last executing test programs: 4.43451016s ago: executing program 4 (id=1283): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[], 0x114}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r1, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x80000d9}, 0x8) listen(r1, 0x0) shutdown(r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x200, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 3.944238756s ago: executing program 3 (id=1288): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) socket$unix(0x1, 0x0, 0x0) socket(0x3, 0x2, 0x8000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x847b023adc5ee2e2) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 3.888476091s ago: executing program 2 (id=1289): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(sm4-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 3.772836305s ago: executing program 2 (id=1290): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="201b00006a00000018297a000004000000000000000000eedc756711869ffb1c4c8aed8bb2e5d028eeaad5ba16a0f56700000003f810e25b683a1ad7e5a8711e149a251d089dc4f5b1d526d6be921a85df1ec442ecdf38b6cd1a7fbc4958e1e07105e3214551f10b6b4e91bb1e8b2985efa2a71787ade48ea6ae1b649e86bd52bf7f314a8cf0c8883b3b5f12a76f570e90565dd8d97c7dd566c158a74a70d466d75d58718628d7136ddf1ba1f308dc8251c9a00a02b7a0b14408c0d72f04d0019af8beb988a4b8d4ef5f285c7fb842931f233ffe03c208"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'dummy0\x00', 0x0}) bind$packet(r9, &(0x7f0000000080)={0x11, 0xf8, r10, 0x1, 0x83, 0x6, @multicast}, 0x14) bind$packet(r9, &(0x7f0000000140)={0x11, 0x18, r10, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x27, 0xe, 0x0, &(0x7f0000000100)="f80204000000000000007f5b88a8", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.772251759s ago: executing program 3 (id=1291): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080)={r2, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000005300), 0x1, 0x0) unshare(0x62040200) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x50000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000054001ffff7ff00000800000007000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r10, @ANYBLOB="01000000ff"], 0x38}}, 0x0) setsockopt$packet_int(r5, 0x107, 0x7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r11, 0x107, 0x11, &(0x7f0000002140)=0x7ff, 0x4) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) 3.492107868s ago: executing program 4 (id=1292): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=""/75, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1ff}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 3.386918543s ago: executing program 1 (id=1294): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r4, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x1, 0x2, 0x0) shutdown(r5, 0x1) sendmmsg$unix(r5, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1}, &(0x7f0000000200)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x22020400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x1001d61, 0x457, 0x2, 0x28d4, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$nfc_llcp(r5, 0x118, 0x4, &(0x7f0000000180)=""/32, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x2c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9}]}, 0x20}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x3, &(0x7f00000003c0)={{r6}, 0x0, 0x0}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d4755bf5", 0x4}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x8) 3.047866486s ago: executing program 1 (id=1295): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000ddff1700850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000080), &(0x7f0000000500)=r2}, 0x20) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) accept4$x25(0xffffffffffffffff, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x800) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100003000508011000700be"], 0x58}}, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r11, &(0x7f0000000400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f0000000140), 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0xc0}}], 0x1, 0x40008c0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000240)={0x1d, r12}, 0x18) connect$can_j1939(r10, &(0x7f00000000c0)={0x1d, r12, 0x3}, 0x18) sendmmsg(r10, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000280)='\"', 0x1}, {&(0x7f0000000680)="3f8ee9dd874113a5180ec80fe4e129d02dc67aca38e69010180ccf3112669d5529acaed19b2bb45de74382847e45923a8abe00d5f9d4af195d54645ab773c7471bf1160e4d5fb2f5b5840b52b651ca849e055e463d3b75b5f7b1cdccc494a58a123f7ad4efbd12189afab52b472f5d0fc584d4de25a152bbbf2744dfac90ec11506b33ec3ba20720ba8b55ad3a5f8d", 0x8f}, {&(0x7f0000000740)="3be679aca1ed7ed4c21702a7f5ab6c1069caa7c667e436b3b59d3aab4af41261e8806cb525fc70a1bd3f9a2438d2826ed7807a77e7b9c0e2371e86ff5469a2f541586678a2e72ccab623189b50eb4d049166cb9e8aee68f54df6f5a13db83b445995b2269cf8c78af2c00713a5531e998892fc839f139e9c96368ad5da88bab743842296536d847a6203f121366a0306c2c3a8dee85a19cf315780fe425229c193a117e9aecd2911fd4823181a9ede3116a956a1b238681828c9395743e134e406de7bce8367c904f411da2bc282ac57cd659d471bf0a3b7e89278ed743d9c008a2bbf4998e52d1570bb3997e481397794ab2ea6bb27c39913404c35ca15260656ec134cceef840d2de4fcb4b838004815b7be537e62e69efc7529f4fb47ad3ba1878d5026a7dd31adcdf979ee19e2652d24f9ff8114611e11c44d73aeab3d19cf098443b9c31bb77451865bf7b30830c73063e18664794e25be47662ab941d69babcb09a283fb4479b52711c110b23aad24ebc6ca9908f585de91338cf02abd83a210a443ebfbe107a47ac8c7e86e6434cfb1bfd5b91c1e3f02353ff86758884091fed7281d54e36822a535aa26afab6904b53a3768da2f354d77c94bb9fff215d4d4d0e340eed2fe4b4dd4e682701ec28d1f8e739c759213d8f204fcef492622054c2e5833fd73e8fbf916429dea4bd1255673a78028b099ef01ccd16e3f394d8e7fdebf197b27f3cbb4147ce5063d15a44bc64183739060e435c639573d5e8f52f334087514b36ac109cf7e0e86280f9044a068c1a1925cf4fd5789b49db74353c64bbb403ba5febd553a85ff1771060aab8c63734f7065afb0134f3d3f441641dd05ce05393b6627663c1196caaba0437233eed837b0e1b4617206d3719aba19da10c23b3bc6342002ca050f5f013dfe19f85e03ce33ff8ea3cf326adeb0bd9a4853a60283d242589e852a466ceaef0c3088c59113a1da5dc3e3eee66b08401c2a5233fff3cdf03d611d1c6a528885125874e382dc84098820285ca13ab4a2e42473fcf816d79505fa296efff60ceacbe4348971032eca68f93b686c5f7dece90f0541d19125f8bd081b6ab0a056e3a32f32162831a3f12d22f7f6b1ca0d1b9073cf2d0b8868a13b0ff849e5af0bc32c9a0e25ab2cfd46e3af7e0d1a0e1153cfdadd8596d6114e968ce2d8c22c326272f982737fda4fe64af32050ab056e5d1a57797be8817c546163694c4f8654fbd5945b68b5a336b0901b6283bfd26b332e9398dacc0ae47edb2d508be9399ebfb4195b2523594d8b8294b17643292f0ac241d3bc79bb438486ea9a823a9aa6e1217bceb82051a99189bec83e6c1c0795bb15d20cc0d58c57016f84f3a020182c2ce2f5ec3bf478ab8170ee0e4627d62a95b69b5fdf63e4298351e711cb066e8353a3fa2c181655dacb44f391c687369ee8a20d52dd556b50709ea4621717c982a224476d1c01c673708753d469a2b52ab774137204fb2fef3e02097a66cf8c9b3b1ee66ba29d9b40943f0be8920bd1110f5af241221e14f840f9f11bf765e037a943815dae4670004f625d5118fc79c0e250b99beea7cd1b9a5f700657e81b13a9e098fdef79e2608a279cc08aae16a7ee0a9cd17c680ef8ba5f99700ae7e1fc78cffb597c5e67d97c32b70429a07cf18500d49c60c9570be0bd19b08db42f39b64ea5470be920f2349a39d8c27fb0e7be274ad3f25bb7d0f8c6d05f0918bc4a07ee04ab4371b740b8737558643bdb32073da53028012999ae4c76fe6d4864d5448e159f2e136373cd528352ef7bc309cba74afcb0eb58ad79506f39fdb07642ce71679e657e2fc914538d8acd2058e5acf5574660e9f103d58ea4bd27f128c8832b58954f8904b80f675fabb41a7170bfae1adf817a33a03bbdad0bde9ef69df544e3644551e97df27c625e7b7552ca47af8452efd43e2e086acc0ef16edf1df01467e1cd9298fb3d925521d06404ab86780da385571b1e708370816f95724242fc2f48fd79aff1a7386cb47f1c3bb0d65654912f8dadfd655e0b79305c03eeeb07735476b0b0a2ff000dc5b6fb1249902fca8dc8883e81569de6895e177a867b1a8fff76290c48ec5a4a8f31744bebdda0c9d0b528ef936e08ff5e9103fa8f4b6262c989758cab2e5fc2b9279c532616184a8e5a7197e95d68d5beec955ce5859a606a4e597de26b428fdc5505463258a07d2874f2d6303899472dabe54c85c8a1e1923bd9947374c49cebe5fe1cbe7f1f8b38f934b3880af7782ab1239ec514b9da33f5d754fee52e4f7493143cde3f0396c1b9b1a1591c", 0x66a}], 0x3}}], 0x2, 0x40000) bind$can_raw(r9, &(0x7f0000000000)={0x1d, r1}, 0x10) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r13, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r13, 0x40107446, 0x20000000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) close(r9) 2.698738884s ago: executing program 2 (id=1297): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(r5, &(0x7f0000000200), 0x48400) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)="c70f7906eb9523ea77dbb6d76dfc5ca7e83365a719f409ada71880f3a988a9468f68", 0x22}, {&(0x7f0000000300)="fbe65e068dba0f9233ed832421562b6b9761b390e47e7d66fe891fc3d9ff4cd138504143641914e7e1b284f715dfba10b96f023c49d72e454f2b1805c7e3bbf6000000b9c775bb657574a5c99e9dd0100e24c0f3b57933f144944dc8046e12", 0x5f}], 0x2) r7 = accept4(r6, 0x0, 0x0, 0x0) sendfile(r7, r3, 0x0, 0xfacf) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x345a0000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x884) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r13, 0x0) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16=r13, @ANYRES32=0x0, @ANYBLOB="4008004e590601"], 0x58}}, 0x0) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/126, 0x7e}], 0x1}, 0x12163) recvmsg(r0, &(0x7f0000000a80)={&(0x7f0000000800)=@qipcrtr, 0x80, &(0x7f0000000540)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1, &(0x7f0000000980)=""/232, 0xe8}, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2.669067648s ago: executing program 0 (id=1298): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d80)=@security={'security\x00', 0x3a, 0x4, 0x530, 0xffffffff, 0x0, 0x300, 0x3a0, 0x110, 0xffffffff, 0x498, 0x498, 0x498, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xffffff00, 'wlan0\x00', 'syzkaller0\x00', {0xff}, {}, 0x6c, 0x2, 0x42}, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x5, 0x0, [{0x77e3, 0x3, 0x7, 0xd}, {0x1a, 0x4, 0x2, 0xfffffff8}, {0x1fa4, 0x6, 0xd, 0x5}, {0x1, 0x0, 0x1, 0xfffffff2}, {0x8, 0x9, 0x10, 0x8}, {0xfffe, 0x6, 0x9, 0x401}, {0x82c5, 0x2, 0x9, 0x1}, {0x1ff, 0x4, 0x6, 0x200}, {0x0, 0x7, 0xfe, 0x2}, {0x2, 0x5, 0x5, 0x2}, {0xf2f, 0x8, 0x6, 0x5}, {0x5e8, 0x8, 0x9, 0x71cd1e9e}, {0x4, 0x7, 0x9, 0x5c58}, {0x6, 0x9e, 0x6, 0x83}, {0x821e, 0xa, 0x8, 0x3}, {0x2000, 0x76, 0x6, 0x7}, {0x6c0, 0xe6, 0x4, 0x2}, {0x1, 0x5, 0xfd, 0x7}, {0x4, 0x9, 0x9, 0xd9ad}, {0x1, 0x8, 0x0, 0xb61}, {0x8, 0x7, 0x1, 0x8}, {0xf6ae, 0x8, 0x5, 0x1}, {0x2, 0x7, 0x5, 0x3}, {0x7, 0x2, 0x6, 0xc}, {0x2, 0x3, 0xf3, 0x3}, {0xfe00, 0x7f, 0x7, 0x81}, {0x9, 0x81, 0x6, 0x6}, {0x800, 0x3, 0x25, 0xf}, {0x4, 0x71, 0xfe, 0xfff}, {0x40, 0x7b, 0x7f, 0x3}, {0xffff, 0xf, 0x6, 0xffff0001}, {0x2, 0x9, 0x3, 0x635}, {0x3, 0x0, 0x8, 0x2}, {0x2, 0x5, 0x8, 0x7}, {0x6, 0x5, 0x2, 0x525a}, {0x6, 0x7, 0xfc, 0x8001}, {0x0, 0x6, 0xe}, {0x8, 0x6, 0x6, 0x283ec228}, {0x5, 0x1, 0x5, 0x2}, {0x8, 0x2, 0x2, 0x3}, {0x1, 0xf9, 0x7f, 0x591}, {0x401, 0x4, 0xb2}, {0xa17, 0x4, 0x4, 0x2}, {0x9, 0x0, 0xe, 0x7}, {0x8, 0x0, 0x5, 0x8}, {0x8, 0x3, 0x54, 0xca2}, {0x20, 0x10, 0x6, 0x1}, {0x6f1d, 0x7f, 0x2, 0xf2}, {0x2, 0x7, 0x2, 0x7}, {0x1, 0x9, 0x1, 0x3}, {0x2, 0xd5, 0x75, 0xff}, {0xcce, 0xd4, 0x8, 0x2}, {0xff, 0x7, 0x5, 0x1}, {0x7, 0x7, 0x3, 0x1}, {0x3, 0x6, 0xd, 0xffff}, {0xffff, 0x8, 0xff, 0x3}, {0x0, 0xfb, 0xfb, 0xd1b3}, {0x2, 0xa, 0x7, 0x4}, {0x872, 0x0, 0x2, 0x7ffc}, {0x0, 0x5, 0x4, 0x4}, {0x3, 0x40, 0x2, 0xf52}, {0x5a4, 0x2, 0x9, 0xffffffff}, {0x7, 0x1, 0x3, 0x6}, {0x6, 0x2, 0x4, 0x4}], {0x7}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x5]}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x2}, {0x2, 0x4, 0x1}, 0xe65, 0xc000000}}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001000010400f924153cae64c75dfcff090000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163767461700004000280"], 0x34}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpuset'}, {0x0, 'net_cls'}]}, 0x11) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r10) sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r10, 0x0, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000d00)=""/72, 0x48}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/137, 0x89}], 0x3}}], 0x3, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r12}, &(0x7f0000000600), &(0x7f0000000640)=r11}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 2.452816224s ago: executing program 1 (id=1299): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) write(r2, &(0x7f0000000140)="eb5999d66f8eca1e9221f6e0eeed6efceea93fd2fc8273e20a50a7712c3216037d7bd0ee500602a64d84e2801b62e1194aef169bd15c3e24e1f198f59e6ae9b2548efd753fc974feb34d5359d8a9a7de346aba782f4e36cec8727127413fd0e4f516a512d15e20908d63e9cbcc7e6f4a1772c298d20c79af053a22e760cf586bb7d5ae7b0fe8af287fb3b73a2c02431359d04d5a583ec88787de8d8ee80a4e7778e3174397f7abfaf55ddfff508b79859014c720b6fc502e7d58a6e9f3b98395083c20db6c22496e42e1985ca07204ed2e1b", 0xd2) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x80}, 0xc) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000001400)={{r3}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000007000000000000000e0000000000000001000000000000000900000000000000070000000000000002000000000000000400"/71]}, @devid}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'veth0_to_hsr\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x0, 0x20}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x3, 0x8, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x14, "02faea85e630c91d8aa58f67263587935c17ee73e3e6000789f0ebec8e9e"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r10, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r10, &(0x7f0000000080)='THAWED\x00', 0x7) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fcdbdf25240000000a0001007770616e30000000704248ccd85d740f106fab6c5dc3cdeaaef41fec3dd0773be4eaafd2afb5ecf96b98d40575b3ff15ca82c7f98c55b435939f042097c7e236283d24933f1919e8f81b33a2ec625955c6d752cbe31b70f9e55354d46aacb53990476144d28c7e71cc49d783f7965379da0e553e667b9eaacb140c677f8688a3a5296ddabfb1125d6cf94e17fd8f4a57b2f42928af26dbf9492a04d394722e573ceb99"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) r11 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r11, 0x10d, 0xb, &(0x7f0000000000), 0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 2.440730426s ago: executing program 0 (id=1300): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(sm4-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 2.387880508s ago: executing program 4 (id=1301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000100000000000000000000200000631118000000000095000000000000002e62e3c8eaed94cb4713d234ebb33fe12f42b8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x18, 0x0, 0x3, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="39301b42", 0x4}], 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000000c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="6bee85a7ed06b996ff9256483d9f3b41b44370c092bad25e572fcce500567c21666f97384c3c94bca88825678f5c4279fa47408d10d0d21a1860705341f7e07711ecfb85807c95be8709c15e834d1e384aaa62429a7dd545ce105bcbf47e37d0d60f57c22e54c1c27d85137f8b867b8ebabfe1d0484fb1bb5edfee7fa5ba14283c95dea2ea5a94921ee79f34451510d6e4a045c7f8f27df7702c374bce518fb380e606ed7e7b382c447c45dcf47e78d048", 0xb1}, {&(0x7f0000000040)="9c", 0x1}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="050000000000000073113200000000009500a50500000000288909154e8847117e6049be646d90997ef5d196fbdcb27360f56ed610519f304fd2ea504ff34bfb05c31d087db63a517d1e232b8d87537bb4f0b0aebe7a6a5864ab7fa9b32ed85847e3172090189298d010ba93c8d3817258d3ebcb2ca2b93383237919e41a370d7dc2000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0x9}, 0x9c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001000)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, r9) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_DISCONNECT(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x80) 2.221920985s ago: executing program 0 (id=1302): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[], 0x114}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r1, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x80000d9}, 0x8) listen(r1, 0x0) shutdown(r1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 2.220588934s ago: executing program 1 (id=1303): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x6) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f00000002c0)=""/4083, 0xff3}, {&(0x7f00000012c0)=""/119, 0x77}], 0x3}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001340)=""/243, 0xf3}, {&(0x7f0000001440)=""/210, 0xd2}, {&(0x7f0000001680)=""/136, 0x88}, {&(0x7f0000001840)=""/202, 0xca}, {&(0x7f0000002c00)=""/4100, 0x1004}, {&(0x7f0000000080)=""/114, 0x72}], 0x6}}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x40000000, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r5) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'veth1_vlan\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @random="43ef452f40e7", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "418dda", 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ed5a22", 0x0, "a900"}}}}}}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000015c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002bbd7000fcdbdf250800000008003b00040000000500303100050000000a000900069d2591c858000008003c000010000008003c00090000000500300001000000db7e27b4ccbf5a8c9abe3c34746eee722fbdb8e19399e0806baeecbed0ae4af049ad36bc15683bdee17a978cd987f275c38f96317b59e2176d4a5d7db0ddfb53ccd005b6"], 0x58}, 0x1, 0x0, 0x0, 0x20010891}, 0x20048053) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/157, 0x9d}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000880)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0xe}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x4}}}]}]}]}}]}, 0x60}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) 2.218768416s ago: executing program 4 (id=1304): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e25, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="100000a1"], 0x10}}], 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRES32, @ANYBLOB="00000000000000000000218cccf153de00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(r6, 0x40049409, r5) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f00000001002700000000000800"], 0x6c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newae={0x48, 0x1e, 0x101, 0x70bd2b, 0x25dfdbfb, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0xa, 0x2b}, @in6=@private2, 0xb413, 0x3501}, [@etimer_thresh={0x8, 0xc, 0xa56}]}, 0x48}}, 0x20008000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x3c, r9, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x3c}}, 0x0) 1.741372836s ago: executing program 3 (id=1305): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x100000000, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, 0x4, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @initial, {0x6}, @value=@ver_80211n={0x0, 0xd, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x32, @void}}]}, 0x40}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/4096, 0x1000}, 0x40}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000001c0), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, 0x0, 0x701, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc38, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0xe, 0xfffffffffffffe80, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000240)="a4da57df712462aa0da7152f892444f624ca72c3ae1da8dc3a065519945631d50bc06e2b5ca04b349157652bb6b912ee5ec14ffd1159d51c0440a0009961b0bf80500850f60157c1f9e7eb4150cee1e98d13a7b79bf6bf2cf78e1148411375bbfb3916cc871e0fdfca0f39b57d3c3ad4550661475c2f8fade0bd6adf2e60716dcc9367223c11886db15f61a7d82f3ca6adb7"}, 0x28) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r8, 0x0) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x44000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 1.712540133s ago: executing program 2 (id=1306): r0 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000400000040000000050000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000faffffff00"/25], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010148000000000000000000000008000a40000000000900020073797a32007f4e7fb6df000000010073797a30000000000800054000000002200009801c0002800500018008000140000000000c0001800800014000000000140000001000010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) unshare(0x22020400) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0}}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x2, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005) sendmmsg(r0, &(0x7f0000003b00)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x90) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="140100002c0001ffffe000000000000001"], 0x114}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x2010, 0xffffffffffffffff, 0x8884d000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, 0x0, 0x0) 1.440941076s ago: executing program 2 (id=1307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000500000000000000000100000000911214000006000094fd000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r4, 0x0, 0x20040810) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000019c0)={0x780, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x734, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x72d, 0x4, "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"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x749}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x34}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x780}, 0x1, 0x0, 0x0, 0x4000}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=ANY=[@ANYBLOB="f4030000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="d503330050000000080211000001080211000000505050505050000001000000000000000000000001007206030303030303ddab91401be8e328674bef7c3062cc64b709feeaa562cea181a0ac3a51955b36f3c17eae6e5b8199ccaaa5665a31047d08623e1060aaf5385b074013b38c481fe08867d7fd217eb8cee6876d61cd6aba25a070cfa267f6e567e960cfa814f7034101cb1025b7363590c76a03173d37a16d14c4a73cb576036c0d40e65a41e5770330efac9683a109000000000000002d27300d0edeb8801eee9411c9223bcfe58bb8345a10811b05d5fd71b972ddb585a892d2b0"], 0x3f4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="9900330080000000080211000001080211000000505050505050"], 0xb8}}, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x20000400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r1, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x48, &(0x7f0000000340)=[@in={0x2, 0x0, @broadcast}, @in6={0xa, 0x0, 0x0, @private2}, @in6={0xa, 0x2, 0x0, @mcast1, 0xffff}]}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001740)={0x2c, r10, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 1.370351613s ago: executing program 0 (id=1308): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2fff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xfc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x4f, 0x0, 0xffff0000, 0x100}, 0x8, 0x0, 0x7, 0x235, 0x9, 0x13, 0xc, 0x1b, 0x8, 0x2, {0x4, 0x1ff, 0x0, 0x1, 0x2, 0x2}}}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x28, 0x7, 0x1268, 0x27d, 0x0, 0x5, 0x3, 0x2}}, {0x8, 0x2, [0x899c, 0x1]}}, {{0x1c, 0x1, {0xf7, 0x4, 0x9, 0xfff, 0x2, 0x1ff, 0x27, 0x7}}, {0x12, 0x2, [0x10, 0x9, 0xec4, 0x5, 0xff, 0x7fff, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffc01}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0xfc}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) unshare(0x2000400) r8 = socket$inet6(0xa, 0x5, 0x0) listen(r8, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r10, &(0x7f0000000800)=[{{&(0x7f00000005c0)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x20000000) r11 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000400)={0xa, &(0x7f0000000500)=[{0x9, 0xb, 0x7, 0x6}, {0x5, 0x40, 0x4, 0x3}, {0x5079, 0xc, 0xa}, {0x4, 0x7, 0x5, 0x3}, {0x200, 0x8, 0xd, 0x6}, {0x7, 0x8, 0x9, 0x7}, {0x8, 0xf7, 0x1, 0x8}, {0x7f86, 0x6, 0xa1, 0x6}, {0x8000, 0x24, 0x3, 0xffffff01}, {0x9, 0x6, 0x6, 0xfffffff9}]}, 0x10) socket$inet6(0xa, 0x5, 0x0) 1.298637479s ago: executing program 1 (id=1309): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e0000"], 0x44}}, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="388455bb140eddb3c2c77b00074c09d24744dca20000800000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4b) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2003000, 0x0, 0x0, 0x2, 0x0, 0x9, 0xa25}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x2000, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0314f9f4070009040002000000010000000000000008000400", 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1}}], 0x1, 0x40010000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000140)={@private1}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) 1.240161131s ago: executing program 4 (id=1310): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c0002800400038006000500810000004c0004800c000100000000006a0000000c00010003000000018000000c000100220b0000000000000c00010004000000010000000c00010000000000010000000c0001008000000000000000080013"], 0x9c}, 0x1, 0xba01}, 0x810) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000610200000000000000000003", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(r6, &(0x7f0000001100)="94", 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r10, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000140)=""/116, 0x74) tee(r5, 0xffffffffffffffff, 0x8000000000081, 0x0) close(r7) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r12, 0x0, 0xffffffff000) recvmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001500)=""/136, 0x88}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003000000f66552569948920cb91b5e4e72504869fe1fc9ffc67f1416faa56364c0f502bd19353eefec6b5e1344a6cfa4e917ed784ca1f501b125dd1a1d077f7dd7d8bb7c1b3bcdab72"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f0000000800", @ANYRES32=r3, @ANYBLOB="23007f00260305fc537e150a060108021100000140000000d70800000800000010012a0004002a006c000e0080380800ffffffffffff080211000000b1a7dea8260405001000000000000000640018540406000a00000180060208000503800309250301b9072a01023c0401e624062d1a481000000001000000000004000600070000000100f4ffffff80710701ff000100030008000c00e0d2ffff08000d0000000000"], 0xc0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.130161948s ago: executing program 2 (id=1311): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0000000000000000000200006d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000380)=0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(r3) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000000000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000019e66d0600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r8 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r9, 0x4) 1.10721684s ago: executing program 3 (id=1312): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x3, 0x0, 0xc, 0x0, 0x3}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="c9e3ceb6210ca9e82b822b2ab25c5812d147d9d6facf3b2493abc7ef14221e4d10e2f7930e66ae0daf355935257029ebf21529e6524f1895a1542f5ab79214311e3e81be834f89d35d6c40edc43a8eaff078db862d1c8cc0f658a9a7c66bd1dc2c6370c3daf15d930f9077aacdf0f266cd0efb841c7dca1b98e63dfe35ccae05aef428c2afe3c4", @ANYBLOB="7b5c30faf4cf091242a101406ac6e81978d3edd7d0246dca6e7d7683e13414056e72033a6c73da2651843859f7fa20cfb34fcdfcc389f8bf50cfe63680c7095f62d3ce8a6c683b2d119937a87550cb5c82826897d4dc98f54ee12e1cfc3a73a6bdb7d7d5ac416c78f2b40b5425aa757bb91ee20a41eda78e5dfb92495e032829fe6692f523507d559e907a943072f30cd770ccb94cf190f9fe7565ab1d27fa355c20fcdf582a40b74f789de83d4ece17b894d51f8dee89c5478e8c9b04df28855b6d05a43d040211d6a89901a2cc1dcca6392e34c31003405fba87088d0f07278b5041c62b5a19dfafa01df5ef9bc9dac5f6b5f9f06f2fbb97", @ANYRESHEX], 0x14}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000ac0)={@random="09c9849d490f", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ced920", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "b3a21a", 0x0, 0x0, 0x0, @dev, @private0, [@dstopts={0x84}], "83098ece0f967fda"}}}}}}}, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r4, 0x1}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) shutdown(r2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000540)=ANY=[@ANYBLOB='c '], 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x800000) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x1000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x40}}, 0x4c0d4) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 959.994106ms ago: executing program 0 (id=1313): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000e8cc0000001800000018000000080000000d00000000000007000000000a0000000000000700000000005f30301e305f00"], &(0x7f0000000440)=""/116, 0x38, 0x74, 0x0, 0x3, 0x10000, @value=r2}, 0x28) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000008000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000e2ff0000d9581a6dc3bdd49312778ccdc2dbf09c32aeb03f78e088ef065feda1bd519a3531ea4ff9537f0f3d0c7f37bfa006839a54879de60e4f62933ff3c02e3241776c007326669a3cd04939f2f7a012c790bb9d8ba6e652efa327381420a9001a42011903360e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e20, 0x0, @loopback}}, 0x1, 0x3}, 0x90) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r5, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002040)=""/183, 0xb7}, 0x40002021) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x70, &(0x7f0000003140)=""/4071, &(0x7f0000000000)=0xfe7) socket(0x11, 0x80000, 0xf81c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000001c0)=@buf) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) 854.503838ms ago: executing program 3 (id=1314): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x0) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000380)="750406cc1ced83c72353323081cab1e53c82d059a4881e5e0816", 0x1a}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1000000000000010, 0x80802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r6], 0x20}}, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x2, 0x0, 0x39, r1}, 0x10) 440.987898ms ago: executing program 3 (id=1315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) 378.491856ms ago: executing program 1 (id=1316): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)) socket(0x1d, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x2004c800}, 0xc804) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=r6, @ANYRESDEC=r3], 0x154}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd3, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000300), 0x0}, 0x20) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 106.388542ms ago: executing program 4 (id=1317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x4000880) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002002000000004000100080005"], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000a0002002ee308099cc80000050005"], 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r8, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES32=r10, @ANYBLOB="00001000e000030000010001000000000006000008"], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0xde9d2d607d204f3, 0x40, 0xfffffc00, 0xaa, {{0x21, 0x4, 0x3, 0x0, 0x84, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@noop, @ssrr={0x89, 0x23, 0xd2, [@multicast1, @loopback, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x24, 0x76, 0x1, 0x9, [{@multicast1, 0x92}, {@remote, 0x8}, {@local}, {@rand_addr=0x64010101, 0xfffffff4}]}, @timestamp_prespec={0x44, 0x1c, 0x3e, 0x3, 0x8, [{@private=0xa010101, 0xe4}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x4}, {@local, 0xfffffff7}]}, @timestamp_prespec={0x44, 0xc, 0x6b, 0x3, 0x9, [{@empty, 0x41}]}]}}}}}) r13 = socket(0x10, 0x3, 0x0) bind$inet(r13, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) r14 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r14, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x18, 0x110, 0xc, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r18, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c80140001"], 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x11c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x404c840}, 0x8010) 0s ago: executing program 0 (id=1318): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[], 0x114}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r1, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x80000d9}, 0x8) listen(r1, 0x0) shutdown(r1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): 0' with parent 'hsr' already present! [ 63.297397][ T5844] Cannot create hsr debugfs directory [ 63.325472][ T5842] hsr_slave_0: entered promiscuous mode [ 63.332161][ T5842] hsr_slave_1: entered promiscuous mode [ 63.338220][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.346174][ T5842] Cannot create hsr debugfs directory [ 63.582454][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.615908][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.625948][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.659104][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.719324][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.739110][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.762163][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.779690][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.818316][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.846874][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.857500][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.883387][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.936984][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.946865][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.976185][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.988308][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.030122][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.063893][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.086531][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.114670][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.141509][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.219655][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.237610][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.264200][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.272138][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.291173][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.298374][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.309771][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.341659][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.375052][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.387603][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.394797][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.418848][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.434760][ T2128] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.442171][ T2128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.456221][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.463880][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.490405][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.504817][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.511961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.538455][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.545958][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.597382][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.605244][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.660116][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.681362][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.719308][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.727293][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.803255][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.810505][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.966363][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.982975][ T5845] Bluetooth: hci0: command tx timeout [ 65.041101][ T5845] Bluetooth: hci2: command tx timeout [ 65.045869][ T5849] Bluetooth: hci1: command tx timeout [ 65.046820][ T5845] Bluetooth: hci4: command tx timeout [ 65.077531][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.121082][ T5845] Bluetooth: hci3: command tx timeout [ 65.215062][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.314083][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.332730][ T5836] veth0_vlan: entered promiscuous mode [ 65.361396][ T5843] veth0_vlan: entered promiscuous mode [ 65.372785][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.389056][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.425108][ T5843] veth1_vlan: entered promiscuous mode [ 65.462039][ T5836] veth1_vlan: entered promiscuous mode [ 65.519708][ T5843] veth0_macvtap: entered promiscuous mode [ 65.550339][ T5843] veth1_macvtap: entered promiscuous mode [ 65.567246][ T5841] veth0_vlan: entered promiscuous mode [ 65.589584][ T5841] veth1_vlan: entered promiscuous mode [ 65.608395][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.627050][ T5842] veth0_vlan: entered promiscuous mode [ 65.659009][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.682160][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.691642][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.701172][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.710601][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.731508][ T5842] veth1_vlan: entered promiscuous mode [ 65.745475][ T5836] veth0_macvtap: entered promiscuous mode [ 65.756280][ T5841] veth0_macvtap: entered promiscuous mode [ 65.797726][ T5841] veth1_macvtap: entered promiscuous mode [ 65.805512][ T5836] veth1_macvtap: entered promiscuous mode [ 65.836905][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.862365][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.876688][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.915292][ T5842] veth0_macvtap: entered promiscuous mode [ 65.937847][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.950208][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.962663][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.975176][ T5842] veth1_macvtap: entered promiscuous mode [ 65.996948][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.006453][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.018161][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.027252][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.043367][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.057670][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.068007][ T5844] veth0_vlan: entered promiscuous mode [ 66.078057][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.089634][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.100253][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.111657][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.122985][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.156949][ T5844] veth1_vlan: entered promiscuous mode [ 66.175278][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.186592][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.197361][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.209944][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.221478][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.233602][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.247043][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.257877][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.269983][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.280888][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.292820][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.304740][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.329203][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.340374][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.352395][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.363409][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.373703][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.385247][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.396242][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.407098][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.418115][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.441397][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.450170][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.459211][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.468435][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.519692][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.537943][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.538942][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.547349][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.572552][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.607777][ T5844] veth0_macvtap: entered promiscuous mode [ 66.635819][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.658139][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.695453][ T5844] veth1_macvtap: entered promiscuous mode [ 66.710955][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.721660][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.731635][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.742142][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.752817][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.763656][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.773811][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.784354][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.796031][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.838028][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.848512][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.859978][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.870671][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.878642][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.891188][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.901506][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.913345][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.931122][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.943124][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.962442][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.987847][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.002344][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.011755][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.021845][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.050901][ T5845] Bluetooth: hci0: command tx timeout [ 67.071960][ T5929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6'. [ 67.122496][ T5845] Bluetooth: hci1: command tx timeout [ 67.127977][ T5845] Bluetooth: hci2: command tx timeout [ 67.130715][ T5849] Bluetooth: hci4: command tx timeout [ 67.178850][ T2128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.187406][ T2128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.202354][ T54] Bluetooth: hci3: command tx timeout [ 67.297869][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 67.332434][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.340312][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.490737][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.491677][ T2128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.498689][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.535941][ T2128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.544931][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.558204][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.636826][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.672894][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.893830][ T5942] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 67.911332][ T5942] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9'. [ 67.933641][ T5891] IPVS: starting estimator thread 0... [ 68.040654][ T5945] IPVS: using max 22 ests per chain, 52800 per kthread [ 68.757026][ T5961] tipc: Started in network mode [ 68.796541][ T5961] tipc: Node identity ac1414aa, cluster identity 4711 [ 68.827427][ T5961] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 68.836881][ T5966] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.863388][ T5961] tipc: Enabled bearer , priority 10 [ 68.933508][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 68.946737][ T5968] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 68.962479][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 69.100636][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 69.124099][ T54] Bluetooth: hci0: command tx timeout [ 69.205928][ T54] Bluetooth: hci4: command tx timeout [ 69.212257][ T5849] Bluetooth: hci2: command tx timeout [ 69.215603][ T5845] Bluetooth: hci1: command tx timeout [ 69.241079][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 69.284577][ T5845] Bluetooth: hci3: command tx timeout [ 69.384444][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 69.521254][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 69.661015][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 69.804857][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 69.942722][ T8] tipc: Node number set to 2886997162 [ 70.081588][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 70.351841][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 70.527091][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.535181][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.546300][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.554687][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.598935][ T5978] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 70.674562][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.902189][ T6009] Cannot find add_set index 0 as target [ 70.927192][ T6011] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 70.971351][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.980634][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.018582][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.025889][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.034287][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.041677][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.083766][ T6011] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 71.132907][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 71.412692][ T6026] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 71.424748][ T6026] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 71.434116][ T6026] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 71.446246][ T6026] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 71.533559][ T6026] xt_l2tp: v2 sid > 0xffff: 262144 [ 71.686105][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.751327][ T6036] sctp: [Deprecated]: syz.0.23 (pid 6036) Use of int in maxseg socket option. [ 71.751327][ T6036] Use struct sctp_assoc_value instead [ 72.410124][ T6050] syz.0.27 uses obsolete (PF_INET,SOCK_PACKET) [ 72.461238][ T6050] Zero length message leads to an empty skb [ 72.562071][ T6055] xt_l2tp: v2 doesn't support IP mode [ 72.809764][ T6061] Cannot find set identified by id 0 to match [ 72.819410][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 72.989634][ T6063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.092395][ T6073] netlink: 48 bytes leftover after parsing attributes in process `syz.3.36'. [ 73.175821][ T6068] netlink: 'syz.0.34': attribute type 12 has an invalid length. [ 73.191854][ T6082] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 73.202366][ T6068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34'. [ 73.224423][ T6080] netlink: 244 bytes leftover after parsing attributes in process `syz.1.37'. [ 73.267540][ T6082] bond1 (unregistering): Released all slaves [ 74.000587][ C0] net_ratelimit: 3 callbacks suppressed [ 74.000608][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 74.157374][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.47'. [ 74.192698][ T6111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.45'. [ 74.283871][ T6112] lo speed is unknown, defaulting to 1000 [ 74.306852][ T6112] lo speed is unknown, defaulting to 1000 [ 74.326334][ T6112] lo speed is unknown, defaulting to 1000 [ 74.337607][ T6099] infiniband syz1: set active [ 74.361887][ T6099] infiniband syz1: added bond_slave_1 [ 74.503029][ T6099] RDS/IB: syz1: added [ 74.519236][ T6099] smc: adding ib device syz1 with port count 1 [ 74.530035][ T6099] smc: ib device syz1 port 1 has pnetid [ 74.711997][ T6123] batadv_slave_0: entered promiscuous mode [ 74.836357][ T6125] veth0_to_team: entered promiscuous mode [ 74.849500][ T6125] veth0_to_team: entered allmulticast mode [ 74.955088][ T6129] netlink: 80 bytes leftover after parsing attributes in process `syz.3.51'. [ 75.007092][ T6131] veth0_to_bridge: entered promiscuous mode [ 75.040516][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 75.096714][ T6129] netlink: 'syz.3.51': attribute type 15 has an invalid length. [ 75.106509][ T6129] netlink: 666 bytes leftover after parsing attributes in process `syz.3.51'. [ 75.148881][ T6135] bridge_slave_1: left allmulticast mode [ 75.178876][ T6135] bridge_slave_1: left promiscuous mode [ 75.186326][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.223206][ T6135] bridge_slave_0: left allmulticast mode [ 75.236490][ T6135] bridge_slave_0: left promiscuous mode [ 75.268008][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.282540][ T6140] netlink: 'syz.2.53': attribute type 2 has an invalid length. [ 75.405154][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.54'. [ 75.750228][ T6147] netlink: 'syz.3.55': attribute type 3 has an invalid length. [ 75.763320][ T6147] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 75.773261][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 75.796902][ T6147] Cannot find del_set index 4 as target [ 75.875013][ T6130] veth0_to_bridge: left promiscuous mode [ 75.936047][ T6112] infiniband syz0: set active [ 75.948735][ T6112] infiniband syz0: added lo [ 75.954736][ T6112] syz0: rxe_create_cq: returned err = -12 [ 75.961612][ T6112] infiniband syz0: Couldn't create ib_mad CQ [ 75.968158][ T6112] infiniband syz0: Couldn't open port 1 [ 75.980716][ T5920] lo speed is unknown, defaulting to 1000 [ 76.014106][ T6112] RDS/IB: syz0: added [ 76.025301][ T6112] smc: adding ib device syz0 with port count 1 [ 76.031998][ T6112] smc: ib device syz0 port 1 has pnetid [ 76.047760][ T6112] lo speed is unknown, defaulting to 1000 [ 76.054256][ T5914] lo speed is unknown, defaulting to 1000 [ 76.080705][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 76.182664][ T6112] lo speed is unknown, defaulting to 1000 [ 76.341997][ T6159] netlink: 'syz.2.59': attribute type 29 has an invalid length. [ 76.468058][ T6112] lo speed is unknown, defaulting to 1000 [ 77.096091][ T6155] lo speed is unknown, defaulting to 1000 [ 77.120560][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 77.128839][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 77.139247][ T6167] netlink: 'syz.2.61': attribute type 10 has an invalid length. [ 77.336240][ T6167] team0: Port device team_slave_0 removed [ 77.756811][ T6112] lo speed is unknown, defaulting to 1000 [ 78.040054][ T6171] __nla_validate_parse: 1 callbacks suppressed [ 78.040076][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 78.108733][ T6174] xt_addrtype: ipv6 does not support BROADCAST matching [ 78.160581][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 78.227355][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.65'. [ 78.239623][ T6112] lo speed is unknown, defaulting to 1000 [ 78.439108][ T5914] IPVS: starting estimator thread 0... [ 78.469689][ T6185] ip6gretap0: entered promiscuous mode [ 78.478561][ T6185] batadv_slave_0: entered promiscuous mode [ 78.501168][ T6182] warning: `syz.4.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.570604][ T6183] IPVS: using max 21 ests per chain, 50400 per kthread [ 78.726654][ T6188] IPv6: sit2: Disabled Multicast RS [ 79.027928][ T6200] tipc: Failed to remove unknown binding: 66,1,1/2886997162:957655642/957655644 [ 79.060043][ T6200] tipc: Failed to remove unknown binding: 66,1,1/2886997162:957655642/957655644 [ 79.200567][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 79.466179][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.674753][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 79.706515][ T6213] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 79.733209][ T6213] macvlan2: entered allmulticast mode [ 79.738964][ T6213] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 79.820284][ T6223] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 79.883492][ T6217] syzkaller0: entered promiscuous mode [ 79.890073][ T6217] syzkaller0: entered allmulticast mode [ 79.953562][ T6217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.79'. [ 80.062939][ T6227] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 80.143674][ T6227] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 80.163678][ T6238] Cannot find set identified by id 0 to match [ 80.218938][ T6227] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 80.239373][ T6236] Cannot find add_set index 32768 as target [ 80.245869][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 81.282647][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 81.942188][ T46] cfg80211: failed to load regulatory.db [ 82.324742][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 82.829092][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.89'. [ 82.922416][ T6257] mac80211_hwsim hwsim4 wlan0 (unregistering): left promiscuous mode [ 83.027363][ T6246] lo speed is unknown, defaulting to 1000 [ 83.183040][ T6265] netlink: 'syz.0.91': attribute type 4 has an invalid length. [ 83.262683][ T6265] netlink: 'syz.0.91': attribute type 4 has an invalid length. [ 83.360739][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 83.426713][ T6270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.93'. [ 83.459145][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.93'. [ 83.497219][ T6270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.93'. [ 83.519265][ T6270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.93'. [ 83.784444][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.940779][ T6279] xt_CT: No such helper "snmp" [ 84.124548][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 84.138910][ T6284] bridge_slave_1: left allmulticast mode [ 84.145937][ T6284] bridge_slave_1: left promiscuous mode [ 84.152382][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.228342][ T6286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 84.323054][ T6288] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 84.396188][ T6289] netlink: 'syz.1.99': attribute type 10 has an invalid length. [ 84.405123][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 84.461901][ T6289] team0: Port device netdevsim0 added [ 84.487246][ T6294] netlink: 168 bytes leftover after parsing attributes in process `syz.0.101'. [ 84.756504][ T6303] netlink: 'syz.4.106': attribute type 1 has an invalid length. [ 84.906869][ T6313] netlink: 288 bytes leftover after parsing attributes in process `syz.3.104'. [ 84.976784][ T6314] netlink: 72 bytes leftover after parsing attributes in process `syz.3.104'. [ 85.295528][ T6320] sit0: entered promiscuous mode [ 85.351211][ T6320] vlan2: entered promiscuous mode [ 85.376523][ T6320] sit0: left promiscuous mode [ 85.440516][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 85.472778][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 85.531691][ T6332] netlink: 'syz.2.109': attribute type 10 has an invalid length. [ 85.563064][ T6332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.109'. [ 85.604188][ T6332] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 86.480513][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 86.508040][ T6349] lo speed is unknown, defaulting to 1000 [ 87.520594][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 87.773730][ T6391] veth0_to_hsr: entered promiscuous mode [ 88.015755][ T6391] hsr_slave_0 (unregistering): left promiscuous mode [ 88.386817][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.560505][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 89.293636][ T6414] lo speed is unknown, defaulting to 1000 [ 89.600850][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 89.618400][ T6437] netlink: 'syz.0.143': attribute type 10 has an invalid length. [ 89.662581][ T6437] __nla_validate_parse: 2 callbacks suppressed [ 89.662600][ T6437] netlink: 2 bytes leftover after parsing attributes in process `syz.0.143'. [ 89.803523][ T6437] team0: entered promiscuous mode [ 89.836235][ T6437] team_slave_0: entered promiscuous mode [ 89.867275][ T6437] team_slave_1: entered promiscuous mode [ 89.896942][ T6437] bridge0: port 3(team0) entered blocking state [ 89.938738][ T6437] bridge0: port 3(team0) entered disabled state [ 89.951016][ T6437] team0: entered allmulticast mode [ 89.968674][ T6437] team_slave_0: entered allmulticast mode [ 89.971918][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'. [ 89.979915][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 89.994740][ T6437] team_slave_1: entered allmulticast mode [ 90.012302][ T6437] bridge0: port 3(team0) entered blocking state [ 90.018883][ T6437] bridge0: port 3(team0) entered forwarding state [ 90.044297][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'. [ 90.085099][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.640556][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 90.725355][ T6470] x_tables: duplicate underflow at hook 2 [ 90.953758][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 91.041903][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 91.109982][ C1] dccp_v6_rcv: dropped packet with invalid checksum [ 91.156111][ T6484] netlink: 'syz.1.158': attribute type 12 has an invalid length. [ 91.613488][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 91.680561][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 92.314915][ T6506] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 92.338115][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 92.720575][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 92.827328][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.973875][ T6522] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 93.093320][ T6526] syz.3.175[6526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.093422][ T6526] syz.3.175[6526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.106155][ T6526] syz.3.175[6526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.133797][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 93.351546][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 93.361489][ T6535] netlink: 36 bytes leftover after parsing attributes in process `syz.3.178'. [ 93.601358][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 93.760561][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 93.994147][ T6530] lo speed is unknown, defaulting to 1000 [ 94.576902][ T6566] nbd: must specify an index to disconnect [ 94.587966][ T6561] netlink: 'syz.0.183': attribute type 2 has an invalid length. [ 94.800552][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 95.369542][ T6574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.435180][ T6574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 95.650311][ T6574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.694698][ T6574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 95.840610][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 95.964956][ T6574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.987990][ T6574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.024141][ T6593] netlink: 'syz.4.194': attribute type 5 has an invalid length. [ 96.044958][ T6593] __nla_validate_parse: 3 callbacks suppressed [ 96.044980][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.194'. [ 96.145808][ T6599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.217787][ T6598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.283038][ T6574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.305189][ T6574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.464767][ T6574] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.480953][ T6574] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 96.507868][ T6574] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.526878][ T6574] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 96.559208][ T6574] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.584686][ T6574] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 96.621293][ T6574] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.646459][ T6574] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 96.681811][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'. [ 96.695492][ T6615] netlink: 'syz.1.199': attribute type 4 has an invalid length. [ 96.791794][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.199'. [ 96.880631][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 96.906059][ T6617] ax25_connect(): syz.1.199 uses autobind, please contact jreuter@yaina.de [ 97.158449][ T6604] lo speed is unknown, defaulting to 1000 [ 97.304932][ T6633] macvlan2: entered promiscuous mode [ 97.310339][ T6633] macvlan2: entered allmulticast mode [ 97.362451][ T6633] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 97.410858][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.435249][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.512605][ T6638] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 97.548751][ T6638] netlink: 224 bytes leftover after parsing attributes in process `syz.2.206'. [ 97.732972][ T6649] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 97.837232][ T6651] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 97.838550][ T6654] netlink: 48 bytes leftover after parsing attributes in process `syz.2.211'. [ 97.852452][ T6649] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 97.922038][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 98.127815][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 98.295844][ T6663] bridge_slave_1: left allmulticast mode [ 98.335239][ T6663] bridge_slave_1: left promiscuous mode [ 98.347738][ T6661] delete_channel: no stack [ 98.366444][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.422128][ T6663] bridge_slave_0: left allmulticast mode [ 98.427955][ T6663] bridge_slave_0: left promiscuous mode [ 98.472282][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.960598][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 99.146672][ T6676] lo speed is unknown, defaulting to 1000 [ 99.486332][ T6693] Illegal XDP return value 4294967274 on prog (id 130) dev N/A, expect packet loss! [ 99.807471][ T6699] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 100.000574][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 100.125318][ T6695] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 100.149110][ T6699] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 100.170293][ T6699] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.345197][ T6706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.522204][ T6706] syz.4.223[6706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.522303][ T6706] syz.4.223[6706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.540743][ T6706] syz.4.223[6706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.580961][ T6706] Bluetooth: MGMT ver 1.23 [ 101.040545][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 101.489798][ T6725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.080560][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 102.694445][ T6747] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 102.760173][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'. [ 102.783906][ T6747] netlink: 'syz.3.235': attribute type 10 has an invalid length. [ 102.799929][ T6747] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 103.002891][ T6765] netlink: 'syz.3.240': attribute type 25 has an invalid length. [ 103.026896][ T6765] netlink: 'syz.3.240': attribute type 7 has an invalid length. [ 103.120594][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 103.421896][ T6772] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 103.466963][ T6781] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 103.487261][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.496775][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.528993][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.898583][ T6803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.250'. [ 103.914816][ T6805] netlink: 616 bytes leftover after parsing attributes in process `syz.2.251'. [ 103.932995][ T6803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.250'. [ 103.963457][ T6803] veth0: entered promiscuous mode [ 103.978927][ T6803] bridge0: entered promiscuous mode [ 104.092681][ T6795] lo speed is unknown, defaulting to 1000 [ 104.160606][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 104.169506][ T6808] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 104.206737][ T6808] netlink: 'syz.3.252': attribute type 10 has an invalid length. [ 104.238910][ T6808] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 104.269051][ T6813] netlink: 84 bytes leftover after parsing attributes in process `syz.0.254'. [ 104.295366][ T6813] netlink: 72 bytes leftover after parsing attributes in process `syz.0.254'. [ 104.523571][ T6820] bridge0: entered promiscuous mode [ 104.547387][ T6820] bridge0: entered allmulticast mode [ 104.569039][ T6820] team0: Port device bridge0 added [ 104.572377][ T6822] netlink: 'syz.2.257': attribute type 10 has an invalid length. [ 104.731579][ T6824] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 104.756508][ T6822] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 104.773580][ T6798] lo speed is unknown, defaulting to 1000 [ 104.793284][ T6820] bridge0: port 1(ip6gretap0) entered blocking state [ 104.811956][ T6820] bridge0: port 1(ip6gretap0) entered disabled state [ 104.845241][ T6820] ip6gretap0: entered allmulticast mode [ 104.866662][ T6820] ip6gretap0: entered promiscuous mode [ 104.888095][ T6820] bridge0: port 1(ip6gretap0) entered blocking state [ 104.896181][ T6820] bridge0: port 1(ip6gretap0) entered listening state [ 105.034226][ T5050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.053566][ T5050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.057049][ T6815] xt_recent: Unsupported userspace flags (00000042) [ 105.200513][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 105.581144][ T6852] syz.3.266[6852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.581240][ T6852] syz.3.266[6852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.597941][ T6852] syz.3.266[6852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.622995][ T6852] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 105.673183][ T6850] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 105.716283][ T6857] netlink: 96 bytes leftover after parsing attributes in process `syz.3.266'. [ 105.928130][ T6860] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 105.955502][ T6860] netlink: 56 bytes leftover after parsing attributes in process `syz.4.267'. [ 105.983585][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 105.993458][ T6860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.267'. [ 106.240513][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 106.468830][ T6878] syz.2.273[6878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.468927][ T6878] syz.2.273[6878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.497731][ T6878] syz.2.273[6878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.922884][ T6894] netlink: 'syz.2.279': attribute type 10 has an invalid length. [ 107.012862][ T6894] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 107.037119][ T6897] x_tables: ip_tables: DNAT.2 target: invalid size 48 (kernel) != (user) 56 [ 107.043900][ T6894] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 107.280548][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 107.399226][ T6908] syz.0.285[6908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.399322][ T6908] syz.0.285[6908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.447985][ T6908] syz.0.285[6908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.822258][ T6925] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 107.857175][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.880132][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.944966][ T6925] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 107.966425][ T6925] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 108.075135][ T6934] __nla_validate_parse: 4 callbacks suppressed [ 108.075156][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 108.205464][ T6941] netlink: 'syz.4.296': attribute type 11 has an invalid length. [ 108.251819][ T6941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.296'. [ 108.282647][ T6943] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 108.320489][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 108.343817][ T6946] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 108.398475][ T6945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.435478][ T6945] syz.0.300[6945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.685432][ T6960] netlink: 'syz.1.305': attribute type 10 has an invalid length. [ 108.707267][ T6960] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 108.717232][ T6960] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.945032][ T6967] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 109.045020][ T6967] netlink: 'syz.1.308': attribute type 10 has an invalid length. [ 109.056528][ T6967] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 109.343011][ T6979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.360602][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 109.470918][ T6985] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 109.620763][ T6990] xt_addrtype: ipv6 does not support BROADCAST matching [ 109.650290][ T6972] lo speed is unknown, defaulting to 1000 [ 109.751989][ T6992] netlink: 'syz.0.317': attribute type 10 has an invalid length. [ 109.771989][ T6992] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 109.807230][ T6992] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.400549][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 111.089607][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 111.270894][ T7035] netlink: 'syz.0.332': attribute type 6 has an invalid length. [ 111.356262][ T7039] trusted_key: syz.2.333 sent an empty control message without MSG_MORE. [ 111.440774][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 111.736437][ T7050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.824035][ T7032] lo speed is unknown, defaulting to 1000 [ 111.842726][ T7050] bpf_get_probe_write_proto: 5 callbacks suppressed [ 111.842744][ T7050] syz.1.336[7050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.861478][ T7050] syz.1.336[7050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.927237][ T7050] syz.1.336[7050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.480483][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 112.555453][ T7072] netlink: 'syz.1.340': attribute type 10 has an invalid length. [ 112.674346][ T7074] lo: entered promiscuous mode [ 112.681967][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.730209][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.738278][ T7072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.797961][ T7072] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 112.863768][ T7073] lo: left promiscuous mode [ 113.099044][ T7088] syz.3.350[7088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.099144][ T7088] syz.3.350[7088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.138469][ T7088] syz.3.350[7088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.520660][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 113.671410][ T7104] veth0_to_hsr: entered promiscuous mode [ 113.779348][ T7108] syz.4.358[7108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.779448][ T7108] syz.4.358[7108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.815416][ T7108] syz.4.358[7108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.864278][ T7104] hsr_slave_0 (unregistering): left promiscuous mode [ 113.869140][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.361'. [ 113.910710][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.361'. [ 113.959572][ T7108] netlink: 96 bytes leftover after parsing attributes in process `syz.4.358'. [ 114.075996][ T7122] syz.3.363[7122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.217616][ T7130] macvlan4: entered promiscuous mode [ 114.246350][ T7130] macvlan4: entered allmulticast mode [ 114.264140][ T7130] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 114.279834][ T7131] bridge1: entered promiscuous mode [ 114.288078][ T7131] bridge1: entered allmulticast mode [ 114.305937][ T7131] team0: Port device bridge1 added [ 114.324411][ T7133] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 114.359950][ T7133] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 114.393127][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.417967][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.430229][ T7131] bridge0: port 3(ip6gretap0) entered blocking state [ 114.447722][ T7131] bridge0: port 3(ip6gretap0) entered disabled state [ 114.474448][ T7131] ip6gretap0: entered allmulticast mode [ 114.492389][ T7131] ip6gretap0: left allmulticast mode [ 114.531692][ T7133] syz.3.367 (7133) used greatest stack depth: 18480 bytes left [ 114.560716][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 114.782340][ T7140] netlink: 56 bytes leftover after parsing attributes in process `syz.2.370'. [ 114.794823][ T7145] netlink: 'syz.3.372': attribute type 39 has an invalid length. [ 114.801954][ T7140] netlink: 5 bytes leftover after parsing attributes in process `syz.2.370'. [ 114.837295][ T7140] netlink: 80 bytes leftover after parsing attributes in process `syz.2.370'. [ 114.846659][ T7143] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 114.859974][ T7147] xt_addrtype: ipv6 does not support BROADCAST matching [ 114.956819][ T7151] netlink: 'syz.1.371': attribute type 10 has an invalid length. [ 114.968088][ T7151] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 115.134619][ T7156] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 115.181912][ T7156] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 115.196899][ T7163] netlink: 'syz.4.376': attribute type 58 has an invalid length. [ 115.231870][ T7163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.376'. [ 115.255432][ T7161] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 115.347194][ T7171] netlink: 'syz.3.380': attribute type 1 has an invalid length. [ 115.449087][ T7171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.561175][ T7173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.584655][ T7173] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 115.600574][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 115.635895][ T7173] bond2: (slave vti0): Error -95 calling set_mac_address [ 115.677442][ T7185] x_tables: ip_tables: DNAT.2 target: invalid size 48 (kernel) != (user) 56 [ 116.106693][ T7194] xt_addrtype: ipv6 does not support BROADCAST matching [ 116.268057][ T7202] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 116.334376][ T7202] netlink: 'syz.3.389': attribute type 10 has an invalid length. [ 116.345252][ T7202] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 116.412966][ T7200] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 116.448468][ T7200] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 116.640549][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 117.066594][ T7227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.147386][ T7227] bpf_get_probe_write_proto: 8 callbacks suppressed [ 117.147406][ T7227] syz.4.399[7227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.170613][ T7227] syz.4.399[7227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.213721][ T7227] syz.4.399[7227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.221991][ T7216] lo speed is unknown, defaulting to 1000 [ 117.629578][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 117.637037][ T7247] macvlan0: entered promiscuous mode [ 117.648922][ T7245] netlink: 36 bytes leftover after parsing attributes in process `syz.1.401'. [ 117.652265][ T7247] macvlan0: entered allmulticast mode [ 117.680498][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 117.954858][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.978161][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.998468][ T7218] lo speed is unknown, defaulting to 1000 [ 118.055651][ T7255] syz.1.405[7255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.055744][ T7255] syz.1.405[7255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.067427][ T7255] syz.1.405[7255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.469763][ T7269] netlink: 'syz.1.408': attribute type 10 has an invalid length. [ 118.514589][ T7269] netlink: 2 bytes leftover after parsing attributes in process `syz.1.408'. [ 118.536535][ T7269] team0: entered promiscuous mode [ 118.543162][ T7269] team_slave_0: entered promiscuous mode [ 118.549489][ T7269] team_slave_1: entered promiscuous mode [ 118.555513][ T7269] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 118.572147][ T7269] bridge0: port 2(team0) entered blocking state [ 118.578829][ T7269] bridge0: port 2(team0) entered disabled state [ 118.595006][ T7269] team0: entered allmulticast mode [ 118.601847][ T7269] team_slave_0: entered allmulticast mode [ 118.607857][ T7269] team_slave_1: entered allmulticast mode [ 118.614083][ T7269] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 118.628972][ T7269] bridge0: port 2(team0) entered blocking state [ 118.635463][ T7269] bridge0: port 2(team0) entered forwarding state [ 118.720696][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 119.228250][ T7278] netlink: 'syz.3.412': attribute type 12 has an invalid length. [ 119.386061][ T7287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.448688][ T7287] syz.4.413[7287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.448780][ T7287] syz.4.413[7287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.499512][ T7287] syz.4.413[7287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.646900][ T7298] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 119.680821][ T7299] syz.4.417[7299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.760615][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 120.321784][ C1] bridge0: port 1(ip6gretap0) entered learning state [ 120.622033][ T7314] netlink: 80 bytes leftover after parsing attributes in process `syz.1.423'. [ 120.745599][ T7314] netlink: 'syz.1.423': attribute type 15 has an invalid length. [ 120.765191][ T7314] netlink: 666 bytes leftover after parsing attributes in process `syz.1.423'. [ 120.800657][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 120.866030][ T7320] bridge0: entered promiscuous mode [ 120.907076][ T7326] netlink: 'syz.4.425': attribute type 10 has an invalid length. [ 120.941231][ T7320] bridge0: entered allmulticast mode [ 120.987050][ T7325] xt_addrtype: ipv6 does not support BROADCAST matching [ 121.013139][ T7320] team0: Port device bridge0 added [ 121.028888][ T7326] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 121.117427][ T7329] bridge0: port 1(ip6gretap0) entered blocking state [ 121.207623][ T7329] bridge0: port 1(ip6gretap0) entered disabled state [ 121.265961][ T7329] ip6gretap0: entered allmulticast mode [ 121.309985][ T7329] ip6gretap0: entered promiscuous mode [ 121.323422][ T7329] bridge0: port 1(ip6gretap0) entered blocking state [ 121.330258][ T7329] bridge0: port 1(ip6gretap0) entered listening state [ 121.559708][ T7347] veth0_to_team: left allmulticast mode [ 121.643900][ T7347] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 121.662875][ T7356] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.679983][ T7347] macvlan0: left allmulticast mode [ 121.685944][ T7356] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 121.708120][ T7347] bridge0: left allmulticast mode [ 121.721988][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 121.840594][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 122.218082][ T7343] lo speed is unknown, defaulting to 1000 [ 122.723510][ T7384] xt_addrtype: ipv6 does not support BROADCAST matching [ 122.881615][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 122.979853][ T7348] lo speed is unknown, defaulting to 1000 [ 122.996908][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 123.016433][ T7388] block nbd0: not configured, cannot reconfigure [ 123.035462][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 123.074093][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.443'. [ 123.145439][ T7391] netlink: 48 bytes leftover after parsing attributes in process `syz.1.445'. [ 123.443483][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 123.506850][ T7391] team0: left allmulticast mode [ 123.548559][ T7391] team_slave_0: left allmulticast mode [ 123.573741][ T7391] team_slave_1: left allmulticast mode [ 123.590110][ T7391] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 123.625203][ T7391] bridge0: port 2(team0) entered disabled state [ 123.687836][ T7391] bridge_slave_0: left allmulticast mode [ 123.703214][ T7391] bridge_slave_0: left promiscuous mode [ 123.714901][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.797149][ T7391] bond0: (slave bridge0): Releasing backup interface [ 123.862973][ T7385] lo speed is unknown, defaulting to 1000 [ 123.920534][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 124.707965][ T7414] netlink: 'syz.4.451': attribute type 4 has an invalid length. [ 124.889769][ T7414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.451'. [ 124.914658][ T7415] ax25_connect(): syz.4.451 uses autobind, please contact jreuter@yaina.de [ 124.960598][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 125.631554][ T7426] syzkaller1: entered promiscuous mode [ 125.637196][ T7426] syzkaller1: entered allmulticast mode [ 125.658636][ T7426] netlink: 80 bytes leftover after parsing attributes in process `syz.2.456'. [ 126.000548][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 126.224247][ T7442] netlink: 'syz.4.461': attribute type 39 has an invalid length. [ 126.525092][ T7437] lo speed is unknown, defaulting to 1000 [ 127.015510][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.035411][ T7454] batadv_slave_0: entered promiscuous mode [ 127.040582][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 127.665285][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'. [ 127.707475][ T7462] netlink: 596 bytes leftover after parsing attributes in process `syz.4.465'. [ 127.948257][ T7469] macvlan5: entered promiscuous mode [ 127.960067][ T7469] macvlan5: entered allmulticast mode [ 127.984876][ T7469] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 128.041041][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.080532][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 128.093554][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.656198][ T7484] netlink: 'syz.0.475': attribute type 58 has an invalid length. [ 128.686802][ T7484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'. [ 129.120538][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 129.364514][ T7494] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 129.440968][ T7489] lo speed is unknown, defaulting to 1000 [ 129.448806][ T7494] netlink: 'syz.4.479': attribute type 10 has an invalid length. [ 129.482400][ T7494] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 129.518557][ T7494] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.903504][ T7504] macvlan2: entered promiscuous mode [ 129.951313][ T7504] macvlan2: entered allmulticast mode [ 129.982084][ T7504] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 130.150090][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.164166][ T5890] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 130.208740][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.538626][ T7515] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 130.809208][ T7523] xt_addrtype: ipv6 does not support BROADCAST matching [ 131.029805][ T7528] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 131.149509][ T7528] netlink: 'syz.4.491': attribute type 4 has an invalid length. [ 131.203697][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 131.246087][ T7535] xt_l2tp: v2 sid > 0xffff: 262144 [ 131.547283][ T7539] delete_channel: no stack [ 131.747643][ T7551] syzkaller1: entered promiscuous mode [ 131.777818][ T7551] syzkaller1: entered allmulticast mode [ 132.074476][ T7545] lo speed is unknown, defaulting to 1000 [ 132.240598][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 132.336748][ T7576] tipc: Enabling of bearer rejected, already enabled [ 132.501478][ T7566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.504'. [ 132.539597][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.504'. [ 132.585869][ T7566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.504'. [ 132.621944][ T7566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.504'. [ 132.670188][ T7585] netlink: 732 bytes leftover after parsing attributes in process `syz.3.508'. [ 132.711904][ T7585] netlink: 732 bytes leftover after parsing attributes in process `syz.3.508'. [ 132.758540][ T7585] xt_SECMARK: invalid mode: 0 [ 132.787620][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 132.923517][ T7582] lo speed is unknown, defaulting to 1000 [ 133.280563][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 133.615791][ T7598] netlink: 'syz.0.513': attribute type 10 has an invalid length. [ 133.628564][ T7605] bpf_get_probe_write_proto: 2 callbacks suppressed [ 133.628586][ T7605] syz.2.514[7605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.647362][ T7605] syz.2.514[7605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.679664][ T7598] bridge0: port 3(team0) entered disabled state [ 133.697785][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.711774][ T7605] syz.2.514[7605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.799079][ T7606] netlink: 132 bytes leftover after parsing attributes in process `syz.3.515'. [ 134.320556][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 134.558908][ T7633] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 134.799076][ T7641] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 134.833129][ T7643] syz.1.526[7643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.833234][ T7643] syz.1.526[7643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.846755][ T7643] syz.1.526[7643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.022035][ T7649] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 135.078572][ T7649] pimreg3: entered allmulticast mode [ 135.113028][ T7649] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 135.158055][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 135.218184][ T7651] netlink: 'syz.3.530': attribute type 12 has an invalid length. [ 135.248030][ T7649] pimreg3: left allmulticast mode [ 135.333981][ T7657] macvlan3: entered promiscuous mode [ 135.342737][ T7657] macvlan3: entered allmulticast mode [ 135.361002][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 135.491429][ T7666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.534'. [ 135.681890][ C1] bridge0: port 1(ip6gretap0) entered forwarding state [ 135.689164][ C1] bridge0: topology change detected, propagating [ 135.702760][ T7666] veth0: entered promiscuous mode [ 135.705558][ T7673] netlink: 'syz.2.533': attribute type 1 has an invalid length. [ 135.716940][ T7666] dummy0: entered promiscuous mode [ 135.738985][ T7666] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 135.764698][ T7666] Cannot create hsr debugfs directory [ 135.801996][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.834454][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.986070][ T7690] netlink: 'syz.0.536': attribute type 1 has an invalid length. [ 136.081882][ T7695] syz.3.538[7695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.081978][ T7695] syz.3.538[7695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.117983][ T7695] syz.3.538[7695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.400562][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 136.775158][ T7723] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 136.776543][ T7726] vlan1: entered promiscuous mode [ 136.884800][ T7726] vlan1: left promiscuous mode [ 136.960489][ C0] bridge0: port 1(ip6gretap0) entered learning state [ 137.067254][ T7742] xt_addrtype: ipv6 does not support BROADCAST matching [ 137.354839][ T7756] syz.3.552[7756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.440719][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 137.563230][ T7763] __nla_validate_parse: 4 callbacks suppressed [ 137.563253][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 137.599572][ T7765] netlink: 48 bytes leftover after parsing attributes in process `syz.3.555'. [ 137.673124][ T7772] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 137.688560][ T7772] hsr0: entered allmulticast mode [ 137.695814][ T7772] hsr_slave_0: entered allmulticast mode [ 137.705261][ T7772] hsr_slave_1: entered allmulticast mode [ 137.719307][ T7774] netlink: 'syz.2.557': attribute type 10 has an invalid length. [ 137.730824][ T7774] netlink: 40 bytes leftover after parsing attributes in process `syz.2.557'. [ 137.757933][ T7774] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 137.873380][ T7763] lo: entered allmulticast mode [ 137.905089][ T7763] lo: left allmulticast mode [ 138.021987][ T5914] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1 [ 138.043953][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 138.069667][ T7788] macvlan2: entered promiscuous mode [ 138.075537][ T7788] macvlan2: entered allmulticast mode [ 138.081212][ T5914] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 138.104607][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.104630][ T7779] bridge_slave_1: left allmulticast mode [ 138.119795][ T7779] bridge_slave_1: left promiscuous mode [ 138.149097][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.172878][ T7779] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.231827][ T7779] bridge_slave_0: left allmulticast mode [ 138.287268][ T7779] bridge_slave_0: left promiscuous mode [ 138.300828][ T7779] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.480594][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 138.517127][ T7779] bridge0 (unregistering): left promiscuous mode [ 138.746207][ T7795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.924499][ T7817] xt_addrtype: ipv6 does not support BROADCAST matching [ 138.939632][ T7812] netlink: 'syz.2.563': attribute type 12 has an invalid length. [ 139.142833][ T7814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.574'. [ 139.225679][ T7814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'. [ 139.279499][ T7814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.574'. [ 139.337978][ T7814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.574'. [ 139.520579][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 139.675811][ T5890] IPVS: starting estimator thread 0... [ 139.803746][ T7842] IPVS: using max 19 ests per chain, 45600 per kthread [ 140.297175][ T7858] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.573'. [ 140.445805][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 140.469936][ T7832] lo speed is unknown, defaulting to 1000 [ 140.502587][ T7863] macvlan4: entered promiscuous mode [ 140.521674][ T7863] macvlan4: entered allmulticast mode [ 140.560558][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 141.600543][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 141.718475][ T7878] netlink: 'syz.4.581': attribute type 12 has an invalid length. [ 142.640530][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 142.699369][ T7888] __nla_validate_parse: 1 callbacks suppressed [ 142.699388][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 142.727030][ T7889] bpf_get_probe_write_proto: 8 callbacks suppressed [ 142.727049][ T7889] syz.4.585[7889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.739232][ T7889] syz.4.585[7889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.757808][ T7889] syz.4.585[7889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.802814][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.876443][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.043919][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.119426][ T7898] netlink: 'syz.3.587': attribute type 4 has an invalid length. [ 143.148089][ T7898] netlink: 'syz.3.587': attribute type 4 has an invalid length. [ 143.204422][ T7898] netlink: 52 bytes leftover after parsing attributes in process `syz.3.587'. [ 143.288372][ T7902] xt_addrtype: ipv6 does not support BROADCAST matching [ 143.504883][ T7898] lo speed is unknown, defaulting to 1000 [ 143.680609][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 144.399837][ T7936] syz.0.596[7936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.399936][ T7936] syz.0.596[7936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.454753][ T7936] syz.0.596[7936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.682546][ T7943] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 144.711640][ T7943] pimreg3: entered allmulticast mode [ 144.720624][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 144.727672][ T7943] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 144.870960][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 144.964579][ T7943] pimreg3: left allmulticast mode [ 144.979610][ T7947] xt_addrtype: ipv6 does not support BROADCAST matching [ 145.247921][ T7956] macvlan6: entered promiscuous mode [ 145.254791][ T7956] macvlan6: entered allmulticast mode [ 145.327550][ T5050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.355984][ T5050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.626511][ T7973] tipc: Failed to remove unknown binding: 66,1,1/0:1812427980/1812427982 [ 145.653157][ T7973] tipc: Failed to remove unknown binding: 66,1,1/0:1812427980/1812427982 [ 145.760632][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 145.949313][ T7983] tipc: Can't bind to reserved service type 0 [ 146.092568][ T7990] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 146.486886][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 146.520328][ T8001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.617'. [ 146.527941][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 146.541513][ T8002] netlink: 244 bytes leftover after parsing attributes in process `syz.3.618'. [ 146.800541][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 146.822964][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'. [ 146.846936][ T8012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.620'. [ 147.240219][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 147.840535][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 148.166221][ T8064] __nla_validate_parse: 2 callbacks suppressed [ 148.166241][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 148.664336][ T8097] sctp: [Deprecated]: syz.2.644 (pid 8097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.664336][ T8097] Use struct sctp_sack_info instead [ 148.702098][ T8080] lo speed is unknown, defaulting to 1000 [ 148.880529][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 149.085817][ T8108] netlink: 'syz.2.648': attribute type 10 has an invalid length. [ 149.094204][ T8108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.648'. [ 149.098486][ T8109] netlink: 'syz.0.646': attribute type 4 has an invalid length. [ 149.104100][ T8108] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 149.227270][ T8115] netlink: 'syz.0.646': attribute type 4 has an invalid length. [ 149.232511][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 149.266513][ T8114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.649'. [ 149.303222][ T8109] netlink: 52 bytes leftover after parsing attributes in process `syz.0.646'. [ 149.339319][ T8104] netlink: 'syz.3.647': attribute type 4 has an invalid length. [ 149.395204][ T8104] netlink: 'syz.3.647': attribute type 4 has an invalid length. [ 149.579893][ T8121] netlink: 100 bytes leftover after parsing attributes in process `syz.4.650'. [ 149.609653][ T8121] netlink: 100 bytes leftover after parsing attributes in process `syz.4.650'. [ 149.666901][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 149.680999][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.651'. [ 149.874638][ T8133] dvmrp5: entered allmulticast mode [ 149.897457][ T8133] hsr0: left allmulticast mode [ 149.938970][ T8133] hsr_slave_0: left allmulticast mode [ 149.966307][ T8133] hsr_slave_1: left allmulticast mode [ 149.972930][ T8133] dvmrp5: left allmulticast mode [ 150.048163][ T8136] netlink: 72 bytes leftover after parsing attributes in process `syz.2.653'. [ 150.077484][ T8109] lo speed is unknown, defaulting to 1000 [ 150.169296][ T8136] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 150.618258][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.628907][ T8159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.645895][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.658974][ T8159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.096988][ T8174] syz.4.665[8174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.097086][ T8174] syz.4.665[8174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.109194][ T8174] syz.4.665[8174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.138244][ T8153] lo speed is unknown, defaulting to 1000 [ 151.553800][ T8149] lo speed is unknown, defaulting to 1000 [ 152.320543][ C0] bridge0: port 1(ip6gretap0) entered forwarding state [ 152.327465][ C0] bridge0: topology change detected, propagating [ 152.568546][ T8213] syz.0.676[8213] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.568640][ T8213] syz.0.676[8213] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.618065][ T8213] syz.0.676[8213] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.833089][ T8220] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 153.010792][ T8228] dvmrp5: entered allmulticast mode [ 153.046119][ T8228] dvmrp5: left allmulticast mode [ 153.551328][ T8246] __nla_validate_parse: 3 callbacks suppressed [ 153.551347][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.688'. [ 153.721109][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 153.748681][ T8251] netlink: 36 bytes leftover after parsing attributes in process `syz.3.689'. [ 154.181790][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 154.202225][ T8277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.222544][ T8277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.263713][ T8277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.282183][ T8277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.573732][ T8286] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 154.756565][ T8299] macvlan7: entered promiscuous mode [ 154.763496][ T8299] macvlan7: entered allmulticast mode [ 154.778938][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.793997][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.036687][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 155.561632][ T8308] lo speed is unknown, defaulting to 1000 [ 155.852270][ T8] hid-generic 0005:0458:FFF9.0002: item fetching failed at offset 0/1 [ 155.861839][ T8] hid-generic 0005:0458:FFF9.0002: probe with driver hid-generic failed with error -22 [ 155.881717][ T8328] xt_l2tp: v2 tid > 0xffff: 150994944 [ 155.888213][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 155.897261][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.709'. [ 155.906467][ T8328] netlink: 'syz.4.709': attribute type 15 has an invalid length. [ 156.264972][ T8338] netlink: 100 bytes leftover after parsing attributes in process `syz.2.712'. [ 156.302971][ T8338] netlink: 100 bytes leftover after parsing attributes in process `syz.2.712'. [ 156.354989][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 156.537705][ T8347] macvlan5: entered promiscuous mode [ 156.543722][ T8347] macvlan5: entered allmulticast mode [ 156.549382][ T8330] lo speed is unknown, defaulting to 1000 [ 156.558207][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.567712][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.638431][ T8349] netlink: 'syz.0.714': attribute type 2 has an invalid length. [ 157.288465][ T8367] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 157.325716][ T8367] vlan0: entered allmulticast mode [ 157.632190][ T8377] netlink: 'syz.1.723': attribute type 1 has an invalid length. [ 157.775518][ T8385] macvlan8: entered promiscuous mode [ 157.783377][ T8385] macvlan8: entered allmulticast mode [ 157.854297][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.883542][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.052088][ T8397] netlink: 'syz.1.728': attribute type 4 has an invalid length. [ 158.116341][ T8397] infiniband syz0: set down [ 158.134883][ T8403] ip6t_srh: unknown srh match flags 5294 [ 158.145668][ T46] lo speed is unknown, defaulting to 1000 [ 158.185880][ T46] lo speed is unknown, defaulting to 1000 [ 158.203659][ T8397] siw: device registration error -23 [ 158.686983][ T8423] __nla_validate_parse: 2 callbacks suppressed [ 158.687012][ T8423] netlink: 6 bytes leftover after parsing attributes in process `syz.0.732'. [ 158.797758][ T8429] netlink: 'syz.1.733': attribute type 4 has an invalid length. [ 158.858434][ T8429] netlink: 'syz.1.733': attribute type 4 has an invalid length. [ 158.896525][ T8429] infiniband syz0: set active [ 158.903538][ T58] lo speed is unknown, defaulting to 1000 [ 158.909360][ T58] lo speed is unknown, defaulting to 1000 [ 158.916167][ T8432] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 158.933726][ T8429] netlink: 52 bytes leftover after parsing attributes in process `syz.1.733'. [ 158.964201][ T8436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.730'. [ 159.068308][ T8434] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 159.213734][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.737'. [ 159.266096][ T8429] lo speed is unknown, defaulting to 1000 [ 159.776603][ T58] IPVS: starting estimator thread 0... [ 159.783460][ T8460] netlink: 'syz.1.743': attribute type 39 has an invalid length. [ 159.880882][ T8461] IPVS: using max 20 ests per chain, 48000 per kthread [ 160.462580][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.744'. [ 160.763561][ T8495] netlink: 'syz.1.749': attribute type 10 has an invalid length. [ 160.792243][ T8498] Cannot find add_set index 832 as target [ 160.805981][ T8501] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 160.844313][ T8501] netlink: 'syz.2.751': attribute type 9 has an invalid length. [ 160.857152][ T8501] netlink: 'syz.2.751': attribute type 7 has an invalid length. [ 160.879353][ T8501] netlink: 'syz.2.751': attribute type 8 has an invalid length. [ 160.944948][ T8505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.752'. [ 161.007288][ T8505] netlink: 'syz.0.752': attribute type 7 has an invalid length. [ 161.210293][ T8514] xt_addrtype: ipv6 does not support BROADCAST matching [ 161.225708][ T8515] lo: entered allmulticast mode [ 161.239234][ T8515] tunl0: entered allmulticast mode [ 161.248947][ T8515] gre0: entered allmulticast mode [ 161.265942][ T8515] gretap0: entered allmulticast mode [ 161.274591][ T8515] erspan0: entered allmulticast mode [ 161.284840][ T8515] ip_vti0: entered allmulticast mode [ 161.305399][ T8515] ip6_vti0: entered allmulticast mode [ 161.315203][ T8515] sit0: entered allmulticast mode [ 161.317500][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 161.333835][ T8515] ip6tnl0: entered allmulticast mode [ 161.342661][ T8515] ip6gre0: entered allmulticast mode [ 161.356067][ T8515] syz_tun: entered allmulticast mode [ 161.364629][ T8515] bridge0: port 1(ip6gretap0) entered disabled state [ 161.373396][ T8515] vcan0: entered allmulticast mode [ 161.382468][ T8515] bond0: entered allmulticast mode [ 161.387607][ T8515] bond_slave_0: entered allmulticast mode [ 161.394314][ T8515] bond_slave_1: entered allmulticast mode [ 161.400037][ T8515] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 161.415267][ T8515] team0: entered allmulticast mode [ 161.420745][ T8515] team_slave_0: entered allmulticast mode [ 161.426717][ T8515] team_slave_1: entered allmulticast mode [ 161.433320][ T8515] bridge0: entered allmulticast mode [ 161.442204][ T8515] dummy0: entered allmulticast mode [ 161.451714][ T8515] nlmon0: entered allmulticast mode [ 161.457861][ T8515] caif0: entered allmulticast mode [ 161.466743][ T8515] vxcan0: entered allmulticast mode [ 161.474900][ T8515] vxcan1: entered allmulticast mode [ 161.483444][ T8515] veth0: entered allmulticast mode [ 161.491991][ T8515] veth1: entered allmulticast mode [ 161.499651][ T8515] wg1: entered allmulticast mode [ 161.506886][ T8515] veth0_to_bridge: entered allmulticast mode [ 161.515611][ T8515] bridge_slave_0: entered allmulticast mode [ 161.522916][ T8515] veth1_to_bridge: entered allmulticast mode [ 161.529625][ T8515] bridge_slave_1: entered allmulticast mode [ 161.538783][ T8515] veth0_to_bond: entered allmulticast mode [ 161.549595][ T8515] veth1_to_bond: entered allmulticast mode [ 161.558636][ T8515] veth0_to_team: left promiscuous mode [ 161.564600][ T8515] veth0_to_team: entered allmulticast mode [ 161.574633][ T8515] veth1_to_team: entered allmulticast mode [ 161.583868][ T8515] veth0_to_batadv: entered allmulticast mode [ 161.594764][ T8515] batadv_slave_0: entered allmulticast mode [ 161.604652][ T8515] veth1_to_batadv: entered allmulticast mode [ 161.613776][ T8515] batadv_slave_1: entered allmulticast mode [ 161.621920][ T8515] xfrm0: entered allmulticast mode [ 161.628841][ T8515] veth0_to_hsr: entered allmulticast mode [ 161.636895][ T8515] hsr_slave_0: entered allmulticast mode [ 161.644594][ T8515] veth1_to_hsr: entered allmulticast mode [ 161.653962][ T8515] hsr_slave_1: entered allmulticast mode [ 161.662343][ T8515] hsr0: entered allmulticast mode [ 161.670303][ T8515] veth1_virt_wifi: entered allmulticast mode [ 161.679159][ T8515] veth0_virt_wifi: entered allmulticast mode [ 161.687730][ T8515] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 161.696981][ T8515] veth1_vlan: entered allmulticast mode [ 161.705210][ T8515] veth0_vlan: entered allmulticast mode [ 161.718753][ T8515] vlan0: entered allmulticast mode [ 161.724538][ T8515] vlan1: entered allmulticast mode [ 161.732191][ T8515] macvlan1: entered allmulticast mode [ 161.740178][ T8515] ipvlan0: entered allmulticast mode [ 161.746385][ T8515] ipvlan1: entered allmulticast mode [ 161.753301][ T8515] veth1_macvtap: entered allmulticast mode [ 161.766544][ T8515] veth0_macvtap: entered allmulticast mode [ 161.775596][ T8515] macvtap0: entered allmulticast mode [ 161.784478][ T8515] macsec0: entered allmulticast mode [ 161.794106][ T8515] geneve0: entered allmulticast mode [ 161.802004][ T8515] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.811787][ T8515] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.821306][ T8515] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.830203][ T8515] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.844097][ T8515] geneve1: entered allmulticast mode [ 161.853001][ T8515] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 161.862626][ T8515] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 161.872322][ T8515] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 161.886944][ T8515] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 161.895851][ T8515] ip6gretap1: entered allmulticast mode [ 161.902687][ T8515] bond1: entered allmulticast mode [ 161.908383][ T8515] ieee802154 phy0 wpan1: entered allmulticast mode [ 161.915822][ T8515] ieee802154 phy0 wpan0: entered allmulticast mode [ 161.922850][ T8515] vcan1: entered allmulticast mode [ 161.928571][ T8515] bond2: entered allmulticast mode [ 161.936838][ T8515] macvlan0: left promiscuous mode [ 161.942452][ T8515] macvlan0: entered allmulticast mode [ 161.948700][ T8515] bond3: entered allmulticast mode [ 161.955585][ T8515] bridge0: left promiscuous mode [ 161.963841][ T8515] macsec1: entered allmulticast mode [ 161.969235][ T8515] syztnl1: entered allmulticast mode [ 161.975514][ T8515] ip6erspan0: entered allmulticast mode [ 161.981732][ T8515] macvlan2: left promiscuous mode [ 161.986956][ T8515] vxcan2: entered allmulticast mode [ 161.993212][ T8515] vxcan3: entered allmulticast mode [ 161.998588][ T8515] vxlan0: entered allmulticast mode [ 162.004447][ T8515] bridge_slave_1.: entered allmulticast mode [ 162.202672][ T8533] x_tables: duplicate underflow at hook 3 [ 162.214463][ T8533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.759'. [ 162.384641][ T8528] lo speed is unknown, defaulting to 1000 [ 162.809088][ T8551] netlink: 'syz.0.766': attribute type 9 has an invalid length. [ 162.871607][ T8551] netlink: 'syz.0.766': attribute type 7 has an invalid length. [ 162.891412][ T8532] lo speed is unknown, defaulting to 1000 [ 162.930313][ T8551] netlink: 'syz.0.766': attribute type 8 has an invalid length. [ 162.954958][ T8555] netlink: 'syz.3.767': attribute type 1 has an invalid length. [ 162.963699][ T8555] netlink: 224 bytes leftover after parsing attributes in process `syz.3.767'. [ 163.095003][ T8554] xt_recent: Unsupported userspace flags (00000042) [ 163.787918][ T8580] xt_addrtype: ipv6 does not support BROADCAST matching [ 164.356598][ T8591] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 164.432302][ T8585] vlan0: entered allmulticast mode [ 164.509936][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.773'. [ 164.737751][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 164.906144][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'. [ 165.159204][ T8615] lo speed is unknown, defaulting to 1000 [ 165.284046][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.780'. [ 165.407644][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 165.559063][ T8633] netlink: 'syz.4.784': attribute type 39 has an invalid length. [ 165.861939][ T8640] netlink: 40 bytes leftover after parsing attributes in process `syz.0.782'. [ 165.883426][ T8638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.785'. [ 166.397161][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'. [ 166.561011][ T8660] dccp_invalid_packet: P.Data Offset(4) too small [ 166.587974][ T8660] mac80211_hwsim hwsim3 wlan1: Device is already in use. [ 166.755898][ T8649] lo speed is unknown, defaulting to 1000 [ 167.115719][ T8681] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 167.143149][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.155897][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.192628][ T8680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.758734][ T8695] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 167.844601][ T8695] vlan2: entered allmulticast mode [ 168.014228][ T8700] netlink: 16 bytes leftover after parsing attributes in process `syz.4.800'. [ 168.321590][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.799'. [ 168.592459][ T8720] xt_addrtype: ipv6 does not support BROADCAST matching [ 168.807076][ T8725] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.857395][ T8725] syz.4.808[8725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.857486][ T8725] syz.4.808[8725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.918932][ T8725] syz.4.808[8725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.318299][ T8750] macvlan6: entered promiscuous mode [ 169.335875][ T8750] macvlan6: entered allmulticast mode [ 169.348174][ T8750] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 169.359507][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.369371][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.498955][ T8752] lo speed is unknown, defaulting to 1000 [ 170.142909][ T8771] __nla_validate_parse: 1 callbacks suppressed [ 170.142929][ T8771] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.819'. [ 170.255100][ T8776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.333217][ T8776] syz.1.823[8776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.333316][ T8776] syz.1.823[8776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.420121][ T8776] syz.1.823[8776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.891610][ T8802] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.829'. [ 171.152480][ T8809] netlink: 'syz.2.830': attribute type 12 has an invalid length. [ 171.177030][ T8809] netlink: 244 bytes leftover after parsing attributes in process `syz.2.830'. [ 171.804489][ T8840] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 171.824881][ T8840] netlink: 'syz.1.836': attribute type 9 has an invalid length. [ 171.833318][ T8840] netlink: 'syz.1.836': attribute type 7 has an invalid length. [ 171.858741][ T8840] netlink: 'syz.1.836': attribute type 8 has an invalid length. [ 171.905379][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 172.067057][ T8852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.082056][ T8852] syz.0.837[8852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.082139][ T8852] syz.0.837[8852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.094061][ T8852] syz.0.837[8852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.215838][ T8845] lo speed is unknown, defaulting to 1000 [ 172.860323][ T8887] macvlan7: entered promiscuous mode [ 172.894771][ T8887] macvlan7: entered allmulticast mode [ 173.004512][ T8887] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 173.016953][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.026446][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.485738][ T8911] netlink: 'syz.0.846': attribute type 1 has an invalid length. [ 173.628328][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 173.820888][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.848'. [ 173.846833][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.848'. [ 173.885044][ T8927] xt_hashlimit: invalid rate [ 173.911758][ T8930] netlink: 244 bytes leftover after parsing attributes in process `syz.2.849'. [ 174.445758][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.857'. [ 174.490171][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.857'. [ 174.545082][ T8966] netlink: 'syz.0.857': attribute type 72 has an invalid length. [ 174.657594][ T8971] macsec0: entered promiscuous mode [ 174.713303][ T8971] veth1_macvtap: left promiscuous mode [ 174.771022][ T8971] macsec0 (unregistering): left promiscuous mode [ 174.922110][ T8988] xt_addrtype: ipv6 does not support BROADCAST matching [ 175.699010][ T9028] __nla_validate_parse: 3 callbacks suppressed [ 175.699029][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 175.749240][ T9028] netlink: 44 bytes leftover after parsing attributes in process `syz.3.867'. [ 176.285370][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 176.406616][ T9050] tipc: Started in network mode [ 176.420945][ T9050] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 176.443194][ T9050] tipc: Enabled bearer , priority 0 [ 177.063403][ T9083] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 177.073931][ T9083] netlink: 256 bytes leftover after parsing attributes in process `syz.0.881'. [ 177.085372][ T9083] netlink: 44 bytes leftover after parsing attributes in process `syz.0.881'. [ 177.099503][ T9084] syz.1.882[9084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.099589][ T9084] syz.1.882[9084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.114040][ T9084] syz.1.882[9084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.463819][ T9107] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 177.561384][ T5925] tipc: Node number set to 10136234 [ 177.581221][ T9114] netlink: 'syz.1.885': attribute type 29 has an invalid length. [ 177.589083][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 178.045873][ T9130] Bluetooth: MGMT ver 1.23 [ 178.299671][ T9140] xt_NFQUEUE: number of total queues is 0 [ 178.368256][ T9141] netlink: 'syz.2.894': attribute type 30 has an invalid length. [ 178.395807][ T9140] pim6reg: entered allmulticast mode [ 178.423762][ T9140] pim6reg: left allmulticast mode [ 178.565083][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 178.614438][ T9147] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 178.785587][ T9149] netlink: 'syz.0.897': attribute type 10 has an invalid length. [ 178.842222][ T9149] team0: Device dummy0 failed to register rx_handler [ 178.962773][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 178.992851][ T9154] veth1_to_bridge: left allmulticast mode [ 179.010122][ T9151] netlink: 'syz.2.898': attribute type 21 has an invalid length. [ 179.022961][ T9151] netlink: 160 bytes leftover after parsing attributes in process `syz.2.898'. [ 179.249945][ T9169] netlink: 'syz.4.903': attribute type 10 has an invalid length. [ 179.258350][ T9169] netlink: 2 bytes leftover after parsing attributes in process `syz.4.903'. [ 180.682416][ T9169] team0: left allmulticast mode [ 180.688197][ T9169] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.950158][ T9183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.976265][ T9189] syz.3.907[9189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.976354][ T9189] syz.3.907[9189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.985539][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'. [ 181.009335][ T9189] syz.3.907[9189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.014565][ T9191] Cannot find del_set index 286 as target [ 181.088481][ T9193] macvlan3: entered promiscuous mode [ 181.100873][ T9193] macvlan3: entered allmulticast mode [ 181.124032][ T9193] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1 [ 181.139137][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.148448][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.344568][ T9204] netlink: 36 bytes leftover after parsing attributes in process `syz.4.912'. [ 181.524061][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 182.246905][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 182.303824][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 182.349927][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 182.437894][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 182.489632][ T9240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.926'. [ 182.831948][ T9236] delete_channel: no stack [ 183.051806][ T9226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.131432][ T9258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.930'. [ 183.188346][ T9261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.930'. [ 183.331899][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.342497][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.400129][ T9264] sctp: [Deprecated]: syz.3.931 (pid 9264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.400129][ T9264] Use struct sctp_sack_info instead [ 183.457480][ T9270] x_tables: duplicate underflow at hook 3 [ 183.539039][ T9272] netlink: 'syz.0.933': attribute type 2 has an invalid length. [ 183.887513][ T9283] netlink: 'syz.4.938': attribute type 2 has an invalid length. [ 184.097119][ T9291] syz.2.939[9291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.097222][ T9291] syz.2.939[9291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.118828][ T9291] syz.2.939[9291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.119265][ T9292] x_tables: duplicate underflow at hook 1 [ 185.110787][ T9339] dvmrp5: entered allmulticast mode [ 185.118731][ T9339] dvmrp5: left allmulticast mode [ 185.739734][ T9352] lo speed is unknown, defaulting to 1000 [ 186.214168][ T9387] dummy0: entered promiscuous mode [ 186.235573][ T9387] dummy0: left promiscuous mode [ 186.253549][ T9390] __nla_validate_parse: 9 callbacks suppressed [ 186.253568][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.966'. [ 186.402756][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 186.403079][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 186.408841][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 187.037440][ T9412] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 187.056343][ T9412] team0: Device dummy0 failed to register rx_handler [ 187.727504][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'. [ 187.746242][ T9452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.980'. [ 188.332558][ T9474] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 188.362656][ T9474] team0: Port device dummy0 added [ 188.369537][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.984'. [ 188.421114][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.984'. [ 188.496166][ T9480] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.986'. [ 188.705337][ T9472] lo speed is unknown, defaulting to 1000 [ 189.109592][ T9506] netlink: 'syz.2.995': attribute type 4 has an invalid length. [ 189.125626][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 189.859310][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.998'. [ 189.899605][ T9529] sctp: [Deprecated]: syz.4.1001 (pid 9529) Use of int in maxseg socket option. [ 189.899605][ T9529] Use struct sctp_assoc_value instead [ 189.933618][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 189.950946][ T9527] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1000'. [ 190.683318][ T9552] netlink: 'syz.0.1007': attribute type 21 has an invalid length. [ 190.710606][ T9552] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.750901][ T9552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.758592][ T9552] IPv6: NLM_F_CREATE should be set when creating new route [ 190.765944][ T9552] IPv6: NLM_F_CREATE should be set when creating new route [ 190.773208][ T9552] IPv6: NLM_F_CREATE should be set when creating new route [ 190.917336][ T9562] hsr0: entered promiscuous mode [ 190.951310][ T9562] macvlan4: entered allmulticast mode [ 190.961679][ T9560] sctp: [Deprecated]: syz.4.1009 (pid 9560) Use of int in max_burst socket option. [ 190.961679][ T9560] Use struct sctp_assoc_value instead [ 190.968483][ T9562] hsr0: entered allmulticast mode [ 190.992411][ T9562] hsr_slave_0: entered allmulticast mode [ 191.002679][ T9560] netlink: 'syz.4.1009': attribute type 6 has an invalid length. [ 191.016937][ T9562] hsr_slave_1: entered allmulticast mode [ 191.052630][ T9562] hsr0: left allmulticast mode [ 191.057587][ T9562] hsr_slave_0: left allmulticast mode [ 191.070339][ T9562] hsr_slave_1: left allmulticast mode [ 191.319697][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 191.426138][ T9580] __nla_validate_parse: 6 callbacks suppressed [ 191.426156][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 191.483421][ T9582] netlink: 'syz.0.1015': attribute type 58 has an invalid length. [ 191.499551][ T9582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1015'. [ 191.716577][ T9586] vlan2: entered allmulticast mode [ 191.867076][ T9595] netlink: 'syz.3.1019': attribute type 10 has an invalid length. [ 191.906864][ T9595] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1019'. [ 192.128181][ T9608] IPv6: sit1: Disabled Multicast RS [ 192.208991][ T29] audit: type=1107 audit(1731573624.881:2): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 192.286389][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 192.762401][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 192.935654][ T9632] GUP no longer grows the stack in syz.2.1030 (9632): 20006000-2000a000 (20005000) [ 192.977434][ T9632] CPU: 0 UID: 0 PID: 9632 Comm: syz.2.1030 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 192.978124][ T9637] infiniband syz0: set active [ 192.988143][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 192.988259][ T9632] Call Trace: [ 192.988271][ T9632] [ 192.988279][ T9632] dump_stack_lvl+0x241/0x360 [ 192.988328][ T9632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.988350][ T9632] ? __pfx__printk+0x10/0x10 [ 192.988368][ T9632] ? find_vma+0xf9/0x170 [ 192.988398][ T9632] ? vma_is_secretmem+0xd/0x50 [ 192.988421][ T9632] ? check_vma_flags+0x52b/0x5a0 [ 192.988446][ T9632] __get_user_pages+0x4385/0x49e0 [ 193.042908][ T9632] ? __lock_acquire+0x1384/0x2050 [ 193.047996][ T9632] ? __pfx___get_user_pages+0x10/0x10 [ 193.053409][ T9632] ? __pfx_lock_acquire+0x10/0x10 [ 193.058474][ T9632] ? __pfx___might_resched+0x10/0x10 [ 193.063805][ T9632] __gup_longterm_locked+0x3bc/0x1770 [ 193.069224][ T9632] pin_user_pages+0x137/0x1f0 [ 193.073936][ T9632] ? __pfx_pin_user_pages+0x10/0x10 [ 193.079159][ T9632] ? __kmalloc_node_noprof+0x247/0x440 [ 193.084658][ T9632] xdp_umem_create+0x978/0xf30 [ 193.089465][ T9632] xsk_setsockopt+0x732/0x950 [ 193.094180][ T9632] ? __pfx_xsk_setsockopt+0x10/0x10 [ 193.099413][ T9632] ? __pfx_lock_acquire+0x10/0x10 [ 193.104469][ T9632] ? __fget_files+0x29/0x470 [ 193.109087][ T9632] ? aa_sock_opt_perm+0x79/0x120 [ 193.114061][ T9632] ? __pfx_xsk_setsockopt+0x10/0x10 [ 193.119286][ T9632] do_sock_setsockopt+0x3af/0x720 [ 193.124345][ T9632] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 193.129919][ T9632] ? __fget_files+0x29/0x470 [ 193.134537][ T9632] ? __fget_files+0x3f3/0x470 [ 193.139241][ T9632] ? __fget_files+0x29/0x470 [ 193.143875][ T9632] __sys_setsockopt+0x1a2/0x250 [ 193.148758][ T9632] __x64_sys_setsockopt+0xb5/0xd0 [ 193.153815][ T9632] do_syscall_64+0xf3/0x230 [ 193.158352][ T9632] ? clear_bhb_loop+0x35/0x90 [ 193.163144][ T9632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.169073][ T9632] RIP: 0033:0x7f552a57e719 [ 193.173521][ T9632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.188162][ T5920] Dead loop on virtual device ipvlan1, fix it urgently! [ 193.193128][ T9632] RSP: 002b:00007f55289f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.193173][ T9632] RAX: ffffffffffffffda RBX: 00007f552a735f80 RCX: 00007f552a57e719 [ 193.193190][ T9632] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 193.193203][ T9632] RBP: 00007f552a5f175e R08: 0000000000000020 R09: 0000000000000000 [ 193.193218][ T9632] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 193.193233][ T9632] R13: 0000000000000000 R14: 00007f552a735f80 R15: 00007ffcfa7d5758 [ 193.193263][ T9632] [ 193.271035][ T46] lo speed is unknown, defaulting to 1000 [ 193.329194][ T9647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1035'. [ 193.345775][ T9647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1035'. [ 193.373395][ T9647] netlink: 'syz.0.1035': attribute type 4 has an invalid length. [ 193.480571][ T5920] Dead loop on virtual device ipvlan1, fix it urgently! [ 193.603171][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'. [ 193.790751][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 193.910719][ T9673] netlink: 'syz.3.1040': attribute type 7 has an invalid length. [ 194.127025][ T9684] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1045'. [ 194.283785][ T9689] netlink: 'syz.4.1047': attribute type 21 has an invalid length. [ 194.952406][ T9713] lo speed is unknown, defaulting to 1000 [ 195.194372][ T9728] sock: sock_set_timeout: `syz.1.1057' (pid 9728) tries to set negative timeout [ 195.220788][ T9728] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 195.363984][ T9735] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 195.428963][ T9735] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.512198][ T9739] bond4: (slave bridge0): making interface the new active one [ 195.536056][ T9739] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 195.563412][ T9741] bridge0: left allmulticast mode [ 195.575223][ T9738] ipip0: entered promiscuous mode [ 195.588126][ T9735] vlan2: entered promiscuous mode [ 195.596180][ T9735] bond4: entered promiscuous mode [ 195.603937][ T9735] bridge0: entered promiscuous mode [ 195.613348][ T9735] vlan2: entered allmulticast mode [ 195.618642][ T9735] bond4: entered allmulticast mode [ 195.628379][ T9735] bridge0: entered allmulticast mode [ 195.648664][ T9730] lo speed is unknown, defaulting to 1000 [ 195.853607][ T9747] macsec0: entered promiscuous mode [ 195.912587][ T9747] macsec0 (unregistering): left promiscuous mode [ 196.140033][ T9757] set match dimension is over the limit! [ 196.547201][ T9757] pim6reg: entered allmulticast mode [ 196.575306][ T9765] pim6reg: left allmulticast mode [ 197.087334][ T46] IPVS: starting estimator thread 0... [ 197.182928][ T9786] wg2: entered promiscuous mode [ 197.211540][ T9790] IPVS: using max 22 ests per chain, 52800 per kthread [ 197.245932][ T9786] team0: Device wg2 is of different type [ 197.273406][ T9796] netdevsim netdevsim3 netdevsim0: Device is already in use. [ 197.322267][ T9785] __nla_validate_parse: 14 callbacks suppressed [ 197.322286][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 197.355554][ T9785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1073'. [ 197.732778][ T9806] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1076'. [ 197.906941][ T9793] lo speed is unknown, defaulting to 1000 [ 197.926676][ T9813] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1078'. [ 198.180146][ T9820] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1082'. [ 198.200249][ T9822] syzkaller0: create flow: hash 1029395319 index 2 [ 198.343269][ T9828] xt_l2tp: v2 doesn't support IP mode [ 198.375719][ T9830] ip6gretap0: left promiscuous mode [ 198.387494][ T9830] bridge0: port 1(ip6gretap0) entered disabled state [ 198.422474][ T9830] bond0: (slave bond_slave_0): Releasing backup interface [ 198.439657][ T9830] bond0: (slave bond_slave_1): Releasing backup interface [ 198.454960][ T9830] team0: Port device team_slave_0 removed [ 198.468147][ T9831] xt_limit: Overflow, try lower: 65536/2147483648 [ 198.477065][ T9830] team0: Port device team_slave_1 removed [ 198.485867][ T9830] bond0: (slave netdevsim0): Releasing backup interface [ 198.498503][ T9830] bond0: (slave wlan1): Releasing backup interface [ 198.506420][ T9833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1084'. [ 198.519541][ T9830] team0: Port device bridge0 removed [ 198.540001][ T9817] syzkaller0: delete flow: hash 1029395319 index 2 [ 199.050724][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 200.335482][ T9837] tipc: Enabling of bearer rejected, failed to enable media [ 200.395916][ T9845] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1087'. [ 200.574363][ T9827] lo speed is unknown, defaulting to 1000 [ 200.697982][ T9858] xt_addrtype: ipv6 does not support BROADCAST matching [ 200.734357][ T9855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1091'. [ 200.751064][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 201.133583][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 201.528919][ T9879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.769709][ T9884] lo speed is unknown, defaulting to 1000 [ 201.845812][ T9890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1100'. [ 201.857079][ T9899] xt_addrtype: ipv6 does not support BROADCAST matching [ 202.075726][ T9901] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 202.130331][ T9901] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 202.311711][ T2128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.349883][ T2128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.373786][ T9917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.526468][ T9925] veth0_vlan: left promiscuous mode [ 202.613650][ T9929] sctp: [Deprecated]: syz.4.1112 (pid 9929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.613650][ T9929] Use struct sctp_sack_info instead [ 202.721727][ T9923] delete_channel: no stack [ 202.833204][ T9935] set match dimension is over the limit! [ 202.982831][ T9939] xt_ipcomp: unknown flags B [ 203.025357][ T9935] pim6reg: entered allmulticast mode [ 203.107463][ T9935] pim6reg: left allmulticast mode [ 203.249016][ T9945] __nla_validate_parse: 3 callbacks suppressed [ 203.249035][ T9945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1119'. [ 203.464078][ T9955] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1120'. [ 203.572478][ T9963] netlink: 'syz.1.1121': attribute type 12 has an invalid length. [ 203.822125][ T9945] lo speed is unknown, defaulting to 1000 [ 204.372029][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 204.630801][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 204.663988][ T9992] bond4: (slave bridge0): Releasing active interface [ 204.671223][ T9992] bridge0 (unregistering): left promiscuous mode [ 204.677558][ T9992] bridge0 (unregistering): left allmulticast mode [ 204.802835][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 205.134644][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 205.700837][T10037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1141'. [ 205.721825][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 205.789128][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1143'. [ 206.186435][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 206.516422][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 206.524010][T10075] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 206.701054][T10088] pimreg: entered allmulticast mode [ 206.999034][T10100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.457640][T10115] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 207.569557][T10115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.637426][T10123] bridge0: port 4(vlan0) entered blocking state [ 207.647097][T10123] bridge0: port 4(vlan0) entered disabled state [ 207.666654][T10123] vlan0: entered allmulticast mode [ 207.698473][T10123] vlan0: left allmulticast mode [ 207.814182][T10127] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.988774][T10124] vlan2: entered promiscuous mode [ 207.998969][T10124] bond2: entered promiscuous mode [ 208.009126][T10124] vlan2: entered allmulticast mode [ 208.015368][T10124] bond2: entered allmulticast mode [ 208.355005][T10155] __nla_validate_parse: 5 callbacks suppressed [ 208.355025][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 208.658010][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 209.086166][T10190] netlink: 'syz.4.1190': attribute type 16 has an invalid length. [ 209.094561][T10190] netlink: 'syz.4.1190': attribute type 17 has an invalid length. [ 209.102942][T10190] netlink: 'syz.4.1190': attribute type 27 has an invalid length. [ 209.116532][T10190] tipc: Started in network mode [ 209.118389][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 209.121660][T10190] tipc: Node identity ac1414aa, cluster identity 4711 [ 209.122197][T10190] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.235947][T10190] tipc: Enabled bearer , priority 10 [ 209.260890][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.400708][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.448921][T10207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1195'. [ 209.461747][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 209.540477][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.640692][T10220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1197'. [ 209.663677][T10220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1197'. [ 209.680640][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.826910][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.932394][T10214] bond0 (unregistering): Released all slaves [ 209.961242][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.982160][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 210.100756][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.240628][ T58] tipc: Node number set to 2886997162 [ 210.380903][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.433101][T10250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1203'. [ 210.486648][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1208'. [ 210.651079][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.865053][T10275] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 210.897581][T10264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1210'. [ 210.961212][T10269] netlink: 'syz.2.1210': attribute type 4 has an invalid length. [ 211.012906][T10273] netlink: 'syz.2.1210': attribute type 4 has an invalid length. [ 211.477921][T10306] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 211.748612][T10318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.764461][T10389] macvlan4: entered promiscuous mode [ 212.770065][T10389] macvlan4: entered allmulticast mode [ 212.778809][T10389] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 212.799551][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.817585][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.005568][T10396] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.191439][T10409] xt_addrtype: ipv6 does not support BROADCAST matching [ 213.276188][T10412] batadv_slave_1: entered promiscuous mode [ 213.806562][T10438] __nla_validate_parse: 5 callbacks suppressed [ 213.806580][T10438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1237'. [ 213.952790][T10448] netlink: 'syz.0.1239': attribute type 7 has an invalid length. [ 213.994514][T10448] smc: removing ib device syz0 [ 214.320442][ C1] net_ratelimit: 3 callbacks suppressed [ 214.320463][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.606214][T10460] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.725084][T10471] rdma_op ffff888032aa19f0 conn xmit_rdma 0000000000000000 [ 215.360460][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.400511][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.697023][T10524] netlink: 'syz.3.1260': attribute type 4 has an invalid length. [ 216.755481][T10533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1260'. [ 216.967899][T10549] tap0: tun_chr_ioctl cmd 1074025673 [ 217.254639][T10560] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1268'. [ 217.293026][T10560] batadv_slave_1: entered promiscuous mode [ 217.408156][T10560] batadv_slave_1 (unregistering): left promiscuous mode [ 217.450498][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.688991][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'. [ 218.038143][T10592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 218.346718][T10601] bond4: entered promiscuous mode [ 218.364426][T10601] bond4: entered allmulticast mode [ 218.379943][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 218.444698][T10601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.480443][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.588722][T10604] netlink: 'syz.1.1278': attribute type 23 has an invalid length. [ 218.597337][T10604] netlink: 'syz.1.1278': attribute type 11 has an invalid length. [ 218.616722][T10604] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1278'. [ 219.264135][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 219.530433][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.053249][T10677] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 220.095167][T10674] vlan0: entered allmulticast mode [ 220.116252][T10674] bridge0: port 4(vlan0) entered blocking state [ 220.142059][T10674] bridge0: port 4(vlan0) entered disabled state [ 220.352142][T10687] netlink: 'syz.1.1295': attribute type 7 has an invalid length. [ 220.385617][T10687] Dead loop on virtual device ipvlan1, fix it urgently! [ 220.425192][T10687] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 220.451496][T10692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.560446][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.678652][T10699] x_tables: duplicate underflow at hook 3 [ 220.689451][T10699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1298'. [ 220.698158][T10687] syz.1.1295 (10687) used greatest stack depth: 9016 bytes left [ 220.872286][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 220.977803][T10707] xt_CT: No such helper "netbios-ns" [ 221.207101][T10727] Cannot find del_set index 286 as target [ 221.238045][T10727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1303'. [ 221.276948][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1304'. [ 221.309047][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 221.600532][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.714032][T10750] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1306'. [ 222.039147][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 222.048539][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1309'. [ 222.163880][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'. [ 222.184119][T10772] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 222.208678][T10764] bond0: (slave wlan1): Releasing backup interface [ 222.391181][T10783] syzkaller0: create flow: hash 1029395319 index 2 [ 222.544647][T10775] syzkaller0: delete flow: hash 1029395319 index 2 [ 222.650596][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.137406][T10803] can: request_module (can-proto-0) failed. [ 223.682316][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.504593][T10798] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] PREEMPT SMP KASAN PTI [ 224.517189][T10798] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 224.525583][T10798] CPU: 0 UID: 0 PID: 10798 Comm: syz.3.1315 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 224.536321][T10798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 224.546358][T10798] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 224.552240][T10798] Code: 20 08 00 00 e8 0e 63 27 fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 6e e7 6b f8 48 8b 03 48 89 5c 24 [ 224.571836][T10798] RSP: 0018:ffffc900049ee980 EFLAGS: 00010207 [ 224.577889][T10798] RAX: 000000000000004b RBX: 000000000000025f RCX: 0000000000002000 [ 224.585846][T10798] RDX: 0000000000001000 RSI: ffffffff8c610a80 RDI: ffffffff8c610a40 [ 224.593803][T10798] RBP: ffffc900049eea90 R08: 0000000000000920 R09: 00000000ffffffff [ 224.601761][T10798] R10: dffffc0000000000 R11: fffffbfff203acf6 R12: dffffc0000000000 [ 224.609723][T10798] R13: 1ffff9200093dd40 R14: ffff888051ea0127 R15: 1ffff9200093dd3c [ 224.617685][T10798] FS: 00007f1c48b666c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 224.626687][T10798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.633255][T10798] CR2: 0000001b30d09ff8 CR3: 0000000052996000 CR4: 00000000003526f0 [ 224.641214][T10798] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 224.649170][T10798] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 224.657130][T10798] Call Trace: [ 224.660397][T10798] [ 224.663313][T10798] ? __die_body+0x5f/0xb0 [ 224.667630][T10798] ? die_addr+0xb0/0xe0 [ 224.671771][T10798] ? exc_general_protection+0x3dd/0x5d0 [ 224.677309][T10798] ? asm_exc_general_protection+0x26/0x30 [ 224.683022][T10798] ? dev_prep_valid_name+0x3e3/0xa40 [ 224.688313][T10798] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 224.693933][T10798] register_netdevice+0x542/0x1b00 [ 224.699038][T10798] ? rcu_is_watching+0x15/0xb0 [ 224.703787][T10798] ? trace_kmalloc+0x1f/0xd0 [ 224.708365][T10798] ? __kmalloc_node_noprof+0x247/0x440 [ 224.713812][T10798] ? validate_linkmsg+0x825/0xa30 [ 224.718828][T10798] ? sized_strscpy+0x8d/0x220 [ 224.723499][T10798] ? __pfx_validate_linkmsg+0x10/0x10 [ 224.728867][T10798] ? __pfx_register_netdevice+0x10/0x10 [ 224.734402][T10798] ? rtnl_create_link+0x91c/0xc20 [ 224.739414][T10798] vxcan_newlink+0x314/0x5c0 [ 224.743991][T10798] ? rtnl_newlink_create+0x210/0xa30 [ 224.749260][T10798] ? __pfx_vxcan_newlink+0x10/0x10 [ 224.750496][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.754365][T10798] ? __pfx_validate_linkmsg+0x10/0x10 [ 224.766730][T10798] ? alloc_netdev_mqs+0xcd0/0x1080 [ 224.771847][T10798] ? rtnl_create_link+0x91c/0xc20 [ 224.776886][T10798] ? __pfx_vxcan_newlink+0x10/0x10 [ 224.782002][T10798] rtnl_newlink_create+0x2df/0xa30 [ 224.787101][T10798] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 224.792720][T10798] ? ns_capable+0x8a/0xf0 [ 224.797124][T10798] rtnl_newlink+0x17dd/0x24f0 [ 224.801793][T10798] ? __pfx_rtnl_newlink+0x10/0x10 [ 224.806816][T10798] ? netlink_unicast+0x7c4/0x990 [ 224.811749][T10798] ? __pfx_validate_chain+0x10/0x10 [ 224.816950][T10798] ? __sys_sendmsg+0x292/0x380 [ 224.821703][T10798] ? do_syscall_64+0xf3/0x230 [ 224.826362][T10798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.832444][T10798] ? __pfx_lock_release+0x10/0x10 [ 224.837474][T10798] ? __pfx_rtnl_newlink+0x10/0x10 [ 224.842486][T10798] rtnetlink_rcv_msg+0x791/0xcf0 [ 224.847406][T10798] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 224.852502][T10798] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 224.857950][T10798] ? ref_tracker_free+0x643/0x7e0 [ 224.862964][T10798] netlink_rcv_skb+0x1e3/0x430 [ 224.867722][T10798] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 224.873178][T10798] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.878465][T10798] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.883649][T10798] netlink_unicast+0x7f6/0x990 [ 224.888400][T10798] ? __pfx_netlink_unicast+0x10/0x10 [ 224.893733][T10798] ? __virt_addr_valid+0x183/0x530 [ 224.898839][T10798] ? __check_object_size+0x48e/0x900 [ 224.904124][T10798] netlink_sendmsg+0x8e4/0xcb0 [ 224.908899][T10798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.914176][T10798] ? aa_sock_msg_perm+0x91/0x160 [ 224.919104][T10798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.924375][T10798] __sock_sendmsg+0x221/0x270 [ 224.929039][T10798] ____sys_sendmsg+0x52a/0x7e0 [ 224.933791][T10798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.939071][T10798] __sys_sendmsg+0x292/0x380 [ 224.943650][T10798] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.948757][T10798] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.955084][T10798] ? do_syscall_64+0x100/0x230 [ 224.959842][T10798] ? do_syscall_64+0xb6/0x230 [ 224.964502][T10798] do_syscall_64+0xf3/0x230 [ 224.968994][T10798] ? clear_bhb_loop+0x35/0x90 [ 224.973658][T10798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.979534][T10798] RIP: 0033:0x7f1c47d7e719 [ 224.983934][T10798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.003537][T10798] RSP: 002b:00007f1c48b66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.011958][T10798] RAX: ffffffffffffffda RBX: 00007f1c47f35f80 RCX: 00007f1c47d7e719 [ 225.019920][T10798] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 225.027878][T10798] RBP: 00007f1c47df175e R08: 0000000000000000 R09: 0000000000000000 [ 225.035835][T10798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.043791][T10798] R13: 0000000000000000 R14: 00007f1c47f35f80 R15: 00007ffc408b9428 [ 225.051754][T10798] [ 225.054758][T10798] Modules linked in: [ 225.060261][T10798] ---[ end trace 0000000000000000 ]--- [ 225.065986][T10798] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 225.072438][T10798] Code: 20 08 00 00 e8 0e 63 27 fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 6e e7 6b f8 48 8b 03 48 89 5c 24 [ 225.092364][T10798] RSP: 0018:ffffc900049ee980 EFLAGS: 00010207 [ 225.098446][T10798] RAX: 000000000000004b RBX: 000000000000025f RCX: 0000000000002000 [ 225.107164][T10798] RDX: 0000000000001000 RSI: ffffffff8c610a80 RDI: ffffffff8c610a40 [ 225.115203][T10798] RBP: ffffc900049eea90 R08: 0000000000000920 R09: 00000000ffffffff [ 225.123992][T10798] R10: dffffc0000000000 R11: fffffbfff203acf6 R12: dffffc0000000000 [ 225.132040][T10798] R13: 1ffff9200093dd40 R14: ffff888051ea0127 R15: 1ffff9200093dd3c [ 225.140016][T10798] FS: 00007f1c48b666c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 225.149054][T10798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.155809][T10798] CR2: 00007fad811cef98 CR3: 0000000052996000 CR4: 00000000003526f0 [ 225.164033][T10798] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.172064][T10798] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 225.180044][T10798] Kernel panic - not syncing: Fatal exception [ 225.186360][T10798] Kernel Offset: disabled [ 225.190672][T10798] Rebooting in 86400 seconds..