last executing test programs: 13.014646269s ago: executing program 4 (id=4399): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000003c0)=0x5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xd}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x50}}, 0x0) unshare(0xc000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e220800"], 0x5c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x0, 0x0}, 0x10) 8.061342002s ago: executing program 1 (id=4422): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x5) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}], 0x1, 0x844) 7.793485257s ago: executing program 4 (id=4426): r0 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x24020400) bind$can_raw(r0, 0x0, 0x0) 7.690341899s ago: executing program 1 (id=4427): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x491, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES8=r4, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)={r3}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000000180)=""/78, &(0x7f0000000040)=0x4e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r6}, 0x4c) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8485) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) 7.378443384s ago: executing program 4 (id=4430): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0x0) 7.271993016s ago: executing program 4 (id=4431): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c080}, 0x4000010) 6.726335216s ago: executing program 4 (id=4435): unshare(0x22020600) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000000), 0x4) 6.560576626s ago: executing program 4 (id=4436): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000004c00", @ANYRES32=0x0, @ANYBLOB="210800000000000008001b"], 0x44}, 0x1, 0xffffa888, 0x0, 0x48000}, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x81, 0x4000105, 0x9, 0x8001, 0x9]}, &(0x7f0000000400)=0x54) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) 6.484215014s ago: executing program 2 (id=4437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000017c1b36330e040101000000000000000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ff0f00007b8af0ff0000", @ANYRES32, @ANYBLOB="0000000000000000b705000064810800000085000000a50000009500008ad6120000"], 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, r7, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x50}}, 0x4) close(0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000020605000000000000000000000000060c00078008000640000600000500010006000000050005000a000000050004000000000c000300686173683a697000"], 0x50}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="1401000022000100000000e20000000002"], 0x114}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x26, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x401}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x2e, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x9, 0x6, 0x3, 0x6, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 5.911861717s ago: executing program 1 (id=4442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket(0x11, 0x3, 0x9) getsockopt$bt_BT_SECURITY(r1, 0x107, 0x11, 0x0, 0x20000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a020000000000000000000003000000000300000003"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0xc, 0x4, 0x2, 0x2b, 0x30, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @rr={0x7, 0xf, 0x7d, [@empty, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0xc, 0x38, 0x3, 0x8, [{@rand_addr=0x64010100, 0x9}]}]}}}}}) socket$inet6(0xa, 0x80003, 0xff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) accept4$ax25(r3, &(0x7f0000000300)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0xffffffffffffffb8, 0x80c00) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0) close(0x3) 5.408129841s ago: executing program 2 (id=4446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) listen(r5, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000240)=0x4) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000"], 0xfce) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x80, 0x7800, 0x9, 0x1, {{0x21, 0x4, 0x1, 0x3, 0x84, 0x64, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x2b, 0xdd, [@private=0xa010102, @multicast2, @multicast2, @loopback, @multicast2, @multicast1, @broadcast, @multicast1, @local, @private=0xa010100]}, @noop, @noop, @lsrr={0x83, 0x27, 0x19, [@empty, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @remote, @empty, @private=0xa010102]}, @end, @rr={0x7, 0x17, 0x9f, [@rand_addr=0x64010102, @broadcast, @broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2c}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x88, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x88}}, 0x0) 4.758874361s ago: executing program 2 (id=4451): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @private, @remote}, &(0x7f0000000780)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000036c0)={'syztnl1\x00', &(0x7f0000003740)={'sit0\x00', 0x0, 0x8, 0x7800, 0x8000, 0x5, {{0xb, 0x4, 0x0, 0x3b, 0x2c, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast2, @multicast1, {[@end, @lsrr={0x83, 0xf, 0xad, [@empty, @empty, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @noop]}}}}}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0xc, 0x6, 0x7}]}, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r6, 0x213, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xd7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc5}, 0x42000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d00)=@newtfilter={0x1118, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x10e8, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xfff2}}, @TCA_FLOW_EMATCHES={0x10d4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x64}}, @TCA_EMATCH_TREE_LIST={0x10a0}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x1118}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000073c0)={'vxcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000007400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000007440)=0x14) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r9, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 4.202682177s ago: executing program 2 (id=4453): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket(0x11, 0x3, 0x9) getsockopt$bt_BT_SECURITY(r1, 0x107, 0x11, 0x0, 0x20000002) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a020000000000000000000003000000000300000003"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0xc, 0x4, 0x2, 0x2b, 0x30, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @rr={0x7, 0xf, 0x7d, [@empty, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0xc, 0x38, 0x3, 0x8, [{@rand_addr=0x64010100, 0x9}]}]}}}}}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) accept4$ax25(r3, &(0x7f0000000300)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0xffffffffffffffb8, 0x80c00) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0) close(0x3) 3.38744592s ago: executing program 1 (id=4460): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x5, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendfile(r3, r2, 0x0, 0xffefffff) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x87, 0x19, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x4a, 0x8000, [0x401, 0x0, 0x100, 0x0, 0x0, 0x9]}}, @enc_lim={0x4, 0x1, 0xff}, @generic={0x3a, 0x50, "15a229eb6f47c95c05d11fb8d64e6d870bff186ff1a153bb4e2491ba72172857ec160a95ddcb5e8b624e9de6d01d8e34a1b27bc9a0e04b9408cb8a309bb1807a035ea49b5246bbaa314ec208c723e31a"}, @generic={0xc, 0x34, "024eda6d074e8e7a0b9378caaada5c2afa7ec7da04d996d82d5c8ca6678aa04f6f4ecdaebf9e1ec82ca29692609560d022181320"}, @pad1]}, 0xd0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34}]}, &(0x7f0000002100)=0x10) socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r6, 0x1, 0x70bd29, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x4000000) 3.079098262s ago: executing program 0 (id=4462): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @private, @remote}, &(0x7f0000000780)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000036c0)={'syztnl1\x00', &(0x7f0000003740)={'sit0\x00', 0x0, 0x8, 0x7800, 0x8000, 0x5, {{0xb, 0x4, 0x0, 0x3b, 0x2c, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast2, @multicast1, {[@end, @lsrr={0x83, 0xf, 0xad, [@empty, @empty, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @noop]}}}}}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0xc, 0x6, 0x7}]}, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r6, 0x213, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xd7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc5}, 0x42000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d00)=@newtfilter={0x1118, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x10e8, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xfff2}}, @TCA_FLOW_EMATCHES={0x10d4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x64}}, @TCA_EMATCH_TREE_LIST={0x10a0}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x1118}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000073c0)={'vxcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000007400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000007440)=0x14) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r9, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 2.737435136s ago: executing program 0 (id=4464): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0xd90e89b8c8d33a45}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0xc000) 2.634354632s ago: executing program 0 (id=4465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x1eb) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x3, 0x800000, @mcast1={0xff, 0x4}, 0x1}, 0x1c) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) unshare(0x62040200) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000280)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f0000000680)={'filter\x00', 0x2, [{}, {}]}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xaf}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001940)=""/4102, 0x1006}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x5}], 0x4, 0x20, 0x0) 2.219405437s ago: executing program 1 (id=4466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'syz_tun\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, 0x0, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xffffff35, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) 1.920244997s ago: executing program 3 (id=4467): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x67}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0x30}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000b00)={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000000e00)}}], 0x4, 0x8000) 1.686516296s ago: executing program 3 (id=4468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20044000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000004000000000000000000e00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020900000000ec37e42db055e84f238b7f00000000000000"], 0x10}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x10bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3e505f89, 0x5, 0x200000e4, 0x2, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.493786149s ago: executing program 3 (id=4469): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48804}, 0x10) 1.480755454s ago: executing program 1 (id=4470): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r0 = socket(0x11, 0x3, 0x9) getsockopt$bt_BT_SECURITY(r0, 0x107, 0x11, 0x0, 0x20000002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a020000000000000000000003000000000300000003"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0xc, 0x4, 0x2, 0x2b, 0x30, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @rr={0x7, 0xf, 0x7d, [@empty, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0xc, 0x38, 0x3, 0x8, [{@rand_addr=0x64010100, 0x9}]}]}}}}}) socket$inet6(0xa, 0x80003, 0xff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) accept4$ax25(r2, &(0x7f0000000300)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0xffffffffffffffb8, 0x80c00) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0) close(0x3) 1.310580035s ago: executing program 3 (id=4471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 1.298338758s ago: executing program 2 (id=4472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) listen(r5, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000240)=0x4) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000"], 0xfce) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x80, 0x7800, 0x9, 0x1, {{0x21, 0x4, 0x1, 0x3, 0x84, 0x64, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x2b, 0xdd, [@private=0xa010102, @multicast2, @multicast2, @loopback, @multicast2, @multicast1, @broadcast, @multicast1, @local, @private=0xa010100]}, @noop, @noop, @lsrr={0x83, 0x27, 0x19, [@empty, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @remote, @empty, @private=0xa010102]}, @end, @rr={0x7, 0x17, 0x9f, [@rand_addr=0x64010102, @broadcast, @broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2c}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x88, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x88}}, 0x0) 880.541598ms ago: executing program 3 (id=4473): r0 = socket(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) shutdown(r2, 0x0) write(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x80000002, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8004) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x1ac, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@empty}]}]}, 0x1ac}}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x6, 0x3, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4004) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) sendmsg$nl_route_sched(r0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2b, 'rdma'}, {0x2d, 'net'}, {0x2b, 'net_prio'}, {0x2d, 'memory'}, {0x2d, 'perf_event'}, {0x2d, 'freezer'}, {0x2d, 'rdma'}]}, 0x47) 347.109035ms ago: executing program 0 (id=4474): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 244.088756ms ago: executing program 0 (id=4475): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0xffe0}}}}}}}, 0x0) 243.377774ms ago: executing program 3 (id=4476): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x5, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendfile(r3, r2, 0x0, 0xffefffff) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x87, 0x19, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x4a, 0x8000, [0x401, 0x0, 0x100, 0x0, 0x0, 0x9]}}, @enc_lim={0x4, 0x1, 0xff}, @generic={0x3a, 0x50, "15a229eb6f47c95c05d11fb8d64e6d870bff186ff1a153bb4e2491ba72172857ec160a95ddcb5e8b624e9de6d01d8e34a1b27bc9a0e04b9408cb8a309bb1807a035ea49b5246bbaa314ec208c723e31a"}, @generic={0xc, 0x34, "024eda6d074e8e7a0b9378caaada5c2afa7ec7da04d996d82d5c8ca6678aa04f6f4ecdaebf9e1ec82ca29692609560d022181320"}, @pad1]}, 0xd0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34}]}, &(0x7f0000002100)=0x10) socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r6, 0x1, 0x70bd29, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x4000000) 103.355056ms ago: executing program 2 (id=4477): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0x1, 0x4) 0s ago: executing program 0 (id=4478): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7", @ANYBLOB="0000000000000000b705000064810800000085000000a5000000950000"], 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, r4, 0x400, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x50}}, 0x4) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000020605000000000000000000000000060c00078008000640000600000500010006000000050005000a000000050004000000000c000300686173683a697000"], 0x50}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="1401000022000100000000e20000000002"], 0x114}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x26, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x401}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): 4858][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3145'. [ 673.108523][T17543] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3147'. [ 673.121278][T17543] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3147'. [ 673.139718][T17543] xt_bpf: check failed: parse error [ 673.508389][T17555] netlink: 'syz.2.3150': attribute type 4 has an invalid length. [ 673.534407][T17552] lo speed is unknown, defaulting to 1000 [ 673.559034][T17552] lo speed is unknown, defaulting to 1000 [ 674.463056][T17585] netlink: 'syz.1.3159': attribute type 4 has an invalid length. [ 674.498697][T17588] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input47 [ 674.599231][T17552] lo speed is unknown, defaulting to 1000 [ 675.215843][T17600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3149'. [ 675.389380][T17605] IPVS: length: 78 != 8 [ 675.470909][T17603] lo speed is unknown, defaulting to 1000 [ 675.479358][T17603] lo speed is unknown, defaulting to 1000 [ 675.727656][T17603] lo speed is unknown, defaulting to 1000 [ 677.243326][T17634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3170'. [ 677.318343][T17634] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3170'. [ 677.400677][T17629] xt_bpf: check failed: parse error [ 678.300462][T17655] lo speed is unknown, defaulting to 1000 [ 678.341670][T17655] lo speed is unknown, defaulting to 1000 [ 678.516035][T17655] lo speed is unknown, defaulting to 1000 [ 678.857101][T17664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3180'. [ 678.907252][T17662] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3180'. [ 679.004087][T17662] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3180'. [ 679.068800][T17662] xt_bpf: check failed: parse error [ 679.839043][T17649] IPVS: length: 78 != 8 [ 679.928027][T17670] lo speed is unknown, defaulting to 1000 [ 680.003955][T17670] lo speed is unknown, defaulting to 1000 [ 680.125192][T17681] lo speed is unknown, defaulting to 1000 [ 680.389137][T17677] lo speed is unknown, defaulting to 1000 [ 680.389608][T17681] lo speed is unknown, defaulting to 1000 [ 680.429326][T17688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3187'. [ 680.441564][T17688] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3187'. [ 680.445564][T17677] lo speed is unknown, defaulting to 1000 [ 680.472534][T17688] xt_bpf: check failed: parse error [ 680.969093][T17670] lo speed is unknown, defaulting to 1000 [ 681.361138][T17698] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input48 [ 681.395327][T17695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3182'. [ 681.730821][T17681] lo speed is unknown, defaulting to 1000 [ 682.102754][T17677] lo speed is unknown, defaulting to 1000 [ 683.369982][T17741] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input49 [ 683.424545][T17743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3199'. [ 683.505618][T17738] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3199'. [ 683.540357][T17724] tipc: Enabling of bearer rejected, failed to enable media [ 683.583343][T17743] xt_bpf: check failed: parse error [ 683.938582][T17757] lo speed is unknown, defaulting to 1000 [ 683.946861][T17757] lo speed is unknown, defaulting to 1000 [ 684.314497][T17757] lo speed is unknown, defaulting to 1000 [ 684.791041][T17768] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input50 [ 684.866391][T17766] lo speed is unknown, defaulting to 1000 [ 684.932580][T17766] lo speed is unknown, defaulting to 1000 [ 684.940914][T17778] lo speed is unknown, defaulting to 1000 [ 685.035382][T17778] lo speed is unknown, defaulting to 1000 [ 685.444804][T17766] lo speed is unknown, defaulting to 1000 [ 685.777183][T17791] lo speed is unknown, defaulting to 1000 [ 685.814537][T17791] lo speed is unknown, defaulting to 1000 [ 685.814721][T17786] lo speed is unknown, defaulting to 1000 [ 685.924918][T17778] lo speed is unknown, defaulting to 1000 [ 686.156220][T17786] lo speed is unknown, defaulting to 1000 [ 686.588084][T17799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3213'. [ 686.885624][T17786] lo speed is unknown, defaulting to 1000 [ 687.096006][T17801] tipc: Enabling of bearer rejected, failed to enable media [ 687.112882][T17791] lo speed is unknown, defaulting to 1000 [ 688.057635][T17812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3217'. [ 688.088219][T17812] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3217'. [ 688.116391][T17812] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3217'. [ 688.159731][T17810] xt_bpf: check failed: parse error [ 688.225357][T17815] lo speed is unknown, defaulting to 1000 [ 688.233276][T17815] lo speed is unknown, defaulting to 1000 [ 688.541009][T17815] lo speed is unknown, defaulting to 1000 [ 689.464301][T17829] lo speed is unknown, defaulting to 1000 [ 689.493486][T17829] lo speed is unknown, defaulting to 1000 [ 689.536400][T17834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3225'. [ 689.702288][T17834] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3225'. [ 689.916545][T17837] tipc: Enabling of bearer rejected, already enabled [ 689.941476][T17841] lo speed is unknown, defaulting to 1000 [ 689.978252][T17841] lo speed is unknown, defaulting to 1000 [ 690.149044][T17829] lo speed is unknown, defaulting to 1000 [ 690.241321][T17853] netlink: 'syz.0.3231': attribute type 4 has an invalid length. [ 690.251219][T17853] netlink: 'syz.0.3231': attribute type 4 has an invalid length. [ 690.263276][ T5842] lo speed is unknown, defaulting to 1000 [ 690.860043][T17861] lo speed is unknown, defaulting to 1000 [ 690.946842][T17861] lo speed is unknown, defaulting to 1000 [ 690.953499][T17841] lo speed is unknown, defaulting to 1000 [ 690.993919][T17844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3228'. [ 691.166341][T17844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 691.228413][T17863] lo speed is unknown, defaulting to 1000 [ 691.265379][T17863] lo speed is unknown, defaulting to 1000 [ 691.513791][T17871] lo speed is unknown, defaulting to 1000 [ 691.521252][T17871] lo speed is unknown, defaulting to 1000 [ 691.738422][T17876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3237'. [ 691.932392][T17861] lo speed is unknown, defaulting to 1000 [ 691.975345][T17880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3239'. [ 692.007523][T17880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3239'. [ 692.427859][T17863] lo speed is unknown, defaulting to 1000 [ 692.733406][T17892] pim6reg: entered allmulticast mode [ 692.743815][T17892] pim6reg: left allmulticast mode [ 692.780755][T17871] lo speed is unknown, defaulting to 1000 [ 693.396660][T17899] lo speed is unknown, defaulting to 1000 [ 693.445749][T17899] lo speed is unknown, defaulting to 1000 [ 694.058303][T17904] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input51 [ 694.293058][T17899] lo speed is unknown, defaulting to 1000 [ 694.388942][T17914] syzkaller1: entered promiscuous mode [ 694.394930][T17914] syzkaller1: entered allmulticast mode [ 694.477323][T17917] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 694.752470][T17930] syzkaller1: left promiscuous mode [ 694.758343][T17930] syzkaller1: left allmulticast mode [ 694.803401][T17927] lo speed is unknown, defaulting to 1000 [ 694.810459][T17927] lo speed is unknown, defaulting to 1000 [ 695.183292][T17946] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input52 [ 695.368759][T17950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3254'. [ 695.753280][ T6043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.766046][T17927] lo speed is unknown, defaulting to 1000 [ 695.799575][ T6043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.036866][T17964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3264'. [ 696.097376][T17964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 696.548951][T17962] lo speed is unknown, defaulting to 1000 [ 696.569164][T17966] lo speed is unknown, defaulting to 1000 [ 696.579377][T17962] lo speed is unknown, defaulting to 1000 [ 696.699507][T17966] lo speed is unknown, defaulting to 1000 [ 697.051589][T17962] lo speed is unknown, defaulting to 1000 [ 697.313021][T17966] lo speed is unknown, defaulting to 1000 [ 697.434127][T17986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3269'. [ 697.522175][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 697.696079][T17983] lo speed is unknown, defaulting to 1000 [ 697.912805][T17983] lo speed is unknown, defaulting to 1000 [ 698.492288][T18002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3272'. [ 698.647802][T17983] lo speed is unknown, defaulting to 1000 [ 698.655849][T17995] lo speed is unknown, defaulting to 1000 [ 698.746704][T17995] lo speed is unknown, defaulting to 1000 [ 698.829536][T18004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3274'. [ 698.854370][T17997] tipc: Enabling of bearer rejected, failed to enable media [ 698.859122][T18004] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3274'. [ 698.914821][T18004] xt_bpf: check failed: parse error [ 699.452171][T17995] lo speed is unknown, defaulting to 1000 [ 699.602237][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 699.955607][T18015] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.128941][T18015] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.650146][T18015] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.829873][T18029] IPVS: length: 78 != 8 [ 700.880597][T18015] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.954668][T18031] lo speed is unknown, defaulting to 1000 [ 701.000035][T18031] lo speed is unknown, defaulting to 1000 [ 701.006152][T18032] IPVS: length: 78 != 8 [ 701.192930][T18015] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.263900][T18015] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.350809][T18015] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.440412][T18015] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.787573][T18043] lo speed is unknown, defaulting to 1000 [ 701.794947][T18043] lo speed is unknown, defaulting to 1000 [ 701.994202][T18031] lo speed is unknown, defaulting to 1000 [ 702.632303][T18043] lo speed is unknown, defaulting to 1000 [ 703.276066][T18077] lo speed is unknown, defaulting to 1000 [ 703.295520][T18077] lo speed is unknown, defaulting to 1000 [ 704.141468][T18096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3297'. [ 704.268732][T18098] IPVS: length: 78 != 8 [ 704.291544][T18077] lo speed is unknown, defaulting to 1000 [ 705.240304][T18078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3294'. [ 705.295519][T18085] lo speed is unknown, defaulting to 1000 [ 705.361277][T18085] lo speed is unknown, defaulting to 1000 [ 705.897034][T18106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3303'. [ 706.331143][T18085] lo speed is unknown, defaulting to 1000 [ 707.254395][T18135] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input53 [ 707.547642][T18141] IPVS: length: 78 != 8 [ 707.717191][T18128] lo speed is unknown, defaulting to 1000 [ 707.851160][T18128] lo speed is unknown, defaulting to 1000 [ 708.028718][T18144] lo speed is unknown, defaulting to 1000 [ 708.100337][T18144] lo speed is unknown, defaulting to 1000 [ 708.271518][T18153] lo speed is unknown, defaulting to 1000 [ 708.301670][T18153] lo speed is unknown, defaulting to 1000 [ 708.383567][T18128] lo speed is unknown, defaulting to 1000 [ 708.707040][T18144] lo speed is unknown, defaulting to 1000 [ 709.170674][T18153] lo speed is unknown, defaulting to 1000 [ 709.393283][T18161] lo speed is unknown, defaulting to 1000 [ 709.485623][T18161] lo speed is unknown, defaulting to 1000 [ 709.839071][T18161] lo speed is unknown, defaulting to 1000 [ 710.487195][T18179] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input54 [ 710.737294][T18184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3325'. [ 711.017225][T18194] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input55 [ 711.777413][T18221] lo speed is unknown, defaulting to 1000 [ 711.788711][T18221] lo speed is unknown, defaulting to 1000 [ 712.094831][ T53] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 712.118239][T18221] lo speed is unknown, defaulting to 1000 [ 712.565182][T18240] lo speed is unknown, defaulting to 1000 [ 712.574046][T18240] lo speed is unknown, defaulting to 1000 [ 712.823020][T18240] lo speed is unknown, defaulting to 1000 [ 713.749226][T18267] geneve3: entered promiscuous mode [ 713.792209][T18267] geneve3: entered allmulticast mode [ 713.847741][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3353'. [ 713.858178][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3353'. [ 714.199844][T18281] lo speed is unknown, defaulting to 1000 [ 714.245344][T18281] lo speed is unknown, defaulting to 1000 [ 714.297196][T18287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3357'. [ 714.308955][T18287] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3357'. [ 714.323759][T18287] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3357'. [ 714.343601][T18287] xt_bpf: check failed: parse error [ 714.578087][T18294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3356'. [ 715.428625][T18281] lo speed is unknown, defaulting to 1000 [ 715.683720][T18314] IPVS: length: 78 != 8 [ 716.449024][T18317] IPVS: length: 78 != 8 [ 716.612350][T18335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3371'. [ 716.627038][T18335] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3371'. [ 716.639456][T18335] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3371'. [ 716.653156][T18335] xt_bpf: check failed: parse error [ 717.529382][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3379'. [ 717.949063][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3383'. [ 718.205621][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.251162][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.454488][T18380] IPVS: length: 78 != 8 [ 718.685946][T18383] syzkaller1: entered promiscuous mode [ 718.695805][T18383] syzkaller1: entered allmulticast mode [ 718.796583][T18390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3389'. [ 718.819866][T18386] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3389'. [ 718.889979][T18386] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3389'. [ 718.928408][T18386] xt_bpf: check failed: parse error [ 719.080461][T18399] netlink: 'syz.2.3393': attribute type 4 has an invalid length. [ 719.096852][T18395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3394'. [ 719.113707][T18399] netlink: 'syz.2.3393': attribute type 4 has an invalid length. [ 719.128122][ T10] lo speed is unknown, defaulting to 1000 [ 719.135703][T18395] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3394'. [ 719.140884][T18398] lo speed is unknown, defaulting to 1000 [ 719.158345][T18395] xt_bpf: check failed: parse error [ 719.205665][T18398] lo speed is unknown, defaulting to 1000 [ 719.971001][T18398] lo speed is unknown, defaulting to 1000 [ 719.977363][T18413] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input56 [ 720.155714][T18425] xt_bpf: check failed: parse error [ 721.331097][T18450] netlink: 'syz.3.3406': attribute type 4 has an invalid length. [ 721.380569][T18446] netlink: 'syz.3.3406': attribute type 4 has an invalid length. [ 721.516960][T18452] xt_bpf: check failed: parse error [ 721.624013][T18457] bond0: entered promiscuous mode [ 721.629478][T18457] bond0: entered allmulticast mode [ 721.635586][T18457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.538521][ T6043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.702298][ T6043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.845641][T18488] netlink: 'syz.3.3418': attribute type 4 has an invalid length. [ 722.870000][T18488] netlink: 'syz.3.3418': attribute type 4 has an invalid length. [ 723.171318][T18496] __nla_validate_parse: 8 callbacks suppressed [ 723.171348][T18496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3419'. [ 723.226023][T18496] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3419'. [ 723.241117][T18496] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3419'. [ 723.317738][T18498] xt_bpf: check failed: parse error [ 723.341832][T18492] IPVS: length: 78 != 8 [ 723.472047][T18501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3422'. [ 723.932402][T18520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.951306][T18514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3426'. [ 723.975554][T18511] lo speed is unknown, defaulting to 1000 [ 724.000303][T18514] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3426'. [ 724.038933][T18511] lo speed is unknown, defaulting to 1000 [ 724.050878][T18514] xt_bpf: check failed: parse error [ 724.678928][T18511] lo speed is unknown, defaulting to 1000 [ 725.508115][ T6051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.529944][ T6051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.595807][T18592] lo speed is unknown, defaulting to 1000 [ 726.613260][T18592] lo speed is unknown, defaulting to 1000 [ 726.982917][T18592] lo speed is unknown, defaulting to 1000 [ 727.332132][ T6073] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 728.016695][T18626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3461'. [ 728.059464][T18629] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.457279][T18629] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.698220][T18629] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.749410][T18653] lo speed is unknown, defaulting to 1000 [ 728.752241][T18642] IPVS: length: 78 != 8 [ 728.802459][T18653] lo speed is unknown, defaulting to 1000 [ 728.811305][T18629] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.114490][T18629] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.157441][T18664] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input57 [ 729.195995][T18659] lo speed is unknown, defaulting to 1000 [ 729.304201][T18629] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.331676][T18629] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.341428][T18659] lo speed is unknown, defaulting to 1000 [ 729.348508][T18629] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.410885][T18661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3468'. [ 729.729858][T18674] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3475'. [ 729.756268][T18674] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 730.015507][T18687] lo speed is unknown, defaulting to 1000 [ 730.034087][T18687] lo speed is unknown, defaulting to 1000 [ 730.054874][T18653] lo speed is unknown, defaulting to 1000 [ 730.758504][T18659] lo speed is unknown, defaulting to 1000 [ 730.942088][T18687] lo speed is unknown, defaulting to 1000 [ 732.255810][T18722] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3487'. [ 732.267720][T18722] netlink: 'syz.0.3487': attribute type 1 has an invalid length. [ 732.396961][T18726] ipip0: entered promiscuous mode [ 732.773059][T18731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3490'. [ 732.801770][T18731] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3490'. [ 732.863737][T18731] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3490'. [ 733.699186][T18752] lo speed is unknown, defaulting to 1000 [ 733.707459][T18752] lo speed is unknown, defaulting to 1000 [ 733.846890][T18752] lo speed is unknown, defaulting to 1000 [ 734.030726][T18758] lo speed is unknown, defaulting to 1000 [ 734.151043][T18758] lo speed is unknown, defaulting to 1000 [ 734.288174][T18750] tipc: Enabling of bearer rejected, failed to enable media [ 734.509953][T18776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3504'. [ 734.677553][T18769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3500'. [ 734.953139][T18758] lo speed is unknown, defaulting to 1000 [ 735.153092][T18791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3510'. [ 735.187563][T18791] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3510'. [ 735.230653][T18791] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3510'. [ 735.273767][T18791] xt_bpf: check failed: parse error [ 735.676764][T18803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3513'. [ 736.106831][T18808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3516'. [ 736.274163][T18813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3518'. [ 736.288056][T18813] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3518'. [ 736.306819][T18813] xt_bpf: check failed: parse error [ 736.313769][T18798] lo speed is unknown, defaulting to 1000 [ 736.321137][T18798] lo speed is unknown, defaulting to 1000 [ 736.672017][T18798] lo speed is unknown, defaulting to 1000 [ 737.122118][T18811] tipc: Bearer : already 2 bearers with priority 10 [ 737.141315][T18811] tipc: Bearer : trying with adjusted priority [ 737.162062][T18811] tipc: Enabling of bearer rejected, failed to enable media [ 737.592990][T18826] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input58 [ 738.259120][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3524'. [ 738.738189][T18849] lo speed is unknown, defaulting to 1000 [ 738.757499][T18849] lo speed is unknown, defaulting to 1000 [ 738.794736][T18853] lo speed is unknown, defaulting to 1000 [ 739.056232][T18853] lo speed is unknown, defaulting to 1000 [ 739.183382][T18869] xt_bpf: check failed: parse error [ 739.296056][T18866] tipc: Enabling of bearer rejected, already enabled [ 739.855460][T18849] lo speed is unknown, defaulting to 1000 [ 739.932138][T18882] netlink: 'syz.0.3535': attribute type 4 has an invalid length. [ 740.021164][T18886] netlink: 'syz.1.3536': attribute type 1 has an invalid length. [ 740.069315][T18886] bond7: entered promiscuous mode [ 740.088239][T18886] bond7: entered allmulticast mode [ 740.111247][T18886] batadv1: entered promiscuous mode [ 740.164124][T18886] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 740.226067][T18886] bond7: (slave batadv1): making interface the new active one [ 740.262402][T18886] batadv1: entered allmulticast mode [ 740.269179][T18886] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 740.521511][ T6051] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 740.710724][T18853] lo speed is unknown, defaulting to 1000 [ 741.963951][T18917] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input59 [ 742.131798][T18915] lo speed is unknown, defaulting to 1000 [ 742.153904][T18915] lo speed is unknown, defaulting to 1000 [ 742.578506][T18915] lo speed is unknown, defaulting to 1000 [ 742.600906][T18933] lo speed is unknown, defaulting to 1000 [ 742.611232][T18933] lo speed is unknown, defaulting to 1000 [ 742.945675][T18933] lo speed is unknown, defaulting to 1000 [ 743.185259][T18950] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 743.212975][T18950] __nla_validate_parse: 5 callbacks suppressed [ 743.213002][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3557'. [ 743.622775][T18951] lo speed is unknown, defaulting to 1000 [ 743.691048][T18951] lo speed is unknown, defaulting to 1000 [ 743.926726][T18951] lo speed is unknown, defaulting to 1000 [ 744.597089][T18973] lo speed is unknown, defaulting to 1000 [ 744.604646][T18973] lo speed is unknown, defaulting to 1000 [ 744.787005][T18973] lo speed is unknown, defaulting to 1000 [ 744.825364][T18978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3565'. [ 745.452112][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 745.978905][T18996] lo speed is unknown, defaulting to 1000 [ 745.986413][T18996] lo speed is unknown, defaulting to 1000 [ 746.132989][T18996] lo speed is unknown, defaulting to 1000 [ 746.356909][T19001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3573'. [ 746.389093][T19001] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3573'. [ 746.487830][T19001] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3573'. [ 746.537763][T19001] xt_bpf: check failed: parse error [ 746.629475][T19005] lo speed is unknown, defaulting to 1000 [ 746.871085][T19005] lo speed is unknown, defaulting to 1000 [ 746.975447][T19014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3574'. [ 748.042211][T19039] tipc: Enabling of bearer rejected, already enabled [ 748.594298][T19064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 748.605913][T19005] lo speed is unknown, defaulting to 1000 [ 748.643791][T19070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3590'. [ 748.662502][T19070] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3590'. [ 748.674222][T19070] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3590'. [ 748.687100][T19070] xt_bpf: check failed: parse error [ 748.884104][T19077] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input60 [ 749.548518][T18829] udevd[18829]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 749.594737][T18829] udevd[18829]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 749.879483][T19085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'. [ 749.909223][T19085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.991277][T19087] lo speed is unknown, defaulting to 1000 [ 750.011252][T19087] lo speed is unknown, defaulting to 1000 [ 750.054209][T19085] lo speed is unknown, defaulting to 1000 [ 750.106403][T19085] lo speed is unknown, defaulting to 1000 [ 750.153138][T19073] lo speed is unknown, defaulting to 1000 [ 750.160526][T19073] lo speed is unknown, defaulting to 1000 [ 750.243038][T19087] lo speed is unknown, defaulting to 1000 [ 750.439179][T19085] lo speed is unknown, defaulting to 1000 [ 750.764641][T19074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3591'. [ 751.254912][T19112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3599'. [ 751.304449][T19112] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3599'. [ 751.317060][T19073] lo speed is unknown, defaulting to 1000 [ 751.386095][T19114] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3599'. [ 751.453889][T19112] xt_bpf: check failed: parse error [ 751.900203][T19101] tipc: Enabling of bearer rejected, failed to enable media [ 752.752249][ T6043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.760297][ T6043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.814804][T19135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3604'. [ 753.089994][T19126] lo speed is unknown, defaulting to 1000 [ 753.242935][T19126] lo speed is unknown, defaulting to 1000 [ 753.350529][T19147] lo speed is unknown, defaulting to 1000 [ 753.409422][T19147] lo speed is unknown, defaulting to 1000 [ 753.409422][T19156] lo speed is unknown, defaulting to 1000 [ 753.423579][T19156] lo speed is unknown, defaulting to 1000 [ 753.653819][T19163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3613'. [ 754.545272][T19126] lo speed is unknown, defaulting to 1000 [ 754.791228][T19171] lo speed is unknown, defaulting to 1000 [ 754.823029][T19171] lo speed is unknown, defaulting to 1000 [ 755.064994][T19147] lo speed is unknown, defaulting to 1000 [ 755.450887][T19156] lo speed is unknown, defaulting to 1000 [ 755.630229][T19180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3616'. [ 755.777098][T19171] lo speed is unknown, defaulting to 1000 [ 755.826971][T19184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3620'. [ 756.147555][T19189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 756.834384][T19190] lo speed is unknown, defaulting to 1000 [ 756.898404][T19190] lo speed is unknown, defaulting to 1000 [ 757.386882][T19190] lo speed is unknown, defaulting to 1000 [ 757.909990][T19205] lo speed is unknown, defaulting to 1000 [ 757.925892][T19205] lo speed is unknown, defaulting to 1000 [ 758.084428][T19217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3630'. [ 758.421664][T19205] lo speed is unknown, defaulting to 1000 [ 758.649551][T19225] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3632'. [ 759.336009][T19240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3638'. [ 759.425497][T19237] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3638'. [ 759.440969][T19237] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3638'. [ 759.741541][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3640'. [ 760.194040][T19253] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.3644'. [ 760.271364][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3645'. [ 760.325217][T19260] lo speed is unknown, defaulting to 1000 [ 760.332587][T19260] lo speed is unknown, defaulting to 1000 [ 760.444874][T19260] lo speed is unknown, defaulting to 1000 [ 760.674895][T19262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3646'. [ 761.046601][T19273] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 761.230932][T19268] lo speed is unknown, defaulting to 1000 [ 761.390216][T19268] lo speed is unknown, defaulting to 1000 [ 761.452253][T19282] lo speed is unknown, defaulting to 1000 [ 761.489016][T19282] lo speed is unknown, defaulting to 1000 [ 762.253118][T19268] lo speed is unknown, defaulting to 1000 [ 762.377325][T19295] lo speed is unknown, defaulting to 1000 [ 762.401170][T19295] lo speed is unknown, defaulting to 1000 [ 762.658693][T19282] lo speed is unknown, defaulting to 1000 [ 763.159588][T19295] lo speed is unknown, defaulting to 1000 [ 764.618023][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3667'. [ 765.161557][T19345] lo speed is unknown, defaulting to 1000 [ 765.173765][T19345] lo speed is unknown, defaulting to 1000 [ 765.335270][T19344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3671'. [ 765.350537][T19345] lo speed is unknown, defaulting to 1000 [ 765.394831][T19344] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3671'. [ 765.482152][T19347] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3671'. [ 765.580239][T19344] xt_bpf: check failed: parse error [ 765.664297][T19350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3672'. [ 765.863323][T19358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3672'. [ 765.894394][T19360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3675'. [ 766.335050][T19367] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input61 [ 766.685356][T19381] netlink: 'syz.3.3680': attribute type 3 has an invalid length. [ 766.711794][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3680'. [ 767.008328][T19394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3687'. [ 767.048022][T19396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3686'. [ 767.067906][T19396] xt_bpf: check failed: parse error [ 767.127371][T19399] IPVS: length: 78 != 8 [ 768.174646][T19421] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input62 [ 768.478564][T19434] lo speed is unknown, defaulting to 1000 [ 768.496896][T19434] lo speed is unknown, defaulting to 1000 [ 768.518622][T19439] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input63 [ 768.957152][T19452] xt_bpf: check failed: parse error [ 769.060023][T19456] IPVS: length: 78 != 8 [ 769.449447][T19434] lo speed is unknown, defaulting to 1000 [ 770.625547][T19495] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input64 [ 774.169031][T19499] __nla_validate_parse: 8 callbacks suppressed [ 774.169057][T19499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3713'. [ 774.196915][T19499] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3713'. [ 774.223938][T19499] xt_bpf: check failed: parse error [ 774.308967][T19502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3715'. [ 774.997051][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3714'. [ 775.242231][T19515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3718'. [ 775.266348][T19517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 775.276581][T19515] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3718'. [ 775.306057][T19515] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3718'. [ 775.319396][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 775.328992][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 775.345597][T19515] xt_bpf: check failed: parse error [ 775.893079][T19533] netlink: 'syz.3.3722': attribute type 10 has an invalid length. [ 775.901009][T19533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3722'. [ 776.076512][T19538] IPVS: length: 78 != 8 [ 776.077104][T19535] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.117988][T19533] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 776.180311][T19541] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input65 [ 776.274772][T19535] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.414444][T19535] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.485303][T19549] bridge: RTM_NEWNEIGH with invalid ether address [ 776.520479][T19535] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.582880][T19551] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 776.590648][T19551] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 776.759692][T19535] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.781235][T19535] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.849125][T19535] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.888811][T19555] lo speed is unknown, defaulting to 1000 [ 776.897858][T19555] lo speed is unknown, defaulting to 1000 [ 776.964518][T19535] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.012710][T19555] lo speed is unknown, defaulting to 1000 [ 777.027364][T19558] lo speed is unknown, defaulting to 1000 [ 777.148308][T19558] lo speed is unknown, defaulting to 1000 [ 777.623541][T19572] xt_bpf: check failed: parse error [ 778.365584][T19558] lo speed is unknown, defaulting to 1000 [ 778.961404][T19586] lo speed is unknown, defaulting to 1000 [ 779.068956][T19586] lo speed is unknown, defaulting to 1000 [ 779.414292][T19586] lo speed is unknown, defaulting to 1000 [ 779.825230][T19598] lo speed is unknown, defaulting to 1000 [ 779.884767][T19598] lo speed is unknown, defaulting to 1000 [ 780.285370][T19609] __nla_validate_parse: 3 callbacks suppressed [ 780.285409][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 780.297454][T19598] lo speed is unknown, defaulting to 1000 [ 780.307453][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3747'. [ 780.342148][T19609] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3747'. [ 780.404155][ T5845] block nbd0: Receive control failed (result -107) [ 780.430040][T19615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3749'. [ 780.441706][T19615] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3749'. [ 780.472136][T19609] nbd0: detected capacity change from 0 to 256 [ 780.492817][T19518] block nbd0: Dead connection, failed to find a fallback [ 780.501831][T19614] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3749'. [ 780.510947][T19518] block nbd0: shutting down sockets [ 780.517595][T19518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 780.537879][T19614] xt_bpf: check failed: parse error [ 780.567962][T19518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 780.580784][T19518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 780.611370][T19518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 780.621847][T19518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 780.647587][T19611] lo speed is unknown, defaulting to 1000 [ 780.674901][T19518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 780.690532][T19518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 780.699794][T19518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 780.708163][T19518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 780.742233][T19518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 780.765745][T19611] lo speed is unknown, defaulting to 1000 [ 780.782133][T19518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 780.798195][T19518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 780.807096][T19518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 780.816774][T19518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 780.828949][T19518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 780.845138][T19518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 780.853160][T19518] ldm_validate_partition_table(): Disk read failed. [ 780.860733][T19518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 780.871210][T19518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 780.879469][T19518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 780.889036][T19518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 780.900244][T19518] Dev nbd0: unable to read RDB block 0 [ 780.906419][T19518] nbd0: unable to read partition table [ 780.925305][T19518] ldm_validate_partition_table(): Disk read failed. [ 780.932840][T19518] Dev nbd0: unable to read RDB block 0 [ 780.939740][T19518] nbd0: unable to read partition table [ 781.429384][T19612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3748'. [ 781.489188][T19631] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3752'. [ 781.501367][T19628] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3752'. [ 781.597783][T19612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 781.701203][T19611] lo speed is unknown, defaulting to 1000 [ 781.969745][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3756'. [ 781.985016][T19644] ipvlan2: entered promiscuous mode [ 782.499548][T19629] lo speed is unknown, defaulting to 1000 [ 782.682290][T19629] lo speed is unknown, defaulting to 1000 [ 782.896729][T19658] lo speed is unknown, defaulting to 1000 [ 782.987154][T19658] lo speed is unknown, defaulting to 1000 [ 783.308152][T19660] lo speed is unknown, defaulting to 1000 [ 783.325347][T19665] lo speed is unknown, defaulting to 1000 [ 783.331503][T19660] lo speed is unknown, defaulting to 1000 [ 783.340056][T19665] lo speed is unknown, defaulting to 1000 [ 783.414945][T19629] lo speed is unknown, defaulting to 1000 [ 783.883689][T19660] lo speed is unknown, defaulting to 1000 [ 783.977969][T19658] lo speed is unknown, defaulting to 1000 [ 784.156726][T19665] lo speed is unknown, defaulting to 1000 [ 784.679982][ T6061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.688850][ T6061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.399038][T19696] __nla_validate_parse: 1 callbacks suppressed [ 785.399069][T19696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3768'. [ 785.418520][T19696] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3768'. [ 785.442423][T19696] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3768'. [ 785.453139][T19696] xt_bpf: check failed: parse error [ 785.545449][T19699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input66 [ 786.703511][T19718] netlink: 'syz.0.3775': attribute type 4 has an invalid length. [ 786.714503][T19718] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3775'. [ 787.045483][T19730] vlan2: entered allmulticast mode [ 787.050929][T19730] bridge_slave_0: entered allmulticast mode [ 787.061708][T19730] bridge_slave_0: left allmulticast mode [ 787.339769][T19734] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 787.600208][T19747] lo speed is unknown, defaulting to 1000 [ 787.613596][T19747] lo speed is unknown, defaulting to 1000 [ 788.211809][T19756] tipc: Enabling of bearer rejected, already enabled [ 788.391348][T19763] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3792'. [ 788.557474][T19747] lo speed is unknown, defaulting to 1000 [ 788.686258][T19771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3796'. [ 788.760610][T19776] netlink: 'syz.0.3797': attribute type 1 has an invalid length. [ 788.826441][T19771] bond8: entered promiscuous mode [ 788.840266][T19771] 8021q: adding VLAN 0 to HW filter on device bond8 [ 788.897389][T19783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3785'. [ 788.910852][T19776] 8021q: adding VLAN 0 to HW filter on device bond7 [ 789.646524][T19779] gretap1: entered promiscuous mode [ 789.660084][T19779] bond7: (slave gretap1): making interface the new active one [ 789.670386][T19779] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 789.684741][T19781] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 789.734078][T19780] netlink: 'syz.1.3796': attribute type 6 has an invalid length. [ 789.749994][T19783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 789.770305][T19748] lo speed is unknown, defaulting to 1000 [ 789.865371][T19800] tipc: Enabled bearer , priority 0 [ 790.042766][T19797] tipc: Resetting bearer [ 790.081273][T19748] lo speed is unknown, defaulting to 1000 [ 790.167483][T19811] syzkaller0: entered promiscuous mode [ 790.173444][T19811] syzkaller0: entered allmulticast mode [ 790.192244][T19794] tipc: Resetting bearer [ 793.637263][T19794] tipc: Disabling bearer [ 793.653864][T19810] tipc: Enabling of bearer rejected, already enabled [ 794.071649][T19831] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input67 [ 797.271077][T19748] lo speed is unknown, defaulting to 1000 [ 797.590010][T19851] tipc: Enabling of bearer rejected, failed to enable media [ 797.750387][T19855] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3816'. [ 797.760413][T19855] block nbd0: NBD_DISCONNECT [ 797.770595][T19855] block nbd0: Send disconnect failed -32 [ 798.406189][T19849] tipc: Enabling of bearer rejected, failed to enable media [ 798.536790][T19870] lo speed is unknown, defaulting to 1000 [ 798.546830][T19870] lo speed is unknown, defaulting to 1000 [ 798.796789][T19861] tipc: Bearer : already 2 bearers with priority 10 [ 798.837345][T19861] tipc: Bearer : trying with adjusted priority [ 799.432342][T19861] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 799.518609][T19879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3821'. [ 799.545135][T19873] lo speed is unknown, defaulting to 1000 [ 799.769716][T19870] lo speed is unknown, defaulting to 1000 [ 799.949937][T19873] lo speed is unknown, defaulting to 1000 [ 800.199012][T19873] lo speed is unknown, defaulting to 1000 [ 800.557877][T19900] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 800.584579][T19900] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 800.935950][T19906] bridge6: entered allmulticast mode [ 801.734104][T19919] lo speed is unknown, defaulting to 1000 [ 801.741394][T19919] lo speed is unknown, defaulting to 1000 [ 801.863365][T19919] lo speed is unknown, defaulting to 1000 [ 802.247334][T19932] ip6gretap0: entered promiscuous mode [ 802.254382][T19932] vlan3: entered promiscuous mode [ 802.267356][T19932] ip6gretap0: left promiscuous mode [ 802.703267][T19947] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input68 [ 802.704394][T19949] netlink: 'syz.0.3842': attribute type 10 has an invalid length. [ 802.891083][T19957] tipc: Enabling of bearer rejected, failed to enable media [ 803.333279][T19955] lo speed is unknown, defaulting to 1000 [ 803.335578][T19964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3845'. [ 803.655701][T19955] lo speed is unknown, defaulting to 1000 [ 803.876219][T19955] lo speed is unknown, defaulting to 1000 [ 804.746598][T19953] lo speed is unknown, defaulting to 1000 [ 804.775341][T19953] lo speed is unknown, defaulting to 1000 [ 805.257828][T19953] lo speed is unknown, defaulting to 1000 [ 805.454575][T19993] lo speed is unknown, defaulting to 1000 [ 805.500086][T19993] lo speed is unknown, defaulting to 1000 [ 805.581404][T19995] lo speed is unknown, defaulting to 1000 [ 805.618361][T19995] lo speed is unknown, defaulting to 1000 [ 806.126076][T20005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input69 [ 806.149861][T19993] lo speed is unknown, defaulting to 1000 [ 806.646801][T20013] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3858'. [ 806.683020][T20012] lo speed is unknown, defaulting to 1000 [ 806.695946][T20012] lo speed is unknown, defaulting to 1000 [ 806.756193][T19995] lo speed is unknown, defaulting to 1000 [ 807.436685][T20012] lo speed is unknown, defaulting to 1000 [ 807.640582][T20026] lo speed is unknown, defaulting to 1000 [ 807.800086][T20026] lo speed is unknown, defaulting to 1000 [ 807.888593][T20031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3861'. [ 809.157756][T20026] lo speed is unknown, defaulting to 1000 [ 809.945669][T20060] lo speed is unknown, defaulting to 1000 [ 810.088850][T20060] lo speed is unknown, defaulting to 1000 [ 810.097299][T20064] IPVS: length: 78 != 8 [ 810.376723][T20065] lo speed is unknown, defaulting to 1000 [ 810.469557][T20065] lo speed is unknown, defaulting to 1000 [ 810.866703][T20060] lo speed is unknown, defaulting to 1000 [ 811.381591][T20065] lo speed is unknown, defaulting to 1000 [ 812.729218][T20097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3878'. [ 812.913508][T20101] lo speed is unknown, defaulting to 1000 [ 812.921534][T20101] lo speed is unknown, defaulting to 1000 [ 813.252908][T20103] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3880'. [ 813.321584][T20095] lo speed is unknown, defaulting to 1000 [ 813.393965][T20095] lo speed is unknown, defaulting to 1000 [ 813.494498][T20101] lo speed is unknown, defaulting to 1000 [ 814.188458][T20095] lo speed is unknown, defaulting to 1000 [ 814.340529][T20122] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input70 [ 814.380634][T20119] 8021q: adding VLAN 0 to HW filter on device bond9 [ 814.510650][T20128] IPVS: length: 78 != 8 [ 814.525958][T20129] IPVS: length: 78 != 8 [ 815.181203][T20142] lo speed is unknown, defaulting to 1000 [ 815.188855][T20142] lo speed is unknown, defaulting to 1000 [ 815.733479][T20149] lo speed is unknown, defaulting to 1000 [ 815.740637][T20149] lo speed is unknown, defaulting to 1000 [ 815.846733][T20154] lo speed is unknown, defaulting to 1000 [ 816.042559][T20154] lo speed is unknown, defaulting to 1000 [ 816.193526][T20158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3891'. [ 817.013400][T20149] lo speed is unknown, defaulting to 1000 [ 817.062663][T20165] lo speed is unknown, defaulting to 1000 [ 817.070048][T20165] lo speed is unknown, defaulting to 1000 [ 817.070445][T20166] lo speed is unknown, defaulting to 1000 [ 817.122954][T20166] lo speed is unknown, defaulting to 1000 [ 817.263648][T20152] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3894'. [ 817.368293][T20154] lo speed is unknown, defaulting to 1000 [ 817.524729][T20142] lo speed is unknown, defaulting to 1000 [ 817.755768][T20165] lo speed is unknown, defaulting to 1000 [ 818.030253][T20166] lo speed is unknown, defaulting to 1000 [ 818.706561][T20180] lo speed is unknown, defaulting to 1000 [ 818.793519][T20180] lo speed is unknown, defaulting to 1000 [ 819.418988][T20187] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3904'. [ 819.661518][T20185] IPVS: length: 78 != 8 [ 819.723092][T20191] lo speed is unknown, defaulting to 1000 [ 819.730557][T20191] lo speed is unknown, defaulting to 1000 [ 819.745774][T20180] lo speed is unknown, defaulting to 1000 [ 820.513192][T20208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3910'. [ 820.524965][T20208] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3910'. [ 820.538360][T20208] xt_bpf: check failed: parse error [ 820.708462][T20192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3905'. [ 821.553270][T20192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 821.577310][T20191] lo speed is unknown, defaulting to 1000 [ 821.701264][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3913'. [ 822.049664][T20217] lo speed is unknown, defaulting to 1000 [ 822.158856][T20217] lo speed is unknown, defaulting to 1000 [ 822.158883][T20210] lo speed is unknown, defaulting to 1000 [ 822.296834][T20231] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3915'. [ 822.369809][T20229] lo speed is unknown, defaulting to 1000 [ 822.450246][T20210] lo speed is unknown, defaulting to 1000 [ 822.483529][T20229] lo speed is unknown, defaulting to 1000 [ 822.551613][T20232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3916'. [ 823.156134][T20237] IPVS: length: 78 != 8 [ 823.205096][T20229] lo speed is unknown, defaulting to 1000 [ 823.318308][T20217] lo speed is unknown, defaulting to 1000 [ 823.745594][T20242] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input71 [ 823.773190][T20210] lo speed is unknown, defaulting to 1000 [ 823.953730][T20247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3921'. [ 823.965608][T20247] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3921'. [ 823.979042][T20247] xt_bpf: check failed: parse error [ 824.673965][T20253] tipc: Enabled bearer , priority 0 [ 824.875210][T20249] tipc: Resetting bearer [ 824.883173][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3924'. [ 824.919121][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3924'. [ 824.948654][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3924'. [ 824.981529][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3924'. [ 824.991251][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3924'. [ 828.990717][T20249] tipc: Disabling bearer [ 829.092139][T20270] tipc: Enabling of bearer rejected, failed to enable media [ 829.426668][T20283] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input72 [ 830.171164][T20300] lo speed is unknown, defaulting to 1000 [ 830.179658][T20300] lo speed is unknown, defaulting to 1000 [ 830.307848][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3936'. [ 830.363068][T20300] lo speed is unknown, defaulting to 1000 [ 830.381041][T20310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3935'. [ 830.444969][T20310] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3935'. [ 830.491752][T20308] netlink: 'syz.1.3936': attribute type 12 has an invalid length. [ 830.515952][T20307] xt_bpf: check failed: parse error [ 830.530302][T20308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3936'. [ 830.560223][T20312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3937'. [ 830.572874][T20312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3937'. [ 830.730808][T20319] Set syz1 is full, maxelem 65536 reached [ 830.949869][T20325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3940'. [ 830.959512][T20325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3940'. [ 830.969355][T20325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3940'. [ 830.978956][T20325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3940'. [ 831.299245][T20333] xt_bpf: check failed: parse error [ 831.445816][T20336] tipc: Failed to remove unknown binding: 66,1,1/10136234:3740314571/3740314573 [ 831.485344][T20336] tipc: Failed to remove unknown binding: 66,1,1/10136234:3740314571/3740314573 [ 831.538474][T20336] tipc: Failed to remove unknown binding: 66,1,1/10136234:3740314571/3740314573 [ 832.170552][T20343] IPVS: length: 78 != 8 [ 832.326523][T20340] bond0: left promiscuous mode [ 832.331420][T20340] bond0: left allmulticast mode [ 832.577821][T20350] lo speed is unknown, defaulting to 1000 [ 832.616020][T20350] lo speed is unknown, defaulting to 1000 [ 832.831697][T20357] xt_bpf: check failed: parse error [ 832.928608][T20350] lo speed is unknown, defaulting to 1000 [ 833.022667][T20362] xt_bpf: check failed: parse error [ 834.028449][T20374] lo speed is unknown, defaulting to 1000 [ 834.115031][T20374] lo speed is unknown, defaulting to 1000 [ 834.142971][T20376] lo speed is unknown, defaulting to 1000 [ 834.280740][T20377] syzkaller1: entered promiscuous mode [ 834.312396][T20377] syzkaller1: entered allmulticast mode [ 834.377133][T20384] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 834.526455][T20376] lo speed is unknown, defaulting to 1000 [ 834.534432][T20374] lo speed is unknown, defaulting to 1000 [ 834.566144][T20384] lo speed is unknown, defaulting to 1000 [ 834.574142][T20384] lo speed is unknown, defaulting to 1000 [ 835.197616][T20372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 835.327520][T20376] lo speed is unknown, defaulting to 1000 [ 835.448852][T20388] lo speed is unknown, defaulting to 1000 [ 835.497644][T20388] lo speed is unknown, defaulting to 1000 [ 835.680869][T20384] lo speed is unknown, defaulting to 1000 [ 836.065495][T20388] lo speed is unknown, defaulting to 1000 [ 837.966067][T20427] lo speed is unknown, defaulting to 1000 [ 838.040501][T20427] lo speed is unknown, defaulting to 1000 [ 838.149085][T20436] __nla_validate_parse: 10 callbacks suppressed [ 838.149112][T20436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3970'. [ 838.188720][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3973'. [ 838.725964][T20451] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.732892][T20427] lo speed is unknown, defaulting to 1000 [ 838.974428][T20453] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 839.002448][T20453] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 839.285000][T20460] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.339101][T20462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3979'. [ 839.377532][T20460] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.566739][T20470] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 839.749161][T20460] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.795683][T20462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3979'. [ 839.981541][T20460] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.216309][T20472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3984'. [ 840.372404][T20472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 840.394318][T20473] lo speed is unknown, defaulting to 1000 [ 840.401462][T20473] lo speed is unknown, defaulting to 1000 [ 840.526235][T20482] lo speed is unknown, defaulting to 1000 [ 840.533969][T20482] lo speed is unknown, defaulting to 1000 [ 840.593728][T20473] lo speed is unknown, defaulting to 1000 [ 840.930305][T20482] lo speed is unknown, defaulting to 1000 [ 841.265842][T20494] IPVS: length: 78 != 8 [ 841.316010][T20460] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.435188][T20478] lo speed is unknown, defaulting to 1000 [ 841.650469][T20460] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.699903][T20460] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.749341][T20460] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.854814][T20478] lo speed is unknown, defaulting to 1000 [ 842.272520][T20478] lo speed is unknown, defaulting to 1000 [ 842.384439][T20519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3992'. [ 842.432690][T20519] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3992'. [ 842.473345][T20519] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3992'. [ 842.512955][T20519] xt_bpf: check failed: parse error [ 843.817437][T20532] lo speed is unknown, defaulting to 1000 [ 843.824618][T20532] lo speed is unknown, defaulting to 1000 [ 843.883716][T20534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3997'. [ 843.963905][T20532] lo speed is unknown, defaulting to 1000 [ 844.114908][T20534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3997'. [ 844.610468][T20546] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input73 [ 844.865647][T20556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4005'. [ 844.927756][T20556] vlan3: entered allmulticast mode [ 844.937346][T20556] hsr0: entered allmulticast mode [ 844.943085][T20556] hsr_slave_0: entered allmulticast mode [ 844.949141][T20556] hsr_slave_1: entered allmulticast mode [ 844.959959][T20556] hsr0: left allmulticast mode [ 844.965458][T20556] hsr_slave_0: left allmulticast mode [ 844.971115][T20556] hsr_slave_1: left allmulticast mode [ 845.182023][T20560] netlink: 'syz.0.4005': attribute type 12 has an invalid length. [ 845.190113][T20560] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4005'. [ 845.214510][T20556] netlink: 'syz.0.4005': attribute type 12 has an invalid length. [ 845.229415][T20556] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4005'. [ 845.337426][T20563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4007'. [ 845.348584][T20563] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4007'. [ 845.382069][T20563] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4007'. [ 845.392513][T20563] xt_bpf: check failed: parse error [ 846.257527][T20581] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input74 [ 846.356321][T20582] lo speed is unknown, defaulting to 1000 [ 846.371216][T20582] lo speed is unknown, defaulting to 1000 [ 846.554598][T20591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4011'. [ 846.616318][T20586] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4011'. [ 846.655646][T20586] xt_bpf: check failed: parse error [ 846.978104][T20582] lo speed is unknown, defaulting to 1000 [ 847.202381][T20568] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 847.565239][T20612] lo speed is unknown, defaulting to 1000 [ 847.603423][T20612] lo speed is unknown, defaulting to 1000 [ 847.682321][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 847.918789][T20612] lo speed is unknown, defaulting to 1000 [ 847.987760][T20587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 848.101265][T20623] xt_bpf: check failed: parse error [ 848.195638][T20621] lo speed is unknown, defaulting to 1000 [ 848.305547][T20621] lo speed is unknown, defaulting to 1000 [ 849.001346][T20639] netlink: 'syz.0.4022': attribute type 10 has an invalid length. [ 849.200893][T20621] lo speed is unknown, defaulting to 1000 [ 849.573520][T20651] __nla_validate_parse: 9 callbacks suppressed [ 849.573545][T20651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4026'. [ 849.614203][T20651] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4026'. [ 849.663433][T20651] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4026'. [ 849.683254][T20651] xt_bpf: check failed: parse error [ 850.523650][T20670] lo speed is unknown, defaulting to 1000 [ 850.536727][T20670] lo speed is unknown, defaulting to 1000 [ 850.793792][T20678] netlink: 66 bytes leftover after parsing attributes in process `syz.0.4033'. [ 850.805719][T20678] openvswitch: netlink: Flow key attr not present in new flow. [ 850.842618][T20670] lo speed is unknown, defaulting to 1000 [ 851.910961][T20708] bridge0: port 1(gretap0) entered blocking state [ 851.944470][T20708] bridge0: port 1(gretap0) entered disabled state [ 851.951585][T20708] gretap0: entered allmulticast mode [ 852.013322][T20713] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input75 [ 852.013695][T20708] gretap0: entered promiscuous mode [ 852.062947][T20714] gretap0: left allmulticast mode [ 852.068432][T20714] gretap0: left promiscuous mode [ 852.079024][T20714] bridge0: port 1(gretap0) entered disabled state [ 852.365269][T20723] lo speed is unknown, defaulting to 1000 [ 852.372587][T20723] lo speed is unknown, defaulting to 1000 [ 852.467172][T20721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4042'. [ 852.521737][T20721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 852.739462][T20723] lo speed is unknown, defaulting to 1000 [ 852.894718][T20726] lo speed is unknown, defaulting to 1000 [ 852.970576][T20726] lo speed is unknown, defaulting to 1000 [ 853.335620][T20726] lo speed is unknown, defaulting to 1000 [ 853.428396][T20715] tipc: Bearer : already 2 bearers with priority 10 [ 853.481092][T20715] tipc: Bearer : trying with adjusted priority [ 853.500814][T20715] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 853.974820][T20741] netlink: 'syz.2.4045': attribute type 1 has an invalid length. [ 854.194413][T20750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4047'. [ 854.244697][T20749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4046'. [ 854.281256][T20750] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4047'. [ 854.329914][T20750] xt_bpf: check failed: parse error [ 854.353088][T20743] lo speed is unknown, defaulting to 1000 [ 854.578716][T20743] lo speed is unknown, defaulting to 1000 [ 855.187009][T20743] lo speed is unknown, defaulting to 1000 [ 856.613988][T20782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4053'. [ 859.980013][T20758] lo speed is unknown, defaulting to 1000 [ 860.042534][T20758] lo speed is unknown, defaulting to 1000 [ 860.414227][T20789] xt_l2tp: unknown flags: 10 [ 860.842251][T20785] lo speed is unknown, defaulting to 1000 [ 860.848088][T20758] lo speed is unknown, defaulting to 1000 [ 860.849070][T20785] lo speed is unknown, defaulting to 1000 [ 861.245419][T20785] lo speed is unknown, defaulting to 1000 [ 861.602971][T20801] lo speed is unknown, defaulting to 1000 [ 861.624015][T20801] lo speed is unknown, defaulting to 1000 [ 861.650867][T20799] tipc: Enabling of bearer rejected, failed to enable media [ 861.789954][T20801] lo speed is unknown, defaulting to 1000 [ 861.947466][T20805] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input76 [ 861.983460][T20807] sysfs: cannot create duplicate filename '/class/ieee80211/!瀵$蘒L賤y岗丌匘xUD寃榼漽R' [ 861.994248][T20807] CPU: 1 UID: 0 PID: 20807 Comm: syz.1.4059 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 861.994284][T20807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 861.994298][T20807] Call Trace: [ 861.994307][T20807] [ 861.994316][T20807] dump_stack_lvl+0x241/0x360 [ 861.994356][T20807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 861.994382][T20807] ? __pfx__printk+0x10/0x10 [ 861.994413][T20807] ? __kmalloc_cache_noprof+0x243/0x390 [ 861.994444][T20807] ? sysfs_warn_dup+0x51/0xa0 [ 861.994479][T20807] sysfs_warn_dup+0x8e/0xa0 [ 861.994508][T20807] sysfs_do_create_link_sd+0xbe/0x110 [ 861.994554][T20807] device_add_class_symlinks+0x1c5/0x250 [ 861.994583][T20807] device_add+0x553/0xbf0 [ 861.994615][T20807] wiphy_register+0x1922/0x2650 [ 861.994666][T20807] ? __pfx_wiphy_register+0x10/0x10 [ 861.994693][T20807] ? minstrel_ht_alloc+0x84b/0x940 [ 861.994734][T20807] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 861.994773][T20807] ieee80211_register_hw+0x35d9/0x42e0 [ 861.994810][T20807] ? ieee80211_register_hw+0x1681/0x42e0 [ 861.994843][T20807] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 861.994878][T20807] ? __asan_memset+0x23/0x50 [ 861.994900][T20807] ? __hrtimer_init+0x170/0x250 [ 861.994929][T20807] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 861.994997][T20807] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 861.995024][T20807] ? trace_kmalloc+0x1f/0xd0 [ 861.995049][T20807] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 861.995078][T20807] ? kstrndup+0xbb/0x150 [ 861.995123][T20807] hwsim_new_radio_nl+0xece/0x2290 [ 861.995165][T20807] ? __pfx___nla_validate_parse+0x10/0x10 [ 861.995195][T20807] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 861.995268][T20807] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 861.995305][T20807] genl_rcv_msg+0xb1f/0xec0 [ 861.995341][T20807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.995405][T20807] ? __pfx_lock_acquire+0x10/0x10 [ 861.995434][T20807] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 861.995463][T20807] ? __pfx___might_resched+0x10/0x10 [ 861.995505][T20807] netlink_rcv_skb+0x206/0x480 [ 861.995547][T20807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.995573][T20807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 861.995646][T20807] genl_rcv+0x28/0x40 [ 861.995666][T20807] netlink_unicast+0x7f6/0x990 [ 861.995707][T20807] ? __pfx_netlink_unicast+0x10/0x10 [ 861.995731][T20807] ? __virt_addr_valid+0x45f/0x530 [ 861.995753][T20807] ? __phys_addr_symbol+0x2f/0x70 [ 861.995770][T20807] ? __check_object_size+0x47a/0x730 [ 861.995809][T20807] netlink_sendmsg+0x8de/0xcb0 [ 861.995859][T20807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.995896][T20807] ? aa_sock_msg_perm+0x91/0x160 [ 861.995935][T20807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.995963][T20807] __sock_sendmsg+0x221/0x270 [ 861.995998][T20807] ____sys_sendmsg+0x53a/0x860 [ 861.996035][T20807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.996056][T20807] ? __fget_files+0x2a/0x410 [ 861.996091][T20807] ? __fget_files+0x2a/0x410 [ 861.996133][T20807] __sys_sendmsg+0x269/0x350 [ 861.996165][T20807] ? __pfx___sys_sendmsg+0x10/0x10 [ 861.996251][T20807] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 861.996284][T20807] ? do_syscall_64+0x100/0x230 [ 861.996316][T20807] ? do_syscall_64+0xb6/0x230 [ 861.996346][T20807] do_syscall_64+0xf3/0x230 [ 861.996372][T20807] ? clear_bhb_loop+0x35/0x90 [ 861.996404][T20807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.996431][T20807] RIP: 0033:0x7f489db8d169 [ 861.996451][T20807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.996469][T20807] RSP: 002b:00007f489e9cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.996494][T20807] RAX: ffffffffffffffda RBX: 00007f489dda5fa0 RCX: 00007f489db8d169 [ 861.996511][T20807] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000007 [ 861.996537][T20807] RBP: 00007f489dc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 861.996551][T20807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.996564][T20807] R13: 0000000000000000 R14: 00007f489dda5fa0 R15: 00007ffc07058778 [ 861.996603][T20807] [ 862.715624][T20817] bond7: (slave batadv1): Releasing active interface [ 862.723107][T20817] batadv1: left allmulticast mode [ 862.956960][T20817] team0: Mode changed to "loadbalance" [ 862.987477][T20820] x_tables: duplicate underflow at hook 2 [ 863.109462][T20820] netlink: 'syz.4.4061': attribute type 29 has an invalid length. [ 863.216432][T20824] netlink: 'syz.4.4061': attribute type 29 has an invalid length. [ 863.281448][T20820] netlink: 'syz.4.4061': attribute type 10 has an invalid length. [ 863.850107][T20835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4066'. [ 864.448326][T20837] team0: Unable to change to the same mode the team is in [ 864.625656][T20847] lo speed is unknown, defaulting to 1000 [ 864.670644][T20847] lo speed is unknown, defaulting to 1000 [ 864.785590][T20856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4072'. [ 864.811593][T20856] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4072'. [ 864.852493][T20856] xt_bpf: check failed: parse error [ 865.207632][T20847] lo speed is unknown, defaulting to 1000 [ 865.692860][T20861] lo speed is unknown, defaulting to 1000 [ 865.700087][T20861] lo speed is unknown, defaulting to 1000 [ 865.761597][T20851] tipc: Bearer : already 2 bearers with priority 10 [ 865.794789][T20851] tipc: Bearer : trying with adjusted priority [ 865.822985][T20851] tipc: Enabling of bearer rejected, failed to enable media [ 865.869948][T20868] netlink: 'syz.0.4076': attribute type 12 has an invalid length. [ 865.928959][T20869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.944993][T20869] netlink: zone id is out of range [ 866.004775][T20869] netlink: set zone limit has 4 unknown bytes [ 866.043779][T20868] netlink: 7100 bytes leftover after parsing attributes in process `syz.0.4076'. [ 866.219970][T20861] lo speed is unknown, defaulting to 1000 [ 866.250892][T20875] bridge0: port 1(30猉功D) entered blocking state [ 866.263472][T20875] bridge0: port 1(30猉功D) entered disabled state [ 866.286900][T20875] 0猉功D: entered allmulticast mode [ 866.294449][T20875] 0猉功D: entered promiscuous mode [ 866.302910][T20877] 0猉功D: left allmulticast mode [ 866.308451][T20877] 0猉功D: left promiscuous mode [ 866.314063][T20877] bridge0: port 1(30猉功D) entered disabled state [ 866.432777][T20879] batadv_slave_1: entered promiscuous mode [ 866.688608][T20878] batadv_slave_1: left promiscuous mode [ 866.852121][T20888] netlink: 'syz.2.4081': attribute type 1 has an invalid length. [ 866.869550][T20888] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4081'. [ 866.916590][T20888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4081'. [ 866.936713][T20888] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4081'. [ 866.978973][T20891] wg1: entered promiscuous mode [ 867.014676][T20891] wg1: entered allmulticast mode [ 867.120526][T20895] : entered promiscuous mode [ 867.336632][T20897] xt_CT: No such helper "snmp" [ 867.567341][T20909] netlink: 7084 bytes leftover after parsing attributes in process `syz.0.4088'. [ 867.586216][T20909] netlink: 'syz.0.4088': attribute type 3 has an invalid length. [ 867.595932][T20909] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.4088'. [ 867.605979][T20909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.625120][T20909] bridge0: port 1(vlan3) entered blocking state [ 867.631726][T20909] bridge0: port 1(vlan3) entered disabled state [ 867.638494][T20909] vlan3: entered allmulticast mode [ 867.645642][T20909] vlan3: entered promiscuous mode [ 867.753252][T20907] pim6reg: entered allmulticast mode [ 867.826022][T20920] pim6reg: left allmulticast mode [ 867.914291][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4089'. [ 868.219742][T20929] siw: device registration error -23 [ 868.395775][T20936] netlink: 'syz.4.4094': attribute type 8 has an invalid length. [ 868.809117][T20951] lo speed is unknown, defaulting to 1000 [ 868.820748][T20951] lo speed is unknown, defaulting to 1000 [ 868.940469][T20952] lo speed is unknown, defaulting to 1000 [ 869.048592][T20952] lo speed is unknown, defaulting to 1000 [ 869.267565][T20962] __nla_validate_parse: 3 callbacks suppressed [ 869.267596][T20962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4100'. [ 869.360061][T20951] lo speed is unknown, defaulting to 1000 [ 870.211703][T20952] lo speed is unknown, defaulting to 1000 [ 870.285145][T20986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4105'. [ 870.296981][T20986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4105'. [ 870.461019][T20988] x_tables: duplicate underflow at hook 2 [ 870.481004][T20988] netlink: 'syz.0.4108': attribute type 12 has an invalid length. [ 870.645522][T20990] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input77 [ 870.731342][T20997] xt_hashlimit: size too large, truncated to 1048576 [ 871.190987][T21004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4110'. [ 871.621454][T21014] lo speed is unknown, defaulting to 1000 [ 871.630039][T21014] lo speed is unknown, defaulting to 1000 [ 871.784572][T21014] lo speed is unknown, defaulting to 1000 [ 872.219992][T21021] netlink: 'syz.3.4113': attribute type 10 has an invalid length. [ 872.241795][T21019] vlan0: entered promiscuous mode [ 872.501071][T21025] Set syz1 is full, maxelem 65536 reached [ 872.731434][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4116'. [ 872.740852][T21035] lo speed is unknown, defaulting to 1000 [ 872.753586][T21035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4116'. [ 872.878180][T21035] nbd: socks must be embedded in a SOCK_ITEM attr [ 873.654965][T21042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4118'. [ 874.057172][T21053] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4121'. [ 874.063651][T21042] bridge0: entered promiscuous mode [ 874.105288][T21042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 874.227065][T18401] lo speed is unknown, defaulting to 1000 [ 874.231590][T21044] lo speed is unknown, defaulting to 1000 [ 874.293711][T21040] lo speed is unknown, defaulting to 1000 [ 874.422065][T18401] lo speed is unknown, defaulting to 1000 [ 874.426555][T21056] lo speed is unknown, defaulting to 1000 [ 874.434800][T21044] lo speed is unknown, defaulting to 1000 [ 874.605061][T21061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4123'. [ 874.613347][T21063] netlink: 'syz.3.4124': attribute type 1 has an invalid length. [ 874.622183][T21056] lo speed is unknown, defaulting to 1000 [ 874.668485][T21063] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4124'. [ 874.693062][T21040] lo speed is unknown, defaulting to 1000 [ 874.728917][T21063] netlink: 'syz.3.4124': attribute type 1 has an invalid length. [ 874.802847][T21063] netlink: 'syz.3.4124': attribute type 2 has an invalid length. [ 875.147191][T21066] lo speed is unknown, defaulting to 1000 [ 875.222807][T21044] lo speed is unknown, defaulting to 1000 [ 875.358183][T21066] lo speed is unknown, defaulting to 1000 [ 875.415839][T21072] lo speed is unknown, defaulting to 1000 [ 875.650869][T21056] lo speed is unknown, defaulting to 1000 [ 875.791785][T21040] lo speed is unknown, defaulting to 1000 [ 875.799704][T21072] lo speed is unknown, defaulting to 1000 [ 875.835513][T21070] lo speed is unknown, defaulting to 1000 [ 876.108961][T21070] lo speed is unknown, defaulting to 1000 [ 876.489521][T21081] syzkaller1: entered promiscuous mode [ 876.505333][T21081] syzkaller1: entered allmulticast mode [ 876.751945][T21070] lo speed is unknown, defaulting to 1000 [ 876.833255][T21072] lo speed is unknown, defaulting to 1000 [ 877.038345][T21066] lo speed is unknown, defaulting to 1000 [ 878.542090][T21090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4128'. [ 878.808697][T21097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4130'. [ 879.065087][T21104] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input78 [ 879.096303][T21103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4134'. [ 879.116537][T21103] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4134'. [ 879.128514][T21103] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4134'. [ 879.139990][T21103] xt_bpf: check failed: parse error [ 879.160994][T21109] xt_ipcomp: unknown flags F7 [ 879.577059][T21114] syzkaller0: entered promiscuous mode [ 879.618355][T21114] syzkaller0: entered allmulticast mode [ 879.734999][T21115] tipc: Enabling of bearer rejected, failed to enable media [ 880.057379][T21118] lo speed is unknown, defaulting to 1000 [ 880.064693][T21118] lo speed is unknown, defaulting to 1000 [ 880.240005][T21118] lo speed is unknown, defaulting to 1000 [ 880.463688][T21126] batman_adv: batadv0: Adding interface: dummy0 [ 880.495389][T21126] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.541138][T21130] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 880.563762][T21126] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 880.648484][T21130] lo speed is unknown, defaulting to 1000 [ 880.656976][T21130] lo speed is unknown, defaulting to 1000 [ 880.918230][T21130] lo speed is unknown, defaulting to 1000 [ 880.940594][T21136] lo speed is unknown, defaulting to 1000 [ 880.948795][T21136] lo speed is unknown, defaulting to 1000 [ 881.003917][T21135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4140'. [ 881.073896][T21135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 881.914238][T21136] lo speed is unknown, defaulting to 1000 [ 882.153062][T21140] lo speed is unknown, defaulting to 1000 [ 882.164056][T21140] lo speed is unknown, defaulting to 1000 [ 882.252162][T21145] lo speed is unknown, defaulting to 1000 [ 882.632252][T21145] lo speed is unknown, defaulting to 1000 [ 882.670363][T21140] lo speed is unknown, defaulting to 1000 [ 882.753566][T21113] Set syz1 is full, maxelem 65536 reached [ 883.137768][T21169] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 883.347852][T21145] lo speed is unknown, defaulting to 1000 [ 883.357659][T21174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4146'. [ 883.368957][T21174] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4146'. [ 883.394626][T21172] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4146'. [ 883.421430][T21172] xt_bpf: check failed: parse error [ 883.989822][T21169] lo speed is unknown, defaulting to 1000 [ 884.205845][T21169] lo speed is unknown, defaulting to 1000 [ 884.614540][T21179] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 884.635608][T21179] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 884.735948][T21179] gretap1: left promiscuous mode [ 884.776046][ T52] lo speed is unknown, defaulting to 1000 [ 884.796293][T21169] lo speed is unknown, defaulting to 1000 [ 884.796545][T21183] bridge0: port 2(30猉功D) entered blocking state [ 884.810532][T21183] bridge0: port 2(30猉功D) entered disabled state [ 884.817892][T21183] 0猉功D: entered allmulticast mode [ 884.839967][T21183] 0猉功D: entered promiscuous mode [ 884.849964][T21185] 0猉功D: left allmulticast mode [ 884.855370][T21185] 0猉功D: left promiscuous mode [ 884.860565][T21185] bridge0: port 2(30猉功D) entered disabled state [ 885.109002][T21190] lo speed is unknown, defaulting to 1000 [ 885.116602][T21190] lo speed is unknown, defaulting to 1000 [ 885.354290][T21190] lo speed is unknown, defaulting to 1000 [ 885.619847][T21196] lo speed is unknown, defaulting to 1000 [ 885.733147][T21187] tipc: Enabling of bearer rejected, failed to enable media [ 885.749216][T21196] lo speed is unknown, defaulting to 1000 [ 886.332949][T21196] lo speed is unknown, defaulting to 1000 [ 887.181033][T21218] lo: entered promiscuous mode [ 887.257933][T21218] tunl0: entered promiscuous mode [ 887.271683][T21218] gre0: entered promiscuous mode [ 887.480612][T21218] gretap0: entered promiscuous mode [ 887.562727][T21218] erspan0: entered promiscuous mode [ 887.571730][T21226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4159'. [ 887.610282][T21218] ip_vti0: entered promiscuous mode [ 887.619883][T21218] ip6_vti0: entered promiscuous mode [ 887.660828][T21218] sit0: entered promiscuous mode [ 887.730397][T21218] ip6tnl0: entered promiscuous mode [ 887.799715][T21218] ip6gre0: entered promiscuous mode [ 887.835520][T21218] ip6gretap0: entered promiscuous mode [ 887.865217][T21218] vcan0: entered promiscuous mode [ 887.890850][T21218] team0: entered promiscuous mode [ 887.916523][T21218] hsr0: entered promiscuous mode [ 887.946489][T21218] dummy0: entered promiscuous mode [ 887.976061][T21218] nlmon0: entered promiscuous mode [ 887.998670][T21218] caif0: entered promiscuous mode [ 888.007592][T21218] veth0: entered promiscuous mode [ 888.030668][T21218] veth1: entered promiscuous mode [ 888.040769][T21218] wg0: entered promiscuous mode [ 888.051383][T21218] wg1: entered promiscuous mode [ 888.061278][T21218] wg2: entered promiscuous mode [ 888.070416][T21218] veth0_to_bridge: entered promiscuous mode [ 888.081326][T21218] bridge_slave_0: entered promiscuous mode [ 888.089893][T21218] veth1_to_bridge: entered promiscuous mode [ 888.098745][T21218] bridge_slave_1: entered promiscuous mode [ 888.107886][T21218] veth1_to_bond: entered promiscuous mode [ 888.116038][T21218] bond_slave_1: entered promiscuous mode [ 888.123833][T21218] veth0_to_team: entered promiscuous mode [ 888.129698][T21218] team_slave_0: entered promiscuous mode [ 888.138168][T21218] veth1_to_team: entered promiscuous mode [ 888.146000][T21218] team_slave_1: entered promiscuous mode [ 888.154181][T21218] veth0_to_batadv: entered promiscuous mode [ 888.160295][T21218] batadv_slave_0: entered promiscuous mode [ 888.168138][T21218] veth1_to_batadv: entered promiscuous mode [ 888.174583][T21218] batadv_slave_1: entered promiscuous mode [ 888.180924][T21218] xfrm0: entered promiscuous mode [ 888.186940][T21218] veth0_to_hsr: entered promiscuous mode [ 888.193260][T21218] veth1_to_hsr: entered promiscuous mode [ 888.200653][T21218] veth1_virt_wifi: entered promiscuous mode [ 888.207546][T21218] veth0_virt_wifi: entered promiscuous mode [ 888.214470][T21218] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 888.225379][T21218] vlan0: entered promiscuous mode [ 888.230731][T21218] vlan1: entered promiscuous mode [ 888.236445][T21218] macvlan0: entered promiscuous mode [ 888.242787][T21218] macvlan1: entered promiscuous mode [ 888.248502][T21218] ipvlan0: entered promiscuous mode [ 888.254142][T21218] geneve0: entered promiscuous mode [ 888.259730][T21218] geneve1: entered promiscuous mode [ 888.268413][T21218] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 888.278091][T21218] veth0_vlan.4: entered promiscuous mode [ 888.284362][T21218] pimreg: entered promiscuous mode [ 888.289919][T21218] macvlan2: entered promiscuous mode [ 888.295872][T21218] macvlan3: entered promiscuous mode [ 888.301394][T21218] syztnl0: entered promiscuous mode [ 888.307861][T21218] vxlan0: entered promiscuous mode [ 888.313383][T21218] syztnl2: entered promiscuous mode [ 888.318998][T21218] bridge0: entered promiscuous mode [ 888.325130][T21218] bond1: entered promiscuous mode [ 888.330412][T21218] ip6gretap1: entered promiscuous mode [ 888.336393][T21218] veth2: entered promiscuous mode [ 888.341803][T21218] veth3: entered promiscuous mode [ 888.347562][T21218] ip6tnl1: entered promiscuous mode [ 888.353359][T21218] macvlan4: entered promiscuous mode [ 888.358965][T21218] veth4: entered promiscuous mode [ 888.364617][T21218] veth5: entered promiscuous mode [ 888.369854][T21218] netdevsim netdevsim2 eth0: entered promiscuous mode [ 888.377191][T21218] netdevsim netdevsim2 eth1: entered promiscuous mode [ 888.384427][T21218] netdevsim netdevsim2 eth2: entered promiscuous mode [ 888.391466][T21218] netdevsim netdevsim2 eth3: entered promiscuous mode [ 888.414657][ T5887] lo speed is unknown, defaulting to 1000 [ 888.474604][T21224] lo speed is unknown, defaulting to 1000 [ 888.495080][T21224] lo speed is unknown, defaulting to 1000 [ 888.625192][T21224] lo speed is unknown, defaulting to 1000 [ 889.139766][T21235] lo speed is unknown, defaulting to 1000 [ 889.198299][T21235] lo speed is unknown, defaulting to 1000 [ 889.211501][T21237] lo speed is unknown, defaulting to 1000 [ 889.232663][T21242] sch_fq: defrate 0 ignored. [ 889.488683][T21237] lo speed is unknown, defaulting to 1000 [ 889.795848][T21235] lo speed is unknown, defaulting to 1000 [ 890.229723][T21258] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input79 [ 890.590630][T21237] lo speed is unknown, defaulting to 1000 [ 890.635457][T21256] lo speed is unknown, defaulting to 1000 [ 891.247478][T21256] lo speed is unknown, defaulting to 1000 [ 891.254789][T21272] lo speed is unknown, defaulting to 1000 [ 891.395584][T21272] lo speed is unknown, defaulting to 1000 [ 891.419783][T21287] lo speed is unknown, defaulting to 1000 [ 891.428411][T21287] lo speed is unknown, defaulting to 1000 [ 891.552677][T21285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4169'. [ 892.003287][T21287] lo speed is unknown, defaulting to 1000 [ 892.075185][T21293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4173'. [ 892.115852][T21272] lo speed is unknown, defaulting to 1000 [ 892.169261][T21293] sysfs: cannot create duplicate filename '/class/ieee80211/!瀵$蘒L賤y岗丌匘xUD寃榼漽R' [ 892.194665][T21293] CPU: 1 UID: 0 PID: 21293 Comm: syz.1.4173 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 892.194702][T21293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 892.194716][T21293] Call Trace: [ 892.194726][T21293] [ 892.194736][T21293] dump_stack_lvl+0x241/0x360 [ 892.194775][T21293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 892.194800][T21293] ? __pfx__printk+0x10/0x10 [ 892.194832][T21293] ? __kmalloc_cache_noprof+0x243/0x390 [ 892.194862][T21293] ? sysfs_warn_dup+0x51/0xa0 [ 892.194895][T21293] sysfs_warn_dup+0x8e/0xa0 [ 892.194920][T21293] sysfs_do_create_link_sd+0xbe/0x110 [ 892.194950][T21293] device_add_class_symlinks+0x1c5/0x250 [ 892.194978][T21293] device_add+0x553/0xbf0 [ 892.195006][T21293] wiphy_register+0x1922/0x2650 [ 892.195049][T21293] ? __pfx_wiphy_register+0x10/0x10 [ 892.195074][T21293] ? minstrel_ht_alloc+0x84b/0x940 [ 892.195114][T21293] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 892.195151][T21293] ieee80211_register_hw+0x35d9/0x42e0 [ 892.195188][T21293] ? ieee80211_register_hw+0x1681/0x42e0 [ 892.195220][T21293] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 892.195268][T21293] ? __asan_memset+0x23/0x50 [ 892.195289][T21293] ? __hrtimer_init+0x170/0x250 [ 892.195318][T21293] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 892.195391][T21293] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 892.195420][T21293] ? trace_kmalloc+0x1f/0xd0 [ 892.195447][T21293] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 892.195479][T21293] ? kstrndup+0xbb/0x150 [ 892.195522][T21293] hwsim_new_radio_nl+0xece/0x2290 [ 892.195565][T21293] ? __pfx___nla_validate_parse+0x10/0x10 [ 892.195596][T21293] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 892.195675][T21293] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 892.195712][T21293] genl_rcv_msg+0xb1f/0xec0 [ 892.195749][T21293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 892.195816][T21293] ? __pfx_lock_acquire+0x10/0x10 [ 892.195847][T21293] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 892.195877][T21293] ? __pfx___might_resched+0x10/0x10 [ 892.195918][T21293] netlink_rcv_skb+0x206/0x480 [ 892.195950][T21293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 892.195977][T21293] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 892.196049][T21293] genl_rcv+0x28/0x40 [ 892.196067][T21293] netlink_unicast+0x7f6/0x990 [ 892.196107][T21293] ? __pfx_netlink_unicast+0x10/0x10 [ 892.196131][T21293] ? __virt_addr_valid+0x45f/0x530 [ 892.196153][T21293] ? __phys_addr_symbol+0x2f/0x70 [ 892.196172][T21293] ? __check_object_size+0x47a/0x730 [ 892.196208][T21293] netlink_sendmsg+0x8de/0xcb0 [ 892.196266][T21293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.196304][T21293] ? aa_sock_msg_perm+0x91/0x160 [ 892.196343][T21293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.196370][T21293] __sock_sendmsg+0x221/0x270 [ 892.196406][T21293] ____sys_sendmsg+0x53a/0x860 [ 892.196445][T21293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.196469][T21293] ? __fget_files+0x2a/0x410 [ 892.196505][T21293] ? __fget_files+0x2a/0x410 [ 892.196547][T21293] __sys_sendmsg+0x269/0x350 [ 892.196570][T21293] ? __pfx_futex_wake+0x10/0x10 [ 892.196602][T21293] ? __pfx___sys_sendmsg+0x10/0x10 [ 892.196685][T21293] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 892.196717][T21293] ? do_syscall_64+0x100/0x230 [ 892.196749][T21293] ? do_syscall_64+0xb6/0x230 [ 892.196779][T21293] do_syscall_64+0xf3/0x230 [ 892.196805][T21293] ? clear_bhb_loop+0x35/0x90 [ 892.196838][T21293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.196864][T21293] RIP: 0033:0x7f489db8d169 [ 892.196884][T21293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.196901][T21293] RSP: 002b:00007f489e9cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.196926][T21293] RAX: ffffffffffffffda RBX: 00007f489dda5fa0 RCX: 00007f489db8d169 [ 892.196941][T21293] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 892.196955][T21293] RBP: 00007f489dc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 892.196968][T21293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.196981][T21293] R13: 0000000000000000 R14: 00007f489dda5fa0 R15: 00007ffc07058778 [ 892.197019][T21293] [ 892.375522][T21256] lo speed is unknown, defaulting to 1000 [ 893.847068][T21318] x_tables: duplicate underflow at hook 2 [ 893.873580][T21318] netlink: 'syz.4.4177': attribute type 12 has an invalid length. [ 893.876598][T21312] lo speed is unknown, defaulting to 1000 [ 894.079354][T21312] lo speed is unknown, defaulting to 1000 [ 894.323002][T21322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4178'. [ 894.704588][T21312] lo speed is unknown, defaulting to 1000 [ 894.872233][T21329] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input80 [ 894.945799][T21325] tipc: Enabling of bearer rejected, already enabled [ 894.948334][T21327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4179'. [ 894.965504][T21331] lo speed is unknown, defaulting to 1000 [ 895.109901][T21336] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 895.171311][T21336] vlan0: entered allmulticast mode [ 895.239444][T21331] lo speed is unknown, defaulting to 1000 [ 895.317382][T21342] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 895.509012][T21327] lo: left promiscuous mode [ 895.583994][T21327] tunl0: left promiscuous mode [ 895.623736][T21327] gre0: left promiscuous mode [ 895.656939][T21327] gretap0: left promiscuous mode [ 895.676659][T21327] erspan0: left promiscuous mode [ 895.686001][T21327] ip_vti0: left promiscuous mode [ 895.694933][T21357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4184'. [ 895.719220][T21327] ip6_vti0: left promiscuous mode [ 895.745644][T21327] sit0: left promiscuous mode [ 895.785544][T21327] ip6tnl0: left promiscuous mode [ 895.800038][T21327] ip6gre0: left promiscuous mode [ 895.809258][T21327] ip6gretap0: left promiscuous mode [ 895.825410][T21327] vcan0: left promiscuous mode [ 895.831530][T21327] team0: left promiscuous mode [ 895.860373][T21327] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.876327][T21327] dummy0: left promiscuous mode [ 895.886863][T21327] nlmon0: left promiscuous mode [ 895.897068][T21327] caif0: left promiscuous mode [ 895.903426][T21327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 895.928023][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4185'. [ 895.931953][T13736] lo speed is unknown, defaulting to 1000 [ 896.285020][T21331] lo speed is unknown, defaulting to 1000 [ 896.448281][T21351] siw: device registration error -23 [ 896.454382][T21357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4184'. [ 896.478964][T21364] lo speed is unknown, defaulting to 1000 [ 896.645990][T21371] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4186'. [ 896.648593][T21364] lo speed is unknown, defaulting to 1000 [ 897.068669][T21364] lo speed is unknown, defaulting to 1000 [ 897.116066][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.132724][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.335819][T21384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4190'. [ 897.402763][T21376] lo speed is unknown, defaulting to 1000 [ 897.410841][T21376] lo speed is unknown, defaulting to 1000 [ 897.771624][T21376] lo speed is unknown, defaulting to 1000 [ 898.161167][T21398] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 898.190435][T21398] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 898.307277][T21395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4193'. [ 898.319582][T21398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4194'. [ 898.329682][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4193'. [ 898.525107][T21401] lo speed is unknown, defaulting to 1000 [ 898.535501][T21401] lo speed is unknown, defaulting to 1000 [ 898.819208][T21407] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input81 [ 898.919654][T21401] lo speed is unknown, defaulting to 1000 [ 900.402560][T21427] nr0: left promiscuous mode [ 900.637857][ T6051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.652685][ T6051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.929704][T21439] bridge0: left promiscuous mode [ 901.044651][T21439] wg1: left promiscuous mode [ 901.059924][T21439] wg1: left allmulticast mode [ 901.134022][T21439] vlan0: left promiscuous mode [ 901.176285][T21439] bond7: left promiscuous mode [ 901.181457][T21439] bond7: left allmulticast mode [ 901.242337][T21439] batadv1: left promiscuous mode [ 901.279890][T21439] bond8: left promiscuous mode [ 901.325573][T13736] lo speed is unknown, defaulting to 1000 [ 901.332385][T21443] __nla_validate_parse: 1 callbacks suppressed [ 901.332408][T21443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4202'. [ 901.426820][T21443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4202'. [ 901.455175][T21441] bridge0: port 1(gretap0) entered blocking state [ 901.532619][T21441] bridge0: port 1(gretap0) entered disabled state [ 901.539524][T21441] gretap0: entered allmulticast mode [ 901.581480][T21441] gretap0: entered promiscuous mode [ 901.682780][T21446] gretap0: left allmulticast mode [ 901.690567][T21446] gretap0: left promiscuous mode [ 901.727316][T21446] bridge0: port 1(gretap0) entered disabled state [ 902.002096][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 902.248774][T21444] lo speed is unknown, defaulting to 1000 [ 902.255090][T13736] lo speed is unknown, defaulting to 1000 [ 902.292098][T21455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4204'. [ 902.493149][T21444] lo speed is unknown, defaulting to 1000 [ 902.783728][T21463] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4207'. [ 902.956659][T21462] syzkaller1: entered promiscuous mode [ 902.969176][T21462] syzkaller1: entered allmulticast mode [ 903.023856][T21468] lo speed is unknown, defaulting to 1000 [ 903.033949][T21468] lo speed is unknown, defaulting to 1000 [ 903.081518][T21444] lo speed is unknown, defaulting to 1000 [ 903.655363][T21468] lo speed is unknown, defaulting to 1000 [ 903.657337][T21475] lo speed is unknown, defaulting to 1000 [ 903.673537][T21475] lo speed is unknown, defaulting to 1000 [ 903.759672][T21477] lo speed is unknown, defaulting to 1000 [ 903.829111][T21477] lo speed is unknown, defaulting to 1000 [ 903.895599][T21480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4211'. [ 904.318641][T21485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4212'. [ 904.612414][T21489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4213'. [ 904.992635][T21489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4213'. [ 905.023660][T21410] Set syz1 is full, maxelem 65536 reached [ 905.078182][T21478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4210'. [ 905.174091][T21477] lo speed is unknown, defaulting to 1000 [ 905.421316][T21499] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input82 [ 905.493561][T21475] lo speed is unknown, defaulting to 1000 [ 905.639582][T21503] bridge0: port 2(30猉功D) entered blocking state [ 905.652529][T21503] bridge0: port 2(30猉功D) entered disabled state [ 905.659570][T21503] 0猉功D: entered allmulticast mode [ 905.666829][T21503] 0猉功D: entered promiscuous mode [ 905.674571][T21504] 0猉功D: left allmulticast mode [ 905.681454][T21504] 0猉功D: left promiscuous mode [ 905.687871][T21504] bridge0: port 2(30猉功D) entered disabled state [ 905.724146][T21506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4218'. [ 905.744038][T21506] xt_bpf: check failed: parse error [ 906.127644][T21517] netlink: 'syz.4.4220': attribute type 1 has an invalid length. [ 906.304762][T21517] nbd: socks must be embedded in a SOCK_ITEM attr [ 906.311713][T21517] block nbd0: shutting down sockets [ 906.756449][T21526] lo speed is unknown, defaulting to 1000 [ 906.773452][T21526] lo speed is unknown, defaulting to 1000 [ 906.913778][T21526] lo speed is unknown, defaulting to 1000 [ 907.085598][T21537] __nla_validate_parse: 5 callbacks suppressed [ 907.085654][T21537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4226'. [ 907.221593][T21540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4226'. [ 907.722561][T21529] tipc: Enabling of bearer rejected, failed to enable media [ 907.736586][T21537] lo speed is unknown, defaulting to 1000 [ 907.762453][T21539] IPVS: Error connecting to the multicast addr [ 909.049547][T21563] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4232'. [ 909.099949][T21564] bridge0: port 2(30猉功D) entered blocking state [ 909.112043][T21564] bridge0: port 2(30猉功D) entered disabled state [ 909.120770][T21564] 0猉功D: entered allmulticast mode [ 909.132568][T21564] 0猉功D: entered promiscuous mode [ 909.164644][T21557] lo speed is unknown, defaulting to 1000 [ 909.185114][T21557] lo speed is unknown, defaulting to 1000 [ 909.415885][T18401] lo speed is unknown, defaulting to 1000 [ 909.625928][T21568] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.708681][T21568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 909.745648][ T52] lo speed is unknown, defaulting to 1000 [ 909.766896][T21557] lo speed is unknown, defaulting to 1000 [ 910.110720][T21577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4236'. [ 910.124367][T21577] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4236'. [ 910.137539][T21577] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4236'. [ 910.161551][T21577] xt_bpf: check failed: parse error [ 911.069146][T21590] sch_fq: defrate 0 ignored. [ 911.269593][T21603] lo speed is unknown, defaulting to 1000 [ 911.307981][T21603] lo speed is unknown, defaulting to 1000 [ 911.338160][T21583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 911.829851][T21609] lo speed is unknown, defaulting to 1000 [ 911.841778][T21617] bridge0: port 1(gretap0) entered blocking state [ 911.848792][T21617] bridge0: port 1(gretap0) entered disabled state [ 911.863812][T21617] gretap0: entered allmulticast mode [ 911.871040][T21617] gretap0: entered promiscuous mode [ 911.884866][T21611] lo speed is unknown, defaulting to 1000 [ 911.891679][T21609] lo speed is unknown, defaulting to 1000 [ 911.902157][T21603] lo speed is unknown, defaulting to 1000 [ 911.925724][T21611] lo speed is unknown, defaulting to 1000 [ 912.205258][T21609] lo speed is unknown, defaulting to 1000 [ 912.244785][T21619] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4242'. [ 912.499424][T21611] lo speed is unknown, defaulting to 1000 [ 913.534510][T21630] veth0: left promiscuous mode [ 913.602795][T21630] veth1: left promiscuous mode [ 913.618761][T21630] wg0: left promiscuous mode [ 913.634652][T21630] wg1: left promiscuous mode [ 913.639597][T21630] wg2: left promiscuous mode [ 913.655930][T21630] veth0_to_bridge: left promiscuous mode [ 913.686069][T21630] bridge_slave_0: left promiscuous mode [ 913.708192][T21630] veth1_to_bridge: left promiscuous mode [ 913.714682][T21630] bridge_slave_1: left promiscuous mode [ 913.721180][T21630] veth1_to_bond: left promiscuous mode [ 913.728054][T21630] bond_slave_1: left promiscuous mode [ 913.734487][T21630] veth0_to_team: left promiscuous mode [ 913.740628][T21630] team_slave_0: left promiscuous mode [ 913.746968][T21630] veth1_to_team: left promiscuous mode [ 913.753397][T21630] team_slave_1: left promiscuous mode [ 913.759205][T21630] veth0_to_batadv: left promiscuous mode [ 913.771460][T21637] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 913.778786][T21630] batadv_slave_0: left promiscuous mode [ 913.785927][T21630] veth1_to_batadv: left promiscuous mode [ 913.795824][T21630] batadv_slave_1: left promiscuous mode [ 913.801620][T21630] xfrm0: left promiscuous mode [ 913.806824][T21630] veth0_to_hsr: left promiscuous mode [ 913.812931][T21630] veth1_to_hsr: left promiscuous mode [ 913.818596][T21630] hsr0: left promiscuous mode [ 913.823754][T21630] veth1_virt_wifi: left promiscuous mode [ 913.829669][T21630] veth0_virt_wifi: left promiscuous mode [ 913.836445][T21630] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 913.844535][T21630] vlan0: left promiscuous mode [ 913.849572][T21630] vlan1: left promiscuous mode [ 913.856350][T21630] macvlan0: left promiscuous mode [ 913.861651][T21630] macvlan1: left promiscuous mode [ 913.875291][T21630] ipvlan0: left promiscuous mode [ 913.880616][T21630] geneve0: left promiscuous mode [ 913.897896][T21630] geneve1: left promiscuous mode [ 913.908093][T21630] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 913.921471][T21630] veth0_vlan.4: left promiscuous mode [ 913.929870][T21630] pimreg: left promiscuous mode [ 913.941475][T21630] macvlan2: left promiscuous mode [ 913.950722][T21630] macvlan3: left promiscuous mode [ 913.971300][T21630] syztnl0: left promiscuous mode [ 913.983119][T21630] vxlan0: left promiscuous mode [ 913.988386][T21630] syztnl2: left promiscuous mode [ 914.000149][T21630] bridge0: left promiscuous mode [ 914.007236][T21630] bond1: left promiscuous mode [ 914.012726][T21630] ip6gretap1: left promiscuous mode [ 914.018322][T21630] veth2: left promiscuous mode [ 914.023731][T21630] veth3: left promiscuous mode [ 914.029054][T21630] ip6tnl1: left promiscuous mode [ 914.040367][T21630] macvlan4: left promiscuous mode [ 914.047511][T21630] veth4: left promiscuous mode [ 914.058203][T21630] veth5: left promiscuous mode [ 914.064976][T21630] netdevsim netdevsim2 eth0: left promiscuous mode [ 914.077431][T21630] netdevsim netdevsim2 eth1: left promiscuous mode [ 914.087421][T21630] netdevsim netdevsim2 eth2: left promiscuous mode [ 914.100694][T21630] netdevsim netdevsim2 eth3: left promiscuous mode [ 914.108885][ T5887] lo speed is unknown, defaulting to 1000 [ 914.110084][T21633] gretap0: left allmulticast mode [ 914.122898][T21633] gretap0: left promiscuous mode [ 914.128382][T21633] bridge0: port 1(gretap0) entered disabled state [ 914.157165][T21631] bridge0: port 1(gretap0) entered blocking state [ 914.164212][T21631] bridge0: port 1(gretap0) entered disabled state [ 914.171162][T21631] gretap0: entered allmulticast mode [ 914.192327][T21631] gretap0: entered promiscuous mode [ 914.562350][T21658] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4252'. [ 914.567864][T21654] syzkaller1: left promiscuous mode [ 914.637807][T21654] syzkaller1: left allmulticast mode [ 914.784069][T21666] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.972747][T21666] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.982512][T21672] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 915.186339][T21666] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.327887][T21666] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.483048][T21674] SET target dimension over the limit! [ 915.869166][T21666] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.960742][T21666] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.107803][T21666] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.222904][T21668] IPVS: length: 78 != 8 [ 916.232650][T21666] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.304219][T21686] lo speed is unknown, defaulting to 1000 [ 916.355187][T21686] lo speed is unknown, defaulting to 1000 [ 916.481135][T21692] 0猉功D: left allmulticast mode [ 916.486831][T21692] 0猉功D: left promiscuous mode [ 916.492478][T21692] bridge0: port 2(30猉功D) entered disabled state [ 916.925424][T21686] lo speed is unknown, defaulting to 1000 [ 917.724026][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4272'. [ 917.904923][T21728] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.106707][T21728] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.204527][T21728] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.389701][T21732] lo speed is unknown, defaulting to 1000 [ 918.397210][T21732] lo speed is unknown, defaulting to 1000 [ 918.572716][T21732] lo speed is unknown, defaulting to 1000 [ 918.714162][T21728] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.267072][T21728] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.330832][T21753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4280'. [ 919.447632][T21728] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.473533][T21753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4280'. [ 919.559792][T21760] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4283'. [ 919.578606][T21728] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.704925][T21758] IPVS: length: 78 != 8 [ 919.757319][T21728] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.494024][T21785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4287'. [ 920.879400][T21784] lo speed is unknown, defaulting to 1000 [ 921.003180][T21784] lo speed is unknown, defaulting to 1000 [ 921.192218][T21799] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4294'. [ 921.967681][T21809] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input83 [ 922.323825][T21799] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.345383][T21799] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.372026][T21799] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.381694][T21799] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.567750][T21802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.587945][T21802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 922.612055][T21784] lo speed is unknown, defaulting to 1000 [ 922.868508][T21824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4300'. [ 923.234994][T21824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4300'. [ 923.290221][T21844] lo speed is unknown, defaulting to 1000 [ 923.420269][T21855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4306'. [ 923.469799][T21844] lo speed is unknown, defaulting to 1000 [ 923.953400][T21868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4310'. [ 924.223738][T21880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4313'. [ 924.235605][T21880] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4313'. [ 924.256843][T21880] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4313'. [ 924.267644][T21880] xt_bpf: check failed: parse error [ 924.276947][T21844] lo speed is unknown, defaulting to 1000 [ 925.263306][T21864] lo speed is unknown, defaulting to 1000 [ 925.409149][T21864] lo speed is unknown, defaulting to 1000 [ 925.739441][T21909] netlink: 'syz.0.4320': attribute type 1 has an invalid length. [ 925.797975][T21909] bond9: entered promiscuous mode [ 925.803831][T21909] 8021q: adding VLAN 0 to HW filter on device bond9 [ 925.857849][T21909] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4320'. [ 925.873341][T21909] batadv1: entered allmulticast mode [ 925.880627][T21909] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 925.893540][T21909] bond9: (slave batadv1): making interface the new active one [ 925.902087][T21909] batadv1: entered promiscuous mode [ 925.908357][T21909] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 925.930978][T21864] lo speed is unknown, defaulting to 1000 [ 926.218922][T21908] lo speed is unknown, defaulting to 1000 [ 926.231693][T21908] lo speed is unknown, defaulting to 1000 [ 926.252782][T21904] lo speed is unknown, defaulting to 1000 [ 926.308899][T21904] lo speed is unknown, defaulting to 1000 [ 926.380456][T21908] lo speed is unknown, defaulting to 1000 [ 926.787186][T21904] lo speed is unknown, defaulting to 1000 [ 926.876665][T21924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4324'. [ 926.888826][T21924] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4324'. [ 926.904827][T21924] xt_bpf: check failed: parse error [ 927.793680][T21928] xt_bpf: check failed: parse error [ 928.883295][T21939] sch_fq: defrate 0 ignored. [ 928.990602][T21940] xt_CT: No such helper "syz0" [ 929.868528][T21969] lo speed is unknown, defaulting to 1000 [ 929.877334][T21969] lo speed is unknown, defaulting to 1000 [ 929.937571][T21973] __nla_validate_parse: 3 callbacks suppressed [ 929.937599][T21973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4335'. [ 929.993776][T21969] lo speed is unknown, defaulting to 1000 [ 930.030971][T21973] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4335'. [ 930.161024][T21967] xt_bpf: check failed: parse error [ 930.188394][T21981] lo speed is unknown, defaulting to 1000 [ 930.195933][T21981] lo speed is unknown, defaulting to 1000 [ 930.791639][T21986] bond7: (slave gretap1): Releasing active interface [ 930.800687][T21986] vlan3: left allmulticast mode [ 930.806821][T21986] vlan3: left promiscuous mode [ 930.812035][T21986] bridge0: port 1(vlan3) entered disabled state [ 930.833378][T21986] bond9: (slave batadv1): Releasing active interface [ 930.840880][T21986] batadv1: left promiscuous mode [ 930.877434][T21987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4339'. [ 930.924926][T21993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4343'. [ 931.134347][T21981] lo speed is unknown, defaulting to 1000 [ 931.522349][ T5887] page_pool_release_retry() stalled pool shutdown: id 48, 1 inflight 60 sec [ 931.599780][T22023] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input84 [ 932.344393][T22036] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4355'. [ 932.347459][T22034] lo speed is unknown, defaulting to 1000 [ 932.360942][T22034] lo speed is unknown, defaulting to 1000 [ 932.642797][T22034] lo speed is unknown, defaulting to 1000 [ 933.558584][ T6043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.606314][ T6043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.137434][T22083] IPVS: length: 78 != 8 [ 934.388757][T22095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4370'. [ 934.441583][T22095] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4370'. [ 934.462426][T22096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4367'. [ 934.544149][T22095] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4370'. [ 934.579175][T22095] xt_bpf: check failed: parse error [ 935.023418][T22116] lo speed is unknown, defaulting to 1000 [ 935.030433][T22116] lo speed is unknown, defaulting to 1000 [ 935.161510][T22116] lo speed is unknown, defaulting to 1000 [ 935.369604][T22116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4374'. [ 935.913981][T22128] lo speed is unknown, defaulting to 1000 [ 935.921725][T22128] lo speed is unknown, defaulting to 1000 [ 936.043039][T22128] lo speed is unknown, defaulting to 1000 [ 936.584897][T22155] lo speed is unknown, defaulting to 1000 [ 936.633186][T22155] lo speed is unknown, defaulting to 1000 [ 936.712736][T22144] lo speed is unknown, defaulting to 1000 [ 936.719859][T22144] lo speed is unknown, defaulting to 1000 [ 936.767553][T22155] lo speed is unknown, defaulting to 1000 [ 936.982001][T22156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4387'. [ 937.180421][T22162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4388'. [ 937.484104][T22162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4388'. [ 937.618251][T22174] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4392'. [ 937.712636][T22178] IPVS: length: 78 != 8 [ 937.843075][T22179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4382'. [ 938.101153][T22179] batman_adv: batadv0: Interface activated: dummy0 [ 938.131061][T22179] batadv0: mtu less than device minimum [ 938.164070][T22179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.178101][T22179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.191184][T22179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.204401][T22179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.217714][T22179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.229924][T22179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.242871][T22179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.256113][T22179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.268972][T22179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.378947][T22144] lo speed is unknown, defaulting to 1000 [ 938.568765][ T6061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.584469][ T6061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.593794][T22205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4400'. [ 938.701443][T22205] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4400'. [ 938.765988][T22213] bridge0: port 1(gretap0) entered blocking state [ 938.782750][T22205] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4400'. [ 938.810844][T22213] bridge0: port 1(gretap0) entered disabled state [ 938.819002][T22205] xt_bpf: check failed: parse error [ 938.863521][T22213] gretap0: entered allmulticast mode [ 938.870648][T22213] gretap0: entered promiscuous mode [ 939.022223][T22215] gretap0: left allmulticast mode [ 939.032134][T22215] gretap0: left promiscuous mode [ 939.070836][T22215] bridge0: port 1(gretap0) entered disabled state [ 939.447910][T22201] lo speed is unknown, defaulting to 1000 [ 939.515543][T22201] lo speed is unknown, defaulting to 1000 [ 939.527306][T22153] lo speed is unknown, defaulting to 1000 [ 939.877929][T22233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4399'. [ 939.974101][T22153] lo speed is unknown, defaulting to 1000 [ 940.773238][T22153] lo speed is unknown, defaulting to 1000 [ 940.773612][T22261] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input85 [ 940.965064][T22268] IPVS: length: 78 != 8 [ 941.186888][T22258] lo speed is unknown, defaulting to 1000 [ 941.235442][T22201] lo speed is unknown, defaulting to 1000 [ 941.235498][T22258] lo speed is unknown, defaulting to 1000 [ 941.278318][T22272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4416'. [ 941.313928][T22272] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4416'. [ 941.402437][T22272] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4416'. [ 941.443345][T22272] xt_bpf: check failed: parse error [ 941.715507][T22258] lo speed is unknown, defaulting to 1000 [ 941.843163][T22276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'. [ 942.455427][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4418'. [ 943.771144][T22310] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 943.844267][T22313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4429'. [ 944.082514][T22313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4429'. [ 944.604986][T22305] tipc: Bearer : already 2 bearers with priority 10 [ 944.619621][T22305] tipc: Bearer : trying with adjusted priority [ 944.629294][T22305] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 944.646980][T22334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4434'. [ 944.687136][T22332] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4434'. [ 944.815768][T22311] IPVS: length: 78 != 8 [ 944.880375][T22339] lo speed is unknown, defaulting to 1000 [ 944.908598][T22339] lo speed is unknown, defaulting to 1000 [ 944.959796][T22342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4437'. [ 944.993474][T22342] xt_bpf: check failed: parse error [ 945.936565][T22361] lo speed is unknown, defaulting to 1000 [ 945.960912][T22339] lo speed is unknown, defaulting to 1000 [ 945.969237][T22361] lo speed is unknown, defaulting to 1000 [ 946.829766][T22340] __nla_validate_parse: 2 callbacks suppressed [ 946.829799][T22340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4436'. [ 947.028586][T22387] IPVS: length: 78 != 8 [ 947.112596][T22340] net_ratelimit: 11 callbacks suppressed [ 947.112611][T22340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 947.146318][T22361] lo speed is unknown, defaulting to 1000 [ 947.253588][T22382] lo speed is unknown, defaulting to 1000 [ 947.260573][T22382] lo speed is unknown, defaulting to 1000 [ 947.269963][T22374] tipc: Bearer : already 2 bearers with priority 10 [ 947.292501][T22374] tipc: Bearer : trying with adjusted priority [ 947.306554][T22374] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 947.337528][T22389] lo speed is unknown, defaulting to 1000 [ 947.363403][T22389] lo speed is unknown, defaulting to 1000 [ 947.554606][T22394] macsec0: entered allmulticast mode [ 947.561720][T22394] veth1_macvtap: entered allmulticast mode [ 947.568485][T22394] macsec0: left allmulticast mode [ 947.573931][T22394] veth1_macvtap: left allmulticast mode [ 948.010818][T22382] lo speed is unknown, defaulting to 1000 [ 948.674131][T22389] lo speed is unknown, defaulting to 1000 [ 948.814561][T22422] lo speed is unknown, defaulting to 1000 [ 948.821787][T22422] lo speed is unknown, defaulting to 1000 [ 949.361062][T22429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4466'. [ 949.617856][T22422] lo speed is unknown, defaulting to 1000 [ 949.623153][T22429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4466'. [ 950.176920][T22443] xt_policy: neither incoming nor outgoing policy selected [ 950.610956][T22454] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input86 [ 950.717802][T22447] lo speed is unknown, defaulting to 1000 [ 950.800923][T22447] lo speed is unknown, defaulting to 1000 [ 951.282565][T22466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4478'. [ 951.298190][T22466] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4478'. [ 951.312525][T22466] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4478'. [ 951.325541][T22467] ------------[ cut here ]------------ [ 951.332243][T22467] WARNING: CPU: 0 PID: 22467 at net/ipv4/udp_offload.c:118 udp_tunnel_update_gro_rcv+0x31d/0x670 [ 951.343055][T22467] Modules linked in: [ 951.347189][T22467] CPU: 0 UID: 0 PID: 22467 Comm: syz.2.4477 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 951.358142][T22467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 951.368486][T22467] RIP: 0010:udp_tunnel_update_gro_rcv+0x31d/0x670 [ 951.375250][T22467] Code: 23 48 89 eb e8 14 47 4f f7 c7 05 ca a9 32 10 01 00 00 00 31 ed 45 31 ed e9 80 01 00 00 e8 fb 46 4f f7 eb 40 e8 f4 46 4f f7 90 <0f> 0b 90 e9 5a 02 00 00 e8 e6 46 4f f7 eb 2b e8 df 46 4f f7 eb 24 [ 951.395082][T22467] RSP: 0018:ffffc90003b9fc40 EFLAGS: 00010293 [ 951.401212][T22467] RAX: ffffffff8a72a88c RBX: 0000000000000000 RCX: ffff88802524bc00 [ 951.409348][T22467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 951.411217][T22447] lo speed is unknown, defaulting to 1000 [ 951.417434][T22467] RBP: 1ffff1100b626987 R08: ffffffff8a72a5d9 R09: 1ffffffff207a2ee [ 951.424412][T22466] xt_bpf: check failed: parse error [ 951.431642][T22467] R10: dffffc0000000000 R11: fffffbfff207a2ef R12: dffffc0000000000 [ 951.431670][T22467] R13: ffff88805b1345c0 R14: ffff88805b134c38 R15: 0000000000000000 [ 951.431687][T22467] FS: 00005555632cf500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 951.462720][T22467] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.469376][T22467] CR2: 000000110c320436 CR3: 00000000807b2000 CR4: 00000000003526f0 [ 951.477664][T22467] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 951.485896][T22467] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 951.494194][T22467] Call Trace: [ 951.497552][T22467] [ 951.500667][T22467] ? __warn+0x165/0x4d0 [ 951.505055][T22467] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 951.511181][T22467] ? report_bug+0x2b3/0x500 [ 951.515940][T22467] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 951.522160][T22467] ? handle_bug+0x60/0x90 [ 951.526589][T22467] ? exc_invalid_op+0x1a/0x50 [ 951.531342][T22467] ? asm_exc_invalid_op+0x1a/0x20 [ 951.536559][T22467] ? udp_tunnel_update_gro_rcv+0x69/0x670 [ 951.542831][T22467] ? udp_tunnel_update_gro_rcv+0x31c/0x670 [ 951.548832][T22467] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 951.554978][T22467] ? sk_common_release+0x71/0x2e0 [ 951.560339][T22467] udp_destroy_sock+0x2c9/0x340 [ 951.565594][T22467] ? __pfx_udp_destroy_sock+0x10/0x10 [ 951.571043][T22467] sk_common_release+0x71/0x2e0 [ 951.576301][T22467] inet_release+0x17d/0x200 [ 951.581047][T22467] sock_close+0xbc/0x240 [ 951.585692][T22467] ? __pfx_sock_close+0x10/0x10 [ 951.590652][T22467] __fput+0x3e9/0x9f0 [ 951.594913][T22467] task_work_run+0x24f/0x310 [ 951.599574][T22467] ? _raw_spin_unlock+0x28/0x50 [ 951.604862][T22467] ? __pfx_task_work_run+0x10/0x10 [ 951.610466][T22467] ? syscall_exit_to_user_mode+0xa3/0x340 [ 951.616350][T22467] syscall_exit_to_user_mode+0x13f/0x340 [ 951.622311][T22467] do_syscall_64+0x100/0x230 [ 951.626954][T22467] ? clear_bhb_loop+0x35/0x90 [ 951.631715][T22467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.637994][T22467] RIP: 0033:0x7f27e598d169 [ 951.642570][T22467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.662520][T22467] RSP: 002b:00007ffe0c61c478 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 951.671174][T22467] RAX: 0000000000000000 RBX: 00000000000e83d6 RCX: 00007f27e598d169 [ 951.679247][T22467] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 951.687693][T22467] RBP: 00007f27e5ba7ba0 R08: 0000000000000001 R09: 000000030c61c76f [ 951.695801][T22467] R10: 00007f27e5800000 R11: 0000000000000246 R12: 00007f27e5ba5fac [ 951.704040][T22467] R13: 00007f27e5ba5fa0 R14: ffffffffffffffff R15: 00007ffe0c61c590 [ 951.712123][T22467] [ 951.716256][T22467] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 951.723628][T22467] CPU: 0 UID: 0 PID: 22467 Comm: syz.2.4477 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 951.734720][T22467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 951.744938][T22467] Call Trace: [ 951.748243][T22467] [ 951.751332][T22467] dump_stack_lvl+0x241/0x360 [ 951.756057][T22467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.761472][T22467] ? __pfx__printk+0x10/0x10 [ 951.766522][T22467] ? _printk+0xd5/0x120 [ 951.770872][T22467] ? __init_begin+0x41000/0x41000 [ 951.775917][T22467] ? vscnprintf+0x5d/0x90 [ 951.780266][T22467] panic+0x349/0x880 [ 951.784180][T22467] ? __warn+0x174/0x4d0 [ 951.788346][T22467] ? __pfx_panic+0x10/0x10 [ 951.792979][T22467] __warn+0x344/0x4d0 [ 951.796994][T22467] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 951.802819][T22467] report_bug+0x2b3/0x500 [ 951.807170][T22467] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 951.813080][T22467] handle_bug+0x60/0x90 [ 951.817357][T22467] exc_invalid_op+0x1a/0x50 [ 951.821974][T22467] asm_exc_invalid_op+0x1a/0x20 [ 951.827027][T22467] RIP: 0010:udp_tunnel_update_gro_rcv+0x31d/0x670 [ 951.833463][T22467] Code: 23 48 89 eb e8 14 47 4f f7 c7 05 ca a9 32 10 01 00 00 00 31 ed 45 31 ed e9 80 01 00 00 e8 fb 46 4f f7 eb 40 e8 f4 46 4f f7 90 <0f> 0b 90 e9 5a 02 00 00 e8 e6 46 4f f7 eb 2b e8 df 46 4f f7 eb 24 [ 951.853345][T22467] RSP: 0018:ffffc90003b9fc40 EFLAGS: 00010293 [ 951.859460][T22467] RAX: ffffffff8a72a88c RBX: 0000000000000000 RCX: ffff88802524bc00 [ 951.868202][T22467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 951.876505][T22467] RBP: 1ffff1100b626987 R08: ffffffff8a72a5d9 R09: 1ffffffff207a2ee [ 951.885387][T22467] R10: dffffc0000000000 R11: fffffbfff207a2ef R12: dffffc0000000000 [ 951.893373][T22467] R13: ffff88805b1345c0 R14: ffff88805b134c38 R15: 0000000000000000 [ 951.901458][T22467] ? udp_tunnel_update_gro_rcv+0x69/0x670 [ 951.907286][T22467] ? udp_tunnel_update_gro_rcv+0x31c/0x670 [ 951.913211][T22467] ? sk_common_release+0x71/0x2e0 [ 951.918342][T22467] udp_destroy_sock+0x2c9/0x340 [ 951.923219][T22467] ? __pfx_udp_destroy_sock+0x10/0x10 [ 951.928710][T22467] sk_common_release+0x71/0x2e0 [ 951.933583][T22467] inet_release+0x17d/0x200 [ 951.938105][T22467] sock_close+0xbc/0x240 [ 951.942902][T22467] ? __pfx_sock_close+0x10/0x10 [ 951.947860][T22467] __fput+0x3e9/0x9f0 [ 951.951880][T22467] task_work_run+0x24f/0x310 [ 951.956485][T22467] ? _raw_spin_unlock+0x28/0x50 [ 951.961354][T22467] ? __pfx_task_work_run+0x10/0x10 [ 951.966743][T22467] ? syscall_exit_to_user_mode+0xa3/0x340 [ 951.972483][T22467] syscall_exit_to_user_mode+0x13f/0x340 [ 951.978219][T22467] do_syscall_64+0x100/0x230 [ 951.983029][T22467] ? clear_bhb_loop+0x35/0x90 [ 951.987901][T22467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.993915][T22467] RIP: 0033:0x7f27e598d169 [ 951.998550][T22467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.018516][T22467] RSP: 002b:00007ffe0c61c478 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 952.027041][T22467] RAX: 0000000000000000 RBX: 00000000000e83d6 RCX: 00007f27e598d169 [ 952.035025][T22467] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 952.043013][T22467] RBP: 00007f27e5ba7ba0 R08: 0000000000000001 R09: 000000030c61c76f [ 952.051256][T22467] R10: 00007f27e5800000 R11: 0000000000000246 R12: 00007f27e5ba5fac [ 952.059343][T22467] R13: 00007f27e5ba5fa0 R14: ffffffffffffffff R15: 00007ffe0c61c590 [ 952.067673][T22467] [ 952.071304][T22467] Kernel Offset: disabled [ 952.075852][T22467] Rebooting in 86400 seconds..