attribute type 1 has an invalid length. [ 438.787223][T12079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.935248][T12087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1479'. [ 439.330156][T12081] bond0 (unregistering): Released all slaves [ 440.051267][T12110] netlink: 'syz.1.1483': attribute type 8 has an invalid length. [ 440.942124][T12121] tipc: Resetting bearer [ 440.998695][T12121] veth0_to_bond: left allmulticast mode [ 441.016966][T12125] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 441.038515][T12121] veth0_to_bond: left promiscuous mode [ 441.093809][T12121] bridge2: port 2(veth0_to_bond) entered disabled state [ 441.148156][T12121] veth3: left allmulticast mode [ 441.177216][T12121] veth3: left promiscuous mode [ 441.199420][T12121] bridge2: port 1(veth3) entered disabled state [ 441.289410][T12121] vlan2: left promiscuous mode [ 441.295568][T12121] veth1: left promiscuous mode [ 441.302483][T12121] bridge2: port 3(vlan2) entered disabled state [ 441.431654][T12126] tipc: Resetting bearer [ 441.481647][T12126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.327055][T12158] netlink: 'syz.4.1500': attribute type 2 has an invalid length. [ 442.967441][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1502'. [ 443.048598][ T5846] Bluetooth: hci0: command tx timeout [ 443.062856][T12166] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1502'. [ 443.495199][T12173] lo speed is unknown, defaulting to 1000 [ 443.639038][T12179] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 443.660696][T12179] team0: Port device batadv1 added [ 444.089911][T12173] lo speed is unknown, defaulting to 1000 [ 444.415952][T12195] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1511'. [ 444.655754][T12204] netlink: 'syz.1.1512': attribute type 1 has an invalid length. [ 444.758133][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 444.818647][T12204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1512'. [ 445.010081][T12210] syz1: rxe_newlink: already configured on veth1_to_bond [ 445.040279][T12207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.600908][T12213] bond0 (unregistering): Released all slaves [ 445.670718][T12218] !: renamed from dummy0 [ 446.255300][T12231] lo speed is unknown, defaulting to 1000 [ 447.597740][T12269] netlink: 'syz.1.1529': attribute type 9 has an invalid length. [ 447.647643][T12269] netlink: 'syz.1.1529': attribute type 6 has an invalid length. [ 448.601002][T12231] lo speed is unknown, defaulting to 1000 [ 449.828514][T12291] lo speed is unknown, defaulting to 1000 [ 450.492110][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 450.509379][T12291] lo speed is unknown, defaulting to 1000 [ 450.601872][T12301] lo speed is unknown, defaulting to 1000 [ 451.516099][T12301] lo speed is unknown, defaulting to 1000 [ 451.516383][T12307] lo speed is unknown, defaulting to 1000 [ 452.254984][ T5158] Bluetooth: hci3: command 0x0405 tx timeout [ 452.470879][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 453.242732][T12307] lo speed is unknown, defaulting to 1000 [ 453.456246][T12327] netlink: 'syz.4.1531': attribute type 8 has an invalid length. [ 454.566691][T12333] bond0: (slave wlan1): Releasing backup interface [ 454.640583][T12333] bond0: Destroying bond [ 455.015246][T12340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1535'. [ 455.064461][T12340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1535'. [ 455.082070][T12340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1535'. [ 455.123698][T12340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1535'. [ 455.176397][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 455.211442][T12333] bond0 (unregistering): Released all slaves [ 455.658727][T12357] netlink: 'syz.0.1540': attribute type 20 has an invalid length. [ 455.839427][T12356] macsec1: entered promiscuous mode [ 455.894123][T12356] macsec1: entered allmulticast mode [ 456.212984][T12360] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1541'. [ 456.919527][T12384] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.939204][T12387] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1547'. [ 456.971092][T12387] batadv3: entered promiscuous mode [ 456.986111][T12387] batadv3: entered allmulticast mode [ 457.008063][T12391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1548'. [ 457.031503][T12384] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.082379][T12395] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1547'. [ 457.133799][T12391] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1548'. [ 457.155012][T12384] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.297027][T12384] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.680392][ T34] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.734297][ T34] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.032738][ T1153] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.076443][T12422] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1553'. [ 458.104923][T12422] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1553'. [ 458.162760][T12422] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1553'. [ 458.280743][T12422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1553'. [ 458.306005][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.541610][T12432] netlink: 'syz.3.1556': attribute type 3 has an invalid length. [ 458.596081][T12432] netlink: 'syz.3.1556': attribute type 1 has an invalid length. [ 458.662340][T12432] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1556'. [ 459.185436][T12447] netlink: 'syz.1.1560': attribute type 12 has an invalid length. [ 459.948298][T12459] netlink: 'syz.2.1563': attribute type 1 has an invalid length. [ 461.175661][T12483] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 461.287206][T12485] batadv_slave_1: entered promiscuous mode [ 461.341379][T12484] batadv_slave_1: left promiscuous mode [ 461.387715][T12487] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 461.566733][T12489] __nla_validate_parse: 6 callbacks suppressed [ 461.566756][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 461.781085][T12487] 8021q: adding VLAN 0 to HW filter on device bond7 [ 462.471213][T12495] bond7 (unregistering): Released all slaves [ 463.205864][ T5846] Bluetooth: hci0: command tx timeout [ 463.472429][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 464.236101][T12533] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1582'. [ 464.295595][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 464.500769][T12530] lo speed is unknown, defaulting to 1000 [ 465.403176][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 465.453587][T12559] netlink: 'syz.4.1588': attribute type 8 has an invalid length. [ 466.729580][T12572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1590'. [ 466.775094][T12572] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1590'. [ 468.579034][T12591] netlink: 'syz.1.1595': attribute type 1 has an invalid length. [ 468.716894][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 469.057716][T12593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.995332][T12604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1599'. [ 470.216431][T12614] bond0: (slave wlan1): Releasing backup interface [ 470.300257][T12614] tipc: Resetting bearer [ 470.355738][T12619] sctp: [Deprecated]: syz.1.1601 (pid 12619) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.355738][T12619] Use struct sctp_sack_info instead [ 470.587857][T12629] netlink: 'syz.0.1603': attribute type 8 has an invalid length. [ 471.715832][T12642] netlink: 'syz.3.1606': attribute type 6 has an invalid length. [ 472.432558][T12638] lo speed is unknown, defaulting to 1000 [ 472.846244][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 474.666125][T12686] netlink: 'syz.4.1619': attribute type 8 has an invalid length. [ 476.989992][T12729] lo speed is unknown, defaulting to 1000 [ 476.998455][T12739] netlink: 'syz.2.1631': attribute type 8 has an invalid length. [ 478.322083][T12751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.667428][T12758] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1637'. [ 479.225714][T12757] lo speed is unknown, defaulting to 1000 [ 479.395377][T12757] lo speed is unknown, defaulting to 1000 [ 479.481057][T12757] lo speed is unknown, defaulting to 1000 [ 479.535776][T12757] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 479.905968][T12757] lo speed is unknown, defaulting to 1000 [ 479.929519][T12757] lo speed is unknown, defaulting to 1000 [ 479.951023][T12757] lo speed is unknown, defaulting to 1000 [ 479.970991][T12757] lo speed is unknown, defaulting to 1000 [ 480.003211][T12757] lo speed is unknown, defaulting to 1000 [ 480.037402][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1639'. [ 480.042973][T12757] lo speed is unknown, defaulting to 1000 [ 480.105888][T12767] pim6reg: entered allmulticast mode [ 480.119723][T12769] netlink: 'syz.2.1640': attribute type 8 has an invalid length. [ 480.134911][T12770] pim6reg: left allmulticast mode [ 480.459625][T12781] netlink: 'syz.0.1642': attribute type 8 has an invalid length. [ 481.646752][T12802] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 481.910148][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'. [ 481.923763][T12807] netlink: 'syz.4.1651': attribute type 1 has an invalid length. [ 482.025993][T12811] netlink: 'syz.0.1648': attribute type 8 has an invalid length. [ 482.187040][T12802] 8021q: adding VLAN 0 to HW filter on device bond6 [ 482.275317][T12807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.342383][T12812] veth3: entered promiscuous mode [ 482.397711][T12812] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 482.409411][T12814] 8021q: adding VLAN 0 to HW filter on device bond7 [ 482.439913][T12821] netlink: 'syz.2.1653': attribute type 8 has an invalid length. [ 482.748073][T12835] netlink: 'syz.0.1655': attribute type 4 has an invalid length. [ 483.280050][T12818] bond7 (unregistering): Released all slaves [ 483.462934][T12807] bond5: (slave bridge4): Releasing backup interface [ 483.473517][T12807] bridge4: left promiscuous mode [ 483.562400][T12807] bond0: (slave veth3): Releasing backup interface [ 483.776995][T12848] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 483.831203][T12852] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1657'. [ 483.985554][T12848] bond7: entered promiscuous mode [ 483.990737][T12848] bond7: entered allmulticast mode [ 484.105332][T12847] netlink: 'syz.3.1656': attribute type 8 has an invalid length. [ 484.505754][T12868] sctp: [Deprecated]: syz.1.1660 (pid 12868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.505754][T12868] Use struct sctp_sack_info instead [ 484.675995][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 485.009809][T12873] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 485.020964][T12876] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 485.073536][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'. [ 485.493632][T12882] 8021q: adding VLAN 0 to HW filter on device bond8 [ 486.485836][T12883] bond8 (unregistering): Released all slaves [ 486.555663][T12888] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1665'. [ 486.604197][T12888] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1665'. [ 486.793073][T12902] netlink: 'syz.3.1667': attribute type 8 has an invalid length. [ 487.186181][T12905] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 487.777787][T12908] lo speed is unknown, defaulting to 1000 [ 489.045425][T12922] 8021q: adding VLAN 0 to HW filter on device bond5 [ 489.056555][T12922] bond0: (slave bond5): Enslaving as a backup interface with a down link [ 489.200660][T12926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1673'. [ 489.231036][T12926] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1673'. [ 489.846024][T12908] lo speed is unknown, defaulting to 1000 [ 489.973644][T12939] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 490.145929][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 490.490693][T12944] 8021q: adding VLAN 0 to HW filter on device bond8 [ 491.559858][T12945] bond8 (unregistering): Released all slaves [ 492.165591][T12962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1684'. [ 492.220759][T12964] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1684'. [ 492.300415][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 492.315739][T12967] netlink: 'syz.4.1686': attribute type 1 has an invalid length. [ 492.456237][T12974] netlink: 'syz.0.1687': attribute type 8 has an invalid length. [ 492.498790][T12975] 8021q: adding VLAN 0 to HW filter on device bond6 [ 492.698391][T12980] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 492.778417][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 493.032873][T12989] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1689'. [ 493.451728][T12967] bond6 (unregistering): Released all slaves [ 493.536997][T12988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1689'. [ 493.548047][T12988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1689'. [ 493.595331][T12988] netlink: 'syz.2.1689': attribute type 4 has an invalid length. [ 494.463204][T13008] syzkaller0: entered allmulticast mode [ 495.200275][T13019] erspan0: entered promiscuous mode [ 495.248616][T13019] batman_adv: batadv0: Adding interface: macvlan2 [ 495.266367][T13019] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.348439][T13019] batman_adv: batadv0: Interface activated: macvlan2 [ 495.361083][T13003] syzkaller0: left allmulticast mode [ 495.451625][T13021] __nla_validate_parse: 1 callbacks suppressed [ 495.451651][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1699'. [ 495.509664][T13025] netlink: 'syz.0.1701': attribute type 8 has an invalid length. [ 495.707279][T13031] netlink: 'syz.0.1704': attribute type 1 has an invalid length. [ 495.739425][T13029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.882589][T13031] 8021q: adding VLAN 0 to HW filter on device bond6 [ 496.117637][T13036] bond6 (unregistering): Released all slaves [ 496.305915][T13044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1707'. [ 496.355330][T13044] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1707'. [ 496.708093][T13056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1711'. [ 496.840055][T13055] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1711'. [ 497.298745][T13066] netlink: 'syz.3.1713': attribute type 8 has an invalid length. [ 497.526124][T13071] netlink: 'syz.1.1714': attribute type 8 has an invalid length. [ 497.867355][T13073] lo speed is unknown, defaulting to 1000 [ 497.877466][T13075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1716'. [ 498.334599][T10708] wlan0: Trigger new scan to find an IBSS to join [ 498.341713][T13091] netlink: 'syz.0.1719': attribute type 1 has an invalid length. [ 498.744781][T13096] 8021q: adding VLAN 0 to HW filter on device bond6 [ 499.295546][T13107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1721'. [ 499.369931][T13107] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1721'. [ 499.689146][T13100] bond6 (unregistering): Released all slaves [ 499.760280][T13084] lo speed is unknown, defaulting to 1000 [ 500.044491][T13122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1724'. [ 500.111039][T13122] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1724'. [ 500.471819][T13133] netlink: 'syz.3.1726': attribute type 8 has an invalid length. [ 501.091866][T13073] lo speed is unknown, defaulting to 1000 [ 502.602704][T13156] __nla_validate_parse: 1 callbacks suppressed [ 502.602733][T13156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1732'. [ 502.647109][T13084] lo speed is unknown, defaulting to 1000 [ 502.674207][T13125] siw: device registration error -23 [ 502.730662][T13150] lo speed is unknown, defaulting to 1000 [ 503.057547][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 503.364753][ T1090] wlan0: Trigger new scan to find an IBSS to join [ 503.621476][T13150] lo speed is unknown, defaulting to 1000 [ 503.653657][T13159] lo speed is unknown, defaulting to 1000 [ 504.028734][T13172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1736'. [ 504.121543][T13172] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1736'. [ 504.265471][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.830489][T13184] netlink: 'syz.1.1740': attribute type 1 has an invalid length. [ 504.888313][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'. [ 504.905349][T13184] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.396369][T13184] bond3 (unregistering): Released all slaves [ 505.574062][T13159] lo speed is unknown, defaulting to 1000 [ 505.581742][T13188] netlink: 'syz.0.1741': attribute type 8 has an invalid length. [ 506.843172][T13202] siw: device registration error -23 [ 506.864323][T13202] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1745'. [ 507.452298][T13210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1747'. [ 507.635119][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'. [ 507.702446][T13215] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1747'. [ 507.805728][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 508.398393][T13221] bond0: (slave wlan1): Releasing backup interface [ 508.446196][T13226] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 508.533434][T13221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1749'. [ 508.545720][T13237] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 508.583586][T13234] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1754'. [ 508.626423][T13226] bond3: entered promiscuous mode [ 508.641630][T13226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 508.662488][T13241] netlink: 'syz.3.1752': attribute type 8 has an invalid length. [ 508.743154][T13234] tipc: Enabling of bearer rejected, already enabled [ 508.761801][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1754'. [ 508.772440][T13234] tipc: Disabling bearer [ 508.792959][T13240] 8021q: adding VLAN 0 to HW filter on device bond6 [ 509.156103][T13252] siw: device registration error -23 [ 509.182734][T13252] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1757'. [ 509.763087][T13244] bond6 (unregistering): Released all slaves [ 510.216886][T13271] netlink: 'syz.0.1762': attribute type 9 has an invalid length. [ 510.273118][T13271] netlink: 'syz.0.1762': attribute type 6 has an invalid length. [ 511.183387][T13285] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 511.779175][T13297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1767'. [ 511.881980][T13297] IPv6: Can't replace route, no match found [ 512.408333][T13301] lo speed is unknown, defaulting to 1000 [ 512.434181][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'. [ 512.546394][T13311] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1771'. [ 513.072381][T13316] __nla_validate_parse: 1 callbacks suppressed [ 513.072420][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'. [ 513.116051][T13300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.117178][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'. [ 513.299700][T13319] netlink: 'syz.4.1773': attribute type 1 has an invalid length. [ 513.325662][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1773'. [ 513.575496][T13325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'. [ 513.668129][T13325] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1774'. [ 513.968449][T13301] lo speed is unknown, defaulting to 1000 [ 514.112096][T13332] tipc: Resetting bearer [ 514.162619][T13332] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 514.257964][T13336] lo speed is unknown, defaulting to 1000 [ 516.099412][T13347] lo speed is unknown, defaulting to 1000 [ 516.265772][T13336] lo speed is unknown, defaulting to 1000 [ 517.388764][T13364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1784'. [ 517.562959][T13364] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 517.838208][T13370] geneve2: entered promiscuous mode [ 517.843612][T13370] geneve2: entered allmulticast mode [ 517.866114][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 42091 - 0 [ 517.885600][ T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 41464 - 0 [ 517.899115][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 42091 - 0 [ 517.918655][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 41464 - 0 [ 517.949045][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 42091 - 0 [ 517.970001][ T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 41464 - 0 [ 518.032267][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 42091 - 0 [ 518.056214][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 41464 - 0 [ 518.287220][T13382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1789'. [ 518.313686][T13384] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1790'. [ 518.327306][T13382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1789'. [ 518.372125][T13382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1789'. [ 518.427453][T13382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1789'. [ 518.489929][T13382] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1789'. [ 518.517566][T13386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1790'. [ 518.835362][T13347] lo speed is unknown, defaulting to 1000 [ 520.300483][T13406] lo speed is unknown, defaulting to 1000 [ 521.892863][T13432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1795'. [ 522.162986][T13414] lo speed is unknown, defaulting to 1000 [ 522.251395][T13438] netlink: 'syz.1.1800': attribute type 20 has an invalid length. [ 522.370620][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 522.380004][T13441] veth0_macvtap: left promiscuous mode [ 523.263365][T13406] lo speed is unknown, defaulting to 1000 [ 523.466767][T13451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1803'. [ 523.926839][T13461] netlink: 'syz.0.1805': attribute type 13 has an invalid length. [ 523.961262][T13461] netlink: 'syz.0.1805': attribute type 17 has an invalid length. [ 524.081859][T13466] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1807'. [ 524.338144][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'. [ 524.402837][T13471] can: request_module (can-proto-5) failed. [ 524.561823][T13461] 8021q: adding VLAN 0 to HW filter on device à [ 525.362966][T13461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 525.379840][ T5940] lo speed is unknown, defaulting to 1000 [ 525.385722][ T5940] syz2: Port: 1 Link ACTIVE [ 525.386105][T13463] kthread_run failed with err -4 [ 525.400986][T13472] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 525.425917][T13414] lo speed is unknown, defaulting to 1000 [ 525.709918][T13501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1809'. [ 526.583702][T13527] syz1: rxe_newlink: already configured on veth1_to_bond [ 528.532449][T13552] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 529.092619][T13570] netlink: 'syz.2.1824': attribute type 13 has an invalid length. [ 529.102820][T13570] netlink: 'syz.2.1824': attribute type 17 has an invalid length. [ 529.197815][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1821'. [ 529.212290][T13575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1825'. [ 529.385125][T13552] bond0 (unregistering): Released all slaves [ 529.696851][T13571] team0: Port device batadv1 removed [ 529.720294][T13571] batman_adv: batadv0: Interface deactivated: macvlan2 [ 529.799915][T13571] batman_adv: batadv0: Removing interface: macvlan2 [ 530.247778][T13592] netlink: 'syz.1.1828': attribute type 1 has an invalid length. [ 530.310047][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1828'. [ 530.514879][T13570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.551295][T13572] kthread_run failed with err -4 [ 530.573084][ T750] tipc: Resetting bearer [ 530.603577][T13588] IPv6: syztnl1: Disabled Multicast RS [ 530.693339][T13594] 8021q: adding VLAN 0 to HW filter on device bond4 [ 530.818373][T13605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1827'. [ 531.049488][T13595] bond4 (unregistering): Released all slaves [ 531.241477][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1829'. [ 531.251745][T13576] lo speed is unknown, defaulting to 1000 [ 531.345802][T13606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1829'. [ 531.964911][T13637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1833'. [ 532.547028][T13626] tipc: Resetting bearer [ 532.703360][T13586] lo speed is unknown, defaulting to 1000 [ 532.722338][T13634] kthread_run failed with err -4 [ 533.106611][T13647] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 533.137559][T13647] netlink: 'syz.1.1835': attribute type 11 has an invalid length. [ 533.161946][T13647] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1835'. [ 533.171231][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 533.181059][T13647] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 533.281044][T13576] lo speed is unknown, defaulting to 1000 [ 533.659137][T13657] macsec0: entered allmulticast mode [ 533.666301][T13657] veth1_macvtap: entered allmulticast mode [ 533.672344][T13657] macsec0: left allmulticast mode [ 533.682652][T13657] veth1_macvtap: left allmulticast mode [ 533.790834][T13586] lo speed is unknown, defaulting to 1000 [ 533.797992][T13617] siw: device registration error -23 [ 533.807197][T13633] lo speed is unknown, defaulting to 1000 [ 534.513422][T13666] netlink: 'syz.2.1841': attribute type 1 has an invalid length. [ 534.665217][T13666] 8021q: adding VLAN 0 to HW filter on device bond8 [ 534.823444][T13671] netlink: 'syz.1.1842': attribute type 13 has an invalid length. [ 534.833529][T13671] netlink: 'syz.1.1842': attribute type 17 has an invalid length. [ 534.970394][T13666] bond8 (unregistering): Released all slaves [ 535.019632][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1842'. [ 535.061339][T13633] lo speed is unknown, defaulting to 1000 [ 535.160184][T13671] erspan0: left promiscuous mode [ 535.215475][T13677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.336289][T13673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.452402][T13671] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.513604][T13673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.562823][T13671] tipc: Resetting bearer [ 535.588441][T13671] tipc: Resetting bearer [ 535.740185][T13671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.384601][T13672] lo speed is unknown, defaulting to 1000 [ 536.564637][ T1153] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 536.589025][T13691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1846'. [ 536.623579][T13694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'. [ 536.705397][T13694] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1847'. [ 536.980264][T13698] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1848'. [ 537.050916][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1849'. [ 537.066154][T13700] netlink: 'syz.3.1850': attribute type 1 has an invalid length. [ 537.095440][T13702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1849'. [ 537.135663][T13704] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1850'. [ 537.193296][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1849'. [ 537.384651][T13702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1849'. [ 537.605929][T13705] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.068645][T13708] bond7 (unregistering): Released all slaves [ 538.270303][T13672] lo speed is unknown, defaulting to 1000 [ 538.650832][T13727] siw: device registration error -23 [ 538.815864][T13729] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 539.228839][T13730] 8021q: adding VLAN 0 to HW filter on device bond8 [ 539.905111][T13731] bond8 (unregistering): Released all slaves [ 541.191882][T13765] __nla_validate_parse: 2 callbacks suppressed [ 541.191912][T13765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1860'. [ 541.251913][T13764] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1860'. [ 541.596536][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.618475][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.638207][T13774] netlink: zone id is out of range [ 541.656968][T13774] netlink: zone id is out of range [ 541.766119][T13775] : entered promiscuous mode [ 541.852015][T13774] netlink: zone id is out of range [ 541.866304][T13774] netlink: zone id is out of range [ 541.936320][T13774] netlink: zone id is out of range [ 541.975686][T13774] netlink: zone id is out of range [ 542.015908][T13774] netlink: zone id is out of range [ 542.024319][T13774] netlink: zone id is out of range [ 542.049834][T13774] netlink: zone id is out of range [ 542.067954][T13774] netlink: zone id is out of range [ 542.197827][T13783] lo speed is unknown, defaulting to 1000 [ 542.499246][T13790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1867'. [ 542.797279][T13797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1869'. [ 542.988512][T13804] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1871'. [ 543.009180][T13807] netlink: 'syz.2.1869': attribute type 9 has an invalid length. [ 544.189453][T13820] netlink: 'syz.2.1874': attribute type 8 has an invalid length. [ 544.335906][T13815] netlink: 'syz.1.1873': attribute type 303 has an invalid length. [ 544.379704][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1873'. [ 544.738354][T13828] netlink: 'syz.0.1877': attribute type 10 has an invalid length. [ 545.666008][T13783] lo speed is unknown, defaulting to 1000 [ 545.720441][T13847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1880'. [ 546.078617][T13855] lo speed is unknown, defaulting to 1000 [ 546.961078][T13870] netlink: 'syz.2.1886': attribute type 8 has an invalid length. [ 548.118936][T13900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1893'. [ 548.136222][T13885] dvmrp8: left allmulticast mode [ 548.199628][T13893] lo speed is unknown, defaulting to 1000 [ 548.292366][T13855] lo speed is unknown, defaulting to 1000 [ 548.983611][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'. [ 550.109783][T13918] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1896'. [ 550.256264][T13893] lo speed is unknown, defaulting to 1000 [ 550.353997][T13927] netlink: 'syz.4.1898': attribute type 1 has an invalid length. [ 550.442077][T13928] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1898'. [ 550.585420][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'. [ 550.611156][T13930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.438641][T13927] bond0 (unregistering): Released all slaves [ 551.588270][T13944] netlink: 'syz.2.1900': attribute type 8 has an invalid length. [ 553.004109][T13966] lo speed is unknown, defaulting to 1000 [ 553.951391][T13985] syzkaller0: entered allmulticast mode [ 554.193336][T13985] syzkaller0 (unregistering): left allmulticast mode [ 554.432555][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 555.106141][T13967] lo speed is unknown, defaulting to 1000 [ 555.315946][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 555.677480][T14019] erspan0: entered promiscuous mode [ 555.770051][T14019] batman_adv: batadv0: Adding interface: macvlan0 [ 555.801158][T14019] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.894282][T14019] batman_adv: batadv0: Interface activated: macvlan0 [ 555.976079][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'. [ 556.020368][T14024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1917'. [ 557.081630][T13966] lo speed is unknown, defaulting to 1000 [ 557.600665][T14051] !: renamed from dummy0 [ 557.872319][T14062] batadv_slave_1: entered promiscuous mode [ 558.580861][T14058] batadv_slave_1: left promiscuous mode [ 558.790297][T13967] lo speed is unknown, defaulting to 1000 [ 558.823998][T14040] siw: device registration error -23 [ 558.925728][T14060] lo speed is unknown, defaulting to 1000 [ 560.107629][T14108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1931'. [ 560.131114][T14108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1931'. [ 560.150767][T14108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1931'. [ 560.172709][T14108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1931'. [ 561.022997][T14060] lo speed is unknown, defaulting to 1000 [ 561.112847][T14111] siw: device registration error -23 [ 561.227073][T14113] erspan0: entered promiscuous mode [ 561.245043][T14113] batman_adv: batadv0: Adding interface: macvlan0 [ 561.251904][T14113] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.302981][T14113] batman_adv: batadv0: Interface activated: macvlan0 [ 561.412163][T14115] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 42091 - 0 [ 561.489778][T14115] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 41464 - 0 [ 561.523178][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1932'. [ 561.739925][T14115] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 42091 - 0 [ 561.811452][T14115] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 41464 - 0 [ 562.009518][T14115] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 42091 - 0 [ 562.022440][T14115] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 41464 - 0 [ 562.917483][T14115] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 42091 - 0 [ 562.944363][T14115] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 41464 - 0 [ 563.371331][ T1106] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 41464 - 0 [ 563.395749][ T1106] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 42091 - 0 [ 563.425490][ T1106] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 41464 - 0 [ 563.455481][ T1106] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 42091 - 0 [ 563.680035][ T1106] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 41464 - 0 [ 563.690630][ T1106] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 42091 - 0 [ 563.777691][ T1106] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 41464 - 0 [ 563.810775][ T1106] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 42091 - 0 [ 565.745895][T14165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1943'. [ 565.785199][T14165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1943'. [ 565.856892][T14165] netlink: 'syz.4.1943': attribute type 4 has an invalid length. [ 565.857834][T14166] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1943'. [ 566.006600][T14169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1944'. [ 566.029315][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'. [ 566.081021][T14173] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 566.112853][T14174] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1944'. [ 566.135274][T14173] netlink: 'syz.3.1945': attribute type 3 has an invalid length. [ 566.175383][T14173] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1945'. [ 566.455276][T14172] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 566.467309][T14172] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 566.476929][T14172] CPU: 0 UID: 0 PID: 14172 Comm: syz.0.1946 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 566.488742][T14172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 566.498834][T14172] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 566.504515][T14172] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c [ 566.524232][T14172] RSP: 0018:ffffc9001a49eca0 EFLAGS: 00010206 [ 566.530331][T14172] RAX: 000000001fffe000 RBX: 1ffff1100ae99402 RCX: 0000000000080000 [ 566.538326][T14172] RDX: ffffc9000b701000 RSI: 0000000000013313 RDI: 0000000000013314 [ 566.546308][T14172] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e [ 566.554286][T14172] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000 [ 566.562265][T14172] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff8880574ca010 [ 566.570251][T14172] FS: 00007fa539e156c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 566.579198][T14172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.585814][T14172] CR2: 00002000002af000 CR3: 000000004cd7e000 CR4: 00000000003526f0 [ 566.593844][T14172] Call Trace: [ 566.597159][T14172] [ 566.600114][T14172] mld_clear_delrec+0x160/0x660 [ 566.604997][T14172] ipv6_mc_destroy_dev+0x45/0x5a0 [ 566.610037][T14172] ? addrconf_ifdown+0x1396/0x1880 [ 566.615196][T14172] addrconf_ifdown+0x139e/0x1880 [ 566.620157][T14172] ? tls_dev_event+0x717/0xec0 [ 566.624968][T14172] ? __pfx_addrconf_ifdown+0x10/0x10 [ 566.630289][T14172] addrconf_notify+0x1bc/0x1010 [ 566.635162][T14172] notifier_call_chain+0x1b3/0x3e0 [ 566.640296][T14172] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 566.646741][T14172] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 566.653556][T14172] ? unregister_netdevice_queue+0x1b3/0x380 [ 566.659749][T14172] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 566.666053][T14172] ? __pfx_veth_dellink+0x10/0x10 [ 566.671169][T14172] rtnl_dellink+0x488/0x710 [ 566.675757][T14172] ? __pfx_rtnl_dellink+0x10/0x10 [ 566.680828][T14172] ? kasan_quarantine_put+0xdd/0x220 [ 566.686156][T14172] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.691427][T14172] ? __pfx_rtnl_dellink+0x10/0x10 [ 566.696481][T14172] rtnetlink_rcv_msg+0x7cc/0xb70 [ 566.701454][T14172] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 566.706603][T14172] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 566.712083][T14172] ? ref_tracker_free+0x63a/0x7d0 [ 566.717146][T14172] ? __asan_memcpy+0x40/0x70 [ 566.721778][T14172] ? __pfx_ref_tracker_free+0x10/0x10 [ 566.727201][T14172] netlink_rcv_skb+0x205/0x470 [ 566.732039][T14172] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 566.737544][T14172] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 566.742872][T14172] ? netlink_deliver_tap+0x2e/0x1b0 [ 566.748111][T14172] netlink_unicast+0x82c/0x9e0 [ 566.752900][T14172] ? __pfx_netlink_unicast+0x10/0x10 [ 566.758308][T14172] ? netlink_sendmsg+0x642/0xb30 [ 566.763267][T14172] ? skb_put+0x11b/0x210 [ 566.767557][T14172] netlink_sendmsg+0x805/0xb30 [ 566.772362][T14172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.777673][T14172] ? aa_sock_msg_perm+0x94/0x160 [ 566.782634][T14172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 566.787943][T14172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.793260][T14172] __sock_sendmsg+0x219/0x270 [ 566.797985][T14172] ____sys_sendmsg+0x505/0x830 [ 566.802767][T14172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.808071][T14172] ? import_iovec+0x74/0xa0 [ 566.812598][T14172] ___sys_sendmsg+0x21f/0x2a0 [ 566.817315][T14172] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.822550][T14172] ? __fget_files+0x2a/0x420 [ 566.827155][T14172] ? __fget_files+0x3a0/0x420 [ 566.831869][T14172] __x64_sys_sendmsg+0x19b/0x260 [ 566.836835][T14172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 566.842322][T14172] ? rcu_is_watching+0x15/0xb0 [ 566.847109][T14172] ? do_syscall_64+0xbe/0x3b0 [ 566.851808][T14172] do_syscall_64+0xfa/0x3b0 [ 566.856334][T14172] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.861552][T14172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.867633][T14172] ? clear_bhb_loop+0x60/0xb0 [ 566.872325][T14172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.878222][T14172] RIP: 0033:0x7fa538f8e9a9 [ 566.882649][T14172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.902384][T14172] RSP: 002b:00007fa539e15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.910827][T14172] RAX: ffffffffffffffda RBX: 00007fa5391b5fa0 RCX: 00007fa538f8e9a9 [ 566.918822][T14172] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 566.926936][T14172] RBP: 00007fa539010d69 R08: 0000000000000000 R09: 0000000000000000 [ 566.934945][T14172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.942941][T14172] R13: 0000000000000000 R14: 00007fa5391b5fa0 R15: 00007ffc329d54c8 [ 566.951379][T14172] [ 566.954488][T14172] Modules linked in: [ 566.960940][T14172] ---[ end trace 0000000000000000 ]--- [ 567.055332][T14172] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 567.061094][T14172] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c [ 567.062692][T14184] netlink: 'syz.2.1947': attribute type 1 has an invalid length. [ 567.082206][T14172] RSP: 0018:ffffc9001a49eca0 EFLAGS: 00010206 [ 567.103570][T14187] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1947'. [ 567.133294][T14172] RAX: 000000001fffe000 RBX: 1ffff1100ae99402 RCX: 0000000000080000 [ 567.142985][T14172] RDX: ffffc9000b701000 RSI: 0000000000013313 RDI: 0000000000013314 [ 567.159788][T14172] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e [ 567.175192][T14172] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000 [ 567.183265][T14172] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff8880574ca010 [ 567.193268][T14172] FS: 00007fa539e156c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 567.207890][T14172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.216285][T14172] CR2: 000020000045c000 CR3: 000000004cd7e000 CR4: 00000000003526f0 [ 567.225917][T14184] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1947'. [ 567.226317][T14172] Kernel panic - not syncing: Fatal exception [ 567.235509][T14172] Kernel Offset: disabled