last executing test programs: 6.713610244s ago: executing program 4 (id=5493): r0 = socket(0x10, 0x3, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x8, 0x90, [0x0, 0x200000000040, 0x2000000003e4, 0x200000000600], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x108) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000680)=0xffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0xffffffffffffff6f, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x2, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0xfffffff8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x3, 0xffffff2e}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000700)="bad330fbc9b55408040000ea072704", 0xf, 0x4040, &(0x7f00000001c0)={0x11, 0x5, r6, 0x1, 0xd8}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1d, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0xd22f7c2db1585cba}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x5, 0x0}}], 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, r8}, 0x38) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0) recvmmsg(r12, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) sendmsg$kcm(r9, &(0x7f0000002bc0)={&(0x7f0000002500)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x1, 0x3}}, 0x80, 0x0, 0x0, 0x0, 0x3d8}, 0xc801) setsockopt$sock_int(r10, 0x1, 0x4, &(0x7f0000000180)=0x55b6, 0x4) splice(r9, 0x0, r11, 0x0, 0x4ffe0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f2}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 6.173086562s ago: executing program 4 (id=5501): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a0001002cbd70000000000002000000000000000000000006001d00fffe000008001e80"], 0x2c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@private=0xa010100, 0x4e23, 0x1, 0x1, 0x12d59, 0x12d5c}}, 0x44) 5.988286716s ago: executing program 4 (id=5504): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x4}, 0x20) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 5.643012367s ago: executing program 4 (id=5506): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000020) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240)=0x77c7, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1) r4 = socket$netlink(0x10, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20040880}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"40d577143fece9f1ff60bfb27d0b46d4", 0x0, 0x0, {0x268, 0x9}, {0x5, 0x473}, 0x8, [0x5, 0x3, 0x7ff, 0xc, 0x2, 0x3, 0xb, 0x6, 0xdfd, 0x9, 0x9, 0x0, 0x4, 0x0, 0xfffffffffffffffb, 0x4f4de632]}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000180)=r5) socket$nl_route(0x10, 0x3, 0x0) 3.821265949s ago: executing program 3 (id=5507): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8091}, 0x80000) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x7, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x300, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0xa3, 0x0, r3, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x20) 3.529422463s ago: executing program 2 (id=5512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x8c, 0x5, 0x400, 0x24, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x1, 0x8001, 0x81}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0xa70, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x9dc, 0x8, 0x0, 0x1, [{0x3bc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd7d}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffb}}, @WGPEER_A_ALLOWEDIPS={0x354, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x4}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x5d0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x5a8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x7}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1ac8439d062b1f670f4eded3e3b55c3d73f889760d8331ada6f000193a0f6b22"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5b457d4d5b7cc7b22c1ce8e279a20da76c162308da18ea6efa8986a275319543"}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xf}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0xa70}, 0x1, 0x0, 0x0, 0x1}, 0x44008) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 3.364835185s ago: executing program 3 (id=5513): socket$inet(0xa, 0x801, 0x84) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="9a5be948f5fe13ee19cf97661a98fa33025197433e80884e3711ca03692a0ce9df1d", 0x22}, {&(0x7f0000000740)="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", 0x4af}], 0x2, 0x0, 0x0, 0xc4}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) close(r1) 3.288716561s ago: executing program 2 (id=5515): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async, rerun: 32) r2 = accept4$inet(r1, 0x0, &(0x7f0000000000), 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket(0x1d, 0x2, 0x6) bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = accept(r1, &(0x7f00000000c0)=@generic, &(0x7f0000000300)=0x80) close(r5) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) (async) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r7, &(0x7f0000000080)=0x4) 3.229782311s ago: executing program 3 (id=5516): syz_emit_ethernet(0x7a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000442f00fe80000000000000000000009ca99d177f7244df000000000000ffff000000002421880b000000000010000000000000080088be00000003180000000100000000"], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x4000040) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x24004050) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020696c2500000000e22020207b1af8ff0000000006ebcf5fdf23a8edb9f420bfa1000000000008000000b70300db19028d966ff77c28148bdc00"/87], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x8000000010, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 3.048085721s ago: executing program 2 (id=5518): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010100}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x140002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x1e8, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1942ea6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79e11e91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x14c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f0f88c9}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x83262f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d0e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb15aa11}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x489d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2927}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9b9eb6e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x738de5b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a795aab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x225b2996}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bbc4f1c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17f49785}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54117aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefa9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1819}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x426c619d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbcb0}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ed2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5077e0d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe75d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d15a946}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46cc2ef3}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x490007f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x821f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2750}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb048}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f58}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x497b4660}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bdddd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46395685}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40b8ef64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64b2e383}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x4040080) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x1b0, 0x280, 0xd0, 0x1b0, 0x0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xff, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}, {}, 0x0, 0x9}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'xfrm0\x00', 'team_slave_1\x00', {0xff}, {}, 0x11, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x3, 0x4}, {0x2, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 3.0467623s ago: executing program 4 (id=5519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x0) bind$tipc(r1, 0x0, 0x0) close(r0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x22020600) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x8, 0x4, 0x6}, 0x50) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r9, &(0x7f0000000200), &(0x7f0000000240)=@udp=r10, 0x1}, 0x20) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x3, 0x9, 0x1, 0x1501, r7, 0xfd11, '\x00', r8, r11, 0x5, 0x1, 0x1}, 0x50) 2.953545366s ago: executing program 3 (id=5520): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x7) (async) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x5, 0x9, 0x2000000000000000, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) (async) recvfrom$inet6(r1, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04000804", @ANYRES16=r3, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="6c00aed151120cb43125000008000600c0dc000008420cbe1f000000080007009801000020"], 0x234}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xb}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x1c) (async) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xb}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 2.917546067s ago: executing program 2 (id=5521): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) (async, rerun: 32) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)={0x7, 0x312, 0xe7, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "b395ac5160fbdac3"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/59, 0x3b}], 0x1, 0x403, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.857754943s ago: executing program 4 (id=5522): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="00ffffffffff19000252912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24048000}, 0x4001) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x6, 0x1, 0x5, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x70}}, 0x4000010) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x340, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x7d6d09db111193bd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x80000001, 0x7, 'snmp\x00', 'syz0\x00', {0xed6}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xff000000, 0x0, 0xff, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xff], 'vcan0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x0, 0x11}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x6}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x0, 0x9, 0x1, 0x0, 0x10, 0x1, 0xfffffff8]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611889000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) 2.808472117s ago: executing program 2 (id=5525): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x4000800) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff78}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) close(r7) r8 = socket(0x28, 0x5, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r9) (async) close(r9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r9}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r9}, 0x18) connect$vsock_stream(r8, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r8, 0x0, 0x0) (async) connect$vsock_stream(r8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@delqdisc={0x34, 0x26, 0x1, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xf, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@delqdisc={0x34, 0x26, 0x1, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xf, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.693039372s ago: executing program 3 (id=5527): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340), 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0xb}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='rpc_socket_nospace\x00', r5, 0x0, 0x1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x8, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x20) 2.248256498s ago: executing program 3 (id=5531): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(0x0, r0) (async) unshare(0x2a020480) r4 = socket(0xa, 0x3, 0x87) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x2) (async) sendto(r4, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) (async) ppoll(&(0x7f0000000080)=[{r4, 0xa1a2}], 0x1, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r5, &(0x7f0000000000)="0a000000010001", 0x7) (async) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x7}}, 0x10) (async) r6 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb50a245d5cde0080045000028000000000002907800000000ffffffff11e0917800000000008100010000000000000000"], 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x94eb7bd00144ed03, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) (async) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000040)={0x4, @rand_addr=0x8, 0x0, 0x0, 'wrr\x00'}, 0x2c) (async) r8 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES8, @ANYRESHEX=r8, @ANYRES32=r3, @ANYRESOCT=r8, @ANYRES32=0x0, @ANYBLOB="9f92089203f4d121ae4c45a0b2190c88cf5213d6743e858f8af1ee82ef6c6587ff2169da1204af5b077d0dea2adc0a4034d7eedbeeaf9cca4d125e230bb0dc4f6992d59082567785d26f2d9ceced5d2d3a7467ebbd65d8ed850aa50c621b2b5c4cd4a6a4a131026e78f96f02072b14230ab9c2c7faed60"], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) unshare(0x6a040000) unshare(0x44000000) (async) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)=0xc00) (async) close(r5) (async) socket$kcm(0x29, 0x7, 0x0) 1.699998607s ago: executing program 0 (id=5534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000840)="9313bfdbbe", 0x5, 0x0, &(0x7f00000000c0)={0x11, 0xc, r10, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x40000000211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x613f, 0xe}}}}]}, 0x44}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x80800) sendmmsg(r12, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="3df9", 0x2}], 0x1}}], 0x1, 0x4008000) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)="eb", 0x1}], 0x1, &(0x7f0000001940)=ANY=[@ANYBLOB="2800000000000000170100000200000010"], 0x28}], 0x1, 0x40800) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x5ddc, 0x4) 1.679826781s ago: executing program 1 (id=5535): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000080)=0x9, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4045, &(0x7f0000000000)=0xfcd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x5, &(0x7f00000010c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xb2a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) pread64(r4, &(0x7f0000001080)=""/35, 0x23, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000007000a140000001100010000000000000000000000000a"], 0x28}}, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) 1.617736684s ago: executing program 2 (id=5536): unshare(0x62040200) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x200, 0x215, 0xa, 0xc, 0xe, 0x1, 0x40}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)={0x20, 0x2e, 0x9, 0x70bd2a, 0xfffffffe, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="bb6ed975"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89", 0x0, 0x0, 0x0}, 0x38) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r3 = socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x20f7bd8b17fbe661}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r3) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x762d, 0x3, 0x3, 0x7ff]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x32, 0xfff}) 1.127529122s ago: executing program 0 (id=5537): r0 = socket(0x10, 0x803, 0x3) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef006bbad110521256d686", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0xfffffffb}], 0x41, 0x40002100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc58ba565404b94246ba5698752d4337caa61aeed007f29fea712676bf1a05bb1a4d3fbb1be54ab66be7b9ee0d89f59b", @ANYRES16=r2, @ANYBLOB="310300000000000000000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r7, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) r9 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x61d1, 0x0) listen(r9, 0x8) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f00000002c0)={'macsec0\x00', {0x2, 0x0, @remote}}) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100069f8fac0964823c5bbc39bb7a57425a760c271a3b6a406e97ff9a7352650734aeecd093a9c1794290cd8594a1b6eead9495e63e8bda79ba1154c5cd369a97673d4eb4d5a5d0665ee7cf53fa040120b8942e", @ANYRES16=r9, @ANYRESDEC=r6], 0x3c}, 0x1, 0x0, 0x0, 0x150}, 0x40040000) r10 = accept4$unix(r6, &(0x7f0000000180), &(0x7f0000000040)=0x6e, 0x0) getsockopt(r10, 0xfffffffe, 0x286a, &(0x7f00000003c0)=""/113, &(0x7f0000000240)=0x71) 1.017349346s ago: executing program 1 (id=5538): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061190400000000009500000020000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 837.121108ms ago: executing program 1 (id=5539): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) 752.072683ms ago: executing program 1 (id=5540): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'erspan0\x00', 0x0}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r3, &(0x7f0000000500)="7037dd29b3a87ab0d305f92f33a305ac2545f27cea21368fa93b2292b74beaf8169750541dc310ac9e89835496baad5cc1cb24aab5717a93587448c34ce0387e1ba566aaf102eea23cb9514a0984adcf6bea9e68d29bc7861d8321be62b38e585d08d090397b02afeef7fc0bcbc39435d9590017cfed", &(0x7f0000000640)=""/169}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x20, 0x0, {0x60, 0x0, 0x0, r2, {0x10, 0x15}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x800e}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40815}, 0x4000000) sendto$netrom(r1, &(0x7f0000000080)="247a95a814804a4232cf60c688f597882085cdad107b35a6c929280a2ec710d8cae62ceb5a18254b3aa38f3187ff646e58e72b21be6cea984a9521590cbfa316f029235c4163d0274c67825259d6887b40d2c67d86ccb2ffb909d3e1aeb0452117647be2", 0x64, 0x4000, &(0x7f0000000180)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000015006b47880000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b9538000000000300060000000000020000000000000000090000000000000200010000000000000002fcff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 413.169074ms ago: executing program 0 (id=5541): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x98, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x6}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) bind$rose(r0, &(0x7f0000000300)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 277.719582ms ago: executing program 1 (id=5542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r2, 0x325, 0x2, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010) socket$kcm(0x2, 0x3, 0x2) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000003c0)="689892577db16bc1f9b95ef46d3f8252c4d81b8f683294e79dde6aafec77a87631bd6cd686727bc27072be64a13feb70f405e4b23a5712944c9de6f9c5edd26967f920977a8dd63501af", 0x4a, 0x0, &(0x7f00000002c0)={0xa, 0x4e24, 0x3, @empty, 0x5}, 0x1c) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, 0x40024, 0x8d85}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20004846) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r11, &(0x7f0000001c00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) bind$bt_sco(r11, &(0x7f0000002240), 0x8) ioctl$AUTOFS_IOC_EXPIRE(r11, 0x810c9365, &(0x7f0000000580)={{0xffff, 0x1}, 0x100, './file0\x00'}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x12, r5, {0xc, 0xc}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x24, 0x5}}]}, 0x2c}}, 0x8850) r12 = socket$inet(0x2, 0x3, 0x2) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_mreqsrc(r12, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x1, 0x8081, 0xbd, 0x73c, {{0x1e, 0x4, 0x1, 0x1, 0x78, 0x66, 0x0, 0x7, 0x4, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x40, 0x3, [{0x5, 0x4, "ec32"}, {0x0, 0x2}, {0x2, 0x8, "e53484a33507"}, {0x7, 0xe, "4405147cf1cea5189c4c2e86"}, {0x7, 0x5, "c6811d"}, {0x7, 0x9, "5adc7bddf9d9da"}, {0x7, 0x7, "fa97710ae4"}, {0x6, 0x9, "ea766f48667900"}]}, @rr={0x7, 0x13, 0x6a, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @ssrr={0x89, 0xf, 0x91, [@private=0x3, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x39}]}, @end]}}}}}) 196.348164ms ago: executing program 0 (id=5543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x1ba, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x52, 0x4, 0x2, 0x3a, 0x1ac, 0x65, 0x0, 0x3, 0x11, 0x0, @multicast2, @private=0xa010102, {[@timestamp_prespec={0x44, 0x24, 0x53, 0x3, 0x3, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xe}, {@multicast1}, {@multicast2, 0x85f}]}, @rr={0x7, 0xb, 0xa2, [@empty, @broadcast]}, @timestamp_prespec={0x44, 0x2c, 0xb1, 0x3, 0x9, [{@local, 0x1b7}, {@rand_addr=0x64010102, 0x4649}, {@multicast2, 0x9}, {@private=0xa010101, 0x1}, {@multicast1, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0xc9, 0x3, 0x6, [{@remote, 0x2}, {@multicast1, 0xab6}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8b}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "62b77b81"}]}, @cipso={0x86, 0x67, 0x3, [{0x4, 0x12, "a7065260a36d79334b1e4cc0b75855c6"}, {0x2, 0xd, "1a21a54931588c75daec5b"}, {0x5, 0xf, "72fd662afd79d0ed7b9aea1289"}, {0x5, 0x10, "180d66d8b091e861bc58e64cfaa6"}, {0x6, 0x11, "8b18620d551cf44e53676fe24fc677"}, {0x2, 0x12, "225e6400863905a805cae9494ea2161c"}]}, @generic={0x83, 0xb, "15fa13a0a4faa5528d"}, @generic={0x83, 0x3, 'v'}, @lsrr={0x83, 0x7, 0x74, [@local]}, @timestamp_prespec={0x44, 0x1c, 0xd, 0x3, 0x3, [{@private=0xa010102, 0x4}, {@rand_addr=0x64010101, 0xb}, {@broadcast, 0xa}]}]}}, {0x4e20, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "967d5910898a259ca4c5f247907b7c8efb779781b091857bffb35caf9f66d5be", "6f96c073fc9180396ef502b32cc19ac1", {"6302884b55a127453ab82c68e7ba0c21", "e9937936549edbd3c5c7a29faec58aa1"}}}}}}}, 0x0) 146.262951ms ago: executing program 0 (id=5544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200400e00000000000081001900886411004937727e001b"], 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYBLOB="6f7b702f6a907f78faca312805932d33d869f46e1cc3c0b8885e7a18f46a193f9cdc0a27130f2987fc3804ed9d905c0d1d58a6ddf122f18632347cd81d4acda83e6be672819e878c10ead48668bd4f89a8473c932d00244b572d05084e740389726eae3f15f2d9554336b1e5442bc29fb4c6860ee220e4d45b2e97c93a3df13f4593e13e357837a1c154c2d2e1", @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 25.650437ms ago: executing program 0 (id=5545): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x32, 0x101}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="31032abd7000fbdbdf250b00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x9}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a000100000000c30000000002002000000020"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r8}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000000)=r9) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0cf6ffff6700010000000400fdffffff020000000200000004000400edec63e5d7fd6d3091b8aa9c27a0edfe2ba2189b8d3d087cff9694a60ae1e2014cdd896a81e56a9f1932d7682acfe553eed3162539ddc748760f934c5af9d9dc4991c756a50036b07baf3330b146030fec6002810278b2ec9eb691b144559930dadd21681f53352b666283b39fc3ef7555e4bf01b2a3fc"], 0x1c}}, 0x20000014) 0s ago: executing program 1 (id=5546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x13, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x10, &(0x7f0000000a40)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000ac0)=0x10) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000140)=""/185, &(0x7f0000000000)=0xb9) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={r2, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x2, 0x88}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x150, 0x150, 0x8, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x3}, {0x2, 0x5}, {0x5, 0x4}, {0x1, 0x5}, {0x2, 0x2}, {0x9, 0x5}]}, @enum={0xa, 0x5, 0x0, 0x6, 0x4, [{0x7, 0x2}, {0x8, 0x5}, {0x0, 0x9}, {0x6, 0xb}, {0x3, 0x80000000}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @var={0xd, 0x0, 0x0, 0xe, 0x5, 0x1}, @datasec={0x2, 0x6, 0x0, 0xf, 0x3, [{0x1, 0x8000, 0x5}, {0x5, 0x400}, {0x1, 0xe1c, 0x7}, {0x3, 0x7, 0x8000}, {0x3, 0x400, 0xe558}, {0x2, 0x1, 0x2}], '=>4'}, @fwd={0x7}, @datasec={0xa, 0x5, 0x0, 0xf, 0x1, [{0x4, 0xb4, 0x5}, {0x4, 0x7fff, 0xffffffff}, {0x3, 0x6, 0x7}, {0x4, 0x2, 0x2}, {0x3, 0x1, 0x7}], '}'}, @float={0xe, 0x0, 0x0, 0x10, 0x1c}]}, {0x0, [0x61, 0x0, 0x5f, 0x2e, 0x30, 0x2e]}}, &(0x7f0000001080)=""/62, 0x170, 0x3e, 0x0, 0x0, 0x10000}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xd697a1c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000340)}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@restrict={0xc, 0x0, 0x0, 0xb, 0x5}, @struct={0xf, 0x6, 0x0, 0x4, 0x1, 0xa, [{0x2, 0x2, 0x1}, {0x10, 0x2, 0x9}, {0x10, 0x3, 0x1}, {0x2, 0x2, 0x4}, {0x4, 0x0, 0xe}, {0x4, 0x3, 0x8}]}, @union={0x8, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x5, 0x1, 0x10000}, {0x6, 0x0, 0x2}, {0xa, 0x1, 0x8}]}, @const={0x10, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000680)=""/158, 0xb8, 0x9e, 0x1, 0x3, 0x10000}, 0x28) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x18, r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pB \x00'}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="d9e81fb433fbce0c1e00020000000000181101000fa64d11ed31a4c1d686f909bdbaf79d1546b9cfca718219a384884cb7c9dc817800b3efe3e9cd31971ed8aafbb93d4361f78c86dfae532ba656fac1d963a68fb38863c7ac82d13c7eb72a8ea6d264320348", @ANYRES16=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000a00)={r1, 0xe, 0x3716, 0xffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r14, 0x40305829, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000ec0)={'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000d00)='./file0\x00', 0x0, 0x10, r1}, 0x18) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r16}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x18, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x60000, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x1, 0x2, 0x8, 0xb, 0xfffffffffffffff4, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x7fffffff, 0x46, &(0x7f00000004c0)=""/70, 0x41000, 0x63, '\x00', r5, 0x1a, r6, 0x8, &(0x7f0000000780)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x8, 0x1, 0x1}, 0x10, 0x78d0, r7, 0x2, &(0x7f0000000d80)=[r8, r9, 0xffffffffffffffff, r10, r11, r12, r13, r14, r15, r16], &(0x7f0000000dc0)=[{0x2, 0x5, 0x5, 0x6}, {0x2, 0x2, 0xf, 0x7}], 0x10, 0x6}, 0x94) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r17, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x18, r18, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8822}, 0x20000000) kernel console output (not intermixed with test programs): cgroup freezer. See cgroup.freeze of cgroup v2 [ 762.932965][T20022] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3596'. [ 763.073657][T20024] bond0: (slave bond_slave_1): Releasing backup interface [ 763.207954][T20033] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 763.221002][T20033] macvtap1: entered allmulticast mode [ 763.227135][T20033] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 763.281955][T20033] mac80211_hwsim hwsim37 wlan0: left allmulticast mode [ 763.302680][T20033] mac80211_hwsim hwsim37 wlan0: left promiscuous mode [ 763.398760][T20036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.625890][T20060] netlink: 'syz.3.3610': attribute type 1 has an invalid length. [ 763.637968][T20036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.790338][T20036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.857994][T20065] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 763.923232][T20073] netlink: 'syz.2.3614': attribute type 12 has an invalid length. [ 764.095343][T20036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.459574][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.532436][T19178] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.555402][T20107] syzkaller0: entered promiscuous mode [ 764.581858][T20107] syzkaller0: entered allmulticast mode [ 764.614048][T20116] __nla_validate_parse: 5 callbacks suppressed [ 764.614066][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'. [ 764.645593][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'. [ 764.657788][T19178] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.667979][T20116] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3623'. [ 764.729450][T20113] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 764.740828][T12983] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.764891][T20117] xt_CT: No such helper "snmp" [ 764.868800][T20123] netlink: 'syz.1.3625': attribute type 3 has an invalid length. [ 764.891784][T20123] netlink: 'syz.1.3625': attribute type 1 has an invalid length. [ 764.899554][T20123] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3625'. [ 765.086767][T20140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3630'. [ 765.097386][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3625'. [ 765.156478][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3625'. [ 765.244188][T20147] syzkaller0: entered promiscuous mode [ 765.249696][T20147] syzkaller0: entered allmulticast mode [ 765.418880][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'. [ 765.492113][T20160] dummy0: entered promiscuous mode [ 765.555843][T20159] dummy0: left promiscuous mode [ 765.664886][T20166] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3638'. [ 765.808967][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3638'. [ 766.108154][T20190] ip6_vti0 speed is unknown, defaulting to 1000 [ 766.470641][T20210] bond1: Removing last ns target with arp_interval on [ 766.516073][T20213] tipc: Enabled bearer , priority 10 [ 766.602717][T20215] team_slave_0: entered promiscuous mode [ 766.608815][T20215] team_slave_1: entered promiscuous mode [ 766.636991][T20215] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 766.852174][T20190] wg1 speed is unknown, defaulting to 1000 [ 766.862169][T20236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.872832][T20236] batadv_slave_0: entered promiscuous mode [ 766.982259][ T273] wlan1: Trigger new scan to find an IBSS to join [ 767.674913][T20251] ip6_vti0 speed is unknown, defaulting to 1000 [ 767.839045][T20261] netlink: 'syz.4.3663': attribute type 2 has an invalid length. [ 767.904368][T20261] !: entered promiscuous mode [ 768.111370][T20251] wg1 speed is unknown, defaulting to 1000 [ 768.426871][T20291] netlink: 'syz.2.3672': attribute type 5 has an invalid length. [ 768.437896][T20291] sctp: [Deprecated]: syz.2.3672 (pid 20291) Use of int in maxseg socket option. [ 768.437896][T20291] Use struct sctp_assoc_value instead [ 768.658266][T20299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 768.849335][T20309] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 768.874710][T20309] syzkaller1: linktype set to 769 [ 769.192430][T20320] netlink: 'syz.0.3680': attribute type 6 has an invalid length. [ 769.401439][T20327] netlink: 'syz.0.3685': attribute type 19 has an invalid length. [ 769.409807][T20327] netlink: 'syz.0.3685': attribute type 20 has an invalid length. [ 769.416720][T20304] ip6_vti0 speed is unknown, defaulting to 1000 [ 769.436665][T20329] netlink: 'syz.1.3684': attribute type 4 has an invalid length. [ 769.632005][T20337] __nla_validate_parse: 13 callbacks suppressed [ 769.632025][T20337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3687'. [ 769.719667][T20304] wg1 speed is unknown, defaulting to 1000 [ 769.953152][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3693'. [ 770.024538][T18847] wlan1: Trigger new scan to find an IBSS to join [ 770.160574][T20364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3693'. [ 770.391056][T20368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 770.398404][T20368] IPv6: NLM_F_CREATE should be set when creating new route [ 770.405747][T20368] IPv6: NLM_F_CREATE should be set when creating new route [ 770.456046][T20371] syz_tun: entered allmulticast mode [ 770.495011][T20370] syz_tun: left allmulticast mode [ 770.668949][T20381] syzkaller1: entered promiscuous mode [ 770.675007][T20381] syzkaller1: entered allmulticast mode [ 770.726899][T20383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3698'. [ 770.874509][T20398] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3703'. [ 770.880009][T20399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3704'. [ 770.894533][T20398] netlink: 'syz.0.3703': attribute type 3 has an invalid length. [ 771.083519][T20406] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3706'. [ 771.085289][T20412] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3705'. [ 771.150430][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3705'. [ 771.166882][T20412] hsr_slave_0: left promiscuous mode [ 771.305773][T20424] tipc: Failed to obtain node identity [ 771.314945][T20425] Bluetooth: MGMT ver 1.23 [ 771.325007][T20424] tipc: Enabling of bearer rejected, failed to enable media [ 771.352616][T20424] bridge3: entered allmulticast mode [ 771.375611][T20429] x_tables: duplicate underflow at hook 2 [ 771.752776][T20445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3719'. [ 771.935404][T20448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.103319][T20448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.239225][T20448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.357458][T20448] batman_adv: batadv0: Removing interface: netdevsim0 [ 772.375677][T20448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.487206][T20473] tipc: Enabled bearer , priority 0 [ 772.495232][T20474] tipc: Enabling of bearer rejected, already enabled [ 772.515674][T20473] syzkaller0: entered promiscuous mode [ 772.542286][T20473] syzkaller0: entered allmulticast mode [ 772.593713][T19178] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.679406][T20474] veth1_to_team: mtu less than device minimum [ 772.696049][T19178] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.765662][T20472] tipc: Resetting bearer [ 772.826547][T20472] tipc: Disabling bearer [ 772.858638][T19178] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.935566][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.948245][T20479] ip6_vti0 speed is unknown, defaulting to 1000 [ 773.065747][ T3515] wlan1: Trigger new scan to find an IBSS to join [ 773.095047][T20488] sctp: [Deprecated]: syz.1.3731 (pid 20488) Use of int in maxseg socket option. [ 773.095047][T20488] Use struct sctp_assoc_value instead [ 773.245640][T20493] syzkaller1: entered promiscuous mode [ 773.273320][T20493] syzkaller1: entered allmulticast mode [ 773.373210][T20488] ip6_vti0 speed is unknown, defaulting to 1000 [ 773.374606][T20479] wg1 speed is unknown, defaulting to 1000 [ 773.644348][T20516] sctp: [Deprecated]: syz.3.3737 (pid 20516) Use of int in max_burst socket option deprecated. [ 773.644348][T20516] Use struct sctp_assoc_value instead [ 773.728447][T20488] wg1 speed is unknown, defaulting to 1000 [ 773.963927][ T3515] wlan1: Creating new IBSS network, BSSID de:93:8e:a8:d1:a5 [ 774.439483][ T5838] wg1 speed is unknown, defaulting to 1000 [ 774.452876][ T5947] wg1 speed is unknown, defaulting to 1000 [ 774.599782][T20541] tipc: Started in network mode [ 774.608302][T20541] tipc: Node identity 7639f2cc64b9, cluster identity 4711 [ 774.616656][T20541] tipc: Enabled bearer , priority 0 [ 774.625172][T20544] syzkaller0: entered promiscuous mode [ 774.631808][T20544] syzkaller0: entered allmulticast mode [ 774.639628][T20539] tipc: Enabled bearer , priority 0 [ 774.672862][T20541] syzkaller0: entered promiscuous mode [ 774.678653][T20541] syzkaller0: entered allmulticast mode [ 774.748794][T20541] tipc: Resetting bearer [ 774.789104][T20557] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 774.828196][T20560] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 774.838501][T20539] tipc: Resetting bearer [ 774.883588][T20539] tipc: Disabling bearer [ 774.917693][T20540] tipc: Resetting bearer [ 774.943950][T20540] tipc: Disabling bearer [ 775.109632][T20574] __nla_validate_parse: 5 callbacks suppressed [ 775.109650][T20574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 775.135738][T20574] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 775.147339][T20574] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 775.158019][T20574] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 775.296286][T20587] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3759'. [ 775.299713][T20586] nbd: socks must be embedded in a SOCK_ITEM attr [ 775.529912][T20598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3763'. [ 775.547793][T20598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3763'. [ 775.551339][T20601] ipvlan0: entered promiscuous mode [ 775.567566][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3763'. [ 775.623861][T20598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3763'. [ 775.773534][T20605] netlink: 'syz.0.3766': attribute type 1 has an invalid length. [ 776.026779][T20620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.091207][T20623] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3772'. [ 776.174072][T20620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.596315][T20620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.632772][T20636] netlink: 'syz.2.3774': attribute type 2 has an invalid length. [ 776.640830][T20636] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3774'. [ 776.655450][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'. [ 776.669878][T20636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3774'. [ 776.814368][T20620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.046870][ T1086] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.087882][ T1086] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.119895][ T3515] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.145645][T19176] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.160519][T20661] netlink: 'syz.2.3782': attribute type 10 has an invalid length. [ 777.190058][T20661] geneve0: entered promiscuous mode [ 777.197525][T20661] team0: Port device geneve0 added [ 777.287542][T20673] ip6erspan0: entered allmulticast mode [ 777.395584][T20678] ip6_vti0 speed is unknown, defaulting to 1000 [ 777.498140][T20681] netlink: 'syz.2.3788': attribute type 4 has an invalid length. [ 777.520572][T20681] netlink: 'syz.2.3788': attribute type 4 has an invalid length. [ 777.544321][T20681] Bluetooth: MGMT ver 1.23 [ 777.547557][T20678] wg1 speed is unknown, defaulting to 1000 [ 777.560669][T20681] team0: No ports can be present during mode change [ 777.823090][T20691] netlink: 'syz.0.3792': attribute type 13 has an invalid length. [ 777.834614][T20689] ip6_vti0 speed is unknown, defaulting to 1000 [ 778.052405][T20698] netlink: 'syz.0.3795': attribute type 1 has an invalid length. [ 778.187926][T20689] wg1 speed is unknown, defaulting to 1000 [ 778.378421][T20709] netlink: 'syz.3.3799': attribute type 11 has an invalid length. [ 778.538534][T20713] ip6_vti0 speed is unknown, defaulting to 1000 [ 779.430792][T20724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.466037][T20724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.830535][T20722] ip6_vti0 speed is unknown, defaulting to 1000 [ 780.131267][T12978] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.148634][T20713] wg1 speed is unknown, defaulting to 1000 [ 780.164317][T20734] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 780.189785][T20734] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 780.192306][T12978] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.220368][T20734] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 780.236718][T12978] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.256169][T12978] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.332177][T20750] xt_bpf: check failed: parse error [ 780.365446][T20722] wg1 speed is unknown, defaulting to 1000 [ 780.507639][T20762] sctp: [Deprecated]: syz.4.3813 (pid 20762) Use of int in max_burst socket option deprecated. [ 780.507639][T20762] Use struct sctp_assoc_value instead [ 780.647221][T20762] syzkaller0: entered promiscuous mode [ 780.675771][T20762] syzkaller0: entered allmulticast mode [ 781.635103][T20800] __nla_validate_parse: 12 callbacks suppressed [ 781.635120][T20800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3823'. [ 781.690541][T20798] ip6_vti0 speed is unknown, defaulting to 1000 [ 781.759802][T20802] dummy0: entered promiscuous mode [ 781.812505][T20802] macsec1: entered allmulticast mode [ 781.818203][T20802] dummy0: entered allmulticast mode [ 781.900425][T20806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.931426][T20806] geneve2: entered promiscuous mode [ 781.940124][T18847] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 781.957432][T18847] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 781.979199][T18847] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 782.001241][T18847] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 782.030739][T20798] wg1 speed is unknown, defaulting to 1000 [ 782.246101][T20815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3828'. [ 782.258677][T20815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3828'. [ 782.302695][T20819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3828'. [ 782.313905][T20819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3828'. [ 782.474082][T20824] tipc: Enabled bearer , priority 0 [ 782.487463][T20824] syzkaller0: entered promiscuous mode [ 782.516365][T20824] syzkaller0: entered allmulticast mode [ 782.615740][T20826] ip6_vti0 speed is unknown, defaulting to 1000 [ 782.634650][T20829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3830'. [ 782.743222][ T5842] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 782.749732][T17170] Bluetooth: hci2: command 0x0401 tx timeout [ 782.917740][T20845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'. [ 782.927448][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3835'. [ 782.962784][T20845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3835'. [ 782.971939][T20845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3835'. [ 783.071502][T20838] ip6_vti0 speed is unknown, defaulting to 1000 [ 783.286223][T20823] tipc: Resetting bearer [ 783.327806][T20823] tipc: Disabling bearer [ 783.482562][T20838] wg1 speed is unknown, defaulting to 1000 [ 783.503625][T20826] wg1 speed is unknown, defaulting to 1000 [ 784.456968][T20871] IPVS: set_ctl: invalid protocol: 137 172.30.0.1:0 [ 784.651781][T20871] ip6_vti0 speed is unknown, defaulting to 1000 [ 784.826562][T20891] x_tables: duplicate underflow at hook 3 [ 785.103728][T20901] netlink: 'syz.3.3847': attribute type 1 has an invalid length. [ 785.105220][T20875] ip6_vti0 speed is unknown, defaulting to 1000 [ 785.121132][T20871] wg1 speed is unknown, defaulting to 1000 [ 785.934168][T20900] ip6_vti0 speed is unknown, defaulting to 1000 [ 786.299188][T20875] wg1 speed is unknown, defaulting to 1000 [ 786.361278][T20900] wg1 speed is unknown, defaulting to 1000 [ 786.948135][T20954] netlink: 'syz.3.3862': attribute type 1 has an invalid length. [ 786.976210][T20954] __nla_validate_parse: 7 callbacks suppressed [ 786.976229][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3862'. [ 787.416670][T20961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3864'. [ 787.721555][T20969] ip6_vti0 speed is unknown, defaulting to 1000 [ 788.055497][T20991] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.205583][T20976] ip6_vti0 speed is unknown, defaulting to 1000 [ 788.227977][T20969] wg1 speed is unknown, defaulting to 1000 [ 788.314629][T20991] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.327761][T21000] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3876'. [ 788.341951][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 788.363126][T21002] 8021q: VLANs not supported on sit0 [ 788.439547][T20991] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.601999][T20991] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.653202][T21010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3879'. [ 788.673796][T21010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3879'. [ 788.707118][T20976] wg1 speed is unknown, defaulting to 1000 [ 788.726565][T21012] IPVS: length: 35 != 88931087544 [ 788.908980][ T3434] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.967873][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.099030][ T273] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.184139][ T3434] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.395537][T21029] netlink: 'syz.4.3885': attribute type 1 has an invalid length. [ 789.487757][T21037] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3885'. [ 789.848301][T21055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3889'. [ 789.906389][T21057] syzkaller0: entered promiscuous mode [ 789.920248][T21057] syzkaller0: entered allmulticast mode [ 790.057113][T21062] ip6_vti0 speed is unknown, defaulting to 1000 [ 790.199993][T21071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3896'. [ 790.224637][T21069] tap0: tun_chr_ioctl cmd 1074025677 [ 790.246066][T21069] tap0: linktype set to 1 [ 790.263620][T21072] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 790.310888][T21074] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3897'. [ 790.406409][T21065] ip6_vti0 speed is unknown, defaulting to 1000 [ 790.421468][T21062] wg1 speed is unknown, defaulting to 1000 [ 790.496095][T21077] tipc: Enabled bearer , priority 0 [ 790.504965][T21077] syzkaller0: entered promiscuous mode [ 790.510611][T21077] syzkaller0: entered allmulticast mode [ 790.526105][T21080] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3899'. [ 790.602050][T21077] tipc: Resetting bearer [ 790.635715][T21076] tipc: Resetting bearer [ 790.641533][T21074] ip6_vti0 speed is unknown, defaulting to 1000 [ 790.685283][T21076] tipc: Disabling bearer [ 790.717964][T21065] wg1 speed is unknown, defaulting to 1000 [ 791.149180][T21074] wg1 speed is unknown, defaulting to 1000 [ 791.625046][T21110] nbd3: detected capacity change from 0 to 63 [ 791.664256][T21107] block nbd3: NBD_DISCONNECT [ 791.672707][T21107] block nbd3: Disconnected due to user request. [ 791.679169][T21107] block nbd3: shutting down sockets [ 791.705508][ T30] audit: type=1800 audit(1765374722.304:10): pid=21107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3906" name="3" dev="tmpfs" ino=775 res=0 errno=0 [ 792.193424][T21128] __nla_validate_parse: 3 callbacks suppressed [ 792.193442][T21128] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3911'. [ 792.212398][T21128] netem: change failed [ 792.586780][T21159] tipc: Enabling of bearer rejected, failed to enable media [ 792.623480][T21163] tipc: New replicast peer: 255.255.255.255 [ 792.645096][T21163] tipc: Enabled bearer , priority 10 [ 792.675057][T21163] netlink: 'syz.2.3921': attribute type 11 has an invalid length. [ 792.703953][T21163] netlink: 'syz.2.3921': attribute type 11 has an invalid length. [ 792.721977][T21163] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3921'. [ 792.827860][T21177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3924'. [ 792.851736][T21177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3924'. [ 792.959216][T21183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3929'. [ 793.020300][T21189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3930'. [ 793.045142][T21189] tc_dump_action: action bad kind [ 793.052504][T21189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3930'. [ 793.057709][T21192] Cannot find del_set index 4 as target [ 793.072362][T21189] netlink: 'syz.0.3930': attribute type 39 has an invalid length. [ 793.268378][T21202] netlink: 'syz.4.3934': attribute type 11 has an invalid length. [ 793.752088][T14926] tipc: Node number set to 312371050 [ 793.876703][T21206] netlink: 'syz.2.3936': attribute type 2 has an invalid length. [ 793.894234][T21206] : entered promiscuous mode [ 794.235686][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3939'. [ 794.329256][T21227] sch_tbf: peakrate 1 is lower than or equals to rate 205 ! [ 794.422862][T21238] siw: device registration error -23 [ 794.495131][T21242] xt_TCPMSS: Only works on TCP SYN packets [ 794.569466][T21243] ip6_vti0 speed is unknown, defaulting to 1000 [ 794.809285][T21243] wg1 speed is unknown, defaulting to 1000 [ 795.453756][T21267] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3951'. [ 795.509294][T21272] netlink: 'syz.1.3951': attribute type 2 has an invalid length. [ 795.523573][T21267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3951'. [ 795.555761][T21269] warn_alloc: 1 callbacks suppressed [ 795.555781][T21269] syz.0.3950: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 795.594330][T21272] netlink: 'syz.1.3951': attribute type 5 has an invalid length. [ 795.639414][T21269] CPU: 0 UID: 0 PID: 21269 Comm: syz.0.3950 Not tainted syzkaller #0 PREEMPT(full) [ 795.639450][T21269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.639461][T21269] Call Trace: [ 795.639468][T21269] [ 795.639476][T21269] dump_stack_lvl+0x189/0x250 [ 795.639525][T21269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.639544][T21269] ? __pfx__printk+0x10/0x10 [ 795.639565][T21269] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 795.639600][T21269] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 795.639625][T21269] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 795.639652][T21269] warn_alloc+0x214/0x310 [ 795.639686][T21269] ? __pfx_warn_alloc+0x10/0x10 [ 795.639715][T21269] ? __get_vm_area_node+0x28f/0x300 [ 795.639736][T21269] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 795.639761][T21269] __vmalloc_node_range_noprof+0x690/0x12d0 [ 795.639783][T21269] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 795.639830][T21269] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 795.639852][T21269] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 795.639872][T21269] ? rcu_is_watching+0x15/0xb0 [ 795.639893][T21269] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 795.639910][T21269] __kvmalloc_node_noprof+0x670/0x910 [ 795.639931][T21269] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 795.639948][T21269] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 795.639966][T21269] ? bpf_uprobe_multi_link_attach+0x527/0xee0 [ 795.639987][T21269] bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 795.640022][T21269] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 795.640041][T21269] ? __fget_files+0x2a/0x420 [ 795.640060][T21269] ? __fget_files+0x2a/0x420 [ 795.640075][T21269] ? __fget_files+0x2a/0x420 [ 795.640093][T21269] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 795.640120][T21269] link_create+0x673/0x850 [ 795.640146][T21269] __sys_bpf+0x6be/0x860 [ 795.640168][T21269] ? __pfx___sys_bpf+0x10/0x10 [ 795.640184][T21269] ? count_memcg_event_mm+0x21/0x260 [ 795.640223][T21269] ? rcu_is_watching+0x15/0xb0 [ 795.640250][T21269] __x64_sys_bpf+0x7c/0x90 [ 795.640269][T21269] do_syscall_64+0xfa/0xf80 [ 795.640292][T21269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.640308][T21269] ? clear_bhb_loop+0x60/0xb0 [ 795.640329][T21269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.640345][T21269] RIP: 0033:0x7fe26758f749 [ 795.640361][T21269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.640377][T21269] RSP: 002b:00007fe268457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 795.640396][T21269] RAX: ffffffffffffffda RBX: 00007fe2677e5fa0 RCX: 00007fe26758f749 [ 795.640409][T21269] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 795.640427][T21269] RBP: 00007fe267613f91 R08: 0000000000000000 R09: 0000000000000000 [ 795.640438][T21269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.640448][T21269] R13: 00007fe2677e6038 R14: 00007fe2677e5fa0 R15: 00007ffc3f0f4128 [ 795.640478][T21269] [ 795.640485][T21269] Mem-Info: [ 795.760328][T21284] netlink: 'syz.2.3953': attribute type 1 has an invalid length. [ 795.963921][T21269] active_anon:3941 inactive_anon:0 isolated_anon:0 [ 795.963921][T21269] active_file:3337 inactive_file:40117 isolated_file:0 [ 795.963921][T21269] unevictable:768 dirty:71 writeback:0 [ 795.963921][T21269] slab_reclaimable:12649 slab_unreclaimable:125924 [ 795.963921][T21269] mapped:31431 shmem:1355 pagetables:1005 [ 795.963921][T21269] sec_pagetables:0 bounce:0 [ 795.963921][T21269] kernel_misc_reclaimable:0 [ 795.963921][T21269] free:1294702 free_pcp:15393 free_cma:0 [ 796.017294][T21267] netlink: 'syz.1.3951': attribute type 6 has an invalid length. [ 796.070249][T21269] Node 0 active_anon:15788kB inactive_anon:0kB active_file:13348kB inactive_file:160264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125728kB dirty:280kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12936kB pagetables:3964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 796.115684][T21269] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 796.255596][T21269] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.312489][T21269] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 796.348632][T21269] Node 0 DMA32 free:1256636kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15756kB inactive_anon:0kB active_file:13348kB inactive_file:160264kB unevictable:1536kB writepending:280kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:53184kB local_pcp:35712kB free_cma:0kB [ 796.422563][T21269] lowmem_reserve[]: 0 0 0 0 0 [ 796.427485][T21269] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.476602][T21305] openvswitch: netlink: Invalid VLAN frame [ 796.572376][T21269] lowmem_reserve[]: 0 0 0 0 0 [ 796.585453][T21309] netlink: 'syz.4.3958': attribute type 13 has an invalid length. [ 796.597923][T21269] Node 1 Normal free:3907416kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7424kB local_pcp:5568kB free_cma:0kB [ 796.603841][T21313] x_tables: duplicate underflow at hook 3 [ 796.652736][T21269] lowmem_reserve[]: 0 0 0 0 0 [ 796.665739][T21269] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 796.694825][T21313] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20002 [ 796.702240][T21269] Node 0 DMA32: 1*4kB (M) 226*8kB (ME) 298*16kB (UME) 221*32kB (UME) 222*64kB (UME) 231*128kB (UME) 137*256kB (UME) 75*512kB (UME) 15*1024kB (UM) 5*2048kB (UME) 267*4096kB (UM) = 1250132kB [ 796.732877][T21269] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 796.754771][T21269] Node 1 Normal: 172*4kB (UME) 63*8kB (UME) 35*16kB (UME) 230*32kB (UME) 93*64kB (UME) 13*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3907416kB [ 796.812583][T21269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.842891][T21269] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 796.872514][T21269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.891755][T21269] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 796.942353][T21269] 47581 total pagecache pages [ 796.947075][T21269] 0 pages in swap cache [ 796.951236][T21269] Free swap = 124996kB [ 796.964854][T21269] Total swap = 124996kB [ 796.970423][T21269] 2097051 pages RAM [ 796.971371][ T1086] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.975928][T21269] 0 pages HighMem/MovableOnly [ 796.989280][T21269] 424280 pages reserved [ 796.997035][T21269] 0 pages cma reserved [ 797.015099][ T1086] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.042111][T18552] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.050956][T18552] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.424674][T21344] netlink: 'syz.2.3969': attribute type 11 has an invalid length. [ 797.588805][T21353] netlink: 'syz.2.3972': attribute type 5 has an invalid length. [ 797.679522][T21356] tipc: Enabled bearer , priority 0 [ 797.696739][T21356] syzkaller0: entered promiscuous mode [ 797.708983][T21356] syzkaller0: entered allmulticast mode [ 797.751159][T21363] netlink: 'syz.2.3976': attribute type 3 has an invalid length. [ 797.770462][T21356] tipc: Resetting bearer [ 797.777188][T21356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.788833][T21355] tipc: Resetting bearer [ 797.835218][T21355] tipc: Disabling bearer [ 797.899191][T21371] __nla_validate_parse: 7 callbacks suppressed [ 797.899209][T21371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3978'. [ 797.940723][T21373] ip6_vti0 speed is unknown, defaulting to 1000 [ 798.033082][T21371] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 798.294348][T21373] wg1 speed is unknown, defaulting to 1000 [ 798.927317][T21412] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3989'. [ 799.257889][T21427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3995'. [ 799.276055][T21428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3996'. [ 799.375549][ T5842] Bluetooth: hci3: link tx timeout [ 799.381200][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 799.439838][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3997'. [ 799.542469][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3992'. [ 799.708202][T21431] ip6_vti0 speed is unknown, defaulting to 1000 [ 800.053963][T21431] wg1 speed is unknown, defaulting to 1000 [ 800.090251][T21447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4000'. [ 800.115773][T21447] 8021q: VLANs not supported on vxcan0 [ 800.554729][T21471] xt_TCPMSS: Only works on TCP SYN packets [ 800.867708][T21483] tipc: Enabled bearer , priority 0 [ 800.897373][T21483] syzkaller0: entered promiscuous mode [ 800.917971][T21483] syzkaller0: entered allmulticast mode [ 800.995095][T21483] tipc: Resetting bearer [ 801.018271][T21482] tipc: Resetting bearer [ 801.069967][T21482] tipc: Disabling bearer [ 801.092912][T21498] netlink: 'syz.2.4016': attribute type 1 has an invalid length. [ 801.102539][T21499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4016'. [ 801.112345][T21498] netlink: 'syz.2.4016': attribute type 4 has an invalid length. [ 801.120083][T21498] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4016'. [ 801.304026][T21507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 801.318200][T21505] ip6_vti0 speed is unknown, defaulting to 1000 [ 801.342217][T21510] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4021'. [ 801.477449][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 801.484331][ T5842] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 801.586093][T21521] xt_nat: multiple ranges no longer supported [ 801.603657][T21522] xt_nat: multiple ranges no longer supported [ 801.606051][T21513] "syz.3.4022" (21513) uses obsolete ecb(arc4) skcipher [ 801.717484][T21486] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 801.791466][T21505] wg1 speed is unknown, defaulting to 1000 [ 802.127490][T21546] ip6gre1: entered promiscuous mode [ 802.290048][T21540] netlink: 'syz.1.4027': attribute type 10 has an invalid length. [ 802.326037][T21540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.369451][T21540] team0: Port device bond0 added [ 802.438578][T21556] netlink: 'syz.0.4032': attribute type 10 has an invalid length. [ 802.491036][T21556] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.536063][T21556] bond0: (slave team0): Enslaving as an active interface with an up link [ 802.614252][T21555] ip6_vti0 speed is unknown, defaulting to 1000 [ 802.621079][T21560] syzkaller1: entered promiscuous mode [ 802.627612][T21560] syzkaller1: entered allmulticast mode [ 802.679076][T21558] syzkaller0: entered promiscuous mode [ 802.685603][T21558] syzkaller0: entered allmulticast mode [ 802.730878][T21566] bond3: entered promiscuous mode [ 802.738617][T21566] 8021q: adding VLAN 0 to HW filter on device bond3 [ 803.552817][T17170] Bluetooth: hci3: command 0x0405 tx timeout [ 804.539097][T21555] wg1 speed is unknown, defaulting to 1000 [ 804.685264][T21588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.692693][T21591] __nla_validate_parse: 2 callbacks suppressed [ 804.692709][T21591] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4041'. [ 804.766836][T21593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4043'. [ 804.800593][T21591] netlink: 'syz.4.4041': attribute type 13 has an invalid length. [ 804.806599][T21593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4043'. [ 805.017186][T21610] netlink: 'syz.3.4048': attribute type 1 has an invalid length. [ 805.027817][T21610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4048'. [ 805.170160][T21591] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.177991][T21591] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.383148][T21591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.412647][T21591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.733765][T21610] gretap1: entered allmulticast mode [ 805.878141][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.899111][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.938980][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.972089][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.005935][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.036256][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.055651][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.091952][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.268689][T21640] ip6gre1: entered allmulticast mode [ 806.555112][T21650] netlink: 'syz.4.4059': attribute type 83 has an invalid length. [ 806.819451][T21655] netlink: 'syz.0.4071': attribute type 1 has an invalid length. [ 806.834224][T21654] tipc: Enabled bearer , priority 0 [ 806.849183][T21654] syzkaller0: entered promiscuous mode [ 806.861471][T21654] syzkaller0: entered allmulticast mode [ 807.025232][T21655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 807.057416][T21658] tipc: Resetting bearer [ 807.265136][T21656] bond2 (unregistering): Released all slaves [ 807.327928][T21653] tipc: Resetting bearer [ 807.377925][T21653] tipc: Disabling bearer [ 807.555762][T21664] netlink: 'syz.4.4064': attribute type 6 has an invalid length. [ 807.631551][T21666] ip6_vti0 speed is unknown, defaulting to 1000 [ 807.673663][T21669] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.4065'. [ 808.135814][T21669] ip6_vti0 speed is unknown, defaulting to 1000 [ 808.137877][T21666] wg1 speed is unknown, defaulting to 1000 [ 808.475449][T21687] bond4: entered promiscuous mode [ 808.493811][T21687] 8021q: adding VLAN 0 to HW filter on device bond4 [ 808.750179][T21669] wg1 speed is unknown, defaulting to 1000 [ 808.811761][T21705] openvswitch: netlink: Missing key (keys=40, expected=100) [ 808.827044][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 808.956959][T21725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4078'. [ 809.082432][T21718] ip6_vti0 speed is unknown, defaulting to 1000 [ 809.228242][T21732] netlink: 'syz.2.4079': attribute type 1 has an invalid length. [ 809.447206][T21733] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 809.461837][T21739] bond5: (slave gretap1): making interface the new active one [ 809.479207][T21739] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 809.499271][T21718] wg1 speed is unknown, defaulting to 1000 [ 810.244944][T21777] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4090'. [ 810.257658][T21780] netlink: 'syz.0.4092': attribute type 8 has an invalid length. [ 810.273924][T21780] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4092'. [ 810.284556][T21778] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4091'. [ 810.296409][T21778] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4091'. [ 810.655116][T21800] netlink: 'syz.2.4098': attribute type 3 has an invalid length. [ 810.677317][T21800] netlink: 'syz.2.4098': attribute type 1 has an invalid length. [ 810.703638][T21800] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4098'. [ 810.731831][T21800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4098'. [ 810.784050][T21800] netlink: 'syz.2.4098': attribute type 3 has an invalid length. [ 810.794511][T21800] netlink: 'syz.2.4098': attribute type 1 has an invalid length. [ 810.813295][T21800] netlink: 'syz.2.4098': attribute type 4 has an invalid length. [ 810.833487][T21800] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4098'. [ 810.853651][T21800] NCSI netlink: No device for ifindex 813332851 [ 810.961398][T21817] bond1: option arp_validate: invalid value (18446744073491447809) [ 810.973317][T21817] bond1 (unregistering): Released all slaves [ 811.231211][T21838] ip6_vti0 speed is unknown, defaulting to 1000 [ 811.489632][T21859] tipc: Enabled bearer , priority 0 [ 811.552646][T21848] syzkaller0: entered promiscuous mode [ 811.558158][T21848] syzkaller0: entered allmulticast mode [ 811.577284][T21848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4110'. [ 811.665299][T21846] tipc: Resetting bearer [ 811.743453][T21846] tipc: Disabling bearer [ 811.818805][T21838] wg1 speed is unknown, defaulting to 1000 [ 811.980401][T21876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4116'. [ 812.001876][T21876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4116'. [ 812.190370][T21888] ip6_vti0 speed is unknown, defaulting to 1000 [ 812.546304][T21911] validate_nla: 2 callbacks suppressed [ 812.546323][T21911] netlink: 'syz.4.4123': attribute type 4 has an invalid length. [ 812.688849][T21888] wg1 speed is unknown, defaulting to 1000 [ 813.378012][T21952] syzkaller0: entered promiscuous mode [ 813.383867][T21952] syzkaller0: entered allmulticast mode [ 815.174140][T21975] veth0: entered promiscuous mode [ 815.181272][T21975] veth0: left promiscuous mode [ 815.227326][T21976] ip6_vti0 speed is unknown, defaulting to 1000 [ 815.351038][T21980] __nla_validate_parse: 15 callbacks suppressed [ 815.351058][T21980] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4140'. [ 815.695984][T21976] wg1 speed is unknown, defaulting to 1000 [ 815.768393][T22014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4150'. [ 815.955908][T22020] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 815.967948][T22020] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 816.095043][T22020] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 816.105697][T22020] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 816.239766][T22020] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 816.260044][T22020] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 816.300403][T22020] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 816.310283][T22020] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 816.340348][T22038] syz_tun: entered allmulticast mode [ 816.408948][ T1086] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 816.418145][ T1086] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 816.441234][ T1086] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 816.456695][ T1086] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 816.488137][T18552] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 816.503180][T18552] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 816.548351][T18552] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 816.563224][T18552] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 816.573093][T22042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4157'. [ 816.634079][T22047] veth0: entered promiscuous mode [ 816.693683][T22050] veth0: left promiscuous mode [ 816.759979][T22050] ip6_vti0 speed is unknown, defaulting to 1000 [ 816.832134][T22059] netlink: 'syz.0.4162': attribute type 1 has an invalid length. [ 816.947602][T22064] tipc: Enabled bearer , priority 0 [ 816.959825][T22064] syzkaller0: entered promiscuous mode [ 816.967216][T22064] syzkaller0: entered allmulticast mode [ 817.043843][T22063] tipc: Resetting bearer [ 817.094675][T22063] tipc: Disabling bearer [ 817.107615][T22050] wg1 speed is unknown, defaulting to 1000 [ 817.130755][T22036] syz_tun: left allmulticast mode [ 817.218712][T22069] ip6_vti0 speed is unknown, defaulting to 1000 [ 817.565363][T22076] netlink: 'syz.3.4167': attribute type 5 has an invalid length. [ 817.708547][T22069] wg1 speed is unknown, defaulting to 1000 [ 817.797051][T22088] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4170'. [ 817.853225][T22091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4170'. [ 818.030137][T22096] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4173'. [ 818.099139][T22091] syzkaller1: entered promiscuous mode [ 818.115191][T22091] syzkaller1: entered allmulticast mode [ 818.526917][T22110] ip6_vti0 speed is unknown, defaulting to 1000 [ 818.642351][T22119] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:0 [ 818.828709][T22110] wg1 speed is unknown, defaulting to 1000 [ 818.851255][T22117] ip6_vti0 speed is unknown, defaulting to 1000 [ 819.078960][T22117] wg1 speed is unknown, defaulting to 1000 [ 819.628270][T22137] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4183'. [ 820.165438][T22153] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 820.176228][T22153] netlink: 'syz.4.4188': attribute type 9 has an invalid length. [ 820.184287][T22153] netlink: 'syz.4.4188': attribute type 11 has an invalid length. [ 820.193311][T22153] netlink: 'syz.4.4188': attribute type 12 has an invalid length. [ 820.208082][T22153] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.4188'. [ 820.218981][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4188'. [ 820.315113][T22164] IPv6: sit1: Disabled Multicast RS [ 820.459891][T22178] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4195'. [ 820.506366][T22180] netlink: 187428 bytes leftover after parsing attributes in process `syz.3.4194'. [ 820.519308][T22180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4194'. [ 820.686890][T22186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4199'. [ 820.696104][T22186] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4199'. [ 820.869144][T22196] ip6_vti0 speed is unknown, defaulting to 1000 [ 820.994181][T22203] IPVS: Unknown mcast interface: hsr0 [ 821.079655][T22207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4204'. [ 821.088091][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4201'. [ 821.274592][T22196] wg1 speed is unknown, defaulting to 1000 [ 821.275944][T22199] ip6_vti0 speed is unknown, defaulting to 1000 [ 821.694054][T22231] netlink: 'syz.0.4212': attribute type 10 has an invalid length. [ 821.723536][T22229] bond0: (slave team0): Releasing backup interface [ 821.738244][T22240] netlink: 'syz.4.4213': attribute type 4 has an invalid length. [ 821.785653][T22229] bridge_slave_0: left allmulticast mode [ 821.791442][T22229] bridge_slave_0: left promiscuous mode [ 821.798789][T22229] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.815205][T22229] bridge_slave_1: left allmulticast mode [ 821.821484][T22229] bridge_slave_1: left promiscuous mode [ 821.829677][T22229] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.850397][T22229] bond0: (slave bond_slave_0): Releasing backup interface [ 821.875932][T22229] bond0: (slave bond_slave_1): Releasing backup interface [ 821.903747][T22229] team0: Port device team_slave_0 removed [ 821.922888][T22229] team0: Port device team_slave_1 removed [ 821.937776][T22229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.945822][T22229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.954544][T22229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.962921][T22229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.989923][T22231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.004667][T22231] bond0: (slave wlan1): Opening slave failed [ 822.142839][T22199] wg1 speed is unknown, defaulting to 1000 [ 823.396052][T22307] netlink: 'syz.1.4232': attribute type 12 has an invalid length. [ 823.436446][T22307] netlink: 'syz.1.4232': attribute type 29 has an invalid length. [ 823.497273][T22307] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4232'. [ 823.538719][T22307] netlink: 51 bytes leftover after parsing attributes in process `syz.1.4232'. [ 823.836567][T22330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4236'. [ 824.560469][T22363] bond1 (unregistering): Released all slaves [ 825.194466][T22394] veth0: entered promiscuous mode [ 825.200466][T22394] batadv_slave_0: entered promiscuous mode [ 825.210246][T22394] netlink: 'syz.3.4254': attribute type 10 has an invalid length. [ 825.227208][T22394] team0: Port device geneve0 added [ 825.233573][T19178] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.259947][T22392] batadv_slave_0: left promiscuous mode [ 825.266133][T22392] veth0: left promiscuous mode [ 825.271129][T19178] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.299132][T19178] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.328686][T19178] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.482097][T22411] __nla_validate_parse: 1 callbacks suppressed [ 825.482117][T22411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4259'. [ 825.685348][T22431] xt_TCPMSS: Only works on TCP SYN packets [ 825.694737][T22431] netlink: 'syz.0.4266': attribute type 10 has an invalid length. [ 825.721148][T22431] team0: Device veth0_macvtap failed to register rx_handler [ 825.967059][T22447] netlink: 'syz.4.4270': attribute type 1 has an invalid length. [ 826.006652][T22450] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 826.034194][T22452] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4270'. [ 826.046918][T22447] 8021q: adding VLAN 0 to HW filter on device bond4 [ 826.065542][T22454] netlink: 'syz.2.4272': attribute type 5 has an invalid length. [ 826.109582][T22447] bond4: (slave gretap1): making interface the new active one [ 826.121838][T22447] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 826.166914][T22460] tipc: Enabled bearer , priority 0 [ 826.175084][T22460] syzkaller0: entered promiscuous mode [ 826.180909][T22460] syzkaller0: entered allmulticast mode [ 826.220274][T22460] tipc: Resetting bearer [ 826.260668][T22460] tipc: Disabling bearer [ 826.411490][T22470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4277'. [ 826.467488][T22479] delete_channel: no stack [ 826.662851][T22490] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4280'. [ 826.735224][T22499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4282'. [ 826.978734][T22516] syz_tun: entered allmulticast mode [ 827.196671][T22529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4287'. [ 827.345364][T22535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4289'. [ 827.399337][T22535] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4289'. [ 827.458037][T22514] syz_tun: left allmulticast mode [ 828.065589][T22589] netlink: 336 bytes leftover after parsing attributes in process `syz.3.4302'. [ 828.216287][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4307'. [ 829.115060][T22605] xt_socket: unknown flags 0x50 [ 829.890504][T22583] ip6_vti0 speed is unknown, defaulting to 1000 [ 830.255519][T22583] wg1 speed is unknown, defaulting to 1000 [ 830.566643][T22650] netlink: set zone limit has 8 unknown bytes [ 830.883066][T22651] syzkaller0: entered promiscuous mode [ 830.889238][T22651] syzkaller0: entered allmulticast mode [ 830.920459][T22653] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.967883][T22657] __nla_validate_parse: 5 callbacks suppressed [ 830.967897][T22657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4323'. [ 831.038115][T22653] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.104622][T22653] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.147727][T22661] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4324'. [ 831.175120][T22661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4324'. [ 831.184663][T22661] hsr_slave_0: left promiscuous mode [ 831.191694][T22661] hsr_slave_1: left promiscuous mode [ 831.217474][T22653] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.495529][T22668] IPVS: set_ctl: invalid protocol: 33 172.30.1.4:20001 [ 833.264156][ T1086] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.308086][ T5838] IPVS: starting estimator thread 0... [ 833.317350][T19178] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.362035][T19178] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.391310][T19180] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.403769][T22683] IPVS: using max 32 ests per chain, 76800 per kthread [ 833.550745][T22695] netlink: 'syz.0.4335': attribute type 3 has an invalid length. [ 833.559641][T22695] netlink: 'syz.0.4335': attribute type 1 has an invalid length. [ 833.569369][T22695] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4335'. [ 833.938345][T22709] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 833.944960][T22720] Cannot find del_set index 4 as target [ 833.968460][T22709] bond2 (unregistering): Released all slaves [ 834.295385][T22741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4346'. [ 834.307137][T22740] netlink: 'syz.1.4347': attribute type 1 has an invalid length. [ 834.307186][T22741] block nbd2: Unsupported socket: should be TCP or UNIX. [ 834.424946][T22751] netlink: 'syz.4.4348': attribute type 12 has an invalid length. [ 834.464693][T22758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.550607][T22766] netlink: 'syz.0.4353': attribute type 1 has an invalid length. [ 834.608056][T22766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 834.621515][T22768] netlink: 'syz.2.4352': attribute type 3 has an invalid length. [ 834.655698][T22768] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4352'. [ 834.714614][T22766] veth3: entered promiscuous mode [ 834.742280][T22766] bond2: (slave veth3): Enslaving as an active interface with an up link [ 834.907481][T22782] ip6_vti0 speed is unknown, defaulting to 1000 [ 835.257057][T22782] wg1 speed is unknown, defaulting to 1000 [ 835.403353][T22816] netlink: 'syz.3.4367': attribute type 1 has an invalid length. [ 835.664703][T22832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4372'. [ 835.682726][T22835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4372'. [ 835.890879][T22839] netlink: 'syz.1.4373': attribute type 2 has an invalid length. [ 835.899938][T22839] netlink: 'syz.1.4373': attribute type 1 has an invalid length. [ 835.932761][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4377'. [ 836.201335][T22861] netlink: 'syz.1.4380': attribute type 2 has an invalid length. [ 836.509261][ T5842] Bluetooth: hci1: command 0x0419 tx timeout [ 836.537478][T22876] ip6_vti0 speed is unknown, defaulting to 1000 [ 836.694953][T22877] ip6_vti0 speed is unknown, defaulting to 1000 [ 836.704648][T22876] wg1 speed is unknown, defaulting to 1000 [ 836.766276][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4387'. [ 836.776296][T22885] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4387'. [ 836.786764][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4387'. [ 836.819424][T22885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4387'. [ 837.000783][T22890] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4389'. [ 837.026974][T22890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4389'. [ 837.040004][T22877] wg1 speed is unknown, defaulting to 1000 [ 837.050623][T22890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4389'. [ 837.075526][T22895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4390'. [ 837.403406][T22906] ip6_vti0 speed is unknown, defaulting to 1000 [ 837.422798][T22902] netlink: 592 bytes leftover after parsing attributes in process `syz.4.4392'. [ 837.631181][T22906] wg1 speed is unknown, defaulting to 1000 [ 838.157106][T22908] ip6_vti0 speed is unknown, defaulting to 1000 [ 838.330913][T22933] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 838.358433][T22938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4400'. [ 838.363448][T22933] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 838.540339][T22943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.811290][T22908] wg1 speed is unknown, defaulting to 1000 [ 839.060525][T22961] bond5: entered promiscuous mode [ 839.084381][T22961] 8021q: adding VLAN 0 to HW filter on device bond5 [ 839.234262][T22970] x_tables: duplicate underflow at hook 3 [ 839.340202][T22981] validate_nla: 3 callbacks suppressed [ 839.340221][T22981] netlink: 'syz.4.4409': attribute type 1 has an invalid length. [ 839.431431][T22981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.880879][T22999] tipc: Enabled bearer , priority 0 [ 839.892592][T22999] syzkaller0: entered promiscuous mode [ 839.903622][T23001] siw: device registration error -23 [ 839.929311][T22999] syzkaller0: entered allmulticast mode [ 840.005456][T23000] tipc: Resetting bearer [ 840.033853][T23000] tipc: Disabling bearer [ 840.323987][T23024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.488346][T23034] ip6gretap2: entered allmulticast mode [ 840.625566][T23039] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 840.733031][T23042] ip6_vti0 speed is unknown, defaulting to 1000 [ 840.922961][T23057] netlink: 'syz.3.4431': attribute type 101 has an invalid length. [ 840.961878][T23057] netlink: 'syz.3.4431': attribute type 7 has an invalid length. [ 841.020397][T23042] wg1 speed is unknown, defaulting to 1000 [ 841.379540][T23074] tipc: Enabled bearer , priority 0 [ 841.421852][T23072] syzkaller0: entered promiscuous mode [ 841.443979][T23072] syzkaller0: entered allmulticast mode [ 841.516378][T23072] tipc: Resetting bearer [ 841.594979][T23072] tipc: Disabling bearer [ 841.845262][T23092] siw: device registration error -23 [ 842.131035][T23112] __nla_validate_parse: 13 callbacks suppressed [ 842.131053][T23112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4445'. [ 842.273552][T23118] syzkaller0: entered promiscuous mode [ 842.279190][T23118] syzkaller0: entered allmulticast mode [ 842.567277][T23135] netlink: 'syz.0.4451': attribute type 1 has an invalid length. [ 842.630848][T23140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4451'. [ 842.631767][T23135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 842.647726][T23133] netlink: 'syz.3.4452': attribute type 2 has an invalid length. [ 842.793051][T23153] netlink: 'syz.0.4457': attribute type 1 has an invalid length. [ 842.933899][T23161] nbd: must specify an index to disconnect [ 843.037503][T23172] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 843.199486][T23183] siw: device registration error -23 [ 844.029034][T23193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4467'. [ 845.358828][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.384902][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.404454][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.422448][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.667910][T23244] ip6_vti0 speed is unknown, defaulting to 1000 [ 845.675736][T23239] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 845.982304][T23258] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 845.987708][T23244] wg1 speed is unknown, defaulting to 1000 [ 845.990630][T23258] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 846.004189][T23258] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 846.012204][T23258] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 846.020090][T23258] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 846.028038][T23258] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 846.034876][T23257] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 846.035958][T23258] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 846.043693][T23257] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 846.051479][T23258] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 846.169339][T23262] set match dimension is over the limit! [ 846.184770][T23263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4485'. [ 846.334939][T23263] ip6_vti0 speed is unknown, defaulting to 1000 [ 846.532746][T23279] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4490'. [ 846.706504][T23284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4491'. [ 846.836193][T23263] wg1 speed is unknown, defaulting to 1000 [ 847.233905][T23299] ip6_vti0 speed is unknown, defaulting to 1000 [ 847.512056][T23307] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 847.722473][T23305] ip6_vti0 speed is unknown, defaulting to 1000 [ 847.725759][T23299] wg1 speed is unknown, defaulting to 1000 [ 848.017174][T23321] veth0_to_team: entered promiscuous mode [ 848.058674][ T10] syz0: Port: 1 Link DOWN [ 848.266975][T23329] netlink: 'syz.4.4501': attribute type 9 has an invalid length. [ 848.282786][T23329] netlink: 'syz.4.4501': attribute type 11 has an invalid length. [ 848.298825][T23329] netlink: 'syz.4.4501': attribute type 12 has an invalid length. [ 848.321665][T23329] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.4501'. [ 848.338973][T23331] netlink: 1228 bytes leftover after parsing attributes in process `syz.2.4502'. [ 848.351803][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4501'. [ 848.435207][T23305] wg1 speed is unknown, defaulting to 1000 [ 848.824415][T23342] ip6_vti0 speed is unknown, defaulting to 1000 [ 849.159468][T23357] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4509'. [ 849.174815][T23357] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.182150][T23357] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.216672][T23360] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4509'. [ 849.233856][T23360] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.241096][T23360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.248700][T23360] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.256026][T23360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.294731][T23357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4509'. [ 849.338565][T23342] wg1 speed is unknown, defaulting to 1000 [ 849.344892][T23360] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4509'. [ 849.345714][T23360] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.361196][T23360] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.822851][T23378] netlink: 181328 bytes leftover after parsing attributes in process `syz.1.4514'. [ 849.895037][T23376] syzkaller0: entered promiscuous mode [ 849.902601][T23376] syzkaller0: entered allmulticast mode [ 849.998658][T23381] netlink: 151808 bytes leftover after parsing attributes in process `syz.3.4517'. [ 850.076647][T23383] netlink: 'syz.4.4518': attribute type 21 has an invalid length. [ 850.090068][T23383] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4518'. [ 850.620418][T23401] netlink: 'syz.3.4523': attribute type 13 has an invalid length. [ 850.924912][T23426] pimreg1: tun_chr_ioctl cmd 1074025677 [ 850.942129][T23426] pimreg1: linktype set to 804 [ 851.077863][T23434] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 851.089282][T23431] pim6reg1: entered allmulticast mode [ 851.096913][T23438] netlink: 'syz.4.4533': attribute type 5 has an invalid length. [ 851.319280][T23448] ip6_vti0 speed is unknown, defaulting to 1000 [ 851.384806][T23453] syzkaller0: entered promiscuous mode [ 851.390322][T23453] syzkaller0: entered allmulticast mode [ 851.756242][T23477] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 851.784239][T23448] wg1 speed is unknown, defaulting to 1000 [ 852.209338][T23495] ip6_vti0 speed is unknown, defaulting to 1000 [ 852.448365][T23517] ip6gre2: entered promiscuous mode [ 852.877751][T23495] wg1 speed is unknown, defaulting to 1000 [ 852.923383][T23542] netlink: 'syz.0.4561': attribute type 36 has an invalid length. [ 853.664434][T23569] netlink: 'syz.0.4564': attribute type 13 has an invalid length. [ 854.118636][T23587] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 854.183477][T23582] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 854.212612][T23587] __nla_validate_parse: 13 callbacks suppressed [ 854.212632][T23587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4567'. [ 854.417187][T23599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4570'. [ 854.447288][T23599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4570'. [ 854.580645][T23604] ip6tnl0: Caught tx_queue_len zero misconfig [ 854.621477][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4571'. [ 854.988388][T23622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4573'. [ 855.016265][T23609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4573'. [ 855.026463][T23609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4573'. [ 855.052124][T23622] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4573'. [ 855.097327][T23626] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 855.417117][T23630] syzkaller0: entered promiscuous mode [ 855.423259][T23630] syzkaller0: entered allmulticast mode [ 857.479156][T23663] netlink: 'syz.3.4587': attribute type 10 has an invalid length. [ 857.488615][T23663] bond0: (slave wlan1): Opening slave failed [ 857.513427][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4589'. [ 857.607805][T23668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4590'. [ 857.838985][T23688] netlink: 'syz.4.4595': attribute type 29 has an invalid length. [ 857.870652][T23688] netlink: 'syz.4.4595': attribute type 29 has an invalid length. [ 857.905754][T23688] unsupported nla_type 58 [ 858.024434][T23692] syzkaller0: entered promiscuous mode [ 858.029954][T23692] syzkaller0: entered allmulticast mode [ 859.983954][T23694] ip6_vti0 speed is unknown, defaulting to 1000 [ 860.317776][T23738] __nla_validate_parse: 2 callbacks suppressed [ 860.317791][T23738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4609'. [ 860.319363][T23736] netlink: 'syz.0.4608': attribute type 1 has an invalid length. [ 860.392053][T23736] 8021q: adding VLAN 0 to HW filter on device bond5 [ 860.418932][T23694] wg1 speed is unknown, defaulting to 1000 [ 860.488580][T23736] veth5: entered promiscuous mode [ 860.515596][T23742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4608'. [ 860.527230][T23736] bond5: (slave veth5): Enslaving as an active interface with a down link [ 860.550232][T23748] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4611'. [ 860.821742][T23761] No such timeout policy "syz0" [ 860.827613][T23761] No such timeout policy "syz0" [ 860.842576][T23761] No such timeout policy "syz0" [ 860.847681][T23761] No such timeout policy "syz0" [ 860.882359][T23761] No such timeout policy "syz0" [ 860.887459][T23761] No such timeout policy "syz0" [ 860.912538][T23761] No such timeout policy "syz0" [ 860.918005][T23761] No such timeout policy "syz0" [ 860.952307][T23761] No such timeout policy "syz0" [ 860.957429][T23761] No such timeout policy "syz0" [ 861.034894][T23766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4615'. [ 861.379801][T23795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4626'. [ 861.605093][T23811] netlink: 'syz.1.4631': attribute type 1 has an invalid length. [ 861.712172][T23811] bond1: entered promiscuous mode [ 861.723132][T23811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 861.884759][T23811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 861.913155][T23811] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 861.930753][T23811] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 861.947015][T23835] xt_TCPMSS: Only works on TCP SYN packets [ 861.957523][T23811] bond1: (slave wireguard0): making interface the new active one [ 861.966759][T23811] wireguard0: entered promiscuous mode [ 861.977354][T23811] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 862.060723][T23839] netlink: 'syz.0.4638': attribute type 10 has an invalid length. [ 862.070166][T23839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4638'. [ 862.128834][T23839] team0: Failed to send options change via netlink (err -105) [ 862.163371][T23839] team0: Port device geneve0 added [ 862.498305][T23857] ip6_vti0 speed is unknown, defaulting to 1000 [ 862.728095][T23857] wg1 speed is unknown, defaulting to 1000 [ 862.953994][T23883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4647'. [ 863.042376][T23887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4650'. [ 863.465596][T23886] ip6_vti0 speed is unknown, defaulting to 1000 [ 863.953223][ T30] audit: type=1800 audit(1765374794.534:11): pid=23917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4657" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1343 res=0 errno=0 [ 864.240817][T23938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4664'. [ 864.253497][T23941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4666'. [ 864.454839][T23947] netlink: 'syz.1.4667': attribute type 13 has an invalid length. [ 864.626406][T23946] ip6_vti0 speed is unknown, defaulting to 1000 [ 864.667361][T23886] wg1 speed is unknown, defaulting to 1000 [ 864.897263][T23946] wg1 speed is unknown, defaulting to 1000 [ 865.294871][T23950] lec:lec_atm_close: lec0: Shut down! [ 865.455598][T23974] __nla_validate_parse: 5 callbacks suppressed [ 865.455618][T23974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4674'. [ 865.730645][T23984] tipc: Enabling of bearer rejected, failed to enable media [ 865.847460][T23992] netlink: 'syz.4.4679': attribute type 1 has an invalid length. [ 865.895444][T23995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4680'. [ 867.289284][T24043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4690'. [ 867.334265][T24043] syzkaller1: entered promiscuous mode [ 867.351840][T24043] syzkaller1: entered allmulticast mode [ 867.646077][T24062] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4695'. [ 867.657051][T24062] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4695'. [ 868.086682][T24086] SET target dimension over the limit! [ 868.338130][T24105] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4707'. [ 868.502963][T24109] netlink: 'syz.2.4709': attribute type 1 has an invalid length. [ 868.517038][T24107] syzkaller0: entered promiscuous mode [ 868.544102][T24112] netlink: 'syz.4.4710': attribute type 1 has an invalid length. [ 868.554595][T24107] syzkaller0: entered allmulticast mode [ 868.600548][T24109] bond1: (slave erspan0): Releasing active interface [ 869.868049][T24140] netlink: 'syz.2.4715': attribute type 26 has an invalid length. [ 870.263902][T24158] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.4719'. [ 870.278706][ T1305] net_ratelimit: 99 callbacks suppressed [ 870.278721][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 871.931762][T24181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4727'. [ 872.036347][T24183] ip6_vti0 speed is unknown, defaulting to 1000 [ 872.155103][T24198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4731'. [ 872.327950][T24205] netlink: 'syz.0.4733': attribute type 4 has an invalid length. [ 873.083123][T24183] wg1 speed is unknown, defaulting to 1000 [ 873.201901][T24231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4739'. [ 873.260844][T24237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4739'. [ 873.287627][T24239] sctp: [Deprecated]: syz.2.4743 (pid 24239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.287627][T24239] Use struct sctp_sack_info instead [ 873.414002][T24231] bond7: entered promiscuous mode [ 873.419168][T24231] bond7: entered allmulticast mode [ 873.425579][T24231] 8021q: adding VLAN 0 to HW filter on device bond7 [ 873.473806][T24237] bond8: entered promiscuous mode [ 873.478970][T24237] bond8: entered allmulticast mode [ 873.485611][T24237] 8021q: adding VLAN 0 to HW filter on device bond8 [ 873.496604][T24251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4744'. [ 873.547952][T24242] batadv0: entered promiscuous mode [ 873.564956][T24255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4747'. [ 873.669143][T24259] netlink: 'syz.4.4747': attribute type 1 has an invalid length. [ 873.707488][T24259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4747'. [ 873.743010][T24240] netlink: 676 bytes leftover after parsing attributes in process `syz.3.4742'. [ 873.752399][T24240] netlink: 676 bytes leftover after parsing attributes in process `syz.3.4742'. [ 873.915098][T24251] ip6_vti0 speed is unknown, defaulting to 1000 [ 874.204350][T24274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4751'. [ 874.222894][T24278] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 874.454779][T24283] ip6_vti0 speed is unknown, defaulting to 1000 [ 874.461193][T24251] wg1 speed is unknown, defaulting to 1000 [ 874.789962][T24281] ip6_vti0 speed is unknown, defaulting to 1000 [ 875.029981][T24283] wg1 speed is unknown, defaulting to 1000 [ 875.128715][T24281] wg1 speed is unknown, defaulting to 1000 [ 875.392638][T24310] tipc: Enabling of bearer rejected, failed to enable media [ 875.788840][T24316] bond6: Removing last ns target with arp_interval on [ 876.542248][T24366] syzkaller0: entered promiscuous mode [ 876.548369][T24366] syzkaller0: entered allmulticast mode [ 876.580555][T24364] vxlan1: entered promiscuous mode [ 876.614618][T24364] vxlan1: entered allmulticast mode [ 876.621198][T19177] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.677708][T24379] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 876.717934][T19177] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.801771][T19177] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.818526][T24388] tipc: Enabled bearer , priority 0 [ 876.834427][T19177] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.869992][T24365] tipc: Resetting bearer [ 876.890571][T24365] tipc: Disabling bearer [ 876.914501][T24391] syzkaller0: entered promiscuous mode [ 876.920261][T24391] syzkaller0: entered allmulticast mode [ 876.948850][T24395] __nla_validate_parse: 7 callbacks suppressed [ 876.948867][T24395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4785'. [ 877.065800][T24408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4787'. [ 877.085793][T24408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4787'. [ 877.305175][T24420] wireguard0: entered promiscuous mode [ 877.311300][T24420] wireguard0: entered allmulticast mode [ 877.345313][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4790'. [ 877.365271][T24431] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4793'. [ 877.385799][T24426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4791'. [ 877.394881][T24426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4791'. [ 877.408168][T24420] team0: Device wireguard0 is of different type [ 877.455082][T24426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4791'. [ 877.465087][T24426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4791'. [ 877.482591][T24436] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.560971][T24436] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.669353][T24436] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.743258][T24436] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.846801][ T6033] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.884943][T19177] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.919737][T19177] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.983578][T19177] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.129784][T24468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4803'. [ 878.430650][T24491] netlink: 'syz.3.4811': attribute type 11 has an invalid length. [ 878.450296][T24491] netlink: 'syz.3.4811': attribute type 4 has an invalid length. [ 878.557976][T24500] netlink: 'syz.3.4813': attribute type 9 has an invalid length. [ 878.869388][T24523] netlink: 'syz.1.4820': attribute type 4 has an invalid length. [ 878.906352][T24523] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.913512][T24523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.922321][T24523] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.929442][T24523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.944839][T24523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 879.278642][T24544] ip6_vti0 speed is unknown, defaulting to 1000 [ 879.574247][T24544] wg1 speed is unknown, defaulting to 1000 [ 879.889179][T24554] infiniband !yz!: set active [ 879.921714][T24554] infiniband !yz!: added team_slave_0 [ 879.928784][T24554] !yz!: rxe_create_cq: returned err = -12 [ 879.936386][T24554] infiniband !yz!: Couldn't create ib_mad CQ [ 879.972119][T24554] infiniband !yz!: Couldn't open port 1 [ 880.006910][T24554] RDS/IB: !yz!: added [ 880.011104][T24554] smc: adding ib device !yz! with port count 1 [ 880.018430][T24554] smc: ib device !yz! port 1 has no pnetid [ 880.386554][T24588] tipc: Started in network mode [ 880.397710][T24588] tipc: Node identity bbbbbb01, cluster identity 4711 [ 880.407402][T24588] tipc: Enabled bearer , priority 10 [ 880.630684][T24608] x_tables: duplicate underflow at hook 2 [ 881.429517][T24634] bond2 (unregistering): Released all slaves [ 881.542934][T16568] tipc: Node number set to 3149642497 [ 882.580708][T24654] __nla_validate_parse: 12 callbacks suppressed [ 882.580729][T24654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4858'. [ 882.885768][T24632] ip6_vti0 speed is unknown, defaulting to 1000 [ 883.092800][T24648] ip6_vti0 speed is unknown, defaulting to 1000 [ 883.094172][T24632] wg1 speed is unknown, defaulting to 1000 [ 883.307419][T24660] ip6_vti0 speed is unknown, defaulting to 1000 [ 883.381801][T17170] Bluetooth: hci3: command 0x0405 tx timeout [ 883.779376][T24672] netlink: 'syz.0.4862': attribute type 3 has an invalid length. [ 883.799445][T24656] ip6_vti0 speed is unknown, defaulting to 1000 [ 883.968846][T24660] wg1 speed is unknown, defaulting to 1000 [ 883.997089][T24656] wg1 speed is unknown, defaulting to 1000 [ 884.002144][T24675] ip6_vti0 speed is unknown, defaulting to 1000 [ 884.004935][T24648] wg1 speed is unknown, defaulting to 1000 [ 884.385976][T24675] wg1 speed is unknown, defaulting to 1000 [ 885.788785][T24686] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 885.795731][T24686] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 886.226204][T24695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4869'. [ 886.261104][T24692] ip6_vti0 speed is unknown, defaulting to 1000 [ 886.321744][T24693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4868'. [ 886.510648][T24705] tipc: Enabled bearer , priority 10 [ 886.725381][T24713] tipc: Invalid UDP bearer configuration [ 886.725439][T24713] tipc: Enabling of bearer rejected, failed to enable media [ 886.788907][T24714] bond9: option primary_reselect: invalid value (6) [ 886.800330][T24714] bond9 (unregistering): Released all slaves [ 886.848803][T24718] tipc: Enabled bearer , priority 0 [ 886.883088][T24692] wg1 speed is unknown, defaulting to 1000 [ 886.914340][T24713] tipc: Disabling bearer [ 887.293202][T24747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4884'. [ 887.318460][T24743] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 887.444587][T24758] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4888'. [ 887.456286][T24758] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4888'. [ 887.463002][T24760] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 887.466272][T24758] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4888'. [ 887.485867][T24759] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4888'. [ 887.496168][T24759] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4888'. [ 887.517333][T24759] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4888'. [ 887.530192][T24758] netlink: 'syz.4.4888': attribute type 1 has an invalid length. [ 887.793311][T18104] tipc: Node number set to 310440652 [ 887.800425][T24769] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 887.883578][T24783] __nla_validate_parse: 4 callbacks suppressed [ 887.883598][T24783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4893'. [ 887.974794][T24786] netlink: 'syz.3.4894': attribute type 3 has an invalid length. [ 887.986702][T24786] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4894'. [ 888.094490][ T30] audit: type=1800 audit(1765374818.694:12): pid=24771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4889" name="cgroup.controllers" dev="tmpfs" ino=1907 res=0 errno=0 [ 888.550349][T24800] syzkaller0: entered promiscuous mode [ 888.582046][T24800] syzkaller0: entered allmulticast mode [ 889.994295][T24818] dummy0: left allmulticast mode [ 890.156107][T24820] geneve2: entered promiscuous mode [ 890.168725][T19175] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.211686][T19175] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 890.237934][T19175] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.263665][T19175] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 890.282835][T19175] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.291231][T19175] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 890.309849][T19175] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.339341][T19175] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 890.374606][T24839] netlink: 'syz.0.4907': attribute type 10 has an invalid length. [ 890.630907][T24860] netlink: 'syz.3.4912': attribute type 26 has an invalid length. [ 890.944720][T24872] veth5: entered promiscuous mode [ 891.538318][T24888] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 891.590990][T24885] ip6_vti0 speed is unknown, defaulting to 1000 [ 891.705016][T24884] svc: failed to register nfsdv3 RPC service (errno 111). [ 891.750111][T24884] svc: failed to register nfsaclv3 RPC service (errno 111). [ 891.823129][T24901] xt_hashlimit: size too large, truncated to 1048576 [ 891.962459][T24906] openvswitch: netlink: Tunnel attr 193 out of range max 16 [ 892.279852][T24899] tipc: Resetting bearer [ 892.327717][T24914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4928'. [ 892.392984][T24899] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.400294][T24899] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.589332][T24831] IPVS: starting estimator thread 0... [ 892.704430][T24921] IPVS: using max 28 ests per chain, 67200 per kthread [ 892.972455][T24899] hsr0: left promiscuous mode [ 893.182505][T24899] geneve2: left promiscuous mode [ 893.187537][T24899] geneve2: left allmulticast mode [ 893.205826][T24899] bridge3: left allmulticast mode [ 893.238469][T24899] bond1: left promiscuous mode [ 893.243537][T24899] wireguard0: left promiscuous mode [ 893.453555][T18552] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 893.466129][T18552] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 893.475256][T18552] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 893.492434][T18552] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 893.501240][T24885] wg1 speed is unknown, defaulting to 1000 [ 893.508691][T18552] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 893.545936][T18552] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 893.563125][T18552] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 893.583286][T18552] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 893.637048][T24936] ip6_vti0 speed is unknown, defaulting to 1000 [ 893.756218][T24944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4936'. [ 893.765252][T24944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4936'. [ 894.143239][T24936] wg1 speed is unknown, defaulting to 1000 [ 894.338048][T24948] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 894.401119][T24966] xt_socket: unknown flags 0xfc [ 894.418396][T24966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4937'. [ 894.538165][T24975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4944'. [ 894.719545][T24984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4946'. [ 894.850038][T24985] syzkaller1: entered promiscuous mode [ 894.871494][T24985] syzkaller1: entered allmulticast mode [ 895.283366][T24996] bond2: option xmit_hash_policy: invalid value (10) [ 895.296113][T24996] bond2 (unregistering): Released all slaves [ 895.499639][T25006] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 895.844285][T25018] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 895.904993][T25018] bond7 (unregistering): Released all slaves [ 896.199734][T25042] tipc: Enabled bearer , priority 0 [ 896.246178][T25035] tipc: Disabling bearer [ 896.264225][T25047] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4964'. [ 896.299863][T25047] team0: Port device bond0 removed [ 896.365650][T25054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4966'. [ 896.435618][T25047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.482996][T25047] bond0 (unregistering): Released all slaves [ 896.597190][T25054] 8021q: adding VLAN 0 to HW filter on device bond6 [ 896.620825][T25076] netlink: 'syz.4.4971': attribute type 21 has an invalid length. [ 896.651469][T25059] 8021q: adding VLAN 0 to HW filter on device bond6 [ 896.659443][T25059] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 896.672480][T25059] bond6: (slave sit2): Error -95 calling set_mac_address [ 896.711034][T25076] netlink: 'syz.4.4971': attribute type 1 has an invalid length. [ 896.719637][T25076] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4971'. [ 896.818447][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4975'. [ 896.833297][T25086] netlink: 'syz.0.4975': attribute type 2 has an invalid length. [ 896.842030][T25086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4975'. [ 896.889146][T25088] macvtap1: entered promiscuous mode [ 896.899491][T25088] dummy0: entered promiscuous mode [ 896.906158][T25088] macvtap1: entered allmulticast mode [ 896.913559][T25088] dummy0: entered allmulticast mode [ 896.936441][T25093] macvtap1: left promiscuous mode [ 896.941521][T25093] dummy0: left promiscuous mode [ 896.965179][T25093] macvtap1: left allmulticast mode [ 896.970440][T25093] dummy0: left allmulticast mode [ 897.036340][T25098] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 897.043887][T25098] syzkaller1: linktype set to 825 [ 897.052655][T25098] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 897.246995][T24832] IPVS: starting estimator thread 0... [ 897.362362][T25113] IPVS: using max 31 ests per chain, 74400 per kthread [ 897.497134][T25128] netlink: 'syz.3.4986': attribute type 58 has an invalid length. [ 897.512891][T25129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 898.020710][T25153] ip6_vti0 speed is unknown, defaulting to 1000 [ 898.236899][T25164] netlink: 'syz.4.4996': attribute type 5 has an invalid length. [ 898.486605][T25169] netlink: 'syz.4.4997': attribute type 1 has an invalid length. [ 898.529818][T25169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 898.683916][T25173] syzkaller0: create flow: hash 1676248438 index 1 [ 898.713253][T19175] syzkaller0: tun_net_xmit 76 [ 898.726534][T19175] syzkaller0: tun_net_xmit 48 [ 898.742687][T16568] syzkaller0: tun_net_xmit 76 [ 898.748694][T25153] wg1 speed is unknown, defaulting to 1000 [ 898.785012][T16568] syzkaller0: tun_net_xmit 76 [ 898.877203][T25170] syzkaller0: delete flow: hash 1676248438 index 1 [ 899.058057][T25186] __nla_validate_parse: 6 callbacks suppressed [ 899.058074][T25186] netlink: 428 bytes leftover after parsing attributes in process `syz.1.5002'. [ 903.747231][T25186] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5002'. [ 903.954605][T25210] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5007'. [ 904.013716][T25217] netlink: 'syz.4.5010': attribute type 2 has an invalid length. [ 904.133792][T25221] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 904.165349][T25221] netlink: 'syz.3.5011': attribute type 1 has an invalid length. [ 904.178261][T25221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5011'. [ 904.200953][T25221] netlink: 'syz.3.5011': attribute type 1 has an invalid length. [ 904.210866][T25221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5011'. [ 904.278698][T25231] netlink: 'syz.1.5014': attribute type 4 has an invalid length. [ 904.279797][T25225] netlink: 'syz.1.5014': attribute type 4 has an invalid length. [ 904.569308][T25253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5017'. [ 904.607727][T25247] ip6tnl2: entered allmulticast mode [ 904.714302][T25234] ip6_vti0 speed is unknown, defaulting to 1000 [ 904.926500][T25265] Cannot find del_set index 2 as target [ 905.059895][T25271] sctp: [Deprecated]: syz.1.5023 (pid 25271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 905.059895][T25271] Use struct sctp_sack_info instead [ 905.099284][T25234] wg1 speed is unknown, defaulting to 1000 [ 905.227050][T25278] tipc: Enabled bearer , priority 0 [ 905.361274][T25283] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5027'. [ 905.367138][T25278] ip6_vti0 speed is unknown, defaulting to 1000 [ 905.786593][T25278] wg1 speed is unknown, defaulting to 1000 [ 905.897280][T25310] netlink: 'syz.3.5036': attribute type 12 has an invalid length. [ 905.975714][T25314] netlink: 'syz.4.5037': attribute type 32 has an invalid length. [ 905.987172][T25319] netlink: 'syz.4.5037': attribute type 1 has an invalid length. [ 905.997297][T25319] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5037'. [ 906.034645][T25274] tipc: Resetting bearer [ 906.112750][T25274] tipc: Disabling bearer [ 906.167751][T25316] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5036'. [ 906.181262][T25317] dummy0: entered promiscuous mode [ 906.188736][T25317] dummy0: entered allmulticast mode [ 906.424677][T25333] veth0_to_team: entered promiscuous mode [ 906.546382][T25340] netlink: 'syz.1.5041': attribute type 13 has an invalid length. [ 907.130488][T25355] vxcan3: entered promiscuous mode [ 907.242446][T25353] netlink: 'syz.3.5046': attribute type 1 has an invalid length. [ 907.315919][T25364] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 907.356497][T25364] syzkaller0: entered promiscuous mode [ 907.371696][T25364] syzkaller0: entered allmulticast mode [ 909.674896][T25393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5054'. [ 909.715545][T25397] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 910.530442][T25460] ip6_vti0 speed is unknown, defaulting to 1000 [ 910.854587][T25478] netlink: 'syz.0.5075': attribute type 41 has an invalid length. [ 910.970117][T25483] netlink: 'syz.3.5076': attribute type 1 has an invalid length. [ 911.076673][T25483] bond2: entered promiscuous mode [ 911.096114][T25483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 911.164828][T25498] tap0: tun_chr_ioctl cmd 1074025681 [ 911.171113][T25460] wg1 speed is unknown, defaulting to 1000 [ 911.193351][T25485] vlan0: entered promiscuous mode [ 911.214248][T25483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5076'. [ 911.255803][T25483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5076'. [ 911.306897][T25488] bond2: (slave bridge3): making interface the new active one [ 911.361645][T25488] bridge3: entered promiscuous mode [ 911.402843][T25488] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 911.419742][T25505] tipc: Enabling of bearer rejected, failed to enable media [ 911.612612][T25495] delete_channel: no stack [ 912.038008][T25528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5089'. [ 912.157106][T25544] macsec0: entered promiscuous mode [ 912.176740][T25544] macsec0: entered allmulticast mode [ 912.294084][T25548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5094'. [ 912.327549][T25548] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5094'. [ 912.368515][T25549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5093'. [ 912.402082][T25546] tipc: Enabled bearer , priority 0 [ 912.560944][T25555] syzkaller0: entered promiscuous mode [ 912.577961][T25555] syzkaller0: entered allmulticast mode [ 912.588730][T25555] tipc: Resetting bearer [ 912.772654][T25571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 912.834801][ T6033] tipc: Resetting bearer [ 912.842011][T25545] tipc: Resetting bearer [ 914.201106][T25603] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5107'. [ 914.327102][T25605] netlink: 'syz.0.5107': attribute type 1 has an invalid length. [ 914.335213][T25605] netlink: 'syz.0.5107': attribute type 2 has an invalid length. [ 915.255756][T25545] tipc: Disabling bearer [ 915.337984][T25590] ip6_vti0 speed is unknown, defaulting to 1000 [ 915.607086][T25624] netlink: 'syz.1.5113': attribute type 3 has an invalid length. [ 915.621258][T25619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5113'. [ 915.638088][T25619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5113'. [ 915.671943][T25619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5113'. [ 915.706239][T25631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5112'. [ 915.739339][T25614] ip6_vti0 speed is unknown, defaulting to 1000 [ 915.747949][T25590] wg1 speed is unknown, defaulting to 1000 [ 915.845309][T25636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5115'. [ 916.296439][T25614] wg1 speed is unknown, defaulting to 1000 [ 916.777270][T25668] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5124'. [ 916.992657][T25666] tipc: Enabled bearer , priority 0 [ 917.008184][T25669] syzkaller0: entered promiscuous mode [ 917.010483][T25679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5127'. [ 917.016448][T25669] syzkaller0: entered allmulticast mode [ 917.199950][T25677] tipc: Resetting bearer [ 917.215543][T25687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5129'. [ 917.273752][T25666] macvtap1: entered promiscuous mode [ 917.289426][T25666] vlan0: entered promiscuous mode [ 917.323504][T25692] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5130'. [ 917.351196][T25666] vlan0: left promiscuous mode [ 917.357323][T25692] netlink: 'syz.1.5130': attribute type 9 has an invalid length. [ 917.395052][T25692] netlink: 'syz.1.5130': attribute type 10 has an invalid length. [ 917.554891][T25694] erspan1: entered promiscuous mode [ 917.560709][T25665] tipc: Resetting bearer [ 917.601416][T25665] tipc: Disabling bearer [ 917.631234][T25682] ip6_vti0 speed is unknown, defaulting to 1000 [ 917.819079][T25705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5133'. [ 918.128287][T25682] wg1 speed is unknown, defaulting to 1000 [ 918.202733][T25728] tipc: Enabled bearer , priority 0 [ 918.218849][T25726] syzkaller0: entered promiscuous mode [ 918.231696][T25726] syzkaller0: entered allmulticast mode [ 918.242570][T25730] netlink: 'syz.2.5140': attribute type 5 has an invalid length. [ 918.321578][T25728] tipc: Resetting bearer [ 918.406060][T25726] tipc: Resetting bearer [ 918.450649][T25726] tipc: Disabling bearer [ 920.673201][T25759] syzkaller1: entered promiscuous mode [ 920.683778][T25764] netlink: 'syz.0.5149': attribute type 8 has an invalid length. [ 920.685789][T25759] syzkaller1: entered allmulticast mode [ 920.977352][T25772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.986781][T25773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.993500][T25771] __nla_validate_parse: 4 callbacks suppressed [ 920.993517][T25771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5152'. [ 921.229226][T25771] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5152'. [ 921.264624][T25768] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5151'. [ 921.296399][T25768] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5151'. [ 921.559501][T25781] netlink: 'syz.2.5154': attribute type 8 has an invalid length. [ 921.643206][T25784] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5155'. [ 921.828165][T25791] sctp: [Deprecated]: syz.3.5156 (pid 25791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 921.828165][T25791] Use struct sctp_sack_info instead [ 921.846876][T25792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5159'. [ 922.277375][T25823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5167'. [ 922.318807][T25823] syzkaller1: entered promiscuous mode [ 922.333030][T25823] syzkaller1: entered allmulticast mode [ 922.355855][T25826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5166'. [ 922.358615][T25825] ip6_vti0 speed is unknown, defaulting to 1000 [ 922.480964][T25831] netlink: 'syz.2.5169': attribute type 1 has an invalid length. [ 922.537438][T25833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5169'. [ 922.859946][T25823] ip6_vti0 speed is unknown, defaulting to 1000 [ 922.869772][T25825] wg1 speed is unknown, defaulting to 1000 [ 923.062469][T17170] Bluetooth: hci3: command 0x0405 tx timeout [ 923.315980][T25859] netlink: zone id is out of range [ 923.332304][T25859] netlink: zone id is out of range [ 923.337758][T25859] netlink: zone id is out of range [ 923.358374][T25859] netlink: zone id is out of range [ 923.359916][T25823] wg1 speed is unknown, defaulting to 1000 [ 923.371420][T25858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5177'. [ 923.382458][T25859] netlink: zone id is out of range [ 923.387618][T25859] netlink: zone id is out of range [ 923.418562][T25859] netlink: zone id is out of range [ 923.418687][T25860] bridge0: entered allmulticast mode [ 923.435616][T25859] netlink: zone id is out of range [ 923.663388][T25869] syzkaller0: entered promiscuous mode [ 923.669097][T25869] syzkaller0: entered allmulticast mode [ 923.730778][T25867] macvlan0: entered allmulticast mode [ 923.821455][T25867] syzkaller0: entered promiscuous mode [ 923.827755][T25867] syzkaller0: entered allmulticast mode [ 924.727459][T25907] netlink: 'syz.2.5193': attribute type 10 has an invalid length. [ 924.768807][T25907] team_slave_0: left promiscuous mode [ 924.775309][T25907] team_slave_1: left promiscuous mode [ 924.782490][T25907] geneve0: left promiscuous mode [ 925.151442][T25939] lo: Caught tx_queue_len zero misconfig [ 925.440456][T25954] netlink: 'syz.2.5206': attribute type 21 has an invalid length. [ 925.548326][T25959] SET target dimension over the limit! [ 925.689079][T25967] sch_tbf: burst 274 is lower than device lo mtu (11337746) ! [ 925.997924][T25983] ip6_vti0 speed is unknown, defaulting to 1000 [ 926.512503][T26001] __nla_validate_parse: 8 callbacks suppressed [ 926.512521][T26001] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5218'. [ 926.547481][T26001] team0: No ports can be present during mode change [ 926.609538][T25983] wg1 speed is unknown, defaulting to 1000 [ 926.986826][T26016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5223'. [ 927.075589][T26019] IPv6: Can't replace route, no match found [ 927.669070][T26033] syzkaller0: entered promiscuous mode [ 927.687310][T26033] syzkaller0: entered allmulticast mode [ 927.910873][T26037] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5230'. [ 927.952210][T26037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5230'. [ 928.048404][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5231'. [ 928.080692][T26040] !: renamed from dummy0 [ 928.716583][T26074] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5239'. [ 928.804349][T26075] netlink: 'syz.4.5239': attribute type 4 has an invalid length. [ 928.833858][T26080] netlink: 'syz.2.5241': attribute type 6 has an invalid length. [ 928.859657][T26080] netlink: 'syz.2.5241': attribute type 6 has an invalid length. [ 928.863467][T26001] net_ratelimit: 5 callbacks suppressed [ 928.863487][T26001] Set syz1 is full, maxelem 65536 reached [ 928.930724][T26084] Cannot find set identified by id 3 to match [ 929.080626][T26088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5243'. [ 929.138460][T26091] xfrm0: entered allmulticast mode [ 929.247198][T26100] netlink: 'syz.2.5245': attribute type 4 has an invalid length. [ 929.340834][T26098] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5245'. [ 929.458222][T26113] SET target dimension over the limit! [ 929.499614][T26113] geneve4: entered promiscuous mode [ 929.520827][T18552] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 929.561299][T18552] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 929.636843][T18552] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 929.645651][T18552] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 929.783012][T26137] syzkaller0: entered promiscuous mode [ 929.788512][T26137] syzkaller0: entered allmulticast mode [ 930.264438][T26159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5261'. [ 930.730254][T26181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5267'. [ 930.751693][T26183] ip6_vti0 speed is unknown, defaulting to 1000 [ 930.837483][T26192] nbd: device at index 64 is going down [ 931.389803][T26183] wg1 speed is unknown, defaulting to 1000 [ 931.705523][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.830664][T26258] __nla_validate_parse: 2 callbacks suppressed [ 931.830681][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5286'. [ 932.434083][T26295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5296'. [ 932.461798][ T3515] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.462585][T26295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5296'. [ 932.470155][ T3515] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.538435][ T3515] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.575025][ T3515] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.688021][T26310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5300'. [ 932.699800][T26307] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.799142][T26308] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 932.806704][T26307] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.832368][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 932.864412][T26315] netlink: 'syz.2.5301': attribute type 7 has an invalid length. [ 932.874517][T26315] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5301'. [ 932.875511][T26307] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.037430][T26307] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.132629][ T1086] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.146545][T26333] tipc: MTU too low for tipc bearer [ 933.148488][T26332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5304'. [ 933.167352][ T1086] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.187586][T26332] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5304'. [ 933.198823][ T1086] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.241137][ T1086] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.334773][T26344] netlink: 'syz.2.5308': attribute type 4 has an invalid length. [ 933.343979][T26344] netlink: 'syz.2.5308': attribute type 1 has an invalid length. [ 933.355768][T26344] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5308'. [ 933.508387][T26350] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5310'. [ 933.653277][T26356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5312'. [ 933.843312][T26345] ip6_vti0 speed is unknown, defaulting to 1000 [ 933.910374][T26375] netlink: 'syz.4.5317': attribute type 1 has an invalid length. [ 933.974086][T26375] 8021q: adding VLAN 0 to HW filter on device bond9 [ 934.347549][T26391] ip6_vti0 speed is unknown, defaulting to 1000 [ 934.349071][T26345] wg1 speed is unknown, defaulting to 1000 [ 934.870412][T26406] tipc: Enabled bearer , priority 0 [ 934.919174][T26406] syzkaller0: entered promiscuous mode [ 934.930479][T26406] syzkaller0: entered allmulticast mode [ 934.943469][T26398] ip6_vti0 speed is unknown, defaulting to 1000 [ 934.970345][T26405] tipc: Resetting bearer [ 936.707633][T26405] tipc: Disabling bearer [ 936.736651][T26402] ip6_vti0 speed is unknown, defaulting to 1000 [ 936.852988][T26411] __nla_validate_parse: 4 callbacks suppressed [ 936.853008][T26411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5328'. [ 936.858356][T26410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5327'. [ 936.872114][T26412] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5328'. [ 936.881021][T26413] bond0: (slave sit0): Error: Device type is different from other slaves [ 936.963862][T26402] wg1 speed is unknown, defaulting to 1000 [ 936.984840][T26398] wg1 speed is unknown, defaulting to 1000 [ 937.039923][T26418] ip6_vti0 speed is unknown, defaulting to 1000 [ 937.060993][T26391] wg1 speed is unknown, defaulting to 1000 [ 937.462070][T26434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5334'. [ 937.502591][T26434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5334'. [ 937.540910][T26418] wg1 speed is unknown, defaulting to 1000 [ 937.669835][T26437] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 937.903126][T26442] netlink: 'syz.2.5336': attribute type 2 has an invalid length. [ 938.178506][T26447] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.199412][T26447] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.209347][T26447] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 938.284698][T26447] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.296089][T26447] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.306165][T26447] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 938.455592][T26447] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.466070][T26447] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.511295][T26447] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 938.732894][T26453] openvswitch: netlink: Flow key attribute not present in set flow. [ 938.769070][T26447] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.779263][T26447] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.792277][T26447] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 939.073432][ T1086] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.094348][ T1086] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 939.112184][ T1086] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 939.361041][ T1086] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.378011][ T1086] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 939.388409][ T1086] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 939.508679][ T2914] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.527143][ T2914] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 939.535926][ T2914] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 939.616950][T26463] syzkaller0: entered promiscuous mode [ 939.622741][T26463] syzkaller0: entered allmulticast mode [ 939.629473][T26323] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.639498][T26323] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 939.649582][T26323] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 940.049589][T26474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5346'. [ 940.070338][T26474] tipc: Enabled bearer , priority 0 [ 940.079007][T26474] syzkaller0: entered promiscuous mode [ 940.095750][T26474] syzkaller0: entered allmulticast mode [ 940.140225][T26474] tipc: Resetting bearer [ 940.193700][T26474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5346'. [ 940.443344][T26480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5348'. [ 940.518338][T26473] tipc: Resetting bearer [ 940.586783][T26473] tipc: Disabling bearer [ 940.710807][T26492] ip6_vti0 speed is unknown, defaulting to 1000 [ 940.761193][T26491] netlink: 'syz.0.5350': attribute type 1 has an invalid length. [ 940.780541][T26491] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5350'. [ 940.811150][T26502] netlink: 'syz.4.5355': attribute type 10 has an invalid length. [ 940.832860][T26502] netlink: 'syz.4.5355': attribute type 10 has an invalid length. [ 941.295975][T26492] wg1 speed is unknown, defaulting to 1000 [ 941.444160][T26513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5358'. [ 941.787548][T26523] ip6t_srh: unknown srh match flags 4000 [ 942.357935][T26542] team0: Device gtp1 is up. Set it down before adding it as a team port [ 942.484071][T26538] ip6_vti0 speed is unknown, defaulting to 1000 [ 942.638107][T26547] sctp: [Deprecated]: syz.3.5367 (pid 26547) Use of int in maxseg socket option. [ 942.638107][T26547] Use struct sctp_assoc_value instead [ 943.080481][T26549] ip6_vti0 speed is unknown, defaulting to 1000 [ 943.092601][T26538] wg1 speed is unknown, defaulting to 1000 [ 943.800405][T26549] wg1 speed is unknown, defaulting to 1000 [ 943.894672][T26571] syzkaller0: entered promiscuous mode [ 943.908050][T26571] syzkaller0: entered allmulticast mode [ 944.909446][T26592] ip6_vti0 speed is unknown, defaulting to 1000 [ 944.987824][T26594] syzkaller0: entered promiscuous mode [ 944.993820][T26594] syzkaller0: entered allmulticast mode [ 945.517366][T26592] wg1 speed is unknown, defaulting to 1000 [ 945.786080][T26602] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5381'. [ 945.829990][T26605] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5382'. [ 945.922674][T26602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.933231][T26602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.942743][T26602] bond0 (unregistering): Released all slaves [ 946.260307][T26621] vxcan1: entered allmulticast mode [ 946.407344][T26626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5387'. [ 946.442560][T26627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5387'. [ 946.597343][T26637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5391'. [ 946.749889][T26645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 946.805423][T26646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5391'. [ 946.903619][T26651] erspan0: left allmulticast mode [ 946.918328][T26651] team_slave_0: entered promiscuous mode [ 946.924429][T26651] team_slave_1: entered promiscuous mode [ 946.930088][T26651] geneve0: entered promiscuous mode [ 946.937588][T26651] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.946775][T26651] dummy0: left promiscuous mode [ 946.953469][T26651] dummy0: left allmulticast mode [ 946.959741][T26651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 947.092036][T26661] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5399'. [ 947.176525][T26671] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 947.187433][T26672] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 947.289986][T26675] xfrm0: left allmulticast mode [ 947.783692][T26677] ip6_vti0 speed is unknown, defaulting to 1000 [ 947.831415][T26678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 947.914411][T26677] wg1 speed is unknown, defaulting to 1000 [ 948.119513][T26685] ip6_vti0 speed is unknown, defaulting to 1000 [ 948.216571][T26690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5408'. [ 948.425920][T26695] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 948.454111][T26695] bond0 (unregistering): Released all slaves [ 948.491084][T26692] ip6_vti0 speed is unknown, defaulting to 1000 [ 948.492853][T26685] wg1 speed is unknown, defaulting to 1000 [ 948.762737][T26705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5413'. [ 948.824045][T26705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5413'. [ 949.108763][T26701] ip6_vti0 speed is unknown, defaulting to 1000 [ 949.135848][T26716] tipc: Enabling of bearer rejected, failed to enable media [ 949.499388][T26692] wg1 speed is unknown, defaulting to 1000 [ 949.634435][T26701] wg1 speed is unknown, defaulting to 1000 [ 949.673320][T26729] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 950.031959][T26746] netlink: 'syz.1.5425': attribute type 178 has an invalid length. [ 950.112580][T26747] netlink: 'syz.1.5425': attribute type 178 has an invalid length. [ 952.853061][T26783] __nla_validate_parse: 3 callbacks suppressed [ 952.853078][T26783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5434'. [ 952.946825][T26783] syzkaller0: entered promiscuous mode [ 952.952888][T26783] syzkaller0: entered allmulticast mode [ 953.079050][T26791] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5436'. [ 953.879084][T26813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5443'. [ 954.929163][T26874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5459'. [ 955.099526][T26883] netlink: 'syz.3.5461': attribute type 1 has an invalid length. [ 955.126224][T26883] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5461'. [ 955.135016][T26885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5462'. [ 955.171162][T26885] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5462'. [ 955.215438][T26891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5464'. [ 955.292967][T26896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5462'. [ 955.322752][T26898] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5466'. [ 955.422044][T26894] ip6_vti0 speed is unknown, defaulting to 1000 [ 955.660305][T26917] vlan3: entered promiscuous mode [ 955.681762][T26917] syz_tun: entered promiscuous mode [ 956.063830][T26941] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 956.081929][T26937] syzkaller0: entered promiscuous mode [ 956.087438][T26937] syzkaller0: entered allmulticast mode [ 956.107873][T26941] netlink: 'syz.3.5479': attribute type 1 has an invalid length. [ 956.119200][T26894] wg1 speed is unknown, defaulting to 1000 [ 956.195741][T26953] nbd: must specify a size in bytes for the device [ 956.852486][T26973] tipc: Failed to remove unknown binding: 66,1,1/0:38456421/38456423 [ 956.893603][T26973] tipc: Failed to remove unknown binding: 66,1,1/0:38456421/38456423 [ 956.959310][T26981] ip6_vti0 speed is unknown, defaulting to 1000 [ 957.374832][T26981] wg1 speed is unknown, defaulting to 1000 [ 957.432998][T26995] syzkaller0: entered promiscuous mode [ 957.442369][T26995] syzkaller0: entered allmulticast mode [ 957.477457][T27000] macsec1: entered allmulticast mode [ 957.582708][ T30] audit: type=1107 audit(1765374888.174:13): pid=26994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 957.796065][T27019] veth1_to_batadv: entered promiscuous mode [ 957.848925][T27021] tipc: Enabled bearer , priority 0 [ 957.867656][T27021] syzkaller0: entered promiscuous mode [ 957.879858][T27021] syzkaller0: entered allmulticast mode [ 957.905501][T27028] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 957.926013][T27029] netlink: 'syz.3.5499': attribute type 4 has an invalid length. [ 957.944895][T27021] netlink: 'syz.0.5500': attribute type 15 has an invalid length. [ 957.956426][T27021] __nla_validate_parse: 5 callbacks suppressed [ 957.956445][T27021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5500'. [ 960.066668][T27038] tipc: Resetting bearer [ 960.085082][T27020] tipc: Resetting bearer [ 960.101149][T27020] tipc: Disabling bearer [ 960.223132][T27053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5508'. [ 960.762999][T27076] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 960.992635][T27081] netlink: 'syz.3.5516': attribute type 12 has an invalid length. [ 960.993767][T27087] SET target dimension over the limit! [ 961.047824][T27091] IPVS: Error connecting to the multicast addr [ 961.183772][T27103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5524'. [ 961.198652][T27103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5524'. [ 961.415005][T27104] ip6_vti0 speed is unknown, defaulting to 1000 [ 961.425747][T27123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5527'. [ 961.425976][T27121] syzkaller0: entered promiscuous mode [ 961.440817][T27121] syzkaller0: entered allmulticast mode [ 961.821150][T27139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5531'. [ 961.910220][T17170] Bluetooth: hci3: link tx timeout [ 961.915823][T17170] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 961.955995][T27142] bond0: Removing last ns target with arp_interval on [ 962.074614][T27104] wg1 speed is unknown, defaulting to 1000 [ 962.082577][T27139] ip6_vti0 speed is unknown, defaulting to 1000 [ 962.305645][T27094] x_tables: duplicate underflow at hook 3 [ 962.403595][T27154] tipc: Enabled bearer , priority 0 [ 962.418942][T27154] syzkaller0: entered promiscuous mode [ 962.432074][T27154] syzkaller0: entered allmulticast mode [ 962.607044][T27160] tipc: Resetting bearer [ 962.678219][T27152] tipc: Resetting bearer [ 962.752394][T27152] tipc: Disabling bearer [ 962.767895][T27141] ip6_vti0 speed is unknown, defaulting to 1000 [ 962.808669][T27139] wg1 speed is unknown, defaulting to 1000 [ 963.460621][T27156] ip6_vti0 speed is unknown, defaulting to 1000 [ 963.786298][T27190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5542'. [ 963.921037][T27141] wg1 speed is unknown, defaulting to 1000 [ 963.942158][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 964.055903][T19452] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 964.067831][T19452] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 964.076259][T19452] CPU: 1 UID: 0 PID: 19452 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 964.085934][T19452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 964.096084][T19452] RIP: 0010:klist_del+0x49/0x110 [ 964.101172][T19452] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 69 e7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 69 e7 f6 4d 8b 7e 58 4c 89 f7 e8 9f 14 [ 964.120788][T19452] RSP: 0018:ffffc9000bbb7768 EFLAGS: 00010202 [ 964.126865][T19452] RAX: 000000000000000b RBX: ffff88805656a460 RCX: ffff88804bb03d00 [ 964.134850][T19452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 964.142816][T19452] RBP: ffffc9000bbb7890 R08: ffff88804b7cfc33 R09: 1ffff110096f9f86 [ 964.150775][T19452] R10: dffffc0000000000 R11: ffffed10096f9f87 R12: dffffc0000000000 [ 964.158746][T19452] R13: 1ffff1100acad48c R14: 0000000000000000 R15: ffff888033d90758 [ 964.166708][T19452] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 964.175635][T19452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.182212][T19452] CR2: 000000110c34070b CR3: 00000000793de000 CR4: 00000000003526f0 [ 964.190174][T19452] Call Trace: [ 964.193448][T19452] [ 964.196368][T19452] device_del+0x280/0x8e0 [ 964.200812][T19452] ? _raw_spin_unlock_irq+0x2e/0x50 [ 964.206092][T19452] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 964.212215][T19452] ? __pfx_device_del+0x10/0x10 [ 964.217070][T19452] ? netdev_unregister_kobject+0x344/0x450 [ 964.222976][T19452] unregister_netdevice_many_notify+0x1da6/0x2310 [ 964.229561][T19452] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 964.236319][T19452] ? rtnl_net_dev_lock+0x36/0x2f0 [ 964.241412][T19452] ? rtnl_net_dev_lock+0x36/0x2f0 [ 964.246426][T19452] unregister_netdev+0x157/0x1f0 [ 964.251352][T19452] ? __pfx_unregister_netdev+0x10/0x10 [ 964.256804][T19452] ? remove_wait_queue+0x33/0x120 [ 964.261847][T19452] bnep_session+0x294d/0x2b40 [ 964.266606][T19452] ? rcu_is_watching+0x15/0xb0 [ 964.271356][T19452] ? trace_sched_exit_tp+0x36/0xf0 [ 964.276462][T19452] ? __schedule+0x14d2/0x5000 [ 964.281135][T19452] ? __pfx_bnep_session+0x10/0x10 [ 964.286153][T19452] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 964.292209][T19452] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 964.298533][T19452] ? __pfx_woken_wake_function+0x10/0x10 [ 964.304158][T19452] ? __kthread_parkme+0x7b/0x200 [ 964.309080][T19452] ? __kthread_parkme+0x1a1/0x200 [ 964.314091][T19452] kthread+0x711/0x8a0 [ 964.318148][T19452] ? __pfx_bnep_session+0x10/0x10 [ 964.323171][T19452] ? __pfx_kthread+0x10/0x10 [ 964.327755][T19452] ? _raw_spin_unlock_irq+0x23/0x50 [ 964.332940][T19452] ? lockdep_hardirqs_on+0x98/0x140 [ 964.338130][T19452] ? __pfx_kthread+0x10/0x10 [ 964.342711][T19452] ret_from_fork+0x599/0xb30 [ 964.347316][T19452] ? __pfx_ret_from_fork+0x10/0x10 [ 964.352420][T19452] ? __switch_to_asm+0x39/0x70 [ 964.357180][T19452] ? __switch_to_asm+0x33/0x70 [ 964.361940][T19452] ? __pfx_kthread+0x10/0x10 [ 964.366518][T19452] ret_from_fork_asm+0x1a/0x30 [ 964.371275][T19452] [ 964.374290][T19452] Modules linked in: [ 964.380144][T19452] ---[ end trace 0000000000000000 ]--- [ 964.389862][T19452] RIP: 0010:klist_del+0x49/0x110 [ 964.395470][T19452] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 69 e7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 69 e7 f6 4d 8b 7e 58 4c 89 f7 e8 9f 14 [ 964.415717][T19452] RSP: 0018:ffffc9000bbb7768 EFLAGS: 00010202 [ 964.422317][T19452] RAX: 000000000000000b RBX: ffff88805656a460 RCX: ffff88804bb03d00 [ 964.430724][T19452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 964.439239][T19452] RBP: ffffc9000bbb7890 R08: ffff88804b7cfc33 R09: 1ffff110096f9f86 [ 964.448420][T19452] R10: dffffc0000000000 R11: ffffed10096f9f87 R12: dffffc0000000000 [ 964.456912][T19452] R13: 1ffff1100acad48c R14: 0000000000000000 R15: ffff888033d90758 [ 964.465448][T19452] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 964.474851][T19452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.481461][T19452] CR2: 00007f55df290f98 CR3: 0000000058d58000 CR4: 00000000003526f0 [ 964.489807][T19452] Kernel panic - not syncing: Fatal exception [ 964.496248][T19452] Kernel Offset: disabled [ 964.500564][T19452] Rebooting in 86400 seconds..