last executing test programs: 4.187890896s ago: executing program 2 (id=1922): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0x8, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1a, 0x63098bae, 0xa, 0xf41b, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879316000000005002000050000000c0005"], 0x34}}, 0x0) 3.622183625s ago: executing program 2 (id=1926): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0xf6, 0x0, 0x12b, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7, 0xdb67, 0x8}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1c, 0x21, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xeca}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x8001, 0xd9, &(0x7f0000000840)=""/217, 0x41000, 0x13, '\x00', 0x0, @fallback=0x8, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x4, 0x80000001, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000980)=[{0x3, 0x1, 0x10, 0x3}, {0x0, 0x5, 0x1, 0xb}, {0x0, 0x1, 0xa, 0xb}, {0x1, 0x1, 0xa, 0x1}, {0x1, 0x5, 0xe, 0x5}, {0x0, 0x3}], 0x10, 0xa}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1c, 0x21, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xeca}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x8001, 0xd9, &(0x7f0000000840)=""/217, 0x41000, 0x13, '\x00', 0x0, @fallback=0x8, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x4, 0x80000001, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000980)=[{0x3, 0x1, 0x10, 0x3}, {0x0, 0x5, 0x1, 0xb}, {0x0, 0x1, 0xa, 0xb}, {0x1, 0x1, 0xa, 0x1}, {0x1, 0x5, 0xe, 0x5}, {0x0, 0x3}], 0x10, 0xa}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r5, @ANYRES32], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000500), &(0x7f0000000280)=@udp=r5}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%pK \x00'}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r12, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) pread64(r12, &(0x7f0000000240)=""/5, 0x5, 0xcd32) (async) pread64(r12, &(0x7f0000000240)=""/5, 0x5, 0xcd32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0xd, 0x7, 0xb, 0x20, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x63, &(0x7f00000001c0)=""/99, 0x41000, 0x18, '\x00', r1, @fallback=0xb, r0, 0x8, &(0x7f00000003c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x10, 0x3, 0x7}, 0x10, r2, r3, 0x3, &(0x7f0000000c00)=[r6, r7, r8, r9, 0xffffffffffffffff, r12, r13], &(0x7f0000000c40)=[{0x1, 0x2, 0x5, 0xf2894037764b5da8}, {0x0, 0x3, 0xb, 0x3}, {0x0, 0x1, 0x2, 0x3}], 0x10, 0x10001}, 0x94) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r14, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r15, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x39}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 3.441217271s ago: executing program 1 (id=1928): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket(0x10, 0x3, 0x0) (async) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x9, 0x8, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async, rerun: 32) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) sendmmsg$inet6(r10, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) (async, rerun: 64) shutdown(r10, 0x1) (async, rerun: 64) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000001540)=ANY=[@ANYRES32, @ANYBLOB="0049650080"]) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r11, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async, rerun: 64) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000040)=0xdb50, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) 3.346345438s ago: executing program 2 (id=1929): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c00000000000005001900000000000a"], 0xc8}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 3.195865218s ago: executing program 2 (id=1931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x2, [@restrict={0xfffffffd}, @union={0x4, 0x0, 0x0, 0x5, 0x0, 0x3}, @volatile={0xb, 0x0, 0x0, 0x9, 0x5}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x5}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x3b, 0xa7d63cd9fd65f3}, @volatile={0xf}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x4}]}}, 0x0, 0x76, 0x0, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r3, 0x100000, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(r1) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500002c001e0001e0000001000022eb00189078040000000000000086ddffff00000000"], 0x3e) 3.006767061s ago: executing program 1 (id=1933): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x30, 0x8, 0xb, 0xb, 0x8, 0x81}) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xffffffff}}, {{0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a40)={&(0x7f0000000880)={0x1190, 0x26, 0x100, 0x70bd2c, 0x25dfdbfd, {0x5}, [@typed={0x4, 0x42}, @typed={0x4, 0x89}, @typed={0x8, 0x40, 0x0, 0x0, @u32=0x5}, @nested={0x1164, 0x11e, 0x0, 0x1, [@generic="fc4eddd365f28b7590b693522b5716ef1920bb81bd074e78ed623d93c2ccda9cb735f4f6f5bda1f62af31c9b880eeb2dfa1a596d3e7f731d979141671c3395d76340750a37a24a350f474b3e7acb7d566d8e64a75aaf891a1d5aae423b0eb85d5b7b3fc6913b41461fee11128e00cbbd5a4987f43027067a21ea9a390274f25442a37a924e823888ff6b58ac09b1078e4a19bc0795c743dfae3fddf4b6d2a5ca681c9a78c30a7e54ee89d70937fd0cc22c16bc93dc2928ce09ee6b531d87bcc8ff737956fdb961f7", @typed={0x8, 0x14f, 0x0, 0x0, @u32=0xfff}, @generic="1720897bb79e14de5af5129ce4c9d6107133435991590620dfc5a192d1ab6db55b32b85d3aaeef3cf7211f8a6c9bc5434434f06fd975fdf144c8c95d8f9965eae03c582db12418cf1574663734ec1fd03034591165e6981cc80ae570cc2b74c921ff4bb88a7df5e51b255d1b3c4dd0e16ab3898bf0d7559e164e6148de0da87dd251711daba0236fafb145d5d5ec7a87", @generic="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"]}, @typed={0x8, 0x64, 0x0, 0x0, @fd=r0}]}, 0x1190}, 0x1, 0x0, 0x0, 0x24000800}, 0x4004801) recvmmsg(r3, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}, 0x8}], 0x1, 0x2, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 2.900890213s ago: executing program 0 (id=1936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000070000000400000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0062b5fd2a158cbfe49eba00b58f00"/28], 0x50) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r2, &(0x7f0000001200)={0x23, 0x2, 0xc, 0x21}, 0x10) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "9a54c7d257242449", "628b56fd532757f057de442ecfac2866", "17fb3279", "77dd297aec7ce01a"}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9c, r0, 0x4}, 0x38) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x1400c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1840000001000000000400000edcb35f360bdf32", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4d}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000480)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x0, 0x8000, "639f2a65bb82"}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x35) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r10 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000400)=r9, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRESDEC=r3], 0x1c}}, 0x0) 2.761479794s ago: executing program 1 (id=1938): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x2002}, 0x80, 0x0}, 0xe07e872424dfafca) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x3754f4def7956cdb}, 0x20008004) 2.714268332s ago: executing program 2 (id=1939): unshare(0x2000400) r0 = socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000) r3 = socket(0x8, 0x3, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x618e, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, r1, 0x215eb000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000), 0xc) r5 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) ioctl$sock_TIOCINQ(r5, 0x61d8, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0xe8, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800440300da00650000002f907800000002ac1414bb0083037d12118fc4c1622fe8519cd9e469fb7645b489275ae0000001ac1414bbac1414bb7f000001ac1414bbac14141800000000ffffffffac1414bb248088a80000000000ff000010000800000700020005000086ddfffd5b2f1974b763fca1116dda1b5cd91957a088b8093ba9e52212572f9142eb326e5455c0392c026dc9649c69701a15fba5207655b2b99dc04ae4ab080088be00000002100000000100000000000000080022eb000000002000000002000000000000020000000008006558fffffffdd58e414f1c83a7b21e4f10fbfb0be21885ce35998f19b8e894f3af5e8bd22fc352ea17c17bebef7af929f0a1e8ad5f96520035acc293f0d224b56c7f2004b9357c1f514b7bced624347947a022642975a20c6ae3e1ff5d5c9f0df55b6406361dd24c09"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 2.569315363s ago: executing program 1 (id=1941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$rxrpc(0x21, 0x2, 0x2) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0xfffffdcf, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0xd, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0xa, 0x1, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3186dd60000000002006fffe8000000000000000000000001000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002010090780006fe0bf989a9f1eb321d754200"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4980, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) 2.373844971s ago: executing program 4 (id=1943): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x0) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe80000b0000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe80000b0000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x45}, 0x800) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10, 0x80800) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, 0x15, 0x0, 0x70bd2b, 0x25dfdbfd, {0x22, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "adb69f19de"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "361d1302ceeb6280beb39276d5bb0b46300512a95690fdbedc0b87acdd12ee0d583e72bcad645ffa2de1c118af"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "0649abf101cf5be10c674db3faa3e380e721fbf5a3239a597cf0c377cbc090b692a636b5cef7a8f0259488a82abf"}]}, 0x88}, 0x1, 0x0, 0x0, 0x40480cd}, 0x20040040) sendto$inet(r1, &(0x7f00000002c0)="f1929b8e1fabf9a9bb24fcc6b7db17ab573090fc3c546311ce22030c00445edf8acf246bdda47900a10e34cd9afbeb3a1729b188d7a15527b30806b11686fc8a7024ac2ac1630c1e1f1471b444851976364541dcfb8818bc20c74a5db304a1c22cd36ab4b1f784bb9a6198e97e31d9d91d22e3005ef3a127f3c6eaa453af741ab30ac20fd1fbddd1aaa30c5c1c99ad376400226dd9dd26136e29cf54b8a73b28d4d75215080d0e66ce1d2f0e3e5be8fb1d99500f94e622e769df292844e9c2c16816a47dfc0360ce542d608925c8e1", 0xcf, 0x4802, &(0x7f00000003c0)={0x2, 0x4e24, @multicast2}, 0x10) 2.333818954s ago: executing program 3 (id=1944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004890}, 0x2000c800) pipe(&(0x7f0000000000)) 2.292584292s ago: executing program 0 (id=1945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000200)=0x4, 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) (rerun: 64) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r8, 0x2, {0x3, 0x0, 0x4}}, 0x18) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="210600000a3a720f80167371791dfe1ef7b71e67f3df70075ebf6f49ba4574e1c579119d86eda8b80f1f161d99a25fba8b02682c5f0d", @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf250200000008000100", @ANYRES32=r10, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r11 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0xe, 0x40800) setsockopt$bt_BT_RCVMTU(r11, 0x112, 0xd, &(0x7f00000001c0)=0xa79a, 0x2) (async) r12 = socket(0x29, 0x3, 0x2) bind$netlink(r12, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async, rerun: 64) connect$netlink(r12, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async, rerun: 64) sendmmsg(r12, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d", 0x2}], 0x1}}], 0x1, 0x40060) 2.201825281s ago: executing program 4 (id=1946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f00000008c0)="7f", 0x1, 0x40, 0x0, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @rose}, [@null, @rose, @null, @netrom, @bcast, @rose, @default, @null]}, &(0x7f0000000280)=0x48, 0x180800) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={0x0, "13a856edb3f4dd2078106153324ce34a"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001480)={r4, 0x1}) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="8ec2949ff46ee5a12e51ee3c4c881c3dc024dc90d7810c7bdacc498e710f04b2aeadb7c6bce871177c1c23b31d9929990c9e4d342f1282a13139e1213d2883098ce4fbf30c90791df270112e05e39106f5d580d65832c664c5488b28384361d5fbce8b1266ae3a93", 0x68}], 0x1}, 0x54) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x8110}, 0x8010) 2.125155737s ago: executing program 3 (id=1947): r0 = socket(0x10, 0x803, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x70}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r5, @ANYBLOB="80008f0b0a0002"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}]}, 0x70}}, 0x0) ioctl$XFS_IOC_GETPARENTS(r8, 0xc028583e, &(0x7f0000000640)={{[0x9, 0x40, 0x0, 0x9]}, 0x0, 0x1, 0x7, 0x0, &(0x7f0000000500)=[{{@align=0x6, {0x81, 0x7, 0x9, 0x6}}, 0x401, 0x0, '%pB \x00'}, {{@align=0x3d77, {0x4, 0x10, 0xc800, 0x298400}}, 0x5, 0x0, '---\x00'}, {{@align=0x8, {0xffff, 0x9, 0x8, 0x5}}, 0xa, 0x0, 'GPL\x00'}, {{@align, {0x7, 0x0, 0x0, 0x10}}, 0x3, 0x0, '\x00'}, {{@_ha_fsid={[0x4, 0x2]}, {0xf, 0x8, 0x7, 0x4}}, 0x2, 0x0, '\x00'}, {{@_ha_fsid={[0x6, 0x2d]}, {0x0, 0x200, 0x3ff, 0x6}}, 0x3, 0x0, ']^\x00'}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0xfffc, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0x1, 0x100004, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x30097, 0x51c84}, [@IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '][{\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7c42b6235ff8dbf0e2e8377b5a7bc8ac"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "de97027d80c681a38d5edfc3999f868b"}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x9045}, 0x4c884) 2.047817782s ago: executing program 0 (id=1948): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000007000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, r0, 0x215eb000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000040)="020c0000098011e8", 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0215000008003f80040022800800030047"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @broadcast}, 0x10) r5 = socket(0x14, 0x2, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getpeername$packet(r5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', r2, 0x0, 0x2, 0x2, 0x7, 0xc, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x700, 0x6, 0x80}}) socket(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @initdev}, &(0x7f00000000c0)=0x9) 1.968378645s ago: executing program 4 (id=1949): r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80000) (async, rerun: 32) r1 = socket(0x200000000000011, 0x2, 0xd) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaa5e780000bbbbbbbbbbbb86dd6017010000182b00fe8000000000000000000000000000bbfe800000000000283d4b8da6000000000b001000aa00000000001890780400"/78], 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000004080)=[{{&(0x7f0000000140)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000700)=""/178, 0xb2}, {&(0x7f00000007c0)=""/166, 0xa6}], 0x6, &(0x7f0000000900)=""/63, 0x3f}, 0x9}, {{&(0x7f0000000940)=@phonet, 0x80, &(0x7f0000000b80)=[{&(0x7f00000009c0)=""/89, 0x59}, {&(0x7f0000000a40)=""/4, 0x4}, {&(0x7f0000000a80)=""/210, 0xd2}], 0x3, &(0x7f0000000bc0)=""/14, 0xe}, 0xc}, {{0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=""/78, 0x4e}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000cc0)=""/231, 0xe7}, {&(0x7f0000000dc0)=""/201, 0xc9}, {&(0x7f0000000ec0)=""/52, 0x34}, {&(0x7f0000000f00)=""/249, 0xf9}, {&(0x7f0000001000)=""/203, 0xcb}], 0x5, &(0x7f0000001180)=""/119, 0x77}, 0x1400000}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001200)=""/229, 0xe5}, {&(0x7f0000001300)=""/205, 0xcd}, {&(0x7f0000001400)=""/169, 0xa9}, {&(0x7f00000014c0)=""/183, 0xb7}, {&(0x7f0000001580)=""/115, 0x73}, {&(0x7f0000001600)=""/43, 0x2b}, {&(0x7f0000001640)=""/34, 0x22}, {&(0x7f0000001680)=""/83, 0x53}, {&(0x7f0000001700)=""/149, 0x95}, {&(0x7f00000017c0)=""/249, 0xf9}], 0xa, &(0x7f0000001980)=""/117, 0x75}, 0x7}, {{&(0x7f0000001a00)=@hci, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/58, 0x3a}, {&(0x7f0000001ac0)=""/70, 0x46}], 0x2, &(0x7f0000001b80)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002b80)=""/153, 0x99}, {&(0x7f0000002c40)=""/226, 0xe2}, {&(0x7f0000002d40)=""/169, 0xa9}, {&(0x7f0000002e00)=""/127, 0x7f}, {&(0x7f0000002e80)=""/111, 0x6f}, {&(0x7f0000002f00)=""/223, 0xdf}], 0x6, &(0x7f0000003080)=""/4096, 0x1000}, 0x8da}], 0x7, 0x40000142, &(0x7f0000004240)) (rerun: 32) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x21) (async) close(r5) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000280)={{r7}, 0x1002, 0x1, 0x3ed5efcc}) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000004280)=ANY=[@ANYBLOB="0501000000000000850000007600000095000810000000004a6b1144080000006be163148d7bc670be34d7736009bf31e82846c80a01cff4ecf3589b56766e9bc80e4d796465f1ec60ddfb"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.893373503s ago: executing program 3 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x30, r1, 0xc4fc9e906872308b, 0x0, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x840) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@multicast1, @broadcast, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x63, 0x90000000, 0x0, @mcast1, @mcast2, 0x80, 0x80, 0x1, 0x5f}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x80, 0x7800, 0x5, 0x9, {{0x19, 0x4, 0x3, 0x2d, 0x64, 0x67, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0xaf, 0x1, 0x9, [{@local, 0x7e}, {@broadcast, 0x3}, {@remote, 0xfffffe00}, {@private=0xa010102, 0x6b}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x73}, {@private=0xa010101, 0x38e2dcf}, {@private=0xa010101, 0x4}]}, @ssrr={0x89, 0x7, 0x28, [@rand_addr=0x64010102]}, @ssrr={0x89, 0xb, 0x73, [@dev={0xac, 0x14, 0x14, 0x3f}, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc08278b0791fcdce}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 1.890311031s ago: executing program 1 (id=1951): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3}}) r1 = socket(0x10, 0x3, 0x3) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480009000000010b040d0010000000000000000000009d1181fac947eb5643f1f51d143a00", @ANYRES32=0x0, @ANYBLOB="9c7cd528000000001400030076657468315f766c616e0000000000001400030065727370616e30000000000000000000"], 0x48}}, 0x0) getuid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0xf) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0xf) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000600140012800b00010065727370616e00000400028008002000fdffffff"], 0x3c}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x4c, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4094}, 0x20000010) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000000500)={0x1620, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x160c, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0xb075, 0x80000000, @loopback, 0x90000000}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}]}, {0xb3c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x488, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x52}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @loopback, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x1d8, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x4a8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}]}]}, {0x1c8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "17d0fbe4bd7dc87c084f595fe816eef0c4abd2f862ed89aff3fe35645ca44bbf"}, @WGPEER_A_ALLOWEDIPS={0x1a0, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0xd}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @private0, 0xffff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "993aa23ba81e568eec6833c1294f4fd6cb9a588aef0db39b98fce5240c78650a"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}]}, {0x790, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xfffffff7, @local, 0x7b2c}}, @WGPEER_A_ALLOWEDIPS={0x5bc, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @mcast1, 0x4}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "617dd6b9a63df3726c13e4f0a23a944ef5f2fa433e74407cd4cb58a94d99d071"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bbded2b75688a28288f88ddad2e8286032fa3c7100360678d4d3ed07f8896b76"}]}]}]}, 0x1620}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_int(r4, 0x0, 0x21, &(0x7f0000000080), 0x4) r8 = socket(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000140)=@int=0x8, 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f00000000c0)) accept$netrom(r1, 0x0, &(0x7f00000000c0)) 1.702962403s ago: executing program 3 (id=1952): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[], 0x3c}}, 0x800) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x700, 0x8, 0x7, 0x1, {{0x3f, 0x4, 0x3, 0x7, 0xfc, 0x68, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @loopback, {[@lsrr={0x83, 0x1b, 0xb7, [@broadcast, @remote, @private=0xa010101, @empty, @multicast1, @multicast1]}, @generic={0x83, 0x2}, @generic={0x86, 0x8, "49fbbba1a179"}, @timestamp_addr={0x44, 0x1c, 0xd6, 0x1, 0x5, [{@multicast2, 0x3}, {@local, 0xae}, {@broadcast, 0x8}]}, @end, @ssrr={0x89, 0x1b, 0x68, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0x15, 0x1, 0x3, [{@multicast1, 0x2}, {@multicast2}, {@loopback, 0xc5}, {@multicast2, 0x9}, {@loopback, 0x1}, {@private=0xa010100, 0x8000}, {@private=0xa010102, 0x6}]}, @timestamp_prespec={0x44, 0x4c, 0x57, 0x3, 0x9, [{@multicast1}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast1}, {@private=0xa010101, 0x6}, {@multicast2, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x42}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r3, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x9, 0x5, {{0x10, 0x4, 0x1, 0x1b, 0x40, 0x68, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x14, 0xed, 0x0, 0x2, [0x7fffffff, 0x6, 0x3, 0xf]}, @end, @ssrr={0x89, 0x13, 0xf5, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xe0, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 1.50551743s ago: executing program 1 (id=1953): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) socket$inet(0x2, 0x2, 0x0) 1.489812772s ago: executing program 4 (id=1954): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) 724.293775ms ago: executing program 0 (id=1955): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0xfffc, @multicast2}, 0x2}}, 0x2e) (async) sendto$inet6(r2, &(0x7f0000000040)="d28b9c4b9da19bd5a67c98a5250b64bab61c509e982690c75ab273df1f95a5e38830c8a76c24f64a0e66835d9ef59c695f54e35aeaffdba5819f20851a0581d030d42c2c3c986a772b4d3f0975da7a250e6c2af75cc4c684d30e9cc796b2b2f4cc69379daef64ee27ddf4e07e53f524c9cad306e0fe70431756bd7c42dc60ece11de606c7cb5507e85929cc1a8d8a41319f9b163fa27e69cd24dc702622c14728b05850621e8e65e9ed032ac8e90d198e954baeed762309b2814c81971d729824838712e2c3b0734cb7c", 0xca, 0x0, 0x0, 0x0) 520.573923ms ago: executing program 3 (id=1956): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000003f80)={'team0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000022c0)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xff000000, 0x0, 0x0, 0xff], 0x4e22, 0x16, 0x0, 0x4e20, 0x8, 0x10}}, @common=@mh={{0x28}, {"eb2b"}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x24, "8e07f4994623b08e5594915662dceaf65a1641aadb12bf34becf46ca75b7"}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@srh={{0x30}, {0x89, 0xf5, 0x0, 0x9, 0x48ba, 0x0, 0x144a}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040054) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) r4 = socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@deltclass={0x2c, 0x29, 0x408, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffff, 0xa}, {0x5, 0xb}, {0x3, 0x10}}, [@tclass_kind_options=@c_cbs={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3be, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) socket$kcm(0x29, 0x7, 0x0) 422.345951ms ago: executing program 0 (id=1957): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x29, 0x4e, &(0x7f0000000400), 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}]}, &(0x7f0000000080)=0x10) r2 = socket(0x2000000015, 0x80005, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x7) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x5, 0x6}) 411.604137ms ago: executing program 4 (id=1958): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond_slave_1\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x4c, 0x9, 0x7, 0x7, 0x5, 0xff, 0x8, 0x6, 0x0, 0x9, [0x5, 0x9, 0x2, 0x400, 0x3, 0x7, 0x7, 0x2]}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000065e3340072003303060000000400000007", @ANYRES32=0x0], 0x18}}, 0x20000010) recvmsg$unix(r2, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "80566ba2ba50dc45ee638dcd297d88e28ec00175e64b4fb24e448a24b9d9d771", "9d4a472fd54c2d8b439c2cbc8845efe7702ef8d0a7da9943eed625dfa8f6b887", "599b8ba4c1595abfdace8f553a9179c4de952dfebef8877b5681d4ee1bd9edd9", "1105ae55e8240295b492f1b864173f20374dcb1901a8cbd89f90df811a4bb5ad", "2280199939a2fec962d0f810b7e3c19a4d9013ac5f6850b23a353d17920dfa59", "000013f434bc0cdc6d4500", 0x235ffffd, 0x7, 0xc, 0x6, 0x800}}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb1f83e8205bc2cc80e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) 209.055688ms ago: executing program 0 (id=1959): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x791475d4, 0x8, {{0x1b, 0x4, 0x0, 0x9, 0x6c, 0x67, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @loopback, {[@ssrr={0x89, 0xb, 0x16, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp_addr={0x44, 0x4c, 0x17, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x7c}, {@broadcast, 0x2}, {@rand_addr=0x64010101, 0x7}, {@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x401}, {@loopback, 0xb0b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x300}, {@multicast2, 0xff2}, {@empty, 0x7}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev, @empty}, &(0x7f00000003c0)=0xc) (async) r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r7, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x958}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24008004) (async) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x18, r5, 0x1, 0x81}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB="08000600", @ANYRESOCT], 0x24}}, 0x4000) (async) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) (async) r12 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_buf(r12, 0x1, 0x3d, &(0x7f0000000280)=""/45, &(0x7f0000000340)=0x2d) (async) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x8, 0x7800, 0xe4, 0xffff, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x64, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010101, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x14c, r0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r16 = socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01000000000000000020030000002c00ac04801300010062726f6164636173742d6c006e6b00001300010062726f6164636173742d6c696e6b00004db9ecbe4f3bf53a662daa7d6c162c70f273807e2475f6ee24efda9ff2f09333584dbd6d3a1d88691e7a70395cb3e8f1"], 0x40}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01402cbd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080003"], 0x34}, 0x1, 0x0, 0x0, 0x4cc04}, 0x4040140) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) getsockopt$SO_BINDTODEVICE(r18, 0x1, 0x19, &(0x7f00000000c0), 0x10) 161.971667ms ago: executing program 3 (id=1960): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="917e8c4a9896b8862023000000b9c725dc840000a374ee6c62c20078"], &(0x7f0000000240)='syzkaller\x00', 0x2a5}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xaa800, 0x0) splice(r1, 0x0, r1, 0x0, 0xd, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x1000080) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000200)=""/51, 0x33}], 0x2}}], 0x1, 0x2001, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r8}, [@IFA_FLAGS={0x8, 0x8, 0x411}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r8, 0x0, 0x5, 0x7, 0x8, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x80, 0x40, 0x1, 0x8001}}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x43c, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001b1d00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0200c4f69dfccc02"], 0x48}}, 0x0) 257.468µs ago: executing program 4 (id=1961): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/32, 0x20}, {&(0x7f00000003c0)=""/175, 0xaf}, {&(0x7f0000000480)=""/40, 0x28}, {&(0x7f00000004c0)}], 0x6, 0x5, 0xab) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) (async) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) syz_emit_ethernet(0x14d, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "550dda", 0x117, 0x11, 0x1, @remote, @local, {[@routing={0x2f, 0x6, 0x2, 0x15, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1]}, @srh={0x2e, 0x2, 0x4, 0x1, 0xf8, 0x0, 0x120, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}]}], {0x4e23, 0x4e21, 0xc7, 0x0, @wg=@data={0x4, 0x200000, 0x3, "f360d509764d322b5c72b4eefb4cef154db5247e384b03d29e1680615e4d356d9aa5fa1e082f9829fd3016fe5f0701952c3aecb3d2c7a125c3bc90d055c8e0ca1c03e40e05feb91797e745563e8fdc6dbd0086e3f3e81e4951007085122f735862c0d66d4604f48fc327e3cd595f749d6c850887ae325fe3dfc0f44914ef9809e6d0dfcfb808a670c2ff30c718ac36aa06c78ba00d8bf5fb0b46d471c542c5e9098f2d23717d7430746947da4e7ce8"}}}}}}}, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x4, 0x12) 0s ago: executing program 2 (id=1962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000061104c00000000005f500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): port 2(bridge_slave_1) entered blocking state [ 86.461117][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.468873][ T5826] bridge_slave_1: entered allmulticast mode [ 86.476078][ T5826] bridge_slave_1: entered promiscuous mode [ 86.495057][ T5823] team0: Port device team_slave_1 added [ 86.502677][ T5824] team0: Port device team_slave_0 added [ 86.510980][ T5824] team0: Port device team_slave_1 added [ 86.517412][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.524684][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.550792][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.604689][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.611797][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.637954][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.665391][ T5822] team0: Port device team_slave_0 added [ 86.706558][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.719793][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.733494][ T5822] team0: Port device team_slave_1 added [ 86.755207][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.762642][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.783078][ T5827] Bluetooth: hci2: command tx timeout [ 86.790364][ T5831] Bluetooth: hci1: command tx timeout [ 86.796120][ T5833] Bluetooth: hci0: command tx timeout [ 86.801857][ T5844] Bluetooth: hci4: command tx timeout [ 86.816036][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.829045][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.836606][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.862812][ T5844] Bluetooth: hci3: command tx timeout [ 86.868565][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.941613][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.952692][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.978660][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.990238][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.997291][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.023280][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.079842][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.088511][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.114541][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.160528][ T5825] hsr_slave_0: entered promiscuous mode [ 87.167992][ T5825] hsr_slave_1: entered promiscuous mode [ 87.177778][ T5826] team0: Port device team_slave_0 added [ 87.185657][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.193690][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.222078][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.262559][ T5826] team0: Port device team_slave_1 added [ 87.334799][ T5823] hsr_slave_0: entered promiscuous mode [ 87.341642][ T5823] hsr_slave_1: entered promiscuous mode [ 87.349447][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 87.355333][ T5823] Cannot create hsr debugfs directory [ 87.388944][ T5824] hsr_slave_0: entered promiscuous mode [ 87.395252][ T5824] hsr_slave_1: entered promiscuous mode [ 87.401576][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 87.407318][ T5824] Cannot create hsr debugfs directory [ 87.424078][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.431176][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.457175][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.501945][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.509040][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.535295][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.551821][ T5822] hsr_slave_0: entered promiscuous mode [ 87.558108][ T5822] hsr_slave_1: entered promiscuous mode [ 87.564455][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 87.570230][ T5822] Cannot create hsr debugfs directory [ 87.767568][ T5826] hsr_slave_0: entered promiscuous mode [ 87.774795][ T5826] hsr_slave_1: entered promiscuous mode [ 87.781320][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 87.787059][ T5826] Cannot create hsr debugfs directory [ 88.187211][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.204296][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.212257][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.223205][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.231130][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.241298][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.257598][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.269127][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.333573][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.344343][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.352349][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.364202][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.372679][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.382876][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.391000][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.401797][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.488962][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.501695][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.515603][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.525868][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.544648][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.554815][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.575910][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.585926][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.678543][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.692771][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.702756][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.713309][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.721330][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.731322][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.739561][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.749280][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.833914][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.858685][ T5844] Bluetooth: hci0: command tx timeout [ 88.864547][ T5831] Bluetooth: hci4: command tx timeout [ 88.864839][ T5827] Bluetooth: hci1: command tx timeout [ 88.875743][ T5833] Bluetooth: hci2: command tx timeout [ 88.900083][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.906955][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.920304][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.936570][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.943469][ T5833] Bluetooth: hci3: command tx timeout [ 88.955000][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.963086][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.972766][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.981031][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.992498][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.010962][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.050222][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.057608][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.087406][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.111197][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.118434][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.153960][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.161298][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.213818][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.220973][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.261583][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.327981][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.377774][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.385013][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.405045][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.445461][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.452797][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.515883][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.536558][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.576126][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.583344][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.615024][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.622266][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.671050][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.696440][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.747701][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.754855][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.794688][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.801906][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.896428][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.009564][ T5825] veth0_vlan: entered promiscuous mode [ 90.084087][ T5825] veth1_vlan: entered promiscuous mode [ 90.205407][ T5826] veth0_vlan: entered promiscuous mode [ 90.221553][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.256253][ T5826] veth1_vlan: entered promiscuous mode [ 90.276667][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.316078][ T5825] veth0_macvtap: entered promiscuous mode [ 90.351023][ T5825] veth1_macvtap: entered promiscuous mode [ 90.416745][ T5826] veth0_macvtap: entered promiscuous mode [ 90.434393][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.450031][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.471028][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.480962][ T5826] veth1_macvtap: entered promiscuous mode [ 90.514434][ T253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.524483][ T253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.550317][ T253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.560976][ T253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.599996][ T5822] veth0_vlan: entered promiscuous mode [ 90.661931][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.677595][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.699744][ T5822] veth1_vlan: entered promiscuous mode [ 90.741535][ T253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.750367][ T253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.763506][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.774408][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.787071][ T253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.801266][ T253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.870414][ T5823] veth0_vlan: entered promiscuous mode [ 90.891677][ T253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.914115][ T253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.928089][ T5823] veth1_vlan: entered promiscuous mode [ 90.939207][ T5833] Bluetooth: hci2: command tx timeout [ 90.939270][ T5827] Bluetooth: hci1: command tx timeout [ 90.946371][ T5831] Bluetooth: hci4: command tx timeout [ 90.950762][ T5827] Bluetooth: hci0: command tx timeout [ 91.011523][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.027133][ T5833] Bluetooth: hci3: command tx timeout [ 91.045068][ T5822] veth0_macvtap: entered promiscuous mode [ 91.061153][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.071879][ T5824] veth0_vlan: entered promiscuous mode [ 91.093577][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.137481][ T5822] veth1_macvtap: entered promiscuous mode [ 91.196110][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.205989][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.214899][ T5824] veth1_vlan: entered promiscuous mode [ 91.224456][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.233889][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.246525][ T5823] veth0_macvtap: entered promiscuous mode [ 91.267734][ T5823] veth1_macvtap: entered promiscuous mode [ 91.294386][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.357905][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.443279][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.465934][ T5824] veth0_macvtap: entered promiscuous mode [ 91.481499][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.497199][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.509817][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.525131][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.546846][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.566987][ T5824] veth1_macvtap: entered promiscuous mode [ 91.594757][ T253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.615379][ T253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.641682][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.651657][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.726293][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.799911][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.832956][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.843558][ T796] cfg80211: failed to load regulatory.db [ 91.872778][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.885651][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.895377][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.108062][ T5962] Zero length message leads to an empty skb [ 93.018858][ T5833] Bluetooth: hci2: command tx timeout [ 93.025018][ T5831] Bluetooth: hci4: command tx timeout [ 93.025529][ T5844] Bluetooth: hci0: command tx timeout [ 93.030507][ T5831] Bluetooth: hci1: command tx timeout [ 93.099235][ T5844] Bluetooth: hci3: command tx timeout [ 94.460045][ T5950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.552497][ T253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.571099][ T253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.621136][ T253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.649239][ T253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.676707][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.686497][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.766563][ T253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.793984][ T253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.919050][ T253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.948392][ T253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.976537][ T253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.999988][ T253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.392877][ T5991] openvswitch: netlink: Missing valid actions attribute. [ 95.400464][ T5991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.989339][ T6014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'. [ 96.013951][ T6013] sctp: [Deprecated]: syz.1.17 (pid 6013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.013951][ T6013] Use struct sctp_sack_info instead [ 96.092549][ T5976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.403970][ T5957] IPVS: starting estimator thread 0... [ 96.422923][ T6038] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 96.431907][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22'. [ 96.454078][ T6040] netlink: 13 bytes leftover after parsing attributes in process `syz.4.22'. [ 96.523685][ T6033] tipc: Started in network mode [ 96.545078][ T6033] tipc: Node identity b6e4e9678359, cluster identity 4711 [ 96.568492][ T6041] IPVS: using max 27 ests per chain, 64800 per kthread [ 96.577947][ T6033] tipc: Enabled bearer , priority 0 [ 96.724304][ T6040] veth3: entered promiscuous mode [ 96.748965][ T6044] syzkaller0: MTU too low for tipc bearer [ 96.765296][ T6044] tipc: Disabling bearer [ 96.874034][ T6054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27'. [ 97.131663][ T6067] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 97.231541][ T6069] syzkaller0: entered promiscuous mode [ 97.263893][ T6069] syzkaller0: entered allmulticast mode [ 97.526152][ T6091] netlink: 'syz.2.32': attribute type 28 has an invalid length. [ 97.556658][ T6088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.574472][ T6091] netlink: 'syz.2.32': attribute type 3 has an invalid length. [ 97.617332][ T6091] netlink: 132 bytes leftover after parsing attributes in process `syz.2.32'. [ 97.785927][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 98.057303][ T6109] netlink: 'syz.1.39': attribute type 13 has an invalid length. [ 98.635866][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.678095][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.724041][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.756111][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.964248][ T6136] syzkaller0: entered promiscuous mode [ 98.994529][ T6136] syzkaller0: entered allmulticast mode [ 99.022891][ T6141] netlink: 64 bytes leftover after parsing attributes in process `syz.1.46'. [ 99.037160][ T6136] netlink: 'syz.2.45': attribute type 10 has an invalid length. [ 99.101794][ T6136] batman_adv: batadv0: Adding interface: netdevsim0 [ 99.147716][ T6136] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.197816][ T6151] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.216558][ T6136] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 99.296184][ T6155] syz.0.47 uses obsolete (PF_INET,SOCK_PACKET) [ 99.325821][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 99.747665][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 99.983470][ T6173] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 120.633530][ T6257] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 120.649136][ T6257] netlink: 96 bytes leftover after parsing attributes in process `syz.1.64'. [ 120.683870][ T6258] netlink: 56 bytes leftover after parsing attributes in process `syz.1.64'. [ 120.723965][ T6257] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 120.750861][ T6257] netlink: 'syz.1.64': attribute type 8 has an invalid length. [ 120.794723][ T6257] netlink: 606 bytes leftover after parsing attributes in process `syz.1.64'. [ 120.832728][ T6257] netlink: 1 bytes leftover after parsing attributes in process `syz.1.64'. [ 120.951949][ T6271] netlink: 'syz.0.68': attribute type 2 has an invalid length. [ 121.001553][ T6271] xt_connbytes: Forcing CT accounting to be enabled [ 121.433801][ T6296] netlink: 'syz.4.76': attribute type 1 has an invalid length. [ 121.457601][ T6296] netlink: 96 bytes leftover after parsing attributes in process `syz.4.76'. [ 121.495066][ T6296] netlink: 1 bytes leftover after parsing attributes in process `syz.4.76'. [ 121.533532][ T6296] netlink: 'syz.4.76': attribute type 1 has an invalid length. [ 121.547425][ T6306] openvswitch: netlink: Invalid VLAN frame [ 121.590262][ T6296] netlink: 'syz.4.76': attribute type 8 has an invalid length. [ 121.645099][ T6296] netlink: 606 bytes leftover after parsing attributes in process `syz.4.76'. [ 121.697464][ T6313] netlink: 'syz.0.82': attribute type 4 has an invalid length. [ 121.707398][ T6312] netlink: 'syz.2.81': attribute type 3 has an invalid length. [ 121.723094][ T6313] delete_channel: no stack [ 121.736280][ T6312] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.775162][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 121.872210][ T6315] netlink: 'syz.3.83': attribute type 29 has an invalid length. [ 121.922470][ T6315] netlink: 500 bytes leftover after parsing attributes in process `syz.3.83'. [ 121.961437][ T6322] netlink: 68 bytes leftover after parsing attributes in process `syz.2.86'. [ 122.024127][ T6322] veth3: entered promiscuous mode [ 122.035394][ T6322] veth3: entered allmulticast mode [ 122.116984][ T6326] IPVS: set_ctl: invalid protocol: 25117 172.20.20.170:20003 [ 122.205411][ T6325] team0: No ports can be present during mode change [ 122.437507][ T6339] tipc: Started in network mode [ 122.460604][ T6339] tipc: Node identity f28d6ee63c6b, cluster identity 4711 [ 122.491758][ T6339] tipc: Enabled bearer , priority 0 [ 122.509232][ T6335] syzkaller0: entered promiscuous mode [ 122.528934][ T6335] syzkaller0: entered allmulticast mode [ 122.593967][ T6335] tipc: Resetting bearer [ 122.610531][ T6332] tipc: Resetting bearer [ 122.647149][ T6332] tipc: Disabling bearer [ 122.722592][ T6350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.401934][ T6378] syzkaller1: entered promiscuous mode [ 123.407588][ T6378] syzkaller1: entered allmulticast mode [ 124.243339][ T6414] gtp0: entered promiscuous mode [ 124.277819][ T6414] gtp0: entered allmulticast mode [ 124.292189][ T6421] ipt_REJECT: TCP_RESET invalid for non-tcp [ 124.351181][ T6419] ªªªªª000: renamed from veth1_virt_wifi (while UP) [ 125.743227][ T6492] __nla_validate_parse: 6 callbacks suppressed [ 125.743247][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 125.814564][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.138'. [ 125.827954][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.138'. [ 125.974062][ T6501] netlink: 84 bytes leftover after parsing attributes in process `syz.2.142'. [ 126.646415][ T6536] Cannot find set identified by id 0 to match [ 126.693374][ T6535] Cannot find set identified by id 0 to match [ 126.700300][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 126.730958][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 126.984246][ T6556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.024074][ T6556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.159'. [ 127.351965][ T6570] ip6gretap0: entered promiscuous mode [ 127.368707][ T6570] ip6gretap0: entered allmulticast mode [ 127.522275][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 127.532563][ T6575] warning: `syz.1.165' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.281127][ T6611] validate_nla: 1 callbacks suppressed [ 128.281149][ T6611] netlink: 'syz.4.174': attribute type 21 has an invalid length. [ 128.301762][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 128.356385][ T6608] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 128.379185][ T6608] netlink: 280 bytes leftover after parsing attributes in process `syz.2.175'. [ 128.497527][ T6616] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 129.171886][ T6647] netlink: 'syz.3.192': attribute type 11 has an invalid length. [ 129.197306][ T6647] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 129.227840][ T6647] SET target dimension over the limit! [ 129.507106][ T6661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.525288][ T6661] netlink: 'syz.4.197': attribute type 21 has an invalid length. [ 129.767401][ T6673] Bluetooth: MGMT ver 1.23 [ 130.336281][ T6697] vcan1: entered promiscuous mode [ 130.348391][ T6697] vcan1: entered allmulticast mode [ 130.901519][ T6710] "syz.3.214" (6710) uses obsolete ecb(arc4) skcipher [ 131.281074][ T6733] syzkaller0: entered promiscuous mode [ 131.289981][ T6733] syzkaller0: entered allmulticast mode [ 131.552641][ T6751] netlink: 'syz.4.226': attribute type 1 has an invalid length. [ 131.579161][ T6758] nbd: socks must be embedded in a SOCK_ITEM attr [ 131.646899][ T6757] bond1: (slave gretap1): making interface the new active one [ 131.658623][ T6757] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 131.818664][ T5827] Bluetooth: hci2: command 0x0401 tx timeout [ 131.824828][ T5844] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 131.970458][ T6780] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 131.978399][ T6780] __nla_validate_parse: 7 callbacks suppressed [ 131.978415][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 132.001952][ T6780] netlink: 'syz.2.235': attribute type 2 has an invalid length. [ 132.026186][ T6780] netlink: 277 bytes leftover after parsing attributes in process `syz.2.235'. [ 132.362100][ T6801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.240'. [ 132.691564][ T6816] tunl0: Caught tx_queue_len zero misconfig [ 132.776340][ T6822] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 132.796851][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.803857][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.818303][ T6822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.248'. [ 132.840015][ T6825] netlink: 68 bytes leftover after parsing attributes in process `syz.3.250'. [ 132.854710][ T6822] dummy0: entered promiscuous mode [ 132.873473][ T6822] bridge0: port 3(dummy0) entered blocking state [ 132.888205][ T6822] bridge0: port 3(dummy0) entered disabled state [ 132.902984][ T6822] dummy0: entered allmulticast mode [ 132.921441][ T6822] bridge0: port 3(dummy0) entered blocking state [ 132.928617][ T6822] bridge0: port 3(dummy0) entered forwarding state [ 132.975675][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'. [ 133.111064][ T6829] syzkaller1: entered promiscuous mode [ 133.119405][ T6829] syzkaller1: entered allmulticast mode [ 133.160478][ T6836] netlink: 10 bytes leftover after parsing attributes in process `syz.1.251'. [ 133.295247][ T6842] tipc: Enabling of bearer rejected, failed to enable media [ 133.404003][ T6846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.253'. [ 133.426998][ T6846] openvswitch: netlink: Flow key attr not present in new flow. [ 133.458275][ T6848] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 133.797778][ T6876] Bluetooth: MGMT ver 1.23 [ 133.807752][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'. [ 133.889164][ T6876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.256'. [ 134.464763][ T6908] netlink: 'syz.0.259': attribute type 25 has an invalid length. [ 134.606272][ T6908] netlink: 'syz.0.259': attribute type 25 has an invalid length. [ 134.614399][ T1328] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 134.655269][ T1328] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.669596][ T6890] syzkaller0: entered promiscuous mode [ 134.677044][ T6890] syzkaller0: entered allmulticast mode [ 134.693232][ T1328] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.727830][ T1328] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.652700][ T6958] macvlan2: entered promiscuous mode [ 135.658188][ T6958] macvlan2: entered allmulticast mode [ 135.665970][ T6958] bond1: (slave macvlan2): Opening slave failed [ 135.977933][ T6967] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 136.066643][ T6974] netlink: 'syz.2.278': attribute type 8 has an invalid length. [ 136.461595][ T6995] netlink: 'syz.3.287': attribute type 10 has an invalid length. [ 136.731783][ T7015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.362534][ T7024] bond1 (unregistering): Released all slaves [ 137.388900][ T7027] __nla_validate_parse: 12 callbacks suppressed [ 137.388918][ T7027] netlink: 788 bytes leftover after parsing attributes in process `syz.0.295'. [ 137.561109][ T7031] syzkaller0: entered promiscuous mode [ 137.589881][ T7031] syzkaller0: entered allmulticast mode [ 137.631679][ T7031] netlink: 40 bytes leftover after parsing attributes in process `syz.3.297'. [ 137.764692][ T7040] openvswitch: netlink: Message has 8 unknown bytes. [ 137.774385][ T7040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.977609][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 138.009506][ T7050] netlink: 'syz.4.304': attribute type 25 has an invalid length. [ 138.036141][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 138.157937][ T7051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.158808][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'. [ 138.636458][ T7082] netlink: 72 bytes leftover after parsing attributes in process `syz.4.313'. [ 138.838172][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.319'. [ 138.847761][ T7097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.319'. [ 139.295748][ T7111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.324'. [ 140.332839][ T7130] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 140.360155][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 140.597278][ T7142] netlink: 'syz.2.332': attribute type 10 has an invalid length. [ 140.644999][ T7142] team0: Device ipvlan1 failed to register rx_handler [ 141.203099][ T7182] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 141.307972][ T7182] bond2: entered promiscuous mode [ 141.343091][ T7182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.390368][ T7187] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 141.429125][ T7187] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 141.470937][ T7187] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 142.618605][ T5844] Bluetooth: hci4: command tx timeout [ 144.082958][ T7172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.545619][ T7230] __nla_validate_parse: 2 callbacks suppressed [ 144.545639][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 144.590789][ T7217] pim6reg: entered allmulticast mode [ 144.952979][ T7256] netlink: 'syz.1.367': attribute type 8 has an invalid length. [ 144.979155][ T7256] netlink: 'syz.1.367': attribute type 3 has an invalid length. [ 145.283900][ T7272] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.507338][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'. [ 146.785326][ T7289] openvswitch: netlink: Flow actions attr not present in new flow. [ 147.010335][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'. [ 147.072249][ T30] audit: type=1107 audit(1776502466.252:2): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 147.214144][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.386'. [ 147.399785][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 147.599110][ T7328] netlink: 'syz.0.390': attribute type 13 has an invalid length. [ 147.655103][ T7328] gretap0: refused to change device tx_queue_len [ 147.678601][ T7328] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 147.854611][ T7331] x_tables: unsorted underflow at hook 2 [ 147.884575][ T7338] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003 [ 147.895473][ T7331] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.389'. [ 148.066765][ T7347] veth0: Caught tx_queue_len zero misconfig [ 148.375351][ T7354] geneve2: entered promiscuous mode [ 148.399013][ T1328] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 53730 - 0 [ 148.402499][ T7358] sctp: [Deprecated]: syz.1.398 (pid 7358) Use of int in max_burst socket option. [ 148.402499][ T7358] Use struct sctp_assoc_value instead [ 148.418546][ T1328] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 53730 - 0 [ 148.445578][ T1328] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 53730 - 0 [ 148.454996][ T1328] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 53730 - 0 [ 148.467693][ T7361] netlink: 44 bytes leftover after parsing attributes in process `syz.3.396'. [ 149.105597][ T7376] netlink: 'syz.0.403': attribute type 13 has an invalid length. [ 149.114254][ T7376] veth0_macvtap: left promiscuous mode [ 149.120112][ T7376] macvtap0: entered allmulticast mode [ 149.130560][ T7376] macvtap0: refused to change device tx_queue_len [ 149.150053][ T7376] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 149.955018][ T7299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.223396][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.407'. [ 150.235952][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.407'. [ 150.386449][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 150.416716][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'. [ 150.437299][ T7395] netlink: 64 bytes leftover after parsing attributes in process `syz.2.410'. [ 150.513041][ T7411] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 150.537270][ T7411] x_tables: duplicate underflow at hook 1 [ 150.730161][ T7417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.414'. [ 150.769264][ T7417] netlink: 92 bytes leftover after parsing attributes in process `syz.2.414'. [ 150.816968][ T7417] xt_HMARK: spi-set and port-set can't be combined [ 151.125157][ T7436] netlink: 48 bytes leftover after parsing attributes in process `syz.1.420'. [ 151.384354][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 151.394258][ T7452] openvswitch: netlink: Duplicate or invalid key (type 0). [ 151.412543][ T7452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.539753][ T7462] veth0: entered promiscuous mode [ 151.645050][ T7464] veth0: left promiscuous mode [ 152.180021][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 152.189793][ T7496] netlink: 'syz.1.436': attribute type 5 has an invalid length. [ 152.215905][ T7496] geneve2: entered promiscuous mode [ 152.226257][ T7496] geneve2: entered allmulticast mode [ 152.236291][ T1328] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 152.245371][ T1328] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 152.265151][ T1328] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 152.284028][ T1328] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 152.420193][ T6875] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.441149][ T6875] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.467010][ T6875] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.489869][ T6875] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.586298][ T7510] openvswitch: netlink: EtherType 50a is less than min 600 [ 152.944286][ T7513] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 153.241089][ T7540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.354643][ T7553] syzkaller0: entered promiscuous mode [ 153.374727][ T7553] syzkaller0: entered allmulticast mode [ 153.443008][ T7558] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 153.466113][ T7558] bond0: (slave lo): Error: Device can not be enslaved while up [ 153.759134][ T7570] ip6gre1: entered promiscuous mode [ 153.780580][ T7570] ip6gre1: entered allmulticast mode [ 153.933452][ T7580] IPv4: Oversized IP packet from 127.202.26.0 [ 154.497949][ T7565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.773844][ T7605] vlan2: entered promiscuous mode [ 154.784540][ T7605] geneve1: entered promiscuous mode [ 154.790974][ T7605] vlan2: entered allmulticast mode [ 154.796287][ T7605] geneve1: entered allmulticast mode [ 154.803828][ T7607] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 154.887213][ T7607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.002539][ T7615] bond1: (slave veth3): Enslaving as an active interface with a down link [ 155.056195][ T7607] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 155.063424][ T7607] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 155.364464][ T7640] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 155.375034][ T7642] veth0_to_bridge: entered promiscuous mode [ 155.447089][ T7647] __nla_validate_parse: 12 callbacks suppressed [ 155.447109][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 155.473728][ T7640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.482303][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 155.519876][ T7641] veth0_to_bridge: left promiscuous mode [ 155.835975][ T7663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.487'. [ 155.918546][ T7667] netlink: 40 bytes leftover after parsing attributes in process `syz.4.488'. [ 156.318742][ T7687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.497'. [ 156.720852][ T7707] syzkaller0: entered promiscuous mode [ 156.727066][ T7707] syzkaller0: entered allmulticast mode [ 158.127708][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'. [ 158.294585][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 158.860379][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 159.383168][ T7793] bridge2: entered promiscuous mode [ 159.399688][ T7793] bridge2: entered allmulticast mode [ 159.453074][ T7793] team0: Port device bridge2 added [ 159.655688][ T7804] netlink: 'syz.4.531': attribute type 9 has an invalid length. [ 159.756363][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 159.786547][ T7812] netlink: 'syz.1.534': attribute type 58 has an invalid length. [ 159.806157][ T7812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.534'. [ 160.276397][ T7833] x_tables: duplicate entry at hook 1 [ 160.448818][ T7841] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 160.448818][ T7841] Please contact the netfilter-devel mailing list or update your nftables rules. [ 160.469248][ T7844] xt_SECMARK: invalid mode: 9 [ 160.591340][ T7841] netlink: 'syz.1.543': attribute type 5 has an invalid length. [ 161.303910][ T7888] __nla_validate_parse: 1 callbacks suppressed [ 161.303929][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 161.852877][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.557'. [ 161.885510][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'. [ 162.240534][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 162.261954][ T7937] netlink: 'syz.2.562': attribute type 4 has an invalid length. [ 162.500468][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 162.836096][ T7955] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.076473][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 163.318473][ T7980] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 163.460723][ T7987] netlink: 60 bytes leftover after parsing attributes in process `syz.1.578'. [ 163.675896][ T8007] xt_hashlimit: size too large, truncated to 1048576 [ 163.840463][ T8005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.582'. [ 163.884105][ T7970] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 164.161654][ T8029] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.589'. [ 164.209708][ T8029] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 164.443093][ T8034] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 164.578126][ T8034] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 164.674499][ T8054] netlink: 124 bytes leftover after parsing attributes in process `syz.2.594'. [ 165.261766][ T5844] Bluetooth: hci1: command 0x0401 tx timeout [ 165.349825][ T8088] netlink: 'syz.0.604': attribute type 3 has an invalid length. [ 165.600223][ T8097] ip6erspan0: entered allmulticast mode [ 165.716686][ T8113] netlink: 'syz.2.609': attribute type 11 has an invalid length. [ 165.933098][ T8124] veth1_to_hsr: entered promiscuous mode [ 165.945869][ T8124] macsec1: entered promiscuous mode [ 165.967365][ T8124] veth1_to_hsr: left promiscuous mode [ 166.234851][ T8135] netlink: 'syz.2.619': attribute type 2 has an invalid length. [ 166.259717][ T8135] netlink: 'syz.2.619': attribute type 1 has an invalid length. [ 166.327832][ T8139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.637299][ T8158] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 166.637753][ T8156] xt_hashlimit: size too large, truncated to 1048576 [ 166.654752][ T8164] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20000 [ 166.777196][ T8164] __nla_validate_parse: 9 callbacks suppressed [ 166.777218][ T8164] netlink: 183328 bytes leftover after parsing attributes in process `syz.4.626'. [ 166.868363][ T8164] trusted_key: syz.4.626 sent an empty control message without MSG_MORE. [ 166.990679][ T8174] netlink: 256 bytes leftover after parsing attributes in process `syz.1.628'. [ 167.259753][ T8183] xt_l2tp: v2 doesn't support IP mode [ 167.266537][ T8185] Cannot find add_set index 46338 as target [ 167.334150][ T8184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 167.350242][ T8186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 167.693724][ T9] IPVS: starting estimator thread 0... [ 167.774117][ T8219] netlink: 14 bytes leftover after parsing attributes in process `syz.3.642'. [ 167.798396][ T8215] IPVS: using max 29 ests per chain, 69600 per kthread [ 167.836456][ T8223] sctp: [Deprecated]: syz.4.641 (pid 8223) Use of int in maxseg socket option. [ 167.836456][ T8223] Use struct sctp_assoc_value instead [ 167.881516][ T8223] x_tables: duplicate underflow at hook 1 [ 167.905697][ T8217] veth5: entered allmulticast mode [ 167.937083][ T8218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.952007][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 167.990327][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.646'. [ 168.014448][ T8229] netlink: 'syz.1.646': attribute type 7 has an invalid length. [ 168.023048][ T8229] netlink: 'syz.1.646': attribute type 8 has an invalid length. [ 168.033115][ T8227] netlink: 84 bytes leftover after parsing attributes in process `syz.2.644'. [ 168.047022][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 168.147468][ T8240] netlink: 'syz.4.647': attribute type 1 has an invalid length. [ 168.269826][ T8240] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.294943][ T8246] netlink: 'syz.2.648': attribute type 9 has an invalid length. [ 168.515825][ T8261] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 168.529612][ T8259] netlink: 'syz.1.652': attribute type 2 has an invalid length. [ 168.587010][ T8263] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 168.644873][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 168.678001][ T8268] tipc: Started in network mode [ 168.694152][ T8268] tipc: Node identity , cluster identity 4711 [ 168.732230][ T8268] netlink: 'syz.3.654': attribute type 2 has an invalid length. [ 168.821661][ T8273] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.952018][ T8278] openvswitch: netlink: Flow actions attr not present in new flow. [ 169.112625][ T8282] bridge3: port 1(vlan2) entered blocking state [ 169.147999][ T8282] bridge3: port 1(vlan2) entered disabled state [ 169.175302][ T8282] vlan2: entered allmulticast mode [ 169.190110][ T8282] bridge3: entered allmulticast mode [ 169.207346][ T8282] vlan2: left allmulticast mode [ 169.218904][ T8282] bridge3: left allmulticast mode [ 169.225725][ T8295] Unknown options in mask b7f2 [ 169.494598][ T8302] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 169.786828][ T8320] sock: sock_timestamping_bind_phc: sock not bind to device [ 170.034467][ T8340] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 170.144058][ T8349] gretap2: entered promiscuous mode [ 170.184498][ T8349] batman_adv: batadv0: Adding interface: gretap2 [ 170.252175][ T8349] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.332431][ T8349] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 170.596225][ T8374] openvswitch: netlink: EtherType 0 is less than min 600 [ 171.100347][ T8410] xt_hashlimit: size too large, truncated to 1048576 [ 171.721894][ T8440] openvswitch: netlink: Invalid VLAN frame [ 172.506400][ T8447] __nla_validate_parse: 13 callbacks suppressed [ 172.506431][ T8447] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.706'. [ 172.522468][ T8447] openvswitch: netlink: Message has 5 unknown bytes. [ 172.535505][ T8444] SET target dimension over the limit! [ 173.650756][ T8376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.665133][ T8383] netlink: 76 bytes leftover after parsing attributes in process `syz.4.692'. [ 173.674328][ T8383] netlink: 320 bytes leftover after parsing attributes in process `syz.4.692'. [ 173.692147][ T8387] netlink: 120 bytes leftover after parsing attributes in process `syz.2.689'. [ 173.714592][ T8387] netlink: 'syz.2.689': attribute type 1 has an invalid length. [ 173.723948][ T8387] netlink: 64 bytes leftover after parsing attributes in process `syz.2.689'. [ 173.961602][ T8461] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 174.153522][ T8461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.212486][ T8470] vlan2: entered promiscuous mode [ 174.221592][ T8470] bond1: entered promiscuous mode [ 174.226897][ T8470] vlan2: entered allmulticast mode [ 174.233816][ T8470] bond1: entered allmulticast mode [ 174.283901][ T8479] xt_l2tp: v2 doesn't support IP mode [ 174.566500][ T8488] x_tables: duplicate underflow at hook 1 [ 174.618807][ T8488] netlink: 32 bytes leftover after parsing attributes in process `syz.4.718'. [ 174.676979][ T8496] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.722'. [ 174.763813][ T8503] netlink: 'syz.4.724': attribute type 1 has an invalid length. [ 174.843760][ T8504] openvswitch: netlink: Missing valid actions attribute. [ 174.852560][ T8504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.881738][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.725'. [ 174.958117][ T8506] x_tables: duplicate underflow at hook 2 [ 175.344236][ T8542] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 175.447202][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 175.486942][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 175.496720][ T8548] netlink: 'syz.4.736': attribute type 15 has an invalid length. [ 175.514565][ T8546] bond2: (slave gretap3): making interface the new active one [ 175.534515][ T8546] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 175.583952][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 175.609824][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 175.629604][ T8548] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 175.642943][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 175.670263][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 176.067994][ T8564] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 176.311198][ T8590] syzkaller1: entered promiscuous mode [ 176.337309][ T8590] syzkaller1: entered allmulticast mode [ 176.355570][ T8596] netlink: 'syz.1.749': attribute type 8 has an invalid length. [ 176.391352][ T8596] bridge0: port 3(dummy0) entered disabled state [ 176.398812][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.406957][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.416804][ T8598] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 176.500201][ T8597] ip6tnl0: Caught tx_queue_len zero misconfig [ 176.682956][ T8606] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 176.719600][ T8606] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 176.773529][ T8606] bond4: (slave ip6gre2): making interface the new active one [ 176.804450][ T8606] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 176.890752][ T8623] bond3 (unregistering): Released all slaves [ 177.068551][ T8630] tipc: Enabled bearer , priority 0 [ 177.259980][ T8630] syzkaller0: entered promiscuous mode [ 177.265735][ T8630] syzkaller0: entered allmulticast mode [ 177.272775][ T8630] tipc: Resetting bearer [ 177.313164][ T8641] team0: Device gtp0 is up. Set it down before adding it as a team port [ 177.385377][ T8629] tipc: Resetting bearer [ 178.700541][ T8629] tipc: Disabling bearer [ 178.806212][ T8651] tipc: Enabling of bearer rejected, media not registered [ 178.815702][ T5837] tipc: Node number set to 3471208166 [ 178.978162][ T8672] __nla_validate_parse: 7 callbacks suppressed [ 179.001180][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 179.037805][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'. [ 179.170399][ T8683] xt_l2tp: v2 doesn't support IP mode [ 179.193148][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.774'. [ 179.510417][ T24] IPVS: starting estimator thread 0... [ 179.608717][ T8698] IPVS: using max 28 ests per chain, 67200 per kthread [ 179.615958][ T8704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.779'. [ 180.026429][ T8716] netlink: 'syz.4.782': attribute type 1 has an invalid length. [ 180.050501][ T8716] netlink: 'syz.4.782': attribute type 4 has an invalid length. [ 180.071526][ T8716] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.782'. [ 180.575086][ T8739] netlink: 51 bytes leftover after parsing attributes in process `syz.1.787'. [ 180.684165][ T8744] netlink: 'syz.3.790': attribute type 1 has an invalid length. [ 180.879917][ T8759] delete_channel: no stack [ 180.886139][ T8759] sctp: [Deprecated]: syz.2.793 (pid 8759) Use of int in maxseg socket option. [ 180.886139][ T8759] Use struct sctp_assoc_value instead [ 180.945303][ T8763] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 180.991076][ T8753] macvlan2: entered promiscuous mode [ 180.999288][ T8753] macvlan2: entered allmulticast mode [ 181.021500][ T8753] bond5: entered promiscuous mode [ 181.038789][ T8753] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.050054][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 181.061474][ T8753] bond5: left promiscuous mode [ 181.086229][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056092000: rx timeout, send abort [ 181.107340][ T8768] wg1: entered promiscuous mode [ 181.118452][ T8768] wg1: entered allmulticast mode [ 181.434434][ T8784] netlink: 256 bytes leftover after parsing attributes in process `syz.2.802'. [ 181.586597][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056093800: rx timeout, send abort [ 181.597491][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056092000: abort rx timeout. Force session deactivation [ 182.094969][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056093800: abort rx timeout. Force session deactivation [ 182.486116][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 182.893663][ T8865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.826'. [ 182.943785][ T8863] netlink: 'syz.2.826': attribute type 8 has an invalid length. [ 182.971574][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.979284][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.717103][ T8897] netlink: 'syz.2.835': attribute type 1 has an invalid length. [ 183.734729][ T8895] netlink: 'syz.2.835': attribute type 1 has an invalid length. [ 183.877821][ T8904] veth1_macvtap: left promiscuous mode [ 183.884209][ T8904] macsec0: entered promiscuous mode [ 183.889920][ T8904] macsec0: entered allmulticast mode [ 183.919909][ T8904] veth1_macvtap: entered promiscuous mode [ 183.939804][ T8904] veth1_macvtap: entered allmulticast mode [ 183.969484][ T8904] macsec0: left promiscuous mode [ 183.995100][ T8904] macsec0: left allmulticast mode [ 184.013673][ T8907] netlink: 'syz.4.838': attribute type 16 has an invalid length. [ 184.028179][ T8904] veth1_macvtap: left allmulticast mode [ 184.038401][ T8907] netlink: 'syz.4.838': attribute type 17 has an invalid length. [ 184.133325][ T8906] bridge0: port 1(0¾x9ÿ) entered disabled state [ 184.164712][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.208650][ T8920] __nla_validate_parse: 10 callbacks suppressed [ 184.208681][ T8920] netlink: 88 bytes leftover after parsing attributes in process `syz.3.841'. [ 184.297399][ T8907] ip6gretap0: left promiscuous mode [ 184.307440][ T8907] ip6gretap0: left allmulticast mode [ 184.324332][ T8907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.341787][ T8923] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 184.493288][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'. [ 184.541305][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.845'. [ 184.553205][ T8927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.843'. [ 184.636029][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.845'. [ 185.071230][ T8956] ip6t_srh: unknown srh match flags 5F28 [ 185.391811][ T8968] netlink: 'syz.1.858': attribute type 4 has an invalid length. [ 185.445182][ T8975] netlink: 'syz.1.858': attribute type 4 has an invalid length. [ 185.541122][ T8976] netlink: 308 bytes leftover after parsing attributes in process `syz.3.861'. [ 186.130809][ T9002] netlink: 36 bytes leftover after parsing attributes in process `syz.4.866'. [ 186.399623][ T9011] netlink: 'syz.4.868': attribute type 1 has an invalid length. [ 186.441838][ T9012] netlink: 'syz.4.868': attribute type 1 has an invalid length. [ 186.462886][ T9011] team0: Cannot enslave team device to itself [ 186.777619][ T9024] vlan2: entered promiscuous mode [ 186.850551][ T9024] bridge0: entered promiscuous mode [ 186.949786][ T9025] vlan2: entered promiscuous mode [ 187.087627][ T9041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.876'. [ 187.150624][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 187.278850][ T9047] syzkaller1: entered promiscuous mode [ 187.308884][ T9047] syzkaller1: entered allmulticast mode [ 187.448440][ T9056] ipvlan2: entered promiscuous mode [ 187.535209][ T9054] òÿ: entered promiscuous mode [ 187.770983][ T9071] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 187.778728][ T9071] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 188.054506][ T9083] netlink: 'syz.2.888': attribute type 2 has an invalid length. [ 188.084242][ T9083] netlink: 'syz.2.888': attribute type 2 has an invalid length. [ 188.580372][ T9103] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.714994][ T9106] netlink: 'syz.2.894': attribute type 2 has an invalid length. [ 188.739508][ T9106] netlink: 'syz.2.894': attribute type 30 has an invalid length. [ 188.757916][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'. [ 188.790588][ T9106] netlink: 'syz.2.894': attribute type 30 has an invalid length. [ 189.114670][ T9122] netlink: 'syz.4.899': attribute type 1 has an invalid length. [ 189.352840][ T9122] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.378020][ T9124] vlan3: entered promiscuous mode [ 189.384397][ T9124] bond5: entered promiscuous mode [ 189.395881][ T9124] vlan3: entered allmulticast mode [ 189.418837][ T9124] bond5: entered allmulticast mode [ 189.514441][ T9140] tipc: Started in network mode [ 189.543941][ T9140] tipc: Node identity e2c8310d6b4e, cluster identity 4711 [ 189.581405][ T9140] tipc: Enabled bearer , priority 0 [ 189.673258][ T9141] tipc: Disabling bearer [ 189.827523][ T9156] IPVS: length: 8 != 1152 [ 189.928829][ T9148] IPVS: length: 239 != 24 [ 189.972462][ T9149] virt_wifi0: entered promiscuous mode [ 189.998451][ T9149] virt_wifi0: entered allmulticast mode [ 190.205377][ T9171] __nla_validate_parse: 1 callbacks suppressed [ 190.207674][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 190.453934][ T9182] IPv6: NLM_F_REPLACE set, but no existing node found! [ 190.490725][ T9182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.914'. [ 190.542993][ T9182] sctp: [Deprecated]: syz.2.914 (pid 9182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.542993][ T9182] Use struct sctp_sack_info instead [ 190.642346][ T9192] netlink: 92 bytes leftover after parsing attributes in process `syz.1.918'. [ 190.671249][ T9192] vcan0: tx address claim with dlc 1 [ 190.688139][ T9191] pimreg: entered allmulticast mode [ 190.827120][ T9198] openvswitch: netlink: Key type 343 is out of range max 32 [ 191.133008][ T9212] tipc: Started in network mode [ 191.145041][ T9212] tipc: Node identity ac14140f, cluster identity 4711 [ 191.173387][ T9212] tipc: New replicast peer: 255.255.255.255 [ 191.197838][ T9212] tipc: Enabled bearer , priority 10 [ 191.418965][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 191.484813][ T9219] tipc: Cannot configure node identity twice [ 191.718725][ T9236] netlink: 'syz.3.929': attribute type 1 has an invalid length. [ 191.935084][ T9243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.986758][ T9236] bond6: entered promiscuous mode [ 192.013941][ T9236] 8021q: adding VLAN 0 to HW filter on device bond6 [ 192.044931][ T9238] bond6: (slave bridge4): making interface the new active one [ 192.053328][ T9238] bridge4: entered promiscuous mode [ 192.062617][ T9238] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 192.101834][ T9239] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 192.154156][ T9239] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 192.334660][ T9] tipc: Node number set to 2886997007 [ 192.407960][ T9267] Cannot find del_set index 1 as target [ 192.433821][ T9270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.938'. [ 192.551637][ T9276] netlink: 'syz.0.939': attribute type 4 has an invalid length. [ 192.585898][ T9276] netlink: 152 bytes leftover after parsing attributes in process `syz.0.939'. [ 192.624370][ T9276] .`: renamed from bond0 (while UP) [ 192.655767][ T9279] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 192.665533][ T9281] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 193.080879][ T9301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.947'. [ 193.140333][ T9307] netlink: 'syz.1.948': attribute type 1 has an invalid length. [ 193.159072][ T9307] netlink: 'syz.1.948': attribute type 7 has an invalid length. [ 193.179820][ T9307] netlink: 'syz.1.948': attribute type 8 has an invalid length. [ 193.193138][ T9307] netlink: 132 bytes leftover after parsing attributes in process `syz.1.948'. [ 194.225252][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.233056][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.873160][ T9242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.139524][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 195.477082][ T9338] netlink: 7 bytes leftover after parsing attributes in process `syz.3.956'. [ 195.694379][ T9352] FAULT_INJECTION: forcing a failure. [ 195.694379][ T9352] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 195.713801][ T9352] CPU: 1 UID: 0 PID: 9352 Comm: syz.1.960 Not tainted syzkaller #0 PREEMPT(full) [ 195.713830][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 195.713850][ T9352] Call Trace: [ 195.713859][ T9352] [ 195.713867][ T9352] dump_stack_lvl+0xe8/0x150 [ 195.713905][ T9352] should_fail_ex+0x412/0x560 [ 195.713941][ T9352] _copy_from_user+0x2d/0xb0 [ 195.713964][ T9352] ___sys_sendmsg+0x1c6/0x360 [ 195.713996][ T9352] ? __lock_acquire+0x6b5/0x2cf0 [ 195.714029][ T9352] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.714099][ T9352] ? __fget_files+0x2a/0x420 [ 195.714126][ T9352] ? __fget_files+0x3a0/0x420 [ 195.714164][ T9352] __x64_sys_sendmsg+0x1bd/0x2a0 [ 195.714201][ T9352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.714244][ T9352] ? __pfx_ksys_write+0x10/0x10 [ 195.714285][ T9352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.714309][ T9352] do_syscall_64+0x15f/0xf80 [ 195.714335][ T9352] ? trace_irq_disable+0x3b/0x140 [ 195.714359][ T9352] ? clear_bhb_loop+0x40/0x90 [ 195.714386][ T9352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.714407][ T9352] RIP: 0033:0x7f9e7239c819 [ 195.714434][ T9352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.714451][ T9352] RSP: 002b:00007f9e732ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.714482][ T9352] RAX: ffffffffffffffda RBX: 00007f9e72615fa0 RCX: 00007f9e7239c819 [ 195.714509][ T9352] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 195.714523][ T9352] RBP: 00007f9e732ca090 R08: 0000000000000000 R09: 0000000000000000 [ 195.714535][ T9352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.714548][ T9352] R13: 00007f9e72616038 R14: 00007f9e72615fa0 R15: 00007fff81de1a38 [ 195.714580][ T9352] [ 196.208174][ T9367] syzkaller0: entered promiscuous mode [ 196.225755][ T9367] syzkaller0: entered allmulticast mode [ 196.284188][ T9367] netlink: 44 bytes leftover after parsing attributes in process `syz.4.964'. [ 196.314717][ T9371] syzkaller1: entered promiscuous mode [ 196.320512][ T9371] syzkaller1: entered allmulticast mode [ 196.465874][ T9374] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 196.545894][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 196.793190][ T9393] IPv6: Can't replace route, no match found [ 196.800491][ T9393] IPv6: Can't replace route, no match found [ 196.811959][ T9393] IPv6: Can't replace route, no match found [ 196.819014][ T9393] IPv6: Can't replace route, no match found [ 196.868791][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.973'. [ 196.895838][ T9399] bond0: entered promiscuous mode [ 196.901935][ T9399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.115531][ T9408] FAULT_INJECTION: forcing a failure. [ 197.115531][ T9408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.129124][ T9408] CPU: 0 UID: 0 PID: 9408 Comm: syz.0.976 Not tainted syzkaller #0 PREEMPT(full) [ 197.129151][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 197.129163][ T9408] Call Trace: [ 197.129171][ T9408] [ 197.129179][ T9408] dump_stack_lvl+0xe8/0x150 [ 197.129215][ T9408] should_fail_ex+0x412/0x560 [ 197.129248][ T9408] _copy_from_user+0x2d/0xb0 [ 197.129270][ T9408] __copy_msghdr+0x3c5/0x5b0 [ 197.129306][ T9408] ___sys_sendmsg+0x213/0x360 [ 197.129345][ T9408] ? __lock_acquire+0x6b5/0x2cf0 [ 197.129377][ T9408] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.129445][ T9408] ? __fget_files+0x2a/0x420 [ 197.129471][ T9408] ? __fget_files+0x3a0/0x420 [ 197.129507][ T9408] __x64_sys_sendmsg+0x1bd/0x2a0 [ 197.129542][ T9408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.129583][ T9408] ? __pfx_ksys_write+0x10/0x10 [ 197.129623][ T9408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.129664][ T9408] do_syscall_64+0x15f/0xf80 [ 197.129689][ T9408] ? trace_irq_disable+0x3b/0x140 [ 197.129713][ T9408] ? clear_bhb_loop+0x40/0x90 [ 197.129739][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.129764][ T9408] RIP: 0033:0x7f1e20f9c819 [ 197.129784][ T9408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.129801][ T9408] RSP: 002b:00007f1e21dfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.129823][ T9408] RAX: ffffffffffffffda RBX: 00007f1e21215fa0 RCX: 00007f1e20f9c819 [ 197.129839][ T9408] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 197.129852][ T9408] RBP: 00007f1e21dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 197.129864][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.129876][ T9408] R13: 00007f1e21216038 R14: 00007f1e21215fa0 R15: 00007fff5ccd81b8 [ 197.129909][ T9408] [ 197.686216][ T9418] Cannot find map_set index 65533 as target [ 197.782028][ T9425] openvswitch: netlink: Message has -2 unknown bytes. [ 198.542014][ T9344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.951495][ T9438] bond3: Removing last ns target with arp_interval on [ 198.974946][ T9451] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 199.178102][ T9465] syzkaller1: entered promiscuous mode [ 199.191923][ T9465] syzkaller1: entered allmulticast mode [ 199.217188][ T9460] syzkaller0: entered promiscuous mode [ 199.239807][ T9460] syzkaller0: entered allmulticast mode [ 199.283556][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 199.361438][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'. [ 199.521601][ T9487] netlink: 256 bytes leftover after parsing attributes in process `syz.0.998'. [ 199.549658][ T9486] syzkaller0: entered promiscuous mode [ 199.556438][ T9486] syzkaller0: entered allmulticast mode [ 199.683062][ T9494] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1001'. [ 199.710367][ T9494] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1001'. [ 199.838727][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 200.047793][ T9516] netlink: 'syz.3.1007': attribute type 24 has an invalid length. [ 200.622070][ T9548] syzkaller0: entered promiscuous mode [ 200.629719][ T9540] __nla_validate_parse: 5 callbacks suppressed [ 200.629738][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 200.645522][ T9548] syzkaller0: entered allmulticast mode [ 200.653066][ T9540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.726585][ T9540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.806397][ T9556] xt_hashlimit: size too large, truncated to 1048576 [ 200.912371][ T9562] openvswitch: netlink: IP tunnel dst address not specified [ 200.967317][ T9566] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1022'. [ 201.067026][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'. [ 201.096065][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'. [ 201.099515][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 201.117554][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'. [ 201.292005][ T9576] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 201.304291][ T9576] bond4 (unregistering): Released all slaves [ 203.511735][ T9542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.680779][ T9590] sctp: [Deprecated]: syz.0.1027 (pid 9590) Use of int in max_burst socket option. [ 203.680779][ T9590] Use struct sctp_assoc_value instead [ 203.763922][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'. [ 203.816484][ T9593] bond7 (unregistering): Released all slaves [ 203.841157][ T9607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1031'. [ 203.937660][ T9606] gretap0: entered promiscuous mode [ 204.111547][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1033'. [ 204.128616][ T9620] netlink: 'syz.4.1034': attribute type 30 has an invalid length. [ 204.145915][ T9619] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 204.185338][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1035'. [ 204.321391][ T9619] bond7: entered promiscuous mode [ 204.323436][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 204.327727][ T9619] 8021q: adding VLAN 0 to HW filter on device bond7 [ 204.377087][ T9625] bond7: (slave bridge5): making interface the new active one [ 204.385364][ T9625] bridge5: entered promiscuous mode [ 204.392024][ T9625] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 204.407055][ T9639] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:16 [ 204.421883][ T9631] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 204.434534][ T9631] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 204.493641][ T9636] tun0: tun_chr_ioctl cmd 1074025675 [ 204.508431][ T9636] tun0: persist disabled [ 204.629449][ T9634] hsr_slave_1 (unregistering): left promiscuous mode [ 204.913911][ T9660] bond3: (slave bond_slave_1): Device is not our slave [ 204.948766][ T9660] bond3: option active_slave: invalid value (bond_slave_1) [ 204.968510][ T9660] bond3 (unregistering): Released all slaves [ 205.538073][ T9695] IPVS: sync thread started: state = MASTER, mcast_ifn = xfrm0, syncid = 4, id = 0 [ 205.580805][ T9694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.747511][ T9703] netlink: 'syz.1.1056': attribute type 5 has an invalid length. [ 205.755760][ T9703] netlink: 'syz.1.1056': attribute type 4 has an invalid length. [ 205.767784][ T9703] __nla_validate_parse: 1 callbacks suppressed [ 205.767798][ T9703] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1056'. [ 205.952360][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'. [ 206.011438][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1062'. [ 206.120645][ T9722] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 206.253106][ T9733] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1063'. [ 206.341079][ T9693] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 206.364411][ T9693] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 206.507680][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 206.635223][ T9746] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1073'. [ 206.874598][ T9758] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.223231][ T9780] netlink: 'syz.0.1081': attribute type 9 has an invalid length. [ 207.268713][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'. [ 207.601369][ T9802] 8021q: VLANs not supported on ip_vti0 [ 207.849361][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1092'. [ 207.908748][ T9816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1092'. [ 208.120246][ T9831] xt_hashlimit: size too large, truncated to 1048576 [ 208.139713][ T9834] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 208.185842][ T9834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1095'. [ 208.225707][ T9832] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 208.273770][ T9838] bridge0: port 1(0¾x9ÿ) entered disabled state [ 208.345325][ T9838] ¾x9ÿ (unregistering): left allmulticast mode [ 208.374441][ T9838] ¾x9ÿ (unregistering): left promiscuous mode [ 208.392604][ T9838] bridge0: port 1(0¾x9ÿ) entered disabled state [ 209.409826][ T9889] can: request_module (can-proto-0) failed. [ 209.449877][ T9898] netlink: 'syz.3.1113': attribute type 39 has an invalid length. [ 211.157417][ T9972] __nla_validate_parse: 7 callbacks suppressed [ 211.157437][ T9972] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1142'. [ 211.220630][ T9977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.276386][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 211.314732][ T9972] : entered promiscuous mode [ 211.392953][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1146'. [ 211.488484][ T9988] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1147'. [ 211.551944][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 211.575002][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 211.586951][ T9996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.647150][ T9996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1148'. [ 211.665957][ T5844] Bluetooth: hci2: command 0x0401 tx timeout [ 211.667131][ T5142] Bluetooth: hci1: command 0x0401 tx timeout [ 211.672117][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 211.678799][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 211.703703][ T9999] netlink: 'syz.2.1151': attribute type 25 has an invalid length. [ 212.004236][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1154'. [ 212.032152][T10007] tipc: Started in network mode [ 212.055797][T10007] tipc: Node identity bbbbbb01, cluster identity 4711 [ 212.069455][T10007] tipc: Enabled bearer , priority 10 [ 212.210286][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1159'. [ 212.382140][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 212.546743][T10043] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.574894][T10040] bridge0: port 4(veth0_to_bridge) entered blocking state [ 212.603159][T10040] bridge0: port 4(veth0_to_bridge) entered disabled state [ 212.640527][T10040] veth0_to_bridge: entered allmulticast mode [ 212.665317][T10040] veth0_to_bridge: entered promiscuous mode [ 212.745584][T10049] netlink: 'syz.4.1166': attribute type 1 has an invalid length. [ 212.767569][T10049] netlink: 'syz.4.1166': attribute type 1 has an invalid length. [ 213.080325][ T5909] tipc: Node number set to 3149642497 [ 213.336364][T10090] openvswitch: netlink: Missing valid actions attribute. [ 213.351720][T10084] bond3 (unregistering): Released all slaves [ 213.358022][T10090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.368487][T10086] netlink: 'syz.0.1175': attribute type 2 has an invalid length. [ 213.537650][ T30] audit: type=1107 audit(1776502532.712:3): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='˜[ã$Ýñe•ÂoÒwÿÇ@ƒÚºwR§v' [ 213.942094][T10108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.068972][T10114] erspan0: entered promiscuous mode [ 214.075252][T10114] vlan4: entered promiscuous mode [ 214.257951][T10120] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 214.303445][T10120] bond4 (unregistering): Released all slaves [ 214.835896][T10155] pimreg: entered allmulticast mode [ 214.945445][T10162] geneve3: entered promiscuous mode [ 214.962375][T10162] geneve3: entered allmulticast mode [ 215.061835][T10169] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 215.365198][T10186] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 215.735520][T10207] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 216.322636][T10194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.515546][T10228] bond3: Removing last ns target with arp_interval on [ 216.753525][T10249] netlink: 'syz.2.1224': attribute type 1 has an invalid length. [ 216.864767][T10259] FAULT_INJECTION: forcing a failure. [ 216.864767][T10259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.882401][T10257] __nla_validate_parse: 9 callbacks suppressed [ 216.882421][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 216.900465][T10259] CPU: 0 UID: 0 PID: 10259 Comm: syz.0.1227 Not tainted syzkaller #0 PREEMPT(full) [ 216.900489][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 216.900500][T10259] Call Trace: [ 216.900507][T10259] [ 216.900515][T10259] dump_stack_lvl+0xe8/0x150 [ 216.900550][T10259] should_fail_ex+0x412/0x560 [ 216.900583][T10259] _copy_from_user+0x2d/0xb0 [ 216.900604][T10259] ___sys_sendmsg+0x1c6/0x360 [ 216.900633][T10259] ? __lock_acquire+0x6b5/0x2cf0 [ 216.900670][T10259] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.900735][T10259] ? __fget_files+0x2a/0x420 [ 216.900759][T10259] ? __fget_files+0x3a0/0x420 [ 216.900794][T10259] __x64_sys_sendmsg+0x1bd/0x2a0 [ 216.900846][T10259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.900889][T10259] ? __pfx_ksys_write+0x10/0x10 [ 216.900935][T10259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.900958][T10259] do_syscall_64+0x15f/0xf80 [ 216.900983][T10259] ? trace_irq_disable+0x3b/0x140 [ 216.901010][T10259] ? clear_bhb_loop+0x40/0x90 [ 216.901035][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.901056][T10259] RIP: 0033:0x7f1e20f9c819 [ 216.901075][T10259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.901093][T10259] RSP: 002b:00007f1e21dfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.901114][T10259] RAX: ffffffffffffffda RBX: 00007f1e21215fa0 RCX: 00007f1e20f9c819 [ 216.901129][T10259] RDX: 0000000000000010 RSI: 0000200000000880 RDI: 0000000000000003 [ 216.901142][T10259] RBP: 00007f1e21dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 216.901154][T10259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.901166][T10259] R13: 00007f1e21216038 R14: 00007f1e21215fa0 R15: 00007fff5ccd81b8 [ 216.901198][T10259] [ 217.196666][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'. [ 217.741061][T10292] xt_ecn: cannot match TCP bits for non-tcp packets [ 217.810530][T10301] netlink: 'syz.2.1241': attribute type 5 has an invalid length. [ 217.844740][T10301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1241'. [ 217.881820][T10299] team0: No ports can be present during mode change [ 217.907660][T10301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1241'. [ 217.977524][ T5895] IPVS: starting estimator thread 0... [ 218.078753][T10311] IPVS: using max 25 ests per chain, 60000 per kthread [ 218.140728][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1245'. [ 218.694027][T10343] x_tables: duplicate underflow at hook 1 [ 218.841142][T10351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1258'. [ 219.043362][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 219.161722][T10368] netlink: 'syz.4.1261': attribute type 3 has an invalid length. [ 219.344334][T10384] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1264'. [ 219.572096][T10391] tipc: Started in network mode [ 219.590230][T10391] tipc: Node identity 02bb22df6263, cluster identity 4711 [ 219.620122][T10391] tipc: Enabled bearer , priority 0 [ 219.629748][T10387] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 219.659860][T10390] tipc: Enabling of bearer rejected, already enabled [ 219.699529][T10387] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 219.807168][T10390] tipc: Disabling bearer [ 219.834368][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.844335][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.855382][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.872676][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.930646][ T5488] veth0_macvtap: left promiscuous mode [ 220.412136][T10435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.573710][T10439] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 220.614579][T10439] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1281'. [ 220.638044][T10443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1283'. [ 220.686076][T10446] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 220.938924][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.991719][T10460] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 221.022073][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.040076][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.053212][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.113265][ T6871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.491987][T10482] lo: Caught tx_queue_len zero misconfig [ 221.577691][T10486] syzkaller1: entered promiscuous mode [ 221.603598][T10486] syzkaller1: entered allmulticast mode [ 222.113006][T10514] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 222.192576][T10514] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 222.339602][T10524] netlink: 'syz.1.1303': attribute type 2 has an invalid length. [ 222.407714][T10524] vþ: entered promiscuous mode [ 222.425887][T10529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.496456][T10532] __nla_validate_parse: 7 callbacks suppressed [ 222.496475][T10532] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1302'. [ 222.534698][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 222.623889][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 222.634053][T10536] hsr_slave_0: left promiscuous mode [ 222.782895][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1308'. [ 222.902660][T10548] Cannot find set identified by id 65534 to match [ 222.973694][T10548] syz.0.1309 (10548) used obsolete PPPIOCDETACH ioctl [ 223.190914][T10559] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 223.224621][T10559] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 223.245223][T10559] gretap3: entered promiscuous mode [ 223.259031][T10559] gretap3: entered allmulticast mode [ 223.403470][T10567] *èi„: renamed from veth1 (while UP) [ 223.554790][T10576] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1320'. [ 223.600960][T10571] syzkaller0: entered promiscuous mode [ 223.606743][T10571] syzkaller0: entered allmulticast mode [ 223.676326][T10576] vlan3: entered allmulticast mode [ 223.692124][T10576] gretap0: entered allmulticast mode [ 223.981984][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 224.011245][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 224.024898][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 224.034385][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 224.044731][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 224.067588][T10599] x_tables: unsorted underflow at hook 1 [ 224.149052][T10599] x_tables: duplicate underflow at hook 4 [ 224.158552][T10599] netlink: 'syz.0.1327': attribute type 6 has an invalid length. [ 224.488005][T10611] netlink: 'syz.3.1331': attribute type 3 has an invalid length. [ 224.943345][ C1] net_ratelimit: 25 callbacks suppressed [ 224.943366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.959163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.969833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.987669][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.999782][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.893261][T10628] ip6gre1: entered promiscuous mode [ 225.921020][T10628] ip6gre1: entered allmulticast mode [ 225.947799][ T1328] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.978060][ T1328] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.987674][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.059048][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.068632][T10628] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.222800][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.238742][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.262251][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.271283][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.556678][T10651] syzkaller0: entered promiscuous mode [ 226.562507][T10651] syzkaller0: entered allmulticast mode [ 226.618463][ T5909] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.635244][T10656] veth6: entered allmulticast mode [ 226.673719][T10651] syzkaller1: entered promiscuous mode [ 226.688071][T10651] syzkaller1: entered allmulticast mode [ 226.859550][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.895119][T10667] Cannot find del_set index 4 as target [ 227.028954][T10666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.047449][T10666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.059862][T10666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 227.068859][T10678] netlink: 'syz.0.1351': attribute type 11 has an invalid length. [ 228.636996][T10666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.659470][T10666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.712854][T10666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 228.753163][T10691] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 228.798140][T10688] __nla_validate_parse: 62 callbacks suppressed [ 228.798160][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'. [ 228.814402][T10696] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1356'. [ 228.868485][T10691] bond7: entered promiscuous mode [ 228.874327][T10691] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.912839][T10694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.009434][T10666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.020325][T10666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.036852][T10666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 229.099092][T10705] syzkaller0: entered promiscuous mode [ 229.104765][T10705] syzkaller0: entered allmulticast mode [ 229.202496][T10666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.213492][T10666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.224717][T10666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 229.261244][T10711] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 229.271954][T10711] syzkaller1: linktype set to 258 [ 229.317179][T10715] netlink: 'syz.0.1362': attribute type 7 has an invalid length. [ 229.436060][ T6875] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.453166][ T6875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 229.475907][ T6875] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 229.518661][T10723] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1365'. [ 229.542215][ T6875] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.568292][ T6875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 229.583239][ T6875] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 229.606030][ T6875] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.626345][ T6875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 229.640642][ T6875] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 229.689685][ T6875] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.718524][ T6875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 229.743497][ T6875] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 229.877826][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1369'. [ 229.916291][T10740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1369'. [ 229.937937][T10744] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1371'. [ 230.046670][T10733] syzkaller1: entered promiscuous mode [ 230.052442][T10733] syzkaller1: entered allmulticast mode [ 230.060613][T10753] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1373'. [ 230.067275][ C0] net_ratelimit: 8 callbacks suppressed [ 230.067315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.092513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.107497][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.125259][T10753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.138364][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.212778][T10760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1374'. [ 230.230225][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.462339][T10774] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1378'. [ 230.481894][T10766] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1375'. [ 230.915017][T10773] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 231.241238][T10824] IPVS: set_ctl: invalid protocol: 58 172.20.20.48:20001 [ 231.259332][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.752672][T10835] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 231.769508][T10837] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 231.979868][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.988929][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.000399][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.152029][ T30] audit: type=1804 audit(1776502551.332:4): pid=10849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1399" name="/newroot/299/cgroup.controllers" dev="tmpfs" ino=1533 res=1 errno=0 [ 232.175260][ T30] audit: type=1800 audit(1776502551.332:5): pid=10849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1399" name="cgroup.controllers" dev="tmpfs" ino=1533 res=0 errno=0 [ 232.299601][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.732233][T10789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.078083][T10864] Cannot find add_set index 65532 as target [ 234.099706][T10870] netlink: 'syz.0.1405': attribute type 4 has an invalid length. [ 234.588776][T10897] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 234.616827][T10898] 8021q: VLANs not supported on ip_vti0 [ 234.969301][T10911] block nbd1: Unsupported socket: should be TCP or UNIX. [ 234.979359][T10914] __nla_validate_parse: 1 callbacks suppressed [ 234.979375][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'. [ 235.003980][T10918] x_tables: duplicate underflow at hook 2 [ 235.059507][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'. [ 235.203399][T10922] netlink: 'syz.2.1425': attribute type 10 has an invalid length. [ 235.237744][T10922] batman_adv: batadv0: Removing interface: netdevsim0 [ 235.299139][T10922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.351871][T10922] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 235.355309][T10933] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1428'. [ 235.419821][ T5909] net_ratelimit: 7 callbacks suppressed [ 235.419840][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.457911][T10925] pim6reg: entered allmulticast mode [ 235.658943][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.713459][T10954] tipc: Enabled bearer , priority 14 [ 236.245211][T10982] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 236.254202][T10978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1439'. [ 236.381912][T10998] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.458565][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.503824][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 236.785778][T11015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1447'. [ 236.916538][T11015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1447'. [ 236.930687][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1449'. [ 237.396260][T11052] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 237.439489][T11052] bond5 (unregistering): Released all slaves [ 237.499754][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.823873][T11072] syzkaller0: entered promiscuous mode [ 237.852426][T11072] syzkaller0: entered allmulticast mode [ 237.901909][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 238.200138][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'. [ 238.378426][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.539838][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.716690][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.804609][T11130] netlink: 'syz.0.1476': attribute type 1 has an invalid length. [ 238.886639][T11139] netlink: 'syz.1.1479': attribute type 18 has an invalid length. [ 238.981499][T11142] netlink: 'syz.3.1480': attribute type 83 has an invalid length. [ 239.074599][T11142] netlink: 'syz.3.1480': attribute type 10 has an invalid length. [ 239.210991][T11145] vlan4: entered promiscuous mode [ 239.226967][T11145] bridge0: entered promiscuous mode [ 239.267455][T11157] team0: Caught tx_queue_len zero misconfig [ 241.049366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.175757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.527323][T11269] IPv4: Oversized IP packet from 127.202.26.0 [ 241.596859][T11272] __nla_validate_parse: 3 callbacks suppressed [ 241.596877][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1510'. [ 241.652839][T11272] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 241.917749][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1512'. [ 241.942280][T11283] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1512'. [ 241.948053][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 241.953679][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1512'. [ 241.972062][T11283] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1512'. [ 241.981838][T11283] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1512'. [ 242.886542][T11312] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 242.913946][T11312] bond8: option packets_per_slave: allowed values 0 - 65535 [ 242.926302][T11312] bond8 (unregistering): Released all slaves [ 244.999293][T11398] netlink: 'syz.1.1552': attribute type 83 has an invalid length. [ 245.057202][T11398] netlink: 'syz.1.1552': attribute type 83 has an invalid length. [ 245.117445][T11398] netlink: 'syz.1.1552': attribute type 83 has an invalid length. [ 245.175267][T11398] netlink: 'syz.1.1552': attribute type 83 has an invalid length. [ 245.222223][T11398] netlink: 'syz.1.1552': attribute type 83 has an invalid length. [ 245.256845][T11398] netlink: 'syz.1.1552': attribute type 83 has an invalid length. [ 245.266882][T11398] netlink: 'syz.1.1552': attribute type 83 has an invalid length. [ 245.275354][T11398] netlink: 'syz.1.1552': attribute type 83 has an invalid length. [ 245.293079][T11398] netlink: 'syz.1.1552': attribute type 83 has an invalid length. [ 245.318820][T11398] netlink: 'syz.1.1552': attribute type 83 has an invalid length. [ 245.415940][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1555'. [ 245.831683][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 245.861660][T11426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1562'. [ 245.871799][T11428] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 246.602577][T11451] __nla_validate_parse: 1 callbacks suppressed [ 246.602597][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'. [ 246.890438][T11458] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 247.025279][T11463] dummy0: left allmulticast mode [ 247.050063][T11463] bridge0: port 3(dummy0) entered disabled state [ 247.132589][T11468] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 247.275082][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1576'. [ 247.677013][T11494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1581'. [ 247.840627][T11509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.908779][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1584'. [ 248.085247][T11517] bond5 (unregistering): Released all slaves [ 248.366069][T11537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.416931][T11531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.955061][T11572] IPVS: set_ctl: invalid protocol: 29 172.30.253.1:20003 [ 249.235122][T11588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1603'. [ 249.444233][T11592] veth0_to_batadv: entered allmulticast mode [ 249.786972][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 250.972901][T11653] validate_nla: 57 callbacks suppressed [ 250.972921][T11653] netlink: 'syz.1.1619': attribute type 2 has an invalid length. [ 251.008330][T11653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1619'. [ 251.179393][T11666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1621'. [ 251.213617][T11666] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1621'. [ 251.383223][T11666] veth7: entered promiscuous mode [ 251.672096][T11682] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 252.047699][T11699] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1632'. [ 252.145564][ T5895] IPVS: starting estimator thread 0... [ 252.238551][T11704] IPVS: using max 29 ests per chain, 69600 per kthread [ 253.119609][T11731] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1640'. [ 253.773524][T11762] syzkaller1: entered promiscuous mode [ 253.781071][T11762] syzkaller1: entered allmulticast mode [ 253.797057][T11762] syzkaller1: left promiscuous mode [ 253.802935][T11762] syzkaller1: left allmulticast mode [ 253.811676][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'. [ 253.980797][T11775] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1653'. [ 254.016597][T11776] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 254.028096][T11776] team0 (unregistering): Port device team_slave_0 removed [ 254.040605][T11776] team0 (unregistering): Failed to send options change via netlink (err -105) [ 254.052027][T11776] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 254.064466][T11776] team0 (unregistering): Port device team_slave_1 removed [ 254.108539][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1655'. [ 254.292872][T11783] syzkaller0: entered promiscuous mode [ 254.300505][T11783] syzkaller0: entered allmulticast mode [ 254.653915][T11809] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1665'. [ 254.784293][T11819] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1667'. [ 254.823263][T11820] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1668'. [ 255.024327][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.127125][T11831] netlink: 'syz.0.1671': attribute type 1 has an invalid length. [ 255.265535][T11831] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.366760][T11832] bond5: (slave bridge2): making interface the new active one [ 255.421922][T11832] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 255.429963][T11835] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1672'. [ 255.572769][T11840] veth0_to_bridge: entered promiscuous mode [ 255.587611][T11839] veth0_to_bridge: left promiscuous mode [ 255.663501][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.671593][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.757444][T11847] syzkaller0: entered promiscuous mode [ 255.768687][T11850] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1678'. [ 255.775958][T11847] syzkaller0: entered allmulticast mode [ 255.818110][T11853] netlink: 'syz.0.1678': attribute type 1 has an invalid length. [ 255.990794][T11853] bond6: entered promiscuous mode [ 255.999241][T11853] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.005542][T11862] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 256.058655][T11861] batadv_slave_0: Caught tx_queue_len zero misconfig [ 256.072659][T11861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.225340][T11868] IPv6: Can't replace route, no match found [ 256.254046][T11868] IPv6: Can't replace route, no match found [ 256.272974][T11868] netlink: 'syz.0.1681': attribute type 2 has an invalid length. [ 256.316225][T11873] xt_cgroup: invalid path, errno=-2 [ 256.660290][T11892] netlink: 'syz.4.1689': attribute type 10 has an invalid length. [ 256.763371][T11898] netlink: 'syz.4.1689': attribute type 10 has an invalid length. [ 256.783457][T11898] batadv0: entered promiscuous mode [ 256.789569][T11898] batadv0: entered allmulticast mode [ 256.795896][T11898] bridge0: port 1(batadv0) entered blocking state [ 256.826059][T11898] bridge0: port 1(batadv0) entered disabled state [ 256.883367][T11890] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 256.900924][T11892] batadv0: left allmulticast mode [ 256.908027][T11892] batadv0: left promiscuous mode [ 256.915754][T11892] bridge0: port 1(batadv0) entered disabled state [ 256.930059][T11892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.942232][T11892] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 257.214362][T11915] __nla_validate_parse: 1 callbacks suppressed [ 257.214380][T11915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1694'. [ 257.230496][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'. [ 257.473951][T11922] x_tables: duplicate entry at hook 1 [ 257.604446][T11927] netlink: 'syz.4.1699': attribute type 1 has an invalid length. [ 257.837134][T11927] bond8: entered promiscuous mode [ 257.843219][T11927] 8021q: adding VLAN 0 to HW filter on device bond8 [ 257.932071][T11945] bond8: (slave bridge6): making interface the new active one [ 257.940120][T11945] bridge6: entered promiscuous mode [ 257.953287][T11945] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 258.089582][T11958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1708'. [ 258.119243][T11960] netlink: 'syz.2.1709': attribute type 3 has an invalid length. [ 258.145338][T11958] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1708'. [ 258.325478][T11970] SET target dimension over the limit! [ 258.339271][T11970] IPVS: set_ctl: invalid protocol: 155 172.30.0.2:20000 [ 258.390490][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 258.430327][T11974] xt_hashlimit: size too large, truncated to 1048576 [ 258.967044][T12011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1722'. [ 259.071016][T12014] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 259.282050][T12025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.325877][T12026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.396992][T12032] netlink: 'syz.3.1729': attribute type 10 has an invalid length. [ 259.472145][T12032] veth0_vlan: left promiscuous mode [ 259.491726][T12032] veth0_vlan: entered promiscuous mode [ 259.525323][T12032] team0: Device veth0_vlan failed to register rx_handler [ 259.590683][T12042] macvtap1: entered promiscuous mode [ 259.604514][T12042] macvtap1: entered allmulticast mode [ 259.610901][T12042] veth1_vlan: entered allmulticast mode [ 259.644576][T12043] macvtap2: entered promiscuous mode [ 259.668814][T12043] macvtap2: entered allmulticast mode [ 259.927808][T12066] netlink: 'syz.4.1739': attribute type 2 has an invalid length. [ 260.035517][T12074] xt_l2tp: missing protocol rule (udp|l2tpip) [ 260.051428][T12078] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 260.103317][T12080] IPVS: set_ctl: invalid protocol: 137 172.30.1.5:20001 [ 260.530697][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1751'. [ 260.601407][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'. [ 260.775336][T12116] netlink: 'syz.2.1755': attribute type 178 has an invalid length. [ 261.136658][T12140] IPv6: addrconf: prefix option has invalid lifetime [ 261.143489][T12140] IPv6: addrconf: prefix option has invalid lifetime [ 261.610472][T12157] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.619692][T12162] netlink: 'syz.2.1764': attribute type 1 has an invalid length. [ 261.687712][T12162] bond6: entered promiscuous mode [ 261.693737][T12162] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.701934][T12165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1764'. [ 262.083912][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1768'. [ 262.150343][T12191] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003 [ 262.430012][T12207] __nla_validate_parse: 2 callbacks suppressed [ 262.430030][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 262.448465][T12206] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1773'. [ 262.780350][T12221] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 262.790238][T12221] bond8: option packets_per_slave: allowed values 0 - 65535 [ 262.839947][T12221] bond8 (unregistering): Released all slaves [ 263.091428][T12247] netlink: 'syz.2.1782': attribute type 58 has an invalid length. [ 263.099653][T12247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1782'. [ 263.193219][T12249] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1783'. [ 263.373636][T12257] tipc: Failed to remove unknown binding: 66,0,0/3471208166:3452558508/3452558509 [ 263.408790][T12257] tipc: Failed to remove unknown binding: 66,0,0/3471208166:3452558508/3452558509 [ 263.433165][T12259] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1787'. [ 263.717785][T12269] bond0: Caught tx_queue_len zero misconfig [ 264.014935][T12288] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1796'. [ 264.261856][T12303] netlink: 'syz.4.1801': attribute type 1 has an invalid length. [ 264.497326][T12308] netlink: 'syz.1.1799': attribute type 1 has an invalid length. [ 264.652964][T12308] bond6: entered promiscuous mode [ 264.658692][T12308] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.675828][T12295] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 264.689044][T12295] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 264.700209][T12295] bond6: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 264.788889][T12331] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1803'. [ 265.032148][T12339] netlink: 'syz.3.1807': attribute type 2 has an invalid length. [ 265.048026][T12344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1805'. [ 265.079364][T12343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1805'. [ 265.472487][T12364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1812'. [ 265.657331][T12381] bridge_slave_1: left allmulticast mode [ 265.671344][T12381] bridge_slave_1: left promiscuous mode [ 265.677801][T12381] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.734443][T12385] netlink: 'syz.1.1818': attribute type 13 has an invalid length. [ 265.744016][T12385] netlink: 'syz.1.1818': attribute type 13 has an invalid length. [ 268.395209][T12363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.656048][T12412] __nla_validate_parse: 4 callbacks suppressed [ 268.656066][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1828'. [ 268.674704][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1828'. [ 268.688041][T12410] netlink: 'syz.1.1826': attribute type 10 has an invalid length. [ 268.712540][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1828'. [ 268.809724][T12410] team0 (unregistering): Port device team_slave_0 removed [ 268.861918][T12419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1830'. [ 268.884249][T12410] team0 (unregistering): Port device team_slave_1 removed [ 269.239919][T12443] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1836'. [ 269.403655][T12447] : entered promiscuous mode [ 269.572369][T12461] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 269.589030][T12463] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 269.617844][T12467] netlink: 'syz.4.1844': attribute type 1 has an invalid length. [ 269.627764][T12467] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1844'. [ 269.641440][T12467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.838026][T12475] netlink: 'syz.3.1848': attribute type 61 has an invalid length. [ 270.034334][T12488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.054973][T12488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.110786][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'. [ 270.260974][T12493] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1857'. [ 270.289053][T12493] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1857'. [ 270.323419][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.331658][T12493] bridge0: port 1(1¾x9ÿ) entered disabled state [ 270.356679][T12500] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1857'. [ 270.434814][T12502] atomic_op ffff888055caa998 conn xmit_atomic 0000000000000000 [ 270.870424][T12524] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 271.532400][T12562] openvswitch: netlink: Message has 6 unknown bytes. [ 272.073710][T12580] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 272.131671][T12580] bridge8: entered promiscuous mode [ 272.531815][T12612] openvswitch: netlink: IP tunnel dst address not specified [ 272.643719][T12612] syzkaller0: entered promiscuous mode [ 272.660636][T12612] syzkaller0: entered allmulticast mode [ 273.054396][T12629] veth1_to_bridge: entered promiscuous mode [ 273.063664][T12629] veth1_to_bridge: entered allmulticast mode [ 273.271852][T12651] syzkaller0: entered promiscuous mode [ 273.277390][T12651] syzkaller0: entered allmulticast mode [ 273.497980][T12662] tipc: Enabling not permitted [ 273.510972][T12664] netlink: 'syz.4.1908': attribute type 39 has an invalid length. [ 273.522393][T12662] tipc: Enabling of bearer rejected, failed to enable media [ 273.541924][T12662] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 273.607272][T12664] hsr_slave_1 (unregistering): left promiscuous mode [ 273.725688][T12673] netlink: 'syz.1.1912': attribute type 2 has an invalid length. [ 273.824935][T12677] __nla_validate_parse: 11 callbacks suppressed [ 273.824955][T12677] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1914'. [ 273.849439][T12681] netlink: 'syz.2.1914': attribute type 1 has an invalid length. [ 273.878610][T12681] netlink: 'syz.2.1914': attribute type 11 has an invalid length. [ 273.897863][T12679] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1915'. [ 273.908446][T12681] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1914'. [ 274.073034][T12690] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1918'. [ 274.411358][T12713] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 274.521713][T12713] 8021q: adding VLAN 0 to HW filter on device bond10 [ 274.532586][T12712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1922'. [ 274.542431][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 274.581569][T12720] bond10: (slave geneve2): making interface the new active one [ 274.591562][T12720] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 274.776368][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1926'. [ 274.797282][T12729] xt_hashlimit: size too large, truncated to 1048576 [ 274.815574][T12732] gtp1: entered promiscuous mode [ 274.846391][T12732] gtp1: entered allmulticast mode [ 274.888794][T12737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1927'. [ 274.988531][T12739] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1928'. [ 275.041852][T12739] tipc: Enabled bearer , priority 0 [ 275.051866][T12741] syzkaller0: entered promiscuous mode [ 275.057861][T12741] syzkaller0: entered allmulticast mode [ 275.067713][T12739] tipc: Enabling of bearer rejected, already enabled [ 275.122019][T12739] tipc: Enabling of bearer rejected, already enabled [ 275.229059][T12739] tipc: Resetting bearer [ 275.287577][T12739] tipc: Disabling bearer [ 275.343449][T12750] netlink: 'syz.2.1931': attribute type 4 has an invalid length. [ 275.546844][T12765] syzkaller0: entered promiscuous mode [ 275.561499][T12765] syzkaller0: entered allmulticast mode [ 275.586080][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1935'. [ 275.947143][T12786] openvswitch: netlink: IP tunnel dst address not specified [ 276.192251][T12784] syzkaller0: entered promiscuous mode [ 276.210110][T12784] syzkaller0: entered allmulticast mode [ 277.064548][T12825] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.072322][T12825] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.389994][T12825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.457786][T12825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.721183][T12830] netlink: 'syz.1.1953': attribute type 4 has an invalid length. [ 277.782616][T12834] netlink: 'syz.1.1953': attribute type 4 has an invalid length. [ 277.822507][T12835] bond11: Unable to set up delay as MII monitoring is disabled [ 277.833209][T12835] bond11 (unregistering): Released all slaves [ 277.873083][T12840] mpoa:mpoad_close: () going down [ 277.891725][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.938298][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 53730 - 0 [ 277.959856][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.989321][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 53730 - 0 [ 278.095188][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.123879][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 53730 - 0 [ 278.134773][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.147343][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 53730 - 0 [ 278.359779][ T5937] ================================================================== [ 278.368005][ T5937] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550 [ 278.375930][ T5937] Read of size 8 at addr ffff888069e2f8c0 by task kworker/1:6/5937 [ 278.383840][ T5937] [ 278.386212][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 278.386239][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 278.386254][ T5937] Workqueue: mld mld_ifc_work [ 278.386285][ T5937] Call Trace: [ 278.386294][ T5937] [ 278.386302][ T5937] dump_stack_lvl+0xe8/0x150 [ 278.386333][ T5937] print_report+0xba/0x230 [ 278.386359][ T5937] ? sock_def_readable+0x1cb/0x550 [ 278.386391][ T5937] kasan_report+0x117/0x150 [ 278.386414][ T5937] ? sock_def_readable+0x1cb/0x550 [ 278.386442][ T5937] sock_def_readable+0x1cb/0x550 [ 278.386465][ T5937] ? sock_def_readable+0xae/0x550 [ 278.386489][ T5937] ? send_to_lecd+0x26d/0x830 [ 278.386515][ T5937] send_to_lecd+0x3e7/0x830 [ 278.386557][ T5937] lec_start_xmit+0xe52/0x2890 [ 278.386588][ T5937] dev_hard_start_xmit+0x2cd/0x830 [ 278.386616][ T5937] sch_direct_xmit+0x251/0x4c0 [ 278.386645][ T5937] ? __pfx_sch_direct_xmit+0x10/0x10 [ 278.386684][ T5937] __dev_queue_xmit+0x180f/0x3950 [ 278.386709][ T5937] ? __dev_queue_xmit+0x2b6/0x3950 [ 278.386737][ T5937] ? __pfx___dev_queue_xmit+0x10/0x10 [ 278.386758][ T5937] ? neigh_resolve_output+0x438/0x750 [ 278.386785][ T5937] ? eth_header+0x11b/0x200 [ 278.386804][ T5937] ? __asan_memcpy+0x40/0x70 [ 278.386843][ T5937] ? ip6_output+0x126/0x550 [ 278.386868][ T5937] ip6_output+0x340/0x550 [ 278.386894][ T5937] ? __pfx_ip6_output+0x10/0x10 [ 278.386920][ T5937] NF_HOOK+0x177/0x4f0 [ 278.386947][ T5937] ? __pfx_NF_HOOK+0x10/0x10 [ 278.386973][ T5937] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 278.386995][ T5937] ? __local_bh_enable_ip+0xd0/0x130 [ 278.387022][ T5937] ? lockdep_hardirqs_on+0x7a/0x110 [ 278.387047][ T5937] ? __local_bh_enable_ip+0xd0/0x130 [ 278.387074][ T5937] ? icmp6_dst_alloc+0x3a6/0x440 [ 278.387104][ T5937] mld_sendpack+0x8b4/0xe40 [ 278.387138][ T5937] ? mld_sendpack+0x213/0xe40 [ 278.387164][ T5937] ? __pfx_mld_sendpack+0x10/0x10 [ 278.387201][ T5937] mld_ifc_work+0x835/0xe70 [ 278.387228][ T5937] ? process_scheduled_works+0xa70/0x1860 [ 278.387256][ T5937] process_scheduled_works+0xb5d/0x1860 [ 278.387300][ T5937] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.387331][ T5937] ? assign_work+0x3d5/0x5e0 [ 278.387360][ T5937] worker_thread+0xa53/0xfc0 [ 278.387401][ T5937] kthread+0x388/0x470 [ 278.387421][ T5937] ? __pfx_worker_thread+0x10/0x10 [ 278.387447][ T5937] ? __pfx_kthread+0x10/0x10 [ 278.387468][ T5937] ret_from_fork+0x514/0xb70 [ 278.387497][ T5937] ? __pfx_ret_from_fork+0x10/0x10 [ 278.387525][ T5937] ? __switch_to+0xc79/0x1410 [ 278.387549][ T5937] ? __pfx_kthread+0x10/0x10 [ 278.387570][ T5937] ret_from_fork_asm+0x1a/0x30 [ 278.387609][ T5937] [ 278.387617][ T5937] [ 278.649555][ T5937] Allocated by task 12779: [ 278.653982][ T5937] kasan_save_track+0x3e/0x80 [ 278.658765][ T5937] __kasan_slab_alloc+0x6c/0x80 [ 278.663632][ T5937] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 278.669554][ T5937] sock_alloc_inode+0x2c/0x190 [ 278.674342][ T5937] alloc_inode+0x6a/0x1b0 [ 278.678693][ T5937] __sock_create+0x12d/0x9d0 [ 278.683307][ T5937] __sys_socket+0xd6/0x1b0 [ 278.687761][ T5937] __x64_sys_socket+0x7a/0x90 [ 278.692466][ T5937] do_syscall_64+0x15f/0xf80 [ 278.697079][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.703025][ T5937] [ 278.705465][ T5937] Freed by task 5895: [ 278.709630][ T5937] kasan_save_track+0x3e/0x80 [ 278.714344][ T5937] kasan_save_free_info+0x46/0x50 [ 278.719395][ T5937] __kasan_slab_free+0x5c/0x80 [ 278.724270][ T5937] kmem_cache_free+0x180/0x630 [ 278.729093][ T5937] rcu_core+0x7cd/0x1070 [ 278.733361][ T5937] handle_softirqs+0x22a/0x840 [ 278.738157][ T5937] do_softirq+0x76/0xd0 [ 278.742337][ T5937] __local_bh_enable_ip+0xf8/0x130 [ 278.747488][ T5937] __alloc_skb+0x1aa/0x7d0 [ 278.751936][ T5937] mld_newpack+0x14c/0xc90 [ 278.756380][ T5937] add_grhead+0x5a/0x2a0 [ 278.760725][ T5937] add_grec+0x1452/0x1740 [ 278.765079][ T5937] mld_ifc_work+0x308/0xe70 [ 278.769605][ T5937] process_scheduled_works+0xb5d/0x1860 [ 278.775176][ T5937] worker_thread+0xa53/0xfc0 [ 278.779787][ T5937] kthread+0x388/0x470 [ 278.783887][ T5937] ret_from_fork+0x514/0xb70 [ 278.788506][ T5937] ret_from_fork_asm+0x1a/0x30 [ 278.793302][ T5937] [ 278.795657][ T5937] Last potentially related work creation: [ 278.801393][ T5937] kasan_save_stack+0x3e/0x60 [ 278.806191][ T5937] kasan_record_aux_stack+0xbd/0xd0 [ 278.811417][ T5937] call_rcu+0xee/0x890 [ 278.815513][ T5937] evict+0x95b/0xb10 [ 278.819421][ T5937] __dentry_kill+0x1a2/0x5e0 [ 278.824026][ T5937] finish_dput+0xc9/0x480 [ 278.828369][ T5937] __fput+0x691/0xa60 [ 278.832374][ T5937] task_work_run+0x1d9/0x270 [ 278.836982][ T5937] get_signal+0x11eb/0x1330 [ 278.841527][ T5937] arch_do_signal_or_restart+0xbc/0x830 [ 278.847089][ T5937] exit_to_user_mode_loop+0x86/0x480 [ 278.852393][ T5937] do_syscall_64+0x33e/0xf80 [ 278.857023][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.862932][ T5937] [ 278.865285][ T5937] The buggy address belongs to the object at ffff888069e2f800 [ 278.865285][ T5937] which belongs to the cache sock_inode_cache of size 1408 [ 278.879894][ T5937] The buggy address is located 192 bytes inside of [ 278.879894][ T5937] freed 1408-byte region [ffff888069e2f800, ffff888069e2fd80) [ 278.893979][ T5937] [ 278.896319][ T5937] The buggy address belongs to the physical page: [ 278.902783][ T5937] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x69e28 [ 278.911572][ T5937] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 278.920099][ T5937] memcg:ffff888069e2fe01 [ 278.924366][ T5937] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 278.931963][ T5937] page_type: f5(slab) [ 278.935960][ T5937] raw: 00fff00000000040 ffff88801f6f8140 dead000000000100 dead000000000122 [ 278.944564][ T5937] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff888069e2fe01 [ 278.953177][ T5937] head: 00fff00000000040 ffff88801f6f8140 dead000000000100 dead000000000122 [ 278.964396][ T5937] head: 0000000000000000 0000000800150015 00000000f5000000 ffff888069e2fe01 [ 278.973097][ T5937] head: 00fff00000000003 ffffea0001a78a01 00000000ffffffff 00000000ffffffff [ 278.981783][ T5937] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 278.990458][ T5937] page dumped because: kasan: bad access detected [ 278.996909][ T5937] page_owner tracks the page as allocated [ 279.002633][ T5937] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11844, tgid 11843 (syz.0.1675), ts 255581774630, free_ts 244454860094 [ 279.025933][ T5937] post_alloc_hook+0x231/0x280 [ 279.030726][ T5937] get_page_from_freelist+0x24dc/0x2580 [ 279.036334][ T5937] __alloc_frozen_pages_noprof+0x18d/0x380 [ 279.042153][ T5937] allocate_slab+0x77/0x660 [ 279.046699][ T5937] refill_objects+0x331/0x3c0 [ 279.051388][ T5937] __pcs_replace_empty_main+0x2e6/0x730 [ 279.056950][ T5937] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 279.062776][ T5937] sock_alloc_inode+0x2c/0x190 [ 279.067563][ T5937] alloc_inode+0x6a/0x1b0 [ 279.071913][ T5937] __sock_create+0x12d/0x9d0 [ 279.076538][ T5937] __sys_socket+0xd6/0x1b0 [ 279.080968][ T5937] __x64_sys_socket+0x7a/0x90 [ 279.085667][ T5937] do_syscall_64+0x15f/0xf80 [ 279.090275][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.096201][ T5937] page last free pid 11378 tgid 11377 stack trace: [ 279.102709][ T5937] __free_frozen_pages+0xc2b/0xdb0 [ 279.107861][ T5937] __slab_free+0x263/0x2b0 [ 279.112309][ T5937] qlist_free_all+0x97/0x100 [ 279.117179][ T5937] kasan_quarantine_reduce+0x148/0x160 [ 279.122678][ T5937] __kasan_slab_alloc+0x22/0x80 [ 279.127561][ T5937] kmem_cache_alloc_node_noprof+0x384/0x690 [ 279.133477][ T5937] __alloc_skb+0x1d0/0x7d0 [ 279.138003][ T5937] netlink_ack+0x146/0xa50 [ 279.142439][ T5937] nfnetlink_rcv+0x251a/0x27b0 [ 279.147221][ T5937] netlink_unicast+0x75c/0x8e0 [ 279.152023][ T5937] netlink_sendmsg+0x813/0xb40 [ 279.156804][ T5937] ____sys_sendmsg+0x972/0x9f0 [ 279.161591][ T5937] ___sys_sendmsg+0x2a5/0x360 [ 279.166293][ T5937] __x64_sys_sendmsg+0x1bd/0x2a0 [ 279.171341][ T5937] do_syscall_64+0x15f/0xf80 [ 279.175945][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.181848][ T5937] [ 279.184191][ T5937] Memory state around the buggy address: [ 279.189832][ T5937] ffff888069e2f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 279.197904][ T5937] ffff888069e2f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.205976][ T5937] >ffff888069e2f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.214047][ T5937] ^ [ 279.220215][ T5937] ffff888069e2f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.228485][ T5937] ffff888069e2f980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.236563][ T5937] ================================================================== [ 279.244664][ T5937] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 279.251886][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 279.261450][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 279.271526][ T5937] Workqueue: mld mld_ifc_work [ 279.276239][ T5937] Call Trace: [ 279.279534][ T5937] [ 279.282485][ T5937] vpanic+0x56c/0xa60 [ 279.286507][ T5937] ? __pfx_vpanic+0x10/0x10 [ 279.291046][ T5937] panic+0xc5/0xd0 [ 279.294813][ T5937] ? __pfx_panic+0x10/0x10 [ 279.299248][ T5937] ? sock_def_readable+0x1cb/0x550 [ 279.304376][ T5937] ? rcu_is_watching+0x15/0xb0 [ 279.309167][ T5937] ? sock_def_readable+0x1cb/0x550 [ 279.314296][ T5937] ? sock_def_readable+0x1cb/0x550 [ 279.319430][ T5937] check_panic_on_warn+0x89/0xb0 [ 279.324393][ T5937] ? sock_def_readable+0x1cb/0x550 [ 279.329524][ T5937] end_report+0x73/0x170 [ 279.333782][ T5937] ? sock_def_readable+0x1cb/0x550 [ 279.338920][ T5937] kasan_report+0x128/0x150 [ 279.343451][ T5937] ? sock_def_readable+0x1cb/0x550 [ 279.348593][ T5937] sock_def_readable+0x1cb/0x550 [ 279.353550][ T5937] ? sock_def_readable+0xae/0x550 [ 279.358594][ T5937] ? send_to_lecd+0x26d/0x830 [ 279.363295][ T5937] send_to_lecd+0x3e7/0x830 [ 279.367829][ T5937] lec_start_xmit+0xe52/0x2890 [ 279.372626][ T5937] dev_hard_start_xmit+0x2cd/0x830 [ 279.377772][ T5937] sch_direct_xmit+0x251/0x4c0 [ 279.382577][ T5937] ? __pfx_sch_direct_xmit+0x10/0x10 [ 279.387888][ T5937] __dev_queue_xmit+0x180f/0x3950 [ 279.392945][ T5937] ? __dev_queue_xmit+0x2b6/0x3950 [ 279.398089][ T5937] ? __pfx___dev_queue_xmit+0x10/0x10 [ 279.403481][ T5937] ? neigh_resolve_output+0x438/0x750 [ 279.408875][ T5937] ? eth_header+0x11b/0x200 [ 279.413409][ T5937] ? __asan_memcpy+0x40/0x70 [ 279.418041][ T5937] ? ip6_output+0x126/0x550 [ 279.422568][ T5937] ip6_output+0x340/0x550 [ 279.426929][ T5937] ? __pfx_ip6_output+0x10/0x10 [ 279.431821][ T5937] NF_HOOK+0x177/0x4f0 [ 279.435917][ T5937] ? __pfx_NF_HOOK+0x10/0x10 [ 279.440536][ T5937] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 279.446450][ T5937] ? __local_bh_enable_ip+0xd0/0x130 [ 279.451777][ T5937] ? lockdep_hardirqs_on+0x7a/0x110 [ 279.456999][ T5937] ? __local_bh_enable_ip+0xd0/0x130 [ 279.462296][ T5937] ? icmp6_dst_alloc+0x3a6/0x440 [ 279.467264][ T5937] mld_sendpack+0x8b4/0xe40 [ 279.471809][ T5937] ? mld_sendpack+0x213/0xe40 [ 279.476503][ T5937] ? __pfx_mld_sendpack+0x10/0x10 [ 279.481573][ T5937] mld_ifc_work+0x835/0xe70 [ 279.486097][ T5937] ? process_scheduled_works+0xa70/0x1860 [ 279.491839][ T5937] process_scheduled_works+0xb5d/0x1860 [ 279.497418][ T5937] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.503419][ T5937] ? assign_work+0x3d5/0x5e0 [ 279.508032][ T5937] worker_thread+0xa53/0xfc0 [ 279.512651][ T5937] kthread+0x388/0x470 [ 279.516745][ T5937] ? __pfx_worker_thread+0x10/0x10 [ 279.521873][ T5937] ? __pfx_kthread+0x10/0x10 [ 279.526484][ T5937] ret_from_fork+0x514/0xb70 [ 279.531118][ T5937] ? __pfx_ret_from_fork+0x10/0x10 [ 279.536277][ T5937] ? __switch_to+0xc79/0x1410 [ 279.541004][ T5937] ? __pfx_kthread+0x10/0x10 [ 279.545607][ T5937] ret_from_fork_asm+0x1a/0x30 [ 279.550414][ T5937] [ 279.554044][ T5937] Kernel Offset: disabled [ 279.558388][ T5937] Rebooting in 86400 seconds..