last executing test programs: 4.395575861s ago: executing program 4 (id=2092): r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x29, 0x5, 0x68, 0x3, 0x6, 0x1, 0x7fff, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, "1b6692e062cdf5e7"}}}}}, 0x0) 4.291790603s ago: executing program 0 (id=2093): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1", 0x1c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8fed6c03af0f73260400000000fbffff6d0aefc7256e7cf8cb79070099f5f37513e44896a737af102e78a574eb33dbcb9625d28928a37c1039299039c421b82ac5d4f152ba54d4aa1a26d35ddfdc7b9cd3358c1a1f25951b8a543e05bd8dc1a39b40f3866a25c9e299255d2d258f251f690890a1ac118a7fee"], 0xfffffefc) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f00000004c0)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x1000, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}}, 0x20040054) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x2}}, 0x7, 0x7, 0xf9, 0x2, 0x6, 0x7ff, 0xfc}, &(0x7f0000000480)=0x9c) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x20000000, 0x10000000, 0x0, 0xfffffffd}, 0x1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 4.169538431s ago: executing program 4 (id=2096): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000380)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0xdc, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3c}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20044040}, 0x4000000) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x20, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x8, 0x200000b, r4}}], 0x20, 0x6044}, 0x6) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0xffffff62) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) r7 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r7, 0x28, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f0000000100), 0x3d) 3.783186238s ago: executing program 2 (id=2100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}]}, 0x40}}, 0x0) 3.7110207s ago: executing program 0 (id=2103): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 3.543580393s ago: executing program 0 (id=2104): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000380)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0xdc, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3c}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20044040}, 0x4000000) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x20, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x8, 0x200000b, r4}}], 0x20, 0x6044}, 0x6) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0xffffff62) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) r7 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r7, 0x28, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f0000000100), 0x3d) 3.491727891s ago: executing program 2 (id=2105): unshare(0x28020480) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8) 3.320025985s ago: executing program 2 (id=2106): socket$inet6(0xa, 0x3, 0xfffffffc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000001800)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x401, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x0, 0x4}}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x74, &(0x7f0000000140)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@generic={0xc, "e10cc0691d8f36005d2eaf62fd03072a3b2643811cb8b3da901f0b0e56fca567e58aa73b4b54624af0d2b692e653a6a1f83a71697e28ea3b9e5cd9729fbdb106044752d1f971f24680519ac19a87f93e089393d93fd5135c4a3662376263cc92bbf47e781c18"}}}, 0x0) vmsplice(r3, 0x0, 0x0, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x20000004) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0) connect$bt_sco(r4, &(0x7f0000000000), 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r8 = socket$inet6(0x10, 0x2, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) sendmsg(r8, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000ab0900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800500160002000000050017000000000004001200"], 0x48}}, 0x0) socket$igmp(0x2, 0x3, 0x2) 3.161269158s ago: executing program 4 (id=2108): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2400}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x3b, 0x0, 0x4, 0x0, 0xe, 0x50, 0x1}}}}}]}, 0x44}}, 0x44040) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x82c}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40894) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf250400000020000a"], 0xc0}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x1de, 0x4) bind$packet(r3, &(0x7f0000000080)={0x11, 0x5, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x8, 0x0}, 0x8) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="09ac0f00"]}]}, 0x1c}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x1, 0x0, 0x3, 0xa, 0x8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x6f14bb4ae0ffc3f, 0xe2029fb9aaacc114, 0xa, 0x8, 0x2, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0xa, 0x7, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x44, '\x00', r4, @fallback=0x11, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r0, 0x3, &(0x7f00000002c0)=[r11], &(0x7f0000000300)=[{0x0, 0x5, 0x2, 0x4}, {0x1, 0x4, 0xc, 0x9}, {0x1, 0x5, 0xd, 0x1}], 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2.838749599s ago: executing program 4 (id=2110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200020, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x40c000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x8d, 0x40000009ffffa}) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200a01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6(0xa, 0x2, 0x3a) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ffffffff000000000800010001"], 0x28}}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000030305000000000000000000000000000c0002000000000000080000"], 0x20}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) 2.514218097s ago: executing program 0 (id=2113): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1", 0x1c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8fed6c03af0f73260400000000fbffff6d0aefc7256e7cf8cb79070099f5f37513e44896a737af102e78a574eb33dbcb9625d28928a37c1039299039c421b82ac5d4f152ba54d4aa1a26d35ddfdc7b9cd3358c1a1f25951b8a543e05bd8dc1a39b40f3866a25c9e299255d2d258f251f690890a1ac118a7fee"], 0xfffffefc) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f00000004c0)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x1000, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}}, 0x20040054) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x2}}, 0x7, 0x7, 0xf9, 0x2, 0x6, 0x7ff, 0xfc}, &(0x7f0000000480)=0x9c) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x20000000, 0x10000000, 0x0, 0xfffffffd}, 0x1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2.412046946s ago: executing program 1 (id=2114): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 2.272154645s ago: executing program 3 (id=2115): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x6a}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in6=@private0}}]}, 0x154}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x8912, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @null, @bpq0, 0x3, [@default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x6, 0x2, 0x2, 0x1, 0x0, [@local]}}}, @tclass={{0x14}}], 0x40}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ttl\x00'}, @NFTA_MATCH_INFO={0x6, 0x3, "7acc"}, @NFTA_MATCH_REV={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) 2.250230662s ago: executing program 1 (id=2116): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xa0}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 2.047519467s ago: executing program 1 (id=2117): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r4}, 0x18) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}}, 0x44) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x10000, 0xff, {{0xe, 0x4, 0x3, 0x1f, 0x38, 0x68, 0x0, 0x4, 0x29, 0x0, @broadcast, @empty, {[@timestamp={0x44, 0x10, 0x43, 0x0, 0x2, [0x1ff, 0x100, 0x1]}, @ra={0x94, 0x4, 0x1}, @end, @generic={0x7, 0xd, "7a7e6bf31a4e41d769c71b"}]}}}}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0xc, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x34}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x19, @void, @value}, 0x94) 1.993782931s ago: executing program 2 (id=2118): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000380)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0xe8, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3c}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20044040}, 0x4000000) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x20, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x8, 0x200000b, r4}}], 0x20, 0x6044}, 0x6) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0xffffff62) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) r7 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r7, 0x28, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f0000000100), 0x3d) 1.628475131s ago: executing program 3 (id=2119): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_linger(r7, 0x1, 0xd, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[], 0x20) 1.510446534s ago: executing program 0 (id=2121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2400}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x3b, 0x0, 0x4, 0x0, 0xe, 0x50, 0x1}}}}}]}, 0x44}}, 0x44040) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x82c}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40894) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf250400000020000a"], 0xc0}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x1de, 0x4) bind$packet(r3, &(0x7f0000000080)={0x11, 0x5, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x8, 0x0}, 0x8) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="09ac0f00"]}]}, 0x1c}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x1, 0x0, 0x3, 0xa, 0x8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x6f14bb4ae0ffc3f, 0xe2029fb9aaacc114, 0xa, 0x8, 0x2, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0xa, 0x7, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x44, '\x00', r4, @fallback=0x11, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r0, 0x3, &(0x7f00000002c0)=[r11], &(0x7f0000000300)=[{0x0, 0x5, 0x2, 0x4}, {0x1, 0x4, 0xc, 0x9}, {0x1, 0x5, 0xd, 0x1}], 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.055997314s ago: executing program 3 (id=2122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0xe00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x880) 968.349422ms ago: executing program 2 (id=2123): unshare(0x22020600) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 915.658245ms ago: executing program 4 (id=2124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf"]) 829.711141ms ago: executing program 0 (id=2125): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f", 0x21}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00000109"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 668.032825ms ago: executing program 3 (id=2126): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="b40800000000e40073114100000000008510000002000000b7000000000000009500c200000000009500001200000000da2377e27b6447feeea301d037b820c95ee6f391b81e2818dacd55b1d71ed5e3d52211381c5acb21d35385e7faf0b47c5b070e8877aaee17c68a43caec79279df72b5a494f9a"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) 632.56906ms ago: executing program 3 (id=2127): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r0, 0x723, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 616.351237ms ago: executing program 2 (id=2128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}}, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2400}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x3b, 0x0, 0x4, 0x0, 0xe, 0x50, 0x1}}}}}]}, 0x44}}, 0x44040) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x82c}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40894) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf250400000020000a"], 0xc0}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x1de, 0x4) bind$packet(r3, &(0x7f0000000080)={0x11, 0x5, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x8, 0x0}, 0x8) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="09ac0f00"]}]}, 0x1c}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x1, 0x0, 0x3, 0xa, 0x8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x6f14bb4ae0ffc3f, 0xe2029fb9aaacc114, 0xa, 0x8, 0x2, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0xa, 0x7, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x44, '\x00', r4, @fallback=0x11, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r0, 0x3, &(0x7f00000002c0)=[r11], &(0x7f0000000300)=[{0x0, 0x5, 0x2, 0x4}, {0x1, 0x4, 0xc, 0x9}, {0x1, 0x5, 0xd, 0x1}], 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 591.377422ms ago: executing program 1 (id=2129): r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, 0x0, 0x0) 471.934407ms ago: executing program 1 (id=2130): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x6a}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in6=@private0}}]}, 0x154}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x8912, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @null, @bpq0, 0x3, [@default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x6, 0x2, 0x2, 0x1, 0x0, [@local]}}}, @tclass={{0x14}}], 0x40}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ttl\x00'}, @NFTA_MATCH_INFO={0x6, 0x3, "7acc"}, @NFTA_MATCH_REV={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) 425.47205ms ago: executing program 4 (id=2131): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1", 0x1c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8fed6c03af0f73260400000000fbffff6d0aefc7256e7cf8cb79070099f5f37513e44896a737af102e78a574eb33dbcb9625d28928a37c1039299039c421b82ac5d4f152ba54d4aa1a26d35ddfdc7b9cd3358c1a1f25951b8a543e05bd8dc1a39b40f3866a25c9e299255d2d258f251f690890a1ac118a7fee"], 0xfffffefc) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f00000004c0)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x1000, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}}, 0x20040054) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x2}}, 0x7, 0x7, 0xf9, 0x2, 0x6, 0x7ff, 0xfc}, &(0x7f0000000480)=0x9c) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x20000000, 0x10000000, 0x0, 0xfffffffd}, 0x1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 348.015616ms ago: executing program 3 (id=2132): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8=r3], 0x7c}}, 0x4008040) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 0s ago: executing program 1 (id=2133): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40008893) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x4) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r3], 0x24}}, 0x0) socket$kcm(0x2, 0x1, 0x84) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427", 0x9}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010013bd70100400000005000000080009000200000008000c00a80a0000060001000700000008000b"], 0x34}}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r10, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): allmulticast mode [ 151.577998][ T7262] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.587136][ T7262] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.596200][ T7262] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.605501][ T7262] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.688974][ T7264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.699376][ T7264] bridge0: port 3(team0) entered blocking state [ 151.705887][ T7264] bridge0: port 3(team0) entered forwarding state [ 151.713695][ T7264] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.728672][ T7264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.754090][ T2909] bridge0: port 3(team0) entered disabled state [ 151.930087][ T7279] raw_sendmsg: syz.4.290 forgot to set AF_INET. Fix it! [ 152.118812][ T7289] mac80211_hwsim hwsim7 : renamed from wlan1 [ 152.121451][ T7284] xt_nfacct: accounting object `sy' does not exists [ 152.171360][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.292'. [ 152.368066][ T7292] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 152.382894][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 152.398819][ T7292] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 152.407634][ T7292] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 152.995747][ T46] hid-generic 0005:0458:0059.0001: item fetching failed at offset 0/1 [ 153.005326][ T46] hid-generic 0005:0458:0059.0001: probe with driver hid-generic failed with error -22 [ 153.067467][ T7326] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.788172][ T29] audit: type=1107 audit(1737131094.480:2): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/u%ſ;/yLke2koUh.*d)Q$þ*m~a&g"$f_Af{ Z/CkSD' [ 155.429078][ T7358] netlink: 'syz.2.309': attribute type 10 has an invalid length. [ 155.437093][ T7358] netlink: 2 bytes leftover after parsing attributes in process `syz.2.309'. [ 155.785631][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.313'. [ 155.835800][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 156.282679][ T7377] netlink: 68 bytes leftover after parsing attributes in process `syz.1.316'. [ 156.471351][ T7384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.318'. [ 156.652699][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 156.926769][ T7404] ip6tnl1: entered promiscuous mode [ 156.960384][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 157.165434][ T7409] virt_wifi0 speed is unknown, defaulting to 1000 [ 158.154773][ T7431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.327'. [ 158.200258][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 158.437679][ T7441] lo speed is unknown, defaulting to 1000 [ 158.484690][ T7441] lo speed is unknown, defaulting to 1000 [ 158.511708][ T7441] lo speed is unknown, defaulting to 1000 [ 158.576478][ T7441] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 158.646040][ T7441] lo speed is unknown, defaulting to 1000 [ 158.655584][ T7441] lo speed is unknown, defaulting to 1000 [ 158.669528][ T7441] lo speed is unknown, defaulting to 1000 [ 159.019131][ T7441] lo speed is unknown, defaulting to 1000 [ 159.037717][ T7441] lo speed is unknown, defaulting to 1000 [ 159.058310][ T7441] lo speed is unknown, defaulting to 1000 [ 159.410465][ T7472] syzkaller1: entered promiscuous mode [ 159.439144][ T7472] syzkaller1: entered allmulticast mode [ 159.504982][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.338'. [ 159.755644][ T7486] netlink: 'syz.1.339': attribute type 12 has an invalid length. [ 159.789804][ T7486] netlink: 'syz.1.339': attribute type 29 has an invalid length. [ 160.364699][ T7492] virt_wifi0 speed is unknown, defaulting to 1000 [ 160.654981][ T7499] bridge0: port 3(ip6gretap0) entered blocking state [ 160.661967][ T7499] bridge0: port 3(ip6gretap0) entered forwarding state [ 160.663493][ T7507] __nla_validate_parse: 7 callbacks suppressed [ 160.663520][ T7507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.344'. [ 160.711968][ T7499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.743886][ T7499] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.776409][ T7499] batman_adv: batadv0: Interface activated: dummy0 [ 160.799006][ T7499] batadv0: mtu less than device minimum [ 160.825381][ T7499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.838539][ T7499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.851275][ T7499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.863962][ T7499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.876649][ T7499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.889351][ T7499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.902001][ T7499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.914904][ T7499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.927589][ T7499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.469289][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.347'. [ 161.687720][ T7530] netlink: 68 bytes leftover after parsing attributes in process `syz.3.349'. [ 161.830400][ T7537] sctp: [Deprecated]: syz.0.350 (pid 7537) Use of int in max_burst socket option. [ 161.830400][ T7537] Use struct sctp_assoc_value instead [ 161.924376][ T7533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.350'. [ 162.057486][ T7546] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 162.079101][ T7492] lo speed is unknown, defaulting to 1000 [ 162.093476][ T7546] netlink: 224 bytes leftover after parsing attributes in process `syz.1.351'. [ 162.186039][ T7541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.351'. [ 162.215737][ T7496] netlink: 'syz.4.341': attribute type 10 has an invalid length. [ 162.229860][ T7541] nbd: must specify at least one socket [ 162.294311][ T7496] syz_tun: entered promiscuous mode [ 162.328232][ T7496] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 162.390442][ T7553] team0: Device gtp0 is of different type [ 162.712716][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 163.013544][ T7575] xt_l2tp: unknown flags: 10 [ 163.784705][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'. [ 164.033926][ T7604] bond0: (slave syz_tun): Releasing backup interface [ 164.093960][ T7610] netlink: 68 bytes leftover after parsing attributes in process `syz.3.362'. [ 164.188135][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 165.362386][ T7629] netlink: 'syz.1.364': attribute type 39 has an invalid length. [ 165.875086][ T7632] netlink: 68 bytes leftover after parsing attributes in process `syz.3.368'. [ 166.135438][ T7636] xt_hashlimit: size too large, truncated to 1048576 [ 166.260057][ T7641] : renamed from bond0 (while UP) [ 166.662180][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 166.665179][ T7650] pimreg3: entered allmulticast mode [ 166.804154][ T7652] : renamed from ipvlan1 [ 167.334215][ T7659] virt_wifi0 speed is unknown, defaulting to 1000 [ 168.267172][ T7671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.376'. [ 168.741859][ T7667] virt_wifi0 speed is unknown, defaulting to 1000 [ 169.108897][ T7659] lo speed is unknown, defaulting to 1000 [ 169.178212][ T7693] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.379'. [ 169.302744][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 169.334557][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 169.351152][ T7695] macvlan1: left allmulticast mode [ 169.367770][ T7695] macvlan1: left promiscuous mode [ 169.376562][ T7695] bridge0: port 4(macvlan1) entered disabled state [ 169.389469][ T7695] team0: left allmulticast mode [ 169.400625][ T7695] team_slave_0: left allmulticast mode [ 169.420013][ T7695] team_slave_1: left allmulticast mode [ 169.436750][ T7695] team0: left promiscuous mode [ 169.446794][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'. [ 169.461680][ T7695] team_slave_0: left promiscuous mode [ 169.479109][ T7695] team_slave_1: left promiscuous mode [ 169.494554][ T7695] bridge0: port 3(team0) entered disabled state [ 169.515232][ T7695] bridge_slave_1: left allmulticast mode [ 169.522785][ T7695] bridge_slave_1: left promiscuous mode [ 169.548316][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.571905][ T7695] bridge_slave_0: left allmulticast mode [ 169.577599][ T7695] bridge_slave_0: left promiscuous mode [ 169.588924][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.725785][ T7667] lo speed is unknown, defaulting to 1000 [ 169.733192][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 169.741415][ T7668] siw: device registration error -23 [ 170.641652][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.385'. [ 171.171266][ T7733] macsec0: entered promiscuous mode [ 171.203560][ T7738] siw: device registration error -23 [ 171.306961][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'. [ 171.554114][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'. [ 171.612065][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 171.770251][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 172.036485][ T7777] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 172.108240][ T7744] delete_channel: no stack [ 172.578415][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 172.905278][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 172.930167][ T7793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.406'. [ 173.332616][ T7804] virt_wifi0 speed is unknown, defaulting to 1000 [ 173.468254][ T7810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.410'. [ 173.480975][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 174.167054][ T7804] lo speed is unknown, defaulting to 1000 [ 174.835943][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 176.916824][ T7849] batman_adv: batadv0: Adding interface: dummy0 [ 176.923939][ T7849] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.949683][ T7849] batman_adv: batadv0: Interface activated: dummy0 [ 176.967708][ T7849] net_ratelimit: 11 callbacks suppressed [ 176.967731][ T7849] batadv0: mtu less than device minimum [ 176.981505][ T7849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.994186][ T7849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.006912][ T7849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.019788][ T7849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.032493][ T7849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.045307][ T7849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.058597][ T7849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.071337][ T7849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.083682][ T7849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.146636][ T7855] sock: sock_timestamping_bind_phc: sock not bind to device [ 177.159282][ T7857] siw: device registration error -23 [ 177.237102][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 177.384820][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.421'. [ 177.422269][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'. [ 177.439208][ T7874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 177.452987][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 177.600504][ T7867] virt_wifi0 speed is unknown, defaulting to 1000 [ 177.886903][ T7891] netlink: 56 bytes leftover after parsing attributes in process `syz.4.425'. [ 177.942241][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.423'. [ 178.498643][ T7887] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.857202][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 178.889081][ T7915] virt_wifi0 speed is unknown, defaulting to 1000 [ 179.278779][ T7867] lo speed is unknown, defaulting to 1000 [ 179.895896][ T7887] lo speed is unknown, defaulting to 1000 [ 180.155923][ T7949] netlink: 'syz.1.430': attribute type 10 has an invalid length. [ 180.187742][ T7949] netlink: 'syz.1.430': attribute type 4 has an invalid length. [ 180.190269][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 180.197287][ T7949] netlink: 72 bytes leftover after parsing attributes in process `syz.1.430'. [ 181.808796][ T7915] lo speed is unknown, defaulting to 1000 [ 182.376489][ T7961] delete_channel: no stack [ 182.569819][ T7978] netlink: 'syz.2.436': attribute type 4 has an invalid length. [ 182.618418][ T7978] netlink: 17 bytes leftover after parsing attributes in process `syz.2.436'. [ 182.746035][ T7986] netlink: 56 bytes leftover after parsing attributes in process `syz.4.437'. [ 182.790807][ T7983] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.867262][ T7978] ipt_rpfilter: unknown options [ 184.083660][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 184.463422][ T7983] lo speed is unknown, defaulting to 1000 [ 184.798642][ T8056] siw: device registration error -23 [ 184.808740][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 185.111509][ T8060] virt_wifi0 speed is unknown, defaulting to 1000 [ 185.137778][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 185.341941][ T5845] Bluetooth: hci4: link tx timeout [ 185.349729][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.440731][ T8071] xt_NFQUEUE: number of total queues is 0 [ 185.450608][ T8031] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 186.307802][ T8060] lo speed is unknown, defaulting to 1000 [ 186.647505][ T5842] Bluetooth: hci4: link tx timeout [ 186.653496][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.380821][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 188.528429][ T8120] netlink: 44 bytes leftover after parsing attributes in process `syz.3.453'. [ 188.548791][ T7997] net_ratelimit: 10 callbacks suppressed [ 188.548814][ T7997] Set syz1 is full, maxelem 65536 reached [ 188.621590][ T8124] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 188.863799][ T8137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.455'. [ 188.889021][ T8125] team0: left allmulticast mode [ 188.896550][ T8125] team_slave_0: left allmulticast mode [ 188.911920][ T8125] team_slave_1: left allmulticast mode [ 188.917685][ T8125] team0: left promiscuous mode [ 188.925309][ T8125] team_slave_0: left promiscuous mode [ 188.935034][ T8125] team_slave_1: left promiscuous mode [ 188.944058][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 189.039069][ T8132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.048532][ T8132] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.061722][ T8132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.177318][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 189.371691][ T8150] ip6t_REJECT: ECHOREPLY is not supported [ 189.409208][ T8150] bridge0: port 4(gretap0) entered blocking state [ 189.430306][ T8150] bridge0: port 4(gretap0) entered disabled state [ 189.437079][ T8150] gretap0: entered allmulticast mode [ 189.460069][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 189.468144][ T8150] gretap0: entered promiscuous mode [ 189.484912][ T8150] bridge0: port 4(gretap0) entered blocking state [ 189.491610][ T8150] bridge0: port 4(gretap0) entered forwarding state [ 189.521022][ T8153] netlink: 132 bytes leftover after parsing attributes in process `syz.2.460'. [ 189.551203][ T8158] gretap0: left allmulticast mode [ 189.556733][ T8158] gretap0: left promiscuous mode [ 189.562342][ T8158] bridge0: port 4(gretap0) entered disabled state [ 189.574622][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.464'. [ 189.829033][ T8170] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 189.860879][ T8170] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 190.051769][ T8172] ebt_among: dst integrity fail: 101 [ 190.190095][ T8176] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 190.490891][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 191.127221][ T8195] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 191.137906][ T8195] netlink: 224 bytes leftover after parsing attributes in process `syz.1.472'. [ 191.998766][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.476'. [ 192.166414][ T8218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.182149][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 192.290114][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.479'. [ 192.853434][ T8230] siw: device registration error -23 [ 193.782203][ T8246] netlink: 'syz.1.488': attribute type 10 has an invalid length. [ 193.795085][ T8246] __nla_validate_parse: 4 callbacks suppressed [ 193.795106][ T8246] netlink: 2 bytes leftover after parsing attributes in process `syz.1.488'. [ 193.814604][ T8246] team0: entered promiscuous mode [ 193.821511][ T8250] netlink: 44 bytes leftover after parsing attributes in process `syz.2.486'. [ 193.830939][ T8246] team_slave_0: entered promiscuous mode [ 193.838281][ T8246] team_slave_1: entered promiscuous mode [ 194.816497][ T8253] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.827001][ T8253] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.841079][ T8253] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.861088][ T8253] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.955876][ T8259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.967504][ T8259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.987713][ T8262] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 195.098865][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 195.204809][ T8283] siw: device registration error -23 [ 195.242050][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 195.664278][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 196.122766][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 196.480950][ T8320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.716942][ T8323] team0: left promiscuous mode [ 196.766482][ T8323] team_slave_0: left promiscuous mode [ 196.795894][ T8323] team_slave_1: left promiscuous mode [ 196.852218][ T8323] batman_adv: batadv0: Interface deactivated: dummy0 [ 196.910892][ T8323] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 196.939038][ T8] lo speed is unknown, defaulting to 1000 [ 196.946029][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'. [ 197.197070][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 197.571750][ T8343] netlink: 36 bytes leftover after parsing attributes in process `syz.0.511'. [ 197.649935][ T8345] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 198.144280][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'. [ 198.176979][ T8357] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 198.929009][ T8368] netlink: 68 bytes leftover after parsing attributes in process `syz.2.518'. [ 199.744618][ T8379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.519'. [ 199.895847][ T8384] netlink: 'syz.1.521': attribute type 10 has an invalid length. [ 199.920160][ T8384] netlink: 'syz.1.521': attribute type 4 has an invalid length. [ 199.947747][ T8384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.521'. [ 200.022283][ T8369] delete_channel: no stack [ 200.580394][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 201.253656][ T8417] netlink: 68 bytes leftover after parsing attributes in process `syz.1.524'. [ 201.281120][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 201.327116][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 201.370790][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 201.515799][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 201.592636][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 201.703292][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 201.709387][ T5145] Bluetooth: hci3: command 0x0406 tx timeout [ 201.717799][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 202.131037][ T8449] netlink: 'syz.1.528': attribute type 4 has an invalid length. [ 202.188130][ T8449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.528'. [ 202.268887][ T8454] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 202.600015][ T8465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.637502][ T8465] netlink: 'syz.1.529': attribute type 10 has an invalid length. [ 202.816539][ T8475] IPVS: Error connecting to the multicast addr [ 204.268496][ T8317] Set syz1 is full, maxelem 65536 reached [ 204.350861][ T8501] __nla_validate_parse: 2 callbacks suppressed [ 204.350883][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 204.460338][ T8501] netlink: 'syz.2.532': attribute type 10 has an invalid length. [ 204.468257][ T8501] netlink: 'syz.2.532': attribute type 4 has an invalid length. [ 204.476122][ T8501] netlink: 72 bytes leftover after parsing attributes in process `syz.2.532'. [ 204.608692][ T8509] netlink: 'syz.4.534': attribute type 8 has an invalid length. [ 204.804295][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 204.911908][ T8506] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.963984][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 205.118256][ T8508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.533'. [ 205.437699][ T5835] block nbd1: Receive control failed (result -107) [ 205.611003][ T8508] nbd1: detected capacity change from 0 to 256 [ 205.706961][ T5840] block nbd1: Dead connection, failed to find a fallback [ 205.746677][ T5840] block nbd1: shutting down sockets [ 205.777396][ T5840] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.785621][ T8546] netem: incorrect gi model size [ 205.816913][ T8546] netem: change failed [ 205.835201][ T5840] Buffer I/O error on dev nbd1, logical block 0, async page read [ 205.881586][ T5840] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.919915][ T5840] Buffer I/O error on dev nbd1, logical block 0, async page read [ 205.927873][ T5840] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.962182][ T5840] Buffer I/O error on dev nbd1, logical block 0, async page read [ 205.970451][ T5840] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.979965][ T5840] Buffer I/O error on dev nbd1, logical block 0, async page read [ 205.987921][ T5840] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.997068][ T5840] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.005089][ T5840] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.014511][ T5840] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.022769][ T5840] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.032010][ T5840] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.040297][ T5840] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.049471][ T5840] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.058508][ T5840] ldm_validate_partition_table(): Disk read failed. [ 206.065579][ T5840] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.075155][ T5840] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.083292][ T5840] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.092545][ T5840] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.101430][ T5840] Dev nbd1: unable to read RDB block 0 [ 206.107452][ T5840] nbd1: unable to read partition table [ 206.151100][ T5840] ldm_validate_partition_table(): Disk read failed. [ 206.158197][ T5840] Dev nbd1: unable to read RDB block 0 [ 206.164902][ T5840] nbd1: unable to read partition table [ 206.392041][ T8555] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 206.597181][ T8506] lo speed is unknown, defaulting to 1000 [ 206.644928][ T8560] erspan1: entered promiscuous mode [ 206.671068][ T8560] erspan1: entered allmulticast mode [ 206.960390][ T8572] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 207.059859][ T8572] netlink: 224 bytes leftover after parsing attributes in process `syz.2.541'. [ 208.040429][ T8560] netlink: 'syz.0.540': attribute type 21 has an invalid length. [ 208.069959][ T8560] netlink: 'syz.0.540': attribute type 6 has an invalid length. [ 208.096644][ T8560] netlink: 64 bytes leftover after parsing attributes in process `syz.0.540'. [ 208.659824][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 208.739117][ T8610] netlink: 96 bytes leftover after parsing attributes in process `syz.3.547'. [ 208.811160][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 209.313804][ T8615] delete_channel: no stack [ 210.007725][ T8626] pimreg: entered allmulticast mode [ 210.199902][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 210.490149][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 210.738077][ T8638] netlink: 'syz.0.555': attribute type 12 has an invalid length. [ 211.799325][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 212.340083][ T8661] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 212.358109][ T8661] netlink: 224 bytes leftover after parsing attributes in process `syz.0.562'. [ 212.586167][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 212.803024][ T8670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.564'. [ 212.909680][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 213.490831][ T8677] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.050195][ T8681] netlink: 'syz.0.566': attribute type 12 has an invalid length. [ 214.612965][ T8691] tipc: Started in network mode [ 214.629735][ T8691] tipc: Node identity 4625bdfee938, cluster identity 4711 [ 214.648295][ T8691] tipc: Enabled bearer , priority 0 [ 214.674779][ T8691] tipc: Disabling bearer [ 214.775372][ T8677] lo speed is unknown, defaulting to 1000 [ 215.087183][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 215.192541][ T8703] netlink: 88 bytes leftover after parsing attributes in process `syz.1.573'. [ 215.224372][ T8703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 215.242403][ T8703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 215.544864][ T8712] netlink: 68 bytes leftover after parsing attributes in process `syz.0.576'. [ 215.558631][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 217.243601][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 217.246922][ T8744] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.443774][ T8751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.580'. [ 217.875406][ T8757] pimreg: entered allmulticast mode [ 218.318569][ T8744] lo speed is unknown, defaulting to 1000 [ 218.376979][ T8770] netlink: 68 bytes leftover after parsing attributes in process `syz.3.587'. [ 218.663663][ T8778] netlink: 'syz.0.588': attribute type 1 has an invalid length. [ 218.681872][ T8778] netlink: 224 bytes leftover after parsing attributes in process `syz.0.588'. [ 218.964498][ T8759] delete_channel: no stack [ 219.145089][ T8788] siw: device registration error -23 [ 219.180903][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 219.512554][ T8792] pim6reg: entered allmulticast mode [ 219.579076][ T8792] pim6reg: left allmulticast mode [ 219.922339][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.597'. [ 220.135513][ T8809] syzkaller0: create flow: hash 2068554017 index 1 [ 220.206120][ T3457] syzkaller0: tun_net_xmit 76 [ 220.212302][ T3457] syzkaller0: tun_net_xmit 48 [ 220.219941][ T46] syzkaller0: tun_net_xmit 76 [ 220.230162][ T8811] __nla_validate_parse: 1 callbacks suppressed [ 220.230180][ T8811] netlink: 68 bytes leftover after parsing attributes in process `syz.0.599'. [ 220.340667][ T46] syzkaller0: tun_net_xmit 76 [ 220.413524][ T8815] xt_l2tp: unknown flags: 10 [ 220.520936][ T8722] Set syz1 is full, maxelem 65536 reached [ 220.526901][ T8809] Set syz1 is full, maxelem 65536 reached [ 220.570588][ T8818] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 220.603280][ T8818] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 220.612199][ T8818] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 220.730684][ T46] syzkaller0: tun_net_xmit 76 [ 220.746880][ T8807] syzkaller0: delete flow: hash 2068554017 index 1 [ 221.422219][ T8838] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 221.538292][ T8842] netlink: 'syz.4.606': attribute type 10 has an invalid length. [ 221.572939][ T8842] netlink: 2 bytes leftover after parsing attributes in process `syz.4.606'. [ 223.627211][ T8842] team0: entered promiscuous mode [ 223.646768][ T8842] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.670794][ T8842] : port 1(team0) entered blocking state [ 223.687085][ T8842] : port 1(team0) entered disabled state [ 223.713708][ T8842] team0: entered allmulticast mode [ 224.326360][ T8856] bridge0: port 3(ip6gretap0) entered disabled state [ 224.332433][ T8881] netlink: 68 bytes leftover after parsing attributes in process `syz.4.611'. [ 224.345343][ T8856] batman_adv: batadv0: Interface deactivated: dummy0 [ 224.363484][ T8856] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 224.642979][ T8887] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 224.654265][ T8887] netlink: 'syz.4.613': attribute type 4 has an invalid length. [ 224.662798][ T8887] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.613'. [ 224.772933][ T8894] bridge1: entered promiscuous mode [ 224.778306][ T8894] bridge1: entered allmulticast mode [ 224.790032][ T8894] team0: Port device bridge1 added [ 224.861621][ T8894] netlink: 'syz.3.616': attribute type 10 has an invalid length. [ 224.901192][ T8894] bridge0: port 3(ip6gretap0) entered blocking state [ 224.908088][ T8894] bridge0: port 3(ip6gretap0) entered disabled state [ 224.925656][ T8894] ip6gretap0: entered allmulticast mode [ 224.935842][ T8894] ip6gretap0: entered promiscuous mode [ 224.947194][ T8894] bridge0: port 3(ip6gretap0) entered blocking state [ 224.954101][ T8894] bridge0: port 3(ip6gretap0) entered forwarding state [ 225.043825][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 226.015555][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'. [ 226.114693][ T8919] syzkaller0: entered promiscuous mode [ 226.121419][ T8925] netlink: 68 bytes leftover after parsing attributes in process `syz.3.623'. [ 226.134102][ T8919] syzkaller0: entered allmulticast mode [ 228.736024][ T8938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.872878][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 228.881985][ T8955] C: renamed from team_slave_0 [ 228.892335][ T8955] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 228.934410][ T8955] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 229.015908][ T8965] xt_l2tp: v2 tid > 0xffff: 150994944 [ 229.201571][ T8974] Cannot find del_set index 2416 as target [ 229.227791][ T8976] virt_wifi0 speed is unknown, defaulting to 1000 [ 229.311295][ T8973] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 229.558589][ T8984] pimreg: entered allmulticast mode [ 229.574726][ T8984] hsr0: left allmulticast mode [ 229.584143][ T8984] hsr_slave_0: left allmulticast mode [ 229.591929][ T8984] hsr_slave_1: left allmulticast mode [ 229.597963][ T8984] pimreg: left allmulticast mode [ 229.939256][ T8976] lo speed is unknown, defaulting to 1000 [ 230.172784][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.637'. [ 230.185822][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 230.265561][ T8996] bridge2: entered promiscuous mode [ 230.293728][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 230.339786][ T8996] bridge2: entered allmulticast mode [ 230.397752][ T9001] netlink: 'syz.2.638': attribute type 10 has an invalid length. [ 230.494922][ T8998] netlink: 'syz.3.641': attribute type 1 has an invalid length. [ 230.503016][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 230.509043][ T8998] netlink: 224 bytes leftover after parsing attributes in process `syz.3.641'. [ 230.534096][ T9001] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 230.577999][ T8992] bridge0: port 1(ip6gretap0) entered blocking state [ 230.616514][ T8992] bridge0: port 1(ip6gretap0) entered disabled state [ 230.700571][ T8992] ip6gretap0: entered allmulticast mode [ 230.744760][ T8992] ip6gretap0: entered promiscuous mode [ 231.188595][ T9024] virt_wifi0 speed is unknown, defaulting to 1000 [ 231.228520][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 231.256919][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 231.275014][ T9027] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 231.314643][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.646'. [ 231.393089][ T5835] block nbd2: Receive control failed (result -107) [ 231.460285][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 231.827322][ T9042] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 231.849457][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 231.937754][ T9048] syzkaller1: entered promiscuous mode [ 231.961544][ T9048] syzkaller1: entered allmulticast mode [ 232.479247][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 232.606296][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 232.689873][ T9047] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.707462][ T9076] netlink: 68 bytes leftover after parsing attributes in process `syz.1.655'. [ 232.734968][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 233.087003][ T9024] lo speed is unknown, defaulting to 1000 [ 233.122931][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 233.391600][ T9083] batman_adv: batadv0: Removing interface: vlan1 [ 233.748512][ T9098] dvmrp5: entered allmulticast mode [ 233.863650][ T9097] dvmrp5: left allmulticast mode [ 233.953437][ T9047] lo speed is unknown, defaulting to 1000 [ 234.052720][ T9090] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 234.154066][ T9102] virt_wifi0 speed is unknown, defaulting to 1000 [ 234.594755][ T9119] netlink: 'syz.4.661': attribute type 10 has an invalid length. [ 236.145954][ T9102] lo speed is unknown, defaulting to 1000 [ 236.459348][ T9135] virt_wifi0 speed is unknown, defaulting to 1000 [ 236.530909][ T9138] netlink: 'syz.3.664': attribute type 12 has an invalid length. [ 236.649409][ T9145] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 237.700123][ T9158] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 237.934289][ T9162] __nla_validate_parse: 5 callbacks suppressed [ 237.934313][ T9162] netlink: 168 bytes leftover after parsing attributes in process `syz.4.666'. [ 238.009411][ T9162] netlink: 440 bytes leftover after parsing attributes in process `syz.4.666'. [ 238.261845][ T9172] netlink: 68 bytes leftover after parsing attributes in process `syz.2.668'. [ 238.610635][ T9135] lo speed is unknown, defaulting to 1000 [ 239.144870][ T9198] ip6gretap0: entered promiscuous mode [ 239.164876][ T9198] batadv_slave_0: entered promiscuous mode [ 239.652615][ T9217] netlink: 'syz.3.674': attribute type 10 has an invalid length. [ 239.706047][ T9217] netlink: 2 bytes leftover after parsing attributes in process `syz.3.674'. [ 239.746361][ T9217] team0: entered promiscuous mode [ 239.771163][ T9217] team_slave_0: entered promiscuous mode [ 239.806313][ T9217] team_slave_1: entered promiscuous mode [ 239.879215][ T9217] bond0: (slave team0): Releasing backup interface [ 240.049341][ T9217] bridge0: port 4(team0) entered blocking state [ 240.126467][ T9217] bridge0: port 4(team0) entered disabled state [ 240.260310][ T9217] team0: entered allmulticast mode [ 240.265512][ T9217] team_slave_0: entered allmulticast mode [ 240.378986][ T9217] team_slave_1: entered allmulticast mode [ 240.500215][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 241.255317][ T9238] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 241.299815][ T9238] netlink: 2 bytes leftover after parsing attributes in process `syz.0.676'. [ 241.329751][ T9238] team0: entered promiscuous mode [ 241.338681][ T9238] team_slave_0: entered promiscuous mode [ 241.393924][ T9238] team_slave_1: entered promiscuous mode [ 241.424729][ T9238] bridge1: entered promiscuous mode [ 241.456576][ T9238] batadv0: entered promiscuous mode [ 241.501169][ T9238] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.530232][ T9246] netlink: 'syz.2.678': attribute type 10 has an invalid length. [ 241.549064][ T9238] bridge0: port 4(team0) entered blocking state [ 241.586578][ T9238] bridge0: port 4(team0) entered disabled state [ 241.590398][ T9253] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 241.637119][ T9238] team0: entered allmulticast mode [ 241.679197][ T9238] team_slave_0: entered allmulticast mode [ 241.701665][ T9257] netlink: 'syz.2.678': attribute type 4 has an invalid length. [ 241.709378][ T9257] netlink: 152 bytes leftover after parsing attributes in process `syz.2.678'. [ 241.718749][ T9238] team_slave_1: entered allmulticast mode [ 241.724640][ T9238] bridge1: entered allmulticast mode [ 241.742837][ T9238] batadv0: entered allmulticast mode [ 241.774144][ T9257] wlan1: mtu less than device minimum [ 241.790525][ T9257] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 242.143506][ T1087] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 242.153362][ T1087] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 242.240814][ T9271] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 242.250716][ T9271] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 242.259312][ T9271] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 242.306243][ T9273] Cannot find add_set index 32768 as target [ 242.391098][ T9188] Set syz1 is full, maxelem 65536 reached [ 242.551069][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 242.726121][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.686'. [ 243.120604][ T9298] netlink: 'syz.1.688': attribute type 12 has an invalid length. [ 243.648899][ T9312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.691'. [ 243.716388][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 243.835996][ T9333] netlink: zone id is out of range [ 243.841649][ T9333] netlink: zone id is out of range [ 243.883539][ T9333] netlink: zone id is out of range [ 243.900416][ T9333] netlink: zone id is out of range [ 243.940005][ T9333] netlink: zone id is out of range [ 243.945196][ T9333] netlink: zone id is out of range [ 244.030544][ T9333] netlink: zone id is out of range [ 244.361686][ T9350] vlan2: left promiscuous mode [ 244.366709][ T9350] vlan2: left allmulticast mode [ 244.481125][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 244.528640][ T9334] bond0: (slave netdevsim0): Releasing backup interface [ 244.574988][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 244.588320][ T9347] team0: left allmulticast mode [ 244.595434][ T9347] team_slave_0: left allmulticast mode [ 244.609753][ T9347] team_slave_1: left allmulticast mode [ 244.619403][ T9347] bridge0: port 4(team0) entered disabled state [ 244.636618][ T9347] ip6gretap0: left allmulticast mode [ 244.643338][ T9347] ip6gretap0: left promiscuous mode [ 244.648926][ T9347] bridge0: port 3(ip6gretap0) entered disabled state [ 244.669478][ T9347] bridge_slave_1: left allmulticast mode [ 244.688715][ T9347] bridge_slave_1: left promiscuous mode [ 244.707562][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.724231][ T9347] bridge_slave_0: left allmulticast mode [ 244.737860][ T9368] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.701'. [ 244.739983][ T9347] bridge_slave_0: left promiscuous mode [ 244.768407][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.438512][ T9423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.712'. [ 246.485440][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 246.898825][ T9431] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 246.931885][ T9431] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 246.979932][ T9440] netlink: 'syz.2.715': attribute type 1 has an invalid length. [ 247.298488][ T9450] team0: No ports can be present during mode change [ 247.309930][ T9450] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 247.784414][ T9454] netlink: 132 bytes leftover after parsing attributes in process `syz.1.721'. [ 247.873608][ T9462] netlink: 'syz.1.721': attribute type 32 has an invalid length. [ 247.911668][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 247.983655][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.724'. [ 248.109223][ T9469] syz_tun: left promiscuous mode [ 248.141699][ T9469] : left promiscuous mode [ 248.146634][ T9469] : left allmulticast mode [ 248.197636][ T9469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.229304][ T9469] net_ratelimit: 307 callbacks suppressed [ 248.229317][ T9469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.399996][ T9508] syzkaller0: entered promiscuous mode [ 249.413706][ T9508] syzkaller0: entered allmulticast mode [ 250.134407][ T9527] __nla_validate_parse: 4 callbacks suppressed [ 250.134432][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.739'. [ 250.194502][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 250.242727][ T9532] netlink: 48 bytes leftover after parsing attributes in process `syz.1.737'. [ 251.903726][ T9540] netlink: 'syz.2.741': attribute type 12 has an invalid length. [ 252.104583][ T9556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.745'. [ 252.117799][ T9557] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 252.187156][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.745'. [ 252.218036][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.745'. [ 252.321842][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.745'. [ 252.343518][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.745'. [ 252.447992][ T9569] netlink: 18 bytes leftover after parsing attributes in process `syz.4.745'. [ 252.474479][ T9569] netlink: 36 bytes leftover after parsing attributes in process `syz.4.745'. [ 253.215666][ T9604] rdma_rxe: rxe_newlink: failed to add lo [ 254.194066][ T9632] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 254.236372][ T9632] netlink: 'syz.3.761': attribute type 4 has an invalid length. [ 254.277830][ T9628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.295556][ T9628] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.313767][ T9628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.380723][ T9646] netlink: 'syz.1.757': attribute type 4 has an invalid length. [ 254.432295][ T9646] ip6t_srh: unknown srh invflags 4000 [ 255.364352][ T9671] bridge0: port 3(ip6gretap0) entered blocking state [ 255.371374][ T9671] bridge0: port 3(ip6gretap0) entered forwarding state [ 255.395418][ T9671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.438676][ T9671] batman_adv: batadv0: Interface activated: dummy0 [ 255.451308][ T9671] batadv0: mtu less than device minimum [ 255.522716][ T9671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.535551][ T9671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.548317][ T9671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.561275][ T9671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.574077][ T9671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.586846][ T9671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.599469][ T9671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.612264][ T9671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.703724][ T9682] __nla_validate_parse: 7 callbacks suppressed [ 255.703748][ T9682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.775'. [ 255.765014][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 255.938948][ T9672] rdma_rxe: rxe_newlink: failed to add lo [ 256.201195][ T9693] syz_tun: entered allmulticast mode [ 256.307221][ T9699] netlink: 'syz.4.779': attribute type 10 has an invalid length. [ 256.322604][ T9699] netlink: 2 bytes leftover after parsing attributes in process `syz.4.779'. [ 256.371244][ T9692] syz_tun: left allmulticast mode [ 256.684400][ T9707] smc: net device bond0 erased user defined pnetid S [ 257.023495][ T9716] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.381646][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 258.108606][ T9716] lo speed is unknown, defaulting to 1000 [ 258.508536][ T9771] netlink: 68 bytes leftover after parsing attributes in process `syz.1.795'. [ 259.014041][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 259.147516][ T9788] bridge0: port 3(ip6gretap0) entered disabled state [ 259.161371][ T9797] siw: device registration error -23 [ 259.187011][ T9788] batman_adv: batadv0: Interface deactivated: dummy0 [ 259.224836][ T9788] erspan1: left promiscuous mode [ 259.240013][ T9788] erspan1: left allmulticast mode [ 259.321068][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 259.339475][ T9793] delete_channel: no stack [ 259.600453][ T9809] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.804'. [ 259.785464][ T9814] netlink: 68 bytes leftover after parsing attributes in process `syz.2.806'. [ 260.046404][ T9821] netlink: 'syz.1.807': attribute type 10 has an invalid length. [ 260.076116][ T9821] netlink: 'syz.1.807': attribute type 4 has an invalid length. [ 260.099643][ T9821] netlink: 72 bytes leftover after parsing attributes in process `syz.1.807'. [ 260.356876][ T9830] rdma_rxe: rxe_newlink: failed to add lo [ 260.822553][ T9839] netlink: 'syz.1.814': attribute type 1 has an invalid length. [ 260.904302][ T9842] __nla_validate_parse: 4 callbacks suppressed [ 260.904326][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 261.007414][ T9842] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 261.042788][ T9842] bond0: (slave batadv2): Enslaving as a backup interface with an up link [ 261.475443][ T9849] siw: device registration error -23 [ 261.523194][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 262.123703][ T9843] delete_channel: no stack [ 262.337298][ T9865] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 262.362069][ T9865] netlink: 2 bytes leftover after parsing attributes in process `syz.2.823'. [ 262.874661][ T9882] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 263.311963][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 263.889232][ T9907] netlink: 'syz.1.833': attribute type 1 has an invalid length. [ 263.936538][ T9907] netlink: 'syz.1.833': attribute type 4 has an invalid length. [ 263.955540][ T9907] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.833'. [ 264.284355][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 264.549021][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'. [ 265.426722][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 265.500739][ T9979] siw: device registration error -23 [ 265.581918][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 265.711877][ T9990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.859'. [ 266.189311][T10017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.368874][T10027] __nla_validate_parse: 2 callbacks suppressed [ 266.368898][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 266.387903][T10027] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 266.395891][T10027] netlink: 132 bytes leftover after parsing attributes in process `syz.0.872'. [ 266.793607][T10041] netlink: 'syz.4.874': attribute type 2 has an invalid length. [ 266.814536][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.874'. [ 268.161178][T10111] netlink: 'syz.4.895': attribute type 7 has an invalid length. [ 268.195328][T10115] netlink: 'syz.1.897': attribute type 10 has an invalid length. [ 268.219838][T10115] netlink: 132 bytes leftover after parsing attributes in process `syz.1.897'. [ 268.624771][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 268.689388][T10130] netlink: 'syz.3.901': attribute type 7 has an invalid length. [ 268.961976][T10137] virt_wifi0 speed is unknown, defaulting to 1000 [ 269.530410][T10165] netlink: 'syz.0.913': attribute type 3 has an invalid length. [ 269.750356][T10172] netlink: 68 bytes leftover after parsing attributes in process `syz.1.916'. [ 270.274890][T10195] virt_wifi0 speed is unknown, defaulting to 1000 [ 270.488565][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 270.555233][T10137] lo speed is unknown, defaulting to 1000 [ 271.142953][T10145] virt_wifi0 speed is unknown, defaulting to 1000 [ 271.523260][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 271.891866][T10195] lo speed is unknown, defaulting to 1000 [ 271.911003][T10245] netlink: 68 bytes leftover after parsing attributes in process `syz.3.932'. [ 272.558808][T10268] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 272.588017][T10268] net_ratelimit: 12 callbacks suppressed [ 272.588038][T10268] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 272.808317][T10276] netlink: 'syz.1.940': attribute type 16 has an invalid length. [ 272.836591][T10276] netlink: 'syz.1.940': attribute type 17 has an invalid length. [ 272.862415][T10276] netlink: 3 bytes leftover after parsing attributes in process `syz.1.940'. [ 272.905854][T10266] virt_wifi0 speed is unknown, defaulting to 1000 [ 272.968405][T10145] lo speed is unknown, defaulting to 1000 [ 273.121416][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'. [ 273.717119][T10295] netlink: 'syz.3.944': attribute type 10 has an invalid length. [ 273.769740][T10295] netlink: 2 bytes leftover after parsing attributes in process `syz.3.944'. [ 273.792052][T10295] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.435219][T10266] lo speed is unknown, defaulting to 1000 [ 274.449911][T10302] siw: device registration error -23 [ 275.089168][T10329] netlink: 56 bytes leftover after parsing attributes in process `syz.1.946'. [ 276.066657][T10361] netlink: 56 bytes leftover after parsing attributes in process `syz.2.954'. [ 276.117217][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 276.262430][T10369] netlink: 68 bytes leftover after parsing attributes in process `syz.1.956'. [ 276.331636][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 276.359759][T10372] netlink: 'syz.2.957': attribute type 3 has an invalid length. [ 276.544623][T10382] netlink: 'syz.0.958': attribute type 10 has an invalid length. [ 276.585087][T10382] netlink: 2 bytes leftover after parsing attributes in process `syz.0.958'. [ 276.613310][T10382] bridge0: entered promiscuous mode [ 276.843817][T10392] netlink: 'syz.0.961': attribute type 10 has an invalid length. [ 276.910756][T10392] netlink: 2 bytes leftover after parsing attributes in process `syz.0.961'. [ 276.977063][T10392] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.623453][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 278.332028][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 278.733258][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 278.764692][T10443] delete_channel: no stack [ 279.240421][T10487] virt_wifi0 speed is unknown, defaulting to 1000 [ 279.343464][T10508] netlink: 'syz.4.985': attribute type 10 has an invalid length. [ 279.394171][T10508] netlink: 'syz.4.985': attribute type 4 has an invalid length. [ 279.471284][T10508] netlink: 72 bytes leftover after parsing attributes in process `syz.4.985'. [ 279.572596][T10513] netlink: 72 bytes leftover after parsing attributes in process `syz.0.990'. [ 279.605544][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 280.091229][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 280.408469][T10487] lo speed is unknown, defaulting to 1000 [ 281.090554][T10578] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1005'. [ 281.808791][T10607] virt_wifi0 speed is unknown, defaulting to 1000 [ 282.613538][T10639] __nla_validate_parse: 1 callbacks suppressed [ 282.613569][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 282.699974][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 282.709334][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'. [ 283.146087][T10607] lo speed is unknown, defaulting to 1000 [ 283.364597][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 283.365266][T10681] netlink: 'syz.4.1027': attribute type 10 has an invalid length. [ 283.389936][T10681] netlink: 'syz.4.1027': attribute type 4 has an invalid length. [ 283.397738][T10681] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1027'. [ 284.276926][T10720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1037'. [ 284.528283][T10724] tipc: Started in network mode [ 284.534015][T10724] tipc: Node identity , cluster identity 4711 [ 284.853136][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 285.308151][T10775] virt_wifi0 speed is unknown, defaulting to 1000 [ 285.405620][T10778] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 285.908376][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 285.951681][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1056'. [ 286.818694][T10775] lo speed is unknown, defaulting to 1000 [ 286.966058][T10845] siw: device registration error -23 [ 287.006881][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 287.018789][T10848] netlink: 'syz.4.1067': attribute type 10 has an invalid length. [ 287.062298][T10848] netlink: 'syz.4.1067': attribute type 4 has an invalid length. [ 287.311215][T10856] siw: device registration error -23 [ 287.800090][T10880] __nla_validate_parse: 2 callbacks suppressed [ 287.800111][T10880] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1078'. [ 288.213979][T10887] siw: device registration error -23 [ 288.217239][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 288.232357][T10888] netlink: 'syz.0.1081': attribute type 10 has an invalid length. [ 288.244983][T10888] netlink: 'syz.0.1081': attribute type 4 has an invalid length. [ 288.258307][T10888] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1081'. [ 288.274001][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 288.480904][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 288.927686][T10918] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 289.033652][T10924] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1088'. [ 289.457886][T10944] siw: device registration error -23 [ 289.512286][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 289.541966][T10947] netlink: 'syz.0.1096': attribute type 12 has an invalid length. [ 289.814829][T10959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1095'. [ 289.938392][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 289.983877][T10967] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1100'. [ 290.916432][T11010] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 291.109089][T11010] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 291.131285][T11010] bond2: (slave batadv3): Enslaving as a backup interface with an up link [ 291.864605][T11060] syz.3.1125[11060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.864794][T11060] syz.3.1125[11060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.906624][T11060] syz.3.1125[11060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.742775][T11098] netlink: 'syz.2.1133': attribute type 10 has an invalid length. [ 292.785273][T11098] netlink: 'syz.2.1133': attribute type 4 has an invalid length. [ 292.813319][T11098] __nla_validate_parse: 8 callbacks suppressed [ 292.813339][T11098] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1133'. [ 292.842050][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 293.273532][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 293.344370][T11119] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 293.630815][T11133] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 293.667998][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 293.706449][T11133] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 293.741665][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 294.010589][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 294.039841][T11152] sch_fq: defrate 511 ignored. [ 294.056497][T11154] siw: device registration error -23 [ 294.416930][T11124] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 294.449985][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 294.917350][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 295.458104][T11216] netlink: 'syz.0.1162': attribute type 1 has an invalid length. [ 295.497602][T11216] netlink: 'syz.0.1162': attribute type 4 has an invalid length. [ 295.507840][T11222] netlink: 'syz.4.1163': attribute type 10 has an invalid length. [ 295.516311][T11216] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1162'. [ 295.537255][T11222] netlink: 'syz.4.1163': attribute type 4 has an invalid length. [ 295.550302][T11222] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1163'. [ 295.643863][T11230] siw: device registration error -23 [ 296.835232][T11289] batadv0: entered promiscuous mode [ 296.892570][T11287] batadv0: left promiscuous mode [ 297.119704][T11297] netlink: 'syz.1.1178': attribute type 10 has an invalid length. [ 297.149741][T11297] netlink: 'syz.1.1178': attribute type 4 has an invalid length. [ 297.572576][T11321] siw: device registration error -23 [ 297.588045][T11317] tap0: tun_chr_ioctl cmd 2147767506 [ 297.898067][T11336] siw: device registration error -23 [ 297.936082][T11336] __nla_validate_parse: 11 callbacks suppressed [ 297.936106][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'. [ 298.214414][T11353] netlink: 'syz.3.1195': attribute type 10 has an invalid length. [ 298.264492][T11353] netlink: 'syz.3.1195': attribute type 4 has an invalid length. [ 298.301078][T11353] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1195'. [ 298.515533][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 298.560864][T11360] netlink: 'syz.4.1197': attribute type 10 has an invalid length. [ 298.603344][T11360] netlink: 'syz.4.1197': attribute type 4 has an invalid length. [ 298.629375][T11360] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1197'. [ 299.165978][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 299.355817][T11407] netlink: 'syz.1.1205': attribute type 1 has an invalid length. [ 299.375578][T11407] netlink: 'syz.1.1205': attribute type 4 has an invalid length. [ 299.413184][T11407] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.1205'. [ 299.833647][T11437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1211'. [ 299.912558][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 300.026961][T11443] netlink: 'syz.0.1212': attribute type 10 has an invalid length. [ 300.048860][T11443] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1212'. [ 302.329774][T11458] siw: device registration error -23 [ 302.368614][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 303.161096][T11488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1224'. [ 303.282791][T11493] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 303.294261][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 303.394597][T11502] siw: device registration error -23 [ 303.426712][T11505] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 303.450455][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 303.469902][T11505] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1228'. [ 304.104082][T11541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1239'. [ 304.122213][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1239'. [ 304.326406][T11548] siw: device registration error -23 [ 304.366005][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 304.410390][T11544] delete_channel: no stack [ 304.525628][T11554] netlink: 'syz.1.1242': attribute type 1 has an invalid length. [ 304.583039][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 304.597599][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 304.613290][T11554] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 304.621972][T11554] bond3: (slave batadv4): Enslaving as a backup interface with an up link [ 304.903370][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'. [ 305.456911][T11591] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 305.491857][T11591] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 305.987778][T11616] tap0: tun_chr_ioctl cmd 1074025677 [ 305.993524][T11616] tap0: linktype set to 825 [ 307.089711][T11668] netlink: 'syz.0.1280': attribute type 10 has an invalid length. [ 307.115787][T11668] netlink: 'syz.0.1280': attribute type 4 has an invalid length. [ 308.229989][T11718] netlink: 'syz.3.1298': attribute type 12 has an invalid length. [ 308.401874][T11718] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 308.740225][T11738] __nla_validate_parse: 3 callbacks suppressed [ 308.740247][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 308.848226][T11743] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 309.013987][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 309.094170][T11743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.128609][T11743] bond4: (slave batadv0): Enslaving as a backup interface with an up link [ 309.919650][T11774] virt_wifi0 speed is unknown, defaulting to 1000 [ 310.164743][T11785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.681090][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 311.170830][T11774] lo speed is unknown, defaulting to 1000 [ 312.457751][T11841] netlink: 'syz.2.1324': attribute type 10 has an invalid length. [ 312.509945][T11841] netlink: 'syz.2.1324': attribute type 4 has an invalid length. [ 312.594956][T11841] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1324'. [ 312.684430][T11849] netlink: 'syz.0.1325': attribute type 1 has an invalid length. [ 312.769567][T11849] netlink: 'syz.0.1325': attribute type 4 has an invalid length. [ 312.796324][T11849] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1325'. [ 316.389910][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 316.553352][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 316.590825][T11879] netlink: 'syz.2.1333': attribute type 10 has an invalid length. [ 316.626404][T11879] netlink: 'syz.2.1333': attribute type 4 has an invalid length. [ 316.640127][T11879] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1333'. [ 317.325345][T11911] netlink: 'syz.3.1338': attribute type 1 has an invalid length. [ 317.390591][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 317.412589][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 317.517107][T11910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.569779][T11910] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 318.555619][T11968] netlink: 'syz.4.1351': attribute type 10 has an invalid length. [ 318.599889][T11968] netlink: 'syz.4.1351': attribute type 4 has an invalid length. [ 318.652527][T11968] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1351'. [ 321.264825][T11989] netlink: 'syz.3.1358': attribute type 1 has an invalid length. [ 321.367212][T11989] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1358'. [ 321.520818][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 321.617332][T11989] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 321.628804][T11989] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 322.310783][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 322.989895][T12079] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 323.110614][T12085] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1377'. [ 323.164852][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 323.212999][T12088] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 323.232806][T12079] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 323.257296][T12096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1383'. [ 323.270058][T12079] bond3: (slave batadv2): Enslaving as a backup interface with an up link [ 323.334932][T12099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1383'. [ 323.358177][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 323.758567][T12118] netlink: 'syz.4.1387': attribute type 10 has an invalid length. [ 323.787316][T12118] netlink: 'syz.4.1387': attribute type 4 has an invalid length. [ 323.836093][T12118] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1387'. [ 324.783913][T12169] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1398'. [ 324.812005][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 326.312794][T12230] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.800813][T12210] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 327.568652][T12256] __nla_validate_parse: 2 callbacks suppressed [ 327.568673][T12256] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1415'. [ 327.665125][T12230] lo speed is unknown, defaulting to 1000 [ 328.116300][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 330.051184][T12301] delete_channel: no stack [ 330.296461][T12329] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1431'. [ 330.350072][T12201] Set syz1 is full, maxelem 65536 reached [ 331.027740][T12360] netlink: 'syz.0.1440': attribute type 10 has an invalid length. [ 331.068676][T12360] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1440'. [ 331.095211][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 331.222375][T12375] netlink: 'syz.1.1444': attribute type 1 has an invalid length. [ 331.326594][T12379] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1444'. [ 331.357265][T12381] team0: left allmulticast mode [ 331.363280][T12381] : port 1(team0) entered disabled state [ 331.429034][T12383] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 331.471167][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 331.471733][T12383] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 331.534541][T12375] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 331.562282][T12375] bond4: (slave batadv5): Enslaving as a backup interface with an up link [ 332.763551][T12435] syzkaller1: entered promiscuous mode [ 332.779842][T12435] syzkaller1: entered allmulticast mode [ 334.094643][T12472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1466'. [ 334.144940][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 334.147775][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1467'. [ 334.195935][T12475] netlink: 'syz.2.1467': attribute type 10 has an invalid length. [ 334.234845][T12475] netlink: 'syz.2.1467': attribute type 4 has an invalid length. [ 334.261684][T12475] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1467'. [ 334.495056][T12486] netlink: 'syz.3.1470': attribute type 1 has an invalid length. [ 334.518872][T12491] netlink: 'syz.4.1471': attribute type 1 has an invalid length. [ 334.527718][T12491] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 334.536282][T12491] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1471'. [ 334.582802][T12486] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1470'. [ 334.659785][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 334.693764][T12500] siw: device registration error -23 [ 334.738927][T12496] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 334.765794][T12496] bond3: (slave batadv2): Enslaving as a backup interface with an up link [ 334.794315][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'. [ 334.964956][T12508] netlink: 'syz.4.1473': attribute type 12 has an invalid length. [ 335.225671][T12522] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 335.888270][T12511] delete_channel: no stack [ 336.044211][T12556] netlink: 'syz.0.1483': attribute type 1 has an invalid length. [ 336.056982][T12557] netlink: 'syz.4.1482': attribute type 10 has an invalid length. [ 336.088849][T12557] netlink: 'syz.4.1482': attribute type 4 has an invalid length. [ 336.099854][T12556] netlink: 'syz.0.1483': attribute type 4 has an invalid length. [ 336.138851][T12557] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1482'. [ 336.148947][T12556] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1483'. [ 336.175503][T12563] siw: device registration error -23 [ 337.128655][T12597] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 337.136627][T12597] netlink: 'syz.3.1492': attribute type 4 has an invalid length. [ 337.587619][T12614] siw: device registration error -23 [ 337.649207][T12572] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 337.767204][T12620] bond4: entered promiscuous mode [ 337.772686][T12620] bond4: entered allmulticast mode [ 337.778905][T12620] 8021q: adding VLAN 0 to HW filter on device bond4 [ 338.234027][T12640] netlink: 'syz.2.1502': attribute type 10 has an invalid length. [ 338.244162][T12640] netlink: 'syz.2.1502': attribute type 4 has an invalid length. [ 338.245918][T12620] bond4 (unregistering): Released all slaves [ 338.671086][T12655] netlink: 'syz.0.1505': attribute type 10 has an invalid length. [ 338.678982][T12655] netlink: 'syz.0.1505': attribute type 4 has an invalid length. [ 339.052665][T12671] trusted_key: syz.2.1510 sent an empty control message without MSG_MORE. [ 342.703316][T12734] siw: device registration error -23 [ 342.736379][T12734] __nla_validate_parse: 12 callbacks suppressed [ 342.736403][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 343.114272][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1527'. [ 344.000519][T12795] netlink: 'syz.0.1533': attribute type 10 has an invalid length. [ 344.054045][T12795] netlink: 'syz.0.1533': attribute type 4 has an invalid length. [ 344.067401][T12796] netlink: 'syz.4.1534': attribute type 1 has an invalid length. [ 344.091467][T12795] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1533'. [ 344.116173][T12796] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 344.182521][T12801] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1535'. [ 344.207472][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 344.221141][T12798] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1535'. [ 344.574092][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1538'. [ 345.430812][T12843] netlink: 'syz.3.1549': attribute type 10 has an invalid length. [ 345.459721][T12843] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1549'. [ 345.597314][T12849] dccp_v6_rcv: dropped packet with invalid checksum [ 346.144467][T12873] siw: device registration error -23 [ 346.166470][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'. [ 347.920182][T12913] netlink: 'syz.0.1567': attribute type 12 has an invalid length. [ 348.064983][T12924] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 348.204622][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1569'. [ 348.225245][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1569'. [ 348.321624][T12937] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 348.582346][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'. [ 351.444676][T12969] tipc: Enabled bearer , priority 10 [ 351.695404][T12983] netlink: 'syz.4.1582': attribute type 10 has an invalid length. [ 351.729752][T12983] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1582'. [ 351.738901][T12983] : port 1(team0) entered blocking state [ 351.816643][T12983] : port 1(team0) entered disabled state [ 351.847174][T12983] team0: entered allmulticast mode [ 352.572033][ T3636] tipc: Node number set to 2937961982 [ 352.870140][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 353.091107][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 353.221740][T13042] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1596'. [ 353.259853][T13042] netlink: 'syz.4.1596': attribute type 10 has an invalid length. [ 353.300319][T13042] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 353.846654][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 354.337728][T13085] netlink: 'syz.4.1604': attribute type 10 has an invalid length. [ 354.346256][T13085] netlink: 'syz.4.1604': attribute type 4 has an invalid length. [ 354.356055][T13085] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1604'. [ 354.443456][T13089] netlink: 'syz.2.1606': attribute type 12 has an invalid length. [ 354.607255][T13097] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 354.890654][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1610'. [ 354.929448][T13109] netlink: 'syz.0.1607': attribute type 12 has an invalid length. [ 354.937285][ T5838] hid-generic 0005:0C45:1010.0002: item fetching failed at offset 0/1 [ 354.970632][ T5838] hid-generic 0005:0C45:1010.0002: probe with driver hid-generic failed with error -22 [ 355.224097][T13121] syzkaller1: entered promiscuous mode [ 355.259907][T13121] syzkaller1: entered allmulticast mode [ 357.434592][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 359.843727][T13233] virt_wifi0 speed is unknown, defaulting to 1000 [ 361.334824][T13233] lo speed is unknown, defaulting to 1000 [ 363.256294][T13276] netlink: 'syz.2.1641': attribute type 7 has an invalid length. [ 363.264299][T13276] netlink: 'syz.2.1641': attribute type 3 has an invalid length. [ 363.272233][T13276] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1641'. [ 363.301045][ T3636] IPVS: starting estimator thread 0... [ 363.410495][T13279] IPVS: using max 21 ests per chain, 50400 per kthread [ 363.459383][T13276] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.499577][ T5885] IPVS: starting estimator thread 0... [ 363.599789][T13282] IPVS: using max 21 ests per chain, 50400 per kthread [ 363.602972][T13292] veth1_to_team: entered allmulticast mode [ 363.890746][T13291] veth1_to_team: left allmulticast mode [ 363.939593][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.961673][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'. [ 363.986896][T13303] tipc: Started in network mode [ 364.002003][T13303] tipc: Node identity host1x_cn, cluster identity 8 [ 364.201222][T13314] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1650'. [ 364.238311][T13312] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1650'. [ 364.430383][T13324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1653'. [ 364.482250][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'. [ 364.831323][T13341] tipc: Enabled bearer , priority 0 [ 364.860918][T13341] syzkaller0: entered promiscuous mode [ 364.866447][T13341] syzkaller0: entered allmulticast mode [ 364.889747][T13350] netlink: 'syz.1.1657': attribute type 10 has an invalid length. [ 364.914953][T13341] tipc: Resetting bearer [ 364.921652][T13350] netlink: 'syz.1.1657': attribute type 4 has an invalid length. [ 364.929433][T13350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1657'. [ 364.962723][T13340] tipc: Resetting bearer [ 364.979741][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 365.090678][T13340] tipc: Disabling bearer [ 365.119335][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 365.391450][T13366] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 365.538721][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1665'. [ 365.633502][ T29] audit: type=1107 audit(1737131306.310:3): pid=13368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 366.029636][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 366.734516][T13421] netlink: 'syz.1.1676': attribute type 4 has an invalid length. [ 366.783297][T13421] netlink: 'syz.1.1676': attribute type 4 has an invalid length. [ 367.059683][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 367.330687][T13440] virt_wifi0 speed is unknown, defaulting to 1000 [ 368.099637][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 368.679099][T13492] netlink: 'syz.1.1687': attribute type 12 has an invalid length. [ 368.701216][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1685'. [ 368.878506][T13492] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 368.953320][T13440] lo speed is unknown, defaulting to 1000 [ 369.139618][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 369.173697][T13441] syzkaller1: entered promiscuous mode [ 369.173887][T13507] netlink: 'syz.0.1689': attribute type 4 has an invalid length. [ 369.200087][T13441] syzkaller1: entered allmulticast mode [ 369.266197][T13512] tipc: Enabling of bearer rejected, already enabled [ 370.179715][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 371.219654][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 372.184608][T13610] netlink: 'syz.0.1713': attribute type 4 has an invalid length. [ 372.259735][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 373.299712][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 373.659222][T13667] virt_wifi0 speed is unknown, defaulting to 1000 [ 374.165837][T13677] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 374.339655][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 374.480518][T13667] lo speed is unknown, defaulting to 1000 [ 375.379639][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 375.432074][T13703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1724'. [ 375.518292][T13691] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 375.534297][T13691] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1723'. [ 375.598368][T13690] delete_channel: no stack [ 376.030851][T13715] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1725'. [ 376.073768][T13715] batadv1: entered promiscuous mode [ 376.079042][T13715] batadv1: entered allmulticast mode [ 376.429700][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 377.459664][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 378.022385][T13760] virt_wifi0 speed is unknown, defaulting to 1000 [ 378.180494][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1737'. [ 378.472355][T13769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1738'. [ 378.499619][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 378.567436][T13769] syz_tun: entered promiscuous mode [ 378.615328][T13769] syz_tun: left promiscuous mode [ 378.797487][ T3636] IPVS: starting estimator thread 0... [ 378.920172][T13778] IPVS: using max 20 ests per chain, 48000 per kthread [ 379.240210][T13795] netlink: 'syz.1.1742': attribute type 10 has an invalid length. [ 379.248102][T13795] netlink: 'syz.1.1742': attribute type 4 has an invalid length. [ 379.294969][T13795] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1742'. [ 379.323294][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'. [ 379.456154][T13805] netlink: 'syz.3.1746': attribute type 7 has an invalid length. [ 379.487140][T13801] virt_wifi0 speed is unknown, defaulting to 1000 [ 379.539604][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 379.579069][T13760] lo speed is unknown, defaulting to 1000 [ 380.459695][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 380.510223][T13830] macvtap0: entered promiscuous mode [ 380.518908][T13830] bond0: entered promiscuous mode [ 380.531730][T13830] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 380.551674][T13830] macvtap0: entered allmulticast mode [ 380.557176][T13830] bond0: entered allmulticast mode [ 380.573057][T13830] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 380.589625][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 380.649667][T13830] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 380.722676][T13834] bond0: left allmulticast mode [ 380.731275][T13834] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 380.753860][T13834] bond0: left promiscuous mode [ 380.767989][T13834] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 381.062298][T13801] lo speed is unknown, defaulting to 1000 [ 381.430948][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 381.596076][T13858] vlan4: entered allmulticast mode [ 381.629663][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 381.998410][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1760'. [ 382.015696][T13873] macsec0: entered promiscuous mode [ 382.049914][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1760'. [ 382.079824][T13873] macsec0: entered allmulticast mode [ 382.092200][T13873] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 382.360787][T13889] batadv_slave_1: entered promiscuous mode [ 382.413807][T13889] batadv_slave_1: left promiscuous mode [ 382.659664][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 382.767372][T13902] netlink: 'syz.1.1765': attribute type 1 has an invalid length. [ 382.796035][T13902] netlink: 'syz.1.1765': attribute type 4 has an invalid length. [ 382.823205][T13902] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.1765'. [ 383.022589][T13914] netlink: 'syz.4.1768': attribute type 10 has an invalid length. [ 383.081479][T13914] : port 1(team0) entered disabled state [ 383.097851][T13914] team0: left allmulticast mode [ 383.129253][T13920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1769'. [ 383.130813][T13914] team0: left promiscuous mode [ 383.180377][T13920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1769'. [ 383.191895][T13914] : port 1(team0) entered disabled state [ 383.229442][T13914] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.260763][T13914] bond0: (slave team0): Enslaving as an active interface with an up link [ 383.277275][T13928] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1770'. [ 383.346313][T13920] bond0: entered promiscuous mode [ 383.347239][T13930] netlink: 'syz.2.1770': attribute type 1 has an invalid length. [ 383.361834][T13920] bond_slave_0: entered promiscuous mode [ 383.378992][T13930] netlink: 'syz.2.1770': attribute type 1 has an invalid length. [ 383.380172][T13920] bond_slave_1: entered promiscuous mode [ 383.425202][T13930] netlink: 'syz.2.1770': attribute type 2 has an invalid length. [ 383.434915][T13920] ip6gretap0: entered promiscuous mode [ 383.468839][T13920] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 383.500973][T13920] Cannot create hsr debugfs directory [ 383.520173][T13930] netlink: 'syz.2.1770': attribute type 1 has an invalid length. [ 383.561619][T13930] netlink: 'syz.2.1770': attribute type 2 has an invalid length. [ 383.699608][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 384.311785][T13960] vlan0: entered promiscuous mode [ 384.555196][T13970] netlink: 'syz.4.1779': attribute type 5 has an invalid length. [ 384.739664][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 384.783210][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 384.979355][T13989] netlink: 'syz.3.1782': attribute type 1 has an invalid length. [ 384.997482][T13989] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.1782'. [ 385.535532][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1786'. [ 385.618553][T14007] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1786'. [ 385.779619][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 385.874450][T14024] syzkaller1: entered promiscuous mode [ 385.880428][T14024] syzkaller1: entered allmulticast mode [ 386.263332][T14048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1794'. [ 386.439853][T14048] wg1: entered promiscuous mode [ 386.580638][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 386.839750][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 387.460083][T14025] xt_TCPMSS: Only works on TCP SYN packets [ 387.859638][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 387.995635][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'. [ 388.449940][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'. [ 388.899624][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 389.939652][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 389.955829][T14127] syz.4.1806 (14127) used greatest stack depth: 17848 bytes left [ 390.409037][T14166] validate_nla: 6 callbacks suppressed [ 390.409059][T14166] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 390.531600][T14170] netlink: 'syz.0.1811': attribute type 1 has an invalid length. [ 390.580333][T14175] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1813'. [ 390.606588][T14166] bond3: entered promiscuous mode [ 390.640079][T14166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.738325][T14182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1812'. [ 390.872360][T14018] Set syz1 is full, maxelem 65536 reached [ 390.895352][T14175] batadv0: entered promiscuous mode [ 390.947924][T14175] batadv0: entered allmulticast mode [ 390.955028][T14175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.964931][T14175] bond3: (slave batadv0): making interface the new active one [ 390.974146][T14175] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 390.983042][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 391.392459][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 391.423884][T14208] netlink: 'syz.3.1819': attribute type 10 has an invalid length. [ 391.442517][T14208] netlink: 'syz.3.1819': attribute type 4 has an invalid length. [ 391.480425][T14208] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1819'. [ 392.019605][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 392.143995][T14232] ipip0: entered promiscuous mode [ 392.320658][T14230] virt_wifi0 speed is unknown, defaulting to 1000 [ 392.556713][T14252] netlink: 'syz.4.1827': attribute type 1 has an invalid length. [ 392.930103][T14267] netlink: 'syz.0.1829': attribute type 11 has an invalid length. [ 392.970784][T14267] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1829'. [ 393.059618][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 393.262026][T14283] netlink: 'syz.1.1831': attribute type 10 has an invalid length. [ 393.291790][T14283] netlink: 'syz.1.1831': attribute type 4 has an invalid length. [ 393.340007][T14283] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1831'. [ 393.848279][T14230] lo speed is unknown, defaulting to 1000 [ 393.902709][T14303] delete_channel: no stack [ 394.099602][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 394.205669][T14313] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.233463][T14313] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.303007][T14313] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.352670][T14320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1839'. [ 394.385436][T14313] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.411140][T14313] geneve2: entered promiscuous mode [ 394.429619][T14313] geneve2: entered allmulticast mode [ 394.496799][T14313] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.529624][T14313] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.563788][T14325] netlink: 'syz.0.1840': attribute type 1 has an invalid length. [ 394.568740][T14313] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.581117][T14320] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1839'. [ 394.603139][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1839'. [ 394.629565][T14313] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.139646][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 395.240726][T14339] virt_wifi0 speed is unknown, defaulting to 1000 [ 395.342614][T14347] virt_wifi0 speed is unknown, defaulting to 1000 [ 395.632581][T14353] wg1: entered promiscuous mode [ 396.179618][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 397.060646][T14339] lo speed is unknown, defaulting to 1000 [ 397.070916][T14380] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.1848'. [ 397.219619][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 397.545076][T14347] lo speed is unknown, defaulting to 1000 [ 397.557641][T14393] netlink: 'syz.4.1849': attribute type 1 has an invalid length. [ 397.708014][T14393] 8021q: adding VLAN 0 to HW filter on device bond5 [ 397.908377][T14395] bond5: (slave ip6gretap2): making interface the new active one [ 397.917417][T14395] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 397.927790][T14395] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 397.937373][T14395] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 398.131017][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 398.142836][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1851'. [ 398.249807][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 398.259623][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 398.313037][ T4905] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 398.939844][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 399.299781][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 399.387821][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 399.480167][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 399.759995][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 400.049839][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 400.072122][T14436] netlink: 'syz.3.1853': attribute type 1 has an invalid length. [ 400.122670][T14440] netlink: 'syz.0.1854': attribute type 1 has an invalid length. [ 400.339613][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 400.527878][T14442] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.843557][T14442] bond4: (slave bond5): making interface the new active one [ 400.883491][T14442] bond4: (slave bond5): Enslaving as an active interface with an up link [ 401.379626][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 401.588616][T14480] virt_wifi0 speed is unknown, defaulting to 1000 [ 401.985027][T14494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1861'. [ 402.053396][T14494] netlink: 'syz.3.1861': attribute type 10 has an invalid length. [ 402.086301][T14494] netlink: 'syz.3.1861': attribute type 4 has an invalid length. [ 402.156222][T14494] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1861'. [ 402.419615][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 403.271266][T14533] virt_wifi0 speed is unknown, defaulting to 1000 [ 403.469622][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 403.660816][ T4905] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 403.660871][ T4905] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 403.696358][T14480] lo speed is unknown, defaulting to 1000 [ 403.859652][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 404.494676][T14551] netlink: 'syz.2.1869': attribute type 1 has an invalid length. [ 404.502697][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 404.689169][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 405.420484][ T1087] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 405.539669][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 406.507151][T14533] lo speed is unknown, defaulting to 1000 [ 406.531608][ T3457] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 406.579784][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 407.624828][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 407.872129][ T52] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 408.006305][T14618] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1877'. [ 408.155420][T14629] netlink: 'syz.0.1881': attribute type 1 has an invalid length. [ 408.236079][T14618] bond6: entered promiscuous mode [ 408.275545][T14618] 8021q: adding VLAN 0 to HW filter on device bond6 [ 408.290566][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 408.659913][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 408.979978][ T3457] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 409.530435][T14667] netlink: 'syz.1.1887': attribute type 10 has an invalid length. [ 409.593978][T14667] netlink: 'syz.1.1887': attribute type 4 has an invalid length. [ 409.602139][T14667] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1887'. [ 409.696133][T14672] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 409.709576][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 409.743934][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 409.927126][T14677] openvswitch: netlink: Message has 2 unknown bytes. [ 409.957618][T14677] openvswitch: netlink: Actions may not be safe on all matching packets [ 410.000980][T14679] virt_wifi0 speed is unknown, defaulting to 1000 [ 410.101604][ T1087] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 410.348686][T14691] syzkaller0: entered promiscuous mode [ 410.381906][T14691] syzkaller0: entered allmulticast mode [ 410.387736][T14696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1892'. [ 410.739614][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 410.829422][T14701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1893'. [ 411.102862][T14701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1893'. [ 411.181142][T14701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1893'. [ 411.315378][ T4905] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 411.779730][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 412.508059][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 412.739754][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 412.819538][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 413.316706][T14721] netlink: 'syz.4.1897': attribute type 10 has an invalid length. [ 413.338486][T14723] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 413.351082][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'. [ 413.380827][T14724] netlink: 'syz.4.1897': attribute type 10 has an invalid length. [ 413.388694][T14724] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1897'. [ 413.610017][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 413.862286][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 414.729869][ T4905] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 414.909532][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 415.590165][T14721] bond0: (slave team0): Releasing backup interface [ 415.630570][T14724] team0: entered promiscuous mode [ 415.636490][T14724] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.660089][T14724] : port 1(team0) entered blocking state [ 415.672075][T14724] : port 1(team0) entered disabled state [ 415.687046][T14724] team0: entered allmulticast mode [ 415.722021][T14725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'. [ 415.837514][ T3457] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 415.850934][T14679] lo speed is unknown, defaulting to 1000 [ 415.918570][T14748] netlink: 'syz.1.1900': attribute type 1 has an invalid length. [ 415.919796][T14742] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 415.939902][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 415.947363][T14742] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1898'. [ 416.046044][T14752] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1900'. [ 416.083765][T14752] batadv6: entered promiscuous mode [ 416.089075][T14752] batadv6: entered allmulticast mode [ 416.188301][T14748] bond6: entered promiscuous mode [ 416.195755][T14748] 8021q: adding VLAN 0 to HW filter on device bond6 [ 416.205038][T14757] tun0: tun_chr_ioctl cmd 1074025677 [ 416.211333][T14757] tun0: linktype set to 1 [ 416.801068][T14769] virt_wifi0 speed is unknown, defaulting to 1000 [ 416.879062][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'. [ 416.909022][T14775] netlink: 'syz.2.1904': attribute type 10 has an invalid length. [ 416.917736][T14775] netlink: 'syz.2.1904': attribute type 4 has an invalid length. [ 416.925892][T14775] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1904'. [ 416.980996][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 417.002780][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 417.269353][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 417.322775][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1905'. [ 417.343343][ T29] audit: type=1107 audit(1737131358.040:4): pid=14790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/u%ſ;/yLke2koUh.*d)Q$þ*m~a&g"$f_Af{ Z/CkSD' [ 417.412500][T14792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1907'. [ 417.989809][T14815] sctp: [Deprecated]: syz.1.1911 (pid 14815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.989809][T14815] Use struct sctp_sack_info instead [ 418.019606][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 418.112107][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 419.059652][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 419.268430][T14769] lo speed is unknown, defaulting to 1000 [ 419.361449][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 419.815936][T14852] __nla_validate_parse: 3 callbacks suppressed [ 419.815960][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1915'. [ 420.051171][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1914'. [ 420.099565][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 420.451399][T14864] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1917'. [ 420.493665][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 420.528511][T14864] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 420.548898][T14864] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1917'. [ 421.131667][T14889] batadv_slave_1: entered promiscuous mode [ 421.139587][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 421.148129][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 421.650571][ T1087] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 422.189540][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 422.221844][T14909] siw: device registration error -23 [ 422.330036][T14890] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 422.368175][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1927'. [ 422.637206][T14881] batadv_slave_1: left promiscuous mode [ 422.707315][T14904] virt_wifi0 speed is unknown, defaulting to 1000 [ 422.800567][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 423.176506][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1933'. [ 423.219689][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 423.951008][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 424.014456][T14904] lo speed is unknown, defaulting to 1000 [ 424.088426][T14956] syzkaller1: left promiscuous mode [ 424.100093][T14956] syzkaller1: left allmulticast mode [ 424.259655][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 424.633933][T14970] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 424.672284][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 424.740173][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 424.833010][T14970] batman_adv: batadv0: Adding interface: ip6gretap1 [ 424.859852][T14970] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.976193][T14970] batman_adv: batadv0: Interface activated: ip6gretap1 [ 425.099725][ T52] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 425.198865][T14988] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 425.299530][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 425.664337][T15003] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1946'. [ 426.210440][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 426.339624][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 426.401088][T15029] xt_TCPMSS: Only works on TCP SYN packets [ 426.531813][T14997] delete_channel: no stack [ 426.851704][T15035] virt_wifi0 speed is unknown, defaulting to 1000 [ 427.359984][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 427.379631][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 428.419538][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 428.476708][ T3457] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 428.878761][T15061] batman_adv: batadv0: Adding interface: dummy0 [ 428.921431][T15068] netlink: 'syz.2.1957': attribute type 1 has an invalid length. [ 428.968423][T15061] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.008721][T15061] batman_adv: batadv0: Interface activated: dummy0 [ 429.029667][T15068] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1957'. [ 429.216259][T15071] virt_wifi0 speed is unknown, defaulting to 1000 [ 429.379877][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 429.459602][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 429.492301][T15078] virt_wifi0 speed is unknown, defaulting to 1000 [ 429.588821][T15035] lo speed is unknown, defaulting to 1000 [ 429.700045][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 430.248099][T15092] netlink: 'syz.2.1961': attribute type 10 has an invalid length. [ 430.273286][T15092] macvlan0: entered allmulticast mode [ 430.289982][T15092] veth1_vlan: entered allmulticast mode [ 430.322001][T15092] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 430.499669][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 430.933205][T15098] sch_tbf: burst 0 is lower than device lo mtu (39798) ! [ 430.965028][ T1087] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 431.230659][T15070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1958'. [ 431.464412][T15070] 8021q: adding VLAN 0 to HW filter on device  [ 431.545252][T15070] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.552095][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 431.647839][T15070] batman_adv: batadv0: Interface activated: dummy0 [ 431.688199][T15070] batadv0: mtu less than device minimum [ 431.711318][T15070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 431.724062][T15070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 431.736730][T15070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 431.749409][T15070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 431.762159][T15070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 431.774828][T15070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 431.787559][T15070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 431.800354][T15070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 431.929080][ T46] lo speed is unknown, defaulting to 1000 [ 432.070879][T15071] lo speed is unknown, defaulting to 1000 [ 432.253021][T15078] lo speed is unknown, defaulting to 1000 [ 432.300342][ T1087] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 432.352607][T15119] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 432.487683][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1965'. [ 432.491593][T15119] 8021q: adding VLAN 0 to HW filter on device bond7 [ 432.610905][T15122] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 432.622943][T15122] bond7: (slave batadv1): making interface the new active one [ 432.665922][T15122] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 432.699411][T15125] vlan0: entered promiscuous mode [ 432.706623][T15125] bond7: entered promiscuous mode [ 432.712296][T15125] batadv1: entered promiscuous mode [ 432.720122][T15125] bond7: left promiscuous mode [ 432.724944][T15125] batadv1: left promiscuous mode [ 433.420180][ T3457] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 433.457414][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 434.244393][T15166] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1975'. [ 434.448870][T15175] siw: device registration error -23 [ 434.491523][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 434.561567][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 434.714416][T15185] netlink: 'syz.3.1981': attribute type 1 has an invalid length. [ 434.794028][T15185] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 434.805294][T15185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1981'. [ 434.845445][T15190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1982'. [ 434.931011][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1982'. [ 435.375573][T15214] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 435.398635][T15216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.439846][T15216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.479728][T15216] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.491731][T15216] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.654519][T15227] sctp: [Deprecated]: syz.0.1994 (pid 15227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.654519][T15227] Use struct sctp_sack_info instead [ 435.679590][ T3457] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 435.849021][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1999'. [ 435.947509][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'. [ 436.001645][T15231] veth0_to_team: entered promiscuous mode [ 436.007626][T15231] veth0_to_team: entered allmulticast mode [ 436.739595][ C1] net_ratelimit: 17 callbacks suppressed [ 436.739618][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 436.779684][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 437.137154][T15293] virt_wifi0 speed is unknown, defaulting to 1000 [ 437.211755][T15280] __nla_validate_parse: 2 callbacks suppressed [ 437.211779][T15280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2011'. [ 437.789637][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 437.902138][T15305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2017'. [ 437.973533][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 437.993387][T15283] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 438.537236][T15306] xt_limit: Overflow, try lower: 262144/524288 [ 438.819709][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 439.059650][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 439.130725][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 439.862685][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 440.232560][ T4905] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 440.905370][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 441.354101][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 441.670671][T15329] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 441.724986][T15332] virt_wifi0 speed is unknown, defaulting to 1000 [ 441.939531][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 441.981924][T15349] delete_channel: no stack [ 442.077897][T15293] lo speed is unknown, defaulting to 1000 [ 442.481203][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 442.629070][T15332] lo speed is unknown, defaulting to 1000 [ 442.979529][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 443.035487][T15378] bond0: entered allmulticast mode [ 443.040937][T15378] dummy0: entered allmulticast mode [ 443.542575][T15395] veth0_to_team: entered promiscuous mode [ 443.548442][T15395] veth0_to_team: entered allmulticast mode [ 443.590611][T15395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2041'. [ 443.690377][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 443.767660][T15402] netlink: 'syz.3.2044': attribute type 10 has an invalid length. [ 443.775755][T15402] netlink: 'syz.3.2044': attribute type 4 has an invalid length. [ 443.783941][T15402] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2044'. [ 444.019642][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 444.367162][T15422] veth0_to_team: entered promiscuous mode [ 444.373570][T15422] veth0_to_team: entered allmulticast mode [ 444.390878][T15403] delete_channel: no stack [ 444.400619][T15422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2048'. [ 444.491328][T15434] IPv6: Can't replace route, no match found [ 444.544434][T15435] netlink: 'syz.1.2049': attribute type 10 has an invalid length. [ 444.620731][T15435] netlink: 'syz.1.2049': attribute type 4 has an invalid length. [ 444.628565][T15435] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2049'. [ 444.850843][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 445.059541][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 445.413516][T15466] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2059'. [ 445.887931][T15480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2064'. [ 445.939341][T15456] delete_channel: no stack [ 445.970904][ T3457] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 446.099592][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 446.250073][T15489] netlink: 996 bytes leftover after parsing attributes in process `syz.3.2068'. [ 446.818020][T15507] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2073'. [ 447.109637][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 447.140032][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 447.149545][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 447.180078][T15522] lo: entered allmulticast mode [ 447.579343][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2082'. [ 447.787131][T15544] netlink: 'syz.2.2084': attribute type 10 has an invalid length. [ 447.795683][T15544] netlink: 'syz.2.2084': attribute type 4 has an invalid length. [ 447.804263][T15544] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2084'. [ 447.971083][T15547] netlink: 'syz.0.2085': attribute type 1 has an invalid length. [ 448.025953][T15547] bond8: entered promiscuous mode [ 448.051523][T15547] 8021q: adding VLAN 0 to HW filter on device bond8 [ 448.082435][T15551] batadv3: entered promiscuous mode [ 448.088546][T15551] batadv3: entered allmulticast mode [ 448.095964][T15551] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 448.105224][T15551] bond8: (slave batadv3): making interface the new active one [ 448.114357][T15551] bond8: (slave batadv3): Enslaving as an active interface with an up link [ 448.189576][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 448.216858][T15553] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 448.240023][ T3457] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 448.470170][T15557] netlink: 'syz.3.2088': attribute type 10 has an invalid length. [ 448.496923][T15557] netlink: 'syz.3.2088': attribute type 4 has an invalid length. [ 448.853225][T15572] __nla_validate_parse: 2 callbacks suppressed [ 448.853247][T15572] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2094'. [ 448.940101][T15572] netlink: 'syz.2.2094': attribute type 1 has an invalid length. [ 448.979014][T15572] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2094'. [ 449.004542][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2098'. [ 449.086688][ T2909] bond0: (slave bond_slave_0): interface is now down [ 449.095214][ T2909] bond0: (slave bond_slave_1): interface is now down [ 449.111151][ T2909] bond0: now running without any active interface! [ 449.219730][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 449.315051][T15588] gtp0: entered promiscuous mode [ 449.329844][T15588] gtp0: entered allmulticast mode [ 449.345168][T15592] netlink: 'syz.1.2102': attribute type 1 has an invalid length. [ 449.349778][ T3457] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 449.353413][T15592] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2102'. [ 449.451870][T15592] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 449.560682][ T5842] Bluetooth: hci4: link tx timeout [ 449.566080][ T5842] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 449.574806][ T5842] Bluetooth: hci4: link tx timeout [ 449.580474][ T5842] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 449.709067][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 449.872089][T15614] netlink: 'syz.4.2108': attribute type 10 has an invalid length. [ 449.890620][T15614] netlink: 'syz.4.2108': attribute type 4 has an invalid length. [ 449.900414][T15614] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2108'. [ 450.259659][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 450.281247][T15627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2120'. [ 450.291604][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2111'. [ 450.461800][ T4905] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 451.299618][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 451.538202][T15671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2119'. [ 451.596189][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2119'. [ 451.611341][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 451.632041][T15673] netlink: 'syz.0.2121': attribute type 10 has an invalid length. [ 451.651796][T15673] netlink: 'syz.0.2121': attribute type 4 has an invalid length. [ 451.668292][T15673] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2121'. [ 451.788624][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 452.339545][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 452.731293][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 453.001741][T14796] ------------[ cut here ]------------ [ 453.007576][T14796] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 453.007733][T14796] WARNING: CPU: 1 PID: 14796 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 [ 453.023370][T14796] Modules linked in: [ 453.027334][T14796] CPU: 1 UID: 0 PID: 14796 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 453.038532][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 453.048909][T14796] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 453.054546][T14796] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d 6f 40 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 dc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 453.074501][T14796] RSP: 0018:ffffc9000d04f920 EFLAGS: 00010246 [ 453.080808][T14796] RAX: 1b5c8d749743bd00 RBX: ffff88804b61acb0 RCX: ffff888034b49e00 [ 453.089075][T14796] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 453.097325][T14796] RBP: ffffc9000d04fab0 R08: ffffffff81602ac2 R09: 1ffff110170e519a [ 453.105497][T14796] R10: dffffc0000000000 R11: ffffed10170e519b R12: 0000000000000000 [ 453.113786][T14796] R13: 0000000000000000 R14: 1ffff92001a09f38 R15: dffffc0000000000 [ 453.122137][T14796] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 453.131354][T14796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.138013][T14796] CR2: 0000001b3021aff8 CR3: 00000000317ea000 CR4: 00000000003526f0 [ 453.149779][T14796] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 453.157823][T14796] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 453.166232][T14796] Call Trace: [ 453.169818][T14796] [ 453.172795][T14796] ? __warn+0x165/0x4d0 [ 453.176994][T14796] ? __mutex_lock+0xdac/0xee0 [ 453.181938][T14796] ? report_bug+0x2b3/0x500 [ 453.186491][T14796] ? __mutex_lock+0xdac/0xee0 [ 453.191471][T14796] ? handle_bug+0x60/0x90 [ 453.196098][T14796] ? exc_invalid_op+0x1a/0x50 [ 453.201089][T14796] ? asm_exc_invalid_op+0x1a/0x20 [ 453.206174][T14796] ? __warn_printk+0x292/0x360 [ 453.211252][T14796] ? __mutex_lock+0xdac/0xee0 [ 453.215991][T14796] ? free_netdev+0x2d9/0x610 [ 453.220895][T14796] ? __pfx___mutex_lock+0x10/0x10 [ 453.225973][T14796] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 453.231520][T14796] ? dev_addr_check+0x6f/0x240 [ 453.236334][T14796] ? dev_addr_flush+0x192/0x210 [ 453.241547][T14796] free_netdev+0x2d9/0x610 [ 453.246024][T14796] netdev_run_todo+0xf21/0x10d0 [ 453.251307][T14796] ? __pfx_netdev_run_todo+0x10/0x10 [ 453.256654][T14796] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 453.263215][T14796] ? down_write+0x18c/0x220 [ 453.267783][T14796] ? __pfx_down_write+0x10/0x10 [ 453.272949][T14796] bnep_session+0x2e3c/0x3030 [ 453.277686][T14796] ? __pfx_bnep_session+0x10/0x10 [ 453.283002][T14796] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 453.289381][T14796] ? __pfx_woken_wake_function+0x10/0x10 [ 453.295350][T14796] ? __kthread_parkme+0x169/0x1d0 [ 453.300531][T14796] ? __pfx_bnep_session+0x10/0x10 [ 453.305590][T14796] kthread+0x2f0/0x390 [ 453.309945][T14796] ? __pfx_bnep_session+0x10/0x10 [ 453.315014][T14796] ? __pfx_kthread+0x10/0x10 [ 453.319700][T14796] ret_from_fork+0x4b/0x80 [ 453.324163][T14796] ? __pfx_kthread+0x10/0x10 [ 453.328797][T14796] ret_from_fork_asm+0x1a/0x30 [ 453.333651][T14796] [ 453.336719][T14796] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 453.344046][T14796] CPU: 1 UID: 0 PID: 14796 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 453.355039][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 453.365144][T14796] Call Trace: [ 453.368456][T14796] [ 453.371430][T14796] dump_stack_lvl+0x241/0x360 [ 453.376163][T14796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.381426][T14796] ? __pfx__printk+0x10/0x10 [ 453.386062][T14796] ? _printk+0xd5/0x120 [ 453.390274][T14796] ? __init_begin+0x41000/0x41000 [ 453.395352][T14796] ? vscnprintf+0x5d/0x90 [ 453.399723][T14796] panic+0x349/0x880 [ 453.403667][T14796] ? __warn+0x174/0x4d0 [ 453.407873][T14796] ? __pfx_panic+0x10/0x10 [ 453.412344][T14796] ? ret_from_fork_asm+0x1a/0x30 [ 453.417328][T14796] __warn+0x344/0x4d0 [ 453.421366][T14796] ? __mutex_lock+0xdac/0xee0 [ 453.426099][T14796] report_bug+0x2b3/0x500 [ 453.430475][T14796] ? __mutex_lock+0xdac/0xee0 [ 453.435204][T14796] handle_bug+0x60/0x90 [ 453.439415][T14796] exc_invalid_op+0x1a/0x50 [ 453.443958][T14796] asm_exc_invalid_op+0x1a/0x20 [ 453.448825][T14796] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 453.454410][T14796] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d 6f 40 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 dc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 453.474030][T14796] RSP: 0018:ffffc9000d04f920 EFLAGS: 00010246 [ 453.480140][T14796] RAX: 1b5c8d749743bd00 RBX: ffff88804b61acb0 RCX: ffff888034b49e00 [ 453.488120][T14796] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 453.496097][T14796] RBP: ffffc9000d04fab0 R08: ffffffff81602ac2 R09: 1ffff110170e519a [ 453.504079][T14796] R10: dffffc0000000000 R11: ffffed10170e519b R12: 0000000000000000 [ 453.512060][T14796] R13: 0000000000000000 R14: 1ffff92001a09f38 R15: dffffc0000000000 [ 453.520077][T14796] ? __warn_printk+0x292/0x360 [ 453.524865][T14796] ? free_netdev+0x2d9/0x610 [ 453.529481][T14796] ? __pfx___mutex_lock+0x10/0x10 [ 453.534521][T14796] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 453.539828][T14796] ? dev_addr_check+0x6f/0x240 [ 453.544690][T14796] ? dev_addr_flush+0x192/0x210 [ 453.549640][T14796] free_netdev+0x2d9/0x610 [ 453.554088][T14796] netdev_run_todo+0xf21/0x10d0 [ 453.558956][T14796] ? __pfx_netdev_run_todo+0x10/0x10 [ 453.564275][T14796] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 453.570526][T14796] ? down_write+0x18c/0x220 [ 453.575042][T14796] ? __pfx_down_write+0x10/0x10 [ 453.579922][T14796] bnep_session+0x2e3c/0x3030 [ 453.584628][T14796] ? __pfx_bnep_session+0x10/0x10 [ 453.589663][T14796] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 453.596001][T14796] ? __pfx_woken_wake_function+0x10/0x10 [ 453.601650][T14796] ? __kthread_parkme+0x169/0x1d0 [ 453.606680][T14796] ? __pfx_bnep_session+0x10/0x10 [ 453.611709][T14796] kthread+0x2f0/0x390 [ 453.615786][T14796] ? __pfx_bnep_session+0x10/0x10 [ 453.620825][T14796] ? __pfx_kthread+0x10/0x10 [ 453.625426][T14796] ret_from_fork+0x4b/0x80 [ 453.629861][T14796] ? __pfx_kthread+0x10/0x10 [ 453.634504][T14796] ret_from_fork_asm+0x1a/0x30 [ 453.639279][T14796] [ 453.642647][T14796] Kernel Offset: disabled [ 453.647004][T14796] Rebooting in 86400 seconds..