last executing test programs: 8.157347563s ago: executing program 0 (id=5813): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x1c) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000003c0)={r2, 0xd, 0x0, 0x7fffffff}, 0x10) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000140)=0x80) sendmmsg$alg(r3, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r3, 0x0, 0x0, 0x0) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) getsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async) getsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x4, &(0x7f0000000700)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x1, 0x1, 0xffffffffffffffe4, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x4, &(0x7f0000000700)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x1, 0x1, 0xffffffffffffffe4, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) connect$can_bcm(r4, &(0x7f0000000600), 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x38, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x800) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x14, r6, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x4) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x14, r6, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000004c0)={'pimreg1\x00', 0x800}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaabb080045190014006500000132907801"], 0x26) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/273], 0x80}}, 0x0) socket$alg(0x26, 0x5, 0x0) 7.799984451s ago: executing program 0 (id=5818): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) listen(r1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={0x0, 0x8, 0x81}, &(0x7f0000000740)=0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8c7f93a965", 0xfffffe47}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4048804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f00000003c0)) syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/ipc\x00') getpid() sendmmsg$unix(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000010000000000000000000000000000000028cc8332bc45af39f4b11fe6bd6949f9a3f9e7ae5571fdb7bb7ded52978a274c01bd5000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000007c0)={0x8, {{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e23, @empty}}}, 0x108) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)="bbb76003e5396242ac8efd495a0dd0685dd3dd3ceac873f09452c32e42d6587b4061055c6649a4610f0f131c758a1e698abacabf5164ac545c36f5ac98e5422b57fbb17c841a3c3dd84ffd23122d78af75baa59edfe9fcc81b5175bf1b699aa1bd14d75aa7c5ee3e05d158ee894b2520094031b340fd91348f39a87f99ae195a62f27f1a15366e0dab95b9a9532d2587040c52bc4dae8d970d80c3467fff3de52a699077815426eb91ed4d70ff09f5c2397c0dd72ac247994fedf1db3211270982ca1c1cad702fad2c9dd94a6a634ae9b6e83991155dba4ca365", 0xda}], 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) 7.359263111s ago: executing program 0 (id=5824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000000000000000000008000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000004000000000000040a000000000000000000002a063021b4"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x2, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x89e0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x9, 0x1, {{0x6, 0x4, 0x0, 0x3e, 0x18, 0x64, 0x0, 0x7, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) r6 = socket$inet6(0xa, 0x1, 0x100) listen(r6, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@delqdisc={0x2c, 0x25, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xa, 0x7}, {0x4, 0x12}, {0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84054}, 0x44) 6.969150351s ago: executing program 0 (id=5827): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffd, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r6, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xf7fe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) 6.705092369s ago: executing program 0 (id=5832): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000280)="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", 0x1000, 0x8000, &(0x7f0000001280)={0x2, 0x4e24, @broadcast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 6.272071685s ago: executing program 0 (id=5837): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000340), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b6080000000000007d8af0ff00000000bfa100000000000007010000f8fbffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b6080000000000007d8af0ff00000000bfa100000000000007010000f8fbffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'veth0\x00', 0x8000}) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) recvmsg(r5, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r5, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x6, @private=0xa010101, 0x4e22, 0x4, 'lc\x00', 0x2, 0xeb, 0x47}, 0x2c) 3.347425435s ago: executing program 4 (id=5876): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x17, 0x0, &(0x7f00000004c0)) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) recvmmsg$unix(r5, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1}}], 0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r6, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x4c}, 0x1, 0xffffffff00000003}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x0) unshare(0x2000400) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3.079401142s ago: executing program 4 (id=5880): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) sendto$packet(r2, &(0x7f0000000300)="d30efbf6", 0x4, 0x20040041, &(0x7f0000000340)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @random="027ece01a3c2"}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x14}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff30a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8400}, 0x20000000) 1.984728798s ago: executing program 4 (id=5885): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80000, 0x0, 0x0, 0x2}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3, 0x6, 0x4920e7af812c3f03}, 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x88, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x68, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x4}]}]}, 0x88}}, 0x0) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private2, 0x0, 0xd, 0x400, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3}, {0x0, 0x1765}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@private=0xa010100, 0x0, 0x2b}, 0x2, @in=@local, 0x0, 0x1, 0x1, 0x0, 0x4, 0x7f}, {{@in6=@private2, 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x3, 0x0, 0x0, 0xbffffffe}]}]}, 0x13c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000013000000fc0100080000000000000000ea2fa43c000000100000000005000500000000000a00000000000000000000000000000000000000000000000000000001000000080012000200020000000002000000001000330402"], 0xa0}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0xfffffffffffffe3e, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYRES8=r8], 0x78}, 0x1, 0x0, 0x0, 0x2404c081}, 0x20000040) 1.856053782s ago: executing program 4 (id=5887): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x80}}, 0x0, 0x8, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r1, &(0x7f0000000100)='H', 0x1, 0x80, &(0x7f00000002c0)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x42}, 0x7}, 0x1c) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0x2, 0x0, 0x0, @private1}, 0xf) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c084}, 0x800) 1.507132096s ago: executing program 3 (id=5893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="0002a9f7d26de94f8adea40f00000c00040002000000000000000c00030002080000000000000c000400000c0000000000000c000400000000000000400008000100050000002c000580140002800800020006000000080001001900000014000280080002001000000024a5b81a1a707db1"], 0x84}, 0x1, 0x0, 0x0, 0x20004840}, 0xcc00) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4840) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newtfilter={0x18c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r8, {0x4, 0xb}, {0x5}, {0x7, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14c, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9dc}}]}, @TCA_CGROUP_ACT={0x13c, 0x1, [@m_simple={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7b5e, 0x6, 0x4, 0x40, 0xd30f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x5, 0x0, 0x8, 0x6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x7, 0x3, '^+\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x400, 0x2, 0x7, 0x200000e}}]}, {0xb3, 0x6, "6fc5f3e99914ad1d4308acc3d1d94e0c873e96c6fa0f1b0e221d9fa9cbdd28c5e9ac7e34c814e990d2b8fb29bb84ab8b951c26b69345296a3a46d0ec22cb6acbc5ddc4907470308a8ce6ec23523e0b1c5c199b4470f339983dd38f9086a250aec30c2514a3e2d5833ebc05c042aec5145fcb3f9210e806ed98ddd441206ade084031c247a82612a266cf84cec352fca76b0b4258f19f3a7295dba5fea702eb2ec21c74b5c5c2fc93cce78e851ca8ef"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x80000000}, @TCA_CHAIN={0x8, 0xb, 0x7fd}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYRESHEX], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0xffffffff) r11 = accept4(r10, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000180)={0x3, 0x400, 0x6, 0x7d6e, 0x2, 0x842, 0x7, 0xf6c}, 0x20) 1.252236736s ago: executing program 3 (id=5896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0xc876666300b9b42d}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r2, &(0x7f0000000140)={@val={0x800e, 0x6006}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x8, 0x1c, 0x65, 0x0, 0x3, 0x1, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100}, @address_reply={0x12, 0x0, 0x0, 0x80}}}}}}, 0x2e) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2000}) 1.091560519s ago: executing program 1 (id=5899): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) bind$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x99, 0x6}, &(0x7f0000000340)=0x8) (async, rerun: 64) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000fbffffffffffffff00"/28], 0x48) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00028008000b4000004f3e"], 0x3c}}, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000000)={r5, 0xa127, 0xfffffffffffffffd, 0xffffffffffffffff}) (rerun: 64) recvfrom$packet(r7, &(0x7f0000000040)=""/5, 0x5, 0x40010000, &(0x7f0000000080)={0x11, 0xd, 0x0, 0x1, 0x5}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYRES32=r7], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.036221697s ago: executing program 2 (id=5900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x52, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/214, 0xd8}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/107, 0x63}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000003440)=""/4102, 0x1060}, {&(0x7f0000000040)=""/26, 0xf}, {&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f00000006c0)=""/215, 0xd7}], 0x8}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 968.231226ms ago: executing program 1 (id=5901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r2, 0x100}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000002000000000000000000d01cd8aa4523e8951b65000000", @ANYRES32=0x0, @ANYBLOB="1821040002200400280012800e0001006970366772657461700000001400028006000200650600000600030008000000"], 0x48}}, 0x0) 966.20337ms ago: executing program 3 (id=5902): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) recvmsg$kcm(r2, &(0x7f0000000d80)={&(0x7f0000000100)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000180)=""/175, 0xaf}, {&(0x7f00000006c0)=""/168, 0xa8}, {&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/123, 0x7b}, {&(0x7f0000000c00)=""/89, 0x59}, {&(0x7f0000000c80)=""/57, 0x39}], 0x6, &(0x7f0000000d40)=""/30, 0x1e}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netpci0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x8015}, 0x4048010) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1010, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x10, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r5, @ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r6) 924.283494ms ago: executing program 4 (id=5903): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="8ba98766577d", @void, {@llc={0x4, {@llc={0x42, 0x42, "bf", "80"}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000c0000000c00000000a0000000b00000006000013040000000be8ffffff100000080000000b00000007000000080000001000000007000000090000000c000000c40900007f0000000300000000000000ff0100000c000000fc0c0000ffff0000100000000000000903000000060000000000000c05000000050000000000000700000000020000000000000a040000000b0000000000000c020000000000000000000003000000000400000003000000030000000d0000000000000b00000000000000000000000202000000005f0061804f610000"], &(0x7f0000000340)=""/90, 0xe2, 0x5a, 0x1, 0x3, 0x10000, @value=r0}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x6, 0x4, 0x1a00}, 0x50) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0xc664d000) 917.0627ms ago: executing program 1 (id=5904): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311690000000000851000000200000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f", 0x15}], 0x1}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 800.384436ms ago: executing program 4 (id=5905): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="e78294645caf078e928e7caf685a157bf275000000fc67", @ANYRES64=0x0], 0x10) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1e, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r5, 0xd356ef625de97295, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5f57bb5ba333ea14de9d74fa3bc262dca840b0c803b05da7"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7558c9d9bda73b25a5970ce4532faf1d60f44f76adac71fc"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x80}, 0x1, 0x0, 0x0, 0x20004080}, 0x1) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) sendto$unix(r6, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r7, 0x0, 0x0, 0x10102, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@restrict, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}]}}, 0x0, 0x4a}, 0x20) listen(r4, 0xfffffffc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000f1121300000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 799.550014ms ago: executing program 3 (id=5906): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) 796.199949ms ago: executing program 2 (id=5907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, 0x0, &(0x7f0000000180)) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000febfdf251e00000008000400ffffffff08750d00", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400ffffffff0800040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000080)=0x9, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 792.933928ms ago: executing program 1 (id=5908): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001180)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x308, 0x1e8, 0xffffffff, 0x1e8, 0x0, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010100, @multicast2, @port=0x4e22, @icmp_id=0x66}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 'macvtap0\x00', 'team0\x00', {}, {}, 0xc, 0x6}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @private=0xa010100, @remote, @gre_key=0x100, @gre_key=0xf0}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xc, @multicast2, @rand_addr=0x64010102, @gre_key=0x80, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x100, 0xd, [0x32, 0x30, 0x3c, 0x9, 0x2c, 0x9, 0xb, 0x4, 0x1a, 0x36, 0x3f, 0x20, 0x2e, 0x2b, 0x1, 0x1b], 0x0, 0x400, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000fe88000000000000000000000000000112092c397d0b3c00000000000000000000000000000000003d9d2a7862270ce4005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000fc0200000000000000000000000000010000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000019000000000000000000000000000000000000000000000000000000000a00028000000000000000004c001400736d330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005907350009000000"], 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000fe88000000000000000000000000000112092c397d0b3c00000000000000000000000000000000003d9d2a7862270ce4005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 708.982503ms ago: executing program 3 (id=5909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1c5}, {0x8, 0x15, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e", @ANYBLOB="cc638982054d618c1cb3362e6211aca2040f828e9fd7974408eea6c9e89183114b9bab9331d14a9915dfbd07cc844498a6d129f85ff9ba5168262ae9254306d8"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 616.464446ms ago: executing program 1 (id=5910): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x4) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000040)=0xa) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000080)=0x5) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x27, 0x1, 0x100) ioctl$sock_netdev_private(r4, 0x89fa, &(0x7f0000000100)="0c5f8d355aee51c63bcf43bb770540865e3514e197aa7e46a043c166de609c63a085a70e002b5b1c65a3b085381657") r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) recvmsg$can_bcm(r4, &(0x7f0000000640)={&(0x7f0000000280)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f0000000380)=""/63, 0x3f}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/223, 0xdf}], 0x4, &(0x7f0000000540)=""/255, 0xff}, 0x40002000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bond_slave_1\x00', 0x0}) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f00000006c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x44}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)) socket(0x29, 0x2, 0x0) close(r2) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0x168, 0xd0, 0xd0, 0x0, 0xd0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, &(0x7f0000000740), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x0, 0x5, [0x31, 0x31, 0x40, 0x39, 0x33, 0x24, 0x2d, 0x8, 0x37, 0x17, 0x37, 0x37, 0x3c, 0x3a, 0x2a, 0x3], 0x0, 0x80000000, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x7f, 0x3}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x5, 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x40, 0x7, 0x4, 0x1}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x2c}, 0xff000000, 0xff000000, 'veth0_virt_wifi\x00', 'nicvf0\x00', {0xff}, {}, 0xbe, 0x2, 0x1}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x81}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x6, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socketpair(0x26, 0x5, 0xfff, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) connect$pppoe(r10, &(0x7f0000000d80)={0x18, 0x0, {0x0, @multicast, 'pim6reg0\x00'}}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r9, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)}, 0x20) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0xa, &(0x7f0000000ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x5, 0xb, 0x7, 0x8, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f0000000f40)='GPL\x00', 0x9, 0x14, &(0x7f0000000f80)=""/20, 0x41000, 0x20, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001000)={0x0, 0x4, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001040)=[0x1], &(0x7f0000001080)=[{0x5, 0x1, 0xe, 0xa}, {0x5, 0x1, 0x9, 0x4}, {0x5, 0x1, 0xf, 0x7}, {0x3, 0x1, 0x7, 0x1}, {0x4, 0x5, 0x3, 0x1}, {0x2, 0x3, 0x2, 0x3}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{r11, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f00000011c0)=r12}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001240)={0x1, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001280)={r12, 0x0, 0x25, 0x11, @val=@target_btf_id=r14}, 0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f00000013c0)={r2, &(0x7f00000012c0)='CONNMARK\x00', 0x1, &(0x7f0000001300)={@align=0x8000000000000000, {0xfffa, 0x1000, 0x3e, 0x2}}, 0x0, &(0x7f0000001340)={@_ha_fsid}, &(0x7f0000001380)=0x2}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001400)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x4, '\x00', 0x0, r15, 0x2, 0x2, 0x1}, 0x50) sendmsg$nl_route(r9, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)=@dellink={0x44, 0x11, 0x300, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x1000, 0x8000}, [@IFLA_PHYS_PORT_ID={0x12, 0x22, "ae3ccd0b5ab1ffdace01bcfb0a8a"}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1d5}, @IFLA_TXQLEN={0x8, 0xd, 0xd}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) 572.429382ms ago: executing program 2 (id=5911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0x5a, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x48041}, 0xe0830fb791f3bd85) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) r2 = socket$rds(0x15, 0x5, 0x0) preadv(r2, &(0x7f0000000b80)=[{&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000a00)=""/149, 0x95}, {&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/25, 0x19}, {&(0x7f0000002880)=""/4104, 0x1008}, {&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f00000026c0)=""/203, 0xcb}, {&(0x7f0000000ac0)=""/157, 0x9d}], 0xa, 0x8, 0x6) bind$rds(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = socket(0x2b, 0x1, 0x0) listen(r3, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000326bd7000fedbdf256c00000008000300", @ANYRES32=r5, @ANYBLOB="08009f0001000000050018012800160008002600b4090020050019010a000000"], 0x3c}}, 0x2000c094) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) sendmsg$sock(r2, &(0x7f00000007c0)={&(0x7f0000000640)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="6dca3dac6c44189f41c724bb4127b9713cd3ace8584e9c3ed7250d44980293ae78f1646ea8da67b375b4d75c0bf0f3cbbb8b218ef9fef0349abef87f38138feb36d4", 0x42}, {&(0x7f0000000740)="c52d37a713da24460cecfd83b001f85ec6ed6df3500965658836392240babe9fcb1da211a709c21fb0528fd485e9735659a443f1fd39f3a73934605ae5", 0x3d}], 0x2}, 0x4040) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800014000000013080004400000000008000540000002"], 0x94}}, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x9}, 0x0, 0x0, 0x2, 0x100000000, 0x9, 0xff, 0x0, 0x4}}], 0xb0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080080003400000000228000b8024000180090001006d65746100000000140002800800034060c000020800024000000013140000001000010000000000000000000084000a"], 0xe8}}, 0x0) 515.318826ms ago: executing program 1 (id=5912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x16, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'ip6tnl0\x00', 0x400}) pipe(&(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="e48f0000e49cd9b4b47380c988ca", 0xe}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELCHAIN={0x118, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfdd4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x649c}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6fbec81f}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x140}}, 0x0) 455.866735ms ago: executing program 3 (id=5913): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x0, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bond0\x00'}) socket$inet6(0xa, 0x6, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@empty}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x16, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 427.45209ms ago: executing program 2 (id=5914): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e62, 0x3, @empty, 0x4}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000074afebf9ef69235d4afe92760ca0646c7a8bf4e1a1ca8466001497de87421220d1bffbb252855a8c71ddf70a5233d8dc9e75efc5689e242edc3eed5a161ead68142b2457f910ccff7ff2cd4854cc3aad4fd9a64a626eaaa92bdb1974c2830d11cef53020d6b79bcc2c2423d571f7ade94dcc2081eec95877c12457c9d422872c0000000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2801) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e62, 0x3, @empty, 0x4}, 0x1c) (async) listen(r0, 0xfffffffc) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000074afebf9ef69235d4afe92760ca0646c7a8bf4e1a1ca8466001497de87421220d1bffbb252855a8c71ddf70a5233d8dc9e75efc5689e242edc3eed5a161ead68142b2457f910ccff7ff2cd4854cc3aad4fd9a64a626eaaa92bdb1974c2830d11cef53020d6b79bcc2c2423d571f7ade94dcc2081eec95877c12457c9d422872c0000000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2801) (async) 234.451835ms ago: executing program 2 (id=5915): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f5c421a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4324}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x198}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x75de}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x742}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1adc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x4) 0s ago: executing program 2 (id=5916): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000800)="c2e512c476edbffe2d10001088fb", 0xe}], 0x1}, 0x4000881) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_dump={0x3e, 0x2, 0x5}}) r4 = accept4(r2, 0x0, 0x0, 0x80800) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = gettid() sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002740)={0x2274, 0x32, 0x100, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x4f, 0x0, 0x0, @pid}, @nested={0x1c, 0x144, 0x0, 0x1, [@typed={0xc, 0x106, 0x0, 0x0, @u64}, @typed={0x8, 0x14d, 0x0, 0x0, @fd=r4}, @nested={0x4, 0x136}]}, @nested={0x2230, 0xd8, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x110}, @nested={0x220c, 0x13c, 0x0, 0x1, [@generic="cc2ccc49776cec3b2a7fc12e81bb64cc820418fb070a5804b5675a4912d32d75b932c370dd8ccdf97bf448f264e6d87853f5b7cc6cea8e359e93a166c7eef860f89befc7e553460cec148e71853bbcdac4c0d96f3619a8b3069a1dc24171640cfaa9ad5b2dd87ce76441e92df5f3994c309b8dc67a543246b96f8f03939f93ec1cc6f26c13ae5a784df7e80946720a91f1f2b7e0c66937892f63a10b7a5491e59a7e9b7a621e93dcb0619c4d63cae1bc9e7205889aa9d9ce6f4eedba1ce24e44c7a187e15e881b9d872a299c5d87cc39ec1a91e238006246fe068fdacccd0a8323b4872c4262bad17753f6241ce65537f9d463ae3bfbf4e58c9bcc237146dd9906bf1afefa9a822b81b84482fae56eb01c8c96e0aa572c74d6326f614f52bdb043bfbeba0808f541af0e5fc8db67e4b2745dd2202f8005b8c757586c851b56d7824997c28f0794157530da8f24ffd59ca503341e2a97bcb8f57ef390242283b9c5705be329e993d2a8b05084b8372fe5ebdc0e57cd65fa1ecde2c6954f95b7dc8f303b0a2344889f76c502764dced37f7135a2932be4b51d7cf86375bef4cb260548b3ad1594191892bae21718259124e21d273d9d7c7ea8272bdcb5ca9d137aa1444a597e18c964ee6ceda4e4f4752d401490198276ad94fcdd2b543402c8a8b0999f857a842c4429c9907542a303cc3359e421b1303efe6da983a8bf509cdc15093bedd67e7f9620576be4554649a34722864f2e1868254a3486dda3fdf88e006d0c80087efce2b7d0c21ef05da347a96e7aced6486136d664e19efbfbf1a4f1f3f2ae845f29ee181ebb0c43598f8aa92b8671ff9b1f34795943184a697aa1c8724dac8a17d2e737b6ad744b89ef06bedd6b62ee82ee493902f96357e5ade917af4cece49a5e751316d42b7b280d0ad147fca7f5b17a2632172cca65452fcb1a61fd87e671f1a2310a69e8b07acf90e6dfb8eac7bd4720b2af7d23887c318bce907954151963e2e91159d1a864e944162e0bc5adb15f82d37d70804478e091f33380a4c8dceffb8be4e672c63e94ba9a677a65eeb10e5ba7cbd40bcad4899e4bced3473f440cee5f09f7e673a00d3b4f1b92d596b04deee50e1288c6a38b1045cf04e4d74ab6ef5074d1e4657036e5a8925045806bc4fbe846ab8eecfae0c6fc319abd31901ad98acd89fe855132eb7955a12eaa7845b589e5422c5221f39649c329800c81c7a1edbedc3efeb91a962d5e53f803b68ca919a617fdc6093932c57c98746ae3c39e5799cbd5ca3c982147e9cf7c6cea5326cd6b825a47d2ff8f53690a8caf89c6ef570da750ca3ae1d4cf4f7f281fa22ae621259b8e0b3434940042c3e2d45a90f0d00334355bb8611d68dce846ba0f3831c4b0a7a9676040797451392e093650d548d6f4bd4e17f852c796c6ac897efa6bf4ee59a46692649a034d158ffa08c9a1168ae2ec315bf86bbb720b71c3bded341a3bbec284861aae80997410ee5f143b5bd2b2f67c3cd1cc24d6e9865b85deb2cc7bc805e62d18e67f4817cacaadafeec479bbed31efc61420e1524ced6f8e87830d76484f212e47f5b44278ac2a0f660df5c997739bc53bb8cf13589974a611d5739b803bf7471a043adf5c760098437adcc5085a6a51e2a0404b6ebdcc1a9a023938c7d0bbe189143a9854dc96d86b458878c6b4d75ca9bad9da0928cebd40499a26f1ba44dbaa471dfb093ff289629cce9ae617fa3af2726ca4b264c2a3c9f3ca668c1b08a179ccb5c8cce119854b4899db23d2746a12c071f82edf835d83ed74a059027de212b4c41eac1d7b202c765ed70a1f35224b79bc37dc4d42287c5194ad6b6863e7c7fb35c7218a27a0d745730d67266dca30dd8c5f22c14de2e8b8cb52f76e5dcec4ffa57ab1634a806a97b3ed8f447be8b24efaae067cd90957b9998486c2ba8d12e2f3289191fa5eee907af3e9e95c5d7d63878ad829f919f4741f7d8f3bfeac0a0bbdb3eaa24f63f785a75700f071ddf0ac557f5fc73bfb808a256ab2023b314d133bfd7cffd7a5a4688b38bd1803a75adfb66843cd214b625087b5cae7a86da56de45ae68bef6fabfe25d824aad4db09089b15febfcc9ba309b4cc61f0502dff6f0be10f962861fb63be9f30c9b329e9639c3135b6343f52b7cbf422f5d204be7bcbfea8b7a673b49094c56a93e452b26234ed3e4f4861415111ece33e53ca238e3d9f0b37dd32f88085ca0923ca804fa3e37c8130c3586487ec1d75c767e73f8216ba695811232abeac89a10e66b0955bc551032f5db57559f1575321a915ec00638aa80e467a20e19c85b5e1ba264985ee64ec4f7e2e782a4f3d7770040bdd17d79778383e3474c62715facc0ccbd1e0f4430f7081022f724eac3e2e09575c38c41f490d7729c0fa46139ca2c94f512f6587ebec8e5f28b1ded487df474b9c0f212f156edc875857191f2866ace32675813df35a3200451f99a5131cf2eee043e8f78cff580f167fcebc26cb4133cd3fba799edbb1c363359b8670ecab3d3e23fcf00ecb8fa084da2f91a8fa527bbf9856d4267675e7bc4fb68680af6f8e9ad05d3d2d30d9aafe10ebf803dd78453c9032ef03cedba725c2e611e511c5444d056cb05d9ab50ea0fe630fefea327aa8b17b449aedb694109f5e068b1ef179645a79726f7e50892cd330fb778944f48fa83840d7ea37c2cbb48f07ee18c881217f4c0fef13f05574ec38b664e53b34e86976fa58c61b26ed40181e84579ad1ca775aa5a659f1eb99e35fddf0ba16bba556e6ca9b2216cfe35a7eccd55730dc324457f718e64a7df0a3a5c8bde43cc4ae2399fa580e87d0fc77d4a95a2713b7efe3296cdf43be2986ed769a9685f9e39b35c347bec7fad99a3cea80bf61fc8f47093d37797681552cef6e589e7393051df48b3fbd2f17f1f00c8ffa795167f8e9a3f23d6016e621e5e228da30548b799735e55cfdf9cc7db3b3dc4ce9540a78b4477242852c30d70ae46217db993baea7e937a26692da07c56bf28605c1eef1f673b023fc41606a25a565c9997071a3db9847b8c2b8e092db3dbf133aca536882cc474477b51c3042507e992bb999182505fbcd40b26b55dc610aad7ecccd7bb7fe24e0536ae946e49ac9ba2ceb072f2c90c95ed5040e66448a3bb3ff9ad002bb09e08fd9e19c36b180e034ad907d7a6120a943479614c3a73fe01d38c1ef1adb86bb11339643fb96238dcf7566f2e497e32738dc6145ed9cd499b5c89fdc561b60550d5436f1bbd3e04f862389b14dbead90282308d6a9070ac3f537e5be30143f24a1ad99b76f490a2bb86026358d6d6ae0e59792172c407f873cf723436cbc7f2c715b5509e2fd827003172b88d8b86fc1101e36f0930ca56ad20386d779d1a3da456ef5325fe2f4fd9b80583dae894c47d79a72281dbadb2be57909fe0b7339d674e89c63dfa2c636c3f1b3108ff9b5bb4b12535d42f3296264aaf0fde71e92b65968f5c00c533f71f997b146752c3243bfcd09fffae543a055d91d656c8aa60239dd258e3b397586b23c448e5fabf449b87911a468eb4088ce4c76129ff9ad30985637ec89afdff5450373f6d784528014d74ebd313caf4112270f37bd5bf289ce91cd4ddfd1fbb28a70df5b82ac022bf12f6b05d41552ac25dd5365e39216a4a80f6d85c64cadd380da74aa6d54ae397cb0356ab4e71eb386e074dd247196d6c02955bc9d19b61a1ec1f006dfa180c7eb39562fa31ee7032f6414bad0e1f5a63b879f8c1c837afe0945978cf46e5de3987585e7236b72ee77ece75027517b8aa8ed80930effe2b65c39058296415995d46eb41916927f131f18fc2bc5d76bf74177432a682655403efde69ea4d055341ceb42fd867846c677bb86a23de8dc553f012e7424a04a0d3ac54ac14004d25ec5f1beb76978f889c07d90ad112bf238c16e9641e7b969d9b388e68f37a5f57b704bc28cc9eab98d7411d0eeadd6a932d37fc194a2cb06696efd2f3f644d25515ed2a033926a0cafb22440e2178b8d9205d3cca2b655f6865ab55bcdc6043b5aec3f23302c052dcb0b41c98f85f30fbf6d13f33101d775ed29edd358750799ceb3226f435872b36ce2be9d46223ff78d1c222a1202836e6d26b91661797d721ec9435d489427467036ef04c7a13392fe91322cf4312e972b4f9d2275bd913261213b04add38d871ead807d713f156dcbf02a7796169903822b4aa0d5e434997c157768d7370d902743c4d55f7048ab9aa2121ea1df7a76e146cff8342b8a30b3efb2294b2e00cc308744c356357adb474661549d5a30afbc7b738d20a6c7e73e4b15cbd834111cce84a385cdadc95b4ee3660bcfdf095cb3242557451bdf196900dd7ebb7ae66c5b428c639bca0a505e2f8360db6d08f0beecf7b39f8d0bd5460b1677358df7ddc5d3d1c8fac77334d3b1232cade00cfb72ce7f38a113d8732397bbd1256db0198714382490b46790675f806f4e1454253edcc21920f3246be8bc8727ff275430934b791ef9f390221b2d37c8239542fac74bab99711b4f6d0eaec69ce0dc4fe11d0bc37b46e75468f38b77f7a2c68aa7a5e09d865c13bfdd590447591ab4fd9c33e73f0570b7dadbd404b504845ab20c996ddb50cacdcd2c430f28fa420d5169edce2d1f2086a714d8a17045374b11b6286a8cc659978e0fafb5fb7b6b30d943ced4789f53f712bf28b68e3f33fe89515acc6a422a9e03fe773a2663914825cfd36eaac7952ef835596a2f51a35bc5f3a7208d4da4a09c69154fed3bca546591b13b7ca4c5cb804397b5a2585feef7d1904db960ff9fbceea51e73aff5989a996f839e6ee577bd0b47a3585073f1731a8885437889ded9b9ef3affb401b82004d8621ca430ac81b670bb8929dd541ddb8a49a747e4fd2fea0e5a5168f429c20d0609143a1f652b0eda22a1f89db8513d0b0ade1cf04e80221c15fabb50147af78a637ee4a89c0a4cf97b2f595b9e226bc2ecfda17fee29f8a41761fd98aca023438871a2f1fd5fcbbe753c1c2b70a47cb98bf0a3ddb2b8083614a51e19c5d23063a9e7fd066f055900d92d929204335b6e19754d8488918ed5a01e6577418fb1951ea1cab273499da18a59c7420cbf0715a267dff31f5eac250b947b80a427f57aebe4e3821e7be3b077a48a95fa03220d25c99d4b8db3bf8eac817a8d700ac55534d3870ec9fa0bd20b2a438ffef44ebe95dbe489c590260c242214ca595dcf5d14e8df42942e38e8729adb210aa9dff0cf16bc323b81c8c28733beb7d432e2ae5b11a10e5832029b3186ff49012435db8641b54df7d84fa696f3c7654ed2d951442f6fd158dfe7829d8548d0a53ab8d34c7d9ed7cd08f20981a32e81b0ceb6b73c0af7950f104426dbe08593daa6686eee21e3be406b6e7984111df97b52c2887c06378a311bac93ad0c48e5a36d7810002f4410c54c5e5e4732474690a06643ae1fe6045e6365938aa4a3bf294e281e716e6b977f9f8cadc9859cd59476acd643c287659a33374d9651ccc6915a505f06b23e7a102e2a99abf30fbb6e3dd2f685c51c955e4cdc751cecb47916c26491c076fe2511c87246f86ebc8cb5cdc8bd685d701382fbe9913b75c5708f4d05efeb618c7fdffd4487d5ad652f879b5a1b6d74dc87b37e197d65df92adaea6c23068bc1141ca46d7210fe17c97e49a94b97af4272d0b0320f2ffe767b8d9695a5e95bcb84dab11ce2182518701f1a9121bf0f1ad4a588478ad93aa81839f8b59005e83eef4c4f91f9f7844d5ae55e7ad7182284148ea4f", @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x11f9, 0xd9, 0x0, 0x1, [@typed={0x8, 0x93, 0x0, 0x0, @fd=r1}, @generic="883c4f604c91b090146069f74b5d02e9e6b00c79112f38c7e69f3a1ea36a4cf3b46a9198c1bdf94704b8ae806a2e04c63d8513efcaacec6bd249a426ed227c948164f608c85883328a29716faf6afda0c0b1c94bbde26a24485090722e20f525b7f5699785c7f0d4cee3abfac3adbb2b60435f33a9a97fe40ac0693b730cc5fee06d03b773fcf703efcbda3bd619e24c53707a8c325829945f7eecbe310f441413b1c116a8c76e4774ff4c7be3f941bc5d7391abd099e232ac24e8cc214700e0526155b5823ab51100924627c7955126778dd6d38bc334b23876382139f5dc85e2e2fea72309a1fcd66b4f64f2d6d447d7390197", @generic="592dbca6e90d1cc77dbd213fb520b3a05d38e5ade5727de35e7a1b17f6c8bb7fd274d2a0d466c4e21406df2c5f3b99ac3ffe71d055ca3717583b990dff10d2be298b157e", @typed={0x8, 0x13e, 0x0, 0x0, @fd=r5}, @nested={0x4, 0xd4}, @generic="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", @generic="434393f77b20e609d63056fa9909c054", @generic="5fe5b3922aa754be53af7f9a79e4d448cceb366aa659ffbfe7206f053b1a40f015f9c10aafe117d67773ffd4c1411fb17e03e3fd913cf8d4127e714a0853b95de63ba50ae02ca0c9d23bf61465c9562df65c2f8ded94d7b69cc5e4b9e5674c22cc11542cb39c9433d20c44ef99175fb0e52606a19093bb88094c76ee3267d9128a4aac8b65dfeb1ff395c0764084948a5c", @typed={0x8, 0xd0, 0x0, 0x0, @pid=r6}]}, @typed={0x4, 0xde}]}]}]}, 0x2274}], 0x1, 0x0, 0x0, 0x44010}, 0x4008000) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x365, 0x1, 0xc180}}]}]}]}]}, 0x54}}, 0x24040800) kernel console output (not intermixed with test programs): 12] bridge_slave_1: left promiscuous mode [ 512.751669][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.813722][ T12] bridge_slave_0: left allmulticast mode [ 512.822497][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.848103][ T12] gretap0: left allmulticast mode [ 512.852539][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 512.855755][ T12] bridge0: port 3(gretap0) entered disabled state [ 512.861689][ C0] lec:lec_tx_timeout: lec0 [ 512.861874][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 512.890502][ T12] bridge_slave_0: left allmulticast mode [ 512.911173][ T12] bridge_slave_0: left promiscuous mode [ 512.923801][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.946023][ T12] bond6: left allmulticast mode [ 512.965843][ T12] bond6: left promiscuous mode [ 512.970892][ T12] bridge4: port 1(bond6) entered disabled state [ 513.254798][ T12] ip6gretap0 (unregistering): left promiscuous mode [ 513.368837][ T12] gretap0 (unregistering): left promiscuous mode [ 513.421578][ T12] bridge0 (unregistering): left allmulticast mode [ 513.765613][ T12] bond1 (unregistering): Released all slaves [ 513.790147][ T12] bond2 (unregistering): Released all slaves [ 513.813356][ T12] bond3 (unregistering): Released all slaves [ 513.826020][ T12] bond4 (unregistering): Released all slaves [ 513.836563][ T5839] Bluetooth: hci2: command 0x0405 tx timeout [ 513.855588][ T12] bond5 (unregistering): Released all slaves [ 513.870699][ T12] bond0 (unregistering): Released all slaves [ 513.890218][ T12] bond6 (unregistering): Released all slaves [ 513.916136][ T12] bond7 (unregistering): Released all slaves [ 513.930684][ T12] bond8 (unregistering): Released all slaves [ 513.946238][ T12] bond9 (unregistering): Released all slaves [ 513.960091][ T12] bond10 (unregistering): Released all slaves [ 514.214475][ T12] dvmrp0 (unregistering): left allmulticast mode [ 514.495975][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.505424][ T12] bond_slave_0: left allmulticast mode [ 514.514497][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.527953][ T12] bond_slave_1: left allmulticast mode [ 514.534853][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 514.545104][ T12] bond0 (unregistering): Released all slaves [ 514.557034][ T12] bond1 (unregistering): Released all slaves [ 514.570599][ T12] team0: Port device macvlan2 removed [ 514.579773][ T12] bond2 (unregistering): Released all slaves [ 514.598536][ T12] bond3 (unregistering): Released all slaves [ 514.610966][ T12] bond4 (unregistering): Released all slaves [ 514.625413][ T12] bond5 (unregistering): Released all slaves [ 514.638763][ T12] bond6 (unregistering): Released all slaves [ 514.653463][ T12] bond7 (unregistering): Released all slaves [ 514.669136][ T12] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 514.682049][ T12] bond8 (unregistering): (slave bond9): Releasing active interface [ 514.708304][ T12] bond8 (unregistering): Released all slaves [ 514.720751][ T12] bond9 (unregistering): Released all slaves [ 514.747188][T22225] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4416'. [ 514.763160][T22225] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4416'. [ 514.772879][T22225] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4416'. [ 515.062962][T22266] nbd: couldn't find device at index 0 [ 515.097516][T22269] netlink: 'syz.0.4426': attribute type 2 has an invalid length. [ 515.112996][ T12] tipc: Left network mode [ 515.136897][T22273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4425'. [ 515.151228][T22269] 9: entered promiscuous mode [ 515.211252][T22276] netlink: 'syz.4.4428': attribute type 178 has an invalid length. [ 515.339247][ T12] tipc: Left network mode [ 515.427643][T22288] netlink: 'syz.0.4430': attribute type 2 has an invalid length. [ 515.472804][T22288] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4430'. [ 515.565893][T22285] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 515.648587][ T12] IPVS: stopping master sync thread 15358 ... [ 515.665751][T22285] bond5 (unregistering): Released all slaves [ 515.828886][T22292] bond5: entered promiscuous mode [ 515.874926][T22296] macvlan3: entered promiscuous mode [ 515.880534][T22296] macvlan3: entered allmulticast mode [ 515.888536][T22296] bond5: (slave macvlan3): Opening slave failed [ 516.588715][T22352] netlink: 'syz.2.4444': attribute type 1 has an invalid length. [ 516.634830][T22353] macvlan0: entered promiscuous mode [ 516.663271][T22358] netlink: 'syz.1.4445': attribute type 33 has an invalid length. [ 516.672881][T22356] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4446'. [ 516.674223][T22359] netlink: 'syz.1.4445': attribute type 33 has an invalid length. [ 516.753161][T22365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4444'. [ 516.784612][T22362] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 516.788580][T22358] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 516.824984][T22372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4447'. [ 516.888246][T22358] bond4 (unregistering): Released all slaves [ 517.002051][T22361] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 517.015334][T22361] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 517.095687][T22388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4449'. [ 517.138531][T22359] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 517.168951][T22359] bond4 (unregistering): Released all slaves [ 517.256007][T22365] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 517.344329][T22371] macvlan0: entered promiscuous mode [ 517.375694][T22371] macvlan0: entered allmulticast mode [ 517.388453][T22371] bond3: entered promiscuous mode [ 517.395581][T22371] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 517.411365][T22371] bond3: left promiscuous mode [ 517.605363][T22412] netlink: 'syz.2.4453': attribute type 6 has an invalid length. [ 517.882766][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 517.891350][ C0] lec:lec_tx_timeout: lec0 [ 517.896751][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 517.943550][T22426] vlan0: entered allmulticast mode [ 517.948811][T22426] bond0: entered allmulticast mode [ 517.962805][T22430] netlink: 'syz.3.4458': attribute type 21 has an invalid length. [ 517.972963][T22426] bond_slave_0: entered allmulticast mode [ 517.990376][T22426] bond_slave_1: entered allmulticast mode [ 518.003237][T22426] bridge_slave_1: entered allmulticast mode [ 518.236070][T22448] hashlimit_mt_check_common: 1 callbacks suppressed [ 518.236090][T22448] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 518.569990][T22468] __nla_validate_parse: 1 callbacks suppressed [ 518.570012][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4465'. [ 518.629645][T22475] netlink: 'syz.1.4468': attribute type 10 has an invalid length. [ 518.658535][T22468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4465'. [ 518.756573][T22480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4466'. [ 518.772371][T22480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4466'. [ 519.222147][ T12] hsr_slave_0: left promiscuous mode [ 519.225814][T22507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4476'. [ 519.241422][ T12] hsr_slave_1: left promiscuous mode [ 519.254607][ T12] hsr_slave_0: left promiscuous mode [ 519.275903][ T12] veth1_vlan: left allmulticast mode [ 519.291840][ T12] veth1_vlan: left promiscuous mode [ 519.313642][ T12] veth1_vlan: left allmulticast mode [ 519.406802][T22521] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4475'. [ 519.442550][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4475'. [ 519.588788][ T12] pimreg3 (unregistering): left allmulticast mode [ 520.006230][T22501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.135748][ T12] team0 (unregistering): Port device team_slave_1 removed [ 520.225886][T22510] netlink: 'syz.4.4475': attribute type 29 has an invalid length. [ 520.245220][T22507] team1: entered promiscuous mode [ 520.250479][T22507] team1: entered allmulticast mode [ 520.376980][T22517] wg1 speed is unknown, defaulting to 1000 [ 520.383465][T22542] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4482'. [ 520.398408][T22542] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4482'. [ 520.509584][T22549] netlink: 668 bytes leftover after parsing attributes in process `syz.1.4484'. [ 520.764317][T22566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.775507][T22562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.262615][T22591] netlink: 'syz.3.4495': attribute type 2 has an invalid length. [ 521.271102][T22591] netlink: 'syz.3.4495': attribute type 2 has an invalid length. [ 521.533077][ T12] IPVS: stop unused estimator thread 0... [ 521.541724][T22602] vcan2: entered promiscuous mode [ 521.550835][ T12] IPVS: stop unused estimator thread 0... [ 521.557084][T22602] vcan2: entered allmulticast mode [ 521.626676][T22607] netlink: 'syz.1.4499': attribute type 2 has an invalid length. [ 522.063402][T22632] block nbd4: Unsupported socket: should be TCP or UNIX. [ 522.438545][T22654] bond4: Unable to set up delay as MII monitoring is disabled [ 522.469083][T22654] bond4 (unregistering): Released all slaves [ 522.548672][T22666] tipc: Enabling of bearer rejected, failed to enable media [ 522.614276][ T1106] batman_adv: batadv1: MLD Querier appeared [ 522.773883][T22675] netlink: 'syz.0.4514': attribute type 2 has an invalid length. [ 522.819264][T22676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.912488][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 522.920945][ C0] lec:lec_tx_timeout: lec0 [ 522.926014][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 523.028074][T22688] netlink: 'syz.3.4518': attribute type 1 has an invalid length. [ 523.041600][T22688] netlink: 'syz.3.4518': attribute type 61 has an invalid length. [ 524.080525][T22774] x_tables: unsorted underflow at hook 4 [ 524.122087][T22778] netdevsim netdevsim2: Direct firmware load for .. @ failed with error -2 [ 524.141857][T22778] netdevsim netdevsim2: Falling back to sysfs fallback for: .. @ [ 524.182154][T22774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.295689][T22789] __nla_validate_parse: 38 callbacks suppressed [ 524.295708][T22789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4543'. [ 524.364506][T22791] syzkaller0: entered promiscuous mode [ 524.373103][T22791] syzkaller0: entered allmulticast mode [ 524.406592][T22791] tc action pedit 'at' offset 257 out of bounds [ 524.512170][T22800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4545'. [ 524.648176][T22807] delete_channel: no stack [ 524.671719][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4546'. [ 525.127558][T22840] vlan3: entered promiscuous mode [ 525.148514][T22840] geneve1: entered promiscuous mode [ 525.161378][T22840] vlan3: entered allmulticast mode [ 525.178323][T22840] geneve1: entered allmulticast mode [ 525.194080][T22844] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 525.220962][T22849] syzkaller1: entered promiscuous mode [ 525.243364][T22849] syzkaller1: entered allmulticast mode [ 525.290638][T22849] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 525.311994][T22849] netlink: 'syz.2.4559': attribute type 29 has an invalid length. [ 525.399762][T22856] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.411718][T22864] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4559'. [ 525.435588][T22864] unsupported nla_type 58 [ 525.538483][T22856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.554951][T22856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.599711][T22856] macvlan0: left promiscuous mode [ 525.651723][T22856] veth1_vlan: left allmulticast mode [ 525.658840][T22856] macvtap1: left promiscuous mode [ 525.673630][T22856] bond2: left promiscuous mode [ 525.692352][T22856] bond4: left promiscuous mode [ 525.701110][T22849] netlink: 'syz.2.4559': attribute type 29 has an invalid length. [ 525.724577][T22864] : renamed from hsr0 (while UP) [ 525.760681][T22739] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.775096][T22739] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.787821][T22739] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.818464][T22739] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.829718][T22739] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.840745][T22739] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.876139][T22739] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.886684][T22739] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.189626][T22899] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 526.243929][T22912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4571'. [ 526.286984][T22899] bond9 (unregistering): Released all slaves [ 526.293572][T22912] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4571'. [ 526.379263][T22920] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 526.379795][T22917] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 526.396958][T22920] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 526.408582][T22917] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 526.665174][T22739] bond0: (slave bond_slave_0): interface is now down [ 526.674918][T22739] bond0: (slave bond_slave_1): interface is now down [ 526.706614][T22939] xt_addrtype: ipv6 does not support BROADCAST matching [ 526.744124][T22739] bond0: now running without any active interface! [ 527.010162][T22966] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4583'. [ 527.497417][T23008] netlink: 'syz.4.4591': attribute type 1 has an invalid length. [ 527.602957][T22996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4591'. [ 527.693422][T23021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4594'. [ 527.770214][T23015] bond6: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 527.826908][T22996] 8021q: adding VLAN 0 to HW filter on device bond6 [ 527.836766][T22744] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 527.838949][T23034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4596'. [ 527.873869][T23011] syzkaller1: entered promiscuous mode [ 527.879855][T23011] syzkaller1: entered allmulticast mode [ 527.942737][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 527.951022][ C0] lec:lec_tx_timeout: lec0 [ 527.956712][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 527.963278][T22743] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 528.579052][T23068] syzkaller1: entered promiscuous mode [ 528.605086][T23068] syzkaller1: entered allmulticast mode [ 528.725375][T23084] netlink: 'syz.2.4600': attribute type 1 has an invalid length. [ 529.151969][T23115] netlink: 'syz.1.4611': attribute type 39 has an invalid length. [ 529.184433][T23114] netlink: 'syz.1.4611': attribute type 39 has an invalid length. [ 529.260976][T23118] bridge4: port 1(bond7) entered blocking state [ 529.268156][T23118] bridge4: port 1(bond7) entered disabled state [ 529.277514][T23118] bond7: entered allmulticast mode [ 529.286535][T23118] bond7: entered promiscuous mode [ 529.520613][T23141] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 529.764982][T23147] erspan0: entered allmulticast mode [ 530.238351][T23179] netlink: 'syz.2.4626': attribute type 1 has an invalid length. [ 530.413230][T23191] __nla_validate_parse: 4 callbacks suppressed [ 530.413248][T23191] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4629'. [ 530.501981][T23197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4631'. [ 530.532038][T23197] tipc: Enabling of bearer rejected, failed to enable media [ 530.686569][T23217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4631'. [ 530.705926][T23215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.791208][T23220] IPv6: NLM_F_CREATE should be specified when creating new route [ 530.878274][T23229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.983445][T23229] can: request_module (can-proto-0) failed. [ 531.314925][T23255] syzkaller0: entered promiscuous mode [ 531.330347][T23255] syzkaller0: entered allmulticast mode [ 531.347085][T23255] tc action pedit 'at' offset -255 out of bounds [ 531.363836][T23258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4644'. [ 531.379822][T23258] netlink: 'syz.1.4644': attribute type 1 has an invalid length. [ 531.413744][T23267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4645'. [ 531.434707][T23258] netlink: 'syz.1.4644': attribute type 1 has an invalid length. [ 531.450304][T23258] netlink: 'syz.1.4644': attribute type 2 has an invalid length. [ 531.458570][T23258] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4644'. [ 531.628321][T23283] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20001 [ 531.655834][T23282] tipc: Invalid UDP bearer configuration [ 531.655886][T23282] tipc: Enabling of bearer rejected, failed to enable media [ 531.820452][T23298] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4648'. [ 531.975454][T23296] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 532.257150][T23326] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4657'. [ 532.341768][T23331] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 532.972479][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 532.981157][ C0] lec:lec_tx_timeout: lec0 [ 532.987736][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 534.561595][T23278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.724115][T23340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4660'. [ 534.752626][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 534.948697][T23358] IPVS: Error connecting to the multicast addr [ 535.115921][T23367] netlink: 'syz.4.4671': attribute type 2 has an invalid length. [ 535.159141][T23367] netlink: 'syz.4.4671': attribute type 4 has an invalid length. [ 535.167713][T23371] pim6reg1: entered promiscuous mode [ 535.175716][T23371] pim6reg1: entered allmulticast mode [ 535.307930][T23367] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.325632][T23367] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.429427][T23367] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.442369][T23367] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.467245][T23392] macvlan0: entered promiscuous mode [ 535.536085][T23367] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.565536][T23367] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.675077][T23367] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.689023][T23367] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.748648][T23404] __nla_validate_parse: 11 callbacks suppressed [ 535.748667][T23404] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4682'. [ 535.885719][T22739] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.903447][T22739] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.932832][T23414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4685'. [ 535.950750][T22743] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.963370][T22743] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.013525][T22743] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.037421][T22743] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.110826][T22743] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.121905][T22743] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.221216][T23429] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 536.431575][T23438] tipc: Enabled bearer , priority 0 [ 536.433771][T23440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4693'. [ 536.475799][T23438] syzkaller0: entered promiscuous mode [ 536.481399][T23438] syzkaller0: entered allmulticast mode [ 536.488014][T23438] tipc: Resetting bearer [ 536.526853][T23443] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 536.540443][T23443] bond9 (unregistering): Released all slaves [ 536.558440][T23437] tipc: Resetting bearer [ 537.004089][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4698'. [ 537.026441][T23457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4698'. [ 537.039970][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4698'. [ 538.003147][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 538.011490][ C0] lec:lec_tx_timeout: lec0 [ 539.084026][T23437] tipc: Disabling bearer [ 539.107546][T23440] 8021q: adding VLAN 0 to HW filter on device bond9 [ 539.125985][T23440] bond9 (unregistering): Released all slaves [ 539.153599][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4698'. [ 539.173372][T23457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4698'. [ 539.202995][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4698'. [ 539.322013][T23472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4702'. [ 539.482224][T22744] nci: nci_rsp_packet: unknown rsp opcode 0x3b [ 539.636692][T23511] netlink: 'syz.0.4710': attribute type 10 has an invalid length. [ 539.671818][T23511] team0 (unregistering): Port device team_slave_0 removed [ 539.682094][T23511] team0 (unregistering): Port device team_slave_1 removed [ 539.715330][T23515] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 539.723767][T23515] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 539.795084][T23520] siw: device registration error -23 [ 539.858229][T23522] netlink: 'syz.3.4715': attribute type 1 has an invalid length. [ 539.928271][T23525] syzkaller1: entered promiscuous mode [ 539.934489][T23525] syzkaller1: entered allmulticast mode [ 540.133935][T23481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.355625][T23540] netlink: 'syz.1.4719': attribute type 11 has an invalid length. [ 540.485717][T23550] netlink: 'syz.2.4720': attribute type 10 has an invalid length. [ 540.498123][T23548] netlink: 'syz.0.4722': attribute type 10 has an invalid length. [ 540.522345][T23550] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 540.531406][T23550] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 540.545324][T23548] bridge_slave_1: left allmulticast mode [ 540.552004][T23548] bridge_slave_1: left promiscuous mode [ 540.560287][T23548] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.642045][T23567] syz_tun: refused to change device tx_queue_len [ 540.701336][T23571] sctp: [Deprecated]: syz.0.4727 (pid 23571) Use of int in maxseg socket option. [ 540.701336][T23571] Use struct sctp_assoc_value instead [ 540.777111][T23555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.096882][T23583] netlink: 'syz.0.4728': attribute type 5 has an invalid length. [ 541.144674][T23568] syzkaller0: entered promiscuous mode [ 541.168648][T23568] syzkaller0: entered allmulticast mode [ 541.283225][T23592] __nla_validate_parse: 6 callbacks suppressed [ 541.283249][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4731'. [ 541.370126][T23600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4733'. [ 541.565435][T23614] netlink: 'syz.4.4738': attribute type 10 has an invalid length. [ 541.628536][T23614] veth0_vlan: left promiscuous mode [ 541.653337][T23614] veth0_vlan: entered promiscuous mode [ 541.667665][T23614] team0: Device veth0_vlan failed to register rx_handler [ 542.127189][T22743] nci: nci_rsp_packet: unknown rsp opcode 0x3b [ 542.508860][T23677] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 542.749907][T23687] sctp: [Deprecated]: syz.0.4757 (pid 23687) Use of int in max_burst socket option. [ 542.749907][T23687] Use struct sctp_assoc_value instead [ 542.774233][T23687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4757'. [ 542.825393][T23660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.982108][ T29] audit: type=1107 audit(1776176091.655:5): pid=23695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0ëð»õÛ•Ùe­´;)*™ ¿íuwƒ8žœ‚•˜È0ì½\*ka/Œv%bié¿4‰cä—ŽÝÁñ¿ºð´ÙÑ?¤Ã'G;´ä]87W' [ 543.080208][T23706] IPv6: sit1: Disabled Multicast RS [ 543.200067][T23719] netlink: 'syz.4.4767': attribute type 1 has an invalid length. [ 543.210244][T23717] ip6t_srh: unknown srh match flags 4000 [ 543.219219][T23719] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4767'. [ 543.231475][T23719] tipc: Failed to remove unknown binding: 66,1,1/0:3161013825/3161013827 [ 543.246341][T23712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4766'. [ 543.490010][T23713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.664591][T22742] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.696233][T22742] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.710007][T23744] IPVS: length: 24 != 4520664 [ 543.715406][T23744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4775'. [ 543.767528][T23750] syzkaller0: entered promiscuous mode [ 543.775148][T23750] syzkaller0: entered allmulticast mode [ 543.783995][T22742] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.802577][T22742] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.821872][T22742] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.833286][T22742] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.193965][T23733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.127770][T22742] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.138472][T22742] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.278912][T23787] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 546.406886][T23788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4785'. [ 546.444190][T23803] syzkaller0: entered promiscuous mode [ 546.452263][T23803] syzkaller0: entered allmulticast mode [ 546.794646][T23826] netlink: 'syz.3.4796': attribute type 1 has an invalid length. [ 546.804388][T23826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.818005][T23826] xt_hashlimit: size too large, truncated to 1048576 [ 546.879503][T23828] bridge_slave_0 (unregistering): left allmulticast mode [ 546.888343][T23828] bridge_slave_0 (unregistering): left promiscuous mode [ 546.896115][T23828] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.230457][T23805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.256182][T23824] netlink: 'syz.4.4795': attribute type 11 has an invalid length. [ 547.300719][T23824] netlink: 'syz.4.4795': attribute type 11 has an invalid length. [ 547.310833][T23824] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4795'. [ 547.425925][T23843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4802'. [ 547.469657][T23843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4802'. [ 547.505751][T23850] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4804'. [ 547.560181][T23850] vlan1: entered allmulticast mode [ 548.665224][T14520] lec:lec_start_xmit: lec0:No lecd attached [ 553.832896][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms [ 553.841196][ C0] lec:lec_tx_timeout: lec0 [ 563.838796][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 568.852482][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.861084][ C0] lec:lec_tx_timeout: lec0 [ 598.228166][T23965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4810'. [ 598.267505][T23965] netlink: 'syz.3.4810': attribute type 9 has an invalid length. [ 598.290980][T23965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4810'. [ 598.309964][T23972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4811'. [ 598.369475][T23965] netlink: 'syz.3.4810': attribute type 9 has an invalid length. [ 598.409221][T23965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4810'. [ 598.581381][T23995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4818'. [ 598.596597][T23995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4818'. [ 598.618132][T23995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4818'. [ 598.642199][T23995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4818'. [ 598.731461][T24010] bond9: entered promiscuous mode [ 598.816831][T24017] syzkaller0: entered promiscuous mode [ 598.825213][T24017] syzkaller0: entered allmulticast mode [ 599.510662][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4826'. [ 600.999801][T24014] wg1 speed is unknown, defaulting to 1000 [ 601.115764][T24040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4828'. [ 601.427250][T24056] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 601.455618][T24056] bond9 (unregistering): Released all slaves [ 601.526771][T24060] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 601.549711][T24060] bond9 (unregistering): Released all slaves [ 601.593846][T24068] bond4 (unregistering): Released all slaves [ 601.725310][T24080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.775848][T24080] netlink: 'syz.3.4842': attribute type 10 has an invalid length. [ 602.016190][T24101] syzkaller1: entered promiscuous mode [ 602.021976][T24101] syzkaller1: entered allmulticast mode [ 602.373830][T24113] netlink: 'syz.0.4850': attribute type 1 has an invalid length. [ 602.392845][T24113] netlink: 'syz.0.4850': attribute type 2 has an invalid length. [ 602.600685][T24126] syzkaller1: entered promiscuous mode [ 602.673082][T24126] syzkaller1: entered allmulticast mode [ 602.702237][T22742] nci: nci_rsp_packet: unknown rsp opcode 0x3b [ 602.943525][T24142] veth3: entered promiscuous mode [ 603.362005][T24128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 603.576265][T24178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.606675][T24183] __nla_validate_parse: 6 callbacks suppressed [ 603.606694][T24180] xt_l2tp: wrong L2TP version: 0 [ 603.606694][T24183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4861'. [ 603.636325][T24183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4861'. [ 603.712282][T24192] netlink: 'syz.1.4866': attribute type 1 has an invalid length. [ 603.735124][T24180] nbd4: detected capacity change from 0 to 127 [ 603.747222][ T5827] block nbd4: Receive control failed (result -32) [ 603.755930][T23991] block nbd4: Send control failed (result -32) [ 603.791515][T23991] block nbd4: Request send failed, requeueing [ 603.857074][ T1646] block nbd4: Dead connection, failed to find a fallback [ 603.866141][ T1646] block nbd4: shutting down sockets [ 603.875319][ T1646] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 603.887866][ T1646] Buffer I/O error on dev nbd4, logical block 0, async page read [ 603.896605][T23991] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 603.907660][T23991] Buffer I/O error on dev nbd4, logical block 1, async page read [ 603.918181][T23991] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 603.928328][T23991] Buffer I/O error on dev nbd4, logical block 2, async page read [ 603.937111][T23991] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 603.945165][T24202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4868'. [ 603.948367][T23991] Buffer I/O error on dev nbd4, logical block 3, async page read [ 603.965539][T23991] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 603.976630][T23991] Buffer I/O error on dev nbd4, logical block 0, async page read [ 603.986681][T23991] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 603.997521][T23991] Buffer I/O error on dev nbd4, logical block 1, async page read [ 604.008471][T23991] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 604.029416][T23991] Buffer I/O error on dev nbd4, logical block 2, async page read [ 604.046772][T23991] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 604.068438][T23991] Buffer I/O error on dev nbd4, logical block 3, async page read [ 604.095369][T23991] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 604.115091][T23991] Buffer I/O error on dev nbd4, logical block 0, async page read [ 604.142245][T23991] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 604.174325][T23991] Buffer I/O error on dev nbd4, logical block 1, async page read [ 604.184698][T23991] ldm_validate_partition_table(): Disk read failed. [ 604.189109][T22742] nci: nci_rsp_packet: unknown rsp opcode 0x3b [ 604.194645][T23991] Dev nbd4: unable to read RDB block 0 [ 604.206767][T23991] nbd4: unable to read partition table [ 604.221552][T23991] ldm_validate_partition_table(): Disk read failed. [ 604.229495][T23991] Dev nbd4: unable to read RDB block 0 [ 604.238238][T23991] nbd4: unable to read partition table [ 606.533797][T24239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4876'. [ 606.688202][T24253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4880'. [ 606.701992][T24253] netlink: 'syz.0.4880': attribute type 7 has an invalid length. [ 606.711078][T24253] netlink: 'syz.0.4880': attribute type 8 has an invalid length. [ 606.720992][T24253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4880'. [ 606.922347][T24269] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4883'. [ 606.938808][T24269] unsupported nlmsg_type 40 [ 607.009206][T24272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4883'. [ 607.029442][T24218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.268706][T24284] netlink: 'syz.1.4889': attribute type 39 has an invalid length. [ 607.290254][T24287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4890'. [ 607.325890][T24290] netlink: 'syz.3.4891': attribute type 1 has an invalid length. [ 607.367336][T24290] 8021q: adding VLAN 0 to HW filter on device bond9 [ 607.379581][T24290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4891'. [ 607.391948][T24290] bond9: entered allmulticast mode [ 607.544966][T24303] bond9: (slave ip6gretap1): making interface the new active one [ 607.554202][T24303] ip6gretap1: entered allmulticast mode [ 607.561194][T24303] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 607.610453][T24310] netlink: 'syz.2.4895': attribute type 9 has an invalid length. [ 607.624299][T24309] netlink: 'syz.2.4895': attribute type 9 has an invalid length. [ 608.128152][T24350] netlink: 'syz.1.4903': attribute type 1 has an invalid length. [ 608.144963][T24350] veth0_to_bond: left allmulticast mode [ 608.328368][T24365] sctp: [Deprecated]: syz.1.4908 (pid 24365) Use of int in max_burst socket option. [ 608.328368][T24365] Use struct sctp_assoc_value instead [ 608.460744][T24380] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 608.579345][T24386] syzkaller1: entered promiscuous mode [ 608.602531][T24386] syzkaller1: entered allmulticast mode [ 608.774166][T24398] __nla_validate_parse: 12 callbacks suppressed [ 608.774186][T24398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4916'. [ 608.818946][T24403] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4918'. [ 608.819696][T24405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4918'. [ 608.919421][T24412] x_tables: duplicate underflow at hook 2 [ 608.969832][T24412] IPVS: Error connecting to the multicast addr [ 609.064645][T24420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4924'. [ 609.075301][T24419] IPv6: NLM_F_CREATE should be specified when creating new route [ 609.095532][T24419] ip6t_rpfilter: unknown options [ 609.099281][T24420] xfrm1: entered promiscuous mode [ 609.118873][T24420] xfrm1: entered allmulticast mode [ 609.138846][T24424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4924'. [ 609.310417][T24435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4929'. [ 609.339463][T24435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4929'. [ 609.611052][T24457] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4934'. [ 609.725614][T24467] netlink: 'syz.2.4938': attribute type 1 has an invalid length. [ 609.821897][T24473] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 609.835541][T24473] bond4: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 609.849037][T24473] bond4: (slave vxcan5): making interface the new active one [ 609.858729][T24473] bond4: (slave vxcan5): Enslaving as an active interface with an up link [ 609.978766][T24493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4945'. [ 609.993047][T24493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4945'. [ 610.023794][T24493] x_tables: duplicate underflow at hook 1 [ 610.075270][T24497] netlink: 'syz.0.4946': attribute type 10 has an invalid length. [ 610.113818][T24499] h: entered promiscuous mode [ 610.207011][T24499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.216757][T24502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.205237][T24566] netlink: 'syz.0.4969': attribute type 1 has an invalid length. [ 611.436095][ T5824] IPVS: starting estimator thread 0... [ 611.494540][T24592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.546472][T24590] IPVS: using max 33 ests per chain, 79200 per kthread [ 612.966807][T14520] lec:lec_start_xmit: lec0:No lecd attached [ 613.040167][T24690] xt_l2tp: v2 doesn't support IP mode [ 613.620477][T24721] netlink: 'syz.1.5010': attribute type 2 has an invalid length. [ 613.699473][T24723] bridge_slave_0: left promiscuous mode [ 613.706012][T24723] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.923621][T24723] bridge_slave_1: left promiscuous mode [ 613.930873][T24723] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.943311][T24723] : (slave bond_slave_0): Releasing backup interface [ 613.953948][T24723] : (slave bond_slave_1): Releasing backup interface [ 613.963231][T24723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.974113][T24723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.984151][T24723] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 614.032731][T24731] __nla_validate_parse: 71 callbacks suppressed [ 614.032752][T24731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5012'. [ 614.140630][T24750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5015'. [ 616.451535][T24758] netlink: 'syz.0.5017': attribute type 1 has an invalid length. [ 616.495843][T24762] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5018'. [ 616.524039][T24768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5021'. [ 616.534544][T24758] 8021q: adding VLAN 0 to HW filter on device bond5 [ 616.544844][T24771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5021'. [ 616.586791][T24769] bond5: (slave geneve2): making interface the new active one [ 616.596796][T24769] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 616.634535][T22744] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 616.645949][T22744] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 616.658889][T22744] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 616.667882][T22744] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 616.677148][T22744] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.686550][T22744] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.704910][T22744] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.714962][T22744] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.815392][T24793] batman_adv: batadv0: Adding interface: dummy0 [ 616.828661][T24793] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.902773][T24793] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 616.931080][T24792] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 616.972082][T24792] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 616.991541][T24792] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 617.170160][T24818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5030'. [ 617.277909][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907701 [ 617.287707][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907700 [ 617.297504][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907699 [ 617.306980][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907698 [ 617.317121][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907697 [ 617.327470][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907696 [ 617.337630][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907695 [ 617.347731][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907694 [ 617.358587][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907693 [ 617.368285][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907692 [ 617.377889][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907691 [ 617.387650][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907690 [ 617.396976][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907689 [ 617.406950][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907688 [ 617.416124][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907687 [ 617.425316][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907686 [ 617.440243][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907685 [ 617.449958][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907684 [ 617.466437][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907683 [ 617.476583][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907682 [ 617.486260][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907681 [ 617.497141][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907680 [ 617.507672][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907679 [ 617.510670][T24831] tipc: Started in network mode [ 617.519646][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907678 [ 617.524777][T24831] tipc: Node identity 0ecd09b3a117, cluster identity 4711 [ 617.534097][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907677 [ 617.541585][T24831] tipc: Enabled bearer , priority 0 [ 617.558325][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907676 [ 617.568434][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907675 [ 617.578050][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907674 [ 617.587661][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907673 [ 617.599636][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907672 [ 617.603428][T24831] syzkaller0: entered promiscuous mode [ 617.609864][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907671 [ 617.615866][T24831] syzkaller0: entered allmulticast mode [ 617.625135][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907670 [ 617.633442][T24831] tipc: Resetting bearer [ 617.639824][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907669 [ 617.657099][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907668 [ 617.667389][T24830] tipc: Resetting bearer [ 617.669311][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907667 [ 617.684531][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907666 [ 617.694016][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907665 [ 617.703360][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907664 [ 617.713589][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907663 [ 617.722874][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907662 [ 617.732330][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907661 [ 617.742172][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907660 [ 617.752187][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907659 [ 617.772396][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907658 [ 617.782925][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907657 [ 617.793234][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907656 [ 617.804022][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907655 [ 617.813952][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907654 [ 617.826989][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907653 [ 617.836941][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907652 [ 617.848718][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907651 [ 617.859016][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907650 [ 617.868892][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907649 [ 617.903905][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907648 [ 617.928547][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907647 [ 617.964001][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907646 [ 617.981703][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907645 [ 617.991215][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907644 [ 617.992695][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 618.001592][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907643 [ 618.009134][ C0] lec:lec_tx_timeout: lec0 [ 618.025617][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907642 [ 618.035580][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907641 [ 618.045191][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907640 [ 618.072758][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907639 [ 618.083750][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907638 [ 618.094157][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907637 [ 618.105927][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907701 [ 618.116598][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907700 [ 618.126925][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907699 [ 618.137068][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907698 [ 618.146882][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907697 [ 618.157232][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907696 [ 618.167905][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907695 [ 618.178134][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907694 [ 618.188322][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907693 [ 618.198598][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907692 [ 618.208767][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907691 [ 618.219062][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907690 [ 618.229412][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907689 [ 618.239876][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907688 [ 618.250216][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907687 [ 618.260032][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907686 [ 618.271542][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907685 [ 618.281746][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907684 [ 618.291523][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907683 [ 618.301629][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907682 [ 618.312967][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907681 [ 618.322804][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907680 [ 618.333662][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907679 [ 618.344064][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907678 [ 618.354727][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907677 [ 618.364524][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907676 [ 618.374740][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907675 [ 618.384613][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907674 [ 618.394422][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907673 [ 618.403942][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907672 [ 618.413743][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907671 [ 618.424018][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907670 [ 618.433934][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907669 [ 618.455814][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907668 [ 618.476498][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907667 [ 618.486664][T24851] netlink: 'syz.3.5043': attribute type 3 has an invalid length. [ 618.508187][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907666 [ 618.530130][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907665 [ 618.548673][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907664 [ 618.558122][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907663 [ 618.568079][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907662 [ 618.577895][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907661 [ 618.587819][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907660 [ 618.598110][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907659 [ 618.610389][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907658 [ 618.620634][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907657 [ 618.630516][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907656 [ 618.639827][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907655 [ 618.650342][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907654 [ 618.660763][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907653 [ 618.671159][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907652 [ 618.680720][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907651 [ 618.690052][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907650 [ 618.699791][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907649 [ 618.709681][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907648 [ 618.719417][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907647 [ 618.728879][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907646 [ 618.739047][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907645 [ 618.748927][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907644 [ 618.758070][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907643 [ 618.767330][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907642 [ 618.776748][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907641 [ 618.786182][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907640 [ 618.796374][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907639 [ 618.805640][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907638 [ 618.816349][T24828] tipc: Failed to remove unknown binding: 66,0,0/10005162:254907636/254907637 [ 620.669890][T24830] tipc: Disabling bearer [ 620.681696][T24834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5038'. [ 620.722223][ T5824] tipc: Node number set to 2950302131 [ 620.886208][T24872] netlink: 'syz.2.5051': attribute type 29 has an invalid length. [ 620.918015][T24872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5051'. [ 621.033441][T24871] wg1 speed is unknown, defaulting to 1000 [ 621.041833][T24882] netlink: 'syz.4.5052': attribute type 13 has an invalid length. [ 621.138808][T24890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5054'. [ 621.263331][ T610] bond6: (slave ip6gretap0): link status up again after 0 ms [ 621.282554][T22739] bond6: (slave ip6gretap0): link status up again after 0 ms [ 621.304073][T22739] bond6: (slave ip6gretap0): link status up again after 0 ms [ 621.342621][T22739] bond6: (slave ip6gretap0): link status up again after 0 ms [ 621.392474][ T610] bond6: (slave ip6gretap0): link status up again after 0 ms [ 621.423598][T22742] bond6: (slave ip6gretap0): link status up again after 0 ms [ 621.443530][T22742] bond6: (slave ip6gretap0): link status up again after 0 ms [ 621.475067][T22742] bond6: (slave ip6gretap0): link status up again after 0 ms [ 621.536741][T22742] bond6: (slave ip6gretap0): link status up again after 0 ms [ 621.575566][T22742] bond6: (slave ip6gretap0): link status up again after 0 ms [ 621.661765][T24904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.740791][T24919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5061'. [ 621.783718][T24918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.868863][T24904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.528119][T24951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5072'. [ 622.538148][T24951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5072'. [ 622.571783][T24950] syzkaller1: entered promiscuous mode [ 622.579371][T24950] syzkaller1: entered allmulticast mode [ 622.633261][T24950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5070'. [ 622.666846][T24960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5073'. [ 622.749521][T24971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5073'. [ 623.139835][T24998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5083'. [ 623.290723][T25009] bond4: option mode: unable to set because the bond device has slaves [ 623.506322][T25008] xt_CT: No such helper "pptp" [ 623.690630][T25031] netlink: 'syz.2.5093': attribute type 2 has an invalid length. [ 623.720891][T25031] netlink: 'syz.2.5093': attribute type 2 has an invalid length. [ 623.764348][T25008] netlink: 'syz.4.5087': attribute type 1 has an invalid length. [ 623.880361][T25044] bridge_slave_0 (unregistering): left allmulticast mode [ 623.908151][T25044] bridge_slave_0 (unregistering): left promiscuous mode [ 623.925655][T25044] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.037587][T25055] netlink: 'syz.3.5100': attribute type 20 has an invalid length. [ 624.055366][T22744] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.055451][T25055] netlink: 'syz.3.5100': attribute type 20 has an invalid length. [ 624.073233][T22744] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.100331][T22744] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.129408][T22744] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.149056][T25055] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 624.166672][T25055] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 624.230639][T25067] netlink: 'syz.0.5104': attribute type 1 has an invalid length. [ 624.244933][T25067] netlink: 'syz.0.5104': attribute type 4 has an invalid length. [ 624.277680][T25067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 624.434710][T25072] netlink: 'syz.3.5106': attribute type 83 has an invalid length. [ 624.816680][T25101] netlink: 'syz.2.5117': attribute type 1 has an invalid length. [ 625.127907][T25133] netlink: 'syz.0.5124': attribute type 1 has an invalid length. [ 625.175242][T25133] macvlan2: entered promiscuous mode [ 625.180704][T25133] macvlan2: entered allmulticast mode [ 625.215871][ T29] audit: type=1800 audit(1776176173.895:6): pid=25141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5128" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2083 res=0 errno=0 [ 625.245186][T25138] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 625.290159][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 625.606743][T25181] batman_adv: batadv0: Removing interface: dummy0 [ 625.698606][T25183] macvtap1: entered allmulticast mode [ 625.708097][T25183] veth0_macvtap: entered allmulticast mode [ 625.791282][T25196] __nla_validate_parse: 21 callbacks suppressed [ 625.791301][T25196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5142'. [ 625.826893][T25181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5139'. [ 626.160342][T25226] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5149'. [ 626.180097][T25228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5152'. [ 626.202959][T25226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5149'. [ 626.218014][T25226] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5149'. [ 626.312537][T22739] net_ratelimit: 50 callbacks suppressed [ 626.312557][T22739] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 626.352348][T25232] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 626.364646][T25232] bond11 (unregistering): Released all slaves [ 626.435989][T22739] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 626.494870][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5155'. [ 626.505341][T25240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5155'. [ 626.543545][T25240] sock: sock_timestamping_bind_phc: sock not bind to device [ 626.575767][T25244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5157'. [ 626.582735][T22739] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 626.711534][T25252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5158'. [ 626.735523][T22736] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 626.872903][T22736] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 626.889539][T25263] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 626.984040][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 627.133831][T22736] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 627.270564][T25295] ip6t_srh: unknown srh invflags 4000 [ 627.277252][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 627.393123][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 627.490742][T25306] macvlan2: entered allmulticast mode [ 627.693925][T25321] sctp: [Deprecated]: syz.1.5182 (pid 25321) Use of int in max_burst socket option. [ 627.693925][T25321] Use struct sctp_assoc_value instead [ 627.855861][T25338] dvmrp0: entered allmulticast mode [ 628.440842][T25370] syzkaller0: entered allmulticast mode [ 628.765879][T25391] validate_nla: 12 callbacks suppressed [ 628.765899][T25391] netlink: 'syz.2.5201': attribute type 2 has an invalid length. [ 628.769863][T25394] netlink: 'syz.2.5201': attribute type 2 has an invalid length. [ 628.916766][T25404] xfrm1: entered allmulticast mode [ 628.933144][T22742] nci: nci_rsp_packet: unknown rsp opcode 0x3b [ 629.086489][T25413] bond0: Caught tx_queue_len zero misconfig [ 629.342195][T25420] "syz.4.5207" (25420) uses obsolete ecb(arc4) skcipher [ 629.771281][T25444] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 629.782128][T25444] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 629.790969][T25444] gretap1: entered promiscuous mode [ 629.797075][T25444] gretap1: entered allmulticast mode [ 630.792997][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 630.801639][ C0] lec:lec_tx_timeout: lec0 [ 631.372925][T22735] net_ratelimit: 32 callbacks suppressed [ 631.372953][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 631.492944][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 631.602653][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 631.712620][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 631.773313][T25395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 631.905478][T25449] siw: device registration error -23 [ 631.942938][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 631.961564][T25451] syzkaller0: entered promiscuous mode [ 631.981156][T25451] syzkaller0: entered allmulticast mode [ 632.086691][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 632.211208][T25473] __nla_validate_parse: 10 callbacks suppressed [ 632.211234][T25473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5223'. [ 632.227986][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 632.256882][T25474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5224'. [ 632.342624][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 632.398829][T25479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5224'. [ 632.482766][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 632.602750][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 632.669294][T25497] wg1: entered promiscuous mode [ 632.855984][T25507] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 632.883231][T25507] bond4: (slave lo): Enslaving as an active interface with an up link [ 632.931666][T25511] netlink: 'syz.3.5234': attribute type 4 has an invalid length. [ 632.954353][T25511] netlink: 'syz.3.5234': attribute type 4 has an invalid length. [ 632.999478][T25522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5238'. [ 633.073780][T25522] ipvlan3: entered allmulticast mode [ 633.119235][T25535] netlink: 'syz.4.5241': attribute type 1 has an invalid length. [ 633.128341][T25535] netlink: 'syz.4.5241': attribute type 3 has an invalid length. [ 633.139641][T25535] netlink: 'syz.4.5241': attribute type 7 has an invalid length. [ 633.197234][T25535] netlink: 'syz.4.5241': attribute type 8 has an invalid length. [ 633.234350][T25535] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5241'. [ 633.257060][T25535] NCSI netlink: No device for ifindex 131092 [ 633.595258][T25561] syzkaller0: entered promiscuous mode [ 633.620838][T25561] syzkaller0: entered allmulticast mode [ 633.674780][T25565] syzkaller1: entered promiscuous mode [ 633.685940][T25565] syzkaller1: entered allmulticast mode [ 633.692570][T25576] netlink: 'syz.1.5254': attribute type 11 has an invalid length. [ 633.711101][T25567] wg1 speed is unknown, defaulting to 1000 [ 634.032620][T25586] tipc: Started in network mode [ 634.037712][T25586] tipc: Node identity 080211000001, cluster identity 4711 [ 634.073718][T25586] tipc: Enabled bearer , priority 0 [ 634.265136][T25599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5259'. [ 634.520671][T25613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5262'. [ 634.550366][T25619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.623115][T25613] syz_tun (unregistering): left allmulticast mode [ 634.740860][T25626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5266'. [ 634.847920][T25634] sctp: [Deprecated]: syz.4.5268 (pid 25634) Use of int in max_burst socket option. [ 634.847920][T25634] Use struct sctp_assoc_value instead [ 635.051084][T25637] syzkaller0: entered promiscuous mode [ 635.086238][T25637] syzkaller0: entered allmulticast mode [ 635.093501][T25645] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5272'. [ 635.118161][T25645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5272'. [ 637.413657][T25645] hsr_slave_0 (unregistering): left promiscuous mode [ 637.424550][ T795] tipc: Node number set to 134418688 [ 637.440773][T25656] : entered promiscuous mode [ 637.483336][T25660] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 637.499075][T22736] net_ratelimit: 21 callbacks suppressed [ 637.499098][T22736] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 637.663653][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 637.782664][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 637.864641][T25692] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 637.903391][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 638.007237][T25700] bridge0: port 3(gretap0) entered disabled state [ 638.056148][T25704] netlink: 'syz.4.5287': attribute type 16 has an invalid length. [ 638.079119][T25704] netlink: 'syz.4.5287': attribute type 17 has an invalid length. [ 638.097005][T25700] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.175865][T25704] bridge0: port 3(gretap0) entered blocking state [ 638.175962][ T610] bond6: (slave ip6gretap0): link status up again after 0 ms [ 638.182706][T25704] bridge0: port 3(gretap0) entered listening state [ 638.207036][ T610] bond6: (slave ip6gretap0): link status up again after 0 ms [ 638.242971][ T610] bond6: (slave ip6gretap0): link status up again after 0 ms [ 638.251135][T25704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.282567][ T610] bond6: (slave ip6gretap0): link status up again after 0 ms [ 638.295987][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 638.413537][T25730] __nla_validate_parse: 3 callbacks suppressed [ 638.413555][T25730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5297'. [ 638.890776][T25775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5307'. [ 638.905791][T25774] wg1: entered promiscuous mode [ 638.911514][T25774] wg1: entered allmulticast mode [ 638.994888][T25782] netlink: 203624 bytes leftover after parsing attributes in process `syz.2.5306'. [ 639.120080][T25795] sch_fq: defrate 0 ignored. [ 639.145740][T25795] netlink: 'syz.0.5312': attribute type 1 has an invalid length. [ 639.176061][T25795] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5312'. [ 639.194373][T25795] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5312'. [ 639.244154][T25795] netlink: 'syz.0.5312': attribute type 1 has an invalid length. [ 639.290340][T25795] netlink: 'syz.0.5312': attribute type 8 has an invalid length. [ 639.300795][T25811] netlink: 'syz.4.5315': attribute type 1 has an invalid length. [ 639.323575][T25817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5312'. [ 639.339713][T25795] netlink: 582 bytes leftover after parsing attributes in process `syz.0.5312'. [ 639.445553][T25824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5318'. [ 639.615204][T25838] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.5321'. [ 639.624894][T25834] wg1 speed is unknown, defaulting to 1000 [ 639.639215][T25839] lo: Caught tx_queue_len zero misconfig [ 640.264539][T25869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5330'. [ 640.412766][T25882] netlink: 'syz.0.5334': attribute type 4 has an invalid length. [ 640.520638][T25886] netlink: 'syz.0.5338': attribute type 1 has an invalid length. [ 640.672282][T25895] : entered promiscuous mode [ 640.858641][T25905] pim6reg: entered allmulticast mode [ 640.916099][T25909] pim6reg: left allmulticast mode [ 641.160641][T25929] xt_cluster: node mask cannot exceed total number of nodes [ 641.204752][T25936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 641.242149][T25933] bridge0: left allmulticast mode [ 641.262837][T25938] netlink: 'syz.2.5352': attribute type 1 has an invalid length. [ 641.288490][T25927] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 641.302856][T25927] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 641.418000][T25949] netlink: 'syz.1.5356': attribute type 1 has an invalid length. [ 641.499477][T25953] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 641.623658][T25962] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 642.345406][T26013] bond13: Setting coupled_control to off (0) [ 642.532696][T22741] net_ratelimit: 29 callbacks suppressed [ 642.532716][T22741] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 642.654635][T22744] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 642.718273][T26039] 8021q: adding VLAN 0 to HW filter on device bond14 [ 642.782780][T22744] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 642.891369][T26039] bond14: (slave veth7): Enslaving as an active interface with a down link [ 642.913753][T22741] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 642.929833][T26039] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 643.033433][T22741] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 643.153696][T22744] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 643.263053][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 643.343671][T26090] validate_nla: 10 callbacks suppressed [ 643.343695][T26090] netlink: 'syz.3.5393': attribute type 21 has an invalid length. [ 643.380726][T26085] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 643.421866][T26090] IPv6: NLM_F_CREATE should be specified when creating new route [ 643.470541][T26099] netlink: 'syz.4.5397': attribute type 21 has an invalid length. [ 643.483546][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 643.485801][T26096] IPVS: length: 239 != 24 [ 643.522835][T26099] __nla_validate_parse: 29 callbacks suppressed [ 643.522857][T26099] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5397'. [ 643.724529][T26107] bond10: option fail_over_mac: invalid value (16) [ 643.808212][T26107] bond10 (unregistering): Released all slaves [ 643.880995][T26129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.886117][T26130] netlink: 'syz.2.5404': attribute type 1 has an invalid length. [ 643.888786][T26129] IPv6: NLM_F_CREATE should be set when creating new route [ 643.904568][T26129] IPv6: NLM_F_CREATE should be set when creating new route [ 643.931117][T26120] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5400'. [ 643.940454][T26120] team0: Caught tx_queue_len zero misconfig [ 643.992308][T26130] bond6: entered promiscuous mode [ 644.044402][T26130] 8021q: adding VLAN 0 to HW filter on device bond6 [ 644.074145][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 644.127624][T26142] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5406'. [ 644.157041][T26130] bond6: (slave bridge9): making interface the new active one [ 644.197252][T26130] bridge9: entered promiscuous mode [ 644.223571][T26130] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 644.328569][T26157] netlink: 'syz.0.5409': attribute type 1 has an invalid length. [ 644.377457][T26157] 8021q: adding VLAN 0 to HW filter on device bond7 [ 644.440340][T26157] bond7: (slave veth7): Enslaving as an active interface with a down link [ 644.455568][T26164] bond1: (slave veth0_to_bond): Releasing active interface [ 644.474550][T26164] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 644.484608][T26158] tap0: tun_chr_ioctl cmd 1074025676 [ 644.492078][T26158] tap0: owner set to 0 [ 644.540207][T26157] bond7: (slave veth9): Enslaving as an active interface with a down link [ 644.544848][T26171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5413'. [ 644.559067][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 644.562835][T26157] netlink: 'syz.0.5409': attribute type 1 has an invalid length. [ 644.575331][T26157] netlink: 'syz.0.5409': attribute type 2 has an invalid length. [ 644.621554][T26169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5412'. [ 645.081010][T26197] netlink: 'syz.4.5420': attribute type 33 has an invalid length. [ 645.173284][T26197] bond15: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 645.225060][T26197] bond15 (unregistering): Released all slaves [ 645.248245][T26218] netlink: 'syz.1.5426': attribute type 3 has an invalid length. [ 645.290407][T26218] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5426'. [ 645.430777][T26225] ipt_REJECT: ECHOREPLY no longer supported. [ 645.467675][T26231] tipc: Enabled bearer , priority 10 [ 645.583093][T26237] netlink: 556 bytes leftover after parsing attributes in process `syz.0.5434'. [ 645.696925][T26248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5437'. [ 645.701334][T26251] delete_channel: no stack [ 645.711000][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5437'. [ 645.716503][T26251] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 645.731411][T26248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5437'. [ 645.752012][T26253] delete_channel: no stack [ 645.857500][T26256] tipc: Resetting bearer [ 645.906559][T26263] netlink: 'syz.0.5441': attribute type 3 has an invalid length. [ 645.928361][T26262] netlink: 'syz.3.5442': attribute type 1 has an invalid length. [ 645.937576][T26256] tipc: Resetting bearer [ 646.001269][T26262] bond10: entered promiscuous mode [ 646.007658][T26262] 8021q: adding VLAN 0 to HW filter on device bond10 [ 646.178882][T26262] 8021q: adding VLAN 0 to HW filter on device bond10 [ 646.203134][T26262] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 646.216328][T26262] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 646.231741][T26262] bond10: (slave vti0): making interface the new active one [ 646.240512][T26262] vti0: entered promiscuous mode [ 646.247384][T26280] FAULT_INJECTION: forcing a failure. [ 646.247384][T26280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.261535][T26280] CPU: 1 UID: 0 PID: 26280 Comm: syz.1.5444 Not tainted syzkaller #0 PREEMPT(full) [ 646.261563][T26280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 646.261577][T26280] Call Trace: [ 646.261585][T26280] [ 646.261593][T26280] dump_stack_lvl+0xe8/0x150 [ 646.261625][T26280] should_fail_ex+0x412/0x560 [ 646.261657][T26280] _copy_from_user+0x2d/0xb0 [ 646.261679][T26280] ___sys_recvmsg+0x175/0x590 [ 646.261709][T26280] ? __pfx____sys_recvmsg+0x10/0x10 [ 646.261753][T26280] ? __fget_files+0x3a0/0x420 [ 646.261780][T26280] do_recvmmsg+0x334/0x800 [ 646.261813][T26280] ? __pfx_do_recvmmsg+0x10/0x10 [ 646.261848][T26280] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 646.261890][T26280] __x64_sys_recvmmsg+0x198/0x250 [ 646.261917][T26280] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 646.261952][T26280] do_syscall_64+0x14d/0xf80 [ 646.261975][T26280] ? trace_irq_disable+0x3b/0x150 [ 646.261991][T26280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.262010][T26280] ? clear_bhb_loop+0x40/0x90 [ 646.262032][T26280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.262050][T26280] RIP: 0033:0x7f678359c819 [ 646.262068][T26280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.262083][T26280] RSP: 002b:00007f6784405028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 646.262103][T26280] RAX: ffffffffffffffda RBX: 00007f6783816090 RCX: 00007f678359c819 [ 646.262115][T26280] RDX: 0000000000000009 RSI: 0000200000006040 RDI: 0000000000000003 [ 646.262126][T26280] RBP: 00007f6784405090 R08: 0000000000000000 R09: 0000000000000000 [ 646.262137][T26280] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 646.262148][T26280] R13: 00007f6783816128 R14: 00007f6783816090 R15: 00007ffd60e81ca8 [ 646.262181][T26280] [ 646.341285][T26262] bond10: (slave vti0): Enslaving as an active interface with an up link [ 646.631651][T26287] C: renamed from lo (while UP) [ 647.245396][T26332] bond8: option xmit_hash_policy: invalid value (64) [ 647.268882][T26332] bond8 (unregistering): Released all slaves [ 647.327669][T26338] nbd: must specify a size in bytes for the device [ 647.593540][T22735] net_ratelimit: 19 callbacks suppressed [ 647.593561][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 647.743639][T22736] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 647.863555][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 647.983864][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 648.032118][T26377] syzkaller1: entered promiscuous mode [ 648.055702][T26377] syzkaller1: entered allmulticast mode [ 648.165380][T22741] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 648.315922][T22736] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 648.433062][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 648.549761][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 648.669917][T26442] delete_channel: no stack [ 648.692615][T22744] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 648.713941][T26443] bond4: option mode: unable to set because the bond device has slaves [ 648.736838][T26443] __nla_validate_parse: 16 callbacks suppressed [ 648.736860][T26443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5487'. [ 648.790432][T26448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5490'. [ 648.802542][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 648.930570][T26453] validate_nla: 2 callbacks suppressed [ 648.930590][T26453] netlink: 'syz.4.5491': attribute type 1 has an invalid length. [ 648.963794][T26453] netlink: 'syz.4.5491': attribute type 11 has an invalid length. [ 648.973661][T26453] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5491'. [ 648.987198][T26453] netlink: 'syz.4.5491': attribute type 8 has an invalid length. [ 649.101153][T26467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5495'. [ 649.111705][T26467] netlink: 'syz.0.5495': attribute type 21 has an invalid length. [ 649.114997][ T5827] Bluetooth: hci2: command 0x0405 tx timeout [ 649.121993][T26467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5495'. [ 649.210318][T26467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5495'. [ 649.264148][T26467] netlink: 'syz.0.5495': attribute type 21 has an invalid length. [ 649.272702][T26467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5495'. [ 649.353472][T26484] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5498'. [ 649.376506][T26484] netlink: 'syz.2.5498': attribute type 2 has an invalid length. [ 649.394948][T26486] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5499'. [ 649.405441][T26486] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5499'. [ 649.425807][T26484] netlink: 'syz.2.5498': attribute type 11 has an invalid length. [ 649.463255][T26486] netlink: 'syz.1.5499': attribute type 5 has an invalid length. [ 649.496587][T26486] netlink: 'syz.1.5499': attribute type 6 has an invalid length. [ 649.809657][T26509] netlink: 'syz.1.5505': attribute type 21 has an invalid length. [ 649.819879][T26509] IPv6: NLM_F_CREATE should be specified when creating new route [ 650.056490][T26519] bond7: (slave bridge10): making interface the new active one [ 650.077333][T26519] bond7: (slave bridge10): Enslaving as an active interface with an up link [ 650.468633][T22743] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 651.153180][T26545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 651.429496][T26614] Cannot find add_set index 2 as target [ 651.464519][T26615] syzkaller0: entered allmulticast mode [ 651.995674][T26656] Cannot find del_set index 4 as target [ 652.265328][T26678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.538768][T26703] xfrm1: entered allmulticast mode [ 652.579326][T26707] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 652.597273][T26707] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 652.612684][T22744] net_ratelimit: 31 callbacks suppressed [ 652.612705][T22744] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 652.629218][T26707] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 652.752624][T22744] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 652.874328][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 652.908578][T26724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.992525][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 653.132160][T26724] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 653.152877][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 653.300032][T22736] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 653.376976][T26745] xt_hashlimit: size too large, truncated to 1048576 [ 653.413717][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 653.434193][ C1] bridge0: port 3(gretap0) entered learning state [ 653.508731][T26748] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.580826][T26748] bridge_slave_0 (unregistering): left allmulticast mode [ 653.589569][T26748] bridge_slave_0 (unregistering): left promiscuous mode [ 653.598298][T26748] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.722849][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 653.749392][T26763] syzkaller0: entered promiscuous mode [ 653.850291][T26772] __nla_validate_parse: 9 callbacks suppressed [ 653.850310][T26772] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5571'. [ 653.867667][T26773] netem: change failed [ 653.925271][T26775] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 654.008591][T26780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5574'. [ 654.725062][T26835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5588'. [ 654.849033][T26842] ip6gre1: entered allmulticast mode [ 654.937652][T26848] validate_nla: 5 callbacks suppressed [ 654.937672][T26848] netlink: 'syz.3.5594': attribute type 1 has an invalid length. [ 655.266745][T26872] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5602'. [ 655.790675][T26904] netlink: 'syz.4.5612': attribute type 3 has an invalid length. [ 655.819055][T26904] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5612'. [ 656.181861][T26936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5622'. [ 656.201683][T26944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5625'. [ 656.203484][T26941] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5624'. [ 656.212914][T26937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5622'. [ 656.250385][T26936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5622'. [ 656.265335][T26944] team1: entered promiscuous mode [ 656.276677][T26944] team1: entered allmulticast mode [ 656.577800][T26967] netlink: 'syz.1.5631': attribute type 21 has an invalid length. [ 656.798170][T26992] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 656.807071][T26993] netlink: 'syz.0.5635': attribute type 11 has an invalid length. [ 656.807788][T26992] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 656.824081][T26980] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 656.826720][T26992] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 657.103110][T27005] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 657.111125][T27005] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 657.694491][T22743] net_ratelimit: 34 callbacks suppressed [ 657.694513][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 657.833175][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 657.942682][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 658.052791][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 658.172811][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 658.283003][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 658.403291][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 658.513027][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 658.623052][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 658.732751][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 659.558883][T26970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.749315][T27033] __nla_validate_parse: 4 callbacks suppressed [ 659.749333][T27033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5651'. [ 659.821435][T27040] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 659.830150][T27041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5653'. [ 659.834266][T27040] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 659.871992][T27040] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 659.945427][T27048] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 659.960394][T27048] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 660.021051][T27050] syzkaller0: entered promiscuous mode [ 660.039528][T27050] syzkaller0: entered allmulticast mode [ 660.096255][T27058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5658'. [ 660.117329][T27061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5660'. [ 660.262194][T27070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5661'. [ 660.301726][T27073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5664'. [ 660.437411][T27084] netlink: 'syz.3.5666': attribute type 20 has an invalid length. [ 660.446899][T27084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5666'. [ 660.467507][T27084] netlink: 'syz.3.5666': attribute type 20 has an invalid length. [ 660.488432][T27084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5666'. [ 660.537218][T27086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5668'. [ 660.551245][T27090] FAULT_INJECTION: forcing a failure. [ 660.551245][T27090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.567815][T27090] CPU: 1 UID: 0 PID: 27090 Comm: syz.4.5670 Not tainted syzkaller #0 PREEMPT(full) [ 660.567841][T27090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 660.567853][T27090] Call Trace: [ 660.567861][T27090] [ 660.567869][T27090] dump_stack_lvl+0xe8/0x150 [ 660.567900][T27090] should_fail_ex+0x412/0x560 [ 660.567932][T27090] _copy_from_user+0x2d/0xb0 [ 660.567955][T27090] ___sys_recvmsg+0x175/0x590 [ 660.567977][T27090] ? __lock_acquire+0x6b5/0x2cf0 [ 660.568004][T27090] ? __pfx____sys_recvmsg+0x10/0x10 [ 660.568060][T27090] do_recvmmsg+0x334/0x800 [ 660.568091][T27090] ? __pfx_do_recvmmsg+0x10/0x10 [ 660.568125][T27090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 660.568166][T27090] __x64_sys_recvmmsg+0x198/0x250 [ 660.568202][T27090] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 660.568237][T27090] do_syscall_64+0x14d/0xf80 [ 660.568260][T27090] ? trace_irq_disable+0x3b/0x150 [ 660.568277][T27090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.568295][T27090] ? clear_bhb_loop+0x40/0x90 [ 660.568317][T27090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.568334][T27090] RIP: 0033:0x7f3f4219c819 [ 660.568352][T27090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.568369][T27090] RSP: 002b:00007f3f43080028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 660.568389][T27090] RAX: ffffffffffffffda RBX: 00007f3f42415fa0 RCX: 00007f3f4219c819 [ 660.568402][T27090] RDX: 0000000000000009 RSI: 0000200000006040 RDI: 0000000000000003 [ 660.568414][T27090] RBP: 00007f3f43080090 R08: 0000000000000000 R09: 0000000000000000 [ 660.568426][T27090] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000002 [ 660.568438][T27090] R13: 00007f3f42416038 R14: 00007f3f42415fa0 R15: 00007ffcc8a6c8e8 [ 660.568466][T27090] [ 660.817188][T27096] pim6reg1: entered promiscuous mode [ 660.825412][T27095] netlink: 'syz.4.5672': attribute type 1 has an invalid length. [ 660.826571][T27096] pim6reg1: entered allmulticast mode [ 660.861539][T27093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5671'. [ 660.952278][T27103] bond15: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 660.968111][T27103] bond15: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 660.983982][T27103] bond15: (slave ip6gre2): making interface the new active one [ 660.994878][T27103] bond15: (slave ip6gre2): Enslaving as an active interface with an up link [ 661.080820][T27116] syzkaller1: entered promiscuous mode [ 661.091334][T27116] syzkaller1: entered allmulticast mode [ 661.315386][T27132] netlink: 'syz.3.5681': attribute type 1 has an invalid length. [ 661.334224][T27136] FAULT_INJECTION: forcing a failure. [ 661.334224][T27136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.351375][T27136] CPU: 0 UID: 0 PID: 27136 Comm: syz.4.5682 Not tainted syzkaller #0 PREEMPT(full) [ 661.351403][T27136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 661.351415][T27136] Call Trace: [ 661.351423][T27136] [ 661.351431][T27136] dump_stack_lvl+0xe8/0x150 [ 661.351461][T27136] should_fail_ex+0x412/0x560 [ 661.351493][T27136] _copy_from_user+0x2d/0xb0 [ 661.351516][T27136] ___sys_recvmsg+0x175/0x590 [ 661.351539][T27136] ? __lock_acquire+0x6b5/0x2cf0 [ 661.351567][T27136] ? __pfx____sys_recvmsg+0x10/0x10 [ 661.351626][T27136] do_recvmmsg+0x334/0x800 [ 661.351656][T27136] ? __pfx_do_recvmmsg+0x10/0x10 [ 661.351691][T27136] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 661.351783][T27136] __x64_sys_recvmmsg+0x198/0x250 [ 661.351813][T27136] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 661.351849][T27136] do_syscall_64+0x14d/0xf80 [ 661.351872][T27136] ? trace_irq_disable+0x3b/0x150 [ 661.351888][T27136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.351905][T27136] ? clear_bhb_loop+0x40/0x90 [ 661.351927][T27136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.351945][T27136] RIP: 0033:0x7f3f4219c819 [ 661.351963][T27136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.351979][T27136] RSP: 002b:00007f3f43080028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 661.352000][T27136] RAX: ffffffffffffffda RBX: 00007f3f42415fa0 RCX: 00007f3f4219c819 [ 661.352014][T27136] RDX: 0000000000000009 RSI: 0000200000006040 RDI: 0000000000000003 [ 661.352026][T27136] RBP: 00007f3f43080090 R08: 0000000000000000 R09: 0000000000000000 [ 661.352038][T27136] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000002 [ 661.352049][T27136] R13: 00007f3f42416038 R14: 00007f3f42415fa0 R15: 00007ffcc8a6c8e8 [ 661.352079][T27136] [ 661.988127][T27170] xt_limit: Overflow, try lower: 271964/0 [ 662.167763][T27183] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 662.194916][T27183] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 662.205067][T27190] geneve3: entered promiscuous mode [ 662.211165][T27183] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 662.215620][T27190] geneve3: entered allmulticast mode [ 662.237418][ T610] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 662.248442][ T610] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 662.260767][ T610] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 662.272666][ T610] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 662.483430][T27208] vlan4: entered promiscuous mode [ 662.496751][T27208] bridge0: entered promiscuous mode [ 662.579392][T27211] netlink: 'syz.1.5706': attribute type 61 has an invalid length. [ 662.619050][T22736] tipc: Subscription rejected, illegal request [ 662.782571][T22742] net_ratelimit: 31 callbacks suppressed [ 662.782595][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 662.844644][T27222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.902723][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 662.977918][T27232] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 663.016947][T27234] netlink: 'syz.1.5712': attribute type 1 has an invalid length. [ 663.022500][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 663.082569][T27234] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 663.212854][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 663.373887][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 663.492511][ T610] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 663.591096][T27277] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 663.606750][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 663.624395][T27277] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 663.683506][T27277] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 663.722630][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 664.204409][T27270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.217971][T27308] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 664.373407][T27322] netlink: 'syz.3.5734': attribute type 1 has an invalid length. [ 664.488823][T27326] vlan3: entered promiscuous mode [ 664.661628][T27338] tipc: Enabled bearer , priority 0 [ 664.846125][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 664.858112][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 664.867796][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 664.877145][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 664.887049][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 664.907286][T27338] syzkaller0: entered promiscuous mode [ 664.918937][T27338] syzkaller0: entered allmulticast mode [ 664.928157][T27338] tipc: Resetting bearer [ 665.048641][ T35] tipc: Resetting bearer [ 665.078372][T27337] tipc: Resetting bearer [ 665.136207][T27358] __nla_validate_parse: 21 callbacks suppressed [ 665.136249][T27358] netlink: 300 bytes leftover after parsing attributes in process `syz.4.5744'. [ 666.953401][ T5827] Bluetooth: hci3: command tx timeout [ 667.597296][T27337] tipc: Disabling bearer [ 667.674571][T27347] wg1 speed is unknown, defaulting to 1000 [ 667.775358][T22736] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.823356][T22736] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 36880 - 0 [ 667.881669][T27374] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5749'. [ 667.905492][T27383] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 667.922529][T22742] net_ratelimit: 7 callbacks suppressed [ 667.922549][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 667.984222][T22736] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.009439][T22736] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 36880 - 0 [ 668.062669][T22731] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 668.094808][T22736] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.105942][T22736] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 36880 - 0 [ 668.135394][T27390] netlink: 'syz.1.5753': attribute type 1 has an invalid length. [ 668.166283][T22736] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.177469][T22736] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 36880 - 0 [ 668.195782][T27390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5753'. [ 668.205896][T27390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5753'. [ 668.296279][ T13] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 668.345564][T22735] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.385355][T27347] chnl_net:caif_netlink_parms(): no params data found [ 668.399352][T22735] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.429219][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.571148][T22736] bond9 (unregistering): (slave ip6gretap1): Releasing active interface [ 668.580471][T22736] ip6gretap1 (unregistering): left allmulticast mode [ 668.652982][T22736] bond10 (unregistering): (slave vti0): Releasing backup interface [ 668.666026][T22736] vti0 (unregistering): left promiscuous mode [ 668.747264][T22736] bond7 (unregistering): (slave gretap1): Releasing active interface [ 668.783770][T27407] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.5757'. [ 668.793501][ C1] bridge0: port 3(gretap0) entered forwarding state [ 668.793567][ C1] bridge0: topology change detected, propagating [ 669.032580][ T5827] Bluetooth: hci3: command tx timeout [ 669.180773][T22736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.191605][T22736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.202835][T22736] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 669.216475][T22736] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 669.226755][T22736] bond0 (unregistering): Released all slaves [ 669.237494][T22736] bond1 (unregistering): Released all slaves [ 669.253332][T22736] bond2 (unregistering): (slave veth9): Releasing backup interface [ 669.262130][T22736] veth9: left promiscuous mode [ 669.267786][T22736] veth9: left allmulticast mode [ 669.277600][T22736] bond2 (unregistering): (slave veth11): Releasing backup interface [ 669.286368][T22736] veth11: left promiscuous mode [ 669.291909][T22736] veth11: left allmulticast mode [ 669.300640][T22736] bond2 (unregistering): Released all slaves [ 669.317205][T22736] bond3 (unregistering): (slave veth13): Releasing active interface [ 669.329700][T22736] bond3 (unregistering): Released all slaves [ 669.343958][T22736] bond4 (unregistering): (slave C): Releasing backup interface [ 669.362155][T22736] bond4 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 669.375222][T22736] bond4 (unregistering): Released all slaves [ 669.387770][T22736] bond5 (unregistering): Released all slaves [ 669.400271][T22736] bond6 (unregistering): Released all slaves [ 669.413056][T22736] bond7 (unregistering): Released all slaves [ 669.426160][T22736] bond8 (unregistering): Released all slaves [ 669.442571][T22736] bond9 (unregistering): Released all slaves [ 669.466552][T22736] bond10 (unregistering): Released all slaves [ 669.481397][T22736] bond11 (unregistering): Released all slaves [ 669.503465][T22735] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.513048][T27400] bpq0: left promiscuous mode [ 669.518129][T27400] bpq0: left allmulticast mode [ 669.552478][T27410] netlink: 'syz.0.5757': attribute type 2 has an invalid length. [ 669.727291][T22736] : left promiscuous mode [ 669.782598][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 669.846132][T22736] tipc: Disabling bearer [ 669.892664][T22736] tipc: Disabling bearer [ 669.908827][T22736] tipc: Left network mode [ 669.925730][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 669.949079][T27347] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.972176][T27347] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.988549][T27347] bridge_slave_0: entered allmulticast mode [ 670.001236][T27347] bridge_slave_0: entered promiscuous mode [ 670.020928][T27347] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.029153][T27347] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.058774][T27347] bridge_slave_1: entered allmulticast mode [ 670.069038][T27347] bridge_slave_1: entered promiscuous mode [ 670.077447][T27435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5763'. [ 670.112966][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 670.242502][T22741] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 670.292296][T27448] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 670.397707][T27448] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 670.429124][T27448] bond6 (unregistering): Released all slaves [ 670.437288][T27459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5767'. [ 670.482175][T27347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.564308][T27347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.666253][T27347] team0: Port device team_slave_0 added [ 670.678864][T27347] team0: Port device team_slave_1 added [ 670.823458][T27347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.841584][T27347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.878869][T27477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5769'. [ 670.891630][T27477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5769'. [ 670.903178][T27347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.935694][T27347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.948287][T27347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.024625][T27347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.080264][T27488] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5774'. [ 671.098003][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5774'. [ 671.112681][ T5827] Bluetooth: hci3: command tx timeout [ 671.200176][ T5487] 8021q: adding VLAN 0 to HW filter on device eth1 [ 671.275370][T27492] netlink: 512 bytes leftover after parsing attributes in process `syz.4.5775'. [ 671.286314][T27347] hsr_slave_0: entered promiscuous mode [ 671.296809][T27347] hsr_slave_1: entered promiscuous mode [ 671.304568][T27347] debugfs: 'hsr0' already exists in 'hsr' [ 671.312034][T27347] Cannot create hsr debugfs directory [ 671.323693][T27495] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 671.333719][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 671.345137][T27495] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 671.360067][T27495] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 671.641764][T27503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5777'. [ 671.653847][T22736] hsr_slave_1: left promiscuous mode [ 671.750932][T22736] pimreg (unregistering): left allmulticast mode [ 672.046872][T22736] team0 (unregistering): Port device hsr0 removed [ 672.114018][T22736] team0 (unregistering): Port device team_slave_1 removed [ 672.138620][T22736] team0 (unregistering): Port device team_slave_0 removed [ 672.309133][T27527] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5781'. [ 672.340615][T27503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5777'. [ 672.351341][T27503] veth1_vlan: Caught tx_queue_len zero misconfig [ 672.374157][ T5487] 8021q: adding VLAN 0 to HW filter on device eth2 [ 672.397849][T27527] tipc: Started in network mode [ 672.413758][T27527] tipc: Node identity ac14140f, cluster identity 4711 [ 672.431629][T27527] tipc: New replicast peer: 255.255.255.255 [ 672.442266][T27527] tipc: Enabled bearer , priority 10 [ 672.502210][T27530] netlink: 'syz.4.5782': attribute type 7 has an invalid length. [ 672.602597][ T13] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 672.735736][T27548] delete_channel: no stack [ 672.848145][T27347] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.883759][T27558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5788'. [ 672.944752][T27559] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 672.991271][T27559] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 673.001619][ T13] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 673.047999][T27559] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 673.075536][T27347] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.193805][ T5827] Bluetooth: hci3: command tx timeout [ 673.346916][T27347] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.406236][T27572] netlink: 'syz.0.5790': attribute type 28 has an invalid length. [ 673.487198][T27347] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.527280][T27582] tap0: tun_chr_ioctl cmd 1074025676 [ 673.536742][T27582] tap0: owner set to 0 [ 673.579010][ T795] tipc: Node number set to 2886997007 [ 673.617055][T22736] IPVS: stop unused estimator thread 0... [ 673.625287][T22731] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 673.743598][ T13] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 673.782675][T27600] netlink: 'syz.1.5795': attribute type 1 has an invalid length. [ 673.884342][T27600] 8021q: adding VLAN 0 to HW filter on device bond6 [ 673.904921][T27603] bond6: option mode: unable to set because the bond device is up [ 674.183447][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 674.276655][T27347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 674.326778][T27347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.358939][T27347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 674.406374][T27347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.423985][T27347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 674.455844][T27347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.489410][T27347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 674.537869][T27347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.575091][T27646] veth0: entered promiscuous mode [ 674.603421][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 674.666708][T27644] veth0: left promiscuous mode [ 674.772456][T22742] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 674.901706][T27347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.954896][T27347] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.962576][T22741] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 674.994614][T22741] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.003511][T22741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.088360][T22731] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.103690][T22731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.202791][T22731] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 675.383706][ T13] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 675.504207][ T13] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 675.988083][T27347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.181447][T27347] veth0_vlan: entered promiscuous mode [ 676.215401][T27347] veth1_vlan: entered promiscuous mode [ 676.304733][T27347] veth0_macvtap: entered promiscuous mode [ 676.353928][T27347] veth1_macvtap: entered promiscuous mode [ 676.384271][T27749] veth0: entered promiscuous mode [ 676.441106][T27747] veth0: left promiscuous mode [ 676.489549][T27347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.534968][T27765] __nla_validate_parse: 7 callbacks suppressed [ 676.534990][T27765] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5826'. [ 676.586261][T27771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5826'. [ 676.614465][T27347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.622758][T27765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5826'. [ 676.718514][T22735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.744787][T22735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.815462][T22735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.844156][T22735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.863275][T27779] lo: Caught tx_queue_len zero misconfig [ 677.124639][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5830'. [ 677.156155][T27805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5833'. [ 677.194164][T22736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.202253][T22736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.375155][T22743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.392448][T22743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.925723][T27860] netlink: 'syz.1.5847': attribute type 21 has an invalid length. [ 678.024279][T27860] netlink: 'syz.1.5847': attribute type 6 has an invalid length. [ 678.062559][T27860] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5847'. [ 678.113747][T22736] net_ratelimit: 15 callbacks suppressed [ 678.113768][T22736] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 678.139057][T27873] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5849'. [ 678.292762][T22737] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 678.326480][T14520] lec:lec_start_xmit: lec0:No lecd attached [ 678.386632][T27881] openvswitch: netlink: Flow key attribute not present in set flow. [ 678.403467][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 678.439055][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 678.451079][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 678.460398][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 678.468780][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 678.478224][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 678.584485][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 678.650373][T27894] netlink: 'syz.1.5856': attribute type 83 has an invalid length. [ 678.692538][T22735] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 678.802537][T22736] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 678.954710][T22737] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 679.134774][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 679.145544][T27917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5860'. [ 679.167014][T27922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.182283][T27917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5860'. [ 679.188179][T27920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.210103][T27918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5860'. [ 679.270854][T27886] chnl_net:caif_netlink_parms(): no params data found [ 679.517426][T27886] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.517820][T27935] netlink: 'syz.3.5863': attribute type 1 has an invalid length. [ 679.527871][T27886] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.542101][T27886] bridge_slave_0: entered allmulticast mode [ 679.550911][T27886] bridge_slave_0: entered promiscuous mode [ 679.561532][T27886] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.569622][T27886] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.577018][T27886] bridge_slave_1: entered allmulticast mode [ 679.584834][T27886] bridge_slave_1: entered promiscuous mode [ 679.631849][T27886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.646429][T27886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.700867][T27886] team0: Port device team_slave_0 added [ 679.715083][T27886] team0: Port device team_slave_1 added [ 679.801436][T27886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.821070][T27886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.874422][T27886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.929963][T27886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.939208][T27886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.008796][T27886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.052628][T22743] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 680.309048][T27886] hsr_slave_0: entered promiscuous mode [ 680.328070][T27886] hsr_slave_1: entered promiscuous mode [ 680.337149][T27886] debugfs: 'hsr0' already exists in 'hsr' [ 680.344923][T27886] Cannot create hsr debugfs directory [ 680.380241][T27986] xt_cgroup: invalid path, errno=-2 [ 680.553033][ T5839] Bluetooth: hci5: command tx timeout [ 680.735548][T27996] bridge0: port 3(gretap0) entered disabled state [ 680.947474][T27996] wg1: left promiscuous mode [ 681.077386][T27996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.110814][T27996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.300078][T27996] gre1: left promiscuous mode [ 681.325222][T27996] vlan2: left promiscuous mode [ 681.339253][T27996] hsr0: left promiscuous mode [ 681.365972][T27996] bond3: left promiscuous mode [ 681.493424][T27996] sit2: left promiscuous mode [ 681.503886][T27996] bond5: left promiscuous mode [ 681.532695][T27996] bond9: left promiscuous mode [ 681.586412][T27996] vlan4: left promiscuous mode [ 681.591520][T27996] bridge0: left promiscuous mode [ 681.657801][T22735] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.693956][T22735] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.705966][T28017] netlink: 'syz.4.5885': attribute type 7 has an invalid length. [ 681.715409][T28012] syz_tun: entered allmulticast mode [ 681.838545][T22735] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.859949][T22735] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.890250][T22735] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.899639][T22735] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.915177][T22735] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.929065][T22735] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.057805][T28042] __nla_validate_parse: 11 callbacks suppressed [ 682.057824][T28042] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5891'. [ 682.075413][T28041] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5891'. [ 682.158622][T27886] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 682.181142][T27886] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 682.220500][T28049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5894'. [ 682.238457][T28049] netlink: 'syz.1.5894': attribute type 1 has an invalid length. [ 682.262524][T28049] netlink: 476 bytes leftover after parsing attributes in process `syz.1.5894'. [ 682.271976][T28049] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.5894'. [ 682.287106][T27886] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 682.302682][T27886] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 682.393691][T27886] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 682.402745][T28060] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5897'. [ 682.417304][T27886] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 682.419215][T28060] nbd: illegal input index -8454144 [ 682.435571][T28062] netlink: 54 bytes leftover after parsing attributes in process `syz.2.5898'. [ 682.446071][T28062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5898'. [ 682.476287][T28062] netlink: 54 bytes leftover after parsing attributes in process `syz.2.5898'. [ 682.499964][T27886] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 682.504512][T28062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5898'. [ 682.517664][T27886] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 682.632522][ T5839] Bluetooth: hci5: command tx timeout [ 682.832656][T27886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 682.902315][T27886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.912312][T27886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 682.945770][T27886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.956564][T27886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 682.976837][T27886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.995967][T27886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 683.021079][T28095] x_tables: duplicate underflow at hook 1 [ 683.031102][T27886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.289161][T28108] tipc: Enabled bearer , priority 0 [ 683.320641][T28108] ip6tnl0: left allmulticast mode [ 683.327604][T28112] net_ratelimit: 3 callbacks suppressed [ 683.327620][T28112] openvswitch: netlink: Message has 6 unknown bytes. [ 683.452051][T28108] syzkaller0: entered promiscuous mode [ 683.496585][T28108] syzkaller0: entered allmulticast mode [ 683.521328][T28108] tipc: Resetting bearer [ 683.565536][T28121] bridge0: port 3(ipvlan2) entered blocking state [ 683.582498][T28121] bridge0: port 3(ipvlan2) entered disabled state [ 683.590725][T28121] ipvlan2: entered allmulticast mode [ 683.604978][T28121] bridge0: entered allmulticast mode [ 683.627439][T28121] ipvlan2: left allmulticast mode [ 683.643120][T28121] bridge0: left allmulticast mode [ 683.701831][T28126] ================================================================== [ 683.710049][T28126] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 683.717913][T28126] Read of size 8 at addr ffff888034add7e0 by task syz.2.5916/28126 [ 683.726339][T28126] [ 683.728878][T28126] CPU: 0 UID: 0 PID: 28126 Comm: syz.2.5916 Not tainted syzkaller #0 PREEMPT(full) [ 683.728909][T28126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 683.728923][T28126] Call Trace: [ 683.728933][T28126] [ 683.728944][T28126] dump_stack_lvl+0xe8/0x150 [ 683.728978][T28126] print_report+0xba/0x230 [ 683.729002][T28126] ? af_alg_pull_tsgl+0x1c6/0x740 [ 683.729035][T28126] kasan_report+0x117/0x150 [ 683.729062][T28126] ? af_alg_pull_tsgl+0x1c6/0x740 [ 683.729097][T28126] af_alg_pull_tsgl+0x1c6/0x740 [ 683.729135][T28126] skcipher_recvmsg+0x5df/0x1140 [ 683.729167][T28126] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 683.729189][T28126] ? aa_sock_msg_perm+0xf1/0x1b0 [ 683.729216][T28126] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 683.729237][T28126] ? security_socket_recvmsg+0x7e/0x2c0 [ 683.729261][T28126] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 683.729283][T28126] sock_recvmsg+0x172/0x1b0 [ 683.729306][T28126] ____sys_recvmsg+0x1e6/0x4a0 [ 683.729338][T28126] ? __pfx_____sys_recvmsg+0x10/0x10 [ 683.729381][T28126] ? import_iovec+0x73/0xa0 [ 683.729408][T28126] ___sys_recvmsg+0x215/0x590 [ 683.729438][T28126] ? __pfx____sys_recvmsg+0x10/0x10 [ 683.729478][T28126] ? __fget_files+0x3a0/0x420 [ 683.729501][T28126] __x64_sys_recvmsg+0x1ba/0x2a0 [ 683.729531][T28126] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 683.729562][T28126] ? rcu_is_watching+0x15/0xb0 [ 683.729596][T28126] do_syscall_64+0x14d/0xf80 [ 683.729623][T28126] ? trace_irq_disable+0x3b/0x150 [ 683.729641][T28126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.729661][T28126] ? clear_bhb_loop+0x40/0x90 [ 683.729681][T28126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.729701][T28126] RIP: 0033:0x7f006af9c819 [ 683.729721][T28126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.729740][T28126] RSP: 002b:00007f006be5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 683.729762][T28126] RAX: ffffffffffffffda RBX: 00007f006b216090 RCX: 00007f006af9c819 [ 683.729779][T28126] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000007 [ 683.729793][T28126] RBP: 00007f006b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 683.729807][T28126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.729820][T28126] R13: 00007f006b216128 R14: 00007f006b216090 R15: 00007ffcec528958 [ 683.729844][T28126] [ 683.729853][T28126] [ 683.986959][T28126] Allocated by task 28126: [ 683.991374][T28126] kasan_save_track+0x3e/0x80 [ 683.996286][T28126] __kasan_kmalloc+0x93/0xb0 [ 684.001427][T28126] __kmalloc_noprof+0x35c/0x760 [ 684.006576][T28126] sock_kmalloc+0xd6/0x160 [ 684.011019][T28126] skcipher_recvmsg+0x54d/0x1140 [ 684.016502][T28126] sock_recvmsg+0x172/0x1b0 [ 684.021253][T28126] ____sys_recvmsg+0x1e6/0x4a0 [ 684.026327][T28126] ___sys_recvmsg+0x215/0x590 [ 684.031194][T28126] __x64_sys_recvmsg+0x1ba/0x2a0 [ 684.036322][T28126] do_syscall_64+0x14d/0xf80 [ 684.041350][T28126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.047413][T28126] [ 684.049733][T28126] The buggy address belongs to the object at ffff888034add7c0 [ 684.049733][T28126] which belongs to the cache kmalloc-32 of size 32 [ 684.064828][T28126] The buggy address is located 0 bytes to the right of [ 684.064828][T28126] allocated 32-byte region [ffff888034add7c0, ffff888034add7e0) [ 684.079800][T28126] [ 684.082124][T28126] The buggy address belongs to the physical page: [ 684.089243][T28126] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034adde80 pfn:0x34add [ 684.101003][T28126] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 684.111096][T28126] page_type: f5(slab) [ 684.115426][T28126] raw: 00fff00000000200 ffff88813fea7780 ffffea0000d86f90 ffffea0000c5ce10 [ 684.124629][T28126] raw: ffff888034adde80 000000080040003d 00000000f5000000 0000000000000000 [ 684.134330][T28126] page dumped because: kasan: bad access detected [ 684.140857][T28126] page_owner tracks the page as allocated [ 684.147304][T28126] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9045, tgid 9044 (syz.0.891), ts 168080330622, free_ts 165576202931 [ 684.169567][T28126] post_alloc_hook+0x231/0x280 [ 684.174700][T28126] get_page_from_freelist+0x24dc/0x2580 [ 684.180434][T28126] __alloc_frozen_pages_noprof+0x18d/0x380 [ 684.186249][T28126] allocate_slab+0x77/0x660 [ 684.190944][T28126] refill_objects+0x331/0x3c0 [ 684.195813][T28126] __pcs_replace_empty_main+0x2e6/0x730 [ 684.201373][T28126] __kmalloc_cache_noprof+0x392/0x660 [ 684.207005][T28126] ref_tracker_alloc+0x15a/0x4c0 [ 684.212480][T28126] dst_init+0xd9/0x480 [ 684.216649][T28126] dst_alloc+0x12a/0x170 [ 684.221250][T28126] rt_dst_clone+0x52/0x680 [ 684.225988][T28126] ip_mc_finish_output+0xe9/0x2d0 [ 684.231724][T28126] ip_mc_output+0x25c/0x590 [ 684.236505][T28126] ip_send_skb+0x45/0xc0 [ 684.240952][T28126] udp_send_skb+0xb04/0x1510 [ 684.245799][T28126] udp_sendmsg+0x1a35/0x22f0 [ 684.250708][T28126] page last free pid 15 tgid 15 stack trace: [ 684.257041][T28126] __free_frozen_pages+0xc2b/0xdb0 [ 684.262263][T28126] tlb_remove_table_rcu+0x85/0x100 [ 684.267560][T28126] rcu_core+0x7cd/0x1070 [ 684.271898][T28126] handle_softirqs+0x22a/0x870 [ 684.277135][T28126] run_ksoftirqd+0x36/0x60 [ 684.281555][T28126] smpboot_thread_fn+0x541/0xa50 [ 684.286925][T28126] kthread+0x388/0x470 [ 684.291332][T28126] ret_from_fork+0x51e/0xb90 [ 684.296012][T28126] ret_from_fork_asm+0x1a/0x30 [ 684.301055][T28126] [ 684.303562][T28126] Memory state around the buggy address: [ 684.309646][T28126] ffff888034add680: 00 00 00 00 fc fc fc fc 00 00 00 fc fc fc fc fc [ 684.317901][T28126] ffff888034add700: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 684.326233][T28126] >ffff888034add780: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 684.334572][T28126] ^ [ 684.342491][T28126] ffff888034add800: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 684.350832][T28126] ffff888034add880: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 684.359327][T28126] ================================================================== [ 684.368563][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6030 ms [ 684.376704][ C0] lec:lec_tx_timeout: lec0 [ 684.390983][T28126] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 684.398497][T28126] CPU: 0 UID: 0 PID: 28126 Comm: syz.2.5916 Not tainted syzkaller #0 PREEMPT(full) [ 684.408101][T28126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 684.418558][T28126] Call Trace: [ 684.421936][T28126] [ 684.424884][T28126] vpanic+0x56c/0xa60 [ 684.429150][T28126] ? __pfx_vpanic+0x10/0x10 [ 684.433678][T28126] ? __pfx___schedule+0x10/0x10 [ 684.438542][T28126] panic+0xc5/0xd0 [ 684.442609][T28126] ? __pfx_panic+0x10/0x10 [ 684.447124][T28126] ? preempt_schedule_common+0x82/0xd0 [ 684.452645][T28126] ? af_alg_pull_tsgl+0x1c6/0x740 [ 684.457682][T28126] check_panic_on_warn+0x89/0xb0 [ 684.462804][T28126] ? af_alg_pull_tsgl+0x1c6/0x740 [ 684.468107][T28126] end_report+0x73/0x180 [ 684.472461][T28126] ? af_alg_pull_tsgl+0x1c6/0x740 [ 684.478035][T28126] kasan_report+0x128/0x150 [ 684.482631][T28126] ? af_alg_pull_tsgl+0x1c6/0x740 [ 684.487847][T28126] af_alg_pull_tsgl+0x1c6/0x740 [ 684.492862][T28126] skcipher_recvmsg+0x5df/0x1140 [ 684.497979][T28126] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 684.503424][T28126] ? aa_sock_msg_perm+0xf1/0x1b0 [ 684.508652][T28126] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 684.514118][T28126] ? security_socket_recvmsg+0x7e/0x2c0 [ 684.519795][T28126] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 684.525440][T28126] sock_recvmsg+0x172/0x1b0 [ 684.530169][T28126] ____sys_recvmsg+0x1e6/0x4a0 [ 684.534965][T28126] ? __pfx_____sys_recvmsg+0x10/0x10 [ 684.540445][T28126] ? import_iovec+0x73/0xa0 [ 684.545138][T28126] ___sys_recvmsg+0x215/0x590 [ 684.549934][T28126] ? __pfx____sys_recvmsg+0x10/0x10 [ 684.555152][T28126] ? __fget_files+0x3a0/0x420 [ 684.560007][T28126] __x64_sys_recvmsg+0x1ba/0x2a0 [ 684.564957][T28126] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 684.570518][T28126] ? rcu_is_watching+0x15/0xb0 [ 684.575504][T28126] do_syscall_64+0x14d/0xf80 [ 684.580291][T28126] ? trace_irq_disable+0x3b/0x150 [ 684.585387][T28126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.591631][T28126] ? clear_bhb_loop+0x40/0x90 [ 684.596409][T28126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.602836][T28126] RIP: 0033:0x7f006af9c819 [ 684.607362][T28126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.627227][T28126] RSP: 002b:00007f006be5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 684.636181][T28126] RAX: ffffffffffffffda RBX: 00007f006b216090 RCX: 00007f006af9c819 [ 684.644352][T28126] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000007 [ 684.652597][T28126] RBP: 00007f006b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 684.660899][T28126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.668876][T28126] R13: 00007f006b216128 R14: 00007f006b216090 R15: 00007ffcec528958 [ 684.677128][T28126] [ 684.680864][T28126] Kernel Offset: disabled [ 684.685465][T28126] Rebooting in 86400 seconds..