last executing test programs: 2.979404268s ago: executing program 1 (id=3046): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) shutdown(r1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x0, 0x3, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bf8f05c607f304e7fe0700221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000440)=@gcm_256={{0x304}, "5467ab00", "df7b57d67e6928bc56bd41adb4d5fb1d000000fffffffb5b00000000c068f087", "ba78267e", "0200"}, 0x38) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@rights={{0x14, 0x1, 0x1, [r10]}}], 0x18, 0x28000}, 0x8000) r11 = socket$unix(0x1, 0x1, 0x0) connect$unix(r11, &(0x7f0000000080)=@file={0x1}, 0x6e) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000104050000000000000000000300000606000640000200000a00020000000fff00000000060006400002000008000540000000070800044000000081aa457b129b4512d0fc26513b273be0bfdcee809bf0434900bb1b9f67a61b7747966243a8c09a8b9ad66a805c8057027e83a619493a3b1bc9a1cdde0b7463a87a37318a30d3c902bdf5652dbd9115e2eaedd02ea23d7c9ba4"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x0, &(0x7f0000000480), &(0x7f0000000140)='GPL\x00', 0x7, 0xf1, &(0x7f0000000540)=""/241, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x2c, 0x715}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1, r3, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) 2.805664722s ago: executing program 2 (id=3050): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x300, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x48001}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x1, 0x0, 0x8, 0x2, [{0x1, 0x1}]}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61, 0x5f]}}, 0x0, 0x5d}, 0x28) 2.802665491s ago: executing program 4 (id=3051): sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xdc2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x400}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@bridge_getlink={0x74, 0x12, 0x200, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x44464, 0x21138}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SEQ_NR={0x6, 0x5, 0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9e}, @IFLA_BROADCAST={0xa, 0x2, @random="c72b3cd12cd2"}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "117aaae7d8a8707fdb119db7685818a583"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r3) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xffffffffffffff8e, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB="28bd7000fedbdf25020000000800050006000000080005000300000008000400c521280d1c0001800c00070021000000000000000c00070026000000100000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40850}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.520574164s ago: executing program 4 (id=3053): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) r1 = socket$inet(0x2, 0x1, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x2, 0xff, 0x48, @mcast1, @local, 0xa0, 0xf7, 0x0, 0x7f}}) (rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@remote, @in6=@private0, 0x4e21, 0x3ff, 0x4e23, 0x101, 0xa, 0x60, 0xa0, 0x87, r2, r3}, {0x8f0b, 0x8, 0x100000001, 0x3, 0x9, 0xd5cc, 0x8, 0x2563}, {0xa, 0x10, 0x2, 0x10}, 0x7ff, 0x0, 0x0, 0x2, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x3c}, 0x2, @in6=@empty, 0x3500, 0x1, 0x3, 0x9, 0x3, 0x5, 0xff}}, 0xe8) (async) r4 = socket$inet(0x2, 0x1, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async, rerun: 64) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (rerun: 64) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000a06010200000000000000000500000705000100070000002c0007800c00148008000140e00000020c0001800800014064010104060004404e24000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) (async) socket$kcm(0x29, 0x6, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x24, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x5000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x18000) (async) socket$netlink(0x10, 0x3, 0x7) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 2.461943998s ago: executing program 2 (id=3054): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2, 0x4902, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10501, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00004e806591ae4ef25cc59300f46fb26767b3109ac5aedd06690700000000000000a93193c1a8affe25000000000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000000000000000000000000000000fb55f1294104e527e1941bcb08cde91cf85b9bd88f5851d377671329c2150c265901217141ed22c53ab90068b421bcf5961dd77b7af830675be5199549ee"], 0x1c}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=r8, @ANYRES64=0x2710], 0x48}}, 0x0) 2.384045478s ago: executing program 4 (id=3055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000440)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000002700), r5) sendmsg$NFC_CMD_VENDOR(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002780)=ANY=[@ANYBLOB="1c080018", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf251d00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8880) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x1}, 0x3}], 0x4000169, 0x40000142, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000019, 0x200000006c832, 0xffffffffffffffff, 0x1da98000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) close(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)={0x88, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2.370699548s ago: executing program 1 (id=3056): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getchain={0x5c, 0x66, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x7, 0xc}, {0x1}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40048c4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0xfffffff8, 0x0, 0x40, 0x1, 0x117, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000001c0)) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000001c0)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x80000001]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000c1) r2 = socket$unix(0x1, 0x5, 0x0) shutdown(r2, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)=0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000380)=r4) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0x2c, "2df704eee31a77359f8df472709edc716aff237b29b66fd4f4f8c5f29b2ef7cfe7f714eda879012fd3f4e0b7"}, &(0x7f0000000440)=0x34) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0x2c, "2df704eee31a77359f8df472709edc716aff237b29b66fd4f4f8c5f29b2ef7cfe7f714eda879012fd3f4e0b7"}, &(0x7f0000000440)=0x34) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000480)={r6, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000480)={r6, 0x7}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r7) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000500)={@none, 0x4}) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000540)=r0, 0x4) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000580)={0x9, 0x401, 'Xj~', 0x5, 0x7}) setsockopt(r2, 0x1b1, 0x7, &(0x7f00000005c0)="dffe74715f80d57a4a0b786b009fc327a805c73103acf5a5865bc58bdf1ef03e95fab98dc4aa77eeb0730c58bdb431b445b4f4aa55c32ab8f590f3ff8ea4d74adfe9fc316f2ef1c735d5c6396becc487d231182d01450256cd488fdd0922eccb07ad503bbc61186dc085a5326c7c5e30804ad08873331aedd3d6dab1fd2bb07e202188bb1c3bd052cb9653d3d40fe0306f2ffa234368d7f50445677e88afc71681476065f60d3a29f2b90eb6b5baec882d7f0b74b28f3a7018449fd4b162b8f0d5f9639e76b3c83e1c2ab855d6311af9c488b640f74c7268dd38175377", 0xdd) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000006c0), &(0x7f0000000740)=0x80) (async) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000006c0), &(0x7f0000000740)=0x80) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000007c0)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfa}, @vsock={0x28, 0x0, 0xffffffff, @local}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x1, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000780)='veth0_to_bond\x00', 0x3, 0x4, 0x101}) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r10, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040050}, 0x4000) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r10, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040050}, 0x4000) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x3f7, 0x200, 0x70bd27, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008091) (async) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x3f7, 0x200, 0x70bd27, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008091) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000a40)=[@in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, @in6={0xa, 0x4e21, 0x5, @mcast1}, @in={0x2, 0x4e24, @private=0xa010100}], 0xb8) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000b00)={{0x3, 0xe21a}, 0x100, './file0\x00'}) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000b00)={{0x3, 0xe21a}, 0x100, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x1ff, 0x8000, 0x6, 0x4200, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x3}, 0x50) 2.27136863s ago: executing program 3 (id=3058): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x32, 0x0}, 0x75b}], 0x1, 0x40000140, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@remote, @rose, @default, @null, @rose, @default]}, &(0x7f0000000000)=0x48, 0x80800) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000180)={0x0, 0x2, 0x8}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000700)={r4, 0x9, 0x0, [0xffffffff, 0x8, 0x8, 0x9, 0x50f], [0x5, 0x8, 0xd8, 0x5, 0x7fffffff, 0x0, 0x6, 0x8000000000000001, 0x8000000000000001, 0x9, 0x3, 0x4, 0x2, 0x100, 0x2, 0x2, 0x7, 0x401, 0x9, 0x9, 0xfffffffffffffc01, 0x8000000000000000, 0x3, 0x100000000, 0xc86, 0x9, 0x8001, 0x8, 0x4, 0x4, 0x6, 0xc3, 0x2097, 0x4f, 0x6, 0x75a6de1d, 0x0, 0x0, 0x2ede, 0xfffffffffffffffb, 0xe, 0x75, 0x2, 0x4, 0xd, 0x8000000000000001, 0x80000000, 0x7, 0x4, 0x1000, 0x9, 0x1, 0x4, 0x6, 0x2f, 0x2, 0x2, 0x0, 0x0, 0x1, 0x4, 0x3, 0x5b9, 0x7f2, 0xfffffffffffffffb, 0x3, 0x401, 0x5, 0xb, 0x64b, 0x17d7000000000000, 0x2, 0xbf8, 0x8, 0x3, 0xcb60, 0x1, 0xffffffffffffffbf, 0x5, 0x7, 0x5, 0xc, 0x1, 0x49f98951, 0x9, 0x4, 0xc2ac, 0xffff, 0x1000, 0xf4, 0x1, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7, 0xc0000000000, 0x2, 0x4, 0x7, 0x9, 0x3, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x1, 0x2, 0x7cb, 0x7, 0x10, 0x7, 0x5, 0x7, 0xfffffffffffffe01, 0x1, 0xaf44, 0x4, 0x401, 0x77, 0x2]}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0xc015, &(0x7f0000000040)={0xa, 0x402, 0x7, @private0, 0x1}, 0x1c) shutdown(r0, 0x1) 2.265722975s ago: executing program 0 (id=3059): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe4e7ea097451bdc05d7b582537e4ab091cd008a8000000000000000368d5e9e19a9d33882be8e62fd0bbfcc94c842aa81c90fab7ab87fa3", 0x70}], 0x1}}], 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'ip6tnl0\x00', 0x200}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/net\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_devices(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef288563"], 0xffdd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x10001) write(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r8, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="79399df2dd0329ebad2ffc31ab7f88fc529b8104534e732c71f5db65c0199f6f385d6f5a836a3014a7349057d93b2d9778824b1424adf9133226e5281bbbd73342979116d8bbed404483c212429d1d34e35c3b0d7974aae1811252cee02df5c8c2750e3ecf14cefc5b2f4e04146eaf2c0ff979b8f5536380ec7fe3b55ea0d5172804a0379d031205e4edae7f32e1283e39805c9fd0f7d4b86f83d6631bb4cd423fc4aa7dad64", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03276003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0xcb}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r13 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x5c, r13, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000084}, 0x440c4) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b004000000000000003000000000000000100010002000000"], 0x20}}, 0x0) 2.256601333s ago: executing program 1 (id=3060): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c16", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x3e) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="621ab4392d47706a9ffb81a079c2cc6a144a3e1936e9ef8f474db3df0cfc62efa3974dabd8", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x22020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="2f0000001220f50004"], 0x20) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r5, 0x80) accept$netrom(r5, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000006c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x400c040) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000040)={0xc000200a}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESOCT=r0, @ANYRES64=r8], 0x198}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.121863453s ago: executing program 3 (id=3061): r0 = socket(0x10, 0x803, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x2}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x3c, 0xff9, 0x8, 0xfffffffa}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x74, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$caif_stream(0x25, 0x1, 0x2) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) (async) connect$caif(r7, &(0x7f00000065c0), 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@bloom_filter={0x1e, 0x0, 0x8000, 0xffffffff, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4b}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x170, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x44014}, 0x10) 2.047968405s ago: executing program 3 (id=3062): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r2, 0xae}, &(0x7f0000000040)=0x8) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000300)='%pS \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x8, 0x8, 0x5048, r4, 0x3, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000040), &(0x7f00000004c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xfffffffffffffd24, 0x0, &(0x7f0000000380)="63eced8e46dc3f0adf33f7b986", 0x0, 0x0, 0x0, 0x0, 0xc9ba200cdc21d30a, 0x0, 0x0}, 0x50) 1.895637839s ago: executing program 3 (id=3063): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xbb3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x44000) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xbb3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x44000) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r4], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x803, 0x4) (async) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 1.833358516s ago: executing program 0 (id=3064): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x230, 0x12, 0x200, 0x70bd28, 0x25dfdbfc, {0xb, 0x3, 0x8, 0x4, {0x4e20, 0x4e21, [0x7fff, 0x1, 0xcdeb, 0x6], [0x0, 0x8, 0x5, 0x400], r2, [0x8, 0x10001]}, 0xff, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "ae80b90567088ae8de693c1933ed396a2ee3762b6d20da66de7696f4dc054be1b7e605a134506dbd6bbe19f4b8e6e93895a526a0d3d605f860c6aee0771210cf231241d0f798e66633e0f92078fb662cfa9689400892012a77d989816276bbae5caca130e94b5763f535d7c35597185e7bb9ecfe1326436dbb872152e178d5d8101807940586fa2227f73cc83a76222d71bcd82e185e9d45cbba76cdea4843378f45c00e95abc3276ce8dc0bdc50ad84213b1fc4cec75859e3d2c1eb38496d27a7f594bb688b8c0e08a3734f172c974b8b910080e472064a77cc97d925668889ebf3b3039e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "081252c5d89dd8dc3ab4751f74bdf8f040fbbcf4b98ad1349dddce2b5684e150ab36dbc92664007af5b9227200957a52649bd7bda4befa040c67738bd96528433e347407d0f76485435adc862902184651e7793feee23b17aa3e2c3ad81431dedefe297cbff81e6328a926518d9bcc2b15f5abbfb4a6e1c08d2c85e8cd2e417778cda538de"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "d1d8f2e7f52fc0cb513762a78b534dfa3a55708cf3852a879bc2cf24e1f754f4dafb925e55e9791a02e4e748ddb0571f8d8e4c6af6a54223a9de9a61d45cc79e8dd041f204ff428c6955a3e3ac28b4e0339a2516a7fe0a2ffe51ea5a3f62271fe304bdd3846a33bb"}]}, 0x230}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) r3 = getgid() r4 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000ac0)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000b00)=0x0) r7 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000d40)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80)={0x0, 0x0, 0x0}, &(0x7f0000000dc0)=0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e00)={0xffffffffffffffff}) r11 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000e40)={{{@in=@private, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000f40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000f80)={0x0, 0x0, 0x0}, &(0x7f0000000fc0)=0xc) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001000)={0x0, r1}, 0x8) r16 = socket$can_bcm(0x1d, 0x2, 0x2) r17 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001480), 0x100000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000014c0)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001500)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0, 0x0}, &(0x7f0000001580)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0}, &(0x7f0000001680)=0xc) r23 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000400)="0c9226ce18f75e866b655dd3eae83b52bd8528cc5e5c695f8d7f176e7db05de1573a1f4854dd38ec7262d01ca9d130c07ec36dbc8cbd109677610c37126e69cb6f7cd3d6b03df9b402506f129dd616b344063a0e2a40b123cb30340f2ff6d8e65e022e15ed981c0c2ead07ecc743c535537e1887f0c5666f644715253d960cdbad16a903e6dc89475f2952f39a1c1e6d6a973a56bed411f5d88f3b5a0ddb8b7fcde5df46fd7b7089e642584a0568d6ec581bfdd2058a3b92bda81f01830619b659965aebe50f8fe2c04ff84dee2246688876e0070e69f2ee45e922410bfbf99b", 0xe0}, {&(0x7f0000000500)="e8b28a5399d365b27068f08b04c4996725a86d776af56e1c2e00b506e52a8b973adbf51323b61b01e36abe55c81956ff4e760e8b1aeef6f16cdc8d5b8b6aea1c7458f05dea43008662e549483706bdc3a93348913c", 0x55}, {&(0x7f0000000580)="a77cc45638d2d188455965994b4bec8081f50a5eaac72c708c6181729791d17cc6977e27c2ea1fcf61732abaa7dceda234a4a9493d8236c0d2d3e89d2973a1", 0x3f}, {&(0x7f00000005c0)="ef87036ac785e87e554aa9ca41ce3f2755dd5dc3265597e622f434868c642a08cbfafc6c9314fa4edc38399ffee1c8f6da07a17479a594edde3cfeb56c2a267846df4eb9fe54dc32d3ba323b2679f7f46afb", 0x52}, {&(0x7f0000000640)="e7924e8c9ae22fbb894ebd7b15cc921012a3d6334be94339c31dd36951e314dae439d0fb", 0x24}, {&(0x7f0000000680)="f3f340bcd2e73147e84245bf0a41d43293fced70f3b90527b7f5edddbfa23cd8964f9c08806653d348545139d14eee410ddaf629af12c6be252beaeec3aa64ff6e9dbc781d23995af3d7eb608fa7539593740cd156129223888b4339b84deef4d4726c15d2eb6b3ceefa8884bf08ddfcefa466aed2d0e44712ec2dbedc8a4727f45b1fe5028ba078a17e15b00cd4108b44bee2b282af06c7d88311a68febc20ad678e0ad90204cda96fd05d5dfd7f684f59e01001f7f3e02a6a23e3a00ff0369d40d11bfcec065a3a28e922d09eb6aacbc58f16a3d7c33ccd18544a198431f7a514bb78e0146a85e2028ce6fd7d4fa0c", 0xf0}, {&(0x7f0000000780)="6adce88063cd66d078e82923797f94d1f95fe91fc9f420e1b540844e45493df8a993be3f", 0x24}, {&(0x7f00000007c0)="48d0fb9cff7c51957ff389aa139c81a2dafc6da2638bd0e43ebf4ee9efcab45063bb2bc093d7634fe6f2234bd1a8130ede74425d7dc9b1de05ac0421e832c1187f58d8fa9cc2b2c275c2d83b3d1ebbc267384cdc030af6b7dd2a6a9a05c13c3c71970fd9f7d4ee5c80f3095d3ace6387451d1bc7ce47ad5741692e39915e3c4ab15d414860f1cbeb3ba708bb81d74f1ddd7640db36ae8b586eeb0c3be7794a235e87477669c800bb358027e1695ed2071569f4a7dcf00c09b1bb", 0xba}, {&(0x7f0000000880)="9b6475617bcb325f0ce59daae1f141e7fa51ba0499ec410d604890730c6b5e09cfb4b80ef0640b5a8670acb7f065d9541477c7b5adb021c8225b478bab00005d986f", 0x42}], 0x9, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r3}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee01, r3}}}], 0x60, 0x1000}}, {{&(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000c40)="05d01b60fa4e7609c87fc63ce569cf5e8dc794853527ab410594def366d8bd91ba9ade0a63925795c32ecf0b20f76d40", 0x30}, {&(0x7f0000000c80)="d674d3a71d8f2573586c666908510c287c4bffc5f2f43cced14c2ceeb346a984e41979256e4fdbbea3cbc74f2d90f708bf7e63619385ae4ce4d9293d042db838a0ccba8deec85b8f502472acd670a3dcfbb6b602b6adb48b9d2f6c07596c65a4ff2601b617ab5cebf71362d9f4bcbbae4ac3e7c2845faa", 0x77}], 0x2, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r1, r1, r0, r10, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x2c, 0x1, 0x1, [r14, r1, r15, r1, 0xffffffffffffffff, r16, r1]}}], 0xa8, 0x1}}, {{&(0x7f0000001100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001180)="cf58dd5bdaa16ebc5cd83c47154a3f153283", 0x12}, {&(0x7f00000011c0)="d5653123900b5af2d4b7da02ae02cc20f65e8aa598a6e1271065af010875887c824a0b68d094bd43cb35a3b60004c781afc66c0bf1b9e4b943e93967e5f96e42e7", 0x41}, {&(0x7f0000001240)="cd00852aee58f769f6111c5b8030884ceacaed187a8296", 0x17}, {&(0x7f0000001280)="da2df45e99e5fb0664f524100f1126d077d96201febf1fc64f28818e34c6fef887553b5d9b5d29a32052272ac2806579c5104fb60646710077e51bb1dc82047c4cb2a0fdb4b7066ab6c3a909e9456e5c763d1a3067d3162fe84416742feccc426cf1a72d26619358835bb396482a4f4188274fb5138ba7463a1e604381ecd5da7a9ae5607fff68e5f9ec23e4815d3de7da0cdcfb95a433634c9728f2c71c32eb35f19ed03ec77dcfaa88ecc2b7eba6566b48d1fad88a8ff7756344e0e0574eaec8be14322c5cf1c495956eb9ea931b829af6cc5d09ae3498e3ebd3c33e63", 0xde}, {&(0x7f0000001380)="5b065d1350e51bf7e8e7fc22d9349f875d0a4262e73c40ac5b9b9234f220ad13d20835bb257c56d24684e02796224295f2d9504990f85de058b1e0bf59d50d92fc380daa2730cc9eda5818bf75264f7b4f91ccbaef2a632c9ff57da80be61349d4d0794589a8", 0x66}], 0x5, &(0x7f00000016c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r3}}}, @rights={{0x24, 0x1, 0x1, [r0, r17, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r3}}}, @rights={{0x2c, 0x1, 0x1, [r1, r23, r0, r0, r1, 0xffffffffffffffff, r0]}}], 0x100, 0x8000}}, {{&(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="3a53e2165535f9ddfff7bcad333f73e2af8df79a6d21710dd11c598281ecc5c334ae118ad3580ec15e132baa72fde1368a8a6c43173150eb30207e832e6da069107ad98196b07cd2", 0x48}], 0x2, 0x0, 0x0, 0x20000010}}], 0x4, 0x4004811) r24 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002a00), r24) ioctl$FIBMAP(r17, 0x1, &(0x7f0000002a40)=0xffffffff) bpf$ENABLE_STATS(0x20, &(0x7f0000002a80), 0x4) 1.678395455s ago: executing program 0 (id=3065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0xfe0a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x4, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c0001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000240), &(0x7f0000000340)=""/91}, 0x20) 1.640693976s ago: executing program 3 (id=3066): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x1000002, r5}, 0x10) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 1.538158014s ago: executing program 2 (id=3067): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f00000010c0), 0x2040, 0x0) 1.359255702s ago: executing program 1 (id=3068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r2, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000400900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000480)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000240)={0x1c, r7, 0xf03, 0x2, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x801, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xb029}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x5, 0x8001, 0x2}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc8}, 0x20000000) socketpair(0x23, 0x80000, 0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_SET(r11, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x270, r7, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x270}, 0x1, 0x0, 0x0, 0x801}, 0x8804) connect$caif(r11, &(0x7f0000000380)=@dgm={0x25, 0xb1b, 0x80}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYBLOB="260bea86de3c1db19a44ebf1b5ab33ad9b173eb613609a5d7ece", @ANYRESDEC=r1, @ANYRESHEX=r10, @ANYRES16=r10], 0x50}}, 0x24040015) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.252421827s ago: executing program 0 (id=3069): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe]}}, 0x5c) unshare(0x20000400) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000002200000000000000160000008500000061000000850000005000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x36, 0x0, &(0x7f00000003c0)="f4ab4de4115d50244a0e839e86dd4e134d29453f6fe30ed4c9acf5be1b4f04294a97fe0bacda3c88f9a54b850a2425be15d9a866e85c", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r6, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x4, 0x0, 0x400}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x240008c0}, 0x15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000006a00000126bd7000fcdbdf25020000000000000008000a00010000000800210001000000040009000800010001000000080001000100000004000b00"], 0x9a}}, 0x20001044) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10010, r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r9, @ANYBLOB="010000400000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="dc005a80d80001800500060002000000050007000000000033000200291938230e220c465429242e2539160a1038382c223e10503b441a4a301e035724af272e1121090200000026412f01000500070001000000050006000200000005000400010000004e0002"], 0xf8}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r7}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000023a658ecf4d4b7029000000958c1e6cfce9f46e43f25ccc98795572f1316ec0f0439fd64736e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r11, 0x18000000000002a0, 0xcc0, 0x0, &(0x7f0000000600)="d220dd96c717ab96f0ded75d86ddce", 0x0, 0x287, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@mcast1, 0x16, r5}) 1.141906201s ago: executing program 3 (id=3070): r0 = socket$netlink(0x10, 0x3, 0x10) unshare(0x22020600) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000007f00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000004100)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x98, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x21a1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x98}}, 0x4000) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) socket$netlink(0x10, 0x3, 0x10) (async) unshare(0x22020600) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) recvmmsg(r1, &(0x7f0000007f00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000004100)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) (async) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x98, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x21a1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x98}}, 0x4000) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) (async) 1.054051985s ago: executing program 4 (id=3071): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) sendmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001b80)="b4", 0x1}], 0x1}}], 0x1, 0x200040c4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8, 0xfffffffc}}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8, 0xfffffffc}}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) 1.048929296s ago: executing program 0 (id=3072): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000000000000c00", @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES8=r1, @ANYRES16=r1, @ANYRES32=r1], 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/28, &(0x7f0000000100)=0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000000500)=""/68}, 0x20) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4, @ANYBLOB="140003002e"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xfa156000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x6, 0xffff}, {0x0, 0xdd8f5f7ccf45775c}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000080)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xa4}}, 0x20000000) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@tracing={0x0, 0x3ff}}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xffffffffffffff43}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3ff}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xb4}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x28e, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r12) 905.770174ms ago: executing program 1 (id=3073): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000100)) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, r1, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@enum={0xf, 0x2, 0x0, 0x6, 0x4, [{0xa, 0x3}, {0x9, 0x8001}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xf1}}, @fwd={0xd}, @struct={0x2, 0x8, 0x0, 0x4, 0x1, 0x10, [{0x1, 0x0, 0x61fa}, {0x5, 0x0, 0x1521}, {0xd, 0x0, 0x4}, {0xa, 0x0, 0x4}, {0xe, 0x1, 0xf031}, {0xf, 0x2, 0x80}, {0xe, 0x4, 0x1ff}, {0xb, 0x3, 0x8}]}]}, {0x0, [0x2e]}}, &(0x7f0000000800)=""/223, 0xc7, 0xdf, 0x0, 0xe, 0x10000}, 0x28) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@enum={0xf, 0x2, 0x0, 0x6, 0x4, [{0xa, 0x3}, {0x9, 0x8001}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xf1}}, @fwd={0xd}, @struct={0x2, 0x8, 0x0, 0x4, 0x1, 0x10, [{0x1, 0x0, 0x61fa}, {0x5, 0x0, 0x1521}, {0xd, 0x0, 0x4}, {0xa, 0x0, 0x4}, {0xe, 0x1, 0xf031}, {0xf, 0x2, 0x80}, {0xe, 0x4, 0x1ff}, {0xb, 0x3, 0x8}]}]}, {0x0, [0x2e]}}, &(0x7f0000000800)=""/223, 0xc7, 0xdf, 0x0, 0xe, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xb, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x0, 0xa, 0x1, 0x8, 0xffffffffffffffe0, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0x7, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x4, 0x4, 0xa, 0x6, 0x10}], &(0x7f0000000040)='GPL\x00', 0x0, 0xa5, &(0x7f00000001c0)=""/165, 0x40f00, 0x8, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000900)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x10, 0xe, 0xfffffffc}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x4, 0x5, 0x0, 0xc}, {0x5, 0x1, 0x9, 0x2}, {0x1, 0x3, 0x4, 0xa}], 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x8) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000000)=0x10001, 0x4) (async) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000000)=0x10001, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 903.927537ms ago: executing program 4 (id=3074): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) read(r0, &(0x7f0000000000)=""/149, 0xaa) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000000000014000100f90100000000000000000000d8000001170002"], 0x44}}, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000c200000240012800b0001006272696467650000000005000000f5f0d54303dc2f21df040000000000000090831fe3451a6c3a6872fb3186eeabf3ee7a1d6c900000000000000001000000000000"], 0x44}}, 0x0) 664.412752ms ago: executing program 4 (id=3075): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl(r0, 0x0, &(0x7f0000000040)="31f058b4c081fe7ef08e6ff38e14f1874279841a0780eaee7eb4a5edada3aafedfecbcfb7ee965a9a97b78b71b44360fe0bbe6f53bb48d59ca2d51bd33e756ac0be0746d08a7df645f3672c23b7a44f5592b6a4770") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000c04fcff", 0x58}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000100000300000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000001b000000b700000000000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="08000800070000000000140000000000000000000009401190780a010102ac6efa8f08be32a0479cb07801000000040000003115004855e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221bb54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143ed86cd87cd326b66a3ca343e29e347dc61214ad593ad9f48b4d287b15c14be99f0aead9a5cd7bcd4dc8e1acb0a78f4793cfd119c00000000000000"], 0xbe) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000017000000440006803e00040063636d2861657329d7992093c68d18074a9146f32837faf111920d09f027975c7fdf9c22960bcb6a5efd0ae35dee79ecda4e40e2e4f42424852890dd45f7e39daa3e1eff64dc043e757aa95689137d33c9bb33704d7321df6dd1a1a2378ce86a6d4a93970e070f53a5dd4bfe537bc4a9ac5d5cc8393cbeb097adeaaa5400dcaa312945"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r10, @ANYBLOB="08de733de2a6eb14000280080007002b000000080002000600000008000100e57468000c00028008000400060000004c000280080001001e000000080004000600000008000400030000000800020000000000080001001d00030000080001000500000008000300020000000800010004000000580004800900010073797a310000000014000780080001000d00000008000300c90700001300010062726f6164636173742d6c696e6b00000c00078008000400410900001300010062726f6164636173742d6c696e6b000000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x4000091}, 0x10) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="03000800010000000000140000004500801614000000000190780a010100ac1414aa0400907800000000450000000000001100110000ac1414aa7f000001"], 0xfdef) 626.299563ms ago: executing program 2 (id=3076): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) unshare(0x2c020400) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8800) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) 529.989833ms ago: executing program 0 (id=3077): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d000a80"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff, 0xff, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x4, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000002080), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="610304080106789b21db02060912c90e1aba6bad8a1932148548fcee"], 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000000000000000000008500000023000000850000002300000095"], &(0x7f0000000280)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1188e19b95d02ff4284860186dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 524.478951ms ago: executing program 2 (id=3078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x439, 0xfffffffe, 0x20000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000b000061104000000000009200000000b820061cb08a3d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 424.843747ms ago: executing program 2 (id=3079): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000f6ff000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c00038008000140180003801400010076657468315f00005f626f6e64000000080002"], 0x104}}, 0x800) read(r0, &(0x7f0000000000)=""/149, 0xaa) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}, {0x0}], 0x2}}], 0x1, 0x2004000) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f00006dbffc)=0x200004, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="632a1eb3f0c0d7e1f3", 0x9}], 0x1, 0x0, 0x0, 0x4090}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x28, r8, 0x9, 0x470bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004844) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000001900010000000000000000001c140000fe03000100000000840013000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000090000000000000000000c00090005000001", @ANYRES32=0x0, @ANYBLOB="08000100000000000800010000000e"], 0xd4}}, 0x0) r10 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000280)={0x0, 0x38, [0x5, 0x0, 0x75d, 0x6], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r10, 0x110, 0x3) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r11, 0x0, 0xffffffff000) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000180)}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)=""/52, 0x34}, 0x6625}, {{&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)}], 0x1, &(0x7f0000000680)=""/141, 0x8d}, 0x10000}, {{&(0x7f00000005c0)=@x25, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000940)=""/152, 0x98}, {&(0x7f0000002f80)=""/4109, 0x100d}, {&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f0000002ec0)=""/187, 0xbb}, {&(0x7f0000000bc0)=""/93, 0x5d}], 0x5, &(0x7f0000000780)=""/27, 0x1b}, 0x7a}], 0x4, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x3) 0s ago: executing program 1 (id=3081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x62400, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x28880, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)="4d60ec4f", 0x4}], 0x1) sendfile(r1, r0, 0x0, 0x401) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): to 1000 [ 317.822786][T12401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.895644][T12403] tipc: Enabled bearer , priority 0 [ 317.922827][T12403] syzkaller0: entered promiscuous mode [ 317.935199][T12403] syzkaller0: entered allmulticast mode [ 317.974941][T12403] tipc: Resetting bearer [ 318.004346][T12402] tipc: Resetting bearer [ 318.059794][T12402] tipc: Disabling bearer [ 318.079807][T12368] xfrm0 speed is unknown, defaulting to 1000 [ 318.315113][T12410] netlink: 'syz.1.1643': attribute type 1 has an invalid length. [ 318.349836][T12410] nbd: error processing sock list [ 318.499250][T12368] xfrm0 speed is unknown, defaulting to 1000 [ 318.574999][T12418] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 318.595177][T12418] netlink: 'syz.1.1647': attribute type 2 has an invalid length. [ 318.655117][T12422] tipc: Bearer : already 2 bearers with priority 10 [ 318.680207][T12422] tipc: Bearer : trying with adjusted priority [ 318.700476][T12422] tipc: New replicast peer: 255.255.255.255 [ 318.728632][T12422] tipc: Enabled bearer , priority 9 [ 318.758406][T12426] netlink: 'syz.4.1648': attribute type 11 has an invalid length. [ 318.792725][T12426] netlink: 'syz.4.1648': attribute type 11 has an invalid length. [ 318.882160][T12433] bridge4: entered promiscuous mode [ 318.887450][T12433] bridge4: entered allmulticast mode [ 319.019806][T12442] ip6tnl3: entered promiscuous mode [ 319.025226][T12442] ip6tnl3: entered allmulticast mode [ 319.031879][T12442] team0: Device ip6tnl3 is of different type [ 319.243925][T12368] xfrm0 speed is unknown, defaulting to 1000 [ 319.766446][T12368] xfrm0 speed is unknown, defaulting to 1000 [ 320.025426][ T7874] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.044123][ T7874] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.069060][ T7874] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.099407][ T7874] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.160962][T12480] validate_nla: 3 callbacks suppressed [ 320.160981][T12480] netlink: 'syz.4.1665': attribute type 7 has an invalid length. [ 320.194581][T12482] tap0: tun_chr_ioctl cmd 2148553947 [ 320.204627][T12482] tap0: tun_chr_ioctl cmd 2147767521 [ 320.212851][T12480] netlink: 'syz.4.1665': attribute type 7 has an invalid length. [ 320.221480][T12482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.375305][T12490] geneve2: entered promiscuous mode [ 320.397484][T12218] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.438451][T12218] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.464743][T12218] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.492990][T12218] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.632824][T12499] wg1 speed is unknown, defaulting to 1000 [ 320.657249][T12499] xfrm0 speed is unknown, defaulting to 1000 [ 320.830929][T12511] wg1 speed is unknown, defaulting to 1000 [ 321.155903][T12511] xfrm0 speed is unknown, defaulting to 1000 [ 321.874206][T12536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.887999][T12531] wg1 speed is unknown, defaulting to 1000 [ 321.953112][T12531] xfrm0 speed is unknown, defaulting to 1000 [ 322.454734][T12551] wg1 speed is unknown, defaulting to 1000 [ 322.464701][T12551] xfrm0 speed is unknown, defaulting to 1000 [ 322.574047][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.055661][T12577] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 323.062928][T12577] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 323.089273][T12577] __nla_validate_parse: 10 callbacks suppressed [ 323.089296][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1688'. [ 323.243483][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 373.769253][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.013168][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.867988][T12596] netlink: 'syz.1.1692': attribute type 10 has an invalid length. [ 395.879791][T12596] bridge0: port 3(macsec0) entered blocking state [ 395.889570][T12596] bridge0: port 3(macsec0) entered disabled state [ 395.907982][T12597] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1695'. [ 395.917165][T12596] macsec0: entered allmulticast mode [ 395.917190][T12596] veth1_macvtap: entered allmulticast mode [ 395.925051][T12596] macsec0: entered promiscuous mode [ 395.935455][T12596] bridge0: port 3(macsec0) entered blocking state [ 395.942115][T12596] bridge0: port 3(macsec0) entered forwarding state [ 395.963569][T12601] netlink: 'syz.1.1692': attribute type 10 has an invalid length. [ 396.023166][T12598] netlink: 'syz.4.1695': attribute type 2 has an invalid length. [ 396.063937][T12598] !9: entered promiscuous mode [ 396.500324][ T30] audit: type=1804 audit(1767090691.341:7): pid=12623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1702" name="/newroot/342/cgroup.controllers" dev="tmpfs" ino=1769 res=1 errno=0 [ 396.563335][ T30] audit: type=1800 audit(1767090691.341:8): pid=12623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1702" name="cgroup.controllers" dev="tmpfs" ino=1769 res=0 errno=0 [ 396.608945][ T30] audit: type=1800 audit(1767090691.341:9): pid=12623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1702" name="cgroup.controllers" dev="tmpfs" ino=1769 res=0 errno=0 [ 397.366624][T12661] wg1 speed is unknown, defaulting to 1000 [ 397.423409][T12671] xt_hashlimit: max too large, truncated to 1048576 [ 397.431019][T12671] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 397.443280][T12661] xfrm0 speed is unknown, defaulting to 1000 [ 397.473297][T12674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1716'. [ 397.482545][T12674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1716'. [ 398.150938][T12698] xt_hashlimit: size too large, truncated to 1048576 [ 398.645606][T12715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.836332][T12728] syzkaller0: entered promiscuous mode [ 398.849142][T12728] syzkaller0: entered allmulticast mode [ 398.899767][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 398.918695][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1732'. [ 399.361232][T12772] netlink: 'syz.3.1738': attribute type 1 has an invalid length. [ 399.371057][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 399.411175][T12772] netlink: 'syz.3.1738': attribute type 1 has an invalid length. [ 399.437707][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 399.476168][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1739'. [ 399.684367][T12778] netlink: 'syz.3.1740': attribute type 8 has an invalid length. [ 399.774053][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1742'. [ 399.798065][T12779] wg1 speed is unknown, defaulting to 1000 [ 399.821317][T12779] xfrm0 speed is unknown, defaulting to 1000 [ 399.856664][T12783] wg1 speed is unknown, defaulting to 1000 [ 400.043162][T12797] ip6gre1: entered allmulticast mode [ 400.205236][T12809] netlink: 'syz.1.1747': attribute type 1 has an invalid length. [ 400.311716][T12812] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1749'. [ 400.330404][T12783] xfrm0 speed is unknown, defaulting to 1000 [ 400.812071][T12821] wg1 speed is unknown, defaulting to 1000 [ 400.853659][T12821] xfrm0 speed is unknown, defaulting to 1000 [ 400.960900][T12829] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1752'. [ 401.255570][T12833] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 401.283926][T12835] geneve3: entered promiscuous mode [ 401.305829][T12836] syzkaller0: entered promiscuous mode [ 401.311679][T12836] syzkaller0: entered allmulticast mode [ 401.360765][T12835] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.374034][T12835] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.462832][T12835] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.473685][T12835] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.571289][T12840] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1756'. [ 401.592357][T12840] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1756'. [ 401.603598][T12835] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.618547][T12835] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.833354][T12835] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.844176][T12835] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.195691][T12758] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.214318][T12758] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.256447][T12758] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.276135][T12758] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.382987][T12758] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.403434][T12758] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.478955][T12758] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.487202][T12758] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.577157][T12851] netlink: 'syz.2.1761': attribute type 1 has an invalid length. [ 402.603101][T12851] netlink: 'syz.2.1761': attribute type 3 has an invalid length. [ 402.617184][T12851] netlink: 'syz.2.1761': attribute type 7 has an invalid length. [ 402.627690][T12851] netlink: 'syz.2.1761': attribute type 8 has an invalid length. [ 402.635607][T12851] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1761'. [ 402.648099][T12851] NCSI netlink: No device for ifindex 131092 [ 402.799908][T12858] tipc: Enabling of bearer rejected, failed to enable media [ 402.837195][ T5833] Bluetooth: hci4: link tx timeout [ 402.843834][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.963420][T12868] wg1 speed is unknown, defaulting to 1000 [ 402.971452][T12868] xfrm0 speed is unknown, defaulting to 1000 [ 403.222941][T12879] netlink: 132124 bytes leftover after parsing attributes in process `syz.4.1767'. [ 403.438964][T12885] tipc: Enabling of bearer rejected, already enabled [ 403.493096][T12885] tipc: Resetting bearer [ 403.620268][T12888] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1769'. [ 403.896134][T12896] netlink: 'syz.1.1772': attribute type 10 has an invalid length. [ 403.923631][T12903] netlink: 'syz.1.1772': attribute type 10 has an invalid length. [ 403.948052][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 403.958922][T12901] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1775'. [ 404.069956][T12906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1776'. [ 404.089387][T12906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1776'. [ 404.105937][T12910] netlink: 'syz.4.1778': attribute type 1 has an invalid length. [ 404.118761][T12910] netlink: 'syz.4.1778': attribute type 2 has an invalid length. [ 404.134202][T12908] pimreg1: tun_chr_ioctl cmd 1074025677 [ 404.149589][T12908] pimreg1: linktype set to 804 [ 404.453494][T12936] openvswitch: netlink: Message has 4 unknown bytes. [ 404.605106][T12937] tipc: Enabled bearer , priority 0 [ 404.701103][T12937] syzkaller0: entered promiscuous mode [ 404.706745][T12937] syzkaller0: entered allmulticast mode [ 404.714073][T12937] tipc: Resetting bearer [ 404.891186][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 405.055321][T12957] wg1 speed is unknown, defaulting to 1000 [ 405.098601][T12957] xfrm0 speed is unknown, defaulting to 1000 [ 405.211261][T12929] tipc: Resetting bearer [ 407.047080][T12929] tipc: Disabling bearer [ 407.238594][T12978] No such timeout policy "syz1" [ 407.432372][T12988] __nla_validate_parse: 2 callbacks suppressed [ 407.432390][T12988] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1795'. [ 407.497641][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1795'. [ 407.509150][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1795'. [ 407.531758][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1795'. [ 407.600030][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1795'. [ 407.645086][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 407.657743][T12993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'. [ 407.706022][T12980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.006529][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 408.043762][T13007] netlink: 620 bytes leftover after parsing attributes in process `syz.1.1802'. [ 408.084310][T13011] netlink: 'syz.0.1803': attribute type 83 has an invalid length. [ 408.094570][T13011] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20004 [ 408.107065][T13007] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1802'. [ 408.273872][T13019] netlink: 'syz.2.1805': attribute type 39 has an invalid length. [ 408.493815][T13029] wg1 speed is unknown, defaulting to 1000 [ 408.521682][T13029] xfrm0 speed is unknown, defaulting to 1000 [ 408.656173][T13037] netlink: 'syz.1.1811': attribute type 13 has an invalid length. [ 408.683965][T13037] netlink: 'syz.1.1811': attribute type 17 has an invalid length. [ 408.917137][T13037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.945449][T13051] tipc: Enabling of bearer rejected, already enabled [ 409.278611][T13062] syzkaller0: entered promiscuous mode [ 409.293017][T13062] syzkaller0: entered allmulticast mode [ 409.552685][T13064] wg1 speed is unknown, defaulting to 1000 [ 409.571896][T13064] xfrm0 speed is unknown, defaulting to 1000 [ 409.597792][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.614080][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.624361][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.633039][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.957190][T13084] wg1 speed is unknown, defaulting to 1000 [ 410.040429][T13086] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 410.067048][T13084] xfrm0 speed is unknown, defaulting to 1000 [ 411.285821][T13119] wireguard0: entered promiscuous mode [ 411.299018][T13119] wireguard0: entered allmulticast mode [ 411.310233][T13126] netlink: 'syz.3.1834': attribute type 1 has an invalid length. [ 411.320195][T13119] team0: Device wireguard0 is of different type [ 411.594939][T13139] syzkaller0: entered promiscuous mode [ 411.601370][T13139] syzkaller0: entered allmulticast mode [ 411.659712][T13139] tipc: Enabled bearer , priority 0 [ 411.699467][T13139] tipc: Resetting bearer [ 411.729769][T13138] tipc: Resetting bearer [ 411.829631][T13138] tipc: Disabling bearer [ 411.856197][T13140] netlink: 'syz.4.1837': attribute type 10 has an invalid length. [ 412.006870][T13157] gre0: left promiscuous mode [ 412.019217][T13157] gre0: left allmulticast mode [ 412.122341][T13157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.151067][T13157] dummy0: left promiscuous mode [ 412.167474][T13157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.247288][T13158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.298170][T13176] netlink: 'syz.0.1848': attribute type 5 has an invalid length. [ 412.351418][T13173] bond3: option packets_per_slave: invalid value (1048582) [ 412.359116][T13173] bond3: option packets_per_slave: allowed values 0 - 65535 [ 412.379328][T13173] bond3 (unregistering): Released all slaves [ 412.457049][T13176] geneve3: entered promiscuous mode [ 412.464103][T13176] geneve3: entered allmulticast mode [ 412.471296][T12758] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 412.510102][T12758] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 412.518265][T12758] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 412.570100][T12758] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 412.746449][T13208] __nla_validate_parse: 28 callbacks suppressed [ 412.746478][T13208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1856'. [ 412.802483][T13201] wg1 speed is unknown, defaulting to 1000 [ 412.802777][T13219] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1858'. [ 412.839839][T13201] xfrm0 speed is unknown, defaulting to 1000 [ 412.864791][T13222] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1858'. [ 413.227913][T13237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1863'. [ 413.282242][T13239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.293830][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'. [ 413.544777][T13256] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.563354][T13256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.683457][T13260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1869'. [ 413.701875][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1869'. [ 413.727216][T13260] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1869'. [ 413.745373][T13260] netlink: 'syz.1.1869': attribute type 3 has an invalid length. [ 413.774159][T13260] netlink: 'syz.1.1869': attribute type 2 has an invalid length. [ 413.799007][T13260] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1869'. [ 413.808074][T13260] netlink: 'syz.1.1869': attribute type 2 has an invalid length. [ 414.234798][T13269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.262479][T13269] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.283093][T13269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.333299][T13276] netlink: 'syz.1.1874': attribute type 4 has an invalid length. [ 414.383791][T13284] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1877'. [ 414.465084][T13284] netlink: 'syz.3.1877': attribute type 1 has an invalid length. [ 414.485995][T13292] netlink: 'syz.4.1878': attribute type 5 has an invalid length. [ 415.033356][T13310] wg1 speed is unknown, defaulting to 1000 [ 415.052590][T13310] xfrm0 speed is unknown, defaulting to 1000 [ 415.105501][T13319] netlink: 'syz.4.1884': attribute type 1 has an invalid length. [ 415.116344][T13319] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 415.307708][T13330] wg1 speed is unknown, defaulting to 1000 [ 415.364764][T13330] xfrm0 speed is unknown, defaulting to 1000 [ 415.610778][T13337] netlink: 'syz.4.1887': attribute type 12 has an invalid length. [ 416.065133][T13346] syzkaller1: entered promiscuous mode [ 416.070969][T13346] syzkaller1: entered allmulticast mode [ 416.085620][T13346] syzkaller1: left promiscuous mode [ 416.109113][T13346] syzkaller1: left allmulticast mode [ 416.708197][T13372] lo: entered allmulticast mode [ 417.071638][T13401] netlink: 'syz.4.1903': attribute type 1 has an invalid length. [ 417.123488][T13401] bond4: entered promiscuous mode [ 417.130832][T13401] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.163242][T13401] bond4: (slave bridge5): making interface the new active one [ 417.171429][T13401] bridge5: entered promiscuous mode [ 417.178105][T13401] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 417.305298][T13415] sctp: [Deprecated]: syz.0.1907 (pid 13415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.305298][T13415] Use struct sctp_sack_info instead [ 417.362232][T13415] netlink: 'syz.0.1907': attribute type 1 has an invalid length. [ 417.432269][T13415] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 417.443574][T13415] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 417.525325][T13419] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 417.550220][T13365] lo: left allmulticast mode [ 417.913027][T13455] __nla_validate_parse: 11 callbacks suppressed [ 417.913049][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1913'. [ 418.475904][T13443] bridge0: port 3(macsec0) entered disabled state [ 418.482740][T13443] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.490593][T13443] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.906674][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'. [ 419.111106][T13443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.161309][T13443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.544176][T13443] veth1_macvtap: left allmulticast mode [ 419.631992][T13443] bridge1: left promiscuous mode [ 419.636984][T13443] bridge1: left allmulticast mode [ 419.679767][T13443] vxcan2: left allmulticast mode [ 419.685311][T13443] ipvlan2: left promiscuous mode [ 419.696370][T13443] ipvlan2: left allmulticast mode [ 419.701561][T13443] geneve1: left allmulticast mode [ 419.765675][T13443] ipvlan3: left promiscuous mode [ 419.786044][T13443] bond4: left promiscuous mode [ 419.792988][T13443] bond5: left promiscuous mode [ 419.843074][T13443] gtp1: left promiscuous mode [ 419.848049][T13443] gtp1: left allmulticast mode [ 419.879326][T13443] geneve2: left promiscuous mode [ 419.884328][T13443] geneve2: left allmulticast mode [ 419.907704][T13443] team1: left promiscuous mode [ 419.918049][T13443] team1: left allmulticast mode [ 419.932242][T13443] team2: left promiscuous mode [ 419.937050][T13443] team2: left allmulticast mode [ 419.952355][T13443] ip6gre1: left allmulticast mode [ 419.962499][T13449] syzkaller1: entered promiscuous mode [ 419.968031][T13449] syzkaller1: entered allmulticast mode [ 419.976809][T13455] hsr_slave_0: left promiscuous mode [ 419.983927][T13455] hsr_slave_1: left promiscuous mode [ 420.030749][T10891] wg1 speed is unknown, defaulting to 1000 [ 420.036642][T10891] syz0: Port: 1 Link DOWN [ 420.041367][ T1160] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.058987][ T1160] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.077612][ T1160] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.101003][ T1160] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.177721][ T1160] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.198994][ T1160] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.220513][ T1160] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.274933][ T1160] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.461145][T13492] bond5: option arp_validate: invalid value (18446744073709551614) [ 420.476431][T13492] bond5 (unregistering): Released all slaves [ 420.574657][T13491] bond5: option arp_validate: invalid value (18446744073709551614) [ 420.601955][T13491] bond5 (unregistering): Released all slaves [ 420.723687][T13511] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1925'. [ 421.321415][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'. [ 421.323895][T13538] wg1 speed is unknown, defaulting to 1000 [ 421.370295][T13538] xfrm0 speed is unknown, defaulting to 1000 [ 422.177234][T13589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1945'. [ 422.204828][T13590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1944'. [ 422.273533][T13584] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.398087][T13584] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.455488][T13594] wg1 speed is unknown, defaulting to 1000 [ 422.519759][T13584] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.585451][T13594] xfrm0 speed is unknown, defaulting to 1000 [ 422.657007][T13584] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.841515][T12758] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.892541][T12758] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.920983][T12758] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.957944][T12758] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.052333][T13612] wg1 speed is unknown, defaulting to 1000 [ 423.091415][T13612] xfrm0 speed is unknown, defaulting to 1000 [ 423.317936][T13611] netlink: 'syz.1.1950': attribute type 1 has an invalid length. [ 423.325913][T13611] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1950'. [ 423.766655][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1955'. [ 423.806399][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1955'. [ 423.832679][T13633] netlink: 'syz.1.1956': attribute type 13 has an invalid length. [ 423.848998][T13633] netlink: 'syz.1.1956': attribute type 17 has an invalid length. [ 423.942688][T13633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.963097][T13633] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.976721][T13633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.138000][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'. [ 424.270105][T13644] bond0: (slave rose0): Releasing backup interface [ 424.463483][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 424.483942][T13654] netlink: 408 bytes leftover after parsing attributes in process `syz.1.1961'. [ 424.593593][T13664] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1963'. [ 424.961249][T13677] wg1 speed is unknown, defaulting to 1000 [ 424.980959][T13677] xfrm0 speed is unknown, defaulting to 1000 [ 425.038987][T10891] IPVS: starting estimator thread 0... [ 425.059174][T13686] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 425.130890][T13687] IPVS: using max 26 ests per chain, 62400 per kthread [ 425.139943][T13692] netlink: 'syz.2.1972': attribute type 2 has an invalid length. [ 425.170787][T13691] tipc: Enabled bearer , priority 0 [ 425.353961][T13691] syzkaller0: entered promiscuous mode [ 425.359907][T13691] syzkaller0: entered allmulticast mode [ 426.738275][T13712] netlink: 'syz.4.1975': attribute type 29 has an invalid length. [ 426.804564][T13689] tipc: Resetting bearer [ 426.843746][T13689] tipc: Disabling bearer [ 427.676273][T13765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1989'. [ 427.712217][T13765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1989'. [ 427.815925][T13778] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 427.843210][T13765] wg1 speed is unknown, defaulting to 1000 [ 427.881798][T13778] wireguard0: entered promiscuous mode [ 427.889345][T13778] wireguard0: entered allmulticast mode [ 427.914354][T13778] team0: Port device wireguard0 added [ 427.926049][T13765] xfrm0 speed is unknown, defaulting to 1000 [ 427.949782][T13782] wg1 speed is unknown, defaulting to 1000 [ 428.026390][T13786] netlink: 'syz.0.1996': attribute type 23 has an invalid length. [ 428.423485][T13782] xfrm0 speed is unknown, defaulting to 1000 [ 428.459378][T13794] tipc: Enabled bearer , priority 0 [ 428.489817][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'. [ 428.525146][T13795] bond1: left allmulticast mode [ 428.530963][T13795] bond1: left promiscuous mode [ 428.536882][T13795] bridge0: port 3(bond1) entered disabled state [ 428.558767][T13799] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 428.568509][T13795] bridge_slave_1: left allmulticast mode [ 428.585878][T13795] bridge_slave_1: left promiscuous mode [ 428.602291][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.690107][T13799] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2000'. [ 428.699876][T13799] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 428.708723][T13795] bridge_slave_0: left allmulticast mode [ 428.714813][T13795] bridge_slave_0: left promiscuous mode [ 428.720815][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.781793][T13795] bond0: (slave bridge0): Releasing backup interface [ 428.790535][T13795] bridge0 (unregistering): left promiscuous mode [ 428.844570][T13804] lo: Caught tx_queue_len zero misconfig [ 428.864606][T13806] tipc: Resetting bearer [ 429.547329][T13836] syzkaller0: entered promiscuous mode [ 429.554512][T13836] syzkaller0: entered allmulticast mode [ 429.583815][T10891] tipc: Node number set to 2217807490 [ 429.703981][T13847] tunl0: Caught tx_queue_len zero misconfig [ 429.890597][T13852] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2012'. [ 429.911912][T13854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2013'. [ 430.060263][T13856] wg1 speed is unknown, defaulting to 1000 [ 430.069899][T13856] xfrm0 speed is unknown, defaulting to 1000 [ 430.137579][T13865] 0: reclassify loop, rule prio 0, protocol 800 [ 430.974496][T13902] netlink: 23 bytes leftover after parsing attributes in process `syz.3.2024'. [ 431.183061][T13910] netlink: 'syz.3.2026': attribute type 2 has an invalid length. [ 431.511746][T13918] tipc: Enabled bearer , priority 0 [ 431.532718][T13918] syzkaller0: entered promiscuous mode [ 431.538255][T13918] syzkaller0: entered allmulticast mode [ 431.544744][T13921] netlink: 'syz.0.2030': attribute type 1 has an invalid length. [ 431.732139][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2033'. [ 431.759099][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2033'. [ 431.784716][T13920] tipc: Resetting bearer [ 431.849649][T13920] tipc: Disabling bearer [ 431.893351][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2035'. [ 431.933731][T13942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.076240][T13950] netlink: 'syz.3.2039': attribute type 1 has an invalid length. [ 432.149167][T13950] 8021q: adding VLAN 0 to HW filter on device bond6 [ 432.162080][T13954] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 432.189222][T13961] IPVS: set_ctl: invalid protocol: 94 172.20.20.62:20004 [ 432.210303][T13962] IPVS: set_ctl: invalid protocol: 94 172.20.20.62:20004 [ 432.349855][T13972] netlink: 'syz.0.2046': attribute type 2 has an invalid length. [ 432.380138][T13972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2046'. [ 432.397007][T13972] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 432.405737][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'. [ 432.423053][T13974] netlink: 'syz.0.2046': attribute type 2 has an invalid length. [ 432.585371][T13983] bond0: Caught tx_queue_len zero misconfig [ 432.794446][T13991] siw: device registration error -23 [ 432.832831][T13990] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 433.447599][T14022] wg1 speed is unknown, defaulting to 1000 [ 433.471054][T14022] xfrm0 speed is unknown, defaulting to 1000 [ 433.755463][T12759] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 433.828446][T14043] __nla_validate_parse: 8 callbacks suppressed [ 433.828466][T14043] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2063'. [ 433.889396][T14043] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2063'. [ 434.069772][T14050] SET target dimension over the limit! [ 434.235416][T14059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2066'. [ 434.506682][T14063] tipc: Resetting bearer [ 434.544862][T14063] tipc: Resetting bearer [ 434.727827][T14082] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 434.807601][T14086] netlink: 'syz.0.2073': attribute type 1 has an invalid length. [ 434.819722][T14086] netlink: 9188 bytes leftover after parsing attributes in process `syz.0.2073'. [ 434.854343][T14085] IPv6: sit1: Disabled Multicast RS [ 434.874242][T14085] sit1: entered promiscuous mode [ 434.901540][T14085] sit1: entered allmulticast mode [ 435.066557][T14097] wg1 speed is unknown, defaulting to 1000 [ 435.120894][ T7875] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 435.140929][T14097] xfrm0 speed is unknown, defaulting to 1000 [ 435.172478][T14105] veth0_to_bridge: entered promiscuous mode [ 435.181333][T14103] veth0_to_bridge: left promiscuous mode [ 435.739913][T14117] 8021q: VLANs not supported on nlmon0 [ 435.870682][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'. [ 436.285206][T14147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2094'. [ 436.445749][T14147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2094'. [ 436.466523][T14149] wg1 speed is unknown, defaulting to 1000 [ 436.501882][T14154] tipc: Resetting bearer [ 436.508406][T14149] xfrm0 speed is unknown, defaulting to 1000 [ 436.648606][T14147] netlink: 'syz.2.2094': attribute type 4 has an invalid length. [ 436.838154][T14164] ip6tnl3: entered promiscuous mode [ 436.964964][T14166] wg1 speed is unknown, defaulting to 1000 [ 437.040095][T14166] xfrm0 speed is unknown, defaulting to 1000 [ 437.105934][T14169] wg1 speed is unknown, defaulting to 1000 [ 437.109056][T14171] pim6reg1: entered allmulticast mode [ 437.439605][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'. [ 437.473737][T14180] netlink: 'syz.3.2102': attribute type 11 has an invalid length. [ 437.584652][T14169] xfrm0 speed is unknown, defaulting to 1000 [ 438.167603][T14195] erspan0: entered promiscuous mode [ 438.181659][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'. [ 438.232329][T14204] lo: entered allmulticast mode [ 438.361809][T14200] lo: left allmulticast mode [ 438.921052][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 438.933915][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'. [ 439.233530][T14236] netlink: 'syz.2.2116': attribute type 1 has an invalid length. [ 439.294556][T14236] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.369068][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 439.439553][T14246] syzkaller0: entered promiscuous mode [ 439.445170][T14246] syzkaller0: entered allmulticast mode [ 439.693670][T14265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2123'. [ 439.846344][T14274] wg1 speed is unknown, defaulting to 1000 [ 439.854872][T14274] xfrm0 speed is unknown, defaulting to 1000 [ 439.926647][T14276] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 440.426135][T14300] netlink: 212172 bytes leftover after parsing attributes in process `syz.2.2132'. [ 440.450303][T14300] openvswitch: netlink: Key 10 has unexpected len 1 expected 4 [ 442.126025][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 442.127451][T14316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2137'. [ 442.349780][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 442.417526][T14315] : renamed from veth0_to_bond [ 442.825790][T14336] sit0: entered promiscuous mode [ 442.884438][T14336] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2142'. [ 443.096777][T14337] wg1 speed is unknown, defaulting to 1000 [ 443.151094][T14337] xfrm0 speed is unknown, defaulting to 1000 [ 443.965704][T14369] syzkaller0: entered promiscuous mode [ 443.972842][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2152'. [ 443.979077][T14369] syzkaller0: entered allmulticast mode [ 444.039676][T14369] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 445.130197][T14385] wg1 speed is unknown, defaulting to 1000 [ 445.346755][T14407] geneve4: entered promiscuous mode [ 445.404038][T12759] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 445.412534][T14385] xfrm0 speed is unknown, defaulting to 1000 [ 445.464591][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.482882][T14411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2162'. [ 445.519082][T12759] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 445.553372][T12759] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 445.580750][T12759] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 445.742900][T14414] wg1 speed is unknown, defaulting to 1000 [ 445.929558][T14428] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2166'. [ 446.147358][T14429] syzkaller0: entered promiscuous mode [ 446.158970][T14429] syzkaller0: entered allmulticast mode [ 446.191492][T14414] xfrm0 speed is unknown, defaulting to 1000 [ 446.394195][T14442] wg1 speed is unknown, defaulting to 1000 [ 446.783687][T14453] nbd: must specify a size in bytes for the device [ 446.787483][T14442] xfrm0 speed is unknown, defaulting to 1000 [ 448.601148][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2172'. [ 448.649441][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 448.793890][T14468] netlink: 'syz.2.2174': attribute type 13 has an invalid length. [ 449.069849][T12219] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.081663][T12219] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.101489][T12219] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.110354][T12219] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.138985][T12219] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.164463][T12219] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.190962][T12219] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.213599][T12219] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.359681][T14476] wg1 speed is unknown, defaulting to 1000 [ 449.399426][T14476] xfrm0 speed is unknown, defaulting to 1000 [ 449.407276][T14479] wg1 speed is unknown, defaulting to 1000 [ 449.480661][T14486] netlink: 'syz.3.2177': attribute type 4 has an invalid length. [ 449.644179][T14492] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 449.656379][T14488] bond5: entered promiscuous mode [ 449.664456][T14488] 8021q: adding VLAN 0 to HW filter on device bond5 [ 449.680815][T14492] vlan3: entered promiscuous mode [ 449.686164][T14492] hsr_slave_1: entered promiscuous mode [ 449.692214][T14492] vlan3: entered allmulticast mode [ 449.697603][T14492] hsr_slave_1: entered allmulticast mode [ 449.738561][T14492] wg1 speed is unknown, defaulting to 1000 [ 449.759842][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2179'. [ 449.910496][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 449.926403][T14501] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 449.963093][T14502] tipc: Enabling of bearer rejected, already enabled [ 449.985537][T14479] xfrm0 speed is unknown, defaulting to 1000 [ 450.536435][T14492] xfrm0 speed is unknown, defaulting to 1000 [ 450.654763][T14521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2188'. [ 450.921837][T14530] can: request_module (can-proto-5) failed. [ 451.251313][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2191'. [ 451.427341][T14538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2191'. [ 451.515732][T14538] vlan2: entered promiscuous mode [ 451.531311][T14538] bond0: entered promiscuous mode [ 451.734328][T14547] netlink: 316 bytes leftover after parsing attributes in process `syz.4.2194'. [ 451.755739][T14547] netlink: 'syz.4.2194': attribute type 9 has an invalid length. [ 451.768034][T14547] netlink: 'syz.4.2194': attribute type 10 has an invalid length. [ 451.927401][T14557] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 452.182527][T14573] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2200'. [ 453.453300][T14626] wg1 speed is unknown, defaulting to 1000 [ 453.464978][T14626] xfrm0 speed is unknown, defaulting to 1000 [ 453.800309][T14636] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2217'. [ 453.924233][T14638] netlink: 'syz.3.2217': attribute type 16 has an invalid length. [ 453.949122][T14638] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2217'. [ 454.714581][ T30] audit: type=1107 audit(1767090749.561:10): pid=14650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 455.294902][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2224'. [ 455.387923][T14676] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2226'. [ 455.592763][T14684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2227'. [ 455.665004][T14684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2227'. [ 455.730443][T14688] netlink: 'syz.2.2227': attribute type 6 has an invalid length. [ 456.056147][T14692] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2229'. [ 456.570822][T14716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2235'. [ 456.598248][T14716] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2235'. [ 456.896798][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'. [ 457.207764][T14729] tipc: Enabling of bearer rejected, already enabled [ 457.276915][T14725] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2238'. [ 457.299981][T14725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2238'. [ 457.346782][T14732] wireguard1: entered promiscuous mode [ 457.370202][T14732] wireguard1: entered allmulticast mode [ 457.393442][T14732] team0: Port device wireguard1 added [ 457.759898][T14754] netlink: 'syz.4.2247': attribute type 10 has an invalid length. [ 457.815741][T14754] team0: Device dummy0 is of different type [ 457.849269][T14757] netlink: 'syz.4.2247': attribute type 10 has an invalid length. [ 457.952909][T14757] dummy0: entered promiscuous mode [ 457.993694][T14757] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 458.232071][T14766] netlink: 'syz.2.2250': attribute type 21 has an invalid length. [ 458.250924][T14766] netlink: 'syz.2.2250': attribute type 5 has an invalid length. [ 458.258718][T14766] netlink: 'syz.2.2250': attribute type 6 has an invalid length. [ 458.604927][T14779] tipc: Enabling of bearer rejected, already enabled [ 458.912773][T14792] wg1 speed is unknown, defaulting to 1000 [ 458.950436][T14792] xfrm0 speed is unknown, defaulting to 1000 [ 460.431347][T14847] unsupported nlmsg_type 40 [ 460.583372][T14852] tipc: Enabled bearer , priority 0 [ 460.607318][T14852] syzkaller0: entered promiscuous mode [ 460.630416][T14852] syzkaller0: entered allmulticast mode [ 460.640576][T14854] __nla_validate_parse: 10 callbacks suppressed [ 460.640596][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2274'. [ 460.661870][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 460.671343][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 460.784963][T14866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2275'. [ 460.818985][T14866] nbd: must specify a device to reconfigure [ 460.831851][T14866] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2275'. [ 461.311697][T14851] tipc: Resetting bearer [ 461.350970][T14851] tipc: Disabling bearer [ 461.374417][T14878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2279'. [ 461.421677][T14880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.443629][T14880] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 461.486971][T14880] bond0: (slave sit0): Error -95 calling set_mac_address [ 461.716466][T14895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2284'. [ 461.759331][T14895] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2284'. [ 461.937901][T14910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'. [ 462.087762][T14920] geneve3: entered promiscuous mode [ 462.113769][T12218] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 462.128966][T12218] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 462.147935][T12218] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 462.163463][T12218] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 462.173316][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2291'. [ 462.317400][T14923] 8021q: adding VLAN 0 to HW filter on device bond6 [ 462.666667][T14966] netlink: 'syz.2.2298': attribute type 6 has an invalid length. [ 462.688578][T14966] netlink: 'syz.2.2298': attribute type 6 has an invalid length. [ 463.598701][T14981] tipc: Enabled bearer , priority 0 [ 463.610377][T14981] syzkaller0: entered promiscuous mode [ 463.616022][T14981] syzkaller0: entered allmulticast mode [ 463.671971][T14980] tipc: Resetting bearer [ 463.750418][T14980] tipc: Disabling bearer [ 463.977543][T15000] Unsupported ieee802154 address type: 0 [ 464.084995][T15010] : entered promiscuous mode [ 464.498014][T15038] tipc: Enabling of bearer rejected, already enabled [ 464.509304][T15041] syzkaller0: entered promiscuous mode [ 464.515274][T15041] syzkaller0: entered allmulticast mode [ 465.001451][T15042] wg1 speed is unknown, defaulting to 1000 [ 465.009437][T15042] xfrm0 speed is unknown, defaulting to 1000 [ 465.929473][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 502.409181][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 506.902642][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.332843][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.449390][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 578.660575][T15067] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 578.713471][T15075] netlink: 'syz.4.2331': attribute type 3 has an invalid length. [ 578.749596][T15075] siw: device registration error -23 [ 578.779070][T15078] __nla_validate_parse: 13 callbacks suppressed [ 578.779091][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'. [ 578.824878][T15072] wg1 speed is unknown, defaulting to 1000 [ 578.861418][T15081] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 578.908022][T15072] xfrm0 speed is unknown, defaulting to 1000 [ 578.942040][T15081] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 579.183245][T15101] syzkaller1: entered promiscuous mode [ 579.193354][T15101] syzkaller1: entered allmulticast mode [ 579.463882][T15110] netlink: 87 bytes leftover after parsing attributes in process `syz.4.2338'. [ 579.561507][T15113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2339'. [ 579.580229][T15113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2339'. [ 579.758178][T15126] x_tables: duplicate underflow at hook 1 [ 580.493325][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2354'. [ 580.534646][T15154] netlink: 'syz.3.2353': attribute type 13 has an invalid length. [ 580.597347][T15159] hsr_slave_1 (unregistering): left promiscuous mode [ 580.697466][T15163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2356'. [ 580.916259][T15177] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 580.927700][T15177] syzkaller0: entered promiscuous mode [ 580.933638][T15177] syzkaller0: entered allmulticast mode [ 581.142989][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'. [ 581.167213][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'. [ 581.245446][T15189] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2363'. [ 581.308444][T15193] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2363'. [ 581.651172][T15205] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 581.685268][T15209] wg1 speed is unknown, defaulting to 1000 [ 581.711143][T15209] xfrm0 speed is unknown, defaulting to 1000 [ 581.763403][T15205] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 583.834844][T15280] __nla_validate_parse: 5 callbacks suppressed [ 583.834864][T15280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 583.893280][T12760] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.964524][T15285] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2383'. [ 584.012222][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2387'. [ 584.042809][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2387'. [ 584.079660][T15282] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 584.136189][T15282] bond5 (unregistering): Released all slaves [ 584.336512][T15280] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 584.382577][T15280] bond5 (unregistering): Released all slaves [ 584.442458][T12760] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.466688][T12760] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.502108][T12760] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.569523][T15302] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2390'. [ 584.791360][T15305] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.868867][T15305] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.878687][T15305] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 584.913270][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2392'. [ 585.036434][T15309] wg1 speed is unknown, defaulting to 1000 [ 585.045991][T15309] xfrm0 speed is unknown, defaulting to 1000 [ 585.120226][T15305] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.146196][T15305] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.187862][T15305] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 585.318018][T15305] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.356327][T15305] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.378107][T15322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2395'. [ 585.389795][T15305] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 585.472788][T15305] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.519125][T15305] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.549986][T15305] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 585.643206][T15327] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 585.830436][T12758] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.849968][T12758] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 585.858299][T12758] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 585.899148][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 585.946648][T12758] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.965929][T12758] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 585.981796][T12758] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 586.045279][T12758] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.074016][T12758] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 586.089090][T12758] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 586.156448][T12758] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.176377][T12758] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 586.188346][T12758] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 586.210780][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'. [ 586.469509][T15359] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2404'. [ 586.480456][T15359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.676687][T15374] netlink: 'syz.2.2407': attribute type 10 has an invalid length. [ 586.748152][T15380] wg1 speed is unknown, defaulting to 1000 [ 586.762615][T15380] xfrm0 speed is unknown, defaulting to 1000 [ 587.732607][T15410] IPVS: length: 153 != 24 [ 587.976896][T15408] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 588.190720][T15383] wg1 speed is unknown, defaulting to 1000 [ 588.290579][T15383] xfrm0 speed is unknown, defaulting to 1000 [ 588.837017][T15448] netlink: 'syz.2.2428': attribute type 11 has an invalid length. [ 589.144617][T15463] __nla_validate_parse: 5 callbacks suppressed [ 589.144638][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2430'. [ 589.350406][T15477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 589.507798][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.518336][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.524125][T15467] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 589.526479][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.545984][T15477] erspan0: left promiscuous mode [ 589.552963][T15477] team0: left promiscuous mode [ 589.568973][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.572283][T15477] team_slave_0: left promiscuous mode [ 589.581033][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.592844][T15477] team_slave_1: left promiscuous mode [ 589.598488][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.618800][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.625160][T15477] team0: left allmulticast mode [ 589.633612][T15477] team_slave_0: left allmulticast mode [ 589.639856][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.644395][T15477] team_slave_1: left allmulticast mode [ 589.658082][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.685571][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.704726][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.706060][T15477] bridge_slave_0: left promiscuous mode [ 589.723825][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.732361][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.744231][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'. [ 589.753930][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.771211][T15477] veth1_to_team: left allmulticast mode [ 589.779495][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.799093][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.816602][T15477] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 589.825387][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.833954][T15477] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 589.845168][T15477] geneve2: left promiscuous mode [ 589.851070][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.860497][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.870782][T15477] bond1: left allmulticast mode [ 589.876579][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.885309][T15477] ip6gretap1: left allmulticast mode [ 589.895599][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.908563][T15477] veth5: left promiscuous mode [ 589.923167][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.934537][T15477] geneve3: left promiscuous mode [ 589.939611][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.939732][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.939978][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.983793][T15477] ip6tnl3: left promiscuous mode [ 590.019780][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.029231][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.093199][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.111952][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.124778][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.134926][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.141590][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.148098][T15482] hsr_slave_0: left promiscuous mode [ 590.148658][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.160805][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.167305][T15482] hsr_slave_1: left promiscuous mode [ 590.167732][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.180211][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.186797][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.195601][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.294135][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.319075][T15483] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.349574][T15497] wg1 speed is unknown, defaulting to 1000 [ 590.381263][T15497] xfrm0 speed is unknown, defaulting to 1000 [ 590.638700][T15507] wg1 speed is unknown, defaulting to 1000 [ 590.878229][T15505] x_tables: duplicate underflow at hook 1 [ 590.940484][T15507] xfrm0 speed is unknown, defaulting to 1000 [ 591.147684][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2445'. [ 591.157086][T15526] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 591.347638][T15531] openvswitch: netlink: EtherType 0 is less than min 600 [ 591.469356][T15531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2446'. [ 591.531518][T15532] IPv6: NLM_F_REPLACE set, but no existing node found! [ 592.431283][T15573] Unknown options in mask b7f2 [ 592.593822][T15589] dummy0: entered promiscuous mode [ 592.917923][T15607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2465'. [ 593.117311][T15619] netlink: 'syz.4.2469': attribute type 4 has an invalid length. [ 593.132660][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2469'. [ 593.489060][T15624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2470'. [ 594.028673][T15637] tipc: Enabling of bearer rejected, already enabled [ 594.182273][T15641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 594.220430][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2475'. [ 594.319927][T15646] ip6gre1: entered promiscuous mode [ 594.381361][T15646] ip6gre1: entered allmulticast mode [ 594.400330][T12218] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.422565][T10898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.430990][T12218] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.549811][T10898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.572930][T15655] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2476'. [ 594.586232][T15644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'. [ 594.617580][T15656] macvlan3: entered promiscuous mode [ 594.626595][T15656] macvlan3: entered allmulticast mode [ 594.634121][T15656] bond0: entered allmulticast mode [ 594.642284][T15656] dummy0: entered allmulticast mode [ 594.655387][T15656] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 594.682363][T15656] bond0: left allmulticast mode [ 594.687343][T15656] dummy0: left allmulticast mode [ 594.692661][T10898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.709853][T15661] netlink: 'syz.3.2480': attribute type 1 has an invalid length. [ 594.849334][T15658] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 594.877508][T15658] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 594.922592][T15665] tipc: New replicast peer: 255.255.255.255 [ 594.940804][T15665] tipc: Enabled bearer , priority 10 [ 594.947299][T15663] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 594.955510][T15663] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 594.965327][T15667] netlink: 'syz.0.2482': attribute type 11 has an invalid length. [ 594.982235][T15667] netlink: 'syz.0.2482': attribute type 11 has an invalid length. [ 595.009905][T15671] bond8: (slave gretap2): making interface the new active one [ 595.017601][T15667] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2482'. [ 595.041719][T15671] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 595.082947][T15658] macvlan3: entered promiscuous mode [ 595.088383][T15658] macvlan3: entered allmulticast mode [ 595.094936][T15658] bond8: entered promiscuous mode [ 595.100447][T15658] gretap2: entered promiscuous mode [ 595.106715][T15658] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 595.118693][T15658] bond8: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 595.139156][T15658] bond8: left promiscuous mode [ 595.144081][T15658] gretap2: left promiscuous mode [ 595.237734][T15679] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2483'. [ 595.512069][T15687] bond9: Unable to set down delay as MII monitoring is disabled [ 595.536494][T15687] bond9 (unregistering): Released all slaves [ 595.659571][T15689] wg1 speed is unknown, defaulting to 1000 [ 595.667300][T15689] xfrm0 speed is unknown, defaulting to 1000 [ 595.879788][T15711] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 595.886689][T15711] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004 [ 595.976001][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2491'. [ 596.032311][T15716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2491'. [ 596.122879][T15716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 596.146858][T15717] vlan3: entered promiscuous mode [ 596.152463][T15717] bond5: entered promiscuous mode [ 596.191789][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 596.529606][T15725] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2495'. [ 596.548488][T15728] netlink: 'syz.3.2493': attribute type 2 has an invalid length. [ 596.569009][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2493'. [ 597.099821][T15747] netlink: 'syz.0.2500': attribute type 2 has an invalid length. [ 597.207617][T15747] : entered promiscuous mode [ 597.784542][T15763] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 597.794682][T15763] syzkaller0: entered promiscuous mode [ 597.800272][T15763] syzkaller0: entered allmulticast mode [ 597.818871][T15765] netlink: 'syz.0.2505': attribute type 13 has an invalid length. [ 597.838613][T15765] netlink: 'syz.0.2505': attribute type 17 has an invalid length. [ 597.891985][T15765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 598.089354][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 598.376251][T15793] veth1_to_batadv: entered promiscuous mode [ 598.555661][T15804] netlink: 'syz.0.2517': attribute type 13 has an invalid length. [ 598.709278][T15804] tipc: Resetting bearer [ 598.881240][T12759] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.915195][T12759] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.938178][T12759] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 598.946828][T12759] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 598.972829][T12759] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.984739][T12759] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.993613][T12759] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 599.002562][T12759] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 599.012505][T12759] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.027357][T12759] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.036004][T12759] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 599.046477][T12759] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 599.177185][T15837] netlink: 'syz.0.2522': attribute type 4 has an invalid length. [ 599.239977][T15840] netlink: 'syz.0.2522': attribute type 4 has an invalid length. [ 599.322252][T12759] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.332205][T12759] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.341231][T12759] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 599.362644][T12759] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 599.580823][T15852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.699527][T15851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 599.821112][T15866] netlink: 'syz.0.2530': attribute type 62 has an invalid length. [ 599.867346][T15866] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 599.921641][T15874] __nla_validate_parse: 9 callbacks suppressed [ 599.921660][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 600.713755][T15910] bridge_slave_0: entered promiscuous mode [ 600.908720][T15916] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.916769][T15916] dummy0: left promiscuous mode [ 600.924331][T15916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 600.950740][T15912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.075257][T15924] netlink: 'syz.0.2544': attribute type 7 has an invalid length. [ 601.086067][T15924] netlink: 'syz.0.2544': attribute type 8 has an invalid length. [ 601.255422][T15931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2547'. [ 601.312476][T15933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2548'. [ 601.329859][T15933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2548'. [ 601.370367][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2550'. [ 601.410114][T15938] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 601.674088][T15952] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 601.725146][T15955] wg1 speed is unknown, defaulting to 1000 [ 601.785101][T15955] xfrm0 speed is unknown, defaulting to 1000 [ 601.793399][T15960] netlink: 'syz.0.2557': attribute type 1 has an invalid length. [ 601.979674][T15960] 8021q: adding VLAN 0 to HW filter on device bond6 [ 601.996125][T15973] vlan0: entered promiscuous mode [ 602.001537][T15973] bond6: entered promiscuous mode [ 602.006947][T15973] vlan0: entered allmulticast mode [ 602.012910][T15973] bond6: entered allmulticast mode [ 602.039739][T15977] netlink: 'syz.1.2556': attribute type 6 has an invalid length. [ 602.794856][T15998] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2562'. [ 602.834833][T15999] x_tables: ip_tables: osf match: only valid for protocol 6 [ 603.115829][T16003] tap0: tun_chr_ioctl cmd 1074812118 [ 603.165523][T16005] tipc: Bearer : already 2 bearers with priority 10 [ 603.196505][T16005] tipc: Bearer : trying with adjusted priority [ 603.238211][T16005] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 603.858713][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2567'. [ 604.101680][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 604.154555][T16029] netlink: 'syz.1.2567': attribute type 21 has an invalid length. [ 604.221979][T16029] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2567'. [ 604.260125][T16013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 604.291500][T16045] netlink: 'syz.4.2573': attribute type 28 has an invalid length. [ 604.315879][T16045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2573'. [ 604.351255][T16029] netlink: 'syz.1.2567': attribute type 4 has an invalid length. [ 604.453199][T16050] netlink: zone id is out of range [ 604.490476][T16050] netlink: zone id is out of range [ 604.495666][T16050] netlink: zone id is out of range [ 604.518698][T16050] netlink: zone id is out of range [ 604.528972][T16050] netlink: zone id is out of range [ 604.534158][T16050] netlink: zone id is out of range [ 604.559074][T16050] netlink: zone id is out of range [ 604.584694][T16050] netlink: zone id is out of range [ 604.600700][T16050] netlink: zone id is out of range [ 604.894897][T16071] Bluetooth: MGMT ver 1.23 [ 605.127633][T16081] __nla_validate_parse: 1 callbacks suppressed [ 605.127654][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2582'. [ 605.175155][ T5149] block nbd3: Receive control failed (result -1) [ 605.339594][T16089] netlink: 'syz.1.2586': attribute type 13 has an invalid length. [ 605.370033][T16089] netlink: 'syz.1.2586': attribute type 17 has an invalid length. [ 605.449008][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 606.280355][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'. [ 606.560338][T16138] gretap0: entered promiscuous mode [ 606.571534][T16138] vlan3: entered promiscuous mode [ 606.695250][T16142] tunl0: Caught tx_queue_len zero misconfig [ 606.701635][T16142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2600'. [ 606.780680][T16146] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 606.793432][T16146] syzkaller0: entered promiscuous mode [ 606.799531][T16146] syzkaller0: entered allmulticast mode [ 606.862098][T16146] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2598'. [ 607.003645][T16156] wg1: entered promiscuous mode [ 607.008545][T16156] wg1: entered allmulticast mode [ 607.027287][T16163] tipc: Enabled bearer , priority 0 [ 607.035921][T16163] syzkaller0: entered promiscuous mode [ 607.041687][T16163] syzkaller0: entered allmulticast mode [ 607.153726][T16170] tipc: Resetting bearer [ 607.181877][T16161] tipc: Resetting bearer [ 607.262877][T16161] tipc: Disabling bearer [ 608.495539][T16184] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2611'. [ 608.641576][T16196] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.728691][T16196] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.830592][T16196] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.894259][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'. [ 608.941059][T16196] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.961067][T16211] netlink: 'syz.2.2621': attribute type 1 has an invalid length. [ 608.985321][T16205] wg1 speed is unknown, defaulting to 1000 [ 609.074347][T16211] 8021q: adding VLAN 0 to HW filter on device bond8 [ 609.091652][T16205] xfrm0 speed is unknown, defaulting to 1000 [ 609.164242][T16217] bond8: (slave ip6gretap3): making interface the new active one [ 609.188494][T16217] bond8: (slave ip6gretap3): Enslaving as an active interface with an up link [ 609.279381][T16222] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 609.299775][T16222] bridge7: entered allmulticast mode [ 609.406048][T16211] bond8: (slave veth13): Enslaving as an active interface with a down link [ 609.454856][T16230] xt_bpf: check failed: parse error [ 609.459372][T16221] erspan0: entered allmulticast mode [ 609.566969][T12759] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.625760][ T7871] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.703070][T12759] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.758461][T12759] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.830107][T16242] netlink: 'syz.0.2628': attribute type 3 has an invalid length. [ 609.838070][T16242] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2628'. [ 609.993228][T16247] ip6erspan1: entered allmulticast mode [ 610.351070][T16262] batadv2: entered promiscuous mode [ 610.416478][T16267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2635'. [ 610.511829][T16270] netlink: 'syz.1.2636': attribute type 4 has an invalid length. [ 610.745084][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 610.823673][T16284] vlan3: entered allmulticast mode [ 610.959851][T16290] netlink: 'syz.4.2642': attribute type 1 has an invalid length. [ 610.967989][T16290] net_ratelimit: 420 callbacks suppressed [ 610.968010][T16290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.140649][T16292] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 611.201858][T16292] bond9 (unregistering): Released all slaves [ 611.505897][T16312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2651'. [ 611.563213][T16322] GUP no longer grows the stack in syz.2.2651 (16322): 200000003000-20000000a000 (200000001000) [ 611.605284][T16322] CPU: 1 UID: 0 PID: 16322 Comm: syz.2.2651 Not tainted syzkaller #0 PREEMPT(full) [ 611.605317][T16322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 611.605340][T16322] Call Trace: [ 611.605349][T16322] [ 611.605359][T16322] dump_stack_lvl+0x189/0x250 [ 611.605399][T16322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.605426][T16322] ? __pfx__printk+0x10/0x10 [ 611.605455][T16322] ? find_vma+0xe7/0x160 [ 611.605504][T16322] __get_user_pages+0x2465/0x29f0 [ 611.605561][T16322] ? __gup_longterm_locked+0xc63/0x1660 [ 611.605591][T16322] ? down_read_killable+0x1bc/0x350 [ 611.605625][T16322] __gup_longterm_locked+0xde4/0x1660 [ 611.605672][T16322] ? sanity_check_pinned_pages+0x123a/0x1300 [ 611.605712][T16322] gup_fast_fallback+0x1d6b/0x22d0 [ 611.605782][T16322] ? __pfx_gup_fast_fallback+0x10/0x10 [ 611.605808][T16322] ? stack_trace_save+0x9c/0xe0 [ 611.605844][T16322] ? stack_depot_save_flags+0x40/0x850 [ 611.605888][T16322] ? pin_user_pages_fast+0x4d/0xb0 [ 611.605930][T16322] iov_iter_extract_pages+0x35f/0x5e0 [ 611.605969][T16322] extract_iter_to_sg+0xe46/0x24e0 [ 611.606011][T16322] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 611.606057][T16322] ? __asan_memset+0x22/0x50 [ 611.606080][T16322] af_alg_get_rsgl+0x436/0x810 [ 611.606126][T16322] aead_recvmsg+0x4d5/0x13b0 [ 611.606153][T16322] ? finish_task_switch+0x23d/0x940 [ 611.606193][T16322] ? aa_sk_perm+0x7ee/0x920 [ 611.606226][T16322] ? __schedule+0x14d2/0x5000 [ 611.606249][T16322] ? __pfx_aead_recvmsg+0x10/0x10 [ 611.606273][T16322] ? __lock_acquire+0x6b6/0x2cf0 [ 611.606300][T16322] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 611.606321][T16322] ? __pfx_aead_recvmsg+0x10/0x10 [ 611.606349][T16322] sock_recvmsg_nosec+0x186/0x1c0 [ 611.606387][T16322] ____sys_recvmsg+0x3aa/0x460 [ 611.606426][T16322] ? __pfx_____sys_recvmsg+0x10/0x10 [ 611.606472][T16322] ? import_iovec+0x74/0xa0 [ 611.606503][T16322] ___sys_recvmsg+0x1b5/0x510 [ 611.606537][T16322] ? __pfx____sys_recvmsg+0x10/0x10 [ 611.606608][T16322] ? __might_fault+0xb0/0x130 [ 611.606646][T16322] do_recvmmsg+0x307/0x770 [ 611.606685][T16322] ? __pfx_do_recvmmsg+0x10/0x10 [ 611.606728][T16322] ? __pfx_do_futex+0x10/0x10 [ 611.606772][T16322] __x64_sys_recvmmsg+0x190/0x240 [ 611.606804][T16322] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 611.606837][T16322] ? do_syscall_64+0xbe/0xf80 [ 611.606864][T16322] do_syscall_64+0xfa/0xf80 [ 611.606888][T16322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.606922][T16322] ? clear_bhb_loop+0x60/0xb0 [ 611.606949][T16322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.606976][T16322] RIP: 0033:0x7f8a4b58f749 [ 611.606997][T16322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.607014][T16322] RSP: 002b:00007f8a4c4af038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 611.607043][T16322] RAX: ffffffffffffffda RBX: 00007f8a4b7e6090 RCX: 00007f8a4b58f749 [ 611.607058][T16322] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000009 [ 611.607071][T16322] RBP: 00007f8a4b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 611.607083][T16322] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 611.607096][T16322] R13: 00007f8a4b7e6128 R14: 00007f8a4b7e6090 R15: 00007ffc85d0d248 [ 611.607133][T16322] [ 612.204981][T16342] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 612.214332][T16343] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 612.260184][T16340] netlink: 'syz.2.2657': attribute type 2 has an invalid length. [ 612.420785][T16349] syzkaller1: entered promiscuous mode [ 612.426331][T16349] syzkaller1: entered allmulticast mode [ 612.478625][T16357] netlink: 1760 bytes leftover after parsing attributes in process `syz.0.2665'. [ 612.624298][T16359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2664'. [ 612.704017][T16367] netlink: 'syz.2.2666': attribute type 16 has an invalid length. [ 612.725345][T16367] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2666'. [ 612.761838][T16362] wg1: left promiscuous mode [ 612.782596][T16362] veth1_to_batadv: left promiscuous mode [ 612.788571][T16362] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 612.812222][T16362] ip6gre2: left promiscuous mode [ 612.853394][T16362] geneve2: left promiscuous mode [ 612.873606][T16362] bridge1: left promiscuous mode [ 612.890019][T16362] ip6gre3: left promiscuous mode [ 612.906808][T16362] syzkaller0: left promiscuous mode [ 612.921254][T16362] geneve3: left promiscuous mode [ 612.933355][T16362] geneve4: left promiscuous mode [ 612.945619][T16362] bond5: left promiscuous mode [ 612.989887][T16362] vlan0: left promiscuous mode [ 613.005820][T16362] bond6: left promiscuous mode [ 620.169043][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.774154][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 650.259310][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 691.213031][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 711.689052][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 752.652438][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.551122][T16391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2673'. [ 760.561906][T16391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 760.733968][T16404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2676'. [ 760.925441][T16413] wg1 speed is unknown, defaulting to 1000 [ 760.951417][T16413] xfrm0 speed is unknown, defaulting to 1000 [ 761.031464][T16419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2678'. [ 761.041730][T16419] netlink: 'syz.1.2678': attribute type 1 has an invalid length. [ 761.084554][T16423] netlink: 'syz.3.2682': attribute type 13 has an invalid length. [ 761.178839][T16430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2684'. [ 761.531443][T16423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.597577][T16446] sctp: [Deprecated]: syz.4.2687 (pid 16446) Use of int in maxseg socket option. [ 761.597577][T16446] Use struct sctp_assoc_value instead [ 761.740772][T16449] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2688'. [ 761.809285][ T7877] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.858897][ T7877] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.894774][ T7877] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.919286][ T7877] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.257641][T16478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 762.257677][T16479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 762.293018][T16481] netlink: 'syz.2.2698': attribute type 1 has an invalid length. [ 762.316588][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 762.342693][T16479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 762.793364][T16505] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2704'. [ 762.967772][T16510] pim6reg99999999: entered allmulticast mode [ 763.695576][T16540] netlink: 'syz.0.2716': attribute type 2 has an invalid length. [ 763.721407][T16540] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 763.884277][T16558] IPVS: Unknown mcast interface: vcan0 [ 764.637234][T16588] wg1 speed is unknown, defaulting to 1000 [ 764.660658][T16588] xfrm0 speed is unknown, defaulting to 1000 [ 765.587551][T16612] __nla_validate_parse: 5 callbacks suppressed [ 765.587575][T16612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2736'. [ 765.730715][T16615] netlink: 'syz.2.2737': attribute type 2 has an invalid length. [ 765.863505][T16618] ip6gre1: entered promiscuous mode [ 765.874532][T16622] netlink: 'syz.2.2739': attribute type 1 has an invalid length. [ 765.927025][T16622] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2739'. [ 765.980865][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2739'. [ 766.224597][T16636] netlink: 'syz.4.2742': attribute type 1 has an invalid length. [ 766.453985][T16637] bond6 (unregistering): Released all slaves [ 766.533416][T16636] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 766.650394][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 766.677764][T16662] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2746'. [ 766.793397][T16664] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 766.851603][T16666] netlink: 'syz.3.2748': attribute type 13 has an invalid length. [ 767.009303][T16678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2752'. [ 767.147846][T16681] wg1 speed is unknown, defaulting to 1000 [ 767.170778][T16681] xfrm0 speed is unknown, defaulting to 1000 [ 767.306523][T16689] net veth1_virt_wifi : renamed from virt_wifi0 [ 767.654526][T16699] syzkaller0: left allmulticast mode [ 767.663513][T16699] tipc: Resetting bearer [ 767.948273][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'. [ 767.957818][T16710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2761'. [ 767.967350][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'. [ 767.978163][T16710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2761'. [ 768.292234][T16722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 768.804160][T16750] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 768.861635][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2772'. [ 768.884711][T16747] wg1 speed is unknown, defaulting to 1000 [ 768.896899][T16747] xfrm0 speed is unknown, defaulting to 1000 [ 768.941500][T16755] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 769.254740][T16760] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 769.270380][T16762] netlink: 'syz.3.2776': attribute type 9 has an invalid length. [ 769.343495][T16762] xt_CT: No such helper "netbios-ns" [ 769.571624][T16778] bridge0: entered promiscuous mode [ 769.580658][T16778] bridge0: port 4(macvtap1) entered blocking state [ 769.587567][T16778] bridge0: port 4(macvtap1) entered disabled state [ 769.594565][T16778] macvtap1: entered allmulticast mode [ 769.600220][T16778] bridge0: entered allmulticast mode [ 769.622099][T16778] macvtap1: left allmulticast mode [ 769.627287][T16778] bridge0: left allmulticast mode [ 769.672299][T16778] bridge0: left promiscuous mode [ 769.800144][T16765] wg1 speed is unknown, defaulting to 1000 [ 769.939740][T16765] xfrm0 speed is unknown, defaulting to 1000 [ 770.561368][ T5149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 770.571873][ T5149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 770.581387][ T5149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 770.590487][ T5149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 770.598276][ T5149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 771.031901][T16819] wg1 speed is unknown, defaulting to 1000 [ 771.081617][T16819] xfrm0 speed is unknown, defaulting to 1000 [ 771.388041][ T7877] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.441474][ T7877] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 771.460672][ T7877] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 771.493066][T16849] tipc: Enabled bearer , priority 0 [ 771.509710][T16852] syzkaller0: entered promiscuous mode [ 771.515354][T16852] syzkaller0: entered allmulticast mode [ 771.582840][ T7877] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.603940][ T7877] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 771.615573][ T7877] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 771.660928][T16852] tipc: Resetting bearer [ 771.709300][T16852] tipc: Disabling bearer [ 771.773471][ T7877] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.789999][ T7877] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 771.800088][ T7877] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 771.869291][T16871] __nla_validate_parse: 7 callbacks suppressed [ 771.869311][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2801'. [ 771.916101][ T7877] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.926625][ T7877] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 771.937425][ T7877] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 772.051627][T10898] IPVS: starting estimator thread 0... [ 772.067044][T16880] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 772.149813][T16881] IPVS: using max 28 ests per chain, 67200 per kthread [ 772.189562][T16819] chnl_net:caif_netlink_parms(): no params data found [ 772.224072][T16889] xt_SECMARK: invalid mode: 0 [ 772.426562][T16898] sctp: [Deprecated]: syz.0.2806 (pid 16898) Use of int in maxseg socket option. [ 772.426562][T16898] Use struct sctp_assoc_value instead [ 772.442111][T16898] sctp: [Deprecated]: syz.0.2806 (pid 16898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.442111][T16898] Use struct sctp_sack_info instead [ 772.649313][ T5833] Bluetooth: hci5: command tx timeout [ 772.848052][T16909] netlink: 'syz.2.2810': attribute type 1 has an invalid length. [ 772.855938][T16909] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2810'. [ 772.868036][ T7877] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 772.880684][ T7877] bridge1 (unregistering): left promiscuous mode [ 772.887222][ T7877] bridge1 (unregistering): left allmulticast mode [ 773.089699][ T7877] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 773.097844][ T7877] bridge5 (unregistering): left promiscuous mode [ 773.408577][ T7877] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 773.417794][ T7877] dummy0: left promiscuous mode [ 773.430442][ T7877] bond0 (unregistering): Released all slaves [ 773.534654][ T7877] bond1 (unregistering): Released all slaves [ 773.638035][ T7877] bond2 (unregistering): Released all slaves [ 773.652941][ T7877] bond3 (unregistering): Released all slaves [ 773.757882][ T7877] bond4 (unregistering): Released all slaves [ 773.860959][ T7877] bond5 (unregistering): Released all slaves [ 773.914696][T16913] IPVS: Error joining to the multicast group [ 773.962289][T16920] lo: Caught tx_queue_len zero misconfig [ 773.973060][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'. [ 774.070456][ T7877] !9: left promiscuous mode [ 774.211999][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2817'. [ 774.269388][T16936] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2817'. [ 774.544942][T16937] lo: Caught tx_queue_len zero misconfig [ 774.635342][ T7877] tipc: Disabling bearer [ 774.666704][ T7877] tipc: Disabling bearer [ 774.686388][ T7877] tipc: Disabling bearer [ 774.699386][ T7877] tipc: Left network mode [ 774.728781][ T5833] Bluetooth: hci5: command tx timeout [ 774.732995][T16819] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.743602][T16819] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.752322][T16819] bridge_slave_0: entered allmulticast mode [ 774.765724][T16819] bridge_slave_0: entered promiscuous mode [ 774.812578][T16819] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.821830][T16819] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.829357][T16819] bridge_slave_1: entered allmulticast mode [ 774.836971][T16819] bridge_slave_1: entered promiscuous mode [ 774.943555][T16819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.064415][T16819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.117123][T16959] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 775.181884][T16955] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 775.260947][T16819] team0: Port device team_slave_0 added [ 775.317388][T16819] team0: Port device team_slave_1 added [ 775.406506][T16966] syzkaller1: entered promiscuous mode [ 775.421694][T16966] syzkaller1: entered allmulticast mode [ 775.441091][T16819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.448443][T16819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.476828][T16819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.560958][T16977] netlink: 'syz.0.2827': attribute type 1 has an invalid length. [ 775.572320][T16978] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2828'. [ 775.593737][T16819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.600431][T16977] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2827'. [ 775.613099][T16819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.685791][T16819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.798927][T16983] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 775.985960][T16819] hsr_slave_0: entered promiscuous mode [ 776.016845][T16819] hsr_slave_1: entered promiscuous mode [ 776.089132][ T7877] hsr_slave_0: left promiscuous mode [ 776.109112][ T7877] hsr_slave_1: left promiscuous mode [ 776.149708][ T7877] pim6reg99999999 (unregistering): left allmulticast mode [ 776.193157][ T7877] team0 (unregistering): Port device wireguard1 removed [ 776.262040][ T7877] team0 (unregistering): Port device wireguard0 removed [ 776.812185][ T5833] Bluetooth: hci5: command tx timeout [ 777.447449][T17013] netlink: 'syz.0.2835': attribute type 12 has an invalid length. [ 777.826697][T17030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2836'. [ 777.896382][T17031] veth7: entered promiscuous mode [ 778.180927][T17049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2844'. [ 778.312486][T17056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2846'. [ 778.395123][ T7877] IPVS: stop unused estimator thread 0... [ 778.504549][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2848'. [ 778.529469][T17061] wg0: Master is either lo or non-ether device [ 778.891473][ T5833] Bluetooth: hci5: command tx timeout [ 778.918402][T16819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 778.959853][T16819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 779.092908][T16819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 779.136674][T16819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 779.305510][T17099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2857'. [ 779.727319][T16819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.800039][T16819] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.846015][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.853291][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.890905][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.898132][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.113833][T17118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2863'. [ 780.477961][T16819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.752901][T17148] wg1 speed is unknown, defaulting to 1000 [ 780.760941][T17148] xfrm0 speed is unknown, defaulting to 1000 [ 781.435047][T16819] veth0_vlan: entered promiscuous mode [ 781.498379][T17174] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 781.538127][T17174] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 781.559923][T17174] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 781.658530][T16819] veth1_vlan: entered promiscuous mode [ 781.776163][T16819] veth0_macvtap: entered promiscuous mode [ 781.821199][T16819] veth1_macvtap: entered promiscuous mode [ 781.837607][T17185] netlink: 'syz.2.2878': attribute type 1 has an invalid length. [ 781.860191][T17188] netlink: 'syz.0.2879': attribute type 1 has an invalid length. [ 781.898501][T17188] netlink: 14343 bytes leftover after parsing attributes in process `syz.0.2879'. [ 781.930951][T17188] openvswitch: netlink: IP tunnel dst address not specified [ 781.950511][T17188] netlink: 'syz.0.2879': attribute type 1 has an invalid length. [ 781.977372][T17188] netlink: 14343 bytes leftover after parsing attributes in process `syz.0.2879'. [ 782.066392][T17185] 8021q: adding VLAN 0 to HW filter on device bond9 [ 782.123516][T17201] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 782.302541][T17190] bond9: entered allmulticast mode [ 782.311315][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2882'. [ 782.326860][T16819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.376733][T16819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.420959][T12758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.459106][T12758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.495516][T12758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.520219][T12758] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.602426][T17221] syzkaller0: entered promiscuous mode [ 782.611334][T17221] syzkaller0: entered allmulticast mode [ 782.694557][T17221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2887'. [ 782.925224][T12756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.943786][T12756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.227379][T12756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.265149][T12756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.526050][T17244] netlink: 'syz.3.2892': attribute type 3 has an invalid length. [ 783.557217][T17244] netlink: 'syz.3.2892': attribute type 7 has an invalid length. [ 783.587587][T17244] netlink: 'syz.3.2892': attribute type 8 has an invalid length. [ 783.618018][T17244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2892'. [ 783.773205][T17235] infiniband sy: set down [ 783.792265][T17235] infiniband sy: added bond_slave_0 [ 784.029441][T17235] RDS/IB: sy: added [ 784.040422][T17235] smc: adding ib device sy with port count 1 [ 784.066810][T17235] smc: ib device sy port 1 has no pnetid [ 784.305963][T17255] syzkaller0: entered promiscuous mode [ 784.325458][T17255] syzkaller0: entered allmulticast mode [ 784.845294][T17271] x_tables: duplicate underflow at hook 1 [ 784.899043][T17274] netlink: 'syz.3.2900': attribute type 1 has an invalid length. [ 784.962876][T17274] 8021q: adding VLAN 0 to HW filter on device bond9 [ 785.306908][T17289] syzkaller0: entered promiscuous mode [ 785.312724][T17289] syzkaller0: entered allmulticast mode [ 785.330653][T17289] macsec2: entered promiscuous mode [ 785.336769][T17289] macsec2: entered allmulticast mode [ 785.355062][T17291] xt_TPROXY: Can be used only with -p tcp or -p udp [ 785.790519][T17312] xt_TCPMSS: Only works on TCP SYN packets [ 785.832066][ T7875] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.842990][T17313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2907'. [ 785.878426][ T7875] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.060858][T17321] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 786.643472][T17336] pimreg: entered allmulticast mode [ 787.461570][T17345] syzkaller0: entered promiscuous mode [ 787.479385][T17352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2917'. [ 787.501340][T17345] syzkaller0: entered allmulticast mode [ 787.522186][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2916'. [ 787.652544][T17356] netlink: 'syz.2.2920': attribute type 1 has an invalid length. [ 787.867605][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 787.878037][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 787.887566][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 787.902102][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 787.912558][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 787.975114][ T30] audit: type=1800 audit(1767091082.821:11): pid=17364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2921" name="memory.events" dev="tmpfs" ino=2839 res=0 errno=0 [ 788.026829][T17369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 788.034202][T17369] IPv6: NLM_F_CREATE should be set when creating new route [ 788.041489][T17369] IPv6: NLM_F_CREATE should be set when creating new route [ 788.053626][T17362] wg1 speed is unknown, defaulting to 1000 [ 788.073628][T17362] xfrm0 speed is unknown, defaulting to 1000 [ 788.873113][T17384] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2926'. [ 788.930150][T17384] veth0: entered promiscuous mode [ 788.936134][T17384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2926'. [ 789.065040][ T7875] tipc: Resetting bearer [ 789.325301][T17399] netlink: 'syz.3.2928': attribute type 16 has an invalid length. [ 789.344561][T17399] netlink: 'syz.3.2928': attribute type 17 has an invalid length. [ 789.354258][T12756] smc: removing ib device syz1 [ 789.414910][T17401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2929'. [ 790.009450][ T5149] Bluetooth: hci1: command tx timeout [ 790.141311][ T7875] tipc: Disabling bearer [ 790.334834][ T7875] bond3 (unregistering): (slave bridge4): Releasing active interface [ 790.587742][ T7875] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 790.598886][ T7875] bond1 (unregistering): Released all slaves [ 790.668408][ T7875] bond0 (unregistering): Released all slaves [ 790.713377][ T7875] bond2 (unregistering): Released all slaves [ 790.761871][ T7875] bond3 (unregistering): Released all slaves [ 790.815432][ T7875] bond4 (unregistering): Released all slaves [ 790.994862][ T7875] bond5 (unregistering): Released all slaves [ 791.106078][ T7875] bond6 (unregistering): Released all slaves [ 791.215922][T17399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.234199][T17399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 791.253105][T17383] veth0: left promiscuous mode [ 791.355625][ T7875] : left promiscuous mode [ 791.395276][T17419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2935'. [ 791.439851][ T7875] : left promiscuous mode [ 791.493367][T17422] wg1 speed is unknown, defaulting to 1000 [ 791.527846][ T7875] tipc: Disabling bearer [ 791.569952][ T7875] tipc: Left network mode [ 791.900316][T17428] wg1 speed is unknown, defaulting to 1000 [ 792.057221][T17432] veth2: entered allmulticast mode [ 792.090142][ T5149] Bluetooth: hci1: command tx timeout [ 792.224490][T17362] chnl_net:caif_netlink_parms(): no params data found [ 792.903198][T17460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 793.166212][T17362] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.174496][T17362] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.218609][T17362] bridge_slave_0: entered allmulticast mode [ 793.235971][T17362] bridge_slave_0: entered promiscuous mode [ 793.252008][T17362] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.279185][T17362] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.296800][T17362] bridge_slave_1: entered allmulticast mode [ 793.330514][T17362] bridge_slave_1: entered promiscuous mode [ 793.606392][T17362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.622278][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'. [ 793.702097][T17362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.074743][T17362] team0: Port device team_slave_0 added [ 794.169280][ T5149] Bluetooth: hci1: command tx timeout [ 794.289654][ T7875] hsr_slave_0: left promiscuous mode [ 794.758366][T17442] smc: removing ib device sy [ 795.029227][T17362] team0: Port device team_slave_1 added [ 795.296975][T17362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.309459][T17362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.389534][T17362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.454334][T17362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.469282][T17362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.513111][T17362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.598537][T17501] xt_limit: Overflow, try lower: 271964/0 [ 795.699366][T17501] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2951'. [ 795.849469][T17501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2951'. [ 795.914153][T17362] hsr_slave_0: entered promiscuous mode [ 795.948459][T17362] hsr_slave_1: entered promiscuous mode [ 795.999985][T17362] debugfs: 'hsr0' already exists in 'hsr' [ 796.009381][T17362] Cannot create hsr debugfs directory [ 796.259342][ T5149] Bluetooth: hci1: command tx timeout [ 796.508642][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2960'. [ 796.543703][T17530] x_tables: duplicate underflow at hook 2 [ 796.559125][T17530] x_tables: duplicate underflow at hook 2 [ 796.565088][T17530] x_tables: duplicate underflow at hook 2 [ 796.633583][T17535] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2961'. [ 796.644655][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2960'. [ 796.834323][T17542] netlink: 'syz.4.2963': attribute type 10 has an invalid length. [ 796.842365][T17542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2963'. [ 797.110328][T17542] team0: Failed to send options change via netlink (err -105) [ 797.117987][T17542] team0: Port device geneve0 added [ 797.707806][T17564] wg1 speed is unknown, defaulting to 1000 [ 797.708435][T17571] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20000 [ 797.767235][T17572] : entered promiscuous mode [ 797.773554][ T7875] IPVS: stop unused estimator thread 0... [ 797.913926][T17576] openvswitch: netlink: Key type 198 is out of range max 32 [ 798.079106][T17586] netlink: 'syz.2.2972': attribute type 4 has an invalid length. [ 798.087578][T17586] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2972'. [ 798.142021][T17590] macsec0: entered allmulticast mode [ 798.225240][T17593] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2976'. [ 798.254674][T17590] veth1_macvtap: entered allmulticast mode [ 798.262395][T17590] macsec0: left allmulticast mode [ 798.267583][T17590] veth1_macvtap: left allmulticast mode [ 798.280111][T17596] macsec0: entered allmulticast mode [ 798.310468][T17593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2976'. [ 798.377384][T17362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 798.420213][T17362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 798.445103][T17362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 798.462260][T17601] bond0: Caught tx_queue_len zero misconfig [ 798.479908][T17362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 798.501951][T17602] gre4: entered allmulticast mode [ 798.507214][T17604] netlink: 'syz.4.2979': attribute type 3 has an invalid length. [ 798.516093][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2978'. [ 798.649661][T17604] syz_tun: entered allmulticast mode [ 798.693289][T17603] syz_tun: left allmulticast mode [ 798.723802][T17615] tipc: Enabled bearer , priority 0 [ 798.814759][T17362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.874969][T17362] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.904748][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.912013][ T7875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.952649][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.959897][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.115603][T17634] wg1 speed is unknown, defaulting to 1000 [ 799.480612][T17609] tipc: Disabling bearer [ 799.717172][T17362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.739030][T17666] netlink: 'syz.3.2993': attribute type 2 has an invalid length. [ 799.890882][T17362] veth0_vlan: entered promiscuous mode [ 799.926514][T17362] veth1_vlan: entered promiscuous mode [ 799.960466][T17676] macsec0: left allmulticast mode [ 799.965635][T17676] macsec0: left promiscuous mode [ 799.979768][T17676] bridge0: port 3(macsec0) entered disabled state [ 800.006038][T17676] bridge_slave_1: left allmulticast mode [ 800.021200][T17676] bridge_slave_1: left promiscuous mode [ 800.027076][T17676] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.048154][T17676] bridge_slave_0: left promiscuous mode [ 800.063924][T17676] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.276717][T17686] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 800.379410][T17362] veth0_macvtap: entered promiscuous mode [ 800.409650][T17362] veth1_macvtap: entered promiscuous mode [ 800.473857][T17362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.499817][T17699] SET target dimension over the limit! [ 800.511517][T17362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.519856][T17699] x_tables: duplicate underflow at hook 2 [ 800.543694][ T7877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.554219][ T7877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.581089][ T7877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.601035][ T7877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.062680][T17442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.083483][T17442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.160516][T17726] __nla_validate_parse: 10 callbacks suppressed [ 801.160535][T17726] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3009'. [ 801.200752][ T7875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.236980][ T7875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.595115][T17747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3013'. [ 801.788108][T17747] vlan3: entered promiscuous mode [ 801.947647][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 801.961006][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 801.970949][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 801.981256][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 801.989958][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 802.093272][T17759] wg1 speed is unknown, defaulting to 1000 [ 802.179506][T12760] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 802.207483][T12760] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 802.210028][T10887] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 802.257327][T17766] netlink: 'syz.4.3017': attribute type 4 has an invalid length. [ 802.302936][T17747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3013'. [ 802.314313][T17766] netlink: 'syz.4.3017': attribute type 4 has an invalid length. [ 802.372509][T17766] Bluetooth: MGMT ver 1.23 [ 802.386979][T17768] openvswitch: netlink: IP tunnel dst address not specified [ 802.519020][T16447] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 802.734909][T17759] chnl_net:caif_netlink_parms(): no params data found [ 802.747868][T17776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3020'. [ 802.830692][T16822] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 802.947488][T17796] IPv6: addrconf: prefix option has invalid lifetime [ 803.182644][T17808] macsec1: entered promiscuous mode [ 803.187934][T17808] macsec1: entered allmulticast mode [ 803.226828][T17759] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.240783][T17759] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.248246][T17759] bridge_slave_0: entered allmulticast mode [ 803.269273][T17759] bridge_slave_0: entered promiscuous mode [ 803.291236][T17759] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.307567][T17759] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.315324][T17759] bridge_slave_1: entered allmulticast mode [ 803.324032][T17759] bridge_slave_1: entered promiscuous mode [ 803.475882][T17759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.499233][T17759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.683503][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3033'. [ 803.684481][T17759] team0: Port device team_slave_0 added [ 803.699028][T17828] block nbd4: Unsupported socket: should be TCP or UNIX. [ 803.721608][T17759] team0: Port device team_slave_1 added [ 803.740165][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3033'. [ 803.885129][T12760] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 803.915308][T12760] bond2 (unregistering): (slave ip6gretap2): Releasing active interface [ 803.924925][T12760] bond2 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 76:2f:ed:2e:68:fe - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 803.978255][T12760] bond8 (unregistering): (slave ip6gretap3): Releasing active interface [ 803.987145][T12760] bond8 (unregistering): (slave ip6gretap3): the permanent HWaddr of slave - 52:9f:e6:fb:a2:a3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 804.089552][ T5833] Bluetooth: hci0: command tx timeout [ 804.738572][T12760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.754059][T12760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.769984][T12760] bond0 (unregistering): Released all slaves [ 804.929802][T12760] bond1 (unregistering): Released all slaves [ 805.064161][T12760] bond2 (unregistering): (slave veth5): Releasing active interface [ 805.073856][T12760] bond2 (unregistering): Released all slaves [ 805.293603][T12760] bond3 (unregistering): Released all slaves [ 805.413063][T12760] bond4 (unregistering): Released all slaves [ 805.427732][T12760] bond5 (unregistering): Released all slaves [ 805.540702][T12760] bond6 (unregistering): Released all slaves [ 805.554989][T12760] bond7 (unregistering): Released all slaves [ 805.661168][T12760] bond8 (unregistering): (slave veth13): Releasing active interface [ 805.671064][T12760] bond8 (unregistering): Released all slaves [ 805.771100][T12760] bond9 (unregistering): Released all slaves [ 805.870964][T17759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.889792][T17759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.927688][T17759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.012084][T12760] : left promiscuous mode [ 806.090293][T17759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.113385][T17759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.169855][ T5833] Bluetooth: hci0: command tx timeout [ 806.178785][T17759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.200649][T12760] tipc: Disabling bearer [ 806.248955][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 806.270179][T12760] tipc: Left network mode [ 806.393481][T17866] netlink: 'syz.1.3042': attribute type 7 has an invalid length. [ 806.401661][T17866] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3042'. [ 807.105501][T17759] hsr_slave_0: entered promiscuous mode [ 807.112400][T17759] hsr_slave_1: entered promiscuous mode [ 807.118915][T17759] debugfs: 'hsr0' already exists in 'hsr' [ 807.124697][T17759] Cannot create hsr debugfs directory [ 807.303043][T17882] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 807.545717][T12760] pim6reg (unregistering): left allmulticast mode [ 807.835668][T12760] team0 (unregistering): Port device team_slave_1 removed [ 807.879042][T12760] team0 (unregistering): Port device team_slave_0 removed [ 808.250529][ T5833] Bluetooth: hci0: command tx timeout [ 808.542679][T17759] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 808.554528][T17759] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 808.564741][T17759] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 808.580173][T17759] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 808.656648][T17759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.676835][T17759] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.692644][T12219] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.699843][T12219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.718386][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.725594][ T7877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.913955][T17759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.960174][T17759] veth0_vlan: entered promiscuous mode [ 808.973396][T17759] veth1_vlan: entered promiscuous mode [ 809.003554][T17759] veth0_macvtap: entered promiscuous mode [ 809.016044][T17759] veth1_macvtap: entered promiscuous mode [ 809.034246][T17759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.049029][T17759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.064560][ T3649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.075103][ T3649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.084729][ T3649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.095310][ T3649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.172530][ T7877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.180961][ T7877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.212140][T12756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.220669][T12756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.338742][T17896] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.346317][T17896] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.433688][T17896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.446689][T17896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.564299][ T3649] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.575986][ T3649] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.589573][ T3649] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.598586][ T3649] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.997311][T12760] IPVS: stop unused estimator thread 0... [ 810.338822][ T5833] Bluetooth: hci0: command tx timeout [ 814.092835][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.093652][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 830.088957][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 860.169020][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 875.532336][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 892.600459][T17900] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3045'. [ 892.625248][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3045'. [ 892.638086][T17900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3045'. [ 892.652325][T17904] syzkaller1: entered promiscuous mode [ 892.657852][T17904] syzkaller1: entered allmulticast mode [ 892.933142][T17927] netlink: 'syz.0.3052': attribute type 1 has an invalid length. [ 892.941910][T17904] team0 (unregistering): Port device team_slave_0 removed [ 892.951656][T17904] team0 (unregistering): Port device team_slave_1 removed [ 892.978321][T16823] IPVS: starting estimator thread 0... [ 892.984896][T17909] syzkaller0: entered promiscuous mode [ 892.991515][T17909] syzkaller0: entered allmulticast mode [ 893.088967][T17930] IPVS: using max 27 ests per chain, 64800 per kthread [ 893.370185][T17947] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 893.583649][T17952] openvswitch: netlink: IP tunnel dst address not specified [ 893.602269][T17952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3059'. [ 893.768292][T17966] netlink: 'syz.3.3063': attribute type 1 has an invalid length. [ 893.861658][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3063'. [ 893.871041][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3063'. [ 894.073745][T17978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'. [ 894.404506][T17988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 894.473602][T17992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3069'. [ 894.728562][T18010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3074'. [ 894.768737][T18012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3072'. [ 894.842869][T18005] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 894.884480][T18012] macsec1: entered promiscuous mode [ 894.905724][T18012] macsec1: entered allmulticast mode [ 895.001367][T18015] syzkaller1: entered promiscuous mode [ 895.018437][T18015] syzkaller1: entered allmulticast mode [ 895.090318][T18020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 895.110597][T18018] syzkaller1: left promiscuous mode [ 895.115967][T18018] syzkaller1: left allmulticast mode [ 895.209977][T17442] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 895.228417][T18028] netlink: 'syz.2.3079': attribute type 1 has an invalid length. [ 895.398223][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 895.409149][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 895.418236][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 895.430267][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 895.438002][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 895.489073][T18032] wg1 speed is unknown, defaulting to 1000 [ 895.706003][ T5842] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 895.718049][ T5842] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 895.726588][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 895.736187][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 895.746285][ T5842] RIP: 0010:klist_remove+0x14a/0x340 [ 895.751621][ T5842] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 49 c7 d5 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 2a c7 d5 f6 49 8b 44 24 58 48 89 44 24 08 [ 895.771277][ T5842] RSP: 0018:ffffc90003faf5e0 EFLAGS: 00010202 [ 895.777390][ T5842] RAX: 000000000000000b RBX: ffff88802c7c8000 RCX: 0000000000000000 [ 895.785403][ T5842] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 895.793414][ T5842] RBP: ffffc90003faf6e0 R08: ffffffff8f68cfc3 R09: 1ffffffff1ed19f8 [ 895.801549][ T5842] R10: dffffc0000000000 R11: fffffbfff1ed19f9 R12: 0000000000000000 [ 895.809587][ T5842] R13: 1ffff1100509538c R14: ffff8880284a9c60 R15: dffffc0000000000 [ 895.817603][ T5842] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 895.826571][ T5842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 895.833189][ T5842] CR2: 000000110c3348e1 CR3: 0000000043e94000 CR4: 00000000003526f0 [ 895.841207][ T5842] Call Trace: [ 895.844619][ T5842] [ 895.847590][ T5842] ? __pfx_klist_remove+0x10/0x10 [ 895.852649][ T5842] ? kobject_move+0x5a6/0x6e0 [ 895.857374][ T5842] ? __pfx_kobject_move+0x10/0x10 [ 895.862445][ T5842] ? get_device_parent+0x366/0x3a0 [ 895.867603][ T5842] device_move+0x193/0x730 [ 895.872058][ T5842] hci_conn_del_sysfs+0xb8/0x1a0 [ 895.877041][ T5842] hci_conn_del+0xc36/0x1240 [ 895.881677][ T5842] hci_conn_hash_flush+0x191/0x260 [ 895.886844][ T5842] hci_dev_close_sync+0x821/0x1100 [ 895.892008][ T5842] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 895.897596][ T5842] ? up_write+0x1ac/0x410 [ 895.901976][ T5842] ? rcu_is_watching+0x15/0xb0 [ 895.906789][ T5842] hci_unregister_dev+0x21a/0x5b0 [ 895.911865][ T5842] vhci_release+0x152/0x1a0 [ 895.916418][ T5842] ? __pfx_vhci_release+0x10/0x10 [ 895.921491][ T5842] __fput+0x44c/0xa70 [ 895.925524][ T5842] task_work_run+0x1d4/0x260 [ 895.930168][ T5842] ? __pfx_task_work_run+0x10/0x10 [ 895.935327][ T5842] ? kmem_cache_free+0x197/0x620 [ 895.940303][ T5842] ? do_exit+0x6c0/0x2310 [ 895.944780][ T5842] do_exit+0x6c5/0x2310 [ 895.948990][ T5842] ? do_raw_spin_lock+0x121/0x290 [ 895.954076][ T5842] ? __pfx_do_exit+0x10/0x10 [ 895.958823][ T5842] do_group_exit+0x21c/0x2d0 [ 895.963474][ T5842] ? lockdep_hardirqs_on+0x98/0x140 [ 895.968724][ T5842] get_signal+0x1285/0x1340 [ 895.973367][ T5842] arch_do_signal_or_restart+0x9a/0x7a0 [ 895.978963][ T5842] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 895.985161][ T5842] ? exit_to_user_mode_loop+0x55/0x4f0 [ 895.990754][ T5842] exit_to_user_mode_loop+0x87/0x4f0 [ 895.996063][ T5842] ? rcu_is_watching+0x15/0xb0 [ 896.000855][ T5842] do_syscall_64+0x2d0/0xf80 [ 896.005469][ T5842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.011560][ T5842] ? clear_bhb_loop+0x60/0xb0 [ 896.016283][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.022223][ T5842] RIP: 0033:0x7fa9b498e15c [ 896.026657][ T5842] Code: Unable to access opcode bytes at 0x7fa9b498e132. [ 896.033699][ T5842] RSP: 002b:00007ffe291745a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 896.042153][ T5842] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fa9b498e15c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 896.050140][ T5842] RDX: 0000000000000030 RSI: 00007ffe29174660 RDI: 00000000000000f9 [ 896.058128][ T5842] RBP: 00007ffe2917460c R08: 0000000000000000 R09: 0079746972756365 [ 896.066115][ T5842] R10: 00007fa9b4bb7800 R11: 0000000000000246 R12: 0000000000000258 [ 896.074102][ T5842] R13: 00000000000927c0 R14: 00000000000da5ba R15: 00007ffe29174660 [ 896.082096][ T5842] [ 896.085137][ T5842] Modules linked in: [ 896.091480][ T5842] ---[ end trace 0000000000000000 ]--- [ 896.122974][ T5842] RIP: 0010:klist_remove+0x14a/0x340 [ 896.128334][ T5842] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 49 c7 d5 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 2a c7 d5 f6 49 8b 44 24 58 48 89 44 24 08 [ 896.150198][ T5842] RSP: 0018:ffffc90003faf5e0 EFLAGS: 00010202 [ 896.156343][ T5842] RAX: 000000000000000b RBX: ffff88802c7c8000 RCX: 0000000000000000 [ 896.165435][ T5842] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 896.175108][ T5842] RBP: ffffc90003faf6e0 R08: ffffffff8f68cfc3 R09: 1ffffffff1ed19f8 [ 896.183874][ T5842] R10: dffffc0000000000 R11: fffffbfff1ed19f9 R12: 0000000000000000 [ 896.200626][ T5842] R13: 1ffff1100509538c R14: ffff8880284a9c60 R15: dffffc0000000000 [ 896.218740][ T5842] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 896.227884][ T5842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 896.240449][ T5842] CR2: 0000200000693000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 896.256509][ T5842] Kernel panic - not syncing: Fatal exception [ 896.263231][ T5842] Kernel Offset: disabled [ 896.267587][ T5842] Rebooting in 86400 seconds..