last executing test programs: 4.169697602s ago: executing program 3 (id=1558): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/30, &(0x7f0000000280)=0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd32", 0xb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockname$packet(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9463cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548", 0xfb) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffffd) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) close(0x4) 3.901854201s ago: executing program 4 (id=1559): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socket$kcm(0x10, 0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0xfffffffd, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3a00}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}, @RTA_OIF={0x8}]}, 0x2c}}, 0x4000000) epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(0xffffffffffffffff, r5, 0x0, 0x40000000c) 3.752538451s ago: executing program 3 (id=1562): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r4, @ANYRES32=r2], 0x48}}, 0x0) r6 = socket(0x10, 0x80803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) bind$llc(r6, &(0x7f0000000040), 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r8, 0x0, 0xffffffff000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000340)={0x8, 'vxcan1\x00', {'xfrm0\x00'}, 0x7}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES64=r0, @ANYRES32=r6], 0x1c}}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000040)) recvmmsg(r6, &(0x7f0000001bc0)=[{{0x0, 0x700, 0x0}}], 0x7, 0x0, 0x0) unshare(0x22020600) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001000000000000000040e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000070000000000000000000000000000000000000000ffffffffffff00000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000005b8500000000000000000000f7"], 0xb8}}, 0x4004) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x4, 0x4) 3.637874236s ago: executing program 4 (id=1564): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000640)) socket(0x2, 0x3, 0xff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000006000000000000000020009500"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x39) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 3.535760852s ago: executing program 2 (id=1565): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) write$tun(r3, &(0x7f0000001880)={@val={0x0, 0xc}, @val={0x1, 0x4, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "4966cd", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1ff, 0x0, 0x1}}}}}}, 0x4a) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) sendfile(r2, r1, 0x0, 0x7) 3.380570762s ago: executing program 4 (id=1567): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000002800128009000100766c616e000000001800028006000100000000000c000300000000000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x58}, 0x1, 0xba01}, 0x0) 3.186746653s ago: executing program 4 (id=1569): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x40, r4, 0x1, 0x0, 0x2, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x40080) connect$rose(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r6, 0x313, 0x4}, 0x14}}, 0xc804) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xfc}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x7a, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "0300"}, {0xc}, {0xc}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffe, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="000087dd0003110004"], 0x7a) syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r7, 0x0) 3.164280209s ago: executing program 2 (id=1570): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x554f00000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, 0x0) 2.977538913s ago: executing program 1 (id=1571): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x4, @loopback, 0x2}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x2f00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r0, 0x0, 0x0, 0x240540c3, 0x0, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r4, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r5, 0x0, 0x0) writev(r5, 0x0, 0x0) 2.560870451s ago: executing program 2 (id=1573): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000000f80)={@val={0xa}, @void, @eth={@broadcast, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0xb, 0x6, "9e87ae", 0x0, 0x4, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2}}}}}, 0x42) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'batadv_slave_1\x00', 0x100}) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000140)="170000000200020000ffbe8c5ee17688a2003c000202000afdff02a257fc5ad90a00bb6a880000d6c9db0000db00000200df0180060000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001f02ec194a29efec199ee9b700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000003315d3bab0840024f0298e9e905390603000000007f71174ab498a30b3e5a0b47b63a6323ded2aa084cd36276a3afff00000000000000", 0xb8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r6, 0xe23, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x80) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 2.493869904s ago: executing program 3 (id=1574): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socket$kcm(0x10, 0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0xfffffffd, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3a00}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}, @RTA_OIF={0x8}]}, 0x2c}}, 0x4000000) epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(0xffffffffffffffff, r5, 0x0, 0x40000000c) 2.401394117s ago: executing program 4 (id=1575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000", @ANYRES32=r2], 0x1c}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000001080)={@local, @link_local, @val, {@ipv4={0x88a8, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "7fe77f731db8aba73f3509d6e7118104224a45fe99a8fbc5252b1170535ac6fb", "c196168f72696bf9ad5b6dc51a703690", {"aa72f4bd15c2580cdc3d66fdf23cb5a3", "a02ad2bc4f0c9415f88c3599baddc6ee"}}}}}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYRES64=r7, @ANYRESHEX], 0x20) openat$cgroup_ro(r7, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) 2.308688515s ago: executing program 0 (id=1576): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) write$tun(r4, &(0x7f0000001880)={@val={0x0, 0xc}, @val={0x1, 0x4, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "4966cd", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1ff, 0x0, 0x1}}}}}}, 0x4a) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) sendfile(r2, r1, 0x0, 0x7) 2.213779508s ago: executing program 3 (id=1577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r7 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000008800)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000008740)=ANY=[], 0xa8}}, 0x0) recvmmsg(r7, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000005c0)=""/89, 0x59}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/82, 0x52}], 0x1}, 0xffffffff}], 0x2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r3, &(0x7f0000000280)=@phonet, &(0x7f0000000000)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r9, &(0x7f0000000040)='\f\x00', 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b68}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r1, 0x5, 0x80000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x5}]}]}, 0x28}}, 0x0) 2.212953049s ago: executing program 1 (id=1578): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a"], 0x50}}, 0x4000000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x2}]}, @IFLA_LINKMODE={0x5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x44}}, 0x8054) r3 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800d0bc8f9dd926b6f72267cf53de69330000010000000000000000000000000427c22ccf145be6d9ada129c247bafe1d2ad64be51a0a0c898370afd319db6ca081babba3f37d05b26a79c821179ad0b997cee67781916e84927c959a8f4cf7124ea03ad4a9249e8cc558b985c663e5d285714c07c538cb96c59756b24022b2554173e49387b694703a9830ae0d00b93d7ccf8771a13538e8a02a796c0760e7104c2ca80090383558037754a66f6d46a7ac0b32c7b8efab5d2998fe11ede6f985e40a057c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x41, {0x0, 0x0, 0x74, 0x0, 0xf3ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x90000005}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000480)=0x3, &(0x7f00000004c0)=0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc858}, 0x8000) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) 2.203730293s ago: executing program 4 (id=1579): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x20000000000001aa, &(0x7f0000000440)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56525afe84fdfa0f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd33, @value}, 0x5d) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000580), 0x65) bind$can_raw(r1, &(0x7f00000000c0), 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989}, 0x9c) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000004c00", @ANYRES32=0x0, @ANYBLOB="210800000000000008001b00"], 0x44}, 0x1, 0xffffa888, 0x0, 0x48000}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000400)={0xa, 0x4e21, 0xc63, @rand_addr=' \x01\x00', 0x1}, 0x1c, &(0x7f0000000440), 0x0, &(0x7f00000005c0)=[@rthdr={{0x98, 0x29, 0x39, {0x33, 0x10, 0x1, 0x81, 0x0, [@remote, @rand_addr=' \x01\x00', @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private1]}}}, @rthdr={{0x28, 0x29, 0x39, {0x1, 0x2, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r3}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x32, 0x0, '\x00', [@pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x596}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x32, 0x14, 0x2, 0x1, 0x0, [@private2, @local, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, @dev={0xfe, 0x80, '\x00', 0x1d}, @private2, @ipv4={'\x00', '\xff\xff', @remote}]}}}], 0x200}}, {{&(0x7f0000000480)={0xa, 0x4e22, 0x6, @loopback, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000800)="d99c23bc109b189c97b23221209ca627627f455b9197139b81fab7de8509101870115fa18a9551c9a362d558344a612b0b0b8b4d486d1cf1c591bb070ee5f2cf21b46a589bb3d5925c174e126589744d960937f4a7c1f03d603868079ecdd1baf094a422ec3b91a7eaf73bb5b54add7dc9cbd983e23dce0de2b92ab207228400bf503430d6aeaabdf61e3dcb4fa9ea9b43717a6a415ece4add5aaba00dc49b710f5142317fb7a7966bf95c22b10ec9844e7d50e14b7e0a7d9ce98efbac15474ac559c2e205e3742512211fbcea8c3301", 0xd0}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e21, 0x7, @empty, 0xdc05}, 0x1c, &(0x7f0000000a00)}}, {{0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r3}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0x4f, 0x0, [@dev={0xfe, 0x80, '\x00', 0x11}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}], 0x90}}], 0x4, 0x814) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.108055709s ago: executing program 0 (id=1580): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000002800128009000100766c616e000000001800028006000100000000000c000300000000000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x58}, 0x1, 0xba01}, 0x0) 1.741442445s ago: executing program 0 (id=1581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x1000000, 0x90, [0x0, 0x20000240, 0x20000270, 0x200002a0], 0x0, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x42) 1.627214582s ago: executing program 3 (id=1582): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/30, &(0x7f0000000280)=0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd32", 0xb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfb) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) close(0x4) 1.47370923s ago: executing program 2 (id=1583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in=@multicast2, 0x0, 0x3, 0xfffc, 0x0, 0xa}, {0x0, 0xfffffffffffffffe, 0x0, 0x8001, 0x0, 0x4, 0x65a, 0x8002}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1ffffffc, 0x32}, 0x0, @in=@local, 0x3500, 0x0, 0x0, 0x1, 0x0, 0xe40b}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1}, 0x1b) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 1.439880796s ago: executing program 3 (id=1584): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) epoll_create1(0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000007c0)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x22, 0x0, 0x4000, @void, @value}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x1fc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) nanosleep(0x0, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000100)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x100000001, 0x0, [@default, @null, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600110d0000000000000000031000000000000008000a"], 0x20}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) epoll_create1(0x0) 1.391794742s ago: executing program 0 (id=1585): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200a01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ffffffff000000000800010001"], 0x28}}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000280)={r6, 0x1fc, 0xfff7}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="ad00000010000100000000000080000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000002000128008000100767469001400028008000400ac1414bb080005007f000001"], 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', r9, 0x8, 0x7, 0x9, 0xed65, {{0x22, 0x4, 0x3, 0x0, 0x88, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp_addr={0x44, 0x2c, 0x55, 0x1, 0x1, [{@empty, 0x200}, {@remote, 0x2}, {@broadcast, 0x5}, {@empty, 0x7}, {@empty, 0xfff}]}, @lsrr={0x83, 0x1b, 0xc8, [@empty, @loopback, @loopback, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x1f, 0xcf, [@empty, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @loopback, @multicast2, @broadcast, @rand_addr=0x64010101]}, @generic={0x88, 0xb, "d47282a4522d256c45"}, @end]}}}}}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) writev(r12, &(0x7f00000004c0)=[{&(0x7f00000003c0)="d91ba6780e", 0x5}], 0x1) 1.206913272s ago: executing program 1 (id=1586): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/30, &(0x7f0000000280)=0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd32", 0xb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockname$packet(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9463cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548", 0xfb) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffffd) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) close(0x4) 879.120932ms ago: executing program 1 (id=1587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socket$kcm(0x10, 0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0xfffffffd, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3a00}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}, @RTA_OIF={0x8}]}, 0x2c}}, 0x4000000) epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(0xffffffffffffffff, r5, 0x0, 0x40000000c) 717.44409ms ago: executing program 0 (id=1588): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x9, 0x9944d92d, 0x2, @local, @private0, 0x700, 0x700, 0x10, 0x88}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0xa0, r3, 0x1, 0x71bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000000) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32, @ANYBLOB="170001"], 0x38}, 0x1, 0xf00}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x4e20, 0x1000002, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190400b309040000001000000000000300000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500f4ff00000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fefd, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r11, 0x0, &(0x7f0000000200)=""/76}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) 658.408104ms ago: executing program 1 (id=1589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000000000000000200000000800", @ANYRES32=r2], 0x1c}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000001080)={@local, @link_local, @val, {@ipv4={0x88a8, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "7fe77f731db8aba73f3509d6e7118104224a45fe99a8fbc5252b1170535ac6fb", "c196168f72696bf9ad5b6dc51a703690", {"aa72f4bd15c2580cdc3d66fdf23cb5a3", "a02ad2bc4f0c9415f88c3599baddc6ee"}}}}}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYRES64=r7, @ANYRESHEX], 0x20) openat$cgroup_ro(r7, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) 542.574197ms ago: executing program 2 (id=1590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe8}}, 0x0) socket$inet6(0xa, 0x5, 0x802) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9, 0x20}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(0x3) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$tipc(0x1e, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r7, 0x1, 0x709d23, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 389.273345ms ago: executing program 1 (id=1591): pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$kcm(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r4}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1], 0x50) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, 0x0, 0x8) recvmmsg(r8, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/253, 0xfd}, 0x44e}, {{0x0, 0x0, 0x0}, 0x18e2}], 0x2, 0x12b, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000180)=0x4) r9 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r9, &(0x7f0000002880)=[{{&(0x7f0000000080)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000002100)=[{&(0x7f00000004c0)="25ddff1276b2e9854a857914680000388827697c880fdd07e17d", 0x1a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)="7f9579f0f916638da2c35ede52eea95d8f326a4117814aa23f3b", 0x1a}, {0x0}], 0x2}}], 0x2, 0x46094) 305.832817ms ago: executing program 0 (id=1592): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@random="e33110495bfd", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private1}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r5, 0x5, 0x0, 0x1, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x39}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f6, &(0x7f0000000080)={'gretap0\x00', 0x0}) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r10, &(0x7f0000001200)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x3, @loopback, 0xd}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hoplimit={{0x14, 0x29, 0x34, 0x20000000}}], 0x18}}], 0x1, 0x408d1) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r11, 0x7, 0x0, 0x0, {{0x8}, {@void, @val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 2 (id=1593): r0 = socket$inet(0x2, 0x3, 0x6) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xb6, 0x7, 0x2, @private2, @dev={0xfe, 0x80, '\x00', 0x29}, 0x8, 0x0, 0x7, 0x6}}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0xfffff8c3, 0x0, 0x6, 0x500, 0xd09, 0x0, r2}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001700000000000000a54b0000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0xb1, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000a80)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRESHEX=r3, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_crypto(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="e800000015000b"], 0xe8}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900000004000000080000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a800160004000140060700000000000000d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4e1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccfb42b1073520ae", 0xd8}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r11, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "26de"}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040015) shutdown(r0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x20, &(0x7f0000000a00)={&(0x7f0000000840)=""/148, 0x94, 0x0, &(0x7f0000000900)=""/199, 0xc7}}, 0x10) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) kernel console output (not intermixed with test programs): in process `syz.4.256'. [ 110.900524][ T6826] veth0_vlan: entered allmulticast mode [ 110.972171][ T6826] bridge0: port 3(veth0_vlan) entered blocking state [ 111.020227][ T6826] bridge0: port 3(veth0_vlan) entered disabled state [ 111.051148][ T6826] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 111.089110][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.263'. [ 111.099136][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.263'. [ 111.112311][ T6842] set match dimension is over the limit! [ 111.280955][ T6846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 111.315705][ T6846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.338228][ T6846] dummy0: entered promiscuous mode [ 111.369805][ T6846] dummy0: left promiscuous mode [ 111.418190][ T6848] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 111.440261][ T6848] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 111.580169][ T6852] ax25_connect(): syz.1.268 uses autobind, please contact jreuter@yaina.de [ 111.607843][ T6856] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 111.695092][ T6861] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 111.744108][ T6861] tap0: tun_chr_ioctl cmd 1074025677 [ 111.749782][ T6861] tap0: linktype set to 778 [ 112.619651][ T6894] netlink: 'syz.4.278': attribute type 2 has an invalid length. [ 112.817885][ T6899] netlink: 'syz.1.281': attribute type 7 has an invalid length. [ 113.140097][ T6910] __nla_validate_parse: 6 callbacks suppressed [ 113.140119][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.286'. [ 113.227792][ T6910] netlink: 116 bytes leftover after parsing attributes in process `syz.2.286'. [ 113.825111][ T6928] netlink: 11 bytes leftover after parsing attributes in process `syz.2.293'. [ 114.434578][ T6938] netlink: 'syz.4.295': attribute type 1 has an invalid length. [ 114.472835][ T6938] netlink: 'syz.4.295': attribute type 4 has an invalid length. [ 114.515206][ T6938] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.295'. [ 117.638207][ T6956] vlan2: entered promiscuous mode [ 117.644058][ T6956] batadv0: entered promiscuous mode [ 117.722841][ T6956] batadv0: left promiscuous mode [ 117.809389][ T6959] netlink: 'syz.4.305': attribute type 10 has an invalid length. [ 117.834410][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.841985][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.868024][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.875308][ T6959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.882951][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.890134][ T6959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.976777][ T6959] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 118.147290][ T5841] Bluetooth: hci4: link tx timeout [ 118.153425][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.185039][ T6961] netlink: 32 bytes leftover after parsing attributes in process `syz.4.305'. [ 118.324353][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 118.436335][ T6977] vlan2: entered promiscuous mode [ 118.479019][ T6977] team0: Device vlan2 is already an upper device of the team interface [ 118.993259][ T6986] macvtap1: entered promiscuous mode [ 119.019976][ T6986] bond0: entered promiscuous mode [ 119.043129][ T6986] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 119.085247][ T6986] bond0: left promiscuous mode [ 119.296448][ T6991] syzkaller0: create flow: hash 4284792248 index 1 [ 119.366056][ T1165] syzkaller0: tun_net_xmit 76 [ 119.387629][ T1165] syzkaller0: tun_net_xmit 48 [ 119.393251][ T5886] syzkaller0: tun_net_xmit 76 [ 119.625979][ T6984] syzkaller0: delete flow: hash 4284792248 index 1 [ 120.075443][ T6994] netlink: 'syz.0.312': attribute type 10 has an invalid length. [ 120.176829][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 121.608182][ T6994] team0: Port device netdevsim0 added [ 121.762301][ T7010] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 121.867097][ T7019] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 121.872009][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 121.965807][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.982817][ T7025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.008095][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.015998][ T7025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.508431][ T7035] team0: Failed to send options change via netlink (err -105) [ 122.520492][ T7035] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 122.531707][ T7035] team0: Port device netdevsim0 removed [ 122.829114][ T7040] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 122.880908][ T7044] dccp_invalid_packet: P.Data Offset(4) too small [ 122.924788][ T7044] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 122.953282][ T7044] bond0: entered promiscuous mode [ 122.958982][ T7044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.987368][ T7040] xt_CT: No such helper "pptp" [ 123.017730][ T7044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.054977][ T7044] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 123.099649][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 123.118467][ T7044] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 123.178843][ T7044] bond0: (slave ip6gre1): making interface the new active one [ 123.203423][ T7044] ip6gre1: entered promiscuous mode [ 123.235050][ T7044] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 123.250115][ T7055] xt_CT: No such helper "netbios-ns" [ 123.267288][ T7055] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 123.531960][ T7049] bond0 (unregistering): (slave ip6gre1): Releasing backup interface [ 123.540367][ T7049] ip6gre1: left promiscuous mode [ 123.550417][ T7049] bond0 (unregistering): Released all slaves [ 123.591826][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 124.387440][ T7074] openvswitch: netlink: Message has 1 unknown bytes. [ 124.499043][ T7079] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 124.583647][ T7083] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.594376][ T7074] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 124.618512][ T7074] netlink: 76 bytes leftover after parsing attributes in process `syz.2.338'. [ 125.447851][ T7097] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 125.470316][ T7097] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 125.761474][ T7102] batadv_slave_1: entered promiscuous mode [ 125.785761][ T7106] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 125.804410][ T7101] batadv_slave_1: left promiscuous mode [ 125.823655][ T7106] netlink: 224 bytes leftover after parsing attributes in process `syz.3.349'. [ 125.951020][ T7113] Illegal XDP return value 4291399680 on prog (id 189) dev N/A, expect packet loss! [ 126.297560][ T7050] Set syz1 is full, maxelem 65536 reached [ 126.868354][ T7143] xt_CT: No such helper "netbios-ns" [ 127.000189][ T7149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 127.712442][ T7166] bridge0: port 3(gretap0) entered blocking state [ 127.730582][ T7166] bridge0: port 3(gretap0) entered disabled state [ 127.737585][ T7166] gretap0: entered allmulticast mode [ 127.820011][ T7166] bridge0: port 3(gretap0) entered blocking state [ 127.826881][ T7166] bridge0: port 3(gretap0) entered forwarding state [ 128.441587][ T7175] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 128.452601][ T7165] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 128.506074][ T7175] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 128.787133][ T7182] syzkaller0: entered promiscuous mode [ 128.817385][ T7182] syzkaller0: entered allmulticast mode [ 129.495482][ T7190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.370'. [ 129.620913][ T5843] Bluetooth: hci0: command 0x0401 tx timeout [ 130.616747][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 130.975283][ T7205] xt_CT: No such helper "netbios-ns" [ 131.087340][ T7208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.375'. [ 131.755920][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 131.766105][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.779640][ T7190] dummy0: entered promiscuous mode [ 131.787795][ T7190] dummy0: left promiscuous mode [ 131.835358][ T7202] macvtap1: entered promiscuous mode [ 131.841298][ T7202] team0: entered promiscuous mode [ 131.846687][ T7202] macvtap1: entered allmulticast mode [ 131.852682][ T7202] team0: entered allmulticast mode [ 131.858535][ T7202] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 131.888051][ T7203] team0: left allmulticast mode [ 131.903440][ T7203] team0: left promiscuous mode [ 132.081913][ T7213] netlink: 'syz.4.379': attribute type 10 has an invalid length. [ 132.089695][ T7213] netlink: 2 bytes leftover after parsing attributes in process `syz.4.379'. [ 132.105980][ T7213] team0: entered promiscuous mode [ 132.111563][ T7213] team_slave_0: entered promiscuous mode [ 132.125993][ T7213] team_slave_1: entered promiscuous mode [ 132.134994][ T7213] bridge0: port 3(team0) entered blocking state [ 132.150071][ T7213] bridge0: port 3(team0) entered disabled state [ 132.164419][ T7213] team0: entered allmulticast mode [ 132.188287][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 132.211727][ T7213] team_slave_0: entered allmulticast mode [ 132.225403][ T7213] team_slave_1: entered allmulticast mode [ 132.251639][ T7213] bridge0: port 3(team0) entered blocking state [ 132.258040][ T7213] bridge0: port 3(team0) entered forwarding state [ 132.747296][ T7239] xt_CT: No such helper "netbios-ns" [ 132.888843][ T7243] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 132.980406][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 133.010202][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.044339][ T7245] macsec1: entered promiscuous mode [ 133.050556][ T7245] dummy0: entered promiscuous mode [ 133.067806][ T7245] macsec1: entered allmulticast mode [ 133.079967][ T7245] dummy0: entered allmulticast mode [ 133.101084][ T7245] dummy0: left allmulticast mode [ 133.116817][ T7245] dummy0: left promiscuous mode [ 133.336742][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'. [ 133.349592][ T7253] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 133.366032][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 133.448563][ T7260] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 133.564536][ T7265] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.596303][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 134.090439][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 134.090482][ T7279] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 134.182081][ T7282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'. [ 134.364646][ T7279] bond1: entered promiscuous mode [ 134.382712][ T7287] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.402'. [ 134.402191][ T7279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.131661][ T7301] xt_CT: No such helper "netbios-ns" [ 135.158152][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 135.184890][ T7308] vlan3: entered allmulticast mode [ 135.424364][ T7316] netlink: 148 bytes leftover after parsing attributes in process `syz.3.412'. [ 135.474755][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 135.852669][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.415'. [ 135.894297][ T7332] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 136.043097][ T7322] infiniband syz1: set down [ 136.063956][ T7322] team0 (unregistering): Port device team_slave_0 removed [ 136.124372][ T7322] team0 (unregistering): Port device team_slave_1 removed [ 136.248063][ T7331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.335943][ T7333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.349257][ T7333] bond1: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 136.365627][ T7333] bond1: (slave ip6tnl2): Error -95 calling set_mac_address [ 136.509432][ T7341] xt_CT: No such helper "netbios-ns" [ 137.031905][ T7362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.333896][ T7379] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 137.391321][ T7379] netlink: 40 bytes leftover after parsing attributes in process `syz.3.430'. [ 137.458564][ T7379] batman_adv: batadv0: Adding interface: virt_wifi0 [ 137.494931][ T7379] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.568619][ T7379] batman_adv: batadv0: Interface activated: virt_wifi0 [ 137.608101][ T7383] xt_CT: No such helper "netbios-ns" [ 138.012862][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 139.005240][ T7420] xt_CT: No such helper "netbios-ns" [ 139.261062][ T7428] macvtap2: entered promiscuous mode [ 139.270254][ T7428] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 139.916886][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 140.592945][ T7455] xt_CT: No such helper "netbios-ns" [ 140.800878][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 140.835919][ T7467] vlan3: entered allmulticast mode [ 140.904099][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.467'. [ 140.967152][ T7476] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 140.992677][ T7476] netlink: 224 bytes leftover after parsing attributes in process `syz.2.467'. [ 141.079318][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 141.099201][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.470'. [ 141.117622][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 141.127244][ T7480] bridge_slave_1: left allmulticast mode [ 141.164341][ T7480] bridge_slave_1: left promiscuous mode [ 141.171539][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.214589][ T7480] bridge_slave_0: left allmulticast mode [ 141.225418][ T7480] bridge_slave_0: left promiscuous mode [ 141.235807][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.454687][ T7487] xt_CT: No such helper "netbios-ns" [ 141.484006][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 141.500870][ T7490] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 141.524487][ T7490] tap0: tun_chr_ioctl cmd 1074025677 [ 141.531520][ T7490] tap0: linktype set to 778 [ 141.829566][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 141.850546][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 141.853960][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 141.859442][ T7501] team0: left allmulticast mode [ 141.903934][ T7501] team_slave_0: left allmulticast mode [ 141.936291][ T7501] team_slave_1: left allmulticast mode [ 141.958970][ T7501] bridge0: port 3(team0) entered disabled state [ 142.005649][ T7501] bridge_slave_1: left allmulticast mode [ 142.027436][ T7501] bridge_slave_1: left promiscuous mode [ 142.116815][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.204438][ T7501] bridge_slave_0: left allmulticast mode [ 142.214464][ T7501] bridge_slave_0: left promiscuous mode [ 142.233941][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.283389][ T7501] bond0: (slave bridge0): Releasing backup interface [ 142.309544][ T7501] bridge0 (unregistering): left allmulticast mode [ 142.517374][ T7506] vlan2: entered allmulticast mode [ 142.542895][ T7506] team0: entered allmulticast mode [ 142.548079][ T7506] team_slave_0: entered allmulticast mode [ 142.570398][ T7506] team_slave_1: entered allmulticast mode [ 142.580974][ T7506] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 142.619265][ T7506] team0: left allmulticast mode [ 142.658324][ T7506] team_slave_0: left allmulticast mode [ 142.749991][ T7522] xt_CT: No such helper "netbios-ns" [ 142.934642][ T7506] team_slave_1: left allmulticast mode [ 142.948954][ T7506] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 143.285787][ T7536] batadv0: entered promiscuous mode [ 143.303002][ T7536] macvtap1: entered promiscuous mode [ 143.309488][ T7536] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 143.357943][ T7536] batadv0: left promiscuous mode [ 144.044396][ T7563] vlan2: entered allmulticast mode [ 144.124632][ T7566] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 144.133202][ T7566] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 144.941835][ T7605] nbd: nbd0 already in use [ 145.273185][ T7629] netlink: 'syz.4.529': attribute type 5 has an invalid length. [ 145.301668][ T7629] ip6erspan0: entered promiscuous mode [ 145.399206][ T7632] vlan2: entered promiscuous mode [ 145.424448][ T7632] nlmon0: entered promiscuous mode [ 145.453783][ T7632] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 146.027968][ T7646] netlink: 'syz.1.535': attribute type 29 has an invalid length. [ 146.105826][ T7648] __nla_validate_parse: 7 callbacks suppressed [ 146.105846][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 146.154985][ T7648] vlan3: entered allmulticast mode [ 146.160407][ T7648] team0: entered allmulticast mode [ 146.189260][ T7648] team_slave_0: entered allmulticast mode [ 146.199398][ T7648] team_slave_1: entered allmulticast mode [ 146.213965][ T7648] team0: left allmulticast mode [ 146.224638][ T7648] team_slave_0: left allmulticast mode [ 146.247258][ T7648] team_slave_1: left allmulticast mode [ 146.946862][ T7660] xt_CT: No such helper "netbios-ns" [ 147.528833][ T7681] lo speed is unknown, defaulting to 1000 [ 147.570678][ T7681] lo speed is unknown, defaulting to 1000 [ 147.650502][ T7681] lo speed is unknown, defaulting to 1000 [ 147.972471][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 148.035641][ T7687] vlan2: entered allmulticast mode [ 148.053446][ T7687] team0: entered allmulticast mode [ 148.080026][ T7687] team_slave_0: entered allmulticast mode [ 148.099013][ T7687] team_slave_1: entered allmulticast mode [ 148.115235][ T7687] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 148.116993][ T7681] infiniband syz0: set down [ 148.138766][ T7687] team0: left allmulticast mode [ 148.151189][ T7687] team_slave_0: left allmulticast mode [ 148.167813][ T7687] team_slave_1: left allmulticast mode [ 148.181080][ T7687] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 148.208589][ T7681] infiniband syz0: added lo [ 148.283291][ T8] lo speed is unknown, defaulting to 1000 [ 148.434885][ T7681] RDS/IB: syz0: added [ 148.500084][ T7681] smc: adding ib device syz0 with port count 1 [ 148.506316][ T7681] smc: ib device syz0 port 1 has pnetid [ 148.550021][ T46] lo speed is unknown, defaulting to 1000 [ 148.558355][ T7681] lo speed is unknown, defaulting to 1000 [ 148.964840][ T7681] lo speed is unknown, defaulting to 1000 [ 149.255876][ T7681] lo speed is unknown, defaulting to 1000 [ 149.557172][ T7714] lo: entered allmulticast mode [ 149.568232][ T7681] lo speed is unknown, defaulting to 1000 [ 149.586738][ T7714] lo: left allmulticast mode [ 149.757456][ T7709] lo speed is unknown, defaulting to 1000 [ 150.015768][ T7681] lo speed is unknown, defaulting to 1000 [ 150.129124][ T7725] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 150.191336][ T7725] netlink: 120 bytes leftover after parsing attributes in process `syz.4.567'. [ 150.248761][ T7725] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 150.289961][ T7725] netlink: 68 bytes leftover after parsing attributes in process `syz.4.567'. [ 150.374627][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 150.423796][ T7732] netlink: 48 bytes leftover after parsing attributes in process `syz.3.569'. [ 150.564745][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.571'. [ 150.650490][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 150.776119][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.571'. [ 150.870647][ T7744] bond0: entered allmulticast mode [ 151.016870][ T7758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.576'. [ 151.201559][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.578'. [ 151.414065][ T7774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.579'. [ 151.605379][ T7781] tipc: Enabling of bearer rejected, failed to enable media [ 151.745235][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 151.812626][ T7793] netlink: 'syz.0.586': attribute type 11 has an invalid length. [ 151.830154][ T7793] netlink: 224 bytes leftover after parsing attributes in process `syz.0.586'. [ 151.954627][ T7799] vlan2: entered promiscuous mode [ 152.106399][ T7814] bond0: entered promiscuous mode [ 152.186473][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 152.254810][ T7821] netlink: 'syz.1.590': attribute type 10 has an invalid length. [ 152.433721][ T7821] sctp: [Deprecated]: syz.1.590 (pid 7821) Use of int in maxseg socket option. [ 152.433721][ T7821] Use struct sctp_assoc_value instead [ 153.147134][ T7858] netlink: 'syz.0.599': attribute type 10 has an invalid length. [ 153.175406][ T7857] netlink: 60 bytes leftover after parsing attributes in process `syz.2.600'. [ 153.251615][ T7863] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.602'. [ 153.284354][ T7863] netlink: zone id is out of range [ 153.304335][ T7863] netlink: zone id is out of range [ 153.340102][ T7867] xt_CT: No such helper "netbios-ns" [ 153.549156][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 153.577006][ T7872] vlan3: entered allmulticast mode [ 153.590999][ T7872] team0: entered allmulticast mode [ 153.600795][ T7872] team_slave_0: entered allmulticast mode [ 153.619109][ T7872] team_slave_1: entered allmulticast mode [ 153.644124][ T7872] team0: left allmulticast mode [ 153.660693][ T7872] team_slave_0: left allmulticast mode [ 153.677997][ T7872] team_slave_1: left allmulticast mode [ 154.090849][ T7891] xt_policy: too many policy elements [ 154.323551][ T7898] netlink: 'syz.2.613': attribute type 10 has an invalid length. [ 154.474179][ T7902] sctp: [Deprecated]: syz.4.614 (pid 7902) Use of int in max_burst socket option deprecated. [ 154.474179][ T7902] Use struct sctp_assoc_value instead [ 154.587210][ T7906] xt_CT: No such helper "netbios-ns" [ 155.005806][ T7915] lo speed is unknown, defaulting to 1000 [ 155.212065][ T7918] tipc: Enabling of bearer rejected, failed to enable media [ 155.579021][ T7923] syzkaller0: entered promiscuous mode [ 155.584752][ T7923] syzkaller0: entered allmulticast mode [ 155.645083][ T7929] netlink: 'syz.0.621': attribute type 4 has an invalid length. [ 155.750655][ T7927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.622'. [ 156.515846][ T7945] netlink: 72 bytes leftover after parsing attributes in process `syz.0.626'. [ 156.554984][ T7945] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 156.578831][ T7945] netlink: 68 bytes leftover after parsing attributes in process `syz.0.626'. [ 158.067360][ T7952] xt_CT: No such helper "netbios-ns" [ 158.077832][ T7952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 158.415107][ T7954] delete_channel: no stack [ 158.734930][ T7971] netlink: 244 bytes leftover after parsing attributes in process `syz.3.632'. [ 158.786197][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 158.889679][ T7975] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 158.899531][ T7973] vlan2: entered allmulticast mode [ 158.910723][ T7975] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 158.944680][ T7975] netlink: 'syz.3.632': attribute type 2 has an invalid length. [ 158.975753][ T7975] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 159.007383][ T7975] netlink: 'syz.3.632': attribute type 2 has an invalid length. [ 159.387957][ T7990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.404229][ T7987] xt_CT: No such helper "netbios-ns" [ 159.873220][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 159.928381][ T8007] vlan2: entered allmulticast mode [ 160.246370][ T8022] xt_CT: No such helper "netbios-ns" [ 160.351591][ T8026] sctp: [Deprecated]: syz.3.651 (pid 8026) Use of int in maxseg socket option. [ 160.351591][ T8026] Use struct sctp_assoc_value instead [ 160.374391][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 160.633329][ T8037] netlink: 11 bytes leftover after parsing attributes in process `syz.2.656'. [ 160.817539][ T8043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 160.839437][ T8043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 161.542838][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 161.552959][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.564162][ T8043] dummy0: entered promiscuous mode [ 161.573484][ T8043] batadv_slave_1: entered promiscuous mode [ 161.580280][ T8043] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 161.594885][ T8043] Cannot create hsr debugfs directory [ 161.606789][ T8050] netlink: 'syz.2.661': attribute type 1 has an invalid length. [ 161.606805][ T8043] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 161.606849][ T8043] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.653961][ T8043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 161.655869][ T8046] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 161.664612][ T8051] netlink: 3 bytes leftover after parsing attributes in process `syz.2.661'. [ 161.680800][ T8043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 161.681755][ T8046] tipc: Enabled bearer , priority 10 [ 161.785712][ T8050] bond0: entered promiscuous mode [ 161.791576][ T8050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.821226][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 161.851174][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.928016][ T8051] batadv0: entered promiscuous mode [ 161.953827][ T8051] batadv0: entered allmulticast mode [ 161.961743][ T8051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.979689][ T8051] bond0: (slave batadv0): making interface the new active one [ 161.996763][ T8051] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 162.030672][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 162.331195][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 162.565631][ T46] IPVS: starting estimator thread 0... [ 162.575180][ T8088] Cannot find add_set index 32768 as target [ 162.582194][ T8082] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 162.660182][ T8089] IPVS: using max 20 ests per chain, 48000 per kthread [ 162.914340][ T8094] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 162.941250][ T8096] netlink: 'syz.3.674': attribute type 10 has an invalid length. [ 162.965439][ T8096] veth0_macvtap: left promiscuous mode [ 162.991233][ T8096] team0: Device veth0_macvtap failed to register rx_handler [ 163.888379][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 164.016278][ T8118] vlan3: entered promiscuous mode [ 164.030860][ T8118] veth0: entered promiscuous mode [ 164.047965][ T8118] veth0: left promiscuous mode [ 164.201489][ T8121] bond0: entered promiscuous mode [ 164.219190][ T8121] bond_slave_0: entered promiscuous mode [ 164.265004][ T8121] bond_slave_1: entered promiscuous mode [ 164.356428][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'. [ 164.456295][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 164.547901][ T8132] netlink: 48 bytes leftover after parsing attributes in process `syz.1.685'. [ 164.736439][ T8139] xt_CT: No such helper "netbios-ns" [ 164.947187][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 164.956396][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 164.956428][ T8148] nbd: nbd0 already in use [ 164.995481][ T8144] ipvlan2: entered promiscuous mode [ 165.139435][ T8152] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 165.294132][ T8161] Cannot find add_set index 32768 as target [ 165.364834][ T8159] vlan2: entered allmulticast mode [ 165.457823][ T8165] openvswitch: netlink: IP tunnel dst address not specified [ 166.119523][ T8190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 166.197277][ T8187] xt_CT: No such helper "netbios-ns" [ 166.547836][ T8211] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 166.804636][ T8217] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 166.810084][ T8216] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 166.957762][ T8217] __nla_validate_parse: 5 callbacks suppressed [ 166.957784][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 167.005586][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 167.257044][ T8211] lo speed is unknown, defaulting to 1000 [ 167.360423][ T8220] bond0: entered promiscuous mode [ 167.395224][ T8220] bond_slave_0: entered promiscuous mode [ 167.456980][ T8220] bond_slave_1: entered promiscuous mode [ 167.645661][ T8227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.705'. [ 167.728869][ T8227] bridge_slave_0 (unregistering): left allmulticast mode [ 167.747059][ T8227] bridge_slave_0 (unregistering): left promiscuous mode [ 167.818672][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.386909][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 168.438913][ T8230] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 169.066652][ T8246] lo speed is unknown, defaulting to 1000 [ 169.188407][ T8255] netlink: 'syz.4.714': attribute type 10 has an invalid length. [ 169.215588][ T8255] team0: left promiscuous mode [ 169.226280][ T8255] team_slave_0: left promiscuous mode [ 169.250184][ T8255] team_slave_1: left promiscuous mode [ 169.276242][ T8256] netlink: 'syz.4.714': attribute type 10 has an invalid length. [ 169.287307][ T8255] batman_adv: batadv0: Adding interface: team0 [ 169.312778][ T8256] netlink: 2 bytes leftover after parsing attributes in process `syz.4.714'. [ 169.336421][ T8255] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.390161][ T8255] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 169.431954][ T8256] team0: entered promiscuous mode [ 169.447220][ T8256] team_slave_0: entered promiscuous mode [ 169.465743][ T8256] team_slave_1: entered promiscuous mode [ 169.481523][ T8256] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.499246][ T8256] batman_adv: batadv0: Interface activated: team0 [ 169.510089][ T8256] batadv0: mtu less than device minimum [ 169.516178][ T8251] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 169.532043][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.544472][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.556958][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.569416][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.581817][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.594426][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.606954][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.729523][ T8256] batman_adv: batadv0: Interface deactivated: team0 [ 169.826265][ T8256] batman_adv: batadv0: Removing interface: team0 [ 170.006602][ T8269] netlink: 'syz.3.715': attribute type 4 has an invalid length. [ 170.084881][ T8276] netlink: 'syz.1.716': attribute type 2 has an invalid length. [ 170.399086][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 170.442469][ T8284] tipc: Can't bind to reserved service type 1 [ 170.520248][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 170.692489][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 170.719668][ T8289] vlan2: entered allmulticast mode [ 170.747011][ T8291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.778653][ T8291] netlink: 'syz.4.723': attribute type 10 has an invalid length. [ 170.803667][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 170.809172][ T8291] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 170.827282][ T8291] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 170.866578][ T8293] vlan2: entered allmulticast mode [ 170.917889][ T8297] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.726'. [ 170.946423][ T8297] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 171.057858][ T8291] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.156285][ T8291] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.269060][ T8303] sctp: [Deprecated]: syz.0.727 (pid 8303) Use of int in maxseg socket option. [ 171.269060][ T8303] Use struct sctp_assoc_value instead [ 171.301955][ T8291] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.415739][ T8291] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.594083][ T8291] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.649117][ T8291] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.692740][ T8291] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.717010][ T8291] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.311270][ T8326] __nla_validate_parse: 2 callbacks suppressed [ 172.311291][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 172.338222][ T8330] sctp: [Deprecated]: syz.0.736 (pid 8330) Use of int in max_burst socket option deprecated. [ 172.338222][ T8330] Use struct sctp_assoc_value instead [ 172.346546][ T8331] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 172.367772][ T8331] netlink: 224 bytes leftover after parsing attributes in process `syz.1.738'. [ 172.370692][ T8326] vlan3: entered allmulticast mode [ 172.400029][ T8326] team0: entered allmulticast mode [ 172.415353][ T8326] team_slave_0: entered allmulticast mode [ 172.436487][ T8326] team_slave_1: entered allmulticast mode [ 172.459089][ T8326] team0: left allmulticast mode [ 172.470258][ T8326] team_slave_0: left allmulticast mode [ 172.475775][ T8326] team_slave_1: left allmulticast mode [ 172.532514][ T8331] veth0_vlan: entered allmulticast mode [ 172.622315][ T8336] veth0_vlan: left promiscuous mode [ 172.654053][ T8336] veth0_vlan: entered promiscuous mode [ 172.856454][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 172.980637][ T8353] netlink: 11 bytes leftover after parsing attributes in process `syz.4.741'. [ 173.356968][ T8364] xt_CT: No such helper "netbios-ns" [ 173.436626][ T8368] sctp: [Deprecated]: syz.1.755 (pid 8368) Use of int in max_burst socket option deprecated. [ 173.436626][ T8368] Use struct sctp_assoc_value instead [ 173.516012][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 173.565489][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 173.808869][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.748'. [ 173.886849][ T8382] bond0: left promiscuous mode [ 173.905922][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.927175][ T8382] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.939643][ T8382] net_ratelimit: 32 callbacks suppressed [ 173.939654][ T8382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.396679][ T8370] syz.2.744 (8370) used greatest stack depth: 17328 bytes left [ 174.414387][ T8386] lo speed is unknown, defaulting to 1000 [ 174.415584][ T8397] sctp: [Deprecated]: syz.1.753 (pid 8397) Use of int in max_burst socket option. [ 174.415584][ T8397] Use struct sctp_assoc_value instead [ 174.482803][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 174.524192][ T8396] vlan2: entered allmulticast mode [ 174.581431][ T8400] netlink: 'syz.1.754': attribute type 1 has an invalid length. [ 174.785723][ T8401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.820592][ T8401] bond1: (slave bond2): making interface the new active one [ 174.828258][ T8401] bond1: (slave bond2): Enslaving as an active interface with an up link [ 174.870685][ T8408] syz.3.758 uses old SIOCAX25GETINFO [ 174.876707][ T8405] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 174.984683][ T8408] syzkaller1: entered promiscuous mode [ 174.991625][ T8408] syzkaller1: entered allmulticast mode [ 175.000352][ T8408] netlink: 80 bytes leftover after parsing attributes in process `syz.3.758'. [ 175.038353][ T8413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.734042][ T8429] netlink: 11 bytes leftover after parsing attributes in process `syz.0.762'. [ 175.973497][ T8420] lo speed is unknown, defaulting to 1000 [ 176.211533][ T8426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.219977][ T8426] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.390119][ T8426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.555029][ T8440] batadv0: entered promiscuous mode [ 176.561197][ T8440] macvtap1: entered promiscuous mode [ 176.566785][ T8440] macvtap1: entered allmulticast mode [ 176.573054][ T8440] batadv0: entered allmulticast mode [ 176.579644][ T8440] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 176.677137][ T8442] batadv0: left allmulticast mode [ 176.682726][ T8442] batadv0: left promiscuous mode [ 176.979036][ T8452] netlink: 'syz.1.771': attribute type 2 has an invalid length. [ 178.048745][ T8473] netlink: 'syz.3.780': attribute type 15 has an invalid length. [ 178.139681][ T8477] __nla_validate_parse: 5 callbacks suppressed [ 178.139703][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 178.360189][ T8483] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 178.386248][ T8483] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 178.435188][ T8483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.784'. [ 178.860791][ T8490] netlink: 'syz.1.786': attribute type 2 has an invalid length. [ 178.878704][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.786'. [ 179.028266][ T8495] netlink: 'syz.2.787': attribute type 1 has an invalid length. [ 179.040744][ T8492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.786'. [ 179.210081][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 179.268264][ T8494] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 179.353358][ T8495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.362748][ T61] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 179.415907][ T8498] netlink: 76 bytes leftover after parsing attributes in process `syz.3.788'. [ 179.447359][ T8498] block nbd0: NBD_DISCONNECT [ 179.455648][ T8498] block nbd0: Send disconnect failed -32 [ 179.483055][ T8498] block nbd0: shutting down sockets [ 179.502294][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 179.706253][ T8503] sctp: [Deprecated]: syz.2.799 (pid 8503) Use of int in maxseg socket option. [ 179.706253][ T8503] Use struct sctp_assoc_value instead [ 179.803279][ T8505] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 179.871371][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 179.900479][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 180.249982][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 181.117721][ T8519] xt_CT: No such helper "netbios-ns" [ 181.289935][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 181.633892][ T8541] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 181.651961][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 181.678891][ T8541] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 181.704880][ T8543] macvtap2: entered promiscuous mode [ 181.721282][ T8543] macvtap2: entered allmulticast mode [ 181.726714][ T8543] bond0: entered allmulticast mode [ 181.730945][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 181.747189][ T8543] bond_slave_0: entered allmulticast mode [ 181.780301][ T8543] bond_slave_1: entered allmulticast mode [ 181.786156][ T8543] vlan2: entered allmulticast mode [ 181.801987][ T8543] nlmon0: entered allmulticast mode [ 181.822747][ T8543] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 181.843398][ T8547] bond0: left allmulticast mode [ 181.863440][ T8547] bond_slave_0: left allmulticast mode [ 181.889658][ T8547] bond_slave_1: left allmulticast mode [ 181.897967][ T8547] vlan2: left allmulticast mode [ 181.906927][ T8547] nlmon0: left allmulticast mode [ 181.935872][ T8546] bridge_slave_1: left allmulticast mode [ 181.958919][ T8546] bridge_slave_1: left promiscuous mode [ 181.965890][ T8546] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.997652][ T8546] bond0: (slave bridge0): Releasing backup interface [ 182.329989][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 182.396266][ T8569] siw: device registration error -23 [ 182.445901][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 182.588403][ T8573] xt_CT: No such helper "netbios-ns" [ 183.308993][ T8599] __nla_validate_parse: 1 callbacks suppressed [ 183.309013][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 183.365827][ T8601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.369960][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 183.442176][ T8599] macvtap3: entered promiscuous mode [ 183.447625][ T8599] bond0: entered promiscuous mode [ 183.467231][ T8599] macvtap3: entered allmulticast mode [ 183.493322][ T8599] bond0: entered allmulticast mode [ 183.509107][ T8599] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 183.530838][ T8601] netlink: 'syz.1.813': attribute type 10 has an invalid length. [ 183.591947][ T8607] bond0: left allmulticast mode [ 183.599271][ T8607] bond0: left promiscuous mode [ 183.615209][ T8601] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 183.629652][ T8601] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.915201][ T8614] xt_CT: No such helper "netbios-ns" [ 183.948817][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.818'. [ 184.033918][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.821'. [ 184.410533][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 184.490126][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 184.532256][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 184.556216][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 184.580041][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 184.956054][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 184.974938][ T8642] vlan3: entered allmulticast mode [ 185.032274][ T8642] team0: entered allmulticast mode [ 185.037456][ T8642] team_slave_0: entered allmulticast mode [ 185.070599][ T8648] netlink: 11 bytes leftover after parsing attributes in process `syz.1.827'. [ 185.103696][ T8642] team_slave_1: entered allmulticast mode [ 185.122735][ T8642] team0: left allmulticast mode [ 185.127935][ T8642] team_slave_0: left allmulticast mode [ 185.144036][ T8642] team_slave_1: left allmulticast mode [ 185.449987][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 185.530446][ T8655] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.830'. [ 185.565613][ T8655] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 185.640365][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 185.768815][ T8660] xt_CT: No such helper "netbios-ns" [ 185.778482][ T8657] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 185.788577][ T46] IPVS: starting estimator thread 0... [ 185.880296][ T8665] IPVS: using max 28 ests per chain, 67200 per kthread [ 185.976707][ T8673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.024016][ T8673] netlink: 'syz.4.835': attribute type 10 has an invalid length. [ 186.264715][ T8683] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 186.341342][ T8683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.413926][ T8694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.421979][ T8694] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 186.434112][ T8694] bond2: (slave vcan1): Error -95 calling set_mac_address [ 186.471573][ T8682] lo speed is unknown, defaulting to 1000 [ 186.490067][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 186.509112][ T8693] netlink: 'syz.0.841': attribute type 1 has an invalid length. [ 186.682003][ T8706] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 186.766560][ T8711] openvswitch: netlink: Message has 2 unknown bytes. [ 186.794042][ T8711] openvswitch: netlink: Actions may not be safe on all matching packets [ 187.530068][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 187.859609][ T8733] openvswitch: netlink: Message has 8 unknown bytes. [ 187.898806][ T8733] netlink: 'syz.0.854': attribute type 12 has an invalid length. [ 188.003707][ T8737] vlan3: entered allmulticast mode [ 188.009446][ T8737] team0: entered allmulticast mode [ 188.022816][ T8737] team_slave_0: entered allmulticast mode [ 188.035581][ T8737] team_slave_1: entered allmulticast mode [ 188.048095][ T8737] team0: left allmulticast mode [ 188.054014][ T8737] team_slave_0: left allmulticast mode [ 188.060426][ T8737] team_slave_1: left allmulticast mode [ 188.141070][ T8739] netlink: 'syz.2.857': attribute type 10 has an invalid length. [ 188.189394][ T8739] bridge0: port 3(gretap0) entered disabled state [ 188.196148][ T8739] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.204890][ T8739] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.252095][ T8742] gretap0: left allmulticast mode [ 188.264411][ T8742] bridge0: port 3(gretap0) entered disabled state [ 188.291611][ T8742] bridge_slave_1: left allmulticast mode [ 188.297584][ T8742] bridge_slave_1: left promiscuous mode [ 188.303588][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.313126][ T8742] bridge_slave_0: left allmulticast mode [ 188.318988][ T8742] bridge_slave_0: left promiscuous mode [ 188.325783][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.374489][ T8747] __nla_validate_parse: 8 callbacks suppressed [ 188.374511][ T8747] netlink: 308 bytes leftover after parsing attributes in process `syz.4.860'. [ 188.569997][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 188.797382][ T8765] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 188.815631][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'. [ 188.846567][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 189.342726][ T8766] lo speed is unknown, defaulting to 1000 [ 189.609987][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 189.814050][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 189.838424][ T8785] vlan2: entered allmulticast mode [ 189.858930][ T8785] team0: entered allmulticast mode [ 189.883182][ T8785] team_slave_0: entered allmulticast mode [ 189.900733][ T8785] team_slave_1: entered allmulticast mode [ 189.918912][ T8785] team0: left allmulticast mode [ 189.933075][ T8785] team_slave_0: left allmulticast mode [ 189.952691][ T8785] team_slave_1: left allmulticast mode [ 190.196257][ T8793] netlink: 'syz.3.874': attribute type 2 has an invalid length. [ 190.204304][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.874'. [ 190.231693][ T8793] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 190.288340][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 190.302183][ T8793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.874'. [ 190.650069][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 190.748027][ T8809] netlink: 'syz.3.879': attribute type 10 has an invalid length. [ 190.798834][ T8809] veth1_macvtap: left promiscuous mode [ 190.849060][ T8809] team0: Device veth1_macvtap failed to register rx_handler [ 190.916723][ T8812] netlink: 'syz.3.879': attribute type 1 has an invalid length. [ 190.960675][ T8812] netlink: 224 bytes leftover after parsing attributes in process `syz.3.879'. [ 191.552022][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 191.614374][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 191.617917][ T8829] netlink: 48 bytes leftover after parsing attributes in process `syz.2.885'. [ 191.620991][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 191.635735][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 191.666119][ T8832] tipc: Started in network mode [ 191.671405][ T8832] tipc: Node identity @, cluster identity 4711 [ 191.689976][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 191.716243][ T8832] tipc: Enabling of bearer rejected, failed to enable media [ 191.901121][ T8837] vlan2: entered allmulticast mode [ 191.918817][ T8837] team0: entered allmulticast mode [ 191.947086][ T8837] team0: left allmulticast mode [ 192.730013][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 192.848298][ T8868] netlink: 'syz.0.898': attribute type 1 has an invalid length. [ 192.973693][ T8872] bond2: (slave gretap1): making interface the new active one [ 193.020829][ T8872] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 193.081102][ T8850] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 193.764756][ T8889] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 193.769988][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 193.795167][ T8889] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 193.946359][ T8890] __nla_validate_parse: 5 callbacks suppressed [ 193.946377][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 194.663712][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 194.675124][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 194.689606][ T8903] vlan2: entered allmulticast mode [ 194.701887][ T8899] xt_nfacct: accounting object `syz1' does not exists [ 194.735605][ T8901] vlan4: entered allmulticast mode [ 194.809980][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 195.065085][ T8911] openvswitch: netlink: IP tunnel dst address not specified [ 195.095249][ T8914] netlink: 'syz.4.916': attribute type 1 has an invalid length. [ 195.138779][ T8916] netlink: 'syz.1.914': attribute type 10 has an invalid length. [ 195.155600][ T8914] bond1: entered promiscuous mode [ 195.187036][ T8920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.916'. [ 195.188450][ T8909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.233650][ T8914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.359785][ T8926] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 195.378146][ T8926] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 195.653019][ T8909] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.768857][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'. [ 195.850031][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 195.891763][ T8909] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.999434][ T8935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.928'. [ 196.286696][ T8909] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.438519][ T8909] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.598580][ T8909] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.615740][ T8909] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.631959][ T8909] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.647672][ T8909] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.786621][ T8938] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 196.867380][ T8942] lo speed is unknown, defaulting to 1000 [ 196.889971][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 197.056594][ T8948] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 197.293436][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 197.321612][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 197.390885][ T8945] lo speed is unknown, defaulting to 1000 [ 197.929997][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 198.085025][ T8942] lo speed is unknown, defaulting to 1000 [ 198.794370][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 198.800603][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 198.848278][ T8965] vlan2: entered allmulticast mode [ 198.870577][ T8965] bond0: entered allmulticast mode [ 198.876052][ T8965] bond_slave_0: entered allmulticast mode [ 198.888228][ T8965] bond_slave_1: entered allmulticast mode [ 198.901159][ T8965] bond0: left allmulticast mode [ 198.906250][ T8965] bond_slave_0: left allmulticast mode [ 198.916882][ T8965] bond_slave_1: left allmulticast mode [ 198.970085][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 199.048983][ T8966] vlan3: entered allmulticast mode [ 199.315439][ T8979] netlink: 'syz.3.929': attribute type 1 has an invalid length. [ 199.387557][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.929'. [ 199.559492][ T8979] bond3: entered promiscuous mode [ 199.566305][ T8979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.586943][ T8986] netlink: 'syz.0.932': attribute type 12 has an invalid length. [ 199.874435][ T8988] lo speed is unknown, defaulting to 1000 [ 199.944560][ T8995] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.933'. [ 200.000167][ T8995] netlink: zone id is out of range [ 200.010063][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 200.017735][ T8995] netlink: zone id is out of range [ 200.046780][ T8995] netlink: zone id is out of range [ 200.072757][ T8997] xt_nfacct: accounting object `syz1' does not exists [ 200.112208][ T8995] netlink: zone id is out of range [ 200.159934][ T8995] netlink: zone id is out of range [ 200.165109][ T8995] netlink: zone id is out of range [ 200.229955][ T8995] netlink: zone id is out of range [ 200.235255][ T8995] netlink: zone id is out of range [ 200.279969][ T8995] netlink: zone id is out of range [ 200.284827][ T9002] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2514022208/2514022210 [ 201.041418][ T9009] netlink: 'syz.0.938': attribute type 10 has an invalid length. [ 201.134462][ T9009] netlink: 'syz.0.938': attribute type 10 has an invalid length. [ 201.170839][ T9009] netlink: 2 bytes leftover after parsing attributes in process `syz.0.938'. [ 201.209773][ T9009] team0: entered promiscuous mode [ 201.216831][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 201.230506][ T9009] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.260686][ T9013] vlan3: entered allmulticast mode [ 201.327821][ T9002] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2514022208/2514022210 [ 201.347344][ T9002] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2514022208/2514022210 [ 201.553339][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 201.607298][ T9022] vlan2: entered allmulticast mode [ 201.633952][ T9022] team0: entered allmulticast mode [ 201.639138][ T9022] team_slave_0: entered allmulticast mode [ 201.677063][ T9022] team_slave_1: entered allmulticast mode [ 201.729148][ T9022] team0: left allmulticast mode [ 201.746437][ T9022] team_slave_0: left allmulticast mode [ 201.768796][ T9022] team_slave_1: left allmulticast mode [ 202.514995][ T9043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.949'. [ 202.569405][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 202.631466][ T9038] lo speed is unknown, defaulting to 1000 [ 202.866950][ T9046] syzkaller1: entered promiscuous mode [ 202.872999][ T9046] syzkaller1: entered allmulticast mode [ 202.880719][ T9046] netlink: 80 bytes leftover after parsing attributes in process `syz.0.951'. [ 203.103555][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 203.119658][ C0] vcan0: j1939_session_tx_dat: 0xffff888064773000: queue data error: -100 [ 203.286115][ T9050] lo speed is unknown, defaulting to 1000 [ 203.305556][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'. [ 203.678869][ T9059] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 203.760406][ T9038] lo speed is unknown, defaulting to 1000 [ 205.210197][ C1] net_ratelimit: 8 callbacks suppressed [ 205.210218][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 205.307059][ T9088] __nla_validate_parse: 2 callbacks suppressed [ 205.307079][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 205.351351][ T9088] vlan2: entered allmulticast mode [ 205.636330][ T9095] team0: No ports can be present during mode change [ 205.799521][ T9100] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 205.826957][ T9100] netlink: 224 bytes leftover after parsing attributes in process `syz.1.969'. [ 205.888696][ T9104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.972'. [ 205.958843][ T9108] ip6t_rpfilter: unknown options [ 206.057004][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 206.107850][ T9094] lo speed is unknown, defaulting to 1000 [ 206.202059][ T9110] netlink: 'syz.3.971': attribute type 2 has an invalid length. [ 206.250028][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 206.675777][ T9130] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.926937][ T9130] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.076851][ T9130] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.181942][ T9142] ip6gre0: entered promiscuous mode [ 207.187208][ T9142] ip6gre0: entered allmulticast mode [ 207.235284][ T9130] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.290034][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 207.442553][ T9154] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 207.466903][ T9154] netlink: 224 bytes leftover after parsing attributes in process `syz.0.983'. [ 207.536716][ T9156] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 207.549568][ T9156] netlink: 224 bytes leftover after parsing attributes in process `syz.1.984'. [ 207.550499][ T9130] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.631777][ T9130] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.861864][ T9167] netlink: 'syz.1.987': attribute type 1 has an invalid length. [ 207.869575][ T9167] netlink: 224 bytes leftover after parsing attributes in process `syz.1.987'. [ 208.331945][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 209.372650][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 209.535416][ T9130] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.575635][ T9130] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.726646][ T9170] bridge1: entered promiscuous mode [ 209.757501][ T9176] netlink: 'syz.0.988': attribute type 10 has an invalid length. [ 209.766167][ T9170] bridge1: entered allmulticast mode [ 209.833313][ T9170] team0: Port device bridge1 added [ 209.859160][ T9178] bridge0: port 1(ip6gretap0) entered blocking state [ 209.880377][ T9178] bridge0: port 1(ip6gretap0) entered disabled state [ 209.940159][ T9178] ip6gretap0: entered allmulticast mode [ 209.963688][ T9178] ip6gretap0: entered promiscuous mode [ 210.025959][ T9183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.056634][ T9183] netlink: 'syz.2.994': attribute type 10 has an invalid length. [ 210.367291][ T9184] bond0: left promiscuous mode [ 210.385578][ T9198] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 210.388926][ T9184] bond_slave_0: left promiscuous mode [ 210.403277][ T9198] netlink: 224 bytes leftover after parsing attributes in process `syz.0.996'. [ 210.410141][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 210.426072][ T9184] bond_slave_1: left promiscuous mode [ 210.444586][ T9184] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 210.464681][ T9184] team0: left promiscuous mode [ 210.469495][ T9184] team_slave_0: left promiscuous mode [ 210.487171][ T9184] team_slave_1: left promiscuous mode [ 210.495117][ T9184] batman_adv: batadv0: Interface deactivated: dummy0 [ 210.519357][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 210.569271][ T9205] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 210.592989][ T9205] netlink: 224 bytes leftover after parsing attributes in process `syz.3.998'. [ 210.607166][ T9184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.620706][ T9184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.656370][ T9184] veth0_vlan: left allmulticast mode [ 210.684590][ T9184] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.693421][ T9184] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.702136][ T9184] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.710769][ T9184] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.735620][ T9184] vlan2: left promiscuous mode [ 210.743787][ T9184] ip6tnl1: left allmulticast mode [ 210.751987][ T9184] ip6erspan0: left promiscuous mode [ 210.768798][ T9184] bond1: left promiscuous mode [ 210.868530][ T9194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.892829][ T9208] netlink: 168 bytes leftover after parsing attributes in process `syz.4.999'. [ 211.126383][ T9194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.171132][ T9221] netlink: 'syz.3.1000': attribute type 1 has an invalid length. [ 211.201429][ T9221] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1000'. [ 211.315815][ T9194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.381397][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 211.415906][ T9225] bond0: (slave bond_slave_0): Releasing backup interface [ 211.446413][ T9225] bond_slave_0: left promiscuous mode [ 211.449977][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 211.480748][ T9225] bond0: (slave bond_slave_1): Releasing backup interface [ 211.520615][ T9225] bond_slave_1: left promiscuous mode [ 211.542674][ T9225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.557581][ T9225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.566849][ T9225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.581401][ T9225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.605893][ T9225] bond0: (slave wlan1): Releasing backup interface [ 211.620750][ T9225] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 211.642290][ T9225] bond0: (slave vlan2): Releasing backup interface [ 211.661432][ T9225] nlmon0: left promiscuous mode [ 211.677523][ T9225] bond1: (slave bond2): Releasing backup interface [ 211.747387][ T9194] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 211.791787][ T9194] team0: Port device netdevsim0 removed [ 211.803815][ T9194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.013058][ T9194] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.037297][ T9194] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.082806][ T9194] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.098015][ T9218] lo speed is unknown, defaulting to 1000 [ 212.195382][ T9194] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.229168][ T9240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1004'. [ 212.300375][ T9194] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.361187][ T9194] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.489093][ T9247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1009'. [ 212.490135][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 212.717128][ T9252] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 212.734992][ T9252] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1011'. [ 213.008564][ T9263] sctp: [Deprecated]: syz.4.1012 (pid 9263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.008564][ T9263] Use struct sctp_sack_info instead [ 213.140711][ T9263] netlink: 'syz.4.1012': attribute type 10 has an invalid length. [ 213.245928][ T9266] netlink: 'syz.4.1012': attribute type 11 has an invalid length. [ 213.285438][ T9271] netlink: 'syz.3.1016': attribute type 6 has an invalid length. [ 213.530102][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 213.872801][ T9285] ip6gre0: left promiscuous mode [ 213.891176][ T9285] ip6gre0: left allmulticast mode [ 214.037311][ T9285] bond0: left promiscuous mode [ 214.132071][ T9292] openvswitch: netlink: Message has 8 unknown bytes. [ 214.165685][ T9293] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 214.189364][ T9293] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1022'. [ 214.219249][ T9285] wg1: left promiscuous mode [ 214.256343][ T9295] netlink: 'syz.0.1023': attribute type 12 has an invalid length. [ 214.570142][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 214.648501][ T9285] veth0_vlan: left allmulticast mode [ 214.824600][ T9285] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.833694][ T9285] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.842932][ T9285] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.851856][ T9285] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.922854][ T9285] vlan2: left promiscuous mode [ 214.928235][ T9285] macvtap1: left promiscuous mode [ 214.937842][ T9285] macvtap1: left allmulticast mode [ 214.946669][ T9285] macvtap2: left promiscuous mode [ 214.953053][ T9285] macvtap2: left allmulticast mode [ 215.139484][ T9304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.156517][ T9304] netlink: 'syz.0.1027': attribute type 10 has an invalid length. [ 215.183184][ T9305] tipc: Enabled bearer , priority 0 [ 215.243279][ T9308] batman_adv: batadv0: Removing interface: dummy0 [ 215.288079][ T9308] bond0: (slave bond_slave_0): Releasing backup interface [ 215.324902][ T9308] bond0: (slave bond_slave_1): Releasing backup interface [ 215.377858][ T9308] team0: Port device team_slave_0 removed [ 215.407222][ T9308] team0: Port device team_slave_1 removed [ 215.426356][ T9308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.447391][ T9308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.463622][ T9308] bond0: (slave wlan1): Releasing backup interface [ 215.490622][ T9301] lo speed is unknown, defaulting to 1000 [ 215.609947][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 215.644773][ T9324] syzkaller1: entered promiscuous mode [ 215.653758][ T9324] syzkaller1: entered allmulticast mode [ 215.666080][ T9324] __nla_validate_parse: 1 callbacks suppressed [ 215.666100][ T9324] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1029'. [ 216.556028][ T9341] team0: left promiscuous mode [ 216.598985][ T9341] macvtap1: left promiscuous mode [ 216.614886][ T9341] macvtap1: left allmulticast mode [ 216.650016][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 216.658268][ T9341] bond1: left promiscuous mode [ 216.667214][ T9341] macvtap3: left promiscuous mode [ 216.680231][ T9341] macvtap3: left allmulticast mode [ 216.718432][ T9347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.764415][ T9341] bridge1: left promiscuous mode [ 216.764899][ T9347] netlink: 'syz.3.1038': attribute type 10 has an invalid length. [ 216.769632][ T9341] bridge1: left allmulticast mode [ 216.866823][ T9347] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 217.077037][ T9351] netlink: 'syz.0.1039': attribute type 1 has an invalid length. [ 217.100673][ T9351] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1039'. [ 217.296866][ T9339] lo speed is unknown, defaulting to 1000 [ 217.358711][ T9356] netlink: 'syz.2.1041': attribute type 12 has an invalid length. [ 217.595129][ T9363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.644096][ T9365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.680223][ T9363] netlink: 'syz.0.1042': attribute type 10 has an invalid length. [ 217.691267][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 217.745425][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 217.840474][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 218.493414][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'. [ 218.730025][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 218.889948][ T9407] netlink: 'syz.0.1066': attribute type 10 has an invalid length. [ 218.951557][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1056'. [ 218.996532][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 219.088342][ T9411] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.111694][ T9411] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.128136][ T9411] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.173201][ T9411] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.186522][ T9411] geneve3: entered promiscuous mode [ 219.194243][ T9411] geneve3: entered allmulticast mode [ 219.219074][ T9411] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.256610][ T9411] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.282420][ T9411] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.297355][ T9411] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.308215][ T9417] netlink: 'syz.3.1059': attribute type 10 has an invalid length. [ 219.361787][ T9424] netlink: 'syz.3.1059': attribute type 10 has an invalid length. [ 219.386341][ T9424] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1059'. [ 219.396338][ T9413] bridge0: port 1(gretap0) entered blocking state [ 219.404142][ T9413] bridge0: port 1(gretap0) entered disabled state [ 219.411649][ T9413] gretap0: entered allmulticast mode [ 219.419037][ T9413] gretap0: entered promiscuous mode [ 219.436019][ T9415] gretap0: left allmulticast mode [ 219.452019][ T9415] gretap0: left promiscuous mode [ 219.460447][ T9415] bridge0: port 1(gretap0) entered disabled state [ 219.503525][ T9417] batman_adv: batadv0: Adding interface: team0 [ 219.522110][ T9417] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.556099][ T9417] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 219.595523][ T9424] team0: entered promiscuous mode [ 219.622768][ T9424] team_slave_0: entered promiscuous mode [ 219.657768][ T9424] team_slave_1: entered promiscuous mode [ 219.678241][ T9424] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.693611][ T9424] batman_adv: batadv0: Interface activated: team0 [ 219.701348][ T9424] batman_adv: batadv0: Interface deactivated: team0 [ 219.708579][ T9424] batman_adv: batadv0: Removing interface: team0 [ 219.719203][ T9395] lo speed is unknown, defaulting to 1000 [ 219.770021][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 219.852902][ T9437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.875359][ T9437] netlink: 'syz.4.1062': attribute type 10 has an invalid length. [ 219.892239][ T9437] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 220.417143][ T9459] sctp: [Deprecated]: syz.0.1065 (pid 9459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.417143][ T9459] Use struct sctp_sack_info instead [ 220.538626][ T9463] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 220.547689][ T9459] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 220.556523][ T9463] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 220.650313][ T9466] siw: device registration error -23 [ 220.736412][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1069'. [ 220.783490][ T9467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.799963][ T9471] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20003 [ 220.809977][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 220.818294][ T9467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.831017][ T9467] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 220.848706][ T9467] batman_adv: batadv0: Removing interface: virt_wifi0 [ 221.629723][ T9470] lo speed is unknown, defaulting to 1000 [ 221.634795][ T9487] netlink: 'syz.3.1076': attribute type 10 has an invalid length. [ 221.649280][ T9485] bridge0: failed insert local address into bridge forwarding table [ 221.850061][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 221.867390][ T9472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'. [ 221.898551][ T9490] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.918493][ T9490] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.947330][ T9490] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.974197][ T9490] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.002034][ T9490] geneve2: entered promiscuous mode [ 222.015604][ T9490] geneve2: entered allmulticast mode [ 222.043727][ T9490] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.071040][ T9490] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.079440][ T9490] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.119939][ T9490] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.248035][ T9472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.257475][ T9472] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.273718][ T9472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.861385][ T9493] lo speed is unknown, defaulting to 1000 [ 222.890107][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 223.148908][ T9517] netlink: 'syz.0.1085': attribute type 12 has an invalid length. [ 223.480753][ T9517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.501633][ T9509] lo speed is unknown, defaulting to 1000 [ 223.610230][ T9517] netlink: zone id is out of range [ 223.672120][ T9520] netlink: 'syz.0.1085': attribute type 2 has an invalid length. [ 223.883565][ T9520] Tq€!7: entered promiscuous mode [ 223.930109][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 223.958382][ T9505] ipt_rpfilter: unknown options [ 223.987880][ T9517] netlink: set zone limit has 4 unknown bytes [ 224.014196][ T9512] lo speed is unknown, defaulting to 1000 [ 224.441806][ T9526] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1086'. [ 224.969957][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 225.810708][ T9534] Bluetooth: MGMT ver 1.23 [ 226.009945][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 226.181972][ T5887] IPVS: starting estimator thread 0... [ 226.292501][ T9543] IPVS: using max 22 ests per chain, 52800 per kthread [ 226.657214][ T9555] xt_l2tp: v2 sid > 0xffff: 262144 [ 226.693536][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 226.903672][ T9565] netlink: 'syz.4.1097': attribute type 39 has an invalid length. [ 226.958625][ T9573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.959539][ T9570] openvswitch: netlink: IP tunnel dst address not specified [ 226.974806][ T9573] netlink: 'syz.2.1101': attribute type 10 has an invalid length. [ 227.049942][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 227.388856][ T9585] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1104'. [ 227.796170][ T9595] netlink: 'syz.1.1107': attribute type 1 has an invalid length. [ 227.805225][ T9595] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1107'. [ 227.959606][ T9602] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1109'. [ 228.090005][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 228.316187][ T9620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.354376][ T9620] netlink: 'syz.1.1116': attribute type 10 has an invalid length. [ 228.380371][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 228.400217][ T9622] vlan2: entered allmulticast mode [ 228.405541][ T9622] bond0: entered allmulticast mode [ 228.411068][ T9622] bond_slave_0: entered allmulticast mode [ 228.417944][ T9622] bond_slave_1: entered allmulticast mode [ 228.425754][ T9622] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 228.434113][ T9627] netlink: 'syz.0.1115': attribute type 10 has an invalid length. [ 228.446218][ T9622] bond0: left allmulticast mode [ 228.451986][ T9622] bond_slave_0: left allmulticast mode [ 228.457626][ T9622] bond_slave_1: left allmulticast mode [ 228.464499][ T9622] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 228.495707][ T9620] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 228.613875][ T9632] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1119'. [ 228.916297][ T9635] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 229.129999][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 229.205517][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1122'. [ 229.379196][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 229.517424][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 229.532326][ T9663] vlan2: entered allmulticast mode [ 229.544588][ T9663] team0: entered allmulticast mode [ 229.552428][ T9663] bridge1: entered allmulticast mode [ 229.567804][ T9663] team0: left allmulticast mode [ 229.574573][ T9663] bridge1: left allmulticast mode [ 229.637433][ T9670] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 229.754779][ T9673] ip6gretap0: left allmulticast mode [ 229.762016][ T9673] ip6gretap0: left promiscuous mode [ 229.768129][ T9673] bridge0: port 1(ip6gretap0) entered disabled state [ 229.786619][ T9673] bond2: (slave gretap1): Releasing active interface [ 229.791445][ T9675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.812965][ T9673] team0: Port device bridge1 removed [ 229.815522][ T9675] netlink: 'syz.1.1133': attribute type 10 has an invalid length. [ 229.852261][ T9673] team0: Mode changed to "loadbalance" [ 230.283182][ T9688] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1136'. [ 230.813761][ T9705] vlan2: entered allmulticast mode [ 230.819252][ T9705] team0: entered allmulticast mode [ 230.826483][ T9705] team_slave_0: entered allmulticast mode [ 230.833437][ T9705] team_slave_1: entered allmulticast mode [ 230.853935][ T9705] team0: left allmulticast mode [ 230.858889][ T9705] team_slave_0: left allmulticast mode [ 230.879616][ T9705] team_slave_1: left allmulticast mode [ 232.240134][ T9748] openvswitch: netlink: IP tunnel dst address not specified [ 232.420819][ T9757] __nla_validate_parse: 1 callbacks suppressed [ 232.420842][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 232.458915][ T9757] vlan3: entered allmulticast mode [ 232.605444][ T9765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.684452][ T9765] netlink: 'syz.0.1167': attribute type 10 has an invalid length. [ 232.802632][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'. [ 232.943938][ T9774] team_slave_0: left promiscuous mode [ 233.047236][ T9774] team0: Port device team_slave_0 removed [ 233.067218][ T9774] team_slave_1: left promiscuous mode [ 233.108627][ T9774] team0: Port device team_slave_1 removed [ 233.158904][ T9774] bond0: (slave batadv0): Releasing active interface [ 233.214758][ T9774] bond1: (slave ip6gretap1): Removing an active aggregator [ 233.239453][ T9774] bond1: (slave ip6gretap1): Releasing backup interface [ 233.617902][ T9784] macsec2: entered allmulticast mode [ 233.643521][ T9784] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 233.644362][ T9786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.664426][ T9784] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 233.681038][ T9786] netlink: 'syz.1.1162': attribute type 10 has an invalid length. [ 233.722969][ T9787] ipvlan2: entered promiscuous mode [ 233.771492][ T9769] lo speed is unknown, defaulting to 1000 [ 233.786936][ T9786] netlink: 'syz.1.1162': attribute type 10 has an invalid length. [ 233.810132][ T9786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1162'. [ 233.819256][ T9786] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 233.962125][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 234.079696][ T9793] xt_CT: No such helper "netbios-ns" [ 234.485310][ T9803] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1178'. [ 234.536839][ T9803] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 234.561307][ T9805] openvswitch: netlink: Message has 8 unknown bytes. [ 234.580531][ T9803] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 234.616086][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 234.630922][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'. [ 234.668406][ T9807] vlan3: entered allmulticast mode [ 234.680809][ T9805] netlink: 'syz.1.1168': attribute type 12 has an invalid length. [ 234.793984][ T9810] batadv0: entered promiscuous mode [ 234.819080][ T9813] netlink: 'syz.2.1171': attribute type 1 has an invalid length. [ 234.825051][ T9810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.882230][ T9815] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1170'. [ 234.936307][ T9818] Bluetooth: MGMT ver 1.23 [ 235.037487][ T9814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1171'. [ 235.110980][ T9813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.193586][ T9821] netlink: 'syz.0.1170': attribute type 1 has an invalid length. [ 235.292008][ T9817] netlink: 'syz.4.1172': attribute type 1 has an invalid length. [ 235.335955][ T9817] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1172'. [ 235.954332][ T9837] xt_TCPMSS: Only works on TCP SYN packets [ 235.966187][ T9851] syz_tun: entered promiscuous mode [ 235.993068][ T9851] tipc: Cannot configure node identity twice [ 236.037705][ T9853] vlan2: entered allmulticast mode [ 236.578889][ T9867] bond0: entered promiscuous mode [ 236.619528][ T9867] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 236.655582][ T9869] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 236.677734][ T9867] ip6gretap0: entered promiscuous mode [ 236.693263][ T9867] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 236.718374][ T9867] Cannot create hsr debugfs directory [ 236.736794][ T9867] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 236.760339][ T9867] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 236.776010][ T9843] syz_tun: left promiscuous mode [ 237.141029][ T9885] ipip0: entered promiscuous mode [ 237.733643][ T9909] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 237.753230][ T9909] __nla_validate_parse: 13 callbacks suppressed [ 237.753251][ T9909] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1198'. [ 238.033145][ T9917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.044263][ T9917] bond0: (slave bond3): Enslaving as an active interface with a down link [ 238.093705][ T9927] dvmrp0: entered allmulticast mode [ 238.166851][ T9927] pimreg: entered allmulticast mode [ 238.175193][ T9923] wg1: entered promiscuous mode [ 238.343923][ T9933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 238.463897][ T9944] sctp: [Deprecated]: syz.1.1205 (pid 9944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.463897][ T9944] Use struct sctp_sack_info instead [ 238.514311][ T9921] lo speed is unknown, defaulting to 1000 [ 238.672761][ T9945] syzkaller1: entered promiscuous mode [ 238.682940][ T9945] syzkaller1: entered allmulticast mode [ 238.760975][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 238.791825][ T9949] vlan4: entered allmulticast mode [ 238.959209][ T9957] netlink: 'syz.2.1207': attribute type 10 has an invalid length. [ 239.212255][ T9970] netlink: 'syz.0.1211': attribute type 1 has an invalid length. [ 239.220510][ T9970] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1211'. [ 239.237381][ T9968] batadv_slave_0: entered promiscuous mode [ 239.407970][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1213'. [ 239.417958][ T9978] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 239.447134][ T9978] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1216'. [ 240.393747][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'. [ 240.526403][ T9997] vlan4: entered allmulticast mode [ 240.656282][T10004] netlink: 'syz.0.1224': attribute type 4 has an invalid length. [ 240.686160][T10004] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1224'. [ 240.817513][T10013] netlink: 'syz.1.1226': attribute type 1 has an invalid length. [ 240.836365][T10013] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1226'. [ 241.033801][T10019] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 241.052111][T10019] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1228'. [ 241.194291][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 241.229353][T10022] ax25_connect(): syz.2.1229 uses autobind, please contact jreuter@yaina.de [ 241.236086][T10008] lo speed is unknown, defaulting to 1000 [ 241.383287][T10027] ipt_rpfilter: unknown options [ 241.514594][T10032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.529529][T10031] erspan0: left promiscuous mode [ 241.618189][T10031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.631017][T10031] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.651563][T10031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.697922][T10009] lo speed is unknown, defaulting to 1000 [ 242.772343][T10048] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 242.798498][T10048] __nla_validate_parse: 6 callbacks suppressed [ 242.798564][T10048] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1238'. [ 243.431515][T10052] team_slave_0: left promiscuous mode [ 243.447524][T10052] team0 (unregistering): Failed to send options change via netlink (err -105) [ 243.472737][T10052] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 243.485494][T10052] team0 (unregistering): Port device team_slave_0 removed [ 243.493816][T10052] team_slave_1: left promiscuous mode [ 243.503113][T10052] team0 (unregistering): Failed to send options change via netlink (err -105) [ 243.513064][T10052] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 243.524646][T10052] team0 (unregistering): Port device team_slave_1 removed [ 243.553294][ T5951] infiniband syz2: ib_query_port failed (-19) [ 243.564462][T10062] sch_fq: defrate 511 ignored. [ 243.767555][T10075] tipc: Resetting bearer [ 243.966922][T10083] netlink: 'syz.0.1246': attribute type 1 has an invalid length. [ 244.368528][T10106] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 244.382754][T10106] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1252'. [ 244.514287][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1253'. [ 244.643387][T10099] lo speed is unknown, defaulting to 1000 [ 245.119758][T10114] lo speed is unknown, defaulting to 1000 [ 245.127735][T10122] bridge0: failed insert local address into bridge forwarding table [ 245.432313][T10127] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1257'. [ 245.446258][T10134] batadv_slave_1: entered promiscuous mode [ 245.470815][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 245.692678][T10100] lo speed is unknown, defaulting to 1000 [ 245.707792][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'. [ 245.767643][T10134] bridge0: entered allmulticast mode [ 245.995403][T10133] batadv_slave_1: left promiscuous mode [ 246.505203][T10153] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1264'. [ 246.581425][T10155] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 246.601647][T10152] delete_channel: no stack [ 246.975564][T10160] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1266'. [ 246.991394][T10160] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1266'. [ 247.600752][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 247.804867][T10180] __nla_validate_parse: 1 callbacks suppressed [ 247.804888][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 247.857057][T10170] lo speed is unknown, defaulting to 1000 [ 247.905594][T10182] netlink: zone id is out of range [ 247.917479][T10182] netlink: zone id is out of range [ 247.936895][T10182] netlink: zone id is out of range [ 247.953868][T10182] netlink: zone id is out of range [ 247.976701][T10182] netlink: zone id is out of range [ 248.004888][T10182] netlink: zone id is out of range [ 248.031856][T10182] netlink: zone id is out of range [ 248.045163][T10182] netlink: zone id is out of range [ 248.092127][T10182] netlink: zone id is out of range [ 248.097303][T10182] netlink: zone id is out of range [ 248.113525][T10184] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.153973][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 248.179764][T10184] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.223265][T10188] vlan2: entered allmulticast mode [ 248.247505][T10184] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.277712][T10184] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.293776][T10191] netlink: 'syz.1.1276': attribute type 1 has an invalid length. [ 248.312597][T10191] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1276'. [ 248.489700][T10203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.527353][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 248.805042][T10215] netlink: 'syz.2.1285': attribute type 21 has an invalid length. [ 248.807973][T10222] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 248.814794][T10215] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.833371][T10215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.841184][T10215] IPv6: NLM_F_CREATE should be set when creating new route [ 248.848450][T10215] IPv6: NLM_F_CREATE should be set when creating new route [ 248.853741][T10222] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1284'. [ 248.855733][T10215] IPv6: NLM_F_CREATE should be set when creating new route [ 249.071586][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 249.320231][T10237] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.350199][T10237] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.370579][T10240] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1290'. [ 249.377444][T10237] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.413105][T10237] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.650707][T10245] netlink: 'syz.0.1292': attribute type 1 has an invalid length. [ 249.660661][T10245] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1292'. [ 250.179120][T10265] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 250.194954][T10265] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1299'. [ 250.353750][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 250.680899][T10282] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 250.732102][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 250.890254][T10287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.087918][T10283] lo speed is unknown, defaulting to 1000 [ 251.221415][T10295] netlink: 'syz.0.1310': attribute type 1 has an invalid length. [ 251.235679][T10297] syzkaller1: entered promiscuous mode [ 251.242235][T10297] syzkaller1: entered allmulticast mode [ 251.563200][T10301] vlan4: entered allmulticast mode [ 252.368327][T10332] netlink: 'syz.3.1322': attribute type 1 has an invalid length. [ 252.506894][T10336] can: request_module (can-proto-0) failed. [ 252.529191][T10339] can: request_module (can-proto-0) failed. [ 252.551808][T10342] vlan2: entered allmulticast mode [ 252.563840][T10342] bond0: entered allmulticast mode [ 252.578507][T10342] bond_slave_0: entered allmulticast mode [ 252.590855][T10342] bond_slave_1: entered allmulticast mode [ 252.596718][T10342] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 252.615827][T10347] netlink: 'syz.2.1323': attribute type 10 has an invalid length. [ 252.627852][T10346] netlink: 'syz.1.1324': attribute type 10 has an invalid length. [ 252.634663][T10342] bond0: left allmulticast mode [ 252.653168][T10342] bond_slave_0: left allmulticast mode [ 252.667453][T10342] bond_slave_1: left allmulticast mode [ 252.685320][T10342] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 252.884349][T10361] __nla_validate_parse: 14 callbacks suppressed [ 252.884368][T10361] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1327'. [ 252.936655][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 252.997054][T10358] bridge0: failed insert local address into bridge forwarding table [ 253.193074][T10380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1333'. [ 253.452641][T10389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.482333][T10389] netlink: 'syz.0.1336': attribute type 10 has an invalid length. [ 253.516027][T10391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.553396][T10394] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 253.564965][T10394] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 253.575014][T10391] netlink: 'syz.4.1337': attribute type 10 has an invalid length. [ 253.593594][T10389] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.625479][T10391] IPVS: Error connecting to the multicast addr [ 253.653728][T10389] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.674580][T10397] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1338'. [ 253.686603][T10397] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1338'. [ 253.725098][T10389] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.778222][T10389] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.876823][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 253.878691][T10389] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.907095][T10389] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.927609][T10389] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.946462][T10399] vlan2: entered allmulticast mode [ 253.961276][T10399] bond0: entered allmulticast mode [ 253.968687][T10399] bond_slave_0: entered allmulticast mode [ 253.979931][T10399] bond_slave_1: entered allmulticast mode [ 253.985761][T10399] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 254.002643][T10399] bond0: left allmulticast mode [ 254.020071][T10399] bond_slave_0: left allmulticast mode [ 254.025965][T10399] bond_slave_1: left allmulticast mode [ 254.032338][T10399] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 254.071924][T10389] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.090607][T10403] bridge0: port 1(gretap0) entered blocking state [ 254.097150][T10403] bridge0: port 1(gretap0) entered disabled state [ 254.121910][T10403] gretap0: entered allmulticast mode [ 254.128106][T10403] gretap0: entered promiscuous mode [ 254.142262][T10404] gretap0: left allmulticast mode [ 254.150641][T10404] gretap0: left promiscuous mode [ 254.162210][T10404] bridge0: port 1(gretap0) entered disabled state [ 254.662440][T10420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1346'. [ 254.799385][T10421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1347'. [ 254.809342][T10421] nbd: device at index 64 is going down [ 254.870345][T10431] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1346'. [ 254.904439][T10431] nbd: must specify at least one socket [ 255.427891][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 255.497551][T10443] vlan3: entered allmulticast mode [ 255.534355][T10446] ebt_limit: overflow, try lower: 570423552/2483027968 [ 256.033284][T10469] sch_fq: defrate 511 ignored. [ 256.145900][T10474] netlink: 'syz.0.1363': attribute type 33 has an invalid length. [ 256.172314][T10474] syzkaller1: entered promiscuous mode [ 256.182637][T10474] syzkaller1: entered allmulticast mode [ 256.266242][T10480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.283269][T10480] netlink: 'syz.2.1365': attribute type 10 has an invalid length. [ 256.416424][T10484] vlan2: entered allmulticast mode [ 256.580506][T10488] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 256.655107][T10485] lo speed is unknown, defaulting to 1000 [ 256.676500][T10490] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 256.879699][T10497] tap0: tun_chr_ioctl cmd 1074025677 [ 256.894037][T10497] tap0: linktype set to 778 [ 256.992288][T10503] netlink: 'syz.0.1375': attribute type 1 has an invalid length. [ 257.104573][T10511] net_ratelimit: 304 callbacks suppressed [ 257.104594][T10511] openvswitch: netlink: Message has 2 unknown bytes. [ 257.158101][T10511] openvswitch: netlink: Actions may not be safe on all matching packets [ 257.475948][T10522] netlink: 'syz.2.1381': attribute type 1 has an invalid length. [ 257.593512][T10524] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 257.804442][T10530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.868380][T10530] netlink: 'syz.3.1385': attribute type 10 has an invalid length. [ 258.096227][T10537] __nla_validate_parse: 10 callbacks suppressed [ 258.096251][T10537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1388'. [ 258.289237][T10539] wlan1: mtu greater than device maximum [ 258.512224][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1391'. [ 258.526162][T10546] vlan3: entered allmulticast mode [ 258.570602][T10550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.599133][T10550] netlink: 'syz.0.1393': attribute type 10 has an invalid length. [ 258.673934][T10548] xt_CT: No such helper "snmp" [ 258.694646][T10554] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.719544][T10556] netlink: 'syz.4.1394': attribute type 1 has an invalid length. [ 258.728138][T10556] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1394'. [ 258.746190][T10554] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.824355][T10554] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.856769][T10563] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 258.864988][T10563] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1396'. [ 258.928188][T10554] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.040939][T10554] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.065122][T10554] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.082371][T10554] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.101593][T10554] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.124743][T10566] tc_dump_action: action bad kind [ 259.503619][T10582] syz1: rxe_newlink: already configured on team_slave_0 [ 259.568436][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 259.583823][T10585] vlan4: entered allmulticast mode [ 259.706128][T10587] netlink: 'syz.0.1405': attribute type 1 has an invalid length. [ 259.715200][T10587] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1405'. [ 259.781679][T10591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1407'. [ 259.803092][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1408'. [ 259.882648][T10595] tipc: Resetting bearer [ 259.912188][T10598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.928329][T10598] netlink: 'syz.3.1409': attribute type 10 has an invalid length. [ 260.103861][T10603] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1408'. [ 260.113235][T10603] nbd: must specify at least one socket [ 260.141086][T10600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1410'. [ 260.390693][ T5841] Bluetooth: hci4: link tx timeout [ 260.397173][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 260.404359][T10613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.406373][ T5843] Bluetooth: hci4: link tx timeout [ 260.421384][ T5843] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 260.432113][ T5843] Bluetooth: hci4: link tx timeout [ 260.437349][ T5843] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 260.444946][T10613] netlink: 'syz.2.1415': attribute type 10 has an invalid length. [ 260.447887][ T5843] Bluetooth: hci4: link tx timeout [ 260.458467][ T5843] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 260.474827][T10613] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.565474][T10613] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.642187][T10613] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.734481][T10613] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.765812][T10617] vlan2: entered allmulticast mode [ 260.807384][T10613] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.824362][T10613] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.840723][T10613] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.863091][T10613] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.962510][T10619] vlan2: entered allmulticast mode [ 261.480839][T10640] vlan4: entered allmulticast mode [ 261.606697][T10645] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 261.611018][T10636] lo speed is unknown, defaulting to 1000 [ 261.699547][T10645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.864787][T10645] bond4: (slave ip6gretap1): making interface the new active one [ 261.908134][T10645] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 261.951969][T10648] vlan2: entered promiscuous mode [ 261.971170][T10648] bond4: entered promiscuous mode [ 261.987295][T10648] ip6gretap1: entered promiscuous mode [ 261.994776][T10648] vlan2: entered allmulticast mode [ 262.002004][T10648] bond4: entered allmulticast mode [ 262.007351][T10648] ip6gretap1: entered allmulticast mode [ 262.411023][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 262.580363][T10669] xt_CT: No such helper "netbios-ns" [ 262.975330][T10692] netlink: 'syz.2.1440': attribute type 2 has an invalid length. [ 262.985811][T10692] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 262.988695][T10691] vlan2: entered allmulticast mode [ 263.005613][T10691] bond0: entered allmulticast mode [ 263.011387][T10691] bond_slave_0: entered allmulticast mode [ 263.017158][T10691] bond_slave_1: entered allmulticast mode [ 263.025797][T10691] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 263.036480][T10691] bond0: left allmulticast mode [ 263.042301][T10691] bond_slave_0: left allmulticast mode [ 263.048045][T10691] bond_slave_1: left allmulticast mode [ 263.054572][T10691] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 263.132618][T10699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.147889][T10698] __nla_validate_parse: 9 callbacks suppressed [ 263.147908][T10698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1443'. [ 263.174834][T10695] rdma_rxe: rxe_newlink: failed to add lo [ 263.468446][T10709] netlink: 'syz.3.1446': attribute type 1 has an invalid length. [ 263.484312][T10709] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1446'. [ 263.648915][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'. [ 263.668914][T10715] vlan2: entered allmulticast mode [ 263.675515][T10715] bond0: entered allmulticast mode [ 263.682796][T10715] bond_slave_0: entered allmulticast mode [ 263.688648][T10715] bond_slave_1: entered allmulticast mode [ 263.696543][T10715] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 263.708586][T10715] bond0: left allmulticast mode [ 263.714346][T10715] bond_slave_0: left allmulticast mode [ 263.721106][T10715] bond_slave_1: left allmulticast mode [ 263.726762][T10715] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 263.937333][T10720] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1450'. [ 263.949752][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 264.110601][T10726] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1452'. [ 264.216400][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 264.294886][T10731] vlan3: entered allmulticast mode [ 264.347516][T10726] infiniband syz0: set active [ 264.353992][T10726] infiniband syz0: set active [ 264.370904][T10726] infiniband syz0: set active [ 264.452608][T10726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.453334][T10739] netlink: 'syz.3.1456': attribute type 10 has an invalid length. [ 264.473134][T10726] nlmon0: entered promiscuous mode [ 264.490093][T10739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1456'. [ 264.530075][T10726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.552186][ T25] lo speed is unknown, defaulting to 1000 [ 264.565597][T10739] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 264.602681][ T25] lo speed is unknown, defaulting to 1000 [ 264.617068][T10745] netlink: 'syz.4.1457': attribute type 1 has an invalid length. [ 264.636848][T10745] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1457'. [ 264.638544][ T5951] lo speed is unknown, defaulting to 1000 [ 264.673007][ T46] lo speed is unknown, defaulting to 1000 [ 264.683532][T10729] lo speed is unknown, defaulting to 1000 [ 264.795310][T10749] netlink: 'syz.3.1460': attribute type 1 has an invalid length. [ 264.807360][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 264.861108][T10751] vlan3: entered allmulticast mode [ 265.054765][T10756] bond0: (slave wlan1): Releasing backup interface [ 265.373819][T10771] vlan4: entered allmulticast mode [ 265.379104][T10771] bond0: entered allmulticast mode [ 265.387737][T10771] bond0: left allmulticast mode [ 265.461563][T10753] netlink: 'syz.0.1462': attribute type 21 has an invalid length. [ 265.475636][T10753] netlink: 'syz.0.1462': attribute type 6 has an invalid length. [ 265.517991][T10768] x_tables: duplicate entry at hook 1 [ 265.615059][T10775] wg1: left promiscuous mode [ 266.150163][T10787] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 266.249338][T10792] netlink: 'syz.0.1474': attribute type 1 has an invalid length. [ 266.638405][T10811] vlan3: entered allmulticast mode [ 266.717824][T10808] syzkaller1: entered promiscuous mode [ 266.749202][T10808] syzkaller1: entered allmulticast mode [ 266.879099][T10825] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 266.889979][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 267.151770][T10812] lo speed is unknown, defaulting to 1000 [ 267.232729][T10840] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 267.242077][T10840] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 267.518042][T10853] GUP no longer grows the stack in syz.0.1495 (10853): 20006000-2000a000 (20005000) [ 267.529632][T10853] CPU: 1 UID: 0 PID: 10853 Comm: syz.0.1495 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 267.540449][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 267.550577][T10853] Call Trace: [ 267.553896][T10853] [ 267.556861][T10853] dump_stack_lvl+0x241/0x360 [ 267.561704][T10853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.566985][T10853] ? __pfx__printk+0x10/0x10 [ 267.571612][T10853] ? find_vma+0xf9/0x170 [ 267.575926][T10853] ? vma_is_secretmem+0xd/0x50 [ 267.580723][T10853] ? check_vma_flags+0x52b/0x5a0 [ 267.585722][T10853] __get_user_pages+0x4385/0x49e0 [ 267.590864][T10853] ? 0xffffffffa0000958 [ 267.595096][T10853] ? __pfx___get_user_pages+0x10/0x10 [ 267.600502][T10853] __gup_longterm_locked+0x49a/0x17f0 [ 267.605880][T10853] ? __pfx___might_resched+0x10/0x10 [ 267.611188][T10853] ? __pfx___gup_longterm_locked+0x10/0x10 [ 267.616990][T10853] ? down_read+0x82b/0xa40 [ 267.621416][T10853] ? is_valid_gup_args+0x124/0x200 [ 267.626634][T10853] pin_user_pages+0x137/0x1f0 [ 267.631318][T10853] ? __pfx_pin_user_pages+0x10/0x10 [ 267.636523][T10853] ? trace_kmalloc+0x1f/0xd0 [ 267.641125][T10853] xdp_umem_create+0x978/0xf30 [ 267.645904][T10853] xsk_setsockopt+0x732/0x950 [ 267.650600][T10853] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.655808][T10853] ? __pfx_lock_acquire+0x10/0x10 [ 267.660941][T10853] ? aa_sock_opt_perm+0x79/0x120 [ 267.665881][T10853] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.671170][T10853] do_sock_setsockopt+0x3af/0x720 [ 267.676201][T10853] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 267.681766][T10853] ? __fget_files+0x395/0x410 [ 267.686492][T10853] ? __fget_files+0x2a/0x410 [ 267.691111][T10853] __x64_sys_setsockopt+0x1ee/0x280 [ 267.696331][T10853] do_syscall_64+0xf3/0x230 [ 267.701761][T10853] ? clear_bhb_loop+0x35/0x90 [ 267.706442][T10853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.712352][T10853] RIP: 0033:0x7f7126385d29 [ 267.716772][T10853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.736418][T10853] RSP: 002b:00007f712726e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 267.744850][T10853] RAX: ffffffffffffffda RBX: 00007f7126575fa0 RCX: 00007f7126385d29 [ 267.752929][T10853] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 267.760919][T10853] RBP: 00007f7126401b08 R08: 0000000000000020 R09: 0000000000000000 [ 267.768916][T10853] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 267.776938][T10853] R13: 0000000000000000 R14: 00007f7126575fa0 R15: 00007fff34d37358 [ 267.784936][T10853] [ 268.014550][T10862] vlan3: entered allmulticast mode [ 268.048958][T10864] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 268.775788][T10894] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 268.838678][T10894] __nla_validate_parse: 17 callbacks suppressed [ 268.838700][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1504'. [ 268.905751][T10900] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 269.001381][T10906] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.1506'. [ 269.033917][T10906] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.1506'. [ 269.248100][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 269.306896][T10916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1510'. [ 269.358733][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'. [ 269.391271][T10919] vlan4: entered allmulticast mode [ 269.402087][T10919] bond0: entered allmulticast mode [ 269.427525][T10919] bond0: left allmulticast mode [ 269.472922][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'. [ 269.769094][T10925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1514'. [ 269.812984][T10930] bridge0: port 1(gretap0) entered blocking state [ 269.820267][T10930] bridge0: port 1(gretap0) entered disabled state [ 269.826969][T10930] gretap0: entered allmulticast mode [ 269.833833][T10930] gretap0: entered promiscuous mode [ 269.847179][T10930] gretap0: left allmulticast mode [ 269.852776][T10930] gretap0: left promiscuous mode [ 269.859679][T10930] bridge0: port 1(gretap0) entered disabled state [ 269.951440][T10925] netlink: 'syz.4.1514': attribute type 11 has an invalid length. [ 269.980376][T10925] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1514'. [ 270.112328][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 270.774061][T10974] ip6tnl2: entered promiscuous mode [ 270.788393][T10974] ip6tnl2: entered allmulticast mode [ 272.248450][T11022] netlink: 'syz.1.1540': attribute type 10 has an invalid length. [ 272.264610][T11022] netlink: 'syz.1.1540': attribute type 10 has an invalid length. [ 273.262984][T11042] netlink: 'syz.4.1546': attribute type 1 has an invalid length. [ 273.297255][T11042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.343759][T11042] bond2: (slave ip6gretap1): making interface the new active one [ 273.357499][T11042] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.374996][T11042] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.386765][T11042] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 273.401729][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.442679][ T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.803491][ T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.826480][T11049] lo speed is unknown, defaulting to 1000 [ 273.931510][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.967027][T11074] netlink: 'syz.4.1552': attribute type 1 has an invalid length. [ 273.988294][T11074] __nla_validate_parse: 11 callbacks suppressed [ 273.988317][T11074] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1552'. [ 274.204864][T11088] ip6tnl0: Master is either lo or non-ether device [ 274.353720][T11094] sctp: [Deprecated]: syz.4.1556 (pid 11094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.353720][T11094] Use struct sctp_sack_info instead [ 274.454929][T11092] ip6tnl3: entered allmulticast mode [ 274.475456][T11096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1554'. [ 274.486633][ T1165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 274.536440][T11096] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.545817][T11096] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.554258][T11096] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.562786][T11096] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.571234][T11096] vxlan0: entered promiscuous mode [ 274.978647][ T3559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.007773][ T3559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.138723][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1560'. [ 275.173910][T11120] netlink: 'syz.1.1561': attribute type 1 has an invalid length. [ 275.212674][T11120] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1561'. [ 275.310279][ T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.338944][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 275.363743][T11131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1562'. [ 275.528803][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 275.542345][T11143] vlan3: entered allmulticast mode [ 275.560248][T11140] netlink: 'syz.2.1565': attribute type 1 has an invalid length. [ 275.568116][T11140] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1565'. [ 275.815550][T11152] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 275.833336][T11152] netlink: 'syz.4.1569': attribute type 9 has an invalid length. [ 275.844705][T11152] netlink: 'syz.4.1569': attribute type 7 has an invalid length. [ 275.856347][T11152] netlink: 'syz.4.1569': attribute type 8 has an invalid length. [ 275.917131][T11154] bridge0: port 1(gretap0) entered blocking state [ 275.936832][T11154] bridge0: port 1(gretap0) entered disabled state [ 275.958649][T11154] gretap0: entered allmulticast mode [ 276.014287][T11161] gretap0: left allmulticast mode [ 276.030080][T11161] bridge0: port 1(gretap0) entered disabled state [ 276.542928][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1575'. [ 276.644883][T11179] netlink: 'syz.0.1576': attribute type 1 has an invalid length. [ 276.675697][T11179] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1576'. [ 276.747289][T11171] lo speed is unknown, defaulting to 1000 [ 276.903170][T11187] bond4: entered promiscuous mode [ 276.908363][T11187] bond4: entered allmulticast mode [ 276.940884][T11187] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.974446][T11189] vlan3: entered allmulticast mode [ 277.366922][T11185] lo speed is unknown, defaulting to 1000 [ 277.858734][T11186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.872051][T11186] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.936106][T11186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.198532][T11223] netlink: 'syz.0.1588': attribute type 39 has an invalid length. [ 278.374638][T11204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.692929][T11240] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 278.832019][T11237] ------------[ cut here ]------------ [ 278.837545][T11237] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 278.837685][T11237] WARNING: CPU: 1 PID: 11237 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 [ 278.853355][T11237] Modules linked in: [ 278.857276][T11237] CPU: 1 UID: 0 PID: 11237 Comm: syz.0.1592 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 278.868331][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 278.878462][T11237] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 278.884066][T11237] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d 6f 40 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 dc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 278.904067][T11237] RSP: 0018:ffffc9001b2570e0 EFLAGS: 00010246 [ 278.910301][T11237] RAX: 9ac0e9849b0da700 RBX: ffff888061836cb0 RCX: 0000000000080000 [ 278.918374][T11237] RDX: ffffc90005022000 RSI: 000000000001e34a RDI: 000000000001e34b [ 278.926691][T11237] RBP: ffffc9001b257270 R08: ffffffff81602ac2 R09: 1ffff110170e519a [ 278.934890][T11237] R10: dffffc0000000000 R11: ffffed10170e519b R12: 0000000000000000 [ 278.943267][T11237] R13: 0000000000000000 R14: 1ffff9200364ae30 R15: dffffc0000000000 [ 278.951320][T11237] FS: 00007f712726e6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 278.960462][T11237] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.967075][T11237] CR2: 0000001b30602ff8 CR3: 000000004e3b6000 CR4: 00000000003526f0 [ 278.975138][T11237] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 278.983339][T11237] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 278.991576][T11237] Call Trace: [ 278.994876][T11237] [ 278.997827][T11237] ? __warn+0x165/0x4d0 [ 279.002386][T11237] ? __mutex_lock+0xdac/0xee0 [ 279.007105][T11237] ? report_bug+0x2b3/0x500 [ 279.011786][T11237] ? __mutex_lock+0xdac/0xee0 [ 279.016601][T11249] __nla_validate_parse: 6 callbacks suppressed [ 279.016618][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'. [ 279.017083][T11237] ? handle_bug+0x60/0x90 [ 279.037452][T11237] ? exc_invalid_op+0x1a/0x50 [ 279.040264][ T11] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 279.040280][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.042514][T11237] ? asm_exc_invalid_op+0x1a/0x20 [ 279.061074][T11237] ? __warn_printk+0x292/0x360 [ 279.065853][T11237] ? __mutex_lock+0xdac/0xee0 [ 279.071058][T11237] ? free_netdev+0x2d9/0x610 [ 279.075677][T11237] ? __pfx___mutex_lock+0x10/0x10 [ 279.081003][T11237] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 279.086430][T11237] ? dev_addr_check+0x6f/0x240 [ 279.091283][T11237] ? dev_addr_flush+0x192/0x210 [ 279.096161][T11237] free_netdev+0x2d9/0x610 [ 279.100851][T11237] netdev_run_todo+0xf21/0x10d0 [ 279.105742][T11237] ? __pfx_netdev_run_todo+0x10/0x10 [ 279.111137][T11237] ? rcu_is_watching+0x15/0xb0 [ 279.115931][T11237] nl80211_post_doit+0x202/0x310 [ 279.121210][T11237] ? __pfx_nl80211_post_doit+0x10/0x10 [ 279.126831][T11237] genl_rcv_msg+0xb60/0xec0 [ 279.131731][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.139681][T11237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.144786][T11237] ? __pfx_lock_acquire+0x10/0x10 [ 279.150117][T11237] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 279.155541][T11237] ? __pfx_nl80211_del_interface+0x10/0x10 [ 279.161429][T11237] ? __pfx_nl80211_post_doit+0x10/0x10 [ 279.166918][T11237] ? __pfx___might_resched+0x10/0x10 [ 279.172490][T11237] netlink_rcv_skb+0x1e3/0x430 [ 279.177292][T11237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.182390][T11237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.187717][T11237] genl_rcv+0x28/0x40 [ 279.191981][T11237] netlink_unicast+0x7f6/0x990 [ 279.196792][T11237] ? __pfx_netlink_unicast+0x10/0x10 [ 279.202160][T11237] ? __virt_addr_valid+0x45f/0x530 [ 279.207300][T11237] ? __phys_addr_symbol+0x2f/0x70 [ 279.212796][T11237] ? __check_object_size+0x47a/0x730 [ 279.218123][T11237] netlink_sendmsg+0x8e4/0xcb0 [ 279.222981][T11237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.228441][T11237] ? aa_sock_msg_perm+0x91/0x160 [ 279.233814][T11237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.239134][T11237] __sock_sendmsg+0x221/0x270 [ 279.243899][T11237] ____sys_sendmsg+0x52a/0x7e0 [ 279.248699][T11237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.254292][T11237] ? __fget_files+0x2a/0x410 [ 279.258940][T11237] ? __fget_files+0x2a/0x410 [ 279.263642][T11237] __sys_sendmsg+0x269/0x350 [ 279.268260][T11237] ? __pfx_futex_wake+0x10/0x10 [ 279.273417][T11237] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.278580][T11237] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.285001][T11237] ? do_syscall_64+0x100/0x230 [ 279.290186][T11237] ? do_syscall_64+0xb6/0x230 [ 279.294902][T11237] do_syscall_64+0xf3/0x230 [ 279.299423][T11237] ? clear_bhb_loop+0x35/0x90 [ 279.304166][T11237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.310340][T11237] RIP: 0033:0x7f7126385d29 [ 279.314772][T11237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.334771][T11237] RSP: 002b:00007f712726e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.343381][T11237] RAX: ffffffffffffffda RBX: 00007f7126575fa0 RCX: 00007f7126385d29 [ 279.351633][T11237] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 279.359631][T11237] RBP: 00007f7126401b08 R08: 0000000000000000 R09: 0000000000000000 [ 279.367703][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.376012][T11237] R13: 0000000000000000 R14: 00007f7126575fa0 R15: 00007fff34d37358 [ 279.384067][T11237] [ 279.387119][T11237] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 279.394404][T11237] CPU: 1 UID: 0 PID: 11237 Comm: syz.0.1592 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 279.405157][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 279.415234][T11237] Call Trace: [ 279.418512][T11237] [ 279.421446][T11237] dump_stack_lvl+0x241/0x360 [ 279.426124][T11237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.431316][T11237] ? __pfx__printk+0x10/0x10 [ 279.435897][T11237] ? _printk+0xd5/0x120 [ 279.440056][T11237] ? __init_begin+0x41000/0x41000 [ 279.445081][T11237] ? vscnprintf+0x5d/0x90 [ 279.449404][T11237] panic+0x349/0x880 [ 279.453297][T11237] ? __warn+0x174/0x4d0 [ 279.457535][T11237] ? __pfx_panic+0x10/0x10 [ 279.461957][T11237] __warn+0x344/0x4d0 [ 279.465943][T11237] ? __mutex_lock+0xdac/0xee0 [ 279.470616][T11237] report_bug+0x2b3/0x500 [ 279.474955][T11237] ? __mutex_lock+0xdac/0xee0 [ 279.479640][T11237] handle_bug+0x60/0x90 [ 279.483796][T11237] exc_invalid_op+0x1a/0x50 [ 279.488299][T11237] asm_exc_invalid_op+0x1a/0x20 [ 279.493148][T11237] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 279.498430][T11237] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d 6f 40 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 dc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 279.518027][T11237] RSP: 0018:ffffc9001b2570e0 EFLAGS: 00010246 [ 279.524104][T11237] RAX: 9ac0e9849b0da700 RBX: ffff888061836cb0 RCX: 0000000000080000 [ 279.532069][T11237] RDX: ffffc90005022000 RSI: 000000000001e34a RDI: 000000000001e34b [ 279.540053][T11237] RBP: ffffc9001b257270 R08: ffffffff81602ac2 R09: 1ffff110170e519a [ 279.548016][T11237] R10: dffffc0000000000 R11: ffffed10170e519b R12: 0000000000000000 [ 279.555986][T11237] R13: 0000000000000000 R14: 1ffff9200364ae30 R15: dffffc0000000000 [ 279.563953][T11237] ? __warn_printk+0x292/0x360 [ 279.568736][T11237] ? free_netdev+0x2d9/0x610 [ 279.573320][T11237] ? __pfx___mutex_lock+0x10/0x10 [ 279.578343][T11237] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 279.583628][T11237] ? dev_addr_check+0x6f/0x240 [ 279.588385][T11237] ? dev_addr_flush+0x192/0x210 [ 279.593228][T11237] free_netdev+0x2d9/0x610 [ 279.597644][T11237] netdev_run_todo+0xf21/0x10d0 [ 279.602488][T11237] ? __pfx_netdev_run_todo+0x10/0x10 [ 279.607770][T11237] ? rcu_is_watching+0x15/0xb0 [ 279.612529][T11237] nl80211_post_doit+0x202/0x310 [ 279.617456][T11237] ? __pfx_nl80211_post_doit+0x10/0x10 [ 279.622906][T11237] genl_rcv_msg+0xb60/0xec0 [ 279.627403][T11237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.632441][T11237] ? __pfx_lock_acquire+0x10/0x10 [ 279.637459][T11237] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 279.642823][T11237] ? __pfx_nl80211_del_interface+0x10/0x10 [ 279.648642][T11237] ? __pfx_nl80211_post_doit+0x10/0x10 [ 279.654122][T11237] ? __pfx___might_resched+0x10/0x10 [ 279.659413][T11237] netlink_rcv_skb+0x1e3/0x430 [ 279.664178][T11237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.669214][T11237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.674529][T11237] genl_rcv+0x28/0x40 [ 279.678517][T11237] netlink_unicast+0x7f6/0x990 [ 279.683284][T11237] ? __pfx_netlink_unicast+0x10/0x10 [ 279.688563][T11237] ? __virt_addr_valid+0x45f/0x530 [ 279.693674][T11237] ? __phys_addr_symbol+0x2f/0x70 [ 279.698704][T11237] ? __check_object_size+0x47a/0x730 [ 279.704008][T11237] netlink_sendmsg+0x8e4/0xcb0 [ 279.708773][T11237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.714055][T11237] ? aa_sock_msg_perm+0x91/0x160 [ 279.718986][T11237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.724265][T11237] __sock_sendmsg+0x221/0x270 [ 279.728934][T11237] ____sys_sendmsg+0x52a/0x7e0 [ 279.733701][T11237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.738984][T11237] ? __fget_files+0x2a/0x410 [ 279.743574][T11237] ? __fget_files+0x2a/0x410 [ 279.748160][T11237] __sys_sendmsg+0x269/0x350 [ 279.752753][T11237] ? __pfx_futex_wake+0x10/0x10 [ 279.757599][T11237] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.762725][T11237] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.769045][T11237] ? do_syscall_64+0x100/0x230 [ 279.773893][T11237] ? do_syscall_64+0xb6/0x230 [ 279.778565][T11237] do_syscall_64+0xf3/0x230 [ 279.783079][T11237] ? clear_bhb_loop+0x35/0x90 [ 279.787750][T11237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.793639][T11237] RIP: 0033:0x7f7126385d29 [ 279.798049][T11237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.818078][T11237] RSP: 002b:00007f712726e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.826501][T11237] RAX: ffffffffffffffda RBX: 00007f7126575fa0 RCX: 00007f7126385d29 [ 279.834465][T11237] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 279.842457][T11237] RBP: 00007f7126401b08 R08: 0000000000000000 R09: 0000000000000000 [ 279.850431][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.858390][T11237] R13: 0000000000000000 R14: 00007f7126575fa0 R15: 00007fff34d37358 [ 279.866378][T11237] [ 279.869797][T11237] Kernel Offset: disabled [ 279.874115][T11237] Rebooting in 86400 seconds..