last executing test programs: 12.638120146s ago: executing program 3 (id=3153): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="0900fcdbdf256b0000000800030000000000", @ANYRES32=r2, @ANYBLOB="0a000600080211f6ff000000"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x24004844) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x33f2cdd6a7348f91}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 12.471122002s ago: executing program 3 (id=3155): unshare(0x20000400) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0bac0f00"}, @typed={0x4, 0x19}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 12.213271638s ago: executing program 3 (id=3158): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'syz_tun\x00', @local}) 11.881053889s ago: executing program 3 (id=3161): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={0xffffffffffffffff, &(0x7f0000000340)="e2a2b8a7e55b8806b9993f7651fce9cd6a0f6c292ec112ad3bcfc13165db5f0c9c73e9228808a3058bdb57f65b842aa2083bfeffdf1c1f111a78bec3ef7abd", 0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async, rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x800}) (rerun: 32) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "8cf0fb03dc15d356998a00"}]}}}}}}}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$unix(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x38}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38, 0x8000}}], 0x1, 0x40841) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000007c0)=@req={0xff, 0xc, 0x7, 0xfffffff7}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) (async) r8 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000400)=r7, 0x4) (async) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000052000100000000000000ff080200000008040100", @ANYRES64=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) 11.739214668s ago: executing program 3 (id=3163): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000300)={0x0, 0x36, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="070000000000000027402a293c7d66ee210061610020ed3d47723c78055c470fd5165b383edec8c3875a597fa1e186e7ba9f94610000000000000000c91ebe19862059ee3c46be1000000000000000f232e130f5aad1", @ANYRES16=r0, @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002e02010026bdf000fcdbdf250400000008000c00", @ANYRES32=0x0, @ANYBLOB="48e6457347916c443d1d4346fd13a704f29261cd05d78bdd74673906822fae138c815b578db4d697809c8377c45ecfa73206485ec0731a09186dc9cedea6aa79061effcc36110ef69ee11c5f8a57d9ad506b04f6141ec732393addf530c65f9cdf0aa870b12cfac8e9a18e22f7948fff76d251f157ee435c7546d4d2445ff511e0aa4cca63570128e081050000007c68e81afd24dd3820cc1123ade01f3100e86fbf8f3578ab4ff302438073ea7a5ac4989d9a61568d2ffe"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0xf7, 0x2, 0x35, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x0, 0x7}, 0x1, 0x9ccd, 0x1941}}]}}]}, 0x60}}, 0x4000010) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000300)={0x0, 0x36, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="070000000000000027402a293c7d66ee210061610020ed3d47723c78055c470fd5165b383edec8c3875a597fa1e186e7ba9f94610000000000000000c91ebe19862059ee3c46be1000000000000000f232e130f5aad1", @ANYRES16=r0, @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002e02010026bdf000fcdbdf250400000008000c00", @ANYRES32=0x0, @ANYBLOB="48e6457347916c443d1d4346fd13a704f29261cd05d78bdd74673906822fae138c815b578db4d697809c8377c45ecfa73206485ec0731a09186dc9cedea6aa79061effcc36110ef69ee11c5f8a57d9ad506b04f6141ec732393addf530c65f9cdf0aa870b12cfac8e9a18e22f7948fff76d251f157ee435c7546d4d2445ff511e0aa4cca63570128e081050000007c68e81afd24dd3820cc1123ade01f3100e86fbf8f3578ab4ff302438073ea7a5ac4989d9a61568d2ffe"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0xf7, 0x2, 0x35, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x0, 0x7}, 0x1, 0x9ccd, 0x1941}}]}}]}, 0x60}}, 0x4000010) (async) 11.541963787s ago: executing program 3 (id=3164): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)='b', 0x1) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r2, 0x1) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000500)={"71eaa9c3af7a29378ce241234a7133b5", 0x0, 0x0, {0x3ff, 0x5}, {0x5, 0x7ff}, 0x9, [0x5, 0xd74, 0x3, 0x1, 0x0, 0x7fffffff, 0x9, 0x7fffffffffffffff, 0x1df8, 0x8, 0x7, 0x1c000000, 0x1, 0x1, 0x8, 0x8000000000000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000bc0)={{r6}, r7, 0x1a, @inherit={0x60, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000000300000000000000bd000000000000000100008000000000040000000000000000800000000000eed60000000000000003000000000000000200000000000000060000000000000005000000000000000300000000000000"]}, @devid}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000280)={0x86, 0x4, 0x8000000000000000, 0x1, 0x4, 0xe4, 0xfff}, &(0x7f0000000300)={0x2, 0x22, 0x8000000000000001, 0x9, 0x1, 0x6, 0xfffffffffffffffc, 0x3}, &(0x7f00000003c0)={0xfffffffffffff001, 0x2, 0x3, 0x1, 0x3, 0x0, 0x80000001, 0x7}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={&(0x7f0000000440)={[0x9b6f]}, 0x8}) 4.542686082s ago: executing program 2 (id=3201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x20, 0x140b, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) 4.479161464s ago: executing program 0 (id=3202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad910000000000003701ae56f8ffffffb702000008000000b703000000000000240900000600ffff5c03000000000000b503eeb86e49c200000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x39}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000011c0)=ANY=[@ANYRES8=r2, @ANYRES16=r3, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028005001600020000007d6f021038000000050047000100e7a80000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0x7}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24020400) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001000)={'wlan0\x00'}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0xa, 0x3, &(0x7f0000001100)=ANY=[@ANYRES32=r3], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="03000000", @ANYRES16=r8, @ANYBLOB="20002cbd7000fedbdf250800000008003200050000000500370001000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, 0x0) 4.406051759s ago: executing program 1 (id=3203): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4004010) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e25, 0x4, @loopback, 0x401}, 0x1c) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x82d01eb6cffaf99c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000008) recvmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='GPL\x00'}, 0x94) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 4.388960501s ago: executing program 2 (id=3205): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@gettaction={0x34, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, r1, 0x2f, 0x10}, 0x20) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x140a, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x3}]}, 0x7}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) 4.189992281s ago: executing program 1 (id=3207): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000022bf00000000000005000000181100007870cc8efbbac745dabd5dc3629f0f0d970fc5a9a4ed2c3282", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc8, &(0x7f0000000040)=""/200, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2a}, 0x94) sendmmsg$inet6(r1, &(0x7f0000000700), 0x0, 0x0) shutdown(r1, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r4) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000005000)=ANY=[@ANYBLOB="88012f16", @ANYRES16=r5, @ANYBLOB="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"], 0x188}}, 0x8084) r6 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000004e40)=ANY=[@ANYBLOB="27637275201ea7d8385b39a086f4434768e950e791214f1832f252a193fa80a9df08f23ca4fd3f4cf2e45e1864f7de2a4df8acf8a515f872a4f0321d814dd2e7360f2bc0a0b1c2488b70c1a23a6dda430d778b4676930fc2c99dc6717c31fddbb58334e753bae12d387352a6df9e38527b159d7b140bdab4b701f924bdc8ff89b25f84abca98e38639798b6c67dfcc9bfd23efe2f8e355eede0c848d28b129f91944d7faf8786e662d2d27819a7ab266df2590348553427362af4d38ac44760486c1e206ac2a3aadbe"], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000004f40)=ANY=[@ANYBLOB="010000000000000054cc52087b2d696f200b146cfb606883330e2c782e674f5c77411a159850c3470a461baf165072c9298c9ca6c6b3db7e5643459dfe733982ee0e779ec3b2e35d78f83faa9649d51e3957af766bed799cf425cb3bd13a9c8b594728588c73d5dff50a67bdb9f7570cbe80cb6183ba909824556288d70fb72f5794e75c"], 0x4) readv(r8, &(0x7f0000000700), 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r4, &(0x7f0000004b40)=[{{&(0x7f0000000240)=@l2, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000004cc0)=""/69, 0x45}], 0x4, &(0x7f00000018c0)=""/201, 0xc9}, 0x5}, {{&(0x7f0000001a80)=@nfc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/239, 0xef}], 0x2, &(0x7f0000002c00)=""/209, 0xd1}, 0x200}, {{&(0x7f0000002d00)=@nfc_llcp, 0x80, &(0x7f0000003140)=[{&(0x7f0000002d80)=""/84, 0x54}, {&(0x7f0000002e00)=""/202, 0xca}, {&(0x7f0000002f00)=""/146, 0x92}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f0000002fc0)=""/195, 0xc3}, {&(0x7f00000030c0)=""/126, 0x7e}], 0x6, &(0x7f00000031c0)=""/222, 0xde}, 0x9}, {{&(0x7f00000032c0)=@l2, 0x80, &(0x7f0000003780)=[{&(0x7f0000003400)=""/91, 0x5b}, {&(0x7f0000001800)=""/10, 0xa}, {&(0x7f00000019c0)=""/34, 0x22}, {&(0x7f00000033c0)=""/17, 0x11}, {&(0x7f0000004d40)=""/245, 0xf5}, {&(0x7f0000003500)=""/213, 0xd5}, {&(0x7f0000003600)=""/185, 0xb9}, {&(0x7f00000036c0)=""/109, 0x6d}, {&(0x7f0000003740)=""/53, 0x35}], 0x9}, 0x7}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000004780)=""/228, 0xe4}, {&(0x7f0000003840)=""/48, 0x30}, {&(0x7f0000004880)=""/101, 0x65}], 0x3, &(0x7f0000004900)=""/41, 0x29}, 0xb}, {{&(0x7f0000004940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000004a40)=[{&(0x7f00000049c0)=""/68, 0x44}], 0x1, &(0x7f0000004a80)=""/150, 0x96}, 0x401}], 0x6, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 4.103448206s ago: executing program 2 (id=3208): r0 = socket(0x5, 0x5, 0x81) sendto$l2tp6(r0, &(0x7f0000000000)="bb515951b1b639c5bc6a8a8f1cc4bd", 0xf, 0x44008, &(0x7f00000000c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x6, 0x1}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@tcp6=r6, 0x2}, 0x20) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000100)=0x7) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 3.649796456s ago: executing program 2 (id=3209): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf"}]}, 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x29, 0x1}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x29bb, 0x80000000, 0x40000, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x3, 0x1, 0x0, 0xe}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffa, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x10000009, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x44}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) close(0x4) 3.514529895s ago: executing program 1 (id=3210): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x78}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"}) (async) socket$igmp6(0xa, 0x3, 0x2) 3.458844586s ago: executing program 0 (id=3212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x54, &(0x7f0000000040)=""/84, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x6, 0x6, 0x5, 0x1}, 0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) 3.234137677s ago: executing program 1 (id=3214): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x4, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r2, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000200", @ANYRES16=r3, @ANYBLOB="000427bd7000ffdbdf251800000034000980080002000d00000008000200850000000800020002000000080002004500000008000100440200000800020021c70000"], 0x48}, 0x1, 0x0, 0x0, 0x48010}, 0x40840) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x17, 0x301, 0x270bd27, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x48, &(0x7f0000000380)=ANY=[@ANYBLOB="880100"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) 3.213972703s ago: executing program 0 (id=3215): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb1, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r1, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd9, &(0x7f0000000340)=""/217}, 0x94) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000018007f5f00fe01b2a4a2809302290000ff41fd01040400000a0012000200280000001902000000009b84136ef70e2b0000000000000000000000000000b347143709aaa80b672f97fbe9e98cf4da53854b", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) sendmmsg$alg(r4, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000fc0)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x18}, @iv={0xd0, 0x117, 0x2, 0xb5, "3d9b15c511989f054ff0b84fd72e6f7ca7ae2f80dbafc538b05cb049078e56c1fa84dae986b775e0a197b4135dec583278ff051c389ec09f0c513ddbb3fbbf34fe27a236ca4f1aec1e9268a3bd12b5d04c399f4c21be3c76229ac788ce498642c6c6ba5effcf4f61a48cd14655f8934086bcb229eb47c984c475d482d34a09dfe8df1f88713150a7cb4b02b6c5b3cc40a7e170abd906f149659ea77e924266c16efae70dc8b3582947fb8dfb6c3ae940a2cee08c52"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xa0, 0x117, 0x2, 0x85, "9fecc2f98195b0a5535a3924a6692231c3eedd518eb008e101c9bf881e4fc798528f7ed32d57eb178d94de00baaa72dfb6240c424a73eef3c00970401bf80af8bfe1c2b69dea956ec475e4b969fba78fc4b4ce5d80330fe727a27331f0d4b10de859d9a6820ef4252f25989439944f0b56e9f32df34f27a8408b09916919bc8fcb6507e286"}, @iv={0x60, 0x117, 0x2, 0x4a, "75383dd41a37c963c96036cad5d75d4350cdc6d639f83042bf54a0e769c2c99a988a124408dcab4b95324e5ffd5857f7a966c635562a64ffc92d113f253c70eae7ce9a5a28443b3af4d9"}, @iv={0x110, 0x117, 0x2, 0xf5, "31dfe5b04dca8e3e70e0ad4c03ade25da92563dddd4ce964af81076308e338d9bffafe9734bc1205f1aeca716da2af9187499faadfc8a5415966dc82279b557576d26a8715835257d2b8d711a977c1c8a7dc9e02e9c2d2cc2fe0ebf1a3c56a512667a3738b5915bfe0cf38361bb7160b8620c026ad3130643c9d0543efc10858de0af03c377b22ad2af618e9a6a82e5981db7dd6c3ae55b94dd4ac77df87de3068da0592ca338c83fea2f09f75ca4dbc0e1f4944411665abd47b9fbf296fbbcdf8de0ecd9a0fc08958d3df28dbf8d5cf25c7159228fb3553e1a760c39b03651f191f7ae3a0196906026085341beac33f9eef0b0a06"}], 0x340, 0x40000}, {0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000640)="328daec69aca598e276bdd71bf289b7414c348896d5f805f8baa7ff96ec2ea597f43ecebab26d22c2b753b6562d8329a7d4ccb44ed2c50538bad60f45db56b3356fd1e227e2ad2842a398565f458ecfd41c1d4214dc84f93feb32982eaaf690a2e46841c952c29943b2ac7f8ba561e939921f49fe0c6425662aeafc489a8264845a733729779f75dbbc23df205e9429d08835d4a755c228bd05bb906c6f837df6162dc46964ccca580e6263bf6b3b4351b7f689970cbee37f6dd5814acb815c1ab01e053b481315db6cc3a8182e00da66267a384b25479bc30e79793f739", 0xde}, {&(0x7f0000001300)="0deeb8055aeb0a05ef90b99c418674133e4ea07c3453fd550eb76f2848de13674730971498bb38235ef5d023e45259987c02e7036ee490588b353ea789fd72d15713154f4499798fcd6ad399552bac231adc76fef02eafd7760a6eb3c1d68bf174f6310b23827bb78b768e059ddba8a441e4edbcd85316bf652d5ee67b4e1ddc267222ebdb07bf73ac002c30cd0d132f912361697e91d815428dd0dbf22fde8e98b9295cf2cb33042c1f1d673939ae92e551123b3cbb51c39744648e5a5fb970720a73cec8b3f444a76d637e88c1dfbc0064c6096819fb856bd8c9016005da", 0xdf}, {&(0x7f0000001400)="f4f2858ace072e1474ccc2c49be16b278d84e4e66dfbbc102a428a38ebb053a3daffd501a3b248d13e3c2592fae55ce3b2665b1339dfb16770417a71ee4f18d019d309b851a046ae2d397505ec33b08c72ad794490b3c31e1f3fdfb14b37a64a9df7c4f83d6337b310377d59223ae7e93c1185977b21f09105d7ff7445cc9dfe7d8f67f631105dab25587701757bfd7ffd83298a51a522a7785ad77c0d3652077eb716667a819dd7ec8681ef62e124afe0816c3a926af2a56eee1a278d571c7ccf883cabbc4d51a7efa90e8cac2b5adca756ac4557e165207dd2d36c90abb108d03d0dc0e58a49fd38bd7b57a17b4593583c1d", 0xf3}, {&(0x7f0000000740)="6d2a5813e793ef26401dfaf332fd54264d6393201ff49efc915ed3ba35dbec7cb7f39e1cf30b0a4214ddbf067c42a13038ae15148528406e0d9e19362261d1ff6c4f98377405f45dc1a379fe3300932006ec5d23f6af8d6eb8b241e4c241ae2ef95b5ae64e36b0ee130340f4dfd7fb5dee44a0004c8514b2db2afcf170802825fbcbab49b186382f299fef96fd8f9d6ab1aa2d475d7488841a3d7ab1e3654c3fc7cdd36e378b68bc", 0xa8}, {&(0x7f0000001500)="953f61aeaf9bf2cb5cad311489383a0bed9ca7be05b6db7e7684f4c1baf53aff241be5ca60d4c63fc41ac64aa733927bc0b6eb833258bf5bb17f9a7e21218be7cad827fde258f4261bad7b11d18f9ec4a89024804bb8a7e3b40b9934c7ed677f3443ddce5ea89a5a2620fac2804aa18678840b1296b31d3e854ffe8236b6bbbac68669e0199cd55bd755a19eef942719fbc1cd", 0x93}, {&(0x7f00000015c0)="9c3d6f733e99b379806ce2ea16a5796dcfcd21f853c1f4c288ace2172f86fff8d0edbe29d14c4c62aca5c66e9049dd436d281daaea181c16a08725da4dd3b76d18872b3838356756b62ad1f3133271f63a07d1dcab6b9513db064ba9366f4ed121eba8b94cc3a05534118369340593edf406497423", 0x75}], 0x6, &(0x7f00000016c0)=[@assoc={0x18}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7f}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x40, 0x117, 0x2, 0x2a, "cd208ad04ffe97bbb264d80e56db0f0aa51e22a52e65a46e7a5977cee9eb6ed647c1041789754dad51de"}], 0x100}], 0x2, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r13, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r14, 0x1, 0x6, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)={0x77c, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8, 0x1, r6}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x18}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf80}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8a, 0xff, 0x2, 0x80}]}}}]}}, {{0x8, 0x1, r6}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7dabe8af}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r6}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0x77c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100400000000000002007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100005800c000900"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'sit0\x00', r6, 0x1, 0x80, 0x4, 0x3, {{0x9, 0x4, 0x1, 0x19, 0x24, 0x67, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @private=0xa010101, {[@noop, @lsrr={0x83, 0xf, 0xb0, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x44}]}]}}}}}) 3.0300809s ago: executing program 1 (id=3217): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d020000000000000001000005ff"], 0x0, 0x3e, 0x0, 0x1, 0x7ff}, 0x28) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x4c046) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x30, 0x0, 0x100, 0x1070bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa, 0x3}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1dc}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x46, &(0x7f0000000a80)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6000000000103a00fe8000000000000000000000000000bbff0200000000000000000000000000018f"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010800000000fedbdf250700000006c61f612e38ffe600000000000000"], 0x14}}, 0x8850) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000001680)=ANY=[@ANYRES16=r4, @ANYBLOB="d549e6a31e9c96a9718ce9257511548b9a73f61e13e75a6105df582c5d491595bbea7e73b67124741db475fb0cd984a04ac8c0fa76653f", @ANYRES16=r0, @ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r5], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRESHEX=r8, @ANYRES32=r3, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRES64=r0, @ANYRES64=r7, @ANYRES16=r2], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000340)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1fff6}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x50, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x200000a}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xc}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x40) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005880)={&(0x7f0000005780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xfffffffffffffe2e, 0x5, [@typedef={0x1, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61, 0x30, 0x634eefca6c36d413]}}, 0x0, 0x29, 0x0, 0x1, 0x6}, 0x28) r11 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r11, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)=')', 0x1}], 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.639393981s ago: executing program 0 (id=3218): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x400007) 2.618445138s ago: executing program 4 (id=3219): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000500)=0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) 2.546090138s ago: executing program 2 (id=3220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) clock_gettime(0x0, &(0x7f00000072c0)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f00000070c0)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000002c0)=""/212, 0xd4}, {&(0x7f0000000480)=""/186, 0xba}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/189, 0xbd}, {&(0x7f0000001600)=""/215, 0xd7}], 0x7, &(0x7f0000001780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000001840)=""/61, 0x3d}, {&(0x7f0000001880)=""/105, 0x69}, {&(0x7f0000001900)=""/200, 0xc8}, {&(0x7f0000001a00)=""/229, 0xe5}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/75, 0x4b}, {&(0x7f0000002b80)=""/6, 0x6}], 0x7, &(0x7f0000002c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002c80)=""/14, 0xe}, {&(0x7f0000002cc0)=""/148, 0x94}, {&(0x7f0000002d80)=""/232, 0xe8}, {&(0x7f0000002e80)=""/253, 0xfd}], 0x4}}, {{&(0x7f0000002fc0)=@abs, 0x6e, &(0x7f0000003340)=[{&(0x7f0000003040)=""/29, 0x1d}, {&(0x7f0000003080)=""/228, 0xe4}, {&(0x7f0000003180)=""/2, 0x2}, {&(0x7f00000031c0)=""/189, 0xbd}, {&(0x7f0000003280)=""/50, 0x32}, {&(0x7f00000032c0)=""/86, 0x56}], 0x6}}, {{&(0x7f00000033c0), 0x6e, &(0x7f00000046c0)=[{&(0x7f0000003440)=""/1, 0x1}, {&(0x7f0000003480)=""/84, 0x54}, {&(0x7f0000003500)=""/222, 0xde}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/127, 0x7f}, {&(0x7f0000004680)=""/32, 0x20}], 0x6}}, {{&(0x7f0000004740), 0x6e, &(0x7f0000004c00)=[{&(0x7f00000047c0)=""/227, 0xe3}, {&(0x7f00000048c0)=""/50, 0x32}, {&(0x7f0000004900)=""/30, 0x1e}, {&(0x7f0000004940)=""/96, 0x60}, {&(0x7f00000049c0)=""/175, 0xaf}, {&(0x7f0000004a80)=""/220, 0xdc}, {&(0x7f0000004b80)=""/59, 0x3b}, {&(0x7f0000004bc0)=""/60, 0x3c}], 0x8, &(0x7f0000004c80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004cc0)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000004d40)=""/51, 0x33}, {&(0x7f0000004d80)=""/169, 0xa9}, {&(0x7f0000004e40)=""/4096, 0x1000}], 0x3, &(0x7f0000005e80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000005f00), 0x6e, &(0x7f0000007080)=[{&(0x7f0000005f80)=""/4096, 0x1000}, {&(0x7f0000006f80)=""/17, 0x11}, {&(0x7f0000006fc0)=""/140, 0x8c}], 0x3}}], 0x8, 0x2002, &(0x7f0000007300)={r2, r3+10000000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x21f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$kcm(0x2, 0xa, 0x2) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x11e, 0xc, 0x0, &(0x7f0000000080)=0xffffff0f) (async) ioctl$sock_netdev_private(r6, 0x8947, &(0x7f00000000c0)="4749c2363a") (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) 2.545119635s ago: executing program 4 (id=3221): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x0) accept4$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x800) 2.388509667s ago: executing program 1 (id=3222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, &(0x7f0000001400)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = epoll_create1(0x0) (async) r4 = socket$phonet(0x23, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000300)={0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) close(r6) (async) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000240)={r7, 0x7f, 0x9, 0xb1}) ioctl$TUNGETIFF(r10, 0x800454d2, &(0x7f0000000280)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.520230531s ago: executing program 4 (id=3223): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (rerun: 64) r3 = accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r3) write(r0, &(0x7f00000002c0), 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x10) (rerun: 32) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300001"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) (async, rerun: 32) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, 0x0, 0x0, 0x0, 0x0, 0x10100}, 0x38, 0x62) (rerun: 32) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r8, &(0x7f00000001c0), 0x3, 0x120, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r10, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async, rerun: 64) socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 64) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) 1.289816923s ago: executing program 4 (id=3224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) (async) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704e11e05000000000000009ff075475e4b949e1ca7712bcdb4dc", 0x20) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) (async) listen(r3, 0x9) (async) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) (async) r4 = accept$alg(r2, 0x0, 0x0) readv(r4, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/16, 0x10}, {&(0x7f0000000380)=""/224, 0xe0}], 0x2) sendmmsg$alg(r4, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="46713ed01156363eab57a7492db952ca6869eef8db5e713cb03484dafa2621a114", 0x21}], 0x1, 0x0, 0x0, 0x4810}], 0x1, 0x0) 1.281350639s ago: executing program 0 (id=3225): r0 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x2c020400) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r1, 0xe800, 0x0}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) unshare(0x400) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x18, 0x0, 0x47) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfefefffd}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0xd, 0x0, &(0x7f0000000040)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x3f, 0x1}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000080)=0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.169199674s ago: executing program 0 (id=3226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0x0, 0x80800) 282.102686ms ago: executing program 4 (id=3227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xfffffffa, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000005}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040011}, 0x1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc0004068}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) connect$can_j1939(r5, &(0x7f0000000580)={0x1d, r6, 0x2, {0x2, 0x1, 0x2}, 0xfe}, 0x18) bpf$ENABLE_STATS(0x20, &(0x7f00000005c0), 0x4) r7 = socket(0x8, 0x3, 0x5e) ioctl$sock_netdev_private(r7, 0x89fc, &(0x7f0000000600)="c35dc4afb100c7760d1e59ee5c7ec82eaaae6a30aa997a847481b26d7928c5bc34dae9642e709677381ee5eb960e7f30256ecce94d0d5ce9328be51f0c6986d35c63fe06d2891dc7dccb99779f007465ad1a33134f32d781efb362525b5d661f567c1f033309b969e8c1dfc4cc335f45d65151988a1b64c676b81b1b9851ded8b233fb48e45e3331648ff78b18b464148c9d78e8485924181e2407929d80723256120ee662b5b92621d76382007869be6746c94e3e5429d5317fea750d98b92e") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8880}, 0x1) bind$inet(r7, &(0x7f0000000880)={0x2, 0x4e22, @empty}, 0x10) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f00000008c0)={0x10, 0x0, "803574e1b847d0e1eed6d2e5f4f9d03b"}) r11 = socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000900), &(0x7f0000000940)=0x8) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='freezer.self_freezing\x00', 0x0, 0x0) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r6, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x5, 0x0, r11, 0x6, '\x00', r6, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r7, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x20) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={0xffffffffffffffff, 0x5, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0xf, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x0, 0x9, 0xb, 0xa, 0xffffffffffffffcb, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x1, 0xa, 0xb, 0x7, 0xfffffffffffffffc, 0xfffffffffffffffc}]}, &(0x7f0000000a40)='GPL\x00', 0x9, 0x99, &(0x7f0000000a80)=""/153, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x5, 0xf, 0x2674, 0xb}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000f40)=[r13, r8, r11, r14, r15, r16, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000f80)=[{0x5, 0x4, 0xb, 0x3}, {0x1, 0x1, 0x0, 0xb}, {0x4, 0x2, 0xd, 0xa}, {0x2, 0x1, 0x6, 0x9}, {0x1, 0x3, 0x3}, {0x1, 0x5, 0x8, 0x6}, {0x3, 0x1, 0x0, 0xb}, {0x1, 0x3, 0x2, 0x2}, {0x5, 0x4, 0xc}], 0x10, 0x8001}, 0x94) 183.951104ms ago: executing program 4 (id=3228): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) (async) unshare(0x400) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) (async) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x40090}, 0x20000080) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 0s ago: executing program 2 (id=3229): r0 = socket$inet6(0xa, 0xa, 0xdea) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000037c0000040042800c000180061206129039"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) getuid() r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a0009070000000000000000000000050017"], 0x38}}, 0x8800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000800)={0x7, 0x8000, 0x3, 0x8, 0x8c, 0x6, 0x3}, 0xc) bind(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x2, 0x4, 0x5, 0x143, 0x1014}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = socket$key(0xf, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000007c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "bac6734d333dbaf9eeb943ca05f5b02c57a1e6a78fe77ab965f89a84fb7a4a824ef2a166703f1a4b7efde3690af12b82f528c2bab28c2e5a8e607988197c4fb5c65609b0c614ba24c5eb5b95c8ae2f29"}, 0xd8) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000340)={r12, 0x6}, &(0x7f00000000c0)=0x8) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="020100020e00000000000000fcdbdf2505000600331000000a004e2300000006fe8000000000000000000000000000aa050000000000000005000500320000000a004e2000000008fc0000000000000000000000fcffffff0000000000000000020013"], 0x70}}, 0x0) kernel console output (not intermixed with test programs): yz.3.1642'. [ 274.100970][T12658] syzkaller0: entered promiscuous mode [ 274.106663][T12658] syzkaller0: entered allmulticast mode [ 274.477186][T12669] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 274.562732][T12675] openvswitch: netlink: Missing key (keys=40, expected=80) [ 274.571809][T12676] openvswitch: netlink: Missing key (keys=40, expected=80) [ 274.851975][T12686] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 274.925819][T12690] lo speed is unknown, defaulting to 1000 [ 274.965545][T12698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1654'. [ 275.108132][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1656'. [ 275.253598][T12713] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 275.391561][T12717] syzkaller0: entered promiscuous mode [ 275.415519][T12717] syzkaller0: entered allmulticast mode [ 275.502035][T12722] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 275.526413][T12725] netlink: 'syz.3.1661': attribute type 13 has an invalid length. [ 276.205625][T12754] syzkaller0: entered promiscuous mode [ 276.212205][T12754] syzkaller0: entered allmulticast mode [ 276.252174][T12756] wg1 speed is unknown, defaulting to 1000 [ 276.279731][T12756] wg1 speed is unknown, defaulting to 1000 [ 276.352665][T12756] wg1 speed is unknown, defaulting to 1000 [ 276.393170][T12756] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 276.452089][T12756] wg1 speed is unknown, defaulting to 1000 [ 276.458946][T12759] tcpmss_tg4_check: 1 callbacks suppressed [ 276.458965][T12759] xt_TCPMSS: Only works on TCP SYN packets [ 276.464822][T12756] wg1 speed is unknown, defaulting to 1000 [ 276.474611][T12756] wg1 speed is unknown, defaulting to 1000 [ 276.489942][T12756] wg1 speed is unknown, defaulting to 1000 [ 276.498421][T12756] wg1 speed is unknown, defaulting to 1000 [ 276.612793][T12762] syzkaller0: entered promiscuous mode [ 276.630838][T12762] syzkaller0: entered allmulticast mode [ 276.656979][T12763] syzkaller0: entered promiscuous mode [ 276.662649][T12763] syzkaller0: entered allmulticast mode [ 277.205948][T12785] sch_fq: defrate 0 ignored. [ 277.478797][T12795] tipc: Enabled bearer , priority 0 [ 277.529912][T12795] syzkaller0: entered promiscuous mode [ 277.535448][T12795] syzkaller0: entered allmulticast mode [ 277.588422][T12809] syzkaller0: entered promiscuous mode [ 277.597032][T12809] syzkaller0: entered allmulticast mode [ 277.634307][T12795] tipc: Resetting bearer [ 277.651105][T12810] syzkaller0: entered promiscuous mode [ 277.684437][T12810] syzkaller0: entered allmulticast mode [ 277.695575][T12793] tipc: Resetting bearer [ 277.744454][T12793] tipc: Disabling bearer [ 277.983557][T12828] __nla_validate_parse: 13 callbacks suppressed [ 277.983582][T12828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1694'. [ 278.029180][T12828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1694'. [ 278.147725][T12834] lo speed is unknown, defaulting to 1000 [ 278.189968][T12834] wg1 speed is unknown, defaulting to 1000 [ 278.296570][T12850] bond6: option arp_validate: invalid value (18446744073709551614) [ 278.314329][T12850] bond6 (unregistering): Released all slaves [ 278.445761][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'. [ 278.543519][T12859] veth0_to_bridge: left allmulticast mode [ 278.549953][T12859] veth0_to_bridge: left promiscuous mode [ 278.556061][T12859] bridge0: port 3(veth0_to_bridge) entered disabled state [ 278.567583][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'. [ 278.568691][T12859] bridge_slave_1: left allmulticast mode [ 278.576993][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'. [ 278.593001][T12859] bridge_slave_1: left promiscuous mode [ 278.608049][T12859] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.631813][T12859] bridge_slave_0: left allmulticast mode [ 278.637542][T12859] bridge_slave_0: left promiscuous mode [ 278.643624][T12859] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.693694][T12866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.702283][T12866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.731033][T12866] batadv0 (unregistering): left promiscuous mode [ 278.818099][T12869] .70·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 278.892575][T12863] lo speed is unknown, defaulting to 1000 [ 278.897134][T12871] syzkaller0: entered promiscuous mode [ 278.914251][T12871] syzkaller0: entered allmulticast mode [ 278.932959][T12863] wg1 speed is unknown, defaulting to 1000 [ 279.123480][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1708'. [ 279.133523][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1708'. [ 279.151151][T12884] bond0: entered promiscuous mode [ 279.156221][T12884] bond_slave_0: entered promiscuous mode [ 279.198065][T12884] bond_slave_1: entered promiscuous mode [ 279.206927][T12884] erspan0: entered promiscuous mode [ 279.214296][T12884] debugfs: 'hsr1' already exists in 'hsr' [ 279.220675][T12884] Cannot create hsr debugfs directory [ 279.226711][T12884] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 279.247062][T12884] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 279.340909][T12896] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 279.454282][T12889] lo speed is unknown, defaulting to 1000 [ 279.501964][T12889] wg1 speed is unknown, defaulting to 1000 [ 280.209532][T12935] validate_nla: 3 callbacks suppressed [ 280.209552][T12935] netlink: 'syz.0.1722': attribute type 13 has an invalid length. [ 280.223445][ T996] wlan0: Trigger new scan to find an IBSS to join [ 280.797521][T12946] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1725'. [ 280.920080][T12952] sctp: [Deprecated]: syz.1.1725 (pid 12952) Use of int in max_burst socket option deprecated. [ 280.920080][T12952] Use struct sctp_assoc_value instead [ 280.984891][T12953] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.307391][T12966] netlink: 'syz.2.1729': attribute type 1 has an invalid length. [ 281.323767][T12966] netlink: 'syz.2.1729': attribute type 2 has an invalid length. [ 282.703049][T13000] xt_CT: No such helper "snmp" [ 282.754641][T13001] lo speed is unknown, defaulting to 1000 [ 282.829683][T13001] wg1 speed is unknown, defaulting to 1000 [ 283.181655][ T3900] wlan0: Trigger new scan to find an IBSS to join [ 284.408701][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 285.227639][T13077] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1759'. [ 285.254866][T13078] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1759'. [ 285.679695][T13095] openvswitch: netlink: Tunnel attr 12 has unexpected len 8 expected 16 [ 285.700727][T13091] netlink: 'syz.2.1762': attribute type 10 has an invalid length. [ 285.722568][T13089] syzkaller0: entered promiscuous mode [ 285.764856][T13089] syzkaller0: entered allmulticast mode [ 285.827238][T13091] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 285.865009][T13091] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 286.129840][T13109] batadv0: entered promiscuous mode [ 286.179620][T13109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.230837][ T6326] wlan0: Trigger new scan to find an IBSS to join [ 286.274390][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 286.310780][T13101] lo speed is unknown, defaulting to 1000 [ 286.363395][T13101] wg1 speed is unknown, defaulting to 1000 [ 286.813974][T13137] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 286.851927][ T446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.879982][T13124] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1772'. [ 287.317093][T13147] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1775'. [ 287.389646][ T5915] IPVS: starting estimator thread 0... [ 287.402214][T13132] lo speed is unknown, defaulting to 1000 [ 287.529337][T13150] IPVS: using max 24 ests per chain, 57600 per kthread [ 287.602843][T13154] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.1777'. [ 287.649279][T13132] wg1 speed is unknown, defaulting to 1000 [ 287.689579][T13152] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1777'. [ 287.827405][T13164] netlink: 'syz.3.1780': attribute type 26 has an invalid length. [ 288.001863][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1781'. [ 288.073508][T13157] bond6: option tlb_dynamic_lb: invalid value (10) [ 288.122615][T13157] bond6 (unregistering): Released all slaves [ 288.574060][T13173] bond3 (unregistering): Released all slaves [ 288.930072][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 289.449963][T13207] __nla_validate_parse: 1 callbacks suppressed [ 289.449986][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'. [ 289.979272][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 291.338577][T13252] netlink: set zone limit has 8 unknown bytes [ 295.804126][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1808'. [ 296.126718][T13298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1810'. [ 296.206499][T13293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1810'. [ 296.258667][T13293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1810'. [ 296.414857][T13312] netlink: 'syz.1.1814': attribute type 10 has an invalid length. [ 296.546361][T13308] lo speed is unknown, defaulting to 1000 [ 296.909518][T13308] wg1 speed is unknown, defaulting to 1000 [ 297.181103][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1815'. [ 297.311345][T13328] tipc: Enabling of bearer rejected, failed to enable media [ 297.591904][T13339] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 297.673234][T13339] vlan0: entered promiscuous mode [ 297.687939][T13339] vlan0: entered allmulticast mode [ 297.801975][T13345] lo speed is unknown, defaulting to 1000 [ 297.810168][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 297.825331][T13345] wg1 speed is unknown, defaulting to 1000 [ 297.961156][T13351] xt_CT: No such helper "snmp_trap" [ 298.097203][T13364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1825'. [ 298.138120][T13367] openvswitch: netlink: Message has 148 unknown bytes. [ 298.211039][T13364] netlink: 'syz.4.1825': attribute type 1 has an invalid length. [ 298.231277][T13364] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1825'. [ 298.250960][T13364] NCSI netlink: No device for ifindex 0 [ 298.306861][T13375] netlink: 211728 bytes leftover after parsing attributes in process `syz.2.1827'. [ 298.358209][T13361] lo speed is unknown, defaulting to 1000 [ 298.583994][T13361] wg1 speed is unknown, defaulting to 1000 [ 299.359631][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 299.424042][T13421] netem: change failed [ 299.527024][T13415] nftables ruleset with unbound chain [ 299.542757][T13432] vlan2: entered promiscuous mode [ 299.558359][T13432] bond0: entered promiscuous mode [ 299.838886][T13441] block nbd0: reconnected socket [ 299.952400][T13449] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 300.022435][ T5833] block nbd0: Receive control failed (result -32) [ 300.131034][T13452] tipc: Enabled bearer , priority 0 [ 300.167275][T13452] syzkaller0: entered promiscuous mode [ 300.176624][T13452] syzkaller0: entered allmulticast mode [ 300.254781][T13452] tipc: Resetting bearer [ 300.278573][T13451] tipc: Resetting bearer [ 300.359705][T13451] tipc: Disabling bearer [ 300.483752][T13458] syzkaller0: entered promiscuous mode [ 300.489434][T13458] syzkaller0: entered allmulticast mode [ 300.770741][T13472] IPv6: NLM_F_CREATE should be specified when creating new route [ 302.033773][T13496] rdma_rxe: rxe_newlink: failed to add lo [ 302.514970][T13487] tc_dump_action: action bad kind [ 302.713455][T13511] __nla_validate_parse: 1 callbacks suppressed [ 302.713476][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 303.267361][T13547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1871'. [ 303.281305][T13547] netlink: 'syz.0.1871': attribute type 7 has an invalid length. [ 303.289172][T13547] netlink: 'syz.0.1871': attribute type 8 has an invalid length. [ 303.297166][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 303.644130][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1875'. [ 304.203140][T13592] xt_l2tp: invalid flags combination: 8 [ 304.258845][T13588] syzkaller0: entered promiscuous mode [ 304.265319][T13588] syzkaller0: entered allmulticast mode [ 304.374570][T13602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.441896][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1887'. [ 304.457186][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1887'. [ 304.466928][T13605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1887'. [ 304.546136][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1889'. [ 304.710987][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'. [ 304.968421][T13638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1895'. [ 304.979395][T13638] netlink: 'syz.3.1895': attribute type 7 has an invalid length. [ 304.988001][T13638] netlink: 'syz.3.1895': attribute type 8 has an invalid length. [ 305.290900][T13651] netlink: 'syz.3.1897': attribute type 29 has an invalid length. [ 306.664696][T13647] lo speed is unknown, defaulting to 1000 [ 306.700145][T13647] wg1 speed is unknown, defaulting to 1000 [ 307.224609][T13685] lo speed is unknown, defaulting to 1000 [ 307.248067][T13685] wg1 speed is unknown, defaulting to 1000 [ 307.634041][T13710] Cannot find del_set index 4 as target [ 307.692139][T13713] netlink: 'syz.0.1913': attribute type 3 has an invalid length. [ 307.875646][T13729] __nla_validate_parse: 4 callbacks suppressed [ 307.875668][T13729] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1917'. [ 307.920937][T13724] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1917'. [ 307.941557][T13724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.231141][T13741] netlink: 'syz.4.1921': attribute type 10 has an invalid length. [ 308.266471][T13743] IPVS: set_ctl: invalid protocol: 58 172.20.20.11:20002 [ 308.498909][T13749] siw: device registration error -23 [ 308.772578][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1924'. [ 309.030472][T13772] lo speed is unknown, defaulting to 1000 [ 309.047043][T13772] wg1 speed is unknown, defaulting to 1000 [ 309.605797][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1935'. [ 309.655874][T13812] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.1938'. [ 309.681116][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1935'. [ 309.734727][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'. [ 309.847880][T13813] bond4 (unregistering): Released all slaves [ 309.928987][T13830] netlink: 'syz.3.1939': attribute type 1 has an invalid length. [ 309.951216][T13826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1941'. [ 310.011555][T13829] tipc: Enabled bearer , priority 10 [ 310.037665][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 310.079704][T13836] siw: device registration error -23 [ 310.464855][T13863] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1952'. [ 310.630909][T13871] netlink: 'syz.1.1956': attribute type 10 has an invalid length. [ 310.688221][T13872] lo speed is unknown, defaulting to 1000 [ 310.698365][T13872] wg1 speed is unknown, defaulting to 1000 [ 310.817825][T13879] bond3: invalid ARP target 0.0.0.0 specified for addition [ 310.839145][T13879] bond3: option arp_ip_target: invalid value (0) [ 310.892982][T13879] bond3 (unregistering): Released all slaves [ 311.189340][ T5928] tipc: Node number set to 1413974498 [ 311.501032][T13910] lo speed is unknown, defaulting to 1000 [ 311.522364][T13910] wg1 speed is unknown, defaulting to 1000 [ 311.625728][T13916] lo speed is unknown, defaulting to 1000 [ 311.689521][T13916] wg1 speed is unknown, defaulting to 1000 [ 312.215280][T13953] netlink: 'syz.1.1974': attribute type 10 has an invalid length. [ 312.270439][T13953] team0: Port device syz_tun removed [ 312.464112][T13964] pimreg: tun_chr_ioctl cmd 1074025680 [ 312.923706][T13982] xt_CT: No such helper "snmp" [ 312.940746][T13981] lo speed is unknown, defaulting to 1000 [ 312.965685][T13981] wg1 speed is unknown, defaulting to 1000 [ 314.023248][T14015] bond3 (unregistering): Released all slaves [ 314.089778][T14023] netlink: 'syz.4.1992': attribute type 1 has an invalid length. [ 314.224910][T14023] bond4: entered promiscuous mode [ 314.232366][T14023] 8021q: adding VLAN 0 to HW filter on device bond4 [ 314.269791][T14022] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 314.322924][T14022] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 314.356280][T14022] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 314.451814][T14025] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 314.485069][T14025] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 314.875115][T14060] SET target dimension over the limit! [ 314.908614][T14045] __nla_validate_parse: 5 callbacks suppressed [ 314.908637][T14045] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1998'. [ 315.002172][T14062] tipc: Enabling of bearer rejected, failed to enable media [ 315.039415][T14068] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 315.124188][T14064] can: request_module (can-proto-3) failed. [ 315.434396][T14089] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2008'. [ 315.570260][T14096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2008'. [ 315.596576][T14098] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2010'. [ 315.778355][T14105] netlink: 'syz.1.2012': attribute type 1 has an invalid length. [ 315.860814][T14109] netlink: 'syz.2.2013': attribute type 3 has an invalid length. [ 315.868615][T14109] netlink: 'syz.2.2013': attribute type 1 has an invalid length. [ 315.876669][T14109] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2013'. [ 316.080012][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2015'. [ 316.130611][T14116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2015'. [ 316.283990][T14119] tipc: Enabled bearer , priority 0 [ 316.310129][T14119] syzkaller0: entered promiscuous mode [ 316.319106][T14119] syzkaller0: entered allmulticast mode [ 316.342566][T14119] tipc: Resetting bearer [ 316.389516][T14118] tipc: Resetting bearer [ 316.440200][T14101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2011'. [ 316.449701][T14118] tipc: Disabling bearer [ 316.585046][T14129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 316.676554][T14129] vlan5: entered promiscuous mode [ 316.684116][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 316.719137][T14129] gretap0: entered promiscuous mode [ 316.926858][T14144] pim6reg99999999: entered allmulticast mode [ 317.155962][T14155] nbd: must specify at least one socket [ 318.203895][T14200] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 318.469970][T14212] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 318.592988][T14221] ip6tnl3: entered allmulticast mode [ 318.785238][T14230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 319.137608][T14247] lo speed is unknown, defaulting to 1000 [ 319.170632][T14247] wg1 speed is unknown, defaulting to 1000 [ 319.419299][T12292] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 319.704384][T14271] lo speed is unknown, defaulting to 1000 [ 319.725297][T14287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.738223][T14271] wg1 speed is unknown, defaulting to 1000 [ 319.991138][T14295] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 320.012785][T14295] __nla_validate_parse: 8 callbacks suppressed [ 320.012807][T14295] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2062'. [ 320.150700][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2064'. [ 320.161431][T14299] netlink: 'syz.2.2064': attribute type 1 has an invalid length. [ 320.345445][T14307] tipc: Enabled bearer , priority 0 [ 320.354247][T14307] syzkaller0: entered promiscuous mode [ 320.368541][T14307] syzkaller0: entered allmulticast mode [ 320.407740][T14307] tipc: Resetting bearer [ 320.427686][T14306] tipc: Resetting bearer [ 320.463999][T14306] tipc: Disabling bearer [ 320.729698][T14329] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2074'. [ 320.817100][T14332] netlink: 'syz.4.2075': attribute type 29 has an invalid length. [ 320.826543][T14331] netlink: 'syz.4.2075': attribute type 29 has an invalid length. [ 320.836679][T14334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2074'. [ 320.902881][T14337] team0: Caught tx_queue_len zero misconfig [ 321.232015][T14356] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2078'. [ 321.322618][T14357] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2080'. [ 321.350117][T14357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.466994][T14367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.477390][T14366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.487503][T14361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2082'. [ 321.524702][ T6066] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.533434][T14361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2082'. [ 321.543428][ T6066] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.561893][ T6066] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.581309][ T6066] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.693166][T14372] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2086'. [ 321.834560][T14376] lo speed is unknown, defaulting to 1000 [ 321.879900][T14376] wg1 speed is unknown, defaulting to 1000 [ 321.911178][T14384] sctp: [Deprecated]: syz.0.2089 (pid 14384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.911178][T14384] Use struct sctp_sack_info instead [ 321.930384][T14384] netlink: 'syz.0.2089': attribute type 39 has an invalid length. [ 321.991996][T14370] atomic_op ffff888020bdf998 conn xmit_atomic 0000000000000000 [ 322.018664][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2091'. [ 322.624465][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.672421][T14404] gtp0: entered promiscuous mode [ 322.682033][T14404] gtp0: entered allmulticast mode [ 323.036601][T14426] syzkaller1: entered allmulticast mode [ 323.259368][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 323.911547][T14480] tipc: Enabling of bearer rejected, failed to enable media [ 324.346291][T14495] syzkaller0: entered promiscuous mode [ 324.389230][T14495] syzkaller0: entered allmulticast mode [ 324.541969][T14505] syzkaller0: entered promiscuous mode [ 324.558166][T14505] syzkaller0: entered allmulticast mode [ 324.715286][T14513] netlink: 'syz.4.2120': attribute type 1 has an invalid length. [ 324.791915][T14512] vlan2: entered allmulticast mode [ 324.797330][T14512] bond5: entered allmulticast mode [ 325.048717][T14524] syzkaller0: entered promiscuous mode [ 325.055132][T14524] syzkaller0: entered allmulticast mode [ 325.376523][T14545] __nla_validate_parse: 8 callbacks suppressed [ 325.376546][T14545] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2127'. [ 327.109468][T14543] syzkaller0: entered promiscuous mode [ 327.115108][T14543] syzkaller0: entered allmulticast mode [ 327.289608][T14566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2128'. [ 327.337012][T14556] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.369240][T14556] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 327.441027][T14566] netlink: 'syz.1.2128': attribute type 3 has an invalid length. [ 327.573591][T14556] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.618052][T14556] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 327.746647][T14571] syzkaller0: entered promiscuous mode [ 327.752471][T14571] syzkaller0: entered allmulticast mode [ 327.810810][T14556] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.822908][T14556] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 327.932224][T14589] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2133'. [ 328.395481][T14599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2136'. [ 329.862320][T14556] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.874077][T14556] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 329.899661][T14602] netlink: 'syz.0.2137': attribute type 15 has an invalid length. [ 329.907563][T14602] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2137'. [ 330.016023][T14614] macvtap1: entered promiscuous mode [ 330.024415][T14614] vlan0: entered promiscuous mode [ 330.041463][T14614] vlan0: left promiscuous mode [ 330.168817][T14610] lo speed is unknown, defaulting to 1000 [ 330.194135][T14610] wg1 speed is unknown, defaulting to 1000 [ 330.268681][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 330.299369][ T36] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 330.410249][ T5978] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 330.418416][ T5978] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 330.575561][ T5978] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 330.595649][ T5978] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 330.647814][ T5978] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 330.682538][ T5978] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 330.828378][T14641] syzkaller0: entered promiscuous mode [ 330.840130][T14641] syzkaller0: entered allmulticast mode [ 330.858198][T14640] tipc: Enabled bearer , priority 0 [ 330.949941][T14643] tipc: Resetting bearer [ 331.043835][T14643] tipc: Disabling bearer [ 331.083816][T14636] lo speed is unknown, defaulting to 1000 [ 331.102511][T14636] wg1 speed is unknown, defaulting to 1000 [ 331.596518][T14656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2149'. [ 331.618026][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2149'. [ 331.701011][T14663] dvmrp12: entered allmulticast mode [ 331.750085][T14658] dvmrp12: left allmulticast mode [ 331.901589][T14673] netlink: 'syz.0.2152': attribute type 1 has an invalid length. [ 332.199934][T14683] bond6: Unable to set up delay as MII monitoring is disabled [ 332.227765][T14683] bond6 (unregistering): Released all slaves [ 332.575493][T14696] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 332.588954][T14694] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 333.227145][T14729] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2165'. [ 333.274063][T14729] syzkaller0: entered promiscuous mode [ 333.292449][T14729] syzkaller0: entered allmulticast mode [ 333.826009][T14748] pimreg: entered allmulticast mode [ 333.861446][T14747] tipc: Enabled bearer , priority 0 [ 333.879576][T14747] syzkaller0: entered promiscuous mode [ 333.895401][T14747] syzkaller0: entered allmulticast mode [ 333.942782][T14747] tipc: Resetting bearer [ 333.963441][T14749] lo speed is unknown, defaulting to 1000 [ 333.976572][T14746] tipc: Resetting bearer [ 334.001855][T14746] tipc: Disabling bearer [ 334.028090][T14749] wg1 speed is unknown, defaulting to 1000 [ 334.737989][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2176'. [ 334.767891][T14763] openvswitch: netlink: Flow actions attr not present in new flow. [ 334.996252][T14763] syzkaller0: entered promiscuous mode [ 335.002602][T14763] syzkaller0: entered allmulticast mode [ 337.297907][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'. [ 337.592135][T14797] syzkaller0: entered promiscuous mode [ 337.608753][T14797] syzkaller0: entered allmulticast mode [ 337.622015][T14797] tipc: Enabled bearer , priority 0 [ 337.639804][T14794] tipc: Resetting bearer [ 337.702289][T14794] tipc: Disabling bearer [ 337.768645][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2187'. [ 337.784369][T14804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2187'. [ 337.868863][T14808] bridge_slave_1: left allmulticast mode [ 337.883923][T14808] bridge_slave_1: left promiscuous mode [ 337.894331][T14808] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.992648][T14813] netlink: 'syz.1.2190': attribute type 3 has an invalid length. [ 338.292338][T14822] syzkaller0: entered promiscuous mode [ 338.298159][T14822] syzkaller0: entered allmulticast mode [ 338.556018][T14834] sctp: [Deprecated]: syz.2.2188 (pid 14834) Use of int in max_burst socket option. [ 338.556018][T14834] Use struct sctp_assoc_value instead [ 338.875510][T14819] lo speed is unknown, defaulting to 1000 [ 338.909376][T14845] netlink: 'syz.3.2200': attribute type 6 has an invalid length. [ 338.913304][T14819] wg1 speed is unknown, defaulting to 1000 [ 338.954109][T14845] netlink: 'syz.3.2200': attribute type 7 has an invalid length. [ 338.994080][T14845] netlink: 'syz.3.2200': attribute type 8 has an invalid length. [ 339.130675][T14849] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.164842][T14858] syzkaller0: entered promiscuous mode [ 339.171027][T14858] syzkaller0: entered allmulticast mode [ 339.304421][T14849] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.378690][T14849] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.436751][T14849] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.516313][ T446] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.573268][T14858] tipc: Enabled bearer , priority 0 [ 339.603056][ T446] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.611621][ T446] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.622093][ T446] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.630729][T14857] tipc: Resetting bearer [ 339.651682][T14857] tipc: Disabling bearer [ 339.855446][T14876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2207'. [ 339.875467][T14876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2207'. [ 339.897411][T14876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2207'. [ 339.977131][T14886] netlink: 'syz.3.2210': attribute type 3 has an invalid length. [ 339.985409][T14886] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2210'. [ 340.003114][T14884] netlink: 'syz.2.2209': attribute type 13 has an invalid length. [ 340.011598][T14884] netlink: 'syz.2.2209': attribute type 17 has an invalid length. [ 340.230172][T14901] veth12: entered allmulticast mode [ 340.336795][T14900] syzkaller0: entered promiscuous mode [ 340.342731][T14900] syzkaller0: entered allmulticast mode [ 341.873619][T14905] ip6gre1: entered promiscuous mode [ 341.879279][T14905] ip6gre1: entered allmulticast mode [ 342.084185][T14925] TCP: TCP_TX_DELAY enabled [ 342.302435][T14934] netlink: 'syz.4.2220': attribute type 12 has an invalid length. [ 342.394775][T14937] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2222'. [ 342.451786][T14937] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2222'. [ 342.860260][ T5978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.885391][ T5978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.893745][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.945104][T14958] syzkaller1: entered promiscuous mode [ 342.953474][T14958] syzkaller1: entered allmulticast mode [ 342.981530][T14958] syzkaller1: left promiscuous mode [ 342.989441][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.008254][T14958] syzkaller1: left allmulticast mode [ 343.204421][T14970] lo speed is unknown, defaulting to 1000 [ 343.273391][T14970] wg1 speed is unknown, defaulting to 1000 [ 343.312030][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2229'. [ 343.436529][T14980] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 343.497903][T14984] netlink: 'syz.4.2229': attribute type 1 has an invalid length. [ 343.549414][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.981170][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 344.012480][T15003] lo speed is unknown, defaulting to 1000 [ 344.068319][T15000] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 344.115741][T15000] bond3 (unregistering): Released all slaves [ 344.195196][T15003] wg1 speed is unknown, defaulting to 1000 [ 344.354360][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2239'. [ 344.823298][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2248'. [ 344.838417][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2247'. [ 344.933347][T15053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2248'. [ 345.014824][T15052] syzkaller0: entered promiscuous mode [ 345.022710][T15052] syzkaller0: entered allmulticast mode [ 345.384134][T15074] bridge6: entered promiscuous mode [ 345.817997][T15082] lo speed is unknown, defaulting to 1000 [ 345.846494][T15082] wg1 speed is unknown, defaulting to 1000 [ 345.897453][T15097] lo speed is unknown, defaulting to 1000 [ 345.914788][T15097] wg1 speed is unknown, defaulting to 1000 [ 345.972400][T15103] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2262'. [ 346.381700][T15122] syzkaller0: entered promiscuous mode [ 346.397794][T15122] syzkaller0: entered allmulticast mode [ 346.431795][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2266'. [ 346.446233][T15115] tc_dump_action: action bad kind [ 346.474305][T15118] lo speed is unknown, defaulting to 1000 [ 346.607630][T15118] wg1 speed is unknown, defaulting to 1000 [ 346.859250][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.025093][T15143] netem: change failed [ 347.099629][T15147] lo speed is unknown, defaulting to 1000 [ 347.187951][T15147] wg1 speed is unknown, defaulting to 1000 [ 347.660150][T15180] __nla_validate_parse: 2 callbacks suppressed [ 347.660170][T15180] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2282'. [ 347.785042][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2284'. [ 347.794566][T15180] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2282'. [ 347.845277][T15185] netlink: 'syz.3.2282': attribute type 1 has an invalid length. [ 347.846555][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2284'. [ 347.865191][T15185] netlink: 'syz.3.2282': attribute type 2 has an invalid length. [ 348.006817][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2286'. [ 348.049271][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2286'. [ 348.172914][T15214] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 348.253087][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'. [ 348.470745][ T5915] hid-generic 0005:0002:5508.0001: item fetching failed at offset 3/4 [ 348.499868][ T5915] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22 [ 348.544068][T15229] syzkaller0: entered promiscuous mode [ 348.549868][T15229] syzkaller0: entered allmulticast mode [ 349.266904][T15246] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2297'. [ 349.516609][T15255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2300'. [ 350.144142][T15250] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 350.154565][T15250] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 350.296013][T15265] netlink: 'syz.0.2302': attribute type 1 has an invalid length. [ 350.306464][T15265] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2302'. [ 350.438917][T15270] xt_l2tp: missing protocol rule (udp|l2tpip) [ 350.672798][T15282] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 350.716892][T15282] netlink: 'syz.3.2308': attribute type 11 has an invalid length. [ 351.165570][T15311] veth0: entered promiscuous mode [ 351.353099][T15324] netlink: 'syz.3.2318': attribute type 4 has an invalid length. [ 351.407115][T15329] netlink: 'syz.3.2318': attribute type 4 has an invalid length. [ 352.202730][ T996] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.214349][ T996] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.293751][ T996] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.303098][ T996] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.357678][T15361] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 352.405905][T15357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.472014][T15362] lo speed is unknown, defaulting to 1000 [ 352.498588][T15372] netlink: 'syz.0.2327': attribute type 10 has an invalid length. [ 352.502580][T15362] wg1 speed is unknown, defaulting to 1000 [ 352.513164][T15357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.733010][T15389] atomic_op ffff8880593e7998 conn xmit_atomic 0000000000000000 [ 352.802514][T15397] __nla_validate_parse: 6 callbacks suppressed [ 352.802534][T15397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2328'. [ 352.841259][T15393] syzkaller1: entered promiscuous mode [ 352.865500][T15393] syzkaller1: entered allmulticast mode [ 353.014506][T15405] syzkaller0: entered promiscuous mode [ 353.020350][T15405] syzkaller0: entered allmulticast mode [ 353.252439][T15413] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2335'. [ 353.281190][T15413] openvswitch: netlink: Missing key (keys=40, expected=80) [ 353.317918][T15416] lo speed is unknown, defaulting to 1000 [ 353.341489][T15410] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 353.353458][T15416] wg1 speed is unknown, defaulting to 1000 [ 353.538981][T15410] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2334'. [ 353.901716][ T10] IPVS: starting estimator thread 0... [ 353.973228][T15448] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2343'. [ 354.025731][T15443] IPVS: using max 29 ests per chain, 69600 per kthread [ 354.217860][T15454] syzkaller0: entered promiscuous mode [ 354.250172][T15454] syzkaller0: entered allmulticast mode [ 354.520436][T15477] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2349'. [ 354.673720][T15477] dummy0: entered promiscuous mode [ 354.743561][T15477] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 354.774270][T15477] hsr0: entered allmulticast mode [ 354.789428][T15477] dummy0: entered allmulticast mode [ 354.808258][T15477] bond0: entered allmulticast mode [ 355.564858][T15512] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2358'. [ 355.596547][T15511] tipc: Enabled bearer , priority 0 [ 355.629834][T15511] syzkaller0: entered promiscuous mode [ 355.635612][T15511] syzkaller0: entered allmulticast mode [ 355.667824][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2357'. [ 355.811617][T15519] ip6_vti0: mtu less than device minimum [ 355.935544][T15524] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2361'. [ 355.990052][T15509] tipc: Resetting bearer [ 356.104023][T15509] tipc: Disabling bearer [ 356.255347][T15521] lo speed is unknown, defaulting to 1000 [ 356.295834][T15521] wg1 speed is unknown, defaulting to 1000 [ 356.468160][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2366'. [ 357.332819][T15595] xt_socket: unknown flags 0x50 [ 357.341118][T15595] syzkaller0: entered promiscuous mode [ 357.347134][T15595] syzkaller0: entered allmulticast mode [ 358.462073][ T5841] block nbd1: Receive control failed (result -22) [ 358.542551][T15627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2391'. [ 358.552654][T15623] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2388'. [ 358.570731][T15628] Unknown options in mask b7f2 [ 358.627111][T15633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'. [ 358.642095][T15630] IPVS: set_ctl: invalid protocol: 43 172.20.20.60:5 [ 358.712020][T15637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2394'. [ 358.776420][T15634] lo speed is unknown, defaulting to 1000 [ 358.786707][T15634] wg1 speed is unknown, defaulting to 1000 [ 358.917627][T15643] syzkaller0: entered promiscuous mode [ 358.925489][T15643] syzkaller0: entered allmulticast mode [ 359.504344][T15662] bridge_slave_1: mtu less than device minimum [ 359.671187][T15676] xt_HMARK: spi-set and port-set can't be combined [ 359.895276][T15688] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2408'. [ 359.921210][T15689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2406'. [ 360.123962][T15695] syzkaller0: entered promiscuous mode [ 360.131075][T15695] syzkaller0: entered allmulticast mode [ 360.275171][T15699] netlink: 'syz.2.2411': attribute type 1 has an invalid length. [ 360.320877][T15699] 8021q: adding VLAN 0 to HW filter on device bond6 [ 360.357658][T15699] bond6: (slave gretap3): making interface the new active one [ 360.376171][T15699] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 360.431839][T15704] tipc: New replicast peer: 255.255.255.255 [ 360.442675][T15704] tipc: Enabled bearer , priority 6 [ 360.452121][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2412'. [ 360.486961][T15707] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2413'. [ 360.608062][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2414'. [ 360.650548][T15721] IPv6: Can't replace route, no match found [ 360.753464][T15725] syzkaller0: entered promiscuous mode [ 360.770146][T15725] syzkaller0: entered allmulticast mode [ 360.855782][T15731] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 360.866159][T15731] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 360.993061][T15736] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 361.009765][T15736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.031045][T15736] syzkaller0: entered promiscuous mode [ 361.038847][T15736] syzkaller0: entered allmulticast mode [ 361.561295][ T10] tipc: Node number set to 1977583342 [ 361.584596][T15767] lo speed is unknown, defaulting to 1000 [ 361.616632][T15775] openvswitch: netlink: IP tunnel dst address not specified [ 361.634747][T15767] wg1 speed is unknown, defaulting to 1000 [ 361.750712][T15779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2434'. [ 362.043098][T15792] bond6: option resend_igmp: invalid value (2878) [ 362.050297][T15792] bond6: option resend_igmp: allowed values 0 - 255 [ 362.066961][T15792] bond6 (unregistering): Released all slaves [ 362.222399][T15799] siw: device registration error -23 [ 362.457614][T15811] smc: adding net device hsr0 with user defined pnetid SYZ2 [ 362.486635][T15811] bond0: entered promiscuous mode [ 362.510221][T15811] bond_slave_0: entered promiscuous mode [ 362.524351][T15811] bond_slave_1: entered promiscuous mode [ 362.549744][T15811] bond0: left promiscuous mode [ 362.555045][T15811] bond_slave_0: left promiscuous mode [ 362.563529][T15811] bond_slave_1: left promiscuous mode [ 362.596658][T15811] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 362.640299][T15814] smc: adding net device hsr0 with user defined pnetid SYZ2 [ 362.650578][T15814] bond0: entered promiscuous mode [ 362.655739][T15814] bond_slave_0: entered promiscuous mode [ 362.662561][T15814] bond_slave_1: entered promiscuous mode [ 362.696240][T15814] bond0: left promiscuous mode [ 362.701943][T15814] bond_slave_0: left promiscuous mode [ 362.707886][T15814] bond_slave_1: left promiscuous mode [ 362.724992][T15814] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 362.982424][T15825] lo speed is unknown, defaulting to 1000 [ 363.007004][T15825] wg1 speed is unknown, defaulting to 1000 [ 363.065090][T15833] batadv0: entered promiscuous mode [ 363.091231][T15833] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 363.118161][T15833] batadv0: left promiscuous mode [ 363.546746][T15860] ip6t_rpfilter: unknown options [ 364.589526][T15907] tipc: Enabling of bearer rejected, failed to enable media [ 364.604744][T15907] __nla_validate_parse: 13 callbacks suppressed [ 364.604768][T15907] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2470'. [ 364.793247][T15919] x_tables: duplicate underflow at hook 2 [ 365.126418][T15934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2479'. [ 365.189334][T15939] IPv6: Can't replace route, no match found [ 365.270690][T15943] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2476'. [ 365.296010][T15939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2476'. [ 366.063836][T15970] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.461773][T15995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2493'. [ 366.499617][T15995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2493'. [ 366.699373][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 366.794039][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2499'. [ 366.906608][T16024] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 367.016686][T16024] bond6 (unregistering): Released all slaves [ 367.226362][T16036] netlink: 'syz.4.2502': attribute type 29 has an invalid length. [ 367.253013][T16036] netlink: 'syz.4.2502': attribute type 29 has an invalid length. [ 367.284132][T16036] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2502'. [ 367.287378][T16039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2503'. [ 367.304671][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2500'. [ 367.716680][T16065] tipc: Enabled bearer , priority 0 [ 367.843510][T16065] tipc: Disabling bearer [ 368.514458][T16097] bond7: entered allmulticast mode [ 368.543386][T16097] 8021q: adding VLAN 0 to HW filter on device bond7 [ 370.438563][T16161] netlink: 'syz.2.2539': attribute type 11 has an invalid length. [ 370.446883][T16161] netlink: 'syz.2.2539': attribute type 11 has an invalid length. [ 370.454949][T16161] __nla_validate_parse: 5 callbacks suppressed [ 370.454969][T16161] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2539'. [ 370.525385][T16161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.584507][T16174] tipc: Enabled bearer , priority 0 [ 370.631969][T16174] syzkaller0: entered promiscuous mode [ 370.639546][T16174] syzkaller0: entered allmulticast mode [ 370.795982][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2544'. [ 370.984175][T16185] syzkaller0: entered promiscuous mode [ 370.990739][T16185] syzkaller0: entered allmulticast mode [ 371.010134][T16174] tipc: Resetting bearer [ 371.012030][T16177] lo speed is unknown, defaulting to 1000 [ 371.070597][ T446] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.093888][ T446] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.170372][T16173] tipc: Resetting bearer [ 371.197368][T16173] tipc: Disabling bearer [ 371.208069][ T446] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.230089][T16177] wg1 speed is unknown, defaulting to 1000 [ 371.236045][ T446] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.322852][T16192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2548'. [ 371.507560][T16198] lo speed is unknown, defaulting to 1000 [ 371.520312][T16198] wg1 speed is unknown, defaulting to 1000 [ 372.024331][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 372.117921][T16214] openvswitch: netlink: IP tunnel dst address not specified [ 372.256734][T16220] bond6: option lacp_rate: invalid value (255) [ 372.270475][T16220] bond6 (unregistering): Released all slaves [ 372.281655][T16224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2554'. [ 372.408539][T16228] netlink: 1956 bytes leftover after parsing attributes in process `syz.3.2556'. [ 372.420758][T16228] netlink: 1956 bytes leftover after parsing attributes in process `syz.3.2556'. [ 372.431891][T16228] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2556'. [ 372.456443][T16230] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2557'. [ 372.656949][T16235] x_tables: duplicate underflow at hook 3 [ 372.755811][T16243] macsec0: entered allmulticast mode [ 372.762343][T16243] veth1_macvtap: entered allmulticast mode [ 372.768440][T16243] macsec0: left allmulticast mode [ 372.773896][T16243] veth1_macvtap: left allmulticast mode [ 372.872727][T16248] tipc: Enabled bearer , priority 0 [ 372.891581][T16249] tipc: Enabling of bearer rejected, already enabled [ 372.941645][T16254] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20002 [ 372.978698][T16247] tipc: Disabling bearer [ 373.036060][T16259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2566'. [ 373.392585][T16284] netlink: 'syz.0.2573': attribute type 83 has an invalid length. [ 373.424706][T16287] netlink: 'syz.3.2574': attribute type 1 has an invalid length. [ 373.632970][T16302] netlink: 'syz.1.2580': attribute type 1 has an invalid length. [ 373.650437][T16304] netlink: 'syz.3.2581': attribute type 1 has an invalid length. [ 373.739719][T16304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 373.773787][T16302] bond4: (slave veth13): Enslaving as an active interface with a down link [ 373.804264][T16311] bond3: (slave geneve2): making interface the new active one [ 373.814428][T16311] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 373.839327][T16307] bond4 (unregistering): (slave veth13): Releasing active interface [ 373.858861][T16307] bond4 (unregistering): Released all slaves [ 373.896771][ T446] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.924042][ T446] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.959526][ T446] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.970376][ T446] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.166792][T16326] netlink: zone id is out of range [ 374.179494][T16326] netlink: zone id is out of range [ 374.184895][T16326] netlink: get zone limit has 4 unknown bytes [ 374.354508][T16329] lo speed is unknown, defaulting to 1000 [ 374.397828][T16329] wg1 speed is unknown, defaulting to 1000 [ 375.417144][T16374] lo speed is unknown, defaulting to 1000 [ 375.451477][T16374] wg1 speed is unknown, defaulting to 1000 [ 375.681554][T16401] __nla_validate_parse: 12 callbacks suppressed [ 375.681574][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2602'. [ 375.725462][T16402] lo speed is unknown, defaulting to 1000 [ 375.792043][T16412] netlink: 'syz.4.2605': attribute type 8 has an invalid length. [ 375.804170][T16401] tipc: Disabling bearer [ 375.873910][T16402] wg1 speed is unknown, defaulting to 1000 [ 376.005374][T16418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2606'. [ 376.037976][T16418] netlink: 'syz.3.2606': attribute type 7 has an invalid length. [ 376.054983][T16418] netlink: 'syz.3.2606': attribute type 8 has an invalid length. [ 376.081570][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2606'. [ 376.114481][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2607'. [ 376.167833][T16427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.178767][T16427] hsr0: entered promiscuous mode [ 376.184592][T16427] hsr0: entered allmulticast mode [ 376.190762][T16427] hsr_slave_0: entered allmulticast mode [ 376.658361][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2612'. [ 376.953378][T16456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2613'. [ 377.037138][T16461] netlink: 408 bytes leftover after parsing attributes in process `syz.2.2615'. [ 377.264832][T16465] syzkaller0: entered promiscuous mode [ 377.314310][T16465] syzkaller0: entered allmulticast mode [ 377.422366][T16477] syzkaller0: entered promiscuous mode [ 377.443593][T16477] syzkaller0: entered allmulticast mode [ 380.041827][T16502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2625'. [ 380.138929][T16517] IPVS: length: 132 != 8 [ 380.429654][T16536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2632'. [ 380.660212][T16556] netlink: 'syz.1.2637': attribute type 1 has an invalid length. [ 381.798495][T16591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2645'. [ 381.808816][T16588] netlink: 'syz.0.2649': attribute type 3 has an invalid length. [ 381.820538][T16588] bridge2: entered allmulticast mode [ 381.826807][T16588] pimreg: left allmulticast mode [ 381.973229][T16595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.001368][T16595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.037968][T16589] tipc: Enabled bearer , priority 0 [ 382.049886][T16597] syzkaller0: entered promiscuous mode [ 382.055693][ T5894] lo speed is unknown, defaulting to 1000 [ 382.061679][ T5894] syz2: Port: 1 Link ACTIVE [ 382.062571][T16597] syzkaller0: entered allmulticast mode [ 382.107714][T16587] bridge2: left allmulticast mode [ 382.146487][T16605] x_tables: duplicate underflow at hook 1 [ 382.165635][T16602] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 382.179457][T16602] bond4 (unregistering): Released all slaves [ 382.279483][T16594] lo speed is unknown, defaulting to 1000 [ 382.299849][T16585] tipc: Resetting bearer [ 382.308326][T16582] tipc: Resetting bearer [ 382.355873][T16612] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2655'. [ 382.358721][T16582] tipc: Disabling bearer [ 382.484615][T16594] wg1 speed is unknown, defaulting to 1000 [ 382.844777][T16633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2661'. [ 382.895656][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2661'. [ 382.941092][T16634] syzkaller1: entered promiscuous mode [ 382.951547][T16634] syzkaller1: entered allmulticast mode [ 382.984651][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2662'. [ 383.213819][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2663'. [ 383.422466][T16661] lo speed is unknown, defaulting to 1000 [ 383.434596][T16661] wg1 speed is unknown, defaulting to 1000 [ 383.594607][T16667] netlink: 'syz.1.2666': attribute type 13 has an invalid length. [ 383.668441][T16656] netlink: 'syz.0.2664': attribute type 6 has an invalid length. [ 384.493644][T16691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 384.539138][T16694] xt_hashlimit: max too large, truncated to 1048576 [ 384.548387][T16672] lo speed is unknown, defaulting to 1000 [ 384.576614][T16672] wg1 speed is unknown, defaulting to 1000 [ 384.584343][T16687] lo speed is unknown, defaulting to 1000 [ 384.656007][T16687] wg1 speed is unknown, defaulting to 1000 [ 384.797829][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2676'. [ 384.808641][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2676'. [ 385.003700][T16696] netlink: 'syz.1.2676': attribute type 16 has an invalid length. [ 385.014927][T16696] netlink: 55946 bytes leftover after parsing attributes in process `syz.1.2676'. [ 385.319739][T16725] batadv_slave_1: entered promiscuous mode [ 385.342743][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2682'. [ 385.449817][T16725] bond1: (slave bridge0): Releasing active interface [ 385.587064][T16724] batadv_slave_1: left promiscuous mode [ 385.647173][T16748] bond6: entered promiscuous mode [ 385.654731][T16748] bond6: entered allmulticast mode [ 385.663529][T16748] 8021q: adding VLAN 0 to HW filter on device bond6 [ 385.757597][T16752] netlink: 'syz.2.2689': attribute type 1 has an invalid length. [ 385.803257][T16752] gre2: entered promiscuous mode [ 386.038244][T16763] lo speed is unknown, defaulting to 1000 [ 386.048066][T16763] wg1 speed is unknown, defaulting to 1000 [ 386.246460][T16775] lo speed is unknown, defaulting to 1000 [ 386.273144][T16775] wg1 speed is unknown, defaulting to 1000 [ 386.286760][T16781] 0ªî{X¹¦: left allmulticast mode [ 386.309432][T16781] ip_vti0: left promiscuous mode [ 386.314560][T16781] ip6_vti0: left allmulticast mode [ 386.331959][T16781] batadv_slave_0: left promiscuous mode [ 386.362595][T16781] gretap2: left promiscuous mode [ 386.367972][T16781] bond3: left promiscuous mode [ 386.381910][T16781] bond4: left promiscuous mode [ 386.398458][T16781] macsec1: left promiscuous mode [ 386.429453][T16781] macsec1: left allmulticast mode [ 386.435446][T16781] geneve2: left promiscuous mode [ 386.457059][T16781] bond7: left allmulticast mode [ 386.806022][T16800] x_tables: duplicate underflow at hook 1 [ 386.961621][T16807] __nla_validate_parse: 3 callbacks suppressed [ 386.961641][T16807] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2704'. [ 387.043234][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2706'. [ 387.168148][T16818] bridge_slave_0: left allmulticast mode [ 387.198868][T16818] bridge_slave_0: left promiscuous mode [ 387.225722][T16818] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.460258][T16833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2709'. [ 387.658035][T16836] syzkaller1: left promiscuous mode [ 387.671449][T16836] syzkaller1: left allmulticast mode [ 387.742780][T16840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2712'. [ 387.762065][T16839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2711'. [ 387.785940][T16839] netlink: 'syz.0.2711': attribute type 1 has an invalid length. [ 388.158249][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2720'. [ 388.202396][T16863] smc: adding net device hsr0 with user defined pnetid SYZ2 [ 388.228358][T16863] dummy0: entered promiscuous mode [ 388.246222][T16863] bond0: entered promiscuous mode [ 388.259562][T16863] bond_slave_0: entered promiscuous mode [ 388.270156][T16863] bond_slave_1: entered promiscuous mode [ 388.277128][T16863] debugfs: 'hsr0' already exists in 'hsr' [ 388.283298][T16863] Cannot create hsr debugfs directory [ 388.290112][T16863] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 388.300784][T16863] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 388.311238][T16863] hsr0: entered allmulticast mode [ 388.316453][T16863] dummy0: entered allmulticast mode [ 388.325974][T16863] bond0: entered allmulticast mode [ 388.331512][T16863] bond_slave_0: entered allmulticast mode [ 388.337546][T16863] bond_slave_1: entered allmulticast mode [ 388.449840][T16884] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 388.835331][T16906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2731'. [ 388.845466][T16906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2731'. [ 388.869704][T16912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2731'. [ 388.893992][T16906] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2731'. [ 388.919824][T16910] : renamed from veth0_vlan (while UP) [ 391.214443][T16951] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 391.310327][T16946] lo speed is unknown, defaulting to 1000 [ 391.348134][T16946] wg1 speed is unknown, defaulting to 1000 [ 391.387044][T16959] netlink: 'syz.3.2742': attribute type 10 has an invalid length. [ 391.472726][T16965] dummy0: left promiscuous mode [ 391.593951][T16974] netlink: 'syz.0.2747': attribute type 1 has an invalid length. [ 391.646601][T16974] 8021q: adding VLAN 0 to HW filter on device bond6 [ 391.701958][T16974] bond6: (slave ip6gretap1): making interface the new active one [ 391.716045][T16974] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 391.844505][T16978] veth9: entered promiscuous mode [ 391.873872][T16978] bond6: (slave veth9): Enslaving as an active interface with a down link [ 391.887113][T16974] erspan0: entered allmulticast mode [ 391.925849][T16974] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 392.004105][T16988] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 392.226918][T16989] lo speed is unknown, defaulting to 1000 [ 392.258045][T16989] wg1 speed is unknown, defaulting to 1000 [ 392.332096][T17010] netlink: 'syz.1.2756': attribute type 31 has an invalid length. [ 392.482991][T17013] lo speed is unknown, defaulting to 1000 [ 392.494638][T17013] wg1 speed is unknown, defaulting to 1000 [ 392.986903][T17028] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 392.997282][T17028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.016651][T17028] netlink: 'syz.1.2762': attribute type 1 has an invalid length. [ 393.024864][T17028] __nla_validate_parse: 11 callbacks suppressed [ 393.024885][T17028] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2762'. [ 393.152209][T17035] tipc: Enabled bearer , priority 0 [ 393.161979][T17035] syzkaller0: entered promiscuous mode [ 393.179586][T17035] syzkaller0: entered allmulticast mode [ 393.359890][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2764'. [ 393.627108][T17054] netlink: 'syz.2.2766': attribute type 9 has an invalid length. [ 393.636782][T17054] netlink: 'syz.2.2766': attribute type 11 has an invalid length. [ 393.645151][T17054] netlink: 'syz.2.2766': attribute type 12 has an invalid length. [ 393.653517][T17054] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2766'. [ 393.664371][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2766'. [ 394.326962][T17035] tipc: Resetting bearer [ 394.397093][T17072] netlink: 'syz.2.2768': attribute type 15 has an invalid length. [ 394.419968][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2768'. [ 394.436585][T17035] tipc: Disabling bearer [ 394.456218][T17074] netlink: 'syz.1.2770': attribute type 6 has an invalid length. [ 394.476780][ T5978] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 394.483611][T17074] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2770'. [ 394.496083][ T5978] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 394.514708][ T5978] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 394.549710][ T5978] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 394.664189][T17081] lo speed is unknown, defaulting to 1000 [ 394.675926][T17081] wg1 speed is unknown, defaulting to 1000 [ 394.702539][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2771'. [ 395.100878][T17106] veth0_to_hsr: mtu less than device minimum [ 395.158569][T17105] sctp: [Deprecated]: syz.1.2775 (pid 17105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.158569][T17105] Use struct sctp_sack_info instead [ 395.246183][T17110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2777'. [ 395.258664][T17110] "syz.1.2777" (17110) uses obsolete ecb(arc4) skcipher [ 395.779829][T17126] netlink: ct family unspecified [ 395.790812][T17126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.857316][T17126] tipc: Enabled bearer , priority 0 [ 395.910393][T17126] syzkaller0: entered promiscuous mode [ 395.916050][T17126] syzkaller0: entered allmulticast mode [ 395.936897][T17126] tipc: Resetting bearer [ 395.959348][T17125] tipc: Resetting bearer [ 396.016810][T17125] tipc: Disabling bearer [ 396.135978][T17138] lo speed is unknown, defaulting to 1000 [ 396.171083][T17138] wg1 speed is unknown, defaulting to 1000 [ 396.179287][T17145] openvswitch: netlink: Message has 12 unknown bytes. [ 396.186429][T17147] openvswitch: netlink: Message has 12 unknown bytes. [ 396.822294][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'. [ 396.884500][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'. [ 397.084809][T17185] macsec1: entered promiscuous mode [ 397.105908][T17185] macsec1: entered allmulticast mode [ 397.221861][T17157] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 397.742413][T17227] netlink: 'syz.0.2807': attribute type 13 has an invalid length. [ 397.750454][T17227] netlink: 'syz.0.2807': attribute type 17 has an invalid length. [ 398.459190][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 399.096593][T17211] tipc: Enabled bearer , priority 0 [ 399.104004][T17214] syzkaller0: entered promiscuous mode [ 399.109801][T17214] syzkaller0: entered allmulticast mode [ 399.153425][T17227] erspan0: left allmulticast mode [ 399.216193][T17227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.237881][T17214] tipc: Resetting bearer [ 399.278099][T17214] tipc: Disabling bearer [ 399.294807][T17233] __nla_validate_parse: 5 callbacks suppressed [ 399.294829][T17233] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2809'. [ 399.327632][T17233] block nbd0: reconnected socket [ 399.339419][ T5841] block nbd0: Receive control failed (result -32) [ 399.428858][T17236] lo speed is unknown, defaulting to 1000 [ 399.640463][T17236] wg1 speed is unknown, defaulting to 1000 [ 399.896264][T17265] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2816'. [ 400.484489][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.504942][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.516431][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.532681][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.541273][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.637141][ T5828] bond0: (slave syz_tun): Releasing backup interface [ 400.646330][ T5828] syz_tun (unregistering): left promiscuous mode [ 400.684908][T17291] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2823'. [ 400.726628][T17291] team0: No ports can be present during mode change [ 400.789320][T17281] lo speed is unknown, defaulting to 1000 [ 400.797881][T17281] wg1 speed is unknown, defaulting to 1000 [ 400.911386][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2825'. [ 401.109407][T17316] netlink: 'syz.3.2828': attribute type 39 has an invalid length. [ 401.132523][T12292] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.207498][T17313] bond4: option min_links: invalid value (18446744073709551612) [ 401.219320][T17313] bond4: option min_links: allowed values 0 - 2147483647 [ 401.831698][T17313] bond4 (unregistering): Released all slaves [ 401.890802][T17307] lo speed is unknown, defaulting to 1000 [ 401.973285][T12292] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.039571][T17307] wg1 speed is unknown, defaulting to 1000 [ 402.068291][T12292] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.099875][T17281] chnl_net:caif_netlink_parms(): no params data found [ 402.260262][T12292] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.316318][T17346] netlink: 'syz.4.2833': attribute type 10 has an invalid length. [ 402.619580][ T5833] Bluetooth: hci5: command tx timeout [ 402.868565][T17281] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.891816][T17281] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.910034][T17281] bridge_slave_0: entered allmulticast mode [ 402.926977][T17281] bridge_slave_0: entered promiscuous mode [ 403.014848][T17281] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.048784][T17281] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.070190][T17281] bridge_slave_1: entered allmulticast mode [ 403.078353][T17281] bridge_slave_1: entered promiscuous mode [ 403.205646][T17281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.491459][T12292] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 403.523586][T12292] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 26:43:c4:7b:4d:d4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 403.561377][T12292] bond6 (unregistering): (slave erspan0): making interface the new active one [ 403.718649][T12292] bond6 (unregistering): (slave erspan0): Releasing active interface [ 404.001948][T12292] bond4 (unregistering): (slave bridge5): Releasing active interface [ 404.042088][T12292] bond5 (unregistering): (slave bridge6): Releasing active interface [ 404.396391][T12292] bond0 (unregistering): left promiscuous mode [ 404.402683][T12292] bond_slave_0: left promiscuous mode [ 404.408293][T12292] bond_slave_1: left promiscuous mode [ 404.431742][T12292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.442945][T12292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.452917][T12292] bond0 (unregistering): Released all slaves [ 404.559762][T12292] bond1 (unregistering): Released all slaves [ 404.660497][T12292] bond2 (unregistering): Released all slaves [ 404.676695][T12292] bond3 (unregistering): Released all slaves [ 404.691104][T12292] bond4 (unregistering): Released all slaves [ 404.699258][ T5833] Bluetooth: hci5: command tx timeout [ 404.710050][T12292] bond5 (unregistering): Released all slaves [ 404.824189][T12292] bond6 (unregistering): (slave veth9): Releasing active interface [ 404.834264][T12292] bond6 (unregistering): Released all slaves [ 404.850405][T17281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.015291][T17281] team0: Port device team_slave_0 added [ 405.052121][T17281] team0: Port device team_slave_1 added [ 405.063171][T12292] tipc: Left network mode [ 405.092328][T12292] IPVS: stopping backup sync thread 9535 ... [ 405.137097][T17404] vlan2: entered allmulticast mode [ 405.169858][T17404] veth1: entered allmulticast mode [ 405.291721][T17281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.298818][T17281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.339098][T17281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.363852][T17281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.375122][T17281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.404224][T17281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.415650][T17422] netlink: 'syz.3.2848': attribute type 8 has an invalid length. [ 405.424584][T17422] sch_fq: defrate 0 ignored. [ 405.658183][T17281] hsr_slave_0: entered promiscuous mode [ 405.680902][T17281] hsr_slave_1: entered promiscuous mode [ 405.734978][T17426] lo speed is unknown, defaulting to 1000 [ 405.795516][T17426] wg1 speed is unknown, defaulting to 1000 [ 406.046763][T17449] netlink: 'syz.2.2857': attribute type 1 has an invalid length. [ 406.058841][T17447] syzkaller1: entered promiscuous mode [ 406.067583][T17447] syzkaller1: entered allmulticast mode [ 406.074491][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2853'. [ 406.177587][T17451] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 406.188720][T17451] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 406.265044][T17453] macvlan0: entered promiscuous mode [ 406.285353][T17453] macvlan0: entered allmulticast mode [ 406.294834][T17453] bond8: entered promiscuous mode [ 406.301247][T17453] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 406.312041][T17453] bond8: left promiscuous mode [ 406.514200][T12292] hsr_slave_0: left promiscuous mode [ 406.610043][T12292] pimreg3 (unregistering): left allmulticast mode [ 406.779329][ T5833] Bluetooth: hci5: command tx timeout [ 407.381030][ T5894] lo speed is unknown, defaulting to 1000 [ 407.387545][ T5894] syz2: Port: 1 Link DOWN [ 407.525249][T17468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2861'. [ 408.083207][T12292] IPVS: stop unused estimator thread 0... [ 408.138486][T17281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 408.233453][T17281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 408.274138][T17281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 408.320895][T17503] veth0: entered promiscuous mode [ 408.347375][T17281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 408.405472][T17514] veth0: left promiscuous mode [ 408.612902][T17521] wg1 speed is unknown, defaulting to 1000 [ 408.750513][T17281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.807832][T17281] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.860767][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.868048][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.875766][ T5833] Bluetooth: hci5: command tx timeout [ 409.071610][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.078823][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.450564][T17539] Ï: option downdelay: invalid value (18446744073709547007) [ 409.457972][T17539] Ï: option downdelay: allowed values 0 - 2147483647 [ 409.483199][T17539] Ï (unregistering): Released all slaves [ 409.540075][T17549] team0: No ports can be present during mode change [ 409.573556][T17549] netlink: 'syz.1.2878': attribute type 1 has an invalid length. [ 409.770919][T17554] wg1 speed is unknown, defaulting to 1000 [ 409.792219][T17281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.806440][T17556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2880'. [ 410.195693][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2884'. [ 410.244081][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2884'. [ 410.254983][T17576] netlink: 'syz.1.2884': attribute type 13 has an invalid length. [ 410.262907][T17576] netlink: 'syz.1.2884': attribute type 12 has an invalid length. [ 410.285786][T17281] veth0_vlan: entered promiscuous mode [ 410.325888][T17281] veth1_vlan: entered promiscuous mode [ 410.461737][T17281] veth0_macvtap: entered promiscuous mode [ 410.487476][T17281] veth1_macvtap: entered promiscuous mode [ 410.526221][T17281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.552513][T17281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.571396][ T6326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.580778][ T6326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.601498][ T6326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.614559][ T6326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.807527][T12292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.820198][T12292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.878130][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.887085][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.053453][T17602] wg1 speed is unknown, defaulting to 1000 [ 411.187346][T17607] wg1 speed is unknown, defaulting to 1000 [ 411.561018][T17626] netlink: 'syz.3.2895': attribute type 96 has an invalid length. [ 411.570896][T17626] netlink: 'syz.3.2895': attribute type 2 has an invalid length. [ 411.578855][T17626] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2895'. [ 411.841706][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 411.853855][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 411.864424][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 411.875030][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 411.888823][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 411.901432][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 411.912158][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 411.963929][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 412.000222][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 412.021525][T17639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.049403][T17636] ip6gre0: entered promiscuous mode [ 412.122908][T17648] tipc: Enabled bearer , priority 0 [ 412.164023][T17648] syzkaller0: entered promiscuous mode [ 412.183963][T17652] netlink: 'syz.4.2903': attribute type 83 has an invalid length. [ 412.195178][T17648] syzkaller0: entered allmulticast mode [ 412.230662][T17648] tipc: Resetting bearer [ 412.297362][T17648] tipc: Disabling bearer [ 412.338454][T17655] vcan0: entered promiscuous mode [ 412.347329][T17655] vcan0: entered allmulticast mode [ 412.498470][T17676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.541145][T17676] batadv_slave_0: entered promiscuous mode [ 412.562825][T17676] netlink: 'syz.0.2910': attribute type 3 has an invalid length. [ 412.717540][T17678] wg1 speed is unknown, defaulting to 1000 [ 412.747071][T17685] netlink: 'syz.3.2913': attribute type 1 has an invalid length. [ 412.834210][T17685] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.917539][T17691] bond4: (slave veth15): Enslaving as an active interface with a down link [ 413.164185][T17700] bond4 (unregistering): (slave veth15): Releasing active interface [ 413.175100][T17700] bond4 (unregistering): Released all slaves [ 413.226280][T17690] wg1 speed is unknown, defaulting to 1000 [ 413.358148][T17702] wg1 speed is unknown, defaulting to 1000 [ 413.723724][T17730] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 413.881076][T17731] wg1 speed is unknown, defaulting to 1000 [ 413.929961][T17739] netlink: 'syz.2.2926': attribute type 10 has an invalid length. [ 414.511333][T17764] netlink: 'syz.3.2933': attribute type 11 has an invalid length. [ 415.174508][T17787] netlink: 'syz.2.2939': attribute type 10 has an invalid length. [ 415.186246][T17788] netlink: 'syz.2.2939': attribute type 10 has an invalid length. [ 415.257574][T17787] team0: Port device dummy0 added [ 415.330629][T17788] team0: Port device dummy0 removed [ 415.354144][T17788] dummy0: entered promiscuous mode [ 415.372044][T17788] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 415.424365][T17799] IPv6: Can't replace route, no match found [ 415.581053][T17810] syzkaller0: entered promiscuous mode [ 415.608916][T17810] syzkaller0: entered allmulticast mode [ 415.766520][T17803] tipc: Enabled bearer , priority 0 [ 415.899303][T17821] hsr_slave_1 (unregistering): left promiscuous mode [ 415.914152][T17801] tipc: Resetting bearer [ 415.963063][T17801] tipc: Disabling bearer [ 416.001124][T17837] tipc: Enabled bearer , priority 0 [ 416.031760][T17828] syzkaller0: entered promiscuous mode [ 416.037422][T17828] syzkaller0: entered allmulticast mode [ 416.104488][T17828] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.242256][T17828] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.347858][T17852] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 416.358722][T17828] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.472716][T17828] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.673673][ T3900] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.737229][ T3900] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.751826][T17827] tipc: Resetting bearer [ 416.790705][T17827] tipc: Disabling bearer [ 416.827370][ T3900] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.856854][ T3900] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.867769][T17863] wg1 speed is unknown, defaulting to 1000 [ 416.919479][T17877] netlink: 'syz.1.2963': attribute type 1 has an invalid length. [ 417.249742][T17893] Unsupported ieee802154 address type: 0 [ 417.256096][T17894] __nla_validate_parse: 21 callbacks suppressed [ 417.256115][T17894] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2966'. [ 417.373941][T17904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2968'. [ 417.402468][T17903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2968'. [ 417.554820][T17907] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 417.594197][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'. [ 417.621974][T17915] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2972'. [ 417.716214][T17921] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 418.037129][T17935] IPVS: Unknown mcast interface: bridge0 [ 418.112444][T17948] netlink: 'syz.0.2981': attribute type 10 has an invalid length. [ 418.138377][T17948] team0: Port device dummy0 added [ 418.154206][T17953] netlink: 'syz.0.2981': attribute type 10 has an invalid length. [ 418.170602][T17948] netlink: 'syz.0.2981': attribute type 10 has an invalid length. [ 418.190641][T17952] ip6gre2: entered promiscuous mode [ 418.203463][T17952] ip6gre2: entered allmulticast mode [ 418.240172][T17953] team0: Port device dummy0 removed [ 418.267783][T17953] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 418.518610][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.530279][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.540438][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.551133][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 418.559204][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.589919][T17961] lo speed is unknown, defaulting to 1000 [ 418.631879][T17968] wg1 speed is unknown, defaulting to 1000 [ 418.721092][T17975] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 418.761859][T17975] bond4 (unregistering): Released all slaves [ 418.867248][T17961] lo speed is unknown, defaulting to 1000 [ 418.934371][T17961] lo speed is unknown, defaulting to 1000 [ 419.458268][T17997] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2992'. [ 419.468945][T17961] infiniband syz0: set down [ 419.477186][T17961] infiniband syz0: added lo [ 419.513366][T17997] sctp: [Deprecated]: syz.2.2992 (pid 17997) Use of int in max_burst socket option. [ 419.513366][T17997] Use struct sctp_assoc_value instead [ 419.577744][ T6158] lo speed is unknown, defaulting to 1000 [ 419.602950][T17961] RDS/IB: syz0: added [ 419.613304][T17961] smc: adding ib device syz0 with port count 1 [ 419.649412][T17961] smc: ib device syz0 port 1 has no pnetid [ 419.658852][ T6166] lo speed is unknown, defaulting to 1000 [ 419.674305][T17968] chnl_net:caif_netlink_parms(): no params data found [ 419.730949][T17961] lo speed is unknown, defaulting to 1000 [ 419.773490][T18007] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 419.797428][T18007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'. [ 419.830195][T18007] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:0 [ 420.029661][T17968] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.036979][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.053137][T17968] bridge_slave_0: entered allmulticast mode [ 420.062012][T17968] bridge_slave_0: entered promiscuous mode [ 420.102106][T17968] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.119419][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.126834][T17968] bridge_slave_1: entered allmulticast mode [ 420.151169][T17968] bridge_slave_1: entered promiscuous mode [ 420.264618][T17961] lo speed is unknown, defaulting to 1000 [ 420.276962][T17968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.331497][T17968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.619294][ T5833] Bluetooth: hci2: command tx timeout [ 421.384225][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 421.394713][T18034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3001'. [ 422.701584][ T5833] Bluetooth: hci2: command tx timeout [ 422.794011][T17968] team0: Port device team_slave_0 added [ 422.802247][T17961] lo speed is unknown, defaulting to 1000 [ 422.882803][T17968] team0: Port device team_slave_1 added [ 423.013669][T18042] netlink: 'syz.4.3004': attribute type 1 has an invalid length. [ 423.023545][T18045] netlink: 'syz.4.3004': attribute type 1 has an invalid length. [ 423.069283][T18045] netlink: 'syz.4.3004': attribute type 3 has an invalid length. [ 423.099117][T18045] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3004'. [ 423.446028][ T36] bond2 (unregistering): (slave gretap2): Releasing active interface [ 423.469086][ T36] gretap2 (unregistering): left allmulticast mode [ 423.620283][ T36] team0: Port device geneve0 removed [ 423.935609][ T36] bond1 (unregistering): Released all slaves [ 424.091509][ T36] bond0 (unregistering): Released all slaves [ 424.230155][ T36] bond2 (unregistering): Released all slaves [ 424.248247][ T36] bond3 (unregistering): Released all slaves [ 424.319990][T18050] netlink: 'syz.0.3005': attribute type 12 has an invalid length. [ 424.359139][T17961] lo speed is unknown, defaulting to 1000 [ 424.367842][T17968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.409149][T17968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.469077][T17968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.492535][T17968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.509318][T17968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.582581][T17968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.600112][T18072] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96 [ 424.614484][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3010'. [ 424.666659][T18075] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3010'. [ 424.791298][ T5833] Bluetooth: hci2: command tx timeout [ 424.855176][T17968] hsr_slave_0: entered promiscuous mode [ 424.870895][T17968] hsr_slave_1: entered promiscuous mode [ 424.877784][T17968] debugfs: 'hsr0' already exists in 'hsr' [ 424.885961][T17968] Cannot create hsr debugfs directory [ 425.078350][T18081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3013'. [ 425.112464][T17961] lo speed is unknown, defaulting to 1000 [ 425.182792][T18083] syzkaller0: entered promiscuous mode [ 425.188583][T18083] syzkaller0: entered allmulticast mode [ 425.624433][T17961] lo speed is unknown, defaulting to 1000 [ 425.714630][T17968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 425.974741][T17968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 426.110952][T17968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 426.117778][ T36] tipc: Left network mode [ 426.213456][T17968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 426.254065][T18098] tipc: Enabled bearer , priority 0 [ 426.268782][T18098] syzkaller0: entered promiscuous mode [ 426.277921][T18098] syzkaller0: entered allmulticast mode [ 426.402234][T18098] tipc: Resetting bearer [ 426.709364][T18097] tipc: Resetting bearer [ 426.769980][T18097] tipc: Disabling bearer [ 426.860259][ T5833] Bluetooth: hci2: command tx timeout [ 426.962849][T17968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.974886][T18119] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3023'. [ 427.015387][T18119] netlink: 170 bytes leftover after parsing attributes in process `syz.0.3023'. [ 427.150128][T18123] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3023'. [ 427.160123][T18123] netlink: 170 bytes leftover after parsing attributes in process `syz.0.3023'. [ 427.205822][T17968] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.276271][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.283647][ T6326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.404054][ T3900] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.411377][ T3900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.571808][ T36] hsr_slave_0: left promiscuous mode [ 427.663453][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3028'. [ 427.680077][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3028'. [ 427.995520][T18164] netlink: 'syz.3.3031': attribute type 32 has an invalid length. [ 429.094268][T18204] x_tables: duplicate underflow at hook 2 [ 429.300884][T18209] wg1 speed is unknown, defaulting to 1000 [ 429.322105][T18209] lo speed is unknown, defaulting to 1000 [ 429.665939][T18227] netlink: 'syz.3.3042': attribute type 1 has an invalid length. [ 429.734994][T18227] bond4: entered promiscuous mode [ 429.748659][T18227] bond4: entered allmulticast mode [ 429.771667][T18227] __nla_validate_parse: 1 callbacks suppressed [ 429.771686][T18227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3042'. [ 429.792818][T18231] bond4: (slave ip6gretap4): making interface the new active one [ 429.801419][T18231] ip6gretap4: entered promiscuous mode [ 429.807099][T18231] ip6gretap4: entered allmulticast mode [ 429.814262][T18231] bond4: (slave ip6gretap4): Enslaving as an active interface with an up link [ 429.834744][ T36] IPVS: stop unused estimator thread 0... [ 429.890550][T18227] bond4: left promiscuous mode [ 429.902092][T18227] ip6gretap4: left promiscuous mode [ 429.920849][T18227] bond4: left allmulticast mode [ 429.950881][T18227] ip6gretap4: left allmulticast mode [ 429.972875][T18227] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.044937][T17968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.468814][T18251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3046'. [ 430.471121][T18244] bridge8: entered allmulticast mode [ 430.494942][T17968] veth0_vlan: entered promiscuous mode [ 430.533071][T17968] veth1_vlan: entered promiscuous mode [ 430.651645][T17968] veth0_macvtap: entered promiscuous mode [ 430.684047][T17968] veth1_macvtap: entered promiscuous mode [ 430.751563][T17968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.797264][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3049'. [ 430.813120][T17968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.874152][T18160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.903641][T18160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.944168][T12295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.984294][T12295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.055923][T18239] infiniband syz2: set down [ 431.083086][T18239] infiniband syz2: added ipvlan0 [ 431.150359][T18239] RDS/IB: syz2: added [ 431.167688][T18239] smc: adding ib device syz2 with port count 1 [ 431.187611][T18149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.215391][T18149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.222971][T18239] smc: ib device syz2 port 1 has no pnetid [ 431.307947][T12295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.322238][T18272] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3052'. [ 431.339415][T12295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.394665][T18275] wg1 speed is unknown, defaulting to 1000 [ 431.416460][T18275] lo speed is unknown, defaulting to 1000 [ 431.548468][T18284] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3054'. [ 431.562735][T18284] netlink: 'syz.4.3054': attribute type 9 has an invalid length. [ 431.631515][T18283] netlink: 'syz.1.2983': attribute type 10 has an invalid length. [ 431.669629][T18283] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2983'. [ 432.249931][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 432.260736][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.269964][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 432.289617][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.298843][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.306531][T18298] wg1 speed is unknown, defaulting to 1000 [ 434.322327][T18298] lo speed is unknown, defaulting to 1000 [ 434.343288][T18303] tipc: Enabling of bearer rejected, failed to enable media [ 434.459475][ T5833] Bluetooth: hci0: command tx timeout [ 434.652667][T18322] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3058'. [ 434.750232][T18326] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 434.968659][T18330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3060'. [ 435.040457][T18332] openvswitch: netlink: Key type 114 is out of range max 32 [ 435.413456][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'. [ 435.414555][T18352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'. [ 435.460966][T18351] tipc: Enabled bearer , priority 0 [ 435.468366][T18351] syzkaller0: entered promiscuous mode [ 435.474079][T18351] syzkaller0: entered allmulticast mode [ 435.505002][T18352] tipc: Resetting bearer [ 435.529211][T18350] tipc: Resetting bearer [ 435.583253][T18350] tipc: Disabling bearer [ 436.143204][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3070'. [ 436.416793][T18298] chnl_net:caif_netlink_parms(): no params data found [ 436.495328][T18380] netlink: 'syz.2.3072': attribute type 7 has an invalid length. [ 436.549137][ T5833] Bluetooth: hci0: command tx timeout [ 436.569188][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3072'. [ 436.763470][T18386] netlink: 'syz.1.3073': attribute type 1 has an invalid length. [ 436.790280][T18298] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.797914][T18298] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.806024][T18298] bridge_slave_0: entered allmulticast mode [ 436.815220][T18298] bridge_slave_0: entered promiscuous mode [ 436.854910][T18298] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.869285][T18298] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.877783][T18298] bridge_slave_1: entered allmulticast mode [ 436.887903][T18298] bridge_slave_1: entered promiscuous mode [ 437.202838][T18364] wg1 speed is unknown, defaulting to 1000 [ 437.221274][T18298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.264654][T18364] lo speed is unknown, defaulting to 1000 [ 437.276303][T18298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.513230][T18298] team0: Port device team_slave_0 added [ 437.519648][T18394] syzkaller0: entered promiscuous mode [ 437.525181][T18394] syzkaller0: entered allmulticast mode [ 437.544429][T18298] team0: Port device team_slave_1 added [ 437.676185][T18298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.687592][T18298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.740328][T18298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.754118][T18298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.761862][T18298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.789328][T18298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.028039][T18298] hsr_slave_0: entered promiscuous mode [ 438.035270][T18298] hsr_slave_1: entered promiscuous mode [ 438.042671][T18298] debugfs: 'hsr0' already exists in 'hsr' [ 438.048482][T18298] Cannot create hsr debugfs directory [ 438.261964][T18405] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3079'. [ 438.273842][T18404] netlink: 'syz.3.3078': attribute type 10 has an invalid length. [ 438.282904][T18406] netlink: 'syz.3.3078': attribute type 10 has an invalid length. [ 438.301768][T18405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3079'. [ 438.620670][ T5833] Bluetooth: hci0: command tx timeout [ 438.639377][T18412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3082'. [ 438.681152][T18412] netlink: 'syz.1.3082': attribute type 7 has an invalid length. [ 438.699413][T18412] netlink: 'syz.1.3082': attribute type 8 has an invalid length. [ 438.739161][T18412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3082'. [ 438.902297][T18298] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 438.949427][T18298] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.143244][T18298] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 439.170521][T18298] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.294081][T18298] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 439.311499][T18429] lec:lec_atm_send: lec0: Unknown message type 1668572004 [ 439.315802][T18298] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.363054][T18413] lec:lec_atm_close: lec0: Shut down! [ 439.480549][T18298] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 439.499227][T18298] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.678838][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3088'. [ 439.751211][T18436] netlink: 'syz.1.3086': attribute type 10 has an invalid length. [ 439.780974][T18298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 439.817232][T18298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 439.873632][T18449] netlink: zone id is out of range [ 439.878906][T18449] netlink: zone id is out of range [ 439.945044][T18449] netlink: zone id is out of range [ 439.952468][T18449] netlink: zone id is out of range [ 439.957904][T18449] netlink: zone id is out of range [ 439.965306][T18449] netlink: zone id is out of range [ 439.970650][T18449] netlink: zone id is out of range [ 439.976979][T18449] netlink: zone id is out of range [ 439.982540][T18449] netlink: zone id is out of range [ 439.992776][T18436] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 440.002388][T18298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 440.053596][T18298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 440.182530][T18457] vlan1: entered promiscuous mode [ 440.187868][T18457] 0ªî{X¹¦: entered promiscuous mode [ 440.473820][T18298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.509976][T18471] bond0: (slave gre0): Error: Device type is different from other slaves [ 440.561342][T18298] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.606026][T18152] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.613308][T18152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.667449][T18475] netlink: 'syz.2.3095': attribute type 10 has an invalid length. [ 440.702101][ T5833] Bluetooth: hci0: command tx timeout [ 440.720770][T18476] netlink: 'syz.2.3095': attribute type 10 has an invalid length. [ 440.836667][T18466] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.844539][T18466] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.881617][ T30] audit: type=1804 audit(1767177313.627:8): pid=18481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3096" name="/newroot/12/cgroup.controllers" dev="tmpfs" ino=81 res=1 errno=0 [ 440.926806][ T30] audit: type=1800 audit(1767177313.647:9): pid=18481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3096" name="cgroup.controllers" dev="tmpfs" ino=81 res=0 errno=0 [ 441.136741][T18466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.267082][T18152] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.274403][T18152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.293340][T18475] bond0: (slave dummy0): Releasing backup interface [ 441.307952][T18475] dummy0: left promiscuous mode [ 441.320099][T18475] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 441.329591][T18475] team0: Failed to send options change via netlink (err -105) [ 441.337184][T18475] team0: Port device dummy0 added [ 441.350271][T18476] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 441.381311][T18476] team0: Failed to send options change via netlink (err -105) [ 441.396929][T18476] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 441.406488][T18476] team0: Port device dummy0 removed [ 441.420270][T18476] dummy0: entered promiscuous mode [ 441.426574][T18476] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 441.439830][T18149] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.471802][T18149] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.507461][T18149] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.529945][T18149] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.773089][T18507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3102'. [ 441.792697][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3102'. [ 442.154484][T18298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.800195][T18538] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3108'. [ 442.810333][T18541] netlink: 'syz.2.3109': attribute type 89 has an invalid length. [ 442.885027][T18298] veth0_vlan: entered promiscuous mode [ 442.924099][T18298] veth1_vlan: entered promiscuous mode [ 442.995446][T18298] veth0_macvtap: entered promiscuous mode [ 443.025694][T18298] veth1_macvtap: entered promiscuous mode [ 443.090652][T18547] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 443.136305][T18547] bond1 (unregistering): Released all slaves [ 443.224473][T18298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.281073][T18298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.313005][T18152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.333696][T18152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.361127][T18152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.397448][T18152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.611272][T18556] wg1 speed is unknown, defaulting to 1000 [ 443.619681][T18556] lo speed is unknown, defaulting to 1000 [ 443.630264][ T6327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.672494][ T6327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.793750][T18152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.830313][T18152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.137346][T18569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.577135][T18583] bond1: entered allmulticast mode [ 444.631346][T18583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.761972][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 444.772856][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 444.783569][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 444.797042][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 444.805419][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 444.945881][T18590] wg1 speed is unknown, defaulting to 1000 [ 445.039730][T18598] Cannot find set identified by id 65534 to match [ 445.151059][T18590] lo speed is unknown, defaulting to 1000 [ 445.468759][T18612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3126'. [ 445.481703][T18613] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 445.520565][T18615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.527911][T18615] IPv6: NLM_F_CREATE should be set when creating new route [ 445.548307][T18609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3125'. [ 445.561550][T18609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3125'. [ 445.583650][T18615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.590992][T18615] IPv6: NLM_F_CREATE should be set when creating new route [ 445.605654][T18609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3125'. [ 445.626139][T18609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3125'. [ 445.640638][T18609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3125'. [ 445.679130][T18609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3125'. [ 445.752881][T18610] wg1 speed is unknown, defaulting to 1000 [ 445.893430][T18610] lo speed is unknown, defaulting to 1000 [ 446.516422][T18635] netlink: 'syz.0.3129': attribute type 12 has an invalid length. [ 446.534627][T18635] netlink: 'syz.0.3129': attribute type 29 has an invalid length. [ 446.556042][T18635] netlink: 'syz.0.3129': attribute type 1 has an invalid length. [ 446.575988][T18635] netlink: 'syz.0.3129': attribute type 1 has an invalid length. [ 446.860652][ T5833] Bluetooth: hci1: command tx timeout [ 446.967031][T18644] netlink: 'syz.4.3133': attribute type 6 has an invalid length. [ 447.200811][T18590] chnl_net:caif_netlink_parms(): no params data found [ 447.247820][T18651] netlink: 'syz.4.3135': attribute type 22 has an invalid length. [ 447.260090][T18651] __nla_validate_parse: 149 callbacks suppressed [ 447.260118][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 447.598162][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.615997][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.705977][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.722842][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.055588][T18590] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.063744][T18590] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.074057][T18590] bridge_slave_0: entered allmulticast mode [ 448.101373][T18590] bridge_slave_0: entered promiscuous mode [ 448.126004][T18590] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.140852][T18590] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.148189][T18590] bridge_slave_1: entered allmulticast mode [ 448.174770][T18590] bridge_slave_1: entered promiscuous mode [ 448.312204][T18667] wg1 speed is unknown, defaulting to 1000 [ 448.324628][T18590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.350374][T18667] lo speed is unknown, defaulting to 1000 [ 448.366908][T18590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.613069][T18590] team0: Port device team_slave_0 added [ 448.630937][T18679] wg1 speed is unknown, defaulting to 1000 [ 448.659129][T18590] team0: Port device team_slave_1 added [ 448.671363][T18679] lo speed is unknown, defaulting to 1000 [ 448.839741][T18590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.859987][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.922604][T18590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.939212][ T5833] Bluetooth: hci1: command tx timeout [ 448.993869][T18590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.001409][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.029606][T18590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.149721][T18698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.157966][T18698] net_ratelimit: 7 callbacks suppressed [ 449.157987][T18698] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 449.199669][ T5894] lo speed is unknown, defaulting to 1000 [ 449.209109][ T5894] syz0: Port: 1 Link ACTIVE [ 449.249981][ T5894] lo speed is unknown, defaulting to 1000 [ 449.325967][T18590] hsr_slave_0: entered promiscuous mode [ 449.334810][T18590] hsr_slave_1: entered promiscuous mode [ 449.361059][T18590] debugfs: 'hsr0' already exists in 'hsr' [ 449.367649][T18590] Cannot create hsr debugfs directory [ 449.712454][T18590] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 449.801396][T18590] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 449.979851][T18590] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 450.007638][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3149'. [ 450.029530][T18707] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3149'. [ 450.148953][T18590] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 450.278804][T18716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3151'. [ 450.337252][T18710] syzkaller0: entered promiscuous mode [ 450.346219][T18710] syzkaller0: entered allmulticast mode [ 451.032038][ T5833] Bluetooth: hci1: command tx timeout [ 452.174292][T18590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 452.196635][T18590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 452.210066][T18590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.223646][T18590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.451548][T18731] syzkaller0: entered promiscuous mode [ 452.474712][T18731] syzkaller0: entered allmulticast mode [ 452.693423][T18590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.721684][T18590] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.737821][T18160] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.745266][T18160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.774696][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.782031][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.824823][T18740] syzkaller0: tun_chr_ioctl cmd 35108 [ 453.103435][ T5833] Bluetooth: hci1: command tx timeout [ 453.222131][T18762] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 453.254040][T18763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3162'. [ 453.276034][T18590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.396874][T18590] veth0_vlan: entered promiscuous mode [ 453.416523][T18590] veth1_vlan: entered promiscuous mode [ 453.472549][T18590] veth0_macvtap: entered promiscuous mode [ 453.495021][T18590] veth1_macvtap: entered promiscuous mode [ 453.537080][T18590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.573162][T18590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.625931][T18149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.647431][T18149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.657536][T18149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.671219][T18149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.811309][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.826467][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.886470][T18160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.897749][T18160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.162469][T18791] tipc: Started in network mode [ 454.168044][T18791] tipc: Node identity 929a4f586bb2, cluster identity 4711 [ 454.187274][T18791] tipc: Enabled bearer , priority 0 [ 454.211383][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 454.277768][T18790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3169'. [ 454.287265][T18784] tipc: Resetting bearer [ 454.654622][T18806] netlink: 'syz.1.3172': attribute type 1 has an invalid length. [ 454.773142][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 454.791139][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 454.800395][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 454.812751][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 454.831094][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.274557][T18784] tipc: Disabling bearer [ 456.370907][ T6692] tipc: Node number set to 4180168536 [ 456.455659][T18821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3174'. [ 456.472887][T12295] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.515078][T18822] bond0: entered promiscuous mode [ 456.520591][T18822] bond_slave_0: entered promiscuous mode [ 456.536817][T18822] bond_slave_1: entered promiscuous mode [ 456.549329][T18822] dummy0: entered promiscuous mode [ 456.563282][T18808] wg1 speed is unknown, defaulting to 1000 [ 456.598031][T12295] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.644129][T18808] lo speed is unknown, defaulting to 1000 [ 456.672504][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 456.686371][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 456.718451][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 456.745629][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 456.794811][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 456.830076][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 456.860577][ T5833] Bluetooth: hci4: command tx timeout [ 456.972989][T18828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.205357][T18836] sctp: [Deprecated]: syz.4.3178 (pid 18836) Use of int in max_burst socket option. [ 457.205357][T18836] Use struct sctp_assoc_value instead [ 457.411585][T18855] block nbd3: Unsupported socket: should be TCP or UNIX. [ 457.522846][T12295] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.625680][T12295] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.553610][T18906] netlink: 'syz.2.3192': attribute type 9 has an invalid length. [ 458.590021][T18906] __nla_validate_parse: 18 callbacks suppressed [ 458.590042][T18906] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3192'. [ 458.680608][T12295] bond4 (unregistering): (slave ip6gretap4): Releasing active interface [ 458.894551][T18919] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3194'. [ 458.906252][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3194'. [ 458.944771][ T5833] Bluetooth: hci4: command tx timeout [ 458.978177][T12295] bond3 (unregistering): (slave geneve2): Releasing active interface [ 459.385151][T12295] bond0 (unregistering): left promiscuous mode [ 459.391586][T12295] bond_slave_0: left promiscuous mode [ 459.397245][T12295] bond_slave_1: left promiscuous mode [ 459.404562][T12295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.413894][T12295] bond_slave_0: left allmulticast mode [ 459.423757][T12295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.432893][T12295] bond_slave_1: left allmulticast mode [ 459.439785][T12295] bond0 (unregistering): Released all slaves [ 459.560154][T12295] bond1 (unregistering): Released all slaves [ 459.575794][T12295] bond2 (unregistering): Released all slaves [ 459.688500][T12295] bond3 (unregistering): Released all slaves [ 459.790022][T12295] bond4 (unregistering): Released all slaves [ 459.820127][T18919] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 459.869084][T18919] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 459.879081][T18919] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 459.908422][T18923] netlink: get zone limit has 4 unknown bytes [ 459.977805][T12295] tipc: Disabling bearer [ 460.003762][T12295] tipc: Left network mode [ 460.528605][T18956] netlink: 'syz.0.3202': attribute type 13 has an invalid length. [ 460.538753][T18956] netlink: 'syz.0.3202': attribute type 17 has an invalid length. [ 460.816952][T18963] netlink: 'syz.1.3207': attribute type 13 has an invalid length. [ 460.853230][T18963] netlink: 'syz.1.3207': attribute type 17 has an invalid length. [ 461.030017][ T5833] Bluetooth: hci4: command tx timeout [ 461.131691][T18963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.244270][T18808] chnl_net:caif_netlink_parms(): no params data found [ 461.491595][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 461.568016][T18985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.821701][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3215'. [ 461.849408][T19002] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3215'. [ 461.877590][T19008] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3217'. [ 461.941559][T18808] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.953480][T18808] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.963553][T18808] bridge_slave_0: entered allmulticast mode [ 461.972072][T18808] bridge_slave_0: entered promiscuous mode [ 462.015412][T18808] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.041606][T18808] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.065952][T18808] bridge_slave_1: entered allmulticast mode [ 462.086098][T18808] bridge_slave_1: entered promiscuous mode [ 463.099495][ T5833] Bluetooth: hci4: command tx timeout [ 463.168525][T18808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.507012][T18808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.517284][T12295] dummy0: left promiscuous mode [ 463.543055][T12295] hsr_slave_0: left promiscuous mode [ 463.570446][T12295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.657644][T12295] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 463.890225][T18155] smc: removing ib device syz2 [ 464.773300][T18149] smc: removing ib device syz0 [ 464.882955][T18557] ================================================================== [ 464.891215][T18557] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 464.900033][T18557] Read of size 8 at addr ffff888058cca2e8 by task kworker/1:1/18557 [ 464.908048][T18557] [ 464.910432][T18557] CPU: 1 UID: 0 PID: 18557 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 464.910459][T18557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.910474][T18557] Workqueue: events smc_ib_port_event_work [ 464.910519][T18557] Call Trace: [ 464.910528][T18557] [ 464.910538][T18557] dump_stack_lvl+0x189/0x250 [ 464.910566][T18557] ? rcu_is_watching+0x15/0xb0 [ 464.910592][T18557] ? __kasan_check_byte+0x12/0x40 [ 464.910623][T18557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.910646][T18557] ? rcu_is_watching+0x15/0xb0 [ 464.910671][T18557] ? lock_release+0x4b/0x3b0 [ 464.910694][T18557] ? __virt_addr_valid+0x1c8/0x5c0 [ 464.910722][T18557] ? __virt_addr_valid+0x4a5/0x5c0 [ 464.910750][T18557] print_report+0xca/0x240 [ 464.910771][T18557] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 464.910802][T18557] kasan_report+0x118/0x150 [ 464.910827][T18557] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 464.910879][T18557] __ethtool_get_link_ksettings+0x5e/0x170 [ 464.910911][T18557] ib_get_eth_speed+0x15e/0x7b0 [ 464.910939][T18557] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 464.910970][T18557] ? do_raw_spin_unlock+0x122/0x240 [ 464.911004][T18557] rxe_query_port+0x93/0x3d0 [ 464.911029][T18557] ib_query_port+0x170/0x830 [ 464.911059][T18557] smc_ib_port_event_work+0x15a/0x940 [ 464.911093][T18557] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.911124][T18557] ? process_scheduled_works+0x9ef/0x1770 [ 464.911144][T18557] ? process_scheduled_works+0x9ef/0x1770 [ 464.911166][T18557] process_scheduled_works+0xad1/0x1770 [ 464.911201][T18557] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.911231][T18557] worker_thread+0x8a0/0xda0 [ 464.911254][T18557] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 464.911291][T18557] ? __kthread_parkme+0x7b/0x200 [ 464.911319][T18557] kthread+0x711/0x8a0 [ 464.911346][T18557] ? __pfx_worker_thread+0x10/0x10 [ 464.911367][T18557] ? __pfx_kthread+0x10/0x10 [ 464.911394][T18557] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.911424][T18557] ? lockdep_hardirqs_on+0x98/0x140 [ 464.911444][T18557] ? __pfx_kthread+0x10/0x10 [ 464.911470][T18557] ret_from_fork+0x599/0xb30 [ 464.911491][T18557] ? __pfx_ret_from_fork+0x10/0x10 [ 464.911516][T18557] ? __switch_to_asm+0x39/0x70 [ 464.911542][T18557] ? __switch_to_asm+0x33/0x70 [ 464.911567][T18557] ? __pfx_kthread+0x10/0x10 [ 464.911593][T18557] ret_from_fork_asm+0x1a/0x30 [ 464.911636][T18557] [ 464.911644][T18557] [ 465.146533][T18557] Allocated by task 5825: [ 465.150899][T18557] kasan_save_track+0x3e/0x80 [ 465.155605][T18557] __kasan_kmalloc+0x93/0xb0 [ 465.160218][T18557] __kvmalloc_node_noprof+0x5d5/0x920 [ 465.165619][T18557] alloc_netdev_mqs+0xa6/0x11b0 [ 465.170517][T18557] rtnl_create_link+0x31f/0xcf0 [ 465.175396][T18557] rtnl_newlink_create+0x25c/0xb00 [ 465.180530][T18557] rtnl_newlink+0x16e7/0x1c90 [ 465.185231][T18557] rtnetlink_rcv_msg+0x7cf/0xb70 [ 465.190185][T18557] netlink_rcv_skb+0x208/0x470 [ 465.194971][T18557] netlink_unicast+0x82f/0x9e0 [ 465.199755][T18557] netlink_sendmsg+0x805/0xb30 [ 465.204545][T18557] __sock_sendmsg+0x21c/0x270 [ 465.209257][T18557] __sys_sendto+0x3bd/0x520 [ 465.213791][T18557] __x64_sys_sendto+0xde/0x100 [ 465.218580][T18557] do_syscall_64+0xfa/0xf80 [ 465.223105][T18557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.229018][T18557] [ 465.231374][T18557] Freed by task 12295: [ 465.235542][T18557] kasan_save_track+0x3e/0x80 [ 465.240241][T18557] kasan_save_free_info+0x46/0x50 [ 465.245297][T18557] __kasan_slab_free+0x5c/0x80 [ 465.250084][T18557] kfree+0x1c0/0x660 [ 465.254010][T18557] device_release+0x9e/0x1d0 [ 465.258622][T18557] kobject_put+0x228/0x570 [ 465.263058][T18557] netdev_run_todo+0xd2c/0xea0 [ 465.267844][T18557] default_device_exit_batch+0x969/0x9e0 [ 465.273498][T18557] ops_undo_list+0x525/0x990 [ 465.278108][T18557] cleanup_net+0x4d8/0x7a0 [ 465.282548][T18557] process_scheduled_works+0xad1/0x1770 [ 465.288124][T18557] worker_thread+0x8a0/0xda0 [ 465.292736][T18557] kthread+0x711/0x8a0 [ 465.296830][T18557] ret_from_fork+0x599/0xb30 [ 465.301436][T18557] ret_from_fork_asm+0x1a/0x30 [ 465.306236][T18557] [ 465.308590][T18557] The buggy address belongs to the object at ffff888058cca000 [ 465.308590][T18557] which belongs to the cache kmalloc-cg-4k of size 4096 [ 465.323014][T18557] The buggy address is located 744 bytes inside of [ 465.323014][T18557] freed 4096-byte region [ffff888058cca000, ffff888058ccb000) [ 465.336915][T18557] [ 465.339260][T18557] The buggy address belongs to the physical page: [ 465.345704][T18557] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58cc8 [ 465.354482][T18557] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 465.363017][T18557] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 465.370595][T18557] page_type: f5(slab) [ 465.374601][T18557] raw: 00fff00000000040 ffff88813ffb0500 dead000000000122 0000000000000000 [ 465.383199][T18557] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 465.391801][T18557] head: 00fff00000000040 ffff88813ffb0500 dead000000000122 0000000000000000 [ 465.400491][T18557] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 465.409191][T18557] head: 00fff00000000003 ffffea0001633201 00000000ffffffff 00000000ffffffff [ 465.417880][T18557] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 465.426574][T18557] page dumped because: kasan: bad access detected [ 465.433044][T18557] page_owner tracks the page as allocated [ 465.438788][T18557] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 90927230270, free_ts 31182838457 [ 465.460183][T18557] post_alloc_hook+0x234/0x290 [ 465.464978][T18557] get_page_from_freelist+0x2365/0x2440 [ 465.470541][T18557] __alloc_frozen_pages_noprof+0x181/0x370 [ 465.476370][T18557] alloc_pages_mpol+0x232/0x4a0 [ 465.481241][T18557] allocate_slab+0x86/0x3b0 [ 465.485777][T18557] ___slab_alloc+0xf2b/0x1960 [ 465.490473][T18557] __slab_alloc+0x65/0x100 [ 465.494920][T18557] __kmalloc_noprof+0x47d/0x800 [ 465.499782][T18557] __register_sysctl_table+0x72/0x1340 [ 465.505261][T18557] __addrconf_sysctl_register+0x328/0x4c0 [ 465.511007][T18557] addrconf_sysctl_register+0x168/0x1c0 [ 465.516634][T18557] ipv6_add_dev+0xd26/0x13a0 [ 465.521267][T18557] addrconf_notify+0x771/0x1050 [ 465.526251][T18557] notifier_call_chain+0x19d/0x3a0 [ 465.531399][T18557] register_netdevice+0x15bd/0x1a70 [ 465.536626][T18557] macvlan_common_newlink+0x120a/0x1980 [ 465.542208][T18557] page last free pid 1 tgid 1 stack trace: [ 465.548122][T18557] __free_frozen_pages+0xbc8/0xd30 [ 465.553272][T18557] free_contig_range+0x1bd/0x490 [ 465.558240][T18557] destroy_args+0x69/0x660 [ 465.562688][T18557] debug_vm_pgtable+0x38f/0x3a0 [ 465.567566][T18557] do_one_initcall+0x1fb/0x820 [ 465.572441][T18557] do_initcall_level+0x104/0x190 [ 465.577494][T18557] do_initcalls+0x59/0xa0 [ 465.581837][T18557] kernel_init_freeable+0x334/0x4b0 [ 465.587067][T18557] kernel_init+0x1d/0x1d0 [ 465.591423][T18557] ret_from_fork+0x599/0xb30 [ 465.596031][T18557] ret_from_fork_asm+0x1a/0x30 [ 465.600821][T18557] [ 465.603182][T18557] Memory state around the buggy address: [ 465.608825][T18557] ffff888058cca180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.616904][T18557] ffff888058cca200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.625087][T18557] >ffff888058cca280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 465.633175][T18557] ^ [ 465.640667][T18557] ffff888058cca300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.648756][T18557] ffff888058cca380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.656830][T18557] ================================================================== [ 465.668042][ T6159] lo speed is unknown, defaulting to 1000 [ 465.675052][ T6159] syz0: Port: 1 Link DOWN [ 465.724345][T19051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3229'. [ 466.470042][T18557] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 466.477401][T18557] CPU: 1 UID: 0 PID: 18557 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 466.486904][T18557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.497006][T18557] Workqueue: events smc_ib_port_event_work [ 466.502876][T18557] Call Trace: [ 466.506184][T18557] [ 466.509148][T18557] dump_stack_lvl+0x99/0x250 [ 466.513777][T18557] ? __asan_memcpy+0x40/0x70 [ 466.518410][T18557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.523653][T18557] ? __pfx__printk+0x10/0x10 [ 466.528307][T18557] vpanic+0x237/0x6d0 [ 466.532374][T18557] ? __pfx_vpanic+0x10/0x10 [ 466.536914][T18557] ? preempt_schedule+0xae/0xc0 [ 466.541800][T18557] ? __pfx_preempt_schedule+0x10/0x10 [ 466.547210][T18557] panic+0xb9/0xc0 [ 466.551060][T18557] ? __pfx_panic+0x10/0x10 [ 466.555518][T18557] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 466.561564][T18557] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 466.567670][T18557] check_panic_on_warn+0x89/0xb0 [ 466.572654][T18557] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 466.578762][T18557] end_report+0x6f/0x140 [ 466.583053][T18557] kasan_report+0x129/0x150 [ 466.587625][T18557] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 466.593683][T18557] __ethtool_get_link_ksettings+0x5e/0x170 [ 466.599715][T18557] ib_get_eth_speed+0x15e/0x7b0 [ 466.604621][T18557] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 466.610029][T18557] ? do_raw_spin_unlock+0x122/0x240 [ 466.615381][T18557] rxe_query_port+0x93/0x3d0 [ 466.620043][T18557] ib_query_port+0x170/0x830 [ 466.624691][T18557] smc_ib_port_event_work+0x15a/0x940 [ 466.630103][T18557] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.635349][T18557] ? process_scheduled_works+0x9ef/0x1770 [ 466.641096][T18557] ? process_scheduled_works+0x9ef/0x1770 [ 466.647120][T18557] process_scheduled_works+0xad1/0x1770 [ 466.652725][T18557] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.658744][T18557] worker_thread+0x8a0/0xda0 [ 466.663455][T18557] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 466.669826][T18557] ? __kthread_parkme+0x7b/0x200 [ 466.674794][T18557] kthread+0x711/0x8a0 [ 466.678892][T18557] ? __pfx_worker_thread+0x10/0x10 [ 466.684030][T18557] ? __pfx_kthread+0x10/0x10 [ 466.688683][T18557] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.694107][T18557] ? lockdep_hardirqs_on+0x98/0x140 [ 466.699423][T18557] ? __pfx_kthread+0x10/0x10 [ 466.704158][T18557] ret_from_fork+0x599/0xb30 [ 466.708874][T18557] ? __pfx_ret_from_fork+0x10/0x10 [ 466.714011][T18557] ? __switch_to_asm+0x39/0x70 [ 466.718800][T18557] ? __switch_to_asm+0x33/0x70 [ 466.723589][T18557] ? __pfx_kthread+0x10/0x10 [ 466.728213][T18557] ret_from_fork_asm+0x1a/0x30 [ 466.733109][T18557] [ 466.736773][T18557] Kernel Offset: disabled [ 466.741219][T18557] Rebooting in 86400 seconds..