last executing test programs: 12.043351188s ago: executing program 0 (id=6469): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req={0xf1, 0x9ec, 0x5, 0x5}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r4, 0x0, 0x320008d0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000035000/0x3000)=nil, 0x3000, 0x0, 0x10010, r2, 0xd7e36000) socket$kcm(0x10, 0x2, 0x4) 6.914300627s ago: executing program 1 (id=6503): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x8044) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'hsr0\x00'}}, 0xfffffffffffffecb) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 6.763352856s ago: executing program 1 (id=6505): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa8", 0x2}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b", 0xb}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) sendfile(r2, r3, 0x0, 0xffffffff000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)={0x28, r8, 0x9, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4049}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 6.555292498s ago: executing program 0 (id=6506): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a6001c000000000000000001000000ffff00000000fe8000000000000000000000000000aa04"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) r6 = socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)={@local, @loopback, 0x1}, 0x10) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x0, 0x5, 0x4, 0x10}, @generic={0x8, 0x2, 0x2, 0xd4, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xb}, {0x0, 0x5, 0x5, 0xc}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000840)={r6, r9}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28", 0xa6}, {&(0x7f0000000040)="7542473782798be019", 0x9}], 0x2}}], 0x2, 0x2090) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet(0x2, 0x4000000000000001, 0x0) 6.275503603s ago: executing program 0 (id=6508): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x16, 0xb3, 0x40}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x2) socket$rds(0x15, 0x5, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000840)=r5, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty=0x2000000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xac1414bb}}}}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000001d00"/16, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x4004c}}], 0x1, 0x805) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r12 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r12, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r13 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) writev(r13, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r12, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r14, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) 5.998253448s ago: executing program 0 (id=6510): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x7, 0xa, 0x8, @mcast1, @private0, 0x40, 0x7800, 0x0, 0x7154}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000000c0)={0x48, 0x0, 0x100, 0x70bd28, 0x25dffc03, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socket$kcm(0x29, 0x4, 0x0) 5.820077714s ago: executing program 0 (id=6512): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0xd8, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x2, 0x3, 0x6, 0x400, 0x1, 0x6be0d9d4, 0x4, 0x3}}, {0xa, 0x2, [0x5, 0x1, 0x3]}}, {{0x1c, 0x1, {0x7, 0x9, 0x200, 0xcd06c6df, 0x0, 0x0, 0xff, 0x7}}, {0x12, 0x2, [0xe, 0x9, 0x4, 0xf83, 0x0, 0x81, 0x3]}}]}]}, 0xd8}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 5.718147264s ago: executing program 0 (id=6513): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000040)) (async) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000040)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x5, 0x7, 0xb5, 0x810, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x80000001) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815fac300818d00000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505400000faff0000000a0000003c0002802c00018014000300ff01000000000000000000deffffff0114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e000108000740000000011800068014000400"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500010000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074001000001240006801400040000000000000000000000000000000001"], 0xb8}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500010000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074001000001240006801400040000000000000000000000000000000001"], 0xb8}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40080) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40080) socket(0x1, 0x3, 0x0) (async) r6 = socket(0x1, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000080), &(0x7f00000001c0)=r7}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) pipe(&(0x7f0000000140)) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r8) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000800)="5a440076265ed5823119a4098d4a992ef868946f5aba22af31ed4f33e48302a2639a54e3c83b9527141411081e8e2090290a374c8e19dc28735464412790236d4fba4d4825d9ed9aeb5e88f4e607c72f4f3e2de6da53827185d3e551dea62d38a3684a48430cca53bcc270970d721f18907e3065d38e58d1120107d2050702d69571e7462207deb352d0c1622f7a9022260de8cc4b0f3c9f719b9747182bad83c253a98ec3ed9005929935f0eb699d4a0118119d55ee24f6df5917e12a1a02239e02bed735d5eee9ce56b6e59caca5cfa50dd5e8565f3031b39631e6efc36d619836d0fde0dde13cb9e88dcfb6d65a308335ca838aba280a9dd936de14a85ae4f27a1c38773fa5ccd3b153f295e383ebd8a4b2c6a8b99af9b3c15b080cfc2587fa210b57d4245573c90de5dc646a80c6c55b5d242e0a6f55d920cf8c0a07d0bc13eb0b4fbd1c920a27c8fb1b2929666da6c8b9d58513c95c7552c29b9f7949aacf72b16df3a992b1488e1d2e5c370814dbf5b21dbe730cb0abdc5c8056a5315d3bf83ad20d7f7c7e49716676126badc625f7d904d311a8ebb5e28b7587c7687b8c00eee0ec5383c70986a55d4cd14c82b4a22bf3c993e8366f3090c04fcc8cb2c4e8dd1083a9a80106553a4302c85e099481899cd5d0c85526a7aee8fc481939b4ca6a90f9f241dc33ad8f27361694c0b72603714e3e03143f0f4985a9ff970adf886795c860705f2924cf5db3059d22c7d2a24dc5c6cbe17dce4087a74ac83df9d7015a92c35c9962ff768dc6ce1f55ca4ed1904ad9edc33ae98e50e55f237d62c69d435dd4e286657bab8e6d91494c9edb95d253c8e95df58d755fa279f5c1b1a73ee0345b96fa75195c50e538a8411363e20b271559c49e98c202b25fda6cae30d97a58549a21c5bde47a0f77365a687245c9eceaa7f0d3adb28e0736d8fd81733fffdec0ac94493dd7717c4ef7b8b9b9e6c8336ec5089beed884037a0af0ebfeea6f0094e7a5f9dfc89e336ee51d31f54eb19fdc7bba020d283f4a049ff47a7cc7aca4b3831a25e80add638d6b40469c97b6a03591b378cbf5a853e39a561461b4c65ede4496ae750034ef464a9823f126bc84ec5650b94106f978b6283b2486aad723b4b09a3734b3dc334c196e4bcfbf58bac2f40f2f94e665503330b78b9b4cb26d2b16a7abc8b844264090a7b22c4928fd86de805f9b59bf37c8763cc7bb130d12f895bd0f497f0a422664cd66646de799cf5449bcd122684d0abfa2631ebbb6307d8823d18475266c33259fc70c540785c8a974419449ef81df334a4674c202e57ff4cfb8cfc9dcb86da37fc53a49c513a81c21e70cd976eac5f8c62b6b26d972c51f0e97b81d35bc0c8ee6e59e1ca9e30d44928155601e4464cc21156bc85b301c5bc42c69843aaaf7cbc4eb54809abd4c9e39fdb05d91a4cb09f740347c840a23fd9b391e28417a9f664ef940557e5a4714b4c73e354f017bf90f810002aa662cee5da6f38409c2d6bfbdbdae227fa7eb09d642e51db0254d85cd39b65fb84afb9f28bdbfbb1c7ce5f4e8de8f0c9af1714055b7f44e6244bd4b702f19c212886ee608a42ef90dc4d5ea3e0f6908d9d4deda138b4fd026550b645ea467be00abf669b649325ee8376c5f8af135ae06901e40c30c5fd45a8690b08765654fb1dc684e0fefec23b681cb2cd226dc4615cbcedcea5c2d2e6b55ad2f5526041b7e20a9a2923b435cbeae93070c290d764eefcb8abea659bbcf9496783d16bf1874fd7e2e094f66d06f967bbf34935b34b445d80c2e72dff88b7083f54c382b535f5b69e1e876d421d9e09b84c2b027fdb0f2d02c988911a22cbb848f524de3af561241ec0d938fdd68bee7992a04cfb1a186e1e7f06ace33ce0e61ca3a39845ac6332b052fbe4cc2803d908dcb6ad06d00eedcae17f3b2670eff163b084a93556b783508eecab7293da98e566e6155d646fedfbf9f49ab2771c3ed110fc4ba412b8d847811473f2c04726e79af2d63c078c3a005984a2f98af1c6823eb253de71c31a6c5ec8cc5a3fa9a163762b4af8d4d38bae8aeaa49ac5a7ef708f38d3aea590e608beb33db387191b97a96b994ebb44d74f35e635daca9c96e356a2be5c4a7cb78ef5b431b802702ba3540496bc69d3da6f2709e9855524fc9c505a9565d19333aa7c5fe3bbbb0f91402ba8781f16607788ac8f4504a0c9fd862af2dd7016f7612dec351a6465e384a6a75f0698c926356d36e63f4ae21cc8a08af96cc2be1bde2a6135aef09ddc5d926b68eba1f1813d26502df1bde674b4688ce00e7547724eb77e7361cf3e1ae666434499f11b0b28de9cf2dff072ab9a39ed76e63ff3c73ec3c6593cdb4ea4783abcebee73ae917975bbaf764ef5251f73cb2668c1c0b7462c8c358064b14941050027a32d7d88e72fc7de1da27e8b8e686677c77c116bc1ec28ddca45671306935175c9513be37e874173b04018d7cf5171ffd789596aab62b3c91c246e31629f8279fd9eb55c50c3bfbbb177606b8b3419ba6991da2058cb6e15cc24fd61e7b9bece1f06b29e8102404f22ca7115e296929bea2ff1110aa0bc60c510ff89fa6e58cbda425f03b00d1851c0c76daf5b187813408de8a10926023d43463449c8cbf9b0aca8170bac91018f2527a7a61ba265ee2e2197b81f4bbdbd701f5be03d00939f5fd974748508401f8d848af663db8b118f9f623f19f9a7d5e0a68c61152cda2a72004861e5adda733c69cc34b12bde45318ae6d151cc71a07bae42de2dfc3a783d38d0ae7227abc75bf154b2ad0199a95d09d500e9660c6350a17d1760e54e7bd52bec0f57bbe0c3804151a5f4178fad29ec1a143affabb57670874fcf6a54483bef15836b04f756c2972624b39141e6587f61dfc8bf8c7c15f12111cf016f64b33e7555dee3a602b091dcdcd266e2926cb497a8a74fc58df2b9e38cad9bf23bdaa574d8603096f23b8fbd867d5101071824cf1682a5c14a09c3479942af2d1ecfaa61b310302febc2986b20e629169f168e3b5ab618e0f54ae02748e6375addfd34920f40cbdaf2c210d9497657f3710f66c0d5a2613d5a83f3781f9d0b2a81aa58b5a7ac50efe710d2c34511901636fd202c268c46d38963da4619c71c84c9e7230c2407a1fa636e62130736badc48ed84bb1f55f0ab0d869a1c3b18f05623aa78050ddf8658ec63c34d17415e6c34bbd8f31ad32e051d9edee5d9d0a0f36e20c87d8399f6af12046b95a6c39a80cd19fc965bbff73a77cb73e07729c3c8f503d60848ff808d9a1e847caf7a257926e0d4aa373207b1605827a4d36033ecbbe3a8a8062fe8b375de1b81b2ee2f8bc9b52410204b1409a316a9c11015ffcb0e95cd711fda426172c17a3ec2dd6c6986b099daca7e7e55fc00bffa42eaa4f73595d91ccc5d065813bfbbf619df78c3450dfe45acaffd2c9013b1aad3a7cf23cdc36e7a80e2cab30e21e192c338052e6b1f8309cecdbe8e232d551c9c111b50c2ef043bc8b79dd608a11b7051cc2cfaa2eb7eeb2b6fb56f7a82ca425007da4a3c1262093017a600289211807016a411e5b30cb72ef7876c4992e03462441b78de45044ad8b8bd9141775b03a6f5aee624f90799cf500ba71ab05739c3930e02cdf5fa9b08736bce967910369d88c37d15fed8d6e1bf0be3de4b9b9bed94c8a15e52cce401e322cb41b1a9cd98eaffe106980dcce2f5cbae29f6656b511d4277b7b8dab78b25327acc4a4cce74b167e6137e079d39cf66ce7773e28bfdc43cd11cc525efb9ae1481068ddd8cdca9dd3763fa2d81c40c12945acda348a3a5c1a4adea72c6b5ed36ef682fc1381824b8c63bf282750d26a414ccd1698ae5725513ee15814619feedaa50cb888602c527aa77412a5ee1e1a88310f8d8545699270af7d78d8e2bf74ab8218b6c03c8b80b5b4992e347ab9154f0842c1a311d8b4135bc4e78b4537fe76e8d2c663545f26a5275fe612ac71f9c37052bbd74dab38a78dd58052ba1615a7f057cd36e707e7f46f042b109f0f91e795520855b5f8ddee7178e03d6a67817e857a198b2dd3bf10d6d2745d7b72ff8306a10a783ae39de6e01cf159166d9a4edb2959c0c2eebae0f91a44f2677726fba36402ab3f8387a5ce9e976508cba4d00ed0bf081f6234d63b1f16f5d21b16f84d93e32a0fd0096892b0c9223a1bccf9862765f5626d3219b69d20a9301d9e6ea0611e0e15e17efb76c0963a25f4f8826d637003c6841ebdbc477f05bc48854e9ab00c5db60a7bc6d30506de6bbe849cc42dceee223cf5c6c08e62d2a3e2913dacbd3363fbb97dbd91eb81d642a7654532275ceed6922a9ac454f484772120e0a8bd248f24651432d318a2a39e264f594d8109c1f40f7be2d645c33309b66d0c501cfcf23765ac8ab59625be1219709470b66a10561f39fb4aa243522de2dd4618b47d5faf6f8b4df4261621e9064c149a7c5244e895d2ff3670968d4f17270bf9e09df6faf2cfe6bf58c4f57a9d340f6334686b83ccba5905bb2c0580f98ae2b4c88a7de26cec49bb68ed56140448ca136830bcb9bfce19d2128d975297d5af99ec7d1a063795ad944348985c84444b32442d05592c5fe032573a6ad61b60dffaab8b30e0095230890fa67a9f9d9095b67888d92853ddf10576dd221e2de8c9499e6159287e5740a567bace30765188c0a9d1b4e54746e17cba13d1a8ade8b11349c00a45fbe3687c1d69552466fbc5ed614684bc77e0bca6e6bd91c1b9af8168db064e2a87802a604e1da6f27e61ef2506dd397db71a6124e3caa078286978d731597ce80a3295bf322d898a2b59c518de18d2bed615b2acda39c393e2cabc6656549ff0203c5fd5b7c351a464bf1863c61684fee1e73eebeb6964050c84c9616c8a1d6461ba2cd2e5f9966d0177105ccd53b851a27cc31c30c568c814884e6c1de06aa056a5af36c36ba405ece5b0d8f2ad3f08c1178ec8d836b0108280e8b035f06d89e1d22e7fc9bc43357beb6eb0b9b4ab9214e08d4fa0057996b696dd2999a398aa31bc6fa2cf98183eeb276ef0ae94c3c75b970dddc611ebebcfe5f1e9deb7e7966442bca113f438c6a12f5614834c868e64b9a0b0fc22259da9b49676f9befd8e383db3c1adc42950455573ae37c9298b204d40b9c321c08984bb0eac5869d9f2fa75ab4ca5ba0d47dd6d9c9f3320300e13a5f7eab4b6a5aaab0c01833c6e3c38d308e9ca4f7dd8eae23c173d6f1749af6b0312a599eacd0711710f3560b84deaaa6c9cd410a97b7e75a1f57fcc7ce03d9e5d05cf163726794a478fc4d92c0327dcef70e93352af6f142923cbbe62c8ff7256dc1fcc50bbbb2df8df9175e8a732d7a7d7e68dcdb04e4491e31d19a17439443ad7e9abcf3d3cc05da0363a3796177f5e9cf53cf6197ede80a94559565d57794b8e813067ebaf139ac05b6ec89bfa5c092b51265e6d6f301b183617e41113f5457513db7dca5427812901a0b42c8fe19443af5776c2c32d3f6b0ffed2e6506b2a43299ed0e356380f9e120f91f2a7e260f3a874915237da0d7bb87e0d4f2038dcf1655f7762ba308f81e55f3d652cf27c21145409da0ba671f963c9c02ab4188fafcf88e13f919964a4f344be42d02f966361c23fdd4b68019715139a3605040b90809fb021a3e8ed7827d94865ea6f341d37fc9fc252d2105f6edcabebd93d8f9c4b23f7e59139d190791f5d52e83bd22b93e31ef5207a465ca5a8fae789191693c24ff1d2bdd30df350a73706d5f4710cbde3423d3eb3d0b96d8af2883894427bcc", 0x1000) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000800)="5a440076265ed5823119a4098d4a992ef868946f5aba22af31ed4f33e48302a2639a54e3c83b9527141411081e8e2090290a374c8e19dc28735464412790236d4fba4d4825d9ed9aeb5e88f4e607c72f4f3e2de6da53827185d3e551dea62d38a3684a48430cca53bcc270970d721f18907e3065d38e58d1120107d2050702d69571e7462207deb352d0c1622f7a9022260de8cc4b0f3c9f719b9747182bad83c253a98ec3ed9005929935f0eb699d4a0118119d55ee24f6df5917e12a1a02239e02bed735d5eee9ce56b6e59caca5cfa50dd5e8565f3031b39631e6efc36d619836d0fde0dde13cb9e88dcfb6d65a308335ca838aba280a9dd936de14a85ae4f27a1c38773fa5ccd3b153f295e383ebd8a4b2c6a8b99af9b3c15b080cfc2587fa210b57d4245573c90de5dc646a80c6c55b5d242e0a6f55d920cf8c0a07d0bc13eb0b4fbd1c920a27c8fb1b2929666da6c8b9d58513c95c7552c29b9f7949aacf72b16df3a992b1488e1d2e5c370814dbf5b21dbe730cb0abdc5c8056a5315d3bf83ad20d7f7c7e49716676126badc625f7d904d311a8ebb5e28b7587c7687b8c00eee0ec5383c70986a55d4cd14c82b4a22bf3c993e8366f3090c04fcc8cb2c4e8dd1083a9a80106553a4302c85e099481899cd5d0c85526a7aee8fc481939b4ca6a90f9f241dc33ad8f27361694c0b72603714e3e03143f0f4985a9ff970adf886795c860705f2924cf5db3059d22c7d2a24dc5c6cbe17dce4087a74ac83df9d7015a92c35c9962ff768dc6ce1f55ca4ed1904ad9edc33ae98e50e55f237d62c69d435dd4e286657bab8e6d91494c9edb95d253c8e95df58d755fa279f5c1b1a73ee0345b96fa75195c50e538a8411363e20b271559c49e98c202b25fda6cae30d97a58549a21c5bde47a0f77365a687245c9eceaa7f0d3adb28e0736d8fd81733fffdec0ac94493dd7717c4ef7b8b9b9e6c8336ec5089beed884037a0af0ebfeea6f0094e7a5f9dfc89e336ee51d31f54eb19fdc7bba020d283f4a049ff47a7cc7aca4b3831a25e80add638d6b40469c97b6a03591b378cbf5a853e39a561461b4c65ede4496ae750034ef464a9823f126bc84ec5650b94106f978b6283b2486aad723b4b09a3734b3dc334c196e4bcfbf58bac2f40f2f94e665503330b78b9b4cb26d2b16a7abc8b844264090a7b22c4928fd86de805f9b59bf37c8763cc7bb130d12f895bd0f497f0a422664cd66646de799cf5449bcd122684d0abfa2631ebbb6307d8823d18475266c33259fc70c540785c8a974419449ef81df334a4674c202e57ff4cfb8cfc9dcb86da37fc53a49c513a81c21e70cd976eac5f8c62b6b26d972c51f0e97b81d35bc0c8ee6e59e1ca9e30d44928155601e4464cc21156bc85b301c5bc42c69843aaaf7cbc4eb54809abd4c9e39fdb05d91a4cb09f740347c840a23fd9b391e28417a9f664ef940557e5a4714b4c73e354f017bf90f810002aa662cee5da6f38409c2d6bfbdbdae227fa7eb09d642e51db0254d85cd39b65fb84afb9f28bdbfbb1c7ce5f4e8de8f0c9af1714055b7f44e6244bd4b702f19c212886ee608a42ef90dc4d5ea3e0f6908d9d4deda138b4fd026550b645ea467be00abf669b649325ee8376c5f8af135ae06901e40c30c5fd45a8690b08765654fb1dc684e0fefec23b681cb2cd226dc4615cbcedcea5c2d2e6b55ad2f5526041b7e20a9a2923b435cbeae93070c290d764eefcb8abea659bbcf9496783d16bf1874fd7e2e094f66d06f967bbf34935b34b445d80c2e72dff88b7083f54c382b535f5b69e1e876d421d9e09b84c2b027fdb0f2d02c988911a22cbb848f524de3af561241ec0d938fdd68bee7992a04cfb1a186e1e7f06ace33ce0e61ca3a39845ac6332b052fbe4cc2803d908dcb6ad06d00eedcae17f3b2670eff163b084a93556b783508eecab7293da98e566e6155d646fedfbf9f49ab2771c3ed110fc4ba412b8d847811473f2c04726e79af2d63c078c3a005984a2f98af1c6823eb253de71c31a6c5ec8cc5a3fa9a163762b4af8d4d38bae8aeaa49ac5a7ef708f38d3aea590e608beb33db387191b97a96b994ebb44d74f35e635daca9c96e356a2be5c4a7cb78ef5b431b802702ba3540496bc69d3da6f2709e9855524fc9c505a9565d19333aa7c5fe3bbbb0f91402ba8781f16607788ac8f4504a0c9fd862af2dd7016f7612dec351a6465e384a6a75f0698c926356d36e63f4ae21cc8a08af96cc2be1bde2a6135aef09ddc5d926b68eba1f1813d26502df1bde674b4688ce00e7547724eb77e7361cf3e1ae666434499f11b0b28de9cf2dff072ab9a39ed76e63ff3c73ec3c6593cdb4ea4783abcebee73ae917975bbaf764ef5251f73cb2668c1c0b7462c8c358064b14941050027a32d7d88e72fc7de1da27e8b8e686677c77c116bc1ec28ddca45671306935175c9513be37e874173b04018d7cf5171ffd789596aab62b3c91c246e31629f8279fd9eb55c50c3bfbbb177606b8b3419ba6991da2058cb6e15cc24fd61e7b9bece1f06b29e8102404f22ca7115e296929bea2ff1110aa0bc60c510ff89fa6e58cbda425f03b00d1851c0c76daf5b187813408de8a10926023d43463449c8cbf9b0aca8170bac91018f2527a7a61ba265ee2e2197b81f4bbdbd701f5be03d00939f5fd974748508401f8d848af663db8b118f9f623f19f9a7d5e0a68c61152cda2a72004861e5adda733c69cc34b12bde45318ae6d151cc71a07bae42de2dfc3a783d38d0ae7227abc75bf154b2ad0199a95d09d500e9660c6350a17d1760e54e7bd52bec0f57bbe0c3804151a5f4178fad29ec1a143affabb57670874fcf6a54483bef15836b04f756c2972624b39141e6587f61dfc8bf8c7c15f12111cf016f64b33e7555dee3a602b091dcdcd266e2926cb497a8a74fc58df2b9e38cad9bf23bdaa574d8603096f23b8fbd867d5101071824cf1682a5c14a09c3479942af2d1ecfaa61b310302febc2986b20e629169f168e3b5ab618e0f54ae02748e6375addfd34920f40cbdaf2c210d9497657f3710f66c0d5a2613d5a83f3781f9d0b2a81aa58b5a7ac50efe710d2c34511901636fd202c268c46d38963da4619c71c84c9e7230c2407a1fa636e62130736badc48ed84bb1f55f0ab0d869a1c3b18f05623aa78050ddf8658ec63c34d17415e6c34bbd8f31ad32e051d9edee5d9d0a0f36e20c87d8399f6af12046b95a6c39a80cd19fc965bbff73a77cb73e07729c3c8f503d60848ff808d9a1e847caf7a257926e0d4aa373207b1605827a4d36033ecbbe3a8a8062fe8b375de1b81b2ee2f8bc9b52410204b1409a316a9c11015ffcb0e95cd711fda426172c17a3ec2dd6c6986b099daca7e7e55fc00bffa42eaa4f73595d91ccc5d065813bfbbf619df78c3450dfe45acaffd2c9013b1aad3a7cf23cdc36e7a80e2cab30e21e192c338052e6b1f8309cecdbe8e232d551c9c111b50c2ef043bc8b79dd608a11b7051cc2cfaa2eb7eeb2b6fb56f7a82ca425007da4a3c1262093017a600289211807016a411e5b30cb72ef7876c4992e03462441b78de45044ad8b8bd9141775b03a6f5aee624f90799cf500ba71ab05739c3930e02cdf5fa9b08736bce967910369d88c37d15fed8d6e1bf0be3de4b9b9bed94c8a15e52cce401e322cb41b1a9cd98eaffe106980dcce2f5cbae29f6656b511d4277b7b8dab78b25327acc4a4cce74b167e6137e079d39cf66ce7773e28bfdc43cd11cc525efb9ae1481068ddd8cdca9dd3763fa2d81c40c12945acda348a3a5c1a4adea72c6b5ed36ef682fc1381824b8c63bf282750d26a414ccd1698ae5725513ee15814619feedaa50cb888602c527aa77412a5ee1e1a88310f8d8545699270af7d78d8e2bf74ab8218b6c03c8b80b5b4992e347ab9154f0842c1a311d8b4135bc4e78b4537fe76e8d2c663545f26a5275fe612ac71f9c37052bbd74dab38a78dd58052ba1615a7f057cd36e707e7f46f042b109f0f91e795520855b5f8ddee7178e03d6a67817e857a198b2dd3bf10d6d2745d7b72ff8306a10a783ae39de6e01cf159166d9a4edb2959c0c2eebae0f91a44f2677726fba36402ab3f8387a5ce9e976508cba4d00ed0bf081f6234d63b1f16f5d21b16f84d93e32a0fd0096892b0c9223a1bccf9862765f5626d3219b69d20a9301d9e6ea0611e0e15e17efb76c0963a25f4f8826d637003c6841ebdbc477f05bc48854e9ab00c5db60a7bc6d30506de6bbe849cc42dceee223cf5c6c08e62d2a3e2913dacbd3363fbb97dbd91eb81d642a7654532275ceed6922a9ac454f484772120e0a8bd248f24651432d318a2a39e264f594d8109c1f40f7be2d645c33309b66d0c501cfcf23765ac8ab59625be1219709470b66a10561f39fb4aa243522de2dd4618b47d5faf6f8b4df4261621e9064c149a7c5244e895d2ff3670968d4f17270bf9e09df6faf2cfe6bf58c4f57a9d340f6334686b83ccba5905bb2c0580f98ae2b4c88a7de26cec49bb68ed56140448ca136830bcb9bfce19d2128d975297d5af99ec7d1a063795ad944348985c84444b32442d05592c5fe032573a6ad61b60dffaab8b30e0095230890fa67a9f9d9095b67888d92853ddf10576dd221e2de8c9499e6159287e5740a567bace30765188c0a9d1b4e54746e17cba13d1a8ade8b11349c00a45fbe3687c1d69552466fbc5ed614684bc77e0bca6e6bd91c1b9af8168db064e2a87802a604e1da6f27e61ef2506dd397db71a6124e3caa078286978d731597ce80a3295bf322d898a2b59c518de18d2bed615b2acda39c393e2cabc6656549ff0203c5fd5b7c351a464bf1863c61684fee1e73eebeb6964050c84c9616c8a1d6461ba2cd2e5f9966d0177105ccd53b851a27cc31c30c568c814884e6c1de06aa056a5af36c36ba405ece5b0d8f2ad3f08c1178ec8d836b0108280e8b035f06d89e1d22e7fc9bc43357beb6eb0b9b4ab9214e08d4fa0057996b696dd2999a398aa31bc6fa2cf98183eeb276ef0ae94c3c75b970dddc611ebebcfe5f1e9deb7e7966442bca113f438c6a12f5614834c868e64b9a0b0fc22259da9b49676f9befd8e383db3c1adc42950455573ae37c9298b204d40b9c321c08984bb0eac5869d9f2fa75ab4ca5ba0d47dd6d9c9f3320300e13a5f7eab4b6a5aaab0c01833c6e3c38d308e9ca4f7dd8eae23c173d6f1749af6b0312a599eacd0711710f3560b84deaaa6c9cd410a97b7e75a1f57fcc7ce03d9e5d05cf163726794a478fc4d92c0327dcef70e93352af6f142923cbbe62c8ff7256dc1fcc50bbbb2df8df9175e8a732d7a7d7e68dcdb04e4491e31d19a17439443ad7e9abcf3d3cc05da0363a3796177f5e9cf53cf6197ede80a94559565d57794b8e813067ebaf139ac05b6ec89bfa5c092b51265e6d6f301b183617e41113f5457513db7dca5427812901a0b42c8fe19443af5776c2c32d3f6b0ffed2e6506b2a43299ed0e356380f9e120f91f2a7e260f3a874915237da0d7bb87e0d4f2038dcf1655f7762ba308f81e55f3d652cf27c21145409da0ba671f963c9c02ab4188fafcf88e13f919964a4f344be42d02f966361c23fdd4b68019715139a3605040b90809fb021a3e8ed7827d94865ea6f341d37fc9fc252d2105f6edcabebd93d8f9c4b23f7e59139d190791f5d52e83bd22b93e31ef5207a465ca5a8fae789191693c24ff1d2bdd30df350a73706d5f4710cbde3423d3eb3d0b96d8af2883894427bcc", 0x1000) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) 5.606402304s ago: executing program 1 (id=6516): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}}, 0x4, 0xffff, 0x2, 0x10000, 0x32, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0x0, 0x3, 0x29e, 0x0, 0x8a, 0x85, 0x5}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180400000000000900000000000000009517a18fcc000000"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900dd00000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000006c0)="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", 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e25, 0x3, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="9d827cb13031dc42ee8eaa478d65590ea8282bb04997881f45e025dafed20f2b4fa8c2e223b445764ca4a6274f4be8019a194e", 0x33, 0x20008040, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0x28, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd}, 0xe) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f00000001c0)={0xa, 0x4e23, 0x8005, @empty, 0xbffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x30}, 0xc050) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000020603000000000000000000000000000d0003000400000000000900020073797a31000000000500050002000000050001000600000099fdbd390a92c7dc057e2940aa1e238fc97cf9321641bc123b58fbd1c9af2c189be8adad2580ec798e984575f447029d2d1730a834afce8aa9e9a3e90f3e25bd5848cd33403c1a7aa5e7cb27288e62e985ba964c6f8c1318734b51a5f542ebe8f51ffb09372956573916fe6a2fc51092ab552a6121dae9e63f514dbdf403b676d90e41678832a60e4bb7caedf7fbd6129a6427fd2701"], 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000ac0)={0x0, 0x95, 0x9, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) 3.290451381s ago: executing program 4 (id=6535): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000b80)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r3, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x38, &(0x7f0000000000)=0x6, 0x4) (async) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000000140)=0xdf6, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r6, &(0x7f00000107c0)="05031600d3fc140000004788031c09103c287ebdfb3d5cecf8161ebc4ab0a6b547ff92df6275ff3bf798c8dd32c7079239d5c089", 0x34, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x1d, r3, 0x0, {0x0, 0x1}, 0xfd}, 0x18, &(0x7f0000000840)={0x0, 0x5d}, 0x4, 0x0, 0x0, 0x24004045}, 0x81) 3.073122159s ago: executing program 4 (id=6538): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xd3) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) (async) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000200000000000000080009000d000000", 0x24) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000f80)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="8d", 0x1}], 0x1}, 0x2c044010) (async) shutdown(r1, 0x1) (async) clock_gettime(0x8, &(0x7f0000000280)) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x67}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}}, 0x8000002) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r6, @ANYBLOB="029000000080040008000a00", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x2008c814}, 0x800) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x2000, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040), &(0x7f00000001c0)=0x8) 2.81095967s ago: executing program 4 (id=6540): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="febcffffff00000200000000000000427b110200793d33d8a0d7f696971b366aeb8ec5f915a60f3abcf7044367ab8674a06e97ce2235c915c49001b63bd1c3f38d7bfa8365f5c30458d66aaaef45c6533a53caeff393e412ae6d48f00e25299fcb9f9ace0f138c770f5a38bcaebf9249374f225871c3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000500000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000100), 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f00000027c0)={&(0x7f0000001740)={0xa, 0x4e24, 0xfffffffa, @remote}, 0x1c, 0x0}, 0x4040814) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r5, 0xffffe000) close(r5) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000), 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000140), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000035c0)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xa, 0x1000, 0x8, 0x5, 0x3}, 0xa3}, [{0x6, 0x5, 0x9, 0x5, 0x5, 0x8}, {0x0, 0x4, 0x7, 0x7, 0x3, 0x3}, {0x0, 0x6, 0x324, 0x5, 0x10, 0x5}, {0x80, 0x8, 0xc, 0x7, 0x400, 0x1000}, {0x4, 0x0, 0x4, 0x6, 0xffffffd3, 0x6}, {0xf, 0x2, 0x8001, 0xfffffffa, 0x800, 0xe5d}, {0xf, 0x6d7, 0x7, 0x1000, 0x2, 0xff}, {0x4, 0x0, 0x6, 0x4, 0x7, 0x1}, {0xe8b, 0x8, 0x7, 0x3, 0x8, 0x8}, {0x45ca, 0x8, 0x0, 0x5, 0x0, 0x5}, {0xd0c, 0x4, 0x7, 0x800, 0x4, 0x5}, {0x4, 0x0, 0x7f, 0x8, 0xb4, 0x3}, {0x5, 0x100, 0x2, 0x1ff, 0x10000, 0xffffffff}, {0x6, 0x3, 0x9, 0x6, 0x6, 0xfffffff8}, {0x7f, 0x3, 0x2, 0x5, 0x563, 0x8}, {0x0, 0x9, 0x87, 0x5, 0x8, 0x800}, {0x5, 0x585e, 0x6, 0x3, 0x400, 0x7}, {0x7, 0x6fc, 0x7fff, 0x6, 0x6, 0x4}, {0x3, 0xef0a, 0x9, 0x4, 0x7c1103b4, 0x5}, {0x7f, 0x4, 0x5, 0x1, 0x6, 0xffff}, {0x80, 0x56, 0x4, 0x9, 0xfffffff4, 0xdff}, {0x7, 0x1, 0x2400, 0x81, 0x0, 0x2}, {0x8, 0x3, 0x4, 0x1, 0xffff8f3e, 0x94e}, {0x0, 0x80, 0x5, 0xc5c3, 0x5, 0xb}, {0xfb, 0x540fb8a0, 0x3, 0x400, 0x8000, 0x8001}, {0xfcf, 0xe0, 0x3, 0x4, 0x1000, 0x4923fb63}, {0x6, 0x5, 0xff, 0x7ff, 0x3, 0x401}, {0x4745c803, 0x9, 0x9, 0x6e, 0x39, 0x9}, {0x0, 0x0, 0x4, 0x3, 0x5, 0x4b9d252f}, {0x40000000, 0x0, 0x7d1, 0xb7, 0x7, 0x8}, {0x9909, 0x3, 0x800, 0x1, 0x7b, 0xffffffc0}, {0x3, 0x200, 0x1, 0x81, 0x10, 0x401}, {0xfffffff4, 0x1, 0x3, 0x10000, 0x5, 0x1}, {0x6, 0xcc6e, 0xee1, 0x3ff, 0xa4f, 0x3}, {0x9, 0x6, 0xc, 0x7, 0x23, 0x200}, {0x5, 0x3, 0x0, 0x6, 0x2, 0x100}, {0x1ff, 0x78d, 0x7, 0x5, 0x942d, 0x8}, {0x6, 0x9, 0xf, 0x401, 0x0, 0xe6}, {0xffffffe8, 0x81, 0x8000, 0x40, 0x0, 0xf192d4b}, {0x5, 0x100, 0x6, 0x4, 0x7, 0x400}, {0x8000, 0x5, 0x4, 0x4, 0x3, 0x8cfa}, {0x0, 0x9, 0x9, 0x2, 0x4, 0x1}, {0x4, 0x7, 0x5, 0x3ff, 0x8, 0x80000000}, {0xb, 0x6, 0x3dcd, 0x5, 0x0, 0x7}, {0x4, 0x7f, 0x8, 0x7, 0xa, 0xdc5}, {0x3, 0x5, 0x6543, 0x8, 0x5, 0x4}, {0x9, 0x1ab, 0xf, 0x7, 0x8001, 0x8}, {0xe, 0x6, 0xfffffc00, 0x9876, 0x81, 0x9}, {0x3, 0x10001, 0xa, 0x400, 0x4c9e, 0xffffff01}, {0x0, 0xce000000, 0xe, 0xfffffff9, 0x401, 0x6}, {0x6, 0xf, 0x2, 0x0, 0x5, 0x2}, {0x80000001, 0x2, 0xf9, 0x9, 0x2, 0x4}, {0x1, 0x400, 0x5, 0x200, 0xed, 0x3}, {0x7, 0x7, 0x899, 0x1000, 0xfff, 0xfffffffb}, {0x3, 0x1, 0xe2, 0x6, 0x160, 0xb8}, {0x3, 0x0, 0xbf6, 0x3, 0x0, 0x81}, {0x2000009, 0x1, 0xed, 0x11e, 0x7fffffff, 0x7}, {0x100, 0xc, 0x7, 0xaa, 0x50000, 0x7fff}, {0x3, 0x19a8, 0x6, 0x529, 0x4, 0x9c2}, {0x4, 0xb, 0x9, 0x3, 0x5, 0x8001}, {0x9, 0x5ad, 0x1, 0x4, 0x10000, 0x25}, {0x0, 0x2, 0x3, 0x1, 0x6, 0x80}, {0x101, 0x1, 0x5, 0xb, 0x1a0d, 0xad47}, {0x9, 0x8, 0x0, 0xb, 0x8, 0xce65}, {0xd, 0x10000000, 0x0, 0x7, 0x7, 0xeee}, {0x9, 0xc8, 0x9e1, 0x55, 0x2, 0x2}, {0x15bd, 0x6, 0x68d, 0x10001, 0xb, 0x5}, {0x1, 0x9, 0x59a, 0x1, 0x6, 0x3ff}, {0x8456, 0x7, 0x3, 0x0, 0x7, 0x2}, {0x759, 0x11, 0x3, 0x9, 0x3, 0x628}, {0x3, 0x4, 0x4, 0x1, 0x9, 0x2}, {0xc71, 0x2, 0x6, 0x7fff, 0x9, 0x5c0}, {0x1, 0x1, 0x5, 0x7, 0xde9, 0x8}, {0x8, 0xfffffffe, 0x1, 0x3, 0x7, 0x36}, {0x0, 0x8, 0x4c6, 0x0, 0x7863, 0x1}, {0x0, 0x8, 0x7152, 0x5, 0x1, 0x6}, {0x0, 0xe08, 0x7, 0x9, 0x7, 0x8}, {0x3, 0xcb86, 0x100, 0x976, 0x935, 0x800}, {0x4, 0x40, 0x0, 0x2, 0x2, 0x80000000}, {0x3, 0x3, 0x0, 0x15, 0x3, 0xa}, {0x4, 0x7fc, 0xb2, 0x7, 0x1}, {0x3, 0x6f15, 0x101, 0x401, 0x8, 0x1}, {0x1, 0x1, 0x0, 0x800, 0x1, 0xfffffe01}, {0x8, 0xa, 0x8000, 0x3, 0x0, 0x6}, {0x6, 0x1, 0x1, 0x46a, 0x5, 0x8001}, {0x0, 0x9a9, 0x9, 0x29b, 0xfffffffc, 0x5}, {0x9, 0x3e0, 0x4, 0x80000001, 0x6, 0x80000000}, {0x6, 0xd, 0xfffffffc, 0x325, 0x8, 0x1}, {0x7fff, 0x7, 0x3ff, 0x0, 0x6}, {0x100, 0xfffffc00, 0x2e, 0x5, 0xfffffffa, 0x9}, {0x0, 0x8f, 0x100, 0x3, 0x4, 0x7}, {0x7ff, 0x4, 0x435d, 0x125, 0x10, 0xfffffff9}, {0x36, 0x2, 0xf, 0xfffffffd, 0x3, 0x8}, {0x7, 0x7, 0x1, 0x0, 0x6, 0x10001}, {0xd609, 0xcd6, 0x0, 0x3, 0xfffffba5, 0x401}, {0x8, 0x7fff, 0x37, 0x8d45, 0x952f, 0x8}, {0x8, 0x4, 0x8, 0x8, 0x0, 0x5}, {0xffff, 0x80000000, 0x8, 0x3ff, 0xff, 0x2}, {0x6, 0xb, 0x9, 0x6, 0x1, 0x1}, {0x4, 0x8, 0x7, 0x0, 0x4, 0x297efd19}, {0x663e, 0x8, 0x81, 0x1, 0x7, 0x8001}, {0x5, 0x2, 0x4b42, 0x5, 0x5, 0x401}, {0xa20, 0xfffffffa, 0x5, 0x6, 0x0, 0xae}, {0x7fff, 0x800, 0x6, 0x4262e, 0x5, 0x2}, {0x7fffffff, 0x4, 0x3, 0x2, 0x5, 0xb339}, {0x96, 0x758, 0x9, 0x400, 0x3ff, 0x5}, {0x3, 0x7, 0x4, 0x4, 0x7, 0x9}, {0x3, 0x2, 0x9, 0x7, 0x4, 0xb5}, {0x8, 0x0, 0x2, 0x9, 0x2, 0x200}, {0xff, 0xaf9a, 0x0, 0x7, 0x1, 0x6}, {0xe, 0x9, 0xf, 0x1, 0x460, 0x7}, {0x5e82, 0x0, 0x32, 0xffffffff, 0x81, 0x6}, {0x2, 0x2, 0xfff, 0x1728, 0x200, 0x7}, {0x7, 0x3, 0x6, 0x8, 0x1, 0x6}, {0x7f, 0xfff, 0x9, 0xe037, 0x3, 0xfffffff7}, {0xa0000000, 0xd, 0x8000, 0xf05, 0x6, 0x6b}, {0xffffffff, 0x8, 0x5f94, 0xfffff1f5, 0x7fffffff, 0x1000}, {0x0, 0x3e2, 0x9, 0xfffffffb, 0x0, 0x9}, {0x1, 0x5, 0x9, 0x0, 0x800, 0x401}, {0x513f, 0x8, 0x0, 0x80000000, 0x28e, 0x9}, {0x2, 0x8, 0x80, 0x3, 0x9f8, 0x80000001}, {0x80000001, 0xc1, 0x4, 0xeb3, 0x40000005, 0x2568}, {0xc14c, 0x6, 0x2, 0x71, 0x3062, 0x7}, {0x9, 0x2, 0xd920, 0x1, 0x8, 0x1}, {0x7f, 0x9, 0x7, 0x4, 0xdd2b}, {0x0, 0x8000, 0x819, 0x8, 0x81, 0xb8}, {0x5, 0x2, 0x7, 0x0, 0x2, 0x687d7ec1}, {0x8, 0x80, 0xfffffff7, 0x8001, 0x4, 0x6}], [{0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x4, 0x1}, {}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x7, 0x1}, {}, {0x2}, {0x3}, {0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x5}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x6}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x7e76235531e31529}, {0x2}, {0x3, 0x1}, {0xa}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x6}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) getsockopt$sock_buf(r8, 0x1, 0x47, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x60, r11, 0x1, 0x70bd28, 0x25dfdc04, {}, [{{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x44001}, 0x24008850) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000240)={'bond_slave_0\x00', @random="f9ac130a25e4"}) getsockopt$sock_buf(r7, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) 2.080030329s ago: executing program 2 (id=6543): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.078737113s ago: executing program 1 (id=6544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b4000000000"], 0xc4}}, 0x8d0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x30, r4, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4d1b7ff2}]}]}, 0x30}}, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x6, 0xd, &(0x7f0000000040), 0x2) sendmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$inet(r9, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x4000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r10) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r12, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x5}, {0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r12, 0x40047440, &(0x7f0000000540)=0xfff) write$ppp(r12, &(0x7f0000000480)="1e08", 0x2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="25081700", @ANYRES16=r11, @ANYBLOB="00042dbd7000ffdbdf253000000005003400100000000500340003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028bd7000fddbdf251e00000008000300", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x200048c3}, 0x20000094) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r14 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r14, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0x493b, 0x5}}], 0x18, 0x4008000}, 0x28008841) 1.883641878s ago: executing program 2 (id=6545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000e8"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x6, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) r6 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$alg(0xffffffffffffffff, 0x0, 0x2c000044) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x70}, 0x19}, 0x20040814) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, r7, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.883353235s ago: executing program 4 (id=6546): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a300000000008006f0000"], 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24048800) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, &(0x7f0000000040)=0x1000, r0, &(0x7f0000000100)=0x6a, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x2000c058) 1.67771161s ago: executing program 4 (id=6548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @loopback={0x1000000}, 0xd}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r0, r2, 0x0, 0xffffffff004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={0x0, &(0x7f0000000940)=""/52, 0x162, 0x34, 0x1, 0xfe}, 0x28) ppoll(0x0, 0x0, &(0x7f0000000a00)={0x0, 0x3938700}, &(0x7f0000000a40)={[0x4]}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000025000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, r4}, 0xc) 1.597428299s ago: executing program 3 (id=6549): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0xe0, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x2, 0x3, 0x6, 0x400, 0x1, 0x6be0d9d4, 0x4, 0x3}}, {0xa, 0x2, [0x5, 0x1, 0x3]}}, {{0x1c, 0x1, {0x7, 0x9, 0x200, 0xcd06c6df, 0x0, 0x0, 0xff, 0x7}}, {0x12, 0x2, [0xe, 0x9, 0x4, 0xf83, 0x0, 0x81, 0x3]}}]}]}, 0xe0}}, 0x4000080) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.421782527s ago: executing program 1 (id=6550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_LABELS_MASK={0x18, 0x17, [0x7, 0x5, 0xf1, 0x4, 0x7]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xfffffffffffffe2f, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xbf5}]}, 0x8c}}, 0x0) 1.359197607s ago: executing program 3 (id=6551): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20010) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r3, 0xaef000) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) listen(r1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0x2, 0x4, 0x6, 0xb, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) ioctl(r4, 0xe, &(0x7f00000003c0)="b28d3cacfd79353574dab36238c5e295b943e447a0de375cd28335ab5e7bf1657d541892d3a8958ca3f33b3eeb02367eba10b4296b37ca832c469ddc87f775fc36af612f6af5bf1c24cff0490ccf629b9d420b39a30fd73b0153937c1d4457515882ff8f2f65fde8da3835d448e1a1e93b4967b25c6bdc3f") setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r8, &(0x7f0000002680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000740)="d4", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000b80)='\a', 0x1}], 0x1}}], 0x2, 0x4000050) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) 1.24256923s ago: executing program 2 (id=6552): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="016f001901002700000027"], 0x4e) write$cgroup_int(r1, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) 1.170401929s ago: executing program 3 (id=6553): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8932, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0x9, 0xd9ed, 0x3, 0x3, 0x0, [0x3, 0x1, 0x7ff, 0xf]}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x18, &(0x7f0000000200)=ANY=[], &(0x7f0000000500)='GPL\x00', 0xfffffffd, 0xd0, &(0x7f0000000540)=""/208, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000c00)={'gre0\x00', 0x0, 0x80, 0x700, 0x0, 0x5, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x66, 0x0, 0x7, 0x2f, 0x0, @broadcast, @remote}}}}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x2000}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x20, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000100)={'bond0\x00', {0x2, 0x0, @multicast1}}) sendmsg$nl_route(r4, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x22}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x46}}, @NHA_GROUP_TYPE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008d5}, 0x4000000) sendto$inet(r0, &(0x7f0000000300)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c80", 0x3f, 0x4044880, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'dummy0\x00'}) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000720000005ecaa408977af9be72616f17a1dd02238496fcf8c49513debc048b57092bef5b9f16dde55ba956b7daba537ec9f0aec46b6c63fe066765b8c8fa39fdac9c0d524d08290cf73f635b059f757cc1584dc1c64f3ac9bf3ea5ff009e3d3ba0037e351e2eb2c365665529f772d4aa178c045c9d41e75c352b7b431f66d062354384122654542d1fec012566ceb6695756f19e57169c75819ff631e30fcb9da64a741f5987e4dee27deba2ef1c44b84b72d5cd3debb39f52b449dbebca326af219418fbdf6e787150b6c8f8be59a80d3d29bd361957bc2af1488be03c17d720a4be5c0d64f59b8b36310883b2e1387d9f308190e1c583511d8ea2c9e50ac1a67a734c794ce360658440b19033e64"], &(0x7f0000000340)=0x96) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r6, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f00000011c0)={{r8, &(0x7f00000007c0)=')\x00', 0x200000, &(0x7f0000000900)={@align, {0x71, 0x8a, 0x7fff, 0x8}}, 0x6, &(0x7f0000000940), &(0x7f00000009c0)=0x7}, 0x7, &(0x7f00000010c0)=[{0x2, 0x8, &(0x7f0000000a00)='\x00', &(0x7f0000000a40)="00b934c1f6861604710ae11a2d40eba48f1178409b066f02ba4836aed46f06bf0061a0b505d1ec15661872bdbae160dc0eb6ae84b98a968a32038f49cfa944bf339ec5beae648a81132cbe30505ef2abe3becec1e274b7eab81ff9305ef22aaf277c3b7baf2e748562fcb09c57c284", 0x6f, 0x8}, {0x3, 0x1, &(0x7f0000000ac0)='/*%/.#^:\'@].\x00', &(0x7f0000000b00)="8005cd238d9dead5e050b2f35f220a9835f1103ee84aa5be1cb9d0215eea546ee2c113eb970839c87dcf3ad8e4b6198699799ab5e9738696cd44e26b2877ab1aba772882041d9584e08a239dfb07af9dac461213586895c1779c1329d913001936979b6035f16f1c970a4057af060be457218c2aa34fcc8ff9ccbe53345cacfa4c00062f048dac3e5465497dbc0295b4f1ae", 0x92}, {0x0, 0xfffffff8, &(0x7f0000000c40)='\'%()%\x00', &(0x7f0000000c80)="1fa1d604a7a1852e4039e4b3032d5685c7979e080cba29bc9f9228f45d73b1129af0c99b61b7424611f40b53503e393e6787e6c2c0a7b2d53af8e338a72acb2c4388d41b451d77362efeb2f274c3da7f76f65c687cf208d39cab430accada1988d3b68f854b2cf2bbec4eebe22979e2993da1646ceacd4cc1887ef486808ed48f320ff8ab1eab8611bf4c47b6d14c9cb03961277cc1189f92c2264a3", 0x9c, 0x2}, {0x1, 0x7, &(0x7f0000000d40)='GPL\x00', &(0x7f0000000d80)="77e4d0263ca1deef993f68cc8c249563b57051c7af37cc6be163e051c768980fe17457f415f787ce4d0460a7095cb628d31aafb616464d4eae4e015534c24d791aeb004f7cf5b9294b96ef26efdc11522142809704e03bf67b8f9f48c91c", 0x5e, 0x12}, {0x1, 0x8, &(0x7f0000000e00)='\x00', &(0x7f0000000e40)="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", 0xfa, 0x2}, {0x2, 0x9, &(0x7f0000000f40)='bond0\x00', &(0x7f0000000f80)="617adefc1184b54741027bbd6039db5a5f421f92909aec9768f3bbd010a9b23f0f740e4b29058d19b88fe4e925aded2d95ad24c1947b46441744e14375f673be0c06749ef113e60c57e354bc8ed5da630c11bc529febedea6a8b37137ebb1ee5ca4d051fa5a181924be788ce1eedb47edcdc303f9dd30e2149fdd50fbf63709ab4dadbc4c83516527be7034d6b79ebb94f4a2a", 0x93, 0x20}, {0x1, 0x0, &(0x7f0000001040)='GPL\x00', &(0x7f0000001080)="259d0d5cc6ef9baa18afb1e7a64d8bb3d6ea18ca7eb8d2a5183c4b53eef2b795580d4e6eb0194dded83b5f02662782b19d", 0x31, 0x2}]}) setsockopt(r7, 0x0, 0xd673, &(0x7f0000000000)="9eaa12ca", 0x4) 979.144758ms ago: executing program 1 (id=6554): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0xcd, &(0x7f0000000140)=""/205, 0x0, 0x5}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0xcd, &(0x7f0000000140)=""/205, 0x0, 0x5}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) unshare(0x66df2d8b9f554480) (async) unshare(0x66df2d8b9f554480) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) unshare(0x400) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) (async) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000280)={0x20000015}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x0) socketpair(0x2c, 0x800, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x50) (async) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x20000000) 977.958639ms ago: executing program 2 (id=6555): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000012000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 837.896619ms ago: executing program 3 (id=6556): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x1f, 0x0, 0xc}, 0x28) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096a68e15670b"], 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x503, 0x70bd2c, 0x700, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x43887}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}]}}}, @IFLA_MAP={0x24, 0xe, {0x7, 0x9, 0x10001, 0x6, 0xf9}}]}, 0x5c}}, 0x440b0) 636.496346ms ago: executing program 2 (id=6557): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000010c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/248, &(0x7f0000000200)=0xf8) 368.030978ms ago: executing program 3 (id=6558): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x80}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x1}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x0) 335.560615ms ago: executing program 2 (id=6559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000002000010029bd700000000000020000000000000200000000080004000500000008000600ffffff"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001300)={{{@in6=@private1, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000001400)=0xe8) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x2c, 0x4, 0x70bd28, 0x25dfdbfd, {0xa, 0x7c}, [@typed={0x8, 0xfc, 0x0, 0x0, @pid=r2}, @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@local}]}, 0x30}}, 0x2400c010) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x944a4b98, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000012c0)={r6, &(0x7f0000000280)="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", &(0x7f0000001280)=""/50}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800a000100b2db34cd002900a55a0600"], 0x3c}}, 0x0) 256.982814ms ago: executing program 4 (id=6560): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x3ff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r4, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0x4, 0x1fd, 0x81, 0x1}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x73f}, 0x1c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020603000000000000000000050000000c00078008000800000000400900020073797a32000000000500040000000000050005000a0000000d0003006c6973743a736574006d0000000500010007000000031544e1f85aa6da74642e052cbd7d6255"], 0x54}}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x5}}]}, 0x38}}, 0x400c804) 0s ago: executing program 3 (id=6561): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c00"], 0xfc}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r0, 0x0, 0x33) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x9000}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket(0x10, 0x803, 0x0) socket(0xf, 0x800, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) accept4(r4, 0x0, 0x0, 0x1000) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000ac0)={'gretap0\x00', 0x0}) sendto$inet6(r7, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): BP: 00007ff4085ba090 R08: 0000000000000000 R09: 0000000000000000 [ 703.369188][T26096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 703.369196][T26096] R13: 00007ff407a16038 R14: 00007ff407a15fa0 R15: 00007fff35ba2258 [ 703.369224][T26096] [ 703.686409][T26105] netlink: 'syz.2.5044': attribute type 21 has an invalid length. [ 703.730029][T26064] tipc: Resetting bearer [ 703.731389][T26105] IPv6: NLM_F_CREATE should be specified when creating new route [ 703.743816][T26105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 703.751084][T26105] IPv6: NLM_F_CREATE should be set when creating new route [ 703.758390][T26105] IPv6: NLM_F_CREATE should be set when creating new route [ 703.765789][T26105] IPv6: NLM_F_CREATE should be set when creating new route [ 703.821594][T26064] tipc: Disabling bearer [ 704.067030][ T5630] Bluetooth: hci2: command 0x0401 tx timeout [ 704.074704][T26107] : renamed from bond_slave_0 (while UP) [ 704.109206][T26121] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5048'. [ 704.159735][T26123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5049'. [ 704.189598][T26123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5049'. [ 704.224354][T26123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5049'. [ 704.320439][T26129] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 705.974274][T26187] __nla_validate_parse: 4 callbacks suppressed [ 705.974292][T26187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5064'. [ 706.098651][T26187] 8021q: adding VLAN 0 to HW filter on device bond5 [ 706.192051][T26187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5064'. [ 706.355103][T26193] bond5: (slave veth7): Enslaving as an active interface with an up link [ 706.396986][T26187] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5064'. [ 706.799990][T26204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5070'. [ 707.243360][T26223] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 707.251231][T26221] FAULT_INJECTION: forcing a failure. [ 707.251231][T26221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.254968][T26223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5076'. [ 707.322159][T26223] tipc: Cannot configure node identity twice [ 707.324487][T26221] CPU: 0 UID: 0 PID: 26221 Comm: syz.4.5075 Not tainted syzkaller #0 PREEMPT(full) [ 707.324510][T26221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 707.324520][T26221] Call Trace: [ 707.324527][T26221] [ 707.324534][T26221] dump_stack_lvl+0xe8/0x150 [ 707.324561][T26221] should_fail_ex+0x412/0x560 [ 707.324587][T26221] _copy_from_user+0x2d/0xb0 [ 707.324611][T26221] ___sys_sendmsg+0x1c6/0x360 [ 707.324628][T26221] ? __lock_acquire+0x6b5/0x2cf0 [ 707.324651][T26221] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.324664][T26221] ? __lock_acquire+0x6b5/0x2cf0 [ 707.324685][T26221] ? kstrtouint+0x6e/0xe0 [ 707.324740][T26221] __sys_sendmmsg+0x27c/0x4e0 [ 707.324762][T26221] ? __pfx___sys_sendmmsg+0x10/0x10 [ 707.324776][T26221] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 707.324816][T26221] ? ksys_write+0x242/0x270 [ 707.324841][T26221] ? __pfx_ksys_write+0x10/0x10 [ 707.324870][T26221] __x64_sys_sendmmsg+0xa0/0xc0 [ 707.324887][T26221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.324904][T26221] do_syscall_64+0x15f/0xf80 [ 707.324926][T26221] ? trace_irq_disable+0x3b/0x140 [ 707.324948][T26221] ? clear_bhb_loop+0x40/0x90 [ 707.324968][T26221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.324984][T26221] RIP: 0033:0x7efd5b59ce59 [ 707.325004][T26221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.325019][T26221] RSP: 002b:00007efd5c3d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 707.325037][T26221] RAX: ffffffffffffffda RBX: 00007efd5b815fa0 RCX: 00007efd5b59ce59 [ 707.325054][T26221] RDX: 04000000000002cf RSI: 00002000000002c0 RDI: 0000000000000003 [ 707.325066][T26221] RBP: 00007efd5c3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 707.325076][T26221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 707.325086][T26221] R13: 00007efd5b816038 R14: 00007efd5b815fa0 R15: 00007ffcbc9b1998 [ 707.325115][T26221] [ 707.700895][T26237] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5079'. [ 707.712613][T26237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.006902][T26249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5081'. [ 708.031586][T26241] netlink: 774 bytes leftover after parsing attributes in process `syz.1.5081'. [ 708.064175][T26241] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5081'. [ 708.194745][T26247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.255811][T26255] syzkaller1: entered promiscuous mode [ 708.302202][T26255] syzkaller1: entered allmulticast mode [ 708.321079][T26258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5086'. [ 709.388535][T26310] pim6reg: entered allmulticast mode [ 709.414489][T26310] pim6reg: left allmulticast mode [ 709.754940][T26323] syzkaller0: entered promiscuous mode [ 709.789864][T26323] syzkaller0: entered allmulticast mode [ 709.978131][T26332] bond6: option ad_user_port_key: invalid value (65535) [ 709.986362][T26332] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 710.027346][T26332] bond6 (unregistering): Released all slaves [ 710.260864][T26344] tipc: Invalid UDP bearer configuration [ 710.260917][T26344] tipc: Enabling of bearer rejected, failed to enable media [ 710.387927][T26346] tipc: Invalid UDP bearer configuration [ 710.387985][T26346] tipc: Enabling of bearer rejected, failed to enable media [ 710.682247][T26360] netlink: 'syz.2.5106': attribute type 7 has an invalid length. [ 710.776317][ T5914] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.776445][T26360] netlink: 'syz.2.5106': attribute type 7 has an invalid length. [ 710.812044][ T5914] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.840372][ T5914] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.870274][ T5914] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.961004][T26366] syzkaller0: entered promiscuous mode [ 710.997244][T26366] syzkaller0: entered allmulticast mode [ 711.899021][T26400] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 712.175567][T26408] __nla_validate_parse: 5 callbacks suppressed [ 712.175586][T26408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5119'. [ 712.295433][T26421] FAULT_INJECTION: forcing a failure. [ 712.295433][T26421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.324203][T26421] CPU: 1 UID: 0 PID: 26421 Comm: syz.4.5123 Not tainted syzkaller #0 PREEMPT(full) [ 712.324236][T26421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 712.324247][T26421] Call Trace: [ 712.324254][T26421] [ 712.324261][T26421] dump_stack_lvl+0xe8/0x150 [ 712.324288][T26421] should_fail_ex+0x412/0x560 [ 712.324315][T26421] _copy_from_user+0x2d/0xb0 [ 712.324339][T26421] ___sys_sendmsg+0x1c6/0x360 [ 712.324356][T26421] ? __lock_acquire+0x6b5/0x2cf0 [ 712.324378][T26421] ? __pfx____sys_sendmsg+0x10/0x10 [ 712.324392][T26421] ? __lock_acquire+0x6b5/0x2cf0 [ 712.324414][T26421] ? kstrtouint+0x6e/0xe0 [ 712.324470][T26421] __sys_sendmmsg+0x27c/0x4e0 [ 712.324494][T26421] ? __pfx___sys_sendmmsg+0x10/0x10 [ 712.324508][T26421] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 712.324549][T26421] ? ksys_write+0x242/0x270 [ 712.324574][T26421] ? __pfx_ksys_write+0x10/0x10 [ 712.324602][T26421] __x64_sys_sendmmsg+0xa0/0xc0 [ 712.324619][T26421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.324636][T26421] do_syscall_64+0x15f/0xf80 [ 712.324658][T26421] ? trace_irq_disable+0x3b/0x140 [ 712.324680][T26421] ? clear_bhb_loop+0x40/0x90 [ 712.324701][T26421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.324716][T26421] RIP: 0033:0x7efd5b59ce59 [ 712.324732][T26421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.324746][T26421] RSP: 002b:00007efd5c3d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 712.324763][T26421] RAX: ffffffffffffffda RBX: 00007efd5b815fa0 RCX: 00007efd5b59ce59 [ 712.324774][T26421] RDX: 04000000000002cf RSI: 00002000000002c0 RDI: 0000000000000003 [ 712.324785][T26421] RBP: 00007efd5c3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 712.324795][T26421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 712.324805][T26421] R13: 00007efd5b816038 R14: 00007efd5b815fa0 R15: 00007ffcbc9b1998 [ 712.324832][T26421] [ 712.718025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.772672][T11827] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.804673][T11827] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.854258][T11827] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.870688][T26439] : renamed from bond0 [ 712.885194][T11827] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.578170][T26512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.580452][T26522] netlink: 'syz.0.5145': attribute type 2 has an invalid length. [ 716.630882][T26568] syzkaller0: entered promiscuous mode [ 716.639337][T26568] syzkaller0: entered allmulticast mode [ 722.761665][T26613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5166'. [ 722.770842][T26613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5166'. [ 722.922702][T26615] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 723.230196][T26624] pimreg: tun_chr_ioctl cmd 35111 [ 723.371974][T26636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5171'. [ 723.718612][T26649] nbd: must specify a device to reconfigure [ 723.816834][ T30] audit: type=1107 audit(1779400253.700:25): pid=26653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 723.855140][ T30] audit: type=1107 audit(1779400253.700:26): pid=26653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 723.884024][ T30] audit: type=1107 audit(1779400253.700:27): pid=26653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 723.908477][ T30] audit: type=1107 audit(1779400253.700:28): pid=26653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 723.928859][ T30] audit: type=1107 audit(1779400253.700:29): pid=26653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 723.947143][ T30] audit: type=1107 audit(1779400253.700:30): pid=26653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 724.114480][T26676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5184'. [ 724.289814][T26639] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 724.322171][T26692] netlink: 'syz.4.5188': attribute type 1 has an invalid length. [ 724.421308][T26692] 8021q: adding VLAN 0 to HW filter on device bond8 [ 724.478328][T26704] openvswitch: netlink: Message has 764 unknown bytes. [ 724.541769][T26709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5193'. [ 724.691444][T26720] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5194'. [ 724.711967][T26721] syzkaller1: entered promiscuous mode [ 724.717822][T26721] syzkaller1: entered allmulticast mode [ 724.774092][T26720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5194'. [ 724.854812][T26720] sctp: [Deprecated]: syz.0.5194 (pid 26720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.854812][T26720] Use struct sctp_sack_info instead [ 725.117274][T26741] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5200'. [ 725.272577][T26753] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20004 [ 725.814853][T26789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5213'. [ 725.856810][T26786] pimreg9: entered allmulticast mode [ 726.191614][T26804] netlink: 'syz.4.5217': attribute type 6 has an invalid length. [ 726.209093][T26804] netlink: 'syz.4.5217': attribute type 7 has an invalid length. [ 726.225642][T26804] netlink: 'syz.4.5217': attribute type 8 has an invalid length. [ 726.251710][T26804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5217'. [ 726.517347][T26817] xt_hashlimit: size too large, truncated to 1048576 [ 726.610586][T26822] netlink: 'syz.4.5223': attribute type 2 has an invalid length. [ 726.621038][T26826] netlink: 'syz.4.5223': attribute type 2 has an invalid length. [ 727.415914][T26867] netlink: 'syz.4.5234': attribute type 13 has an invalid length. [ 727.892997][T26894] netlink: 'syz.3.5242': attribute type 3 has an invalid length. [ 727.904934][T26894] netlink: 'syz.3.5242': attribute type 3 has an invalid length. [ 727.916229][T26894] netlink: 'syz.3.5242': attribute type 3 has an invalid length. [ 728.045031][T26904] __nla_validate_parse: 3 callbacks suppressed [ 728.045048][T26904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5245'. [ 728.252111][T26904] veth13: entered allmulticast mode [ 728.282769][T26904] bond9: (slave veth13): Enslaving as an active interface with an up link [ 728.345935][T26918] bond0: (slave wlan0): Opening slave failed [ 728.360174][T26909] bond9 (unregistering): (slave veth13): Releasing backup interface [ 728.375087][T26909] bond9 (unregistering): Released all slaves [ 728.441633][T26904] tap0: tun_chr_ioctl cmd 1074025677 [ 728.455243][T26904] tap0: linktype set to 6 [ 728.576162][T26934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5251'. [ 728.587629][T26934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5251'. [ 728.607976][T26934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5251'. [ 728.620362][T26934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5251'. [ 728.664046][T26937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5252'. [ 729.420652][ T30] audit: type=1800 audit(1779400259.300:31): pid=26974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5262" name="memory.events" dev="tmpfs" ino=2272 res=0 errno=0 [ 729.665015][T26991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5266'. [ 729.711842][T26994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5267'. [ 729.749099][T26994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5267'. [ 729.774350][T26994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5267'. [ 729.795843][T26994] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 731.055964][T27043] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 731.460364][T27054] bond6: option fail_over_mac: invalid value (127) [ 732.529113][T27054] bond6 (unregistering): Released all slaves [ 733.609217][T27069] validate_nla: 2 callbacks suppressed [ 733.609235][T27069] netlink: 'syz.1.5290': attribute type 1 has an invalid length. [ 733.651670][T27069] __nla_validate_parse: 9 callbacks suppressed [ 733.651688][T27069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5290'. [ 733.731566][T27069] netlink: 'syz.1.5290': attribute type 1 has an invalid length. [ 733.945891][T27082] netlink: 'syz.4.5291': attribute type 12 has an invalid length. [ 734.044556][T27079] syzkaller1: entered promiscuous mode [ 734.056648][T27079] syzkaller1: entered allmulticast mode [ 734.341250][T27090] sctp: [Deprecated]: syz.0.5294 (pid 27090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.341250][T27090] Use struct sctp_sack_info instead [ 734.468097][T27093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5295'. [ 734.835636][T27100] netlink: 'syz.0.5297': attribute type 1 has an invalid length. [ 734.848108][T27102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5298'. [ 734.872538][T27100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.017207][T27106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5300'. [ 735.156158][T27109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5301'. [ 735.279654][T27118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5301'. [ 735.317636][T27118] netlink: 'syz.0.5301': attribute type 8 has an invalid length. [ 736.345498][T27145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5311'. [ 736.510841][T27145] bond7: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 736.533237][T27145] bond7 (unregistering): Released all slaves [ 736.739822][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5313'. [ 736.749603][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5313'. [ 737.115116][T27177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5320'. [ 737.182490][T27179] vlan3: entered promiscuous mode [ 737.221560][T27179] bond0: entered promiscuous mode [ 737.242048][T27179] bond_slave_0: entered promiscuous mode [ 737.253915][T27179] bond_slave_1: entered promiscuous mode [ 737.298147][T27185] netlink: 'syz.4.5318': attribute type 1 has an invalid length. [ 737.706405][T27205] openvswitch: netlink: Message has 2 unknown bytes. [ 737.908830][T27230] netlink: 'syz.0.5334': attribute type 61 has an invalid length. [ 738.759028][T27284] xt_hl: Unknown Hop Limit match mode: 206 [ 739.700106][T27324] netlink: 'syz.4.5361': attribute type 1 has an invalid length. [ 739.727980][T27325] netlink: 'syz.1.5359': attribute type 39 has an invalid length. [ 739.860088][T27331] bond9: (slave geneve3): Opening slave failed [ 739.861927][T27324] __nla_validate_parse: 11 callbacks suppressed [ 739.861942][T27324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5361'. [ 739.917021][T27324] 8021q: adding VLAN 0 to HW filter on device bond9 [ 739.940452][T27324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5361'. [ 739.983933][T27324] netlink: 'syz.4.5361': attribute type 27 has an invalid length. [ 740.304343][T27351] netlink: 'syz.4.5367': attribute type 2 has an invalid length. [ 747.267301][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.827344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.812822][T27378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5376'. [ 762.046030][T27396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 762.085679][T27398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5382'. [ 762.238189][T27402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5383'. [ 762.514174][T27430] netlink: 'syz.3.5388': attribute type 1 has an invalid length. [ 762.645301][T27437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5390'. [ 762.661422][T27430] 8021q: adding VLAN 0 to HW filter on device bond6 [ 762.734505][T27435] bond6: (slave erspan0): Enslaving as a backup interface with an up link [ 762.786919][ T48] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 762.927279][T11827] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 763.017545][T27445] xt_TPROXY: Can be used only with -p tcp or -p udp [ 763.101123][T27446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5393'. [ 763.123083][T27445] x_tables: duplicate underflow at hook 1 [ 763.140307][T27445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5392'. [ 763.520212][T27461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5399'. [ 763.954225][T27487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5405'. [ 764.681657][T27503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5410'. [ 765.593295][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.601709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.615112][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.623518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.638784][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.644668][T27526] ipvlan0: entered allmulticast mode [ 765.647396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.678983][T27526] batadv0: entered allmulticast mode [ 765.691005][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.702693][T27526] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 766.046425][T27534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5418'. [ 766.270547][T27547] netlink: 'syz.2.5421': attribute type 9 has an invalid length. [ 766.415255][T27548] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 766.444180][T27550] netlink: 'syz.3.5423': attribute type 1 has an invalid length. [ 766.498638][T27548] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 766.655952][T27547] netlink: 'syz.2.5421': attribute type 9 has an invalid length. [ 766.730861][T27550] bond7: entered promiscuous mode [ 766.745428][T27550] 8021q: adding VLAN 0 to HW filter on device bond7 [ 766.797871][T27548] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 766.867528][T27548] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 767.132933][T27548] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 767.167620][T27564] bond7 (unregistering): Released all slaves [ 767.419164][T27574] netlink: 'syz.3.5429': attribute type 25 has an invalid length. [ 767.432303][T27574] netlink: 'syz.3.5429': attribute type 3 has an invalid length. [ 767.453889][T27574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5429'. [ 767.635041][T27583] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5431'. [ 767.664673][T27583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5431'. [ 768.062298][T27599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5435'. [ 768.200163][T27604] syzkaller0: entered promiscuous mode [ 768.222547][T27604] syzkaller0: entered allmulticast mode [ 768.460287][T27615] batadv_slave_1: entered promiscuous mode [ 768.470867][T27615] netlink: 34 bytes leftover after parsing attributes in process `syz.4.5441'. [ 768.484774][T27615] netlink: 'syz.4.5441': attribute type 83 has an invalid length. [ 768.501089][T27613] batadv_slave_1: left promiscuous mode [ 768.616228][T27619] xt_CT: No such helper "snmp_trap" [ 768.675053][T27631] : renamed from bond0 (while UP) [ 768.755014][T27629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5446'. [ 768.786374][T27636] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5445'. [ 768.806190][T27631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5446'. [ 768.926025][T27629] team1: entered promiscuous mode [ 768.946844][T27629] team1: entered allmulticast mode [ 768.961087][T27629] 8021q: adding VLAN 0 to HW filter on device team1 [ 768.978393][T27631] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 769.072924][T27631] team2: entered promiscuous mode [ 769.078858][T27631] team2: entered allmulticast mode [ 769.084642][T27631] 8021q: adding VLAN 0 to HW filter on device team2 [ 769.376058][T27652] syzkaller0: entered promiscuous mode [ 769.382474][T27652] syzkaller0: entered allmulticast mode [ 770.203343][T27684] net_ratelimit: 7 callbacks suppressed [ 770.203363][T27684] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 770.231555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.482480][T27697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.753491][T27707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5464'. [ 770.776201][T27707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5464'. [ 771.186834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.375198][T27735] netlink: 'syz.0.5471': attribute type 5 has an invalid length. [ 771.770078][T27741] netlink: 'syz.4.5474': attribute type 1 has an invalid length. [ 771.780307][T27741] NCSI netlink: No device for ifindex 0 [ 772.632359][ T5630] Bluetooth: hci2: command 0x0401 tx timeout [ 772.717148][T27787] __nla_validate_parse: 10 callbacks suppressed [ 772.717169][T27787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5481'. [ 772.844606][T27799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5485'. [ 772.881037][T27793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.320390][T27821] netlink: 'syz.2.5490': attribute type 1 has an invalid length. [ 773.390123][T27823] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5490'. [ 773.469427][T27823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5490'. [ 773.498821][T27821] bond6: entered promiscuous mode [ 773.517142][T27821] 8021q: adding VLAN 0 to HW filter on device bond6 [ 773.542431][T27825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 773.576293][T27823] bond6: entered allmulticast mode [ 773.698832][T27821] bond6: (slave bridge12): making interface the new active one [ 773.707596][T27821] bridge12: entered promiscuous mode [ 773.713304][T27821] bridge12: entered allmulticast mode [ 773.725325][T27821] bond6: (slave bridge12): Enslaving as an active interface with an up link [ 773.902548][T27838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5494'. [ 775.019703][T27874] netlink: 'syz.4.5503': attribute type 1 has an invalid length. [ 775.266617][ T5630] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 775.289634][T27883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5505'. [ 775.353940][T27883] vlan1: entered promiscuous mode [ 775.370916][T27883] bridge0: entered promiscuous mode [ 775.555467][T27893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5508'. [ 775.641263][T27894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5508'. [ 775.664442][T27894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5508'. [ 775.709449][T27894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5508'. [ 776.769072][T27925] batadv_slave_1: entered allmulticast mode [ 776.796972][T27916] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.837401][T27921] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.844613][T27921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.903813][T27921] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.945286][T27915] batadv_slave_1: left allmulticast mode [ 777.602613][T27972] netlink: 'syz.3.5529': attribute type 10 has an invalid length. [ 777.625412][T27972] team0: Port device dummy0 added [ 777.644749][T27970] netlink: 'syz.3.5529': attribute type 10 has an invalid length. [ 777.675302][T27970] team0: Port device dummy0 removed [ 777.687259][T27970] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 778.006013][T27986] __nla_validate_parse: 7 callbacks suppressed [ 778.006031][T27986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5534'. [ 778.128139][T27992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5535'. [ 778.144993][T27992] ip6tnl1: entered allmulticast mode [ 778.327342][T28002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5538'. [ 779.244481][T28032] netlink: 'syz.3.5548': attribute type 1 has an invalid length. [ 779.302864][T28034] netlink: 'syz.0.5549': attribute type 1 has an invalid length. [ 779.369666][T28034] bond7: entered promiscuous mode [ 779.376721][T28034] 8021q: adding VLAN 0 to HW filter on device bond7 [ 779.418766][T28039] ipvlan0: entered allmulticast mode [ 779.430011][T28040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5551'. [ 779.447469][T28039] bond7: entered allmulticast mode [ 779.487110][T28034] bond7: (slave bridge5): making interface the new active one [ 779.494818][T28034] bridge5: entered promiscuous mode [ 779.501206][T28034] bridge5: entered allmulticast mode [ 779.510416][T28034] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 779.603512][T28047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5554'. [ 779.690181][T28051] SET target dimension over the limit! [ 779.698265][T28059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5554'. [ 779.713029][T28055] sctp: [Deprecated]: syz.3.5557 (pid 28055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 779.713029][T28055] Use struct sctp_sack_info instead [ 780.029622][ T4949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 780.042971][ T4949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 780.055226][ T4949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 780.063573][ T4949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 780.071977][ T4949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 780.350169][T28082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5563'. [ 780.398810][T28082] 8021q: adding VLAN 0 to HW filter on device bond7 [ 780.480527][T28084] bond7: (slave veth9): Enslaving as an active interface with an up link [ 780.561126][T28082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5563'. [ 780.692626][T28082] bond7: (slave bridge13): Enslaving as an active interface with an up link [ 781.089489][T28100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5567'. [ 781.443966][T28105] xt_hashlimit: size too large, truncated to 1048576 [ 782.147675][ T4949] Bluetooth: hci1: command tx timeout [ 782.165373][ T3291] dvmrp0: left allmulticast mode [ 782.860913][ T3291] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 782.869345][ T3291] bridge5 (unregistering): left promiscuous mode [ 782.875853][ T3291] bridge5 (unregistering): left allmulticast mode [ 782.904229][ T3291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.914476][ T3291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.924147][ T3291] bond0 (unregistering): Released all slaves [ 782.934947][ T3291] bond1 (unregistering): Released all slaves [ 782.950900][ T3291] bond2 (unregistering): Released all slaves [ 782.973397][ T3291] bond3 (unregistering): Released all slaves [ 782.987124][ T3291] bond4 (unregistering): Released all slaves [ 783.000791][ T3291] bond5 (unregistering): Released all slaves [ 783.014566][ T3291] bond6 (unregistering): Released all slaves [ 783.044146][ T3291] bond8 (unregistering): Released all slaves [ 783.068992][ T3291] bond7 (unregistering): Released all slaves [ 783.104494][T28134] vlan1: entered allmulticast mode [ 783.116711][T28134] bond0: entered allmulticast mode [ 783.123144][T28134] : entered allmulticast mode [ 783.130367][T28134] bond_slave_1: entered allmulticast mode [ 783.198799][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 783.376191][ T3291] : left promiscuous mode [ 783.401714][T28156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5578'. [ 783.557113][ T3291] tipc: Left network mode [ 783.704408][ T3291] IPVS: stopping backup sync thread 26400 ... [ 783.826342][T28168] netlink: 'syz.2.5579': attribute type 4 has an invalid length. [ 784.232307][ T4949] Bluetooth: hci1: command tx timeout [ 784.726070][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 785.354906][T28072] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.375114][T28072] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.383445][T28072] bridge_slave_0: entered allmulticast mode [ 785.400790][T28072] bridge_slave_0: entered promiscuous mode [ 785.584450][T28072] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.607439][T28072] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.625345][T28072] bridge_slave_1: entered allmulticast mode [ 785.642184][T28072] bridge_slave_1: entered promiscuous mode [ 785.753310][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 786.201649][T28072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.220182][T28213] tipc: Enabling of bearer rejected, failed to enable media [ 786.312693][ T4949] Bluetooth: hci1: command tx timeout [ 786.372694][T28072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.641448][T28072] team0: Port device team_slave_0 added [ 786.716175][T28072] team0: Port device team_slave_1 added [ 787.004981][T28242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5587'. [ 787.041165][T28072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.073270][T28072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.151378][T28072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.208291][T28072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.237860][T28072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.246100][T28248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5588'. [ 787.323598][T28072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.871325][T28072] hsr_slave_0: entered promiscuous mode [ 787.922774][T28072] hsr_slave_1: entered promiscuous mode [ 787.955164][T28072] debugfs: 'hsr0' already exists in 'hsr' [ 787.980954][T28072] Cannot create hsr debugfs directory [ 788.225563][ T3291] hsr_slave_0: left promiscuous mode [ 788.231416][T28278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.269800][ T3291] hsr_slave_1: left promiscuous mode [ 788.280587][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.292792][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.307047][ T3291] batman_adv: batadv0: Removing interface: dummy0 [ 788.393954][ T4949] Bluetooth: hci1: command tx timeout [ 788.822476][ T5293] 8021q: adding VLAN 0 to HW filter on device eth4 [ 789.235403][ T3291] IPVS: stop unused estimator thread 0... [ 789.336256][T28308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5600'. [ 789.654219][T28328] netlink: 280 bytes leftover after parsing attributes in process `syz.3.5604'. [ 789.698912][T28330] netlink: 280 bytes leftover after parsing attributes in process `syz.3.5604'. [ 790.243108][T28363] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5611'. [ 790.980565][T28385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5614'. [ 791.647530][T28411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 791.650079][T28411] netlink: 'syz.1.5618': attribute type 21 has an invalid length. [ 792.652316][T28445] veth0_vlan: entered allmulticast mode [ 792.714307][T28442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5622'. [ 792.784596][T28454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5622'. [ 793.225172][T28363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 793.243003][T28072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 793.354169][T28072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 793.394435][T28072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 793.417106][T28473] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5623'. [ 793.428012][T28473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5623'. [ 793.438379][T28072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 793.496988][T28072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 793.530023][T28072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 793.635467][T28072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 793.686170][T28072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 793.980811][T28498] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.988073][T28498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.997099][ T3291] bond6: (slave erspan0): link status up again after 0 ms [ 794.043596][T28498] hsr0: left promiscuous mode [ 794.062331][T28498] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 794.097384][ T3291] bond6: (slave erspan0): link status up again after 0 ms [ 794.136912][T11828] bond6: (slave erspan0): link status up again after 0 ms [ 794.176310][T28496] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 794.195848][T11828] bond6: (slave erspan0): link status up again after 0 ms [ 794.221750][ T10] syz2: Port: 1 Link ACTIVE [ 794.226703][T11828] bond6: (slave erspan0): link status up again after 0 ms [ 794.239986][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 794.376257][T28072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.440964][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 794.483390][T28072] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.624841][T11828] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.632055][T11828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.666739][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 794.736184][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.743457][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.925857][T28530] netlink: 'syz.3.5636': attribute type 13 has an invalid length. [ 794.951134][T28530] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5636'. [ 795.088296][T28532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5637'. [ 795.134394][T28530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5636'. [ 795.201264][T28542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5638'. [ 795.231352][T28542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5638'. [ 795.726415][T28572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5647'. [ 795.800226][T28072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.975836][T28072] veth0_vlan: entered promiscuous mode [ 796.019933][T28072] veth1_vlan: entered promiscuous mode [ 796.035585][T28585] syzkaller0: entered promiscuous mode [ 796.053318][T28585] syzkaller0: entered allmulticast mode [ 796.223820][T28072] veth0_macvtap: entered promiscuous mode [ 796.269381][T28072] veth1_macvtap: entered promiscuous mode [ 796.330289][T28072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.367689][T28072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.405659][ T5905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.416208][T28597] syzkaller1: entered promiscuous mode [ 796.423616][T28597] syzkaller1: entered allmulticast mode [ 796.436241][T28597] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 796.452372][ T5905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.473074][ T5905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.591109][ T5905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.965877][ T5913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.967703][T28605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5657'. [ 796.978968][T28601] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 797.009620][ T5913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.139272][T28605] 8021q: adding VLAN 0 to HW filter on device bond6 [ 797.152958][T28607] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 797.197210][T28617] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5660'. [ 797.216711][T28617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5660'. [ 797.249287][T28613] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 797.298129][ T5905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.324894][ T5905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.392881][T28628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5662'. [ 797.480038][T28630] bond7: (slave dummy0): Releasing active interface [ 797.493638][T28630] dummy0 (unregistering): left promiscuous mode [ 797.518853][T28639] xt_hashlimit: size too large, truncated to 1048576 [ 797.695251][T28644] gretap1: entered allmulticast mode [ 798.318008][T28665] team0: Port device team_slave_0 removed [ 799.129497][T11828] net_ratelimit: 26 callbacks suppressed [ 799.129518][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 799.276854][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 799.510067][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 799.637658][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 799.639295][T28740] netlink: 'syz.2.5689': attribute type 1 has an invalid length. [ 799.774316][T28740] xt_TCPMSS: Only works on TCP SYN packets [ 799.811048][T28747] bond0: entered promiscuous mode [ 799.832605][T28747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.870260][T28751] pim6reg: entered allmulticast mode [ 799.880888][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 799.889628][T28757] x_tables: duplicate underflow at hook 1 [ 799.919022][T28751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.981460][T28762] __nla_validate_parse: 11 callbacks suppressed [ 799.981478][T28762] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5693'. [ 800.025176][T28753] 8021q: adding VLAN 0 to HW filter on device bond10 [ 800.070285][T28753] bond10: entered promiscuous mode [ 800.099258][T28753] bond0: (slave bond10): Enslaving as an active interface with an up link [ 800.185080][T28764] syzkaller0: entered promiscuous mode [ 800.218038][T28764] syzkaller0: entered allmulticast mode [ 800.286912][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 800.451982][T28776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5694'. [ 800.568867][T28773] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.675264][T28780] netlink: 'syz.4.5696': attribute type 9 has an invalid length. [ 800.685158][T28780] netlink: 'syz.4.5696': attribute type 11 has an invalid length. [ 800.709824][T28780] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.5696'. [ 800.912192][T28773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.940438][T28773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.233125][T28740] veth11: entered allmulticast mode [ 801.249915][T28740] bond8: (slave veth11): Enslaving as a backup interface with a down link [ 801.404827][T28784] 8021q: adding VLAN 0 to HW filter on device bond8 [ 801.497728][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 801.616705][ T12] bond6: (slave erspan0): failed to get link speed/duplex [ 801.637754][T28797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5701'. [ 801.691318][T28805] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5703'. [ 801.723952][T28799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5702'. [ 801.809346][ T12] bond6: (slave erspan0): failed to get link speed/duplex [ 801.877020][T28813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5702'. [ 801.937191][T28818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5707'. [ 801.977723][T28818] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5707'. [ 802.210489][T28829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5711'. [ 802.451186][T28845] netlink: 'syz.2.5715': attribute type 3 has an invalid length. [ 802.477766][T28845] netlink: 'syz.2.5715': attribute type 1 has an invalid length. [ 802.981234][T28876] netlink: 'syz.0.5723': attribute type 1 has an invalid length. [ 804.156565][ T5914] net_ratelimit: 12 callbacks suppressed [ 804.156585][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 804.306620][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 804.466986][T28952] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 804.480605][T28959] netlink: 'syz.2.5744': attribute type 9 has an invalid length. [ 804.491186][T28952] bond9 (unregistering): Released all slaves [ 804.554938][T28955] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 804.578335][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 804.707395][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 805.302534][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 805.519874][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 805.693539][T29000] __nla_validate_parse: 10 callbacks suppressed [ 805.693557][T29000] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5757'. [ 805.802428][T29003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.841881][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 805.957793][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 806.086586][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 806.535502][T29042] netlink: 'syz.1.5770': attribute type 1 has an invalid length. [ 806.582283][T29042] 8021q: adding VLAN 0 to HW filter on device bond7 [ 806.662598][T29051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5772'. [ 806.679758][T29050] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5773'. [ 806.864366][T29063] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5774'. [ 806.924960][T29066] netlink: 'syz.4.5777': attribute type 14 has an invalid length. [ 807.156059][T29074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5779'. [ 807.175913][T29074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5779'. [ 807.216885][T29074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5779'. [ 807.249625][T29074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5779'. [ 807.593632][T29099] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5787'. [ 807.715035][T29107] tipc: Invalid UDP bearer configuration [ 807.715087][T29107] tipc: Enabling of bearer rejected, failed to enable media [ 807.821378][T29117] x_tables: duplicate underflow at hook 1 [ 808.250197][T29132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5794'. [ 808.367189][T29132] bond1: entered promiscuous mode [ 808.381080][T29132] bond1: entered allmulticast mode [ 808.510614][T29142] netlink: 'syz.0.5797': attribute type 1 has an invalid length. [ 808.628009][T29142] bond2: entered promiscuous mode [ 808.665075][T29142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 808.682629][T29155] netlink: 'syz.0.5797': attribute type 23 has an invalid length. [ 808.691485][T29155] IPv6: NLM_F_CREATE should be specified when creating new route [ 808.849083][T29153] bond2: (slave bridge1): making interface the new active one [ 808.880316][T29153] bridge1: entered promiscuous mode [ 808.897660][T29153] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 809.197910][ T3291] net_ratelimit: 29 callbacks suppressed [ 809.197930][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 809.348912][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 809.406226][ T3297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.414632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.435761][ T3297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.444295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.458270][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.467030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.480871][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.489711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.332369][T29214] Cannot find set identified by id 0 to match [ 810.556347][T29219] netlink: 'syz.4.5816': attribute type 1 has an invalid length. [ 810.754729][T29222] bond3 (unregistering): Released all slaves [ 810.890084][T29235] __nla_validate_parse: 2 callbacks suppressed [ 810.890105][T29235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5821'. [ 810.958309][T29235] hsr_slave_0: left promiscuous mode [ 810.983937][T29235] hsr_slave_1: left promiscuous mode [ 810.992851][T29241] netlink: 'syz.3.5822': attribute type 1 has an invalid length. [ 811.082047][T29247] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 811.217159][T29253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5825'. [ 812.525598][T29305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5839'. [ 813.014115][T29328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5845'. [ 813.572350][T29350] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 813.596259][T29350] syzkaller1: linktype set to 805 [ 813.636199][T29350] hm3): entered promiscuous mode [ 813.748154][T29362] netlink: 'syz.3.5855': attribute type 1 has an invalid length. [ 813.813093][T29362] 8021q: adding VLAN 0 to HW filter on device bond9 [ 813.892407][T29362] tipc: Resetting bearer [ 814.144493][T29384] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 814.195260][T29384] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 814.198576][T29391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5863'. [ 814.247602][T29384] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 814.282962][ T3291] net_ratelimit: 144 callbacks suppressed [ 814.282981][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 814.305455][T29391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5863'. [ 814.344360][T29394] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 814.362687][T29394] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 814.380332][T29394] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 814.393768][T29394] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 814.404014][T29394] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 814.437363][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 814.557374][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 814.610362][T29407] netlink: 'syz.3.5867': attribute type 1 has an invalid length. [ 814.630408][T29407] netlink: 'syz.3.5867': attribute type 1 has an invalid length. [ 814.677440][T29412] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5868'. [ 814.688113][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 814.711125][T29413] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5868'. [ 814.819829][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 814.854777][T29423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5870'. [ 814.936608][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 815.057820][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 815.143677][T29437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5874'. [ 815.164227][T29437] netlink: 'syz.0.5874': attribute type 20 has an invalid length. [ 815.186720][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 815.187694][T29437] netlink: 'syz.0.5874': attribute type 21 has an invalid length. [ 815.272522][T29437] tipc: Started in network mode [ 815.287479][T29437] tipc: Node identity fc02, cluster identity 4711 [ 815.315157][T29437] tipc: Enabling of bearer rejected, failed to enable media [ 815.347129][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 815.467110][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 815.880879][T29468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 816.031515][T29488] __nla_validate_parse: 1 callbacks suppressed [ 816.031533][T29488] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5889'. [ 816.442739][T29393] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.450302][T29393] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.459005][T29393] bridge_slave_0: entered allmulticast mode [ 816.466667][ T4949] Bluetooth: hci5: command tx timeout [ 816.481805][T29393] bridge_slave_0: entered promiscuous mode [ 816.490912][T29393] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.498794][T29393] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.506207][T29393] bridge_slave_1: entered allmulticast mode [ 816.514924][T29393] bridge_slave_1: entered promiscuous mode [ 816.628640][T29393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.657937][T29393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.714318][T29393] team0: Port device team_slave_0 added [ 816.725321][T29393] team0: Port device team_slave_1 added [ 816.810462][T29393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.827845][T29393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.898420][T29393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.911786][T29393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.921398][T29393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.948840][T29393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.006596][T29523] netlink: 'syz.2.5898': attribute type 1 has an invalid length. [ 817.105458][T29523] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 817.152415][T29393] hsr_slave_0: entered promiscuous mode [ 817.199208][T29393] hsr_slave_1: entered promiscuous mode [ 817.208692][T29393] debugfs: 'hsr0' already exists in 'hsr' [ 817.214713][T29393] Cannot create hsr debugfs directory [ 817.333191][T29538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5903'. [ 817.415947][T29542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5903'. [ 818.504048][T29583] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 818.524951][T29585] FAULT_INJECTION: forcing a failure. [ 818.524951][T29585] name failslab, interval 1, probability 0, space 0, times 0 [ 818.550156][ T4949] Bluetooth: hci5: command tx timeout [ 818.568226][T29585] CPU: 1 UID: 0 PID: 29585 Comm: syz.1.5918 Not tainted syzkaller #0 PREEMPT(full) [ 818.568249][T29585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 818.568259][T29585] Call Trace: [ 818.568267][T29585] [ 818.568275][T29585] dump_stack_lvl+0xe8/0x150 [ 818.568304][T29585] should_fail_ex+0x412/0x560 [ 818.568333][T29585] should_failslab+0xa8/0x100 [ 818.568357][T29585] ? __nf_conntrack_alloc+0x81/0x3e0 [ 818.568381][T29585] kmem_cache_alloc_noprof+0x87/0x650 [ 818.568403][T29585] ? nf_ct_pernet+0x45/0x270 [ 818.568430][T29585] __nf_conntrack_alloc+0x81/0x3e0 [ 818.568457][T29585] init_conntrack+0x165/0xff0 [ 818.568480][T29585] ? __pfx_init_conntrack+0x10/0x10 [ 818.568499][T29585] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 818.568529][T29585] ? __siphash_unaligned+0x22e/0x3b0 [ 818.568596][T29585] nf_conntrack_in+0xbac/0x15b0 [ 818.568643][T29585] ? __pfx_nf_conntrack_in+0x10/0x10 [ 818.568674][T29585] ? ipt_do_table+0x2b2/0x1630 [ 818.568697][T29585] ? nf_hook+0xa1/0x3a0 [ 818.568720][T29585] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 818.568740][T29585] ? ipv4_conntrack_local+0x126/0x210 [ 818.568759][T29585] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 818.568782][T29585] nf_hook_slow+0xc5/0x220 [ 818.568803][T29585] ? __pfx_dst_output+0x10/0x10 [ 818.568823][T29585] nf_hook+0x22a/0x3a0 [ 818.568847][T29585] ? nf_hook+0xa1/0x3a0 [ 818.568864][T29585] ? __pfx_nf_hook+0x10/0x10 [ 818.568885][T29585] ? __pfx_dst_output+0x10/0x10 [ 818.568911][T29585] ? __ip_local_out+0x152/0x6a0 [ 818.568934][T29585] __ip_local_out+0x558/0x6a0 [ 818.568952][T29585] ? __pfx_dst_output+0x10/0x10 [ 818.568976][T29585] ip_local_out+0x2a/0x190 [ 818.568999][T29585] ip_send_skb+0x45/0xc0 [ 818.569020][T29585] udp_send_skb+0x7e4/0xf70 [ 818.569056][T29585] udp_sendmsg+0x1937/0x21a0 [ 818.569078][T29585] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 818.569115][T29585] ? __pfx_udp_sendmsg+0x10/0x10 [ 818.569157][T29585] ? aa_sk_perm+0x6d5/0x900 [ 818.569173][T29585] ? unwind_next_frame+0xa6/0x2550 [ 818.569209][T29585] ? sock_rps_record_flow+0x19/0x350 [ 818.569234][T29585] ? inet_sendmsg+0x29c/0x370 [ 818.569253][T29585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 818.569278][T29585] ____sys_sendmsg+0x80a/0x9f0 [ 818.569297][T29585] ? __might_fault+0xaf/0x130 [ 818.569323][T29585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.569349][T29585] ? import_iovec+0x73/0xa0 [ 818.569374][T29585] ___sys_sendmsg+0x2a5/0x360 [ 818.569390][T29585] ? __lock_acquire+0x6b5/0x2cf0 [ 818.569412][T29585] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.569434][T29585] ? kstrtouint+0x6e/0xe0 [ 818.569479][T29585] ? __fget_files+0x2a/0x420 [ 818.569498][T29585] ? __fget_files+0x3a0/0x420 [ 818.569533][T29585] __sys_sendmmsg+0x27c/0x4e0 [ 818.569555][T29585] ? __pfx___sys_sendmmsg+0x10/0x10 [ 818.569570][T29585] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 818.569612][T29585] ? ksys_write+0x242/0x270 [ 818.569636][T29585] ? __pfx_ksys_write+0x10/0x10 [ 818.569664][T29585] __x64_sys_sendmmsg+0xa0/0xc0 [ 818.569681][T29585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.569699][T29585] do_syscall_64+0x15f/0xf80 [ 818.569720][T29585] ? trace_irq_disable+0x3b/0x140 [ 818.569743][T29585] ? clear_bhb_loop+0x40/0x90 [ 818.569762][T29585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.569777][T29585] RIP: 0033:0x7ff40779ce59 [ 818.569794][T29585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.569807][T29585] RSP: 002b:00007ff4085ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 818.569825][T29585] RAX: ffffffffffffffda RBX: 00007ff407a15fa0 RCX: 00007ff40779ce59 [ 818.569836][T29585] RDX: 0400000000000284 RSI: 0000200000004d00 RDI: 0000000000000003 [ 818.569848][T29585] RBP: 00007ff4085ba090 R08: 0000000000000000 R09: 0000000000000000 [ 818.569858][T29585] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 818.569868][T29585] R13: 00007ff407a16038 R14: 00007ff407a15fa0 R15: 00007fff35ba2258 [ 818.569897][T29585] [ 819.090184][T29592] erspan1: entered promiscuous mode [ 819.130702][T29592] erspan1: entered allmulticast mode [ 819.200651][T29393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 819.229915][T29393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 819.239123][T29393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 819.258826][T29393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 819.266982][T29393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 819.282362][T29393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 819.291092][T29393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 819.302506][T29393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 819.376587][ T48] net_ratelimit: 14 callbacks suppressed [ 819.376605][ T48] bond6: (slave erspan0): failed to get link speed/duplex [ 819.480928][T29612] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5923'. [ 819.520181][T29393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.536945][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 819.613686][T29393] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.647817][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.655021][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.685696][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.693026][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.736635][ T12] bond6: (slave erspan0): failed to get link speed/duplex [ 819.770569][T29620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5927'. [ 819.888907][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 820.026666][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 820.040853][T29629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5929'. [ 820.146934][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 820.438575][ T48] bond6: (slave erspan0): failed to get link speed/duplex [ 820.597416][ T12] bond6: (slave erspan0): failed to get link speed/duplex [ 820.626883][ T4949] Bluetooth: hci5: command tx timeout [ 820.726871][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 820.803872][T29644] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5934'. [ 820.862271][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 820.880488][T29648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5933'. [ 820.899799][T29649] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5934'. [ 821.025847][T29653] xt_cgroup: path and classid specified [ 821.155719][T29393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.386190][T29664] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5937'. [ 821.439601][T29670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5937'. [ 821.540594][T29670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5937'. [ 821.688853][T29683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5940'. [ 821.718861][T29393] veth0_vlan: entered promiscuous mode [ 821.729096][T29683] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5940'. [ 821.741556][T29670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5937'. [ 821.783100][T29393] veth1_vlan: entered promiscuous mode [ 821.822148][T29393] veth0_macvtap: entered promiscuous mode [ 821.833832][T29393] veth1_macvtap: entered promiscuous mode [ 821.859639][T29393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.883519][T29393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.898080][T29690] netlink: 45 bytes leftover after parsing attributes in process `syz.0.5943'. [ 821.922894][ T3297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.944832][ T3297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.978604][ T3297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.009683][ T3297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.323828][ T5913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.342170][ T5913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.501311][T29715] netlink: 'syz.1.5951': attribute type 12 has an invalid length. [ 822.542616][ T5913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.555790][T29721] netlink: 'syz.3.5952': attribute type 1 has an invalid length. [ 822.557798][ T5913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.706723][ T4949] Bluetooth: hci5: command tx timeout [ 822.715691][T29727] netlink: 'syz.0.5954': attribute type 1 has an invalid length. [ 822.867495][T29729] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 822.887521][T29729] gretap1: entered allmulticast mode [ 823.535618][T29737] dvmrp6: entered allmulticast mode [ 823.722219][T29750] netlink: 'syz.0.5961': attribute type 13 has an invalid length. [ 823.733744][T29750] netlink: 'syz.0.5961': attribute type 17 has an invalid length. [ 824.103894][T29750] bond1: left promiscuous mode [ 824.110016][T29750] bond1: left allmulticast mode [ 824.117817][T29750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 824.137724][T29750] bond2: left promiscuous mode [ 824.143268][T29750] bridge1: left promiscuous mode [ 824.171329][ T3291] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.193950][ T3291] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.214542][ T3291] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.236365][T29766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.256253][T29766] batadv_slave_1: entered promiscuous mode [ 824.372202][ T3291] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.392734][ T12] net_ratelimit: 16 callbacks suppressed [ 824.392753][ T12] bond6: (slave erspan0): failed to get link speed/duplex [ 824.488037][T29774] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 824.516704][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 824.634194][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 824.766690][ T12] bond6: (slave erspan0): failed to get link speed/duplex [ 824.774493][T29784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5969'. [ 824.802032][T29784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5969'. [ 824.897689][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 825.029968][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 825.152623][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 825.231768][T29798] netlink: 'syz.0.5974': attribute type 13 has an invalid length. [ 826.140496][T29831] netlink: 'syz.2.5981': attribute type 62 has an invalid length. [ 826.193598][T29819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5978'. [ 826.268132][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 826.397138][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 826.528267][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 826.607978][T29860] __nla_validate_parse: 1 callbacks suppressed [ 826.607995][T29860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5989'. [ 827.065115][T29886] netlink: 750 bytes leftover after parsing attributes in process `syz.1.5998'. [ 827.245461][T29896] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 827.398302][T29891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5999'. [ 827.678333][T29912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6004'. [ 828.056848][T29394] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 828.082139][T29394] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 828.091643][T29394] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 828.099909][T29394] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 828.111651][T29394] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 828.474036][T29938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6010'. [ 828.598932][T29933] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6008'. [ 828.716901][T29940] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 828.793687][T29951] netlink: 'syz.4.6013': attribute type 1 has an invalid length. [ 828.902244][T29953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6013'. [ 828.928189][T29951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6013'. [ 829.065540][T29961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6015'. [ 829.074674][T29961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6015'. [ 829.254636][T29963] netlink: 'syz.1.6016': attribute type 29 has an invalid length. [ 829.407372][ T12] net_ratelimit: 18 callbacks suppressed [ 829.407394][ T12] bond6: (slave erspan0): failed to get link speed/duplex [ 829.568300][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 829.696599][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 829.859344][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 830.148026][T29394] Bluetooth: hci0: command tx timeout [ 830.446818][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 830.619723][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 830.766567][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 830.860285][T30026] netlink: 'syz.3.6031': attribute type 58 has an invalid length. [ 830.894092][T30026] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.095430][T29925] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.106155][T29925] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.121777][T29925] bridge_slave_0: entered allmulticast mode [ 831.133145][T29925] bridge_slave_0: entered promiscuous mode [ 831.143139][T29925] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.151319][T29925] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.161931][T29925] bridge_slave_1: entered allmulticast mode [ 831.175229][T29925] bridge_slave_1: entered promiscuous mode [ 831.220842][T29925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.234301][T29925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.246697][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 831.321014][T29925] team0: Port device team_slave_0 added [ 831.351467][T29925] team0: Port device team_slave_1 added [ 831.437586][T29925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.466812][T29925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.571588][T29925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.694112][T29925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.734174][T29925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.792438][T30063] __nla_validate_parse: 6 callbacks suppressed [ 831.792456][T30063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6035'. [ 831.817905][T29925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.867597][T30063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6035'. [ 831.939398][T30061] hsr0: entered promiscuous mode [ 831.950549][T30061] hsr0: entered allmulticast mode [ 831.955736][T30061] hsr_slave_0: entered allmulticast mode [ 831.964390][T30061] hsr_slave_1: entered allmulticast mode [ 832.087241][T30076] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 832.098010][T29925] hsr_slave_0: entered promiscuous mode [ 832.114569][T29925] hsr_slave_1: entered promiscuous mode [ 832.140812][T29925] debugfs: 'hsr0' already exists in 'hsr' [ 832.156857][T29925] Cannot create hsr debugfs directory [ 832.226673][T29394] Bluetooth: hci0: command tx timeout [ 832.289044][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 832.726687][ T3384] bond6: (slave erspan0): failed to get link speed/duplex [ 832.942122][T30118] syzkaller0: entered promiscuous mode [ 832.948731][T30118] syzkaller0: entered allmulticast mode [ 833.091178][T30121] bridge8: entered promiscuous mode [ 833.134233][T30123] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6051'. [ 833.302841][T29925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 833.314063][T29925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.322969][T29925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 833.340395][T29925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 833.349140][T29925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 833.373676][T29925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 833.389574][T29925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 833.401669][T29925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 833.452344][T30138] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6055'. [ 833.598458][T30143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6056'. [ 833.665378][T29925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.711456][T29925] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.739130][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.746379][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.772885][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.780141][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.193038][T30157] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6060'. [ 834.208006][T30158] xt_hashlimit: invalid rate [ 834.308221][T29394] Bluetooth: hci0: command tx timeout [ 834.427535][ T3384] net_ratelimit: 8 callbacks suppressed [ 834.427555][ T3384] bond6: (slave erspan0): failed to get link speed/duplex [ 834.596782][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 834.607063][T30180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6062'. [ 834.634658][T29925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.711084][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 834.723139][T29925] veth0_vlan: entered promiscuous mode [ 834.741279][T29925] veth1_vlan: entered promiscuous mode [ 834.774908][T29925] veth0_macvtap: entered promiscuous mode [ 834.792285][T29925] veth1_macvtap: entered promiscuous mode [ 834.811205][T29925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.827028][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 834.838035][T29925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.856011][ T5913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.865456][ T5913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.877900][ T5913] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.899543][ T5914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.978036][ T3384] bond6: (slave erspan0): failed to get link speed/duplex [ 835.116740][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 835.227559][ T3384] bond6: (slave erspan0): failed to get link speed/duplex [ 835.336923][ T3384] bond6: (slave erspan0): failed to get link speed/duplex [ 835.457901][ T3384] bond6: (slave erspan0): failed to get link speed/duplex [ 835.576705][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 835.799406][T30190] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 836.386573][T29394] Bluetooth: hci0: command tx timeout [ 836.676036][T30195] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 836.784123][T30147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 836.995483][T30199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6069'. [ 837.025049][ T3384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.058973][ T3384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.077582][T30202] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6068'. [ 837.137204][T30202] netlink: 'syz.3.6068': attribute type 1 has an invalid length. [ 837.145063][ T5913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.155670][T30202] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6068'. [ 837.166285][ T5913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.318646][T30209] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6071'. [ 837.526984][T30214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 837.702562][ T30] audit: type=1800 audit(1779400367.570:32): pid=30232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6075" name="blkio.bfq.time_recursive" dev="tmpfs" ino=23 res=0 errno=0 [ 837.916233][T30238] tipc: Can't bind to reserved service type 0 [ 838.049410][T30241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6078'. [ 838.293975][T30244] bond1: (slave vcan1): refused to change device type [ 838.407207][T30251] netlink: 'syz.0.6079': attribute type 35 has an invalid length. [ 838.644678][T30259] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6082'. [ 838.930006][T30264] netlink: 'syz.3.6084': attribute type 10 has an invalid length. [ 838.969606][T30264] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6084'. [ 839.039443][T30266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 839.446203][ T12] net_ratelimit: 27 callbacks suppressed [ 839.446224][ T12] bond6: (slave erspan0): failed to get link speed/duplex [ 839.656592][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 839.798295][ T12] bond6: (slave erspan0): failed to get link speed/duplex [ 840.151734][T30282] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.912117][T30282] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.003508][T30298] dvmrp0: entered allmulticast mode [ 841.028150][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 841.173863][T30282] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.296973][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 841.412276][T30282] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.448733][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 841.568902][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 841.726622][ T3384] bond6: (slave erspan0): failed to get link speed/duplex [ 842.041960][ T3384] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.077575][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 842.158656][ T3384] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.207679][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 842.341209][ T3384] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.433418][ T5905] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.802807][T30315] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6098'. [ 843.305593][T30325] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6100'. [ 843.412378][T16959] IPVS: starting estimator thread 0... [ 843.519129][T30329] IPVS: using max 29 ests per chain, 69600 per kthread [ 843.622038][T30333] batadv1: entered promiscuous mode [ 843.633342][T30333] batadv1: entered allmulticast mode [ 843.659163][T30333] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 844.341818][T30343] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6105'. [ 844.359508][T30343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6105'. [ 844.457276][ T3291] net_ratelimit: 17 callbacks suppressed [ 844.457324][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 844.607115][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 844.707467][T30349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6107'. [ 844.837085][ T3384] bond6: (slave erspan0): failed to get link speed/duplex [ 844.976597][ T3384] bond6: (slave erspan0): failed to get link speed/duplex [ 845.211355][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 845.363658][ T3384] bond6: (slave erspan0): failed to get link speed/duplex [ 845.557127][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 845.687347][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 845.816635][ T3384] bond6: (slave erspan0): failed to get link speed/duplex [ 845.966705][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 846.009333][T30389] IPVS: persistence engine module ip_vs_pe_ not found [ 846.575880][T30405] netlink: 'syz.1.6117': attribute type 1 has an invalid length. [ 846.611379][T30400] vlan3: entered promiscuous mode [ 846.618634][T30400] syz_tun: entered promiscuous mode [ 846.900928][T30410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6116'. [ 846.983113][T30410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6116'. [ 847.117593][T30414] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 847.310723][T30427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6122'. [ 847.627717][T30437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6126'. [ 847.996073][T30449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6127'. [ 848.061886][T30451] netlink: 'syz.2.6128': attribute type 13 has an invalid length. [ 848.077747][T30451] netlink: 'syz.2.6128': attribute type 17 has an invalid length. [ 848.209121][T30453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6128'. [ 848.271446][T30455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6129'. [ 848.368869][T30459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6130'. [ 848.484805][T30459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6130'. [ 848.523605][T30465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6128'. [ 848.858808][T30451] 8021q: adding VLAN 0 to HW filter on device eth0 [ 848.890421][T30451] 8021q: adding VLAN 0 to HW filter on device eth1 [ 848.939852][T30451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 848.963584][T30451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 849.549479][T30491] netlink: 'syz.2.6139': attribute type 1 has an invalid length. [ 850.169338][ T5913] net_ratelimit: 18 callbacks suppressed [ 850.169360][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 850.199046][T30506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6143'. [ 850.237844][T30506] netlink: 252 bytes leftover after parsing attributes in process `syz.1.6143'. [ 850.431086][T30506] syzkaller0: entered promiscuous mode [ 850.440291][T30517] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 850.448786][T30506] syzkaller0: entered allmulticast mode [ 850.469656][ T48] bond6: (slave erspan0): failed to get link speed/duplex [ 851.013505][T30533] netlink: 'syz.2.6149': attribute type 5 has an invalid length. [ 851.050086][T16959] IPVS: starting estimator thread 0... [ 851.191603][T30535] IPVS: using max 29 ests per chain, 69600 per kthread [ 855.296635][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 855.439401][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 855.543413][T30541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6150'. [ 855.566678][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 855.689809][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 855.830483][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 855.976671][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 856.158202][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 856.276808][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 856.388411][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 856.516611][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 858.770122][T30553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 859.762027][T30627] bridge_slave_1: left allmulticast mode [ 859.829458][T30631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6177'. [ 859.855516][T30627] bridge_slave_1: left promiscuous mode [ 859.892882][T30627] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.007253][T30643] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6178'. [ 860.073268][T30627] vlan2: left promiscuous mode [ 860.113523][T30627] geneve0: left promiscuous mode [ 860.164653][T30650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6181'. [ 860.190369][T30650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6181'. [ 860.221074][T30627] bond0: (slave 45): Releasing backup interface [ 860.298764][T30627] : left allmulticast mode [ 860.379242][T30627] bond0: (slave bond_slave_1): Releasing backup interface [ 860.464864][T30627] bond_slave_1: left allmulticast mode [ 860.561646][T30627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.623641][T30627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.703727][T30627] net_ratelimit: 14 callbacks suppressed [ 860.703753][T30627] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 860.759007][T30650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6181'. [ 860.782188][T30650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6181'. [ 860.808039][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 860.936604][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 860.981224][T30668] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 861.053801][T30674] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.6188'. [ 861.107834][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 861.137501][T30679] netlink: 'syz.4.6191': attribute type 11 has an invalid length. [ 861.263566][T30681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6188'. [ 861.333591][T30684] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.6192'. [ 861.343710][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 861.571547][T30694] netlink: 'syz.1.6194': attribute type 1 has an invalid length. [ 861.632855][T30699] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 861.692865][T30689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6194'. [ 861.770311][T30694] 8021q: adding VLAN 0 to HW filter on device bond8 [ 861.773503][T30702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6194'. [ 861.796753][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 861.856657][T30702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6194'. [ 861.988270][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 862.163623][ T48] bond6: (slave erspan0): failed to get link speed/duplex [ 862.307958][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 862.369218][T30712] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6200'. [ 862.533896][T30719] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6200'. [ 863.211826][T30737] netlink: 'syz.1.6205': attribute type 25 has an invalid length. [ 863.234348][T30737] netlink: 'syz.1.6205': attribute type 3 has an invalid length. [ 863.691425][T30750] lo: Caught tx_queue_len zero misconfig [ 863.953416][T30757] gre1: entered promiscuous mode [ 864.881152][T30791] netlink: 'syz.1.6221': attribute type 1 has an invalid length. [ 865.206069][T30806] dummy0: entered allmulticast mode [ 865.292447][T30812] netlink: 'syz.4.6228': attribute type 4 has an invalid length. [ 865.556189][T30824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 865.684678][T30824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 865.693630][T30824] bond1: (slave bond2): Enslaving as an active interface with an up link [ 865.712986][T30799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 865.791690][T30824] bond1 (unregistering): (slave bond2): Releasing backup interface [ 865.862389][T30824] bond1 (unregistering): Released all slaves [ 866.000806][T30837] net_ratelimit: 18 callbacks suppressed [ 866.000825][T30837] openvswitch: netlink: Duplicate key (type 21). [ 866.077656][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 866.209353][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 866.292036][T30855] x_tables: ip_tables: osf match: only valid for protocol 6 [ 866.314446][T30855] __nla_validate_parse: 8 callbacks suppressed [ 866.314464][T30855] netlink: 276 bytes leftover after parsing attributes in process `syz.2.6237'. [ 866.356790][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 866.482642][ T12] bond6: (slave erspan0): failed to get link speed/duplex [ 866.617019][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 866.739634][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 866.870667][T30888] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6244'. [ 866.881474][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 866.901671][T30888] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6244'. [ 867.011936][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 867.128081][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 867.688363][T30909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6251'. [ 867.950201][T30928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6255'. [ 867.980411][T30928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6255'. [ 868.010458][T30928] netlink: 'syz.0.6255': attribute type 19 has an invalid length. [ 868.028681][T30928] netlink: 'syz.0.6255': attribute type 20 has an invalid length. [ 868.277516][T30934] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6257'. [ 868.304335][T30934] xt_hashlimit: size too large, truncated to 1048576 [ 868.399737][T30939] xfrm0: Caught tx_queue_len zero misconfig [ 868.972227][T30956] netlink: 'syz.4.6262': attribute type 25 has an invalid length. [ 868.999045][T30956] netlink: 'syz.4.6262': attribute type 3 has an invalid length. [ 869.036924][T30956] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6262'. [ 870.258552][T30982] netlink: 'syz.0.6269': attribute type 1 has an invalid length. [ 870.385767][T30984] bond4: (slave geneve2): making interface the new active one [ 870.425085][T30982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6269'. [ 870.453319][T30984] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 870.463306][ T3291] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.485305][ T3291] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.505200][T30982] 8021q: adding VLAN 0 to HW filter on device bond4 [ 870.518820][ T3291] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.529381][ T3291] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 871.098955][T31007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6276'. [ 871.146724][ T48] net_ratelimit: 25 callbacks suppressed [ 871.146767][ T48] bond6: (slave erspan0): failed to get link speed/duplex [ 871.278915][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 871.363168][T31014] sctp: [Deprecated]: syz.0.6278 (pid 31014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.363168][T31014] Use struct sctp_sack_info instead [ 871.457606][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 871.499509][T31014] sctp: [Deprecated]: syz.0.6278 (pid 31014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.499509][T31014] Use struct sctp_sack_info instead [ 871.576602][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 871.706611][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 871.828054][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 871.956773][ T48] bond6: (slave erspan0): failed to get link speed/duplex [ 872.097577][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 872.236646][ T48] bond6: (slave erspan0): failed to get link speed/duplex [ 872.347180][ T48] bond6: (slave erspan0): failed to get link speed/duplex [ 872.812096][T31039] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 872.847259][T31042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6286'. [ 872.873710][T31042] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6286'. [ 872.874825][T31039] bond9 (unregistering): Released all slaves [ 872.911079][T31042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6286'. [ 873.405644][T31053] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6289'. [ 873.498684][T31054] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6289'. [ 873.542523][T31053] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.549977][T31053] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.701853][T31054] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.710935][T31054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.721796][T31054] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.729799][T31054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.742710][T31054] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6289'. [ 873.798506][T31054] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.805795][T31054] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.521799][T31061] netlink: 'syz.1.6291': attribute type 2 has an invalid length. [ 874.783243][T31066] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.6293'. [ 875.158100][T31073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6294'. [ 875.383601][T31075] netlink: 'syz.3.6295': attribute type 1 has an invalid length. [ 875.442303][T31075] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 875.454078][T31075] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 875.483101][T31077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6295'. [ 875.879760][T31084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6298'. [ 876.178648][ T48] net_ratelimit: 23 callbacks suppressed [ 876.178669][ T48] bond6: (slave erspan0): failed to get link speed/duplex [ 876.346895][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 876.477154][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 876.586632][ T48] bond6: (slave erspan0): failed to get link speed/duplex [ 876.736718][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 876.831869][T31112] vlan4: entered promiscuous mode [ 876.847415][T31112] bond_slave_1: entered promiscuous mode [ 876.977040][T11828] bond6: (slave erspan0): failed to get link speed/duplex [ 877.030888][T31112] netlink: 'syz.1.6307': attribute type 1 has an invalid length. [ 877.316173][T31112] syzkaller0: entered promiscuous mode [ 877.329070][T31112] syzkaller0: entered allmulticast mode [ 877.348473][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 877.971112][T31156] __nla_validate_parse: 6 callbacks suppressed [ 877.971131][T31156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6317'. [ 877.975025][T31148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6316'. [ 878.010536][T31157] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6318'. [ 878.043634][T31159] netlink: 'syz.4.6316': attribute type 13 has an invalid length. [ 878.068766][T31159] netlink: 'syz.4.6316': attribute type 17 has an invalid length. [ 883.382584][T31158] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 883.513041][T31172] ipt_ECN: cannot use operation on non-tcp rule [ 883.575989][T31159] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.584037][T31159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.592597][T31159] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.600557][T31159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.768617][T31159] batadv_slave_1: left promiscuous mode [ 883.783226][T31159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.833894][T31159] hsr0: left promiscuous mode [ 883.862336][T31159] hsr0: left allmulticast mode [ 883.886039][T31159] hsr_slave_0: left allmulticast mode [ 883.901504][T31159] hsr_slave_1: left allmulticast mode [ 883.921335][T31159] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 884.047657][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 884.197576][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 884.294063][ T3291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.302456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.327536][ T3297] bond6: (slave erspan0): failed to get link speed/duplex [ 884.372308][T11828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.380676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.459044][T11828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.467555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.793639][T31221] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6330'. [ 885.932874][T31257] netlink: 'syz.1.6336': attribute type 1 has an invalid length. [ 886.091120][T31267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6336'. [ 886.168052][T31264] 8021q: adding VLAN 0 to HW filter on device bond9 [ 886.280782][T31275] tap0: tun_chr_ioctl cmd 1074025677 [ 886.301264][T31275] tap0: linktype set to 6 [ 886.326236][T31275] tap0: tun_chr_ioctl cmd 35092 [ 886.367812][T31275] tap0: tun_chr_ioctl cmd 2147767519 [ 886.394087][T31275] tap0: tun_chr_ioctl cmd 35106 [ 886.641468][T31287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6341'. [ 886.819589][T31259] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6337'. [ 887.522863][T31283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.900725][T31283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 887.934953][T31283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 888.718132][T31343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6353'. [ 888.743066][T31347] syzkaller0: entered promiscuous mode [ 888.771416][T31347] syzkaller0: entered allmulticast mode [ 888.888531][T31351] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6356'. [ 889.009621][T11827] net_ratelimit: 22 callbacks suppressed [ 889.009654][T11827] bond6: (slave erspan0): failed to get link speed/duplex [ 889.149129][T31362] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6358'. [ 889.179722][T31364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6359'. [ 889.196690][ T5905] bond6: (slave erspan0): failed to get link speed/duplex [ 889.259029][T31372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6362'. [ 889.306929][T11827] bond6: (slave erspan0): failed to get link speed/duplex [ 889.490441][T31383] netlink: 'syz.0.6360': attribute type 1 has an invalid length. [ 889.604864][ T5820] IPVS: starting estimator thread 0... [ 889.697171][T31386] IPVS: using max 35 ests per chain, 84000 per kthread [ 890.181663][T31377] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.191437][T31377] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.509134][T31377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.530811][T31377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.948164][T31377] batadv1: left promiscuous mode [ 890.954625][T31377] batadv1: left allmulticast mode [ 891.094844][T11827] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.116777][T11827] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.125794][T11827] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 891.180383][T11827] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.205133][T11827] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.240233][T11827] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 891.336174][T11827] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.337942][T31402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6365'. [ 891.365189][T11827] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.380645][T11827] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 891.434579][T31404] netlink: 'syz.1.6366': attribute type 13 has an invalid length. [ 891.456982][T31404] netlink: 'syz.1.6366': attribute type 17 has an invalid length. [ 891.629281][T31362] siw: device registration error -23 [ 891.674588][T31411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6368'. [ 892.104999][T11827] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.116317][T11827] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.126953][T11827] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 892.137254][ T3291] bond6: (slave erspan0): failed to get link speed/duplex [ 892.252612][T31404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.341708][T31404] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 892.417827][T31411] batman_adv: batadv0: Removing interface: macsec1 [ 892.632334][T31429] bridge_slave_0: left allmulticast mode [ 892.640415][T31429] bridge_slave_0: left promiscuous mode [ 892.667431][T31429] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.708931][T31429] bridge_slave_1: left allmulticast mode [ 892.730218][T31429] bridge_slave_1: left promiscuous mode [ 892.758912][T31429] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.060082][T31429] bond0: (slave bond_slave_0): Releasing backup interface [ 893.079444][T31429] bond0: (slave bond_slave_1): Releasing backup interface [ 893.091591][T31429] team0: Port device team_slave_1 removed [ 893.099436][T31429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.134557][T31429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.150513][T31429] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 893.211454][T31443] vlan2: entered promiscuous mode [ 893.221997][T31443] bridge0: entered promiscuous mode [ 893.317214][T31443] netlink: 'syz.4.6377': attribute type 4 has an invalid length. [ 893.341435][T31446] netlink: 'syz.0.6378': attribute type 12 has an invalid length. [ 893.366575][T31446] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6378'. [ 893.438561][ T5913] bond6: (slave erspan0): failed to get link speed/duplex [ 893.599303][ T5914] bond6: (slave erspan0): failed to get link speed/duplex [ 893.716650][ T12] bond6: (slave erspan0): failed to get link speed/duplex [ 893.836762][T31467] bond6: (slave erspan0): failed to get link speed/duplex [ 894.040880][ T4949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 894.061984][ T4949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 894.071896][ T4949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 894.090477][ T4949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 894.091276][T31467] net_ratelimit: 1 callbacks suppressed [ 894.091290][T31467] bond6: (slave erspan0): failed to get link speed/duplex [ 894.134004][ T4949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 894.417415][T31468] bond6: (slave erspan0): failed to get link speed/duplex [ 894.570563][T31496] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6393'. [ 894.614306][T31487] tipc: Enabled bearer , priority 0 [ 894.627288][T31465] bond6: (slave erspan0): failed to get link speed/duplex [ 894.643535][T31494] netlink: 324 bytes leftover after parsing attributes in process `syz.3.6392'. [ 894.668226][T31489] syzkaller0: entered promiscuous mode [ 894.674718][T31496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6393'. [ 894.684011][T31489] syzkaller0: entered allmulticast mode [ 894.693694][T31496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6393'. [ 894.714960][T31486] tipc: Resetting bearer [ 894.809742][T31486] tipc: Disabling bearer [ 894.856532][T31466] bond6: (slave erspan0): failed to get link speed/duplex [ 894.976640][T31466] bond6: (slave erspan0): failed to get link speed/duplex [ 894.996900][T31506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6395'. [ 895.099050][T31465] bond6: (slave erspan0): failed to get link speed/duplex [ 895.149879][T31515] syzkaller0: entered promiscuous mode [ 895.155531][T31515] syzkaller0: entered allmulticast mode [ 895.222369][T31517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6399'. [ 895.233632][T31468] bond6: (slave erspan0): failed to get link speed/duplex [ 895.281710][T31520] netlink: 'syz.2.6398': attribute type 1 has an invalid length. [ 895.296167][T31520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6398'. [ 895.363612][T31470] bond6: (slave erspan0): failed to get link speed/duplex [ 895.422263][T31523] tipc: Enabling of bearer rejected, failed to enable media [ 895.496830][T31466] bond6: (slave erspan0): failed to get link speed/duplex [ 895.914596][T31528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.944897][T31528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.226543][T29394] Bluetooth: hci3: command tx timeout [ 896.336451][T16956] syz0: Port: 1 Link DOWN [ 896.336818][ T5820] syz2: Port: 1 Link DOWN [ 896.438286][T31545] netlink: 'syz.4.6406': attribute type 1 has an invalid length. [ 896.576124][T31558] netlink: 'syz.2.6411': attribute type 8 has an invalid length. [ 896.587752][T31558] __nla_validate_parse: 3 callbacks suppressed [ 896.587770][T31558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6411'. [ 896.654642][T31548] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 896.689173][T31548] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 896.722226][T31565] netlink: 'syz.2.6414': attribute type 1 has an invalid length. [ 896.730417][T31565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6414'. [ 896.760432][T31556] bond2: (slave gretap1): making interface the new active one [ 896.783515][T31556] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 896.799890][T31545] macvlan2: entered promiscuous mode [ 896.805242][T31545] macvlan2: entered allmulticast mode [ 896.811630][T31545] bond2: entered promiscuous mode [ 896.817133][T31545] gretap1: entered promiscuous mode [ 896.823168][T31545] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 896.833820][T31545] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 896.846173][T31545] bond2: left promiscuous mode [ 896.851709][T31545] gretap1: left promiscuous mode [ 896.877954][T31560] IPVS: Error connecting to the multicast addr [ 896.924109][T31566] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 896.947135][T31566] syzkaller1: Refused to change device type [ 897.039255][T31575] netlink: 'syz.0.6417': attribute type 29 has an invalid length. [ 897.050975][T31575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6417'. [ 897.229602][T31590] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6420'. [ 897.253664][T31580] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 897.594761][T31591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6420'. [ 898.015074][T31477] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.030072][T31477] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.040645][T31477] bridge_slave_0: entered allmulticast mode [ 898.062972][T31477] bridge_slave_0: entered promiscuous mode [ 898.087949][T31477] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.110829][T31477] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.121303][T31477] bridge_slave_1: entered allmulticast mode [ 898.133921][T31477] bridge_slave_1: entered promiscuous mode [ 898.208075][T31622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6426'. [ 898.222316][T31477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.236244][T31477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.278645][T31477] team0: Port device team_slave_0 added [ 898.287471][T31477] team0: Port device team_slave_1 added [ 898.307749][T29394] Bluetooth: hci3: command tx timeout [ 898.363113][T31477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.375098][T31477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.426989][T31477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.440628][T31630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6428'. [ 898.516048][T31477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.524847][T31477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.556212][T31477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.680917][T31632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6429'. [ 898.701142][T31632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6429'. [ 898.771030][T31477] hsr_slave_0: entered promiscuous mode [ 898.794091][T31477] hsr_slave_1: entered promiscuous mode [ 898.817928][T31477] debugfs: 'hsr0' already exists in 'hsr' [ 898.840325][T31477] Cannot create hsr debugfs directory [ 898.907296][T31648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6432'. [ 899.939146][T31477] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 899.971119][T31477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 899.981324][T31477] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 900.000664][T31477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 900.019240][T31477] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 900.043048][T31477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 900.063140][T31477] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 900.078369][T31477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 900.264904][T31477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.309341][T31477] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.354791][T31469] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.362043][T31469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.386716][T29394] Bluetooth: hci3: command tx timeout [ 900.405281][T31469] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.412478][T31469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.554020][T31469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.562473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.581274][T31469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.589918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.601701][T31469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.610352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.623770][T31469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.632583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.675873][T31469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.684307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.822912][T31720] netlink: 'syz.2.6450': attribute type 14 has an invalid length. [ 901.124033][T31732] IPVS: set_ctl: invalid protocol: 25974 48.95.116.111:24418 [ 901.144449][T31732] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 901.341896][T31477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.523098][T31477] veth0_vlan: entered promiscuous mode [ 901.560771][T31477] veth1_vlan: entered promiscuous mode [ 901.693022][T31477] veth0_macvtap: entered promiscuous mode [ 901.776844][T31750] __nla_validate_parse: 9 callbacks suppressed [ 901.776864][T31750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6458'. [ 901.844070][T31754] netlink: 'syz.2.6457': attribute type 1 has an invalid length. [ 901.859191][T31750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6458'. [ 902.003977][T31760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6458'. [ 902.193779][T31745] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.201712][T31745] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.466961][T29394] Bluetooth: hci3: command tx timeout [ 902.601702][T31745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.657617][T31745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.140478][T31745] gre1: left promiscuous mode [ 903.255195][T31754] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 903.260058][T31760] hsr_slave_0: left promiscuous mode [ 903.291890][T31760] hsr_slave_1: left promiscuous mode [ 903.325351][ T3291] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.344043][ T3291] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.425136][ T3291] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.455525][ T3291] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.500871][T31477] veth1_macvtap: entered promiscuous mode [ 903.558030][T31477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.586027][T31477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.640530][T31767] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6459'. [ 903.657811][T31767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6459'. [ 903.689686][T31468] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.700498][T31468] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.735408][T31468] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.761932][T31468] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.082761][T31777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6462'. [ 904.185368][ T3291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.211961][ T3291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.289698][T31787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6465'. [ 904.310510][ T3291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.321392][ T3291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.603608][T31802] netlink: 'syz.2.6471': attribute type 1 has an invalid length. [ 908.329201][T31829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6476'. [ 908.371445][T31829] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6476'. [ 908.405040][T31829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6476'. [ 908.443517][T31829] netlink: 'syz.4.6476': attribute type 7 has an invalid length. [ 908.454521][T31829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6476'. [ 909.181931][T31848] netlink: 'syz.2.6483': attribute type 1 has an invalid length. [ 909.255758][T31848] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 909.553082][T31861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6485'. [ 909.638748][T31861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6485'. [ 909.866290][T31866] atomic_op ffff8880511cf998 conn xmit_atomic 0000000000000000 [ 909.885816][T31868] geneve3: entered promiscuous mode [ 909.908328][T31868] geneve3: entered allmulticast mode [ 910.321927][T31877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6492'. [ 910.576048][T31890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6495'. [ 910.599244][T31893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6497'. [ 910.779603][T31899] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 910.779603][T31899] 3UH5rBn [ 911.998302][T31913] pimreg9: entered allmulticast mode [ 912.325620][T31921] sch_tbf: burst 12 is lower than device veth1_to_bond mtu (1514) ! [ 912.988988][T31935] netlink: 'syz.0.6506': attribute type 1 has an invalid length. [ 913.099522][T31944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6507'. [ 913.395968][T31947] netlink: 'syz.0.6508': attribute type 4 has an invalid length. [ 913.943833][T31961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6513'. [ 914.075865][ T30] audit: type=1804 audit(1779400443.960:33): pid=31970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6517" name="/newroot/581/memory.events" dev="tmpfs" ino=3000 res=1 errno=0 [ 914.243304][T31985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6519'. [ 914.295525][T31987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6516'. [ 914.358957][T31986] bridge_slave_0: left allmulticast mode [ 914.382348][T31986] bridge_slave_0: left promiscuous mode [ 914.401690][T31986] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.450066][T31986] bridge_slave_1: left allmulticast mode [ 914.463905][T31986] bridge_slave_1: left promiscuous mode [ 914.482317][T31986] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.527169][T31986] bond0: (slave bond_slave_0): Releasing backup interface [ 914.545130][T31986] bond0: (slave bond_slave_1): Releasing backup interface [ 914.562350][T31986] team0: Port device team_slave_0 removed [ 914.574113][T31986] team0: Port device team_slave_1 removed [ 914.582835][T31986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.591038][T31986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.601580][T31986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.609999][T31986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.621200][T31986] net_ratelimit: 5 callbacks suppressed [ 914.621217][T31986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 914.722549][T31996] 5n: entered promiscuous mode [ 915.409921][T32027] bridge0: port 1(bond0) entered blocking state [ 915.433190][T32027] bridge0: port 1(bond0) entered disabled state [ 915.450388][T32027] bond0: entered allmulticast mode [ 915.487686][T32027] bond0: entered promiscuous mode [ 915.813145][T32037] netlink: 5000 bytes leftover after parsing attributes in process `syz.4.6532'. [ 915.842504][T32037] openvswitch: netlink: Flow key attr not present in new flow. [ 916.695883][T32067] netlink: 'syz.3.6539': attribute type 13 has an invalid length. [ 917.190145][T32078] pim6reg1: entered promiscuous mode [ 917.204954][T32078] pim6reg1: entered allmulticast mode [ 917.508862][T32086] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6544'. [ 917.668872][T32086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6544'. [ 917.706323][T32089] netlink: 'syz.4.6546': attribute type 111 has an invalid length. [ 917.769050][T32091] bridge0: port 3(ipvlan2) entered blocking state [ 917.797620][T32091] bridge0: port 3(ipvlan2) entered disabled state [ 917.803258][ T10] IPVS: starting estimator thread 0... [ 917.810333][T32091] ipvlan2: entered allmulticast mode [ 917.822220][T32091] bridge0: entered allmulticast mode [ 917.838082][T32093] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 917.848370][T32091] ipvlan2: left allmulticast mode [ 917.856896][T32091] bridge0: left allmulticast mode [ 917.918128][T32097] IPVS: using max 45 ests per chain, 108000 per kthread [ 918.765350][T32125] netlink: 'syz.3.6556': attribute type 1 has an invalid length. [ 918.961651][T32125] bond12: entered promiscuous mode [ 918.980413][T32125] 8021q: adding VLAN 0 to HW filter on device bond12 [ 919.280735][T32134] bond13: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 919.356648][T32134] bond13: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 919.387728][T32137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6559'. [ 919.416763][T32137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6559'. [ 919.540206][T32142] bond6: (slave erspan0): Removing an active aggregator [ 919.571144][T32142] bond6: (slave erspan0): Releasing backup interface [ 919.590431][T32144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6560'. [ 919.640789][T32142] bond0: (slave dummy0): Releasing backup interface [ 919.677167][T32142] bridge_slave_0: left allmulticast mode [ 919.686878][T32142] bridge_slave_0: left promiscuous mode [ 919.700305][T32142] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.742533][T32142] vlan3: left promiscuous mode [ 919.754710][T32142] geneve0: left promiscuous mode [ 919.795924][T32142] bond0: (slave bond_slave_0): Releasing backup interface [ 919.822739][T32142] bond0: (slave bond_slave_1): Releasing backup interface [ 919.831042][ C1] ------------[ cut here ]------------ [ 919.838925][ C1] ODEBUG: free active (active state 0) object: ffff88802a8aaa78 object type: timer_list hint: br_ip6_multicast_port_query_expired+0x0/0x380 [ 919.853328][ C1] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#1: ksoftirqd/1/23 [ 919.863915][ C1] Modules linked in: [ 919.870232][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 919.879538][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 919.889759][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 919.896122][ C1] Code: 89 44 24 20 e8 57 43 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 b6 28 8c 48 c7 c2 a0 bb 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 919.915810][ C1] RSP: 0018:ffffc900001d7a30 EFLAGS: 00010246 [ 919.921960][ C1] RAX: ffffffff8a7eb6b0 RBX: ffffffff9a6917b0 RCX: 0000000000000000 [ 919.930020][ C1] RDX: ffffffff8c28bba0 RSI: ffffffff8c28b620 RDI: ffffffff903c0860 [ 919.938054][ C1] RBP: ffffffff8bcf3a20 R08: ffff88802a8aaa78 R09: ffffffff8bcf4d80 [ 919.946060][ C1] R10: dffffc0000000000 R11: ffffffff81b220d0 R12: ffff88802a8aac00 [ 919.954167][ C1] R13: ffffffff903c0860 R14: ffff88802a8aa000 R15: ffff88802a8aaa78 [ 919.962216][ C1] FS: 0000000000000000(0000) GS:ffff888125379000(0000) knlGS:0000000000000000 [ 919.971245][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 919.977878][ C1] CR2: 00007f648f09cff8 CR3: 0000000074144000 CR4: 00000000003526f0 [ 919.986053][ C1] Call Trace: [ 919.989423][ C1] [ 919.992373][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 919.999513][ C1] kfree+0x13e/0x640 [ 920.003439][ C1] ? kobject_put+0x228/0x560 [ 920.008119][ C1] kobject_put+0x228/0x560 [ 920.012565][ C1] ? rcu_core+0x751/0x1070 [ 920.017069][ C1] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 920.022420][ C1] rcu_core+0x7cd/0x1070 [ 920.026851][ C1] ? __pfx_rcu_core+0x10/0x10 [ 920.031554][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 920.037390][ C1] handle_softirqs+0x22a/0x840 [ 920.042179][ C1] ? schedule+0x90/0x360 [ 920.046503][ C1] ? run_ksoftirqd+0x36/0x60 [ 920.051134][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 920.056195][ C1] run_ksoftirqd+0x36/0x60 [ 920.060715][ C1] smpboot_thread_fn+0x541/0xa50 [ 920.065677][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 920.070805][ C1] kthread+0x389/0x470 [ 920.074904][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 920.080455][ C1] ? __pfx_kthread+0x10/0x10 [ 920.085089][ C1] ret_from_fork+0x514/0xb70 [ 920.089838][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 920.094973][ C1] ? __switch_to+0xc79/0x1410 [ 920.099761][ C1] ? __pfx_kthread+0x10/0x10 [ 920.104418][ C1] ret_from_fork_asm+0x1a/0x30 [ 920.109271][ C1] [ 920.112339][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 920.119639][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 920.128852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 920.138927][ C1] Call Trace: [ 920.142228][ C1] [ 920.145183][ C1] vpanic+0x56c/0xa60 [ 920.149200][ C1] ? __pfx__printk+0x10/0x10 [ 920.153823][ C1] ? __pfx_vpanic+0x10/0x10 [ 920.158357][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 920.163698][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 920.168936][ C1] panic+0xc5/0xd0 [ 920.172693][ C1] ? __pfx_panic+0x10/0x10 [ 920.177152][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 920.182130][ C1] __warn+0x315/0x4c0 [ 920.186145][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 920.191911][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 920.197672][ C1] __report_bug+0x29a/0x540 [ 920.202213][ C1] ? unwind_next_frame+0xa6/0x2550 [ 920.207360][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 920.213115][ C1] ? __pfx___report_bug+0x10/0x10 [ 920.218181][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 920.223149][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 920.228121][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 920.234322][ C1] report_bug_entry+0x19a/0x290 [ 920.239211][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 920.244965][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 920.250714][ C1] handle_bug+0xce/0x200 [ 920.254989][ C1] exc_invalid_op+0x1a/0x50 [ 920.259610][ C1] asm_exc_invalid_op+0x1a/0x20 [ 920.264491][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 920.270858][ C1] Code: 89 44 24 20 e8 57 43 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 b6 28 8c 48 c7 c2 a0 bb 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 920.290481][ C1] RSP: 0018:ffffc900001d7a30 EFLAGS: 00010246 [ 920.296575][ C1] RAX: ffffffff8a7eb6b0 RBX: ffffffff9a6917b0 RCX: 0000000000000000 [ 920.304575][ C1] RDX: ffffffff8c28bba0 RSI: ffffffff8c28b620 RDI: ffffffff903c0860 [ 920.312748][ C1] RBP: ffffffff8bcf3a20 R08: ffff88802a8aaa78 R09: ffffffff8bcf4d80 [ 920.320752][ C1] R10: dffffc0000000000 R11: ffffffff81b220d0 R12: ffff88802a8aac00 [ 920.328744][ C1] R13: ffffffff903c0860 R14: ffff88802a8aa000 R15: ffff88802a8aaa78 [ 920.336737][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 920.342227][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 920.349284][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 920.356350][ C1] kfree+0x13e/0x640 [ 920.360270][ C1] ? kobject_put+0x228/0x560 [ 920.364901][ C1] kobject_put+0x228/0x560 [ 920.369353][ C1] ? rcu_core+0x751/0x1070 [ 920.373803][ C1] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 920.379135][ C1] rcu_core+0x7cd/0x1070 [ 920.383428][ C1] ? __pfx_rcu_core+0x10/0x10 [ 920.388132][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 920.393897][ C1] handle_softirqs+0x22a/0x840 [ 920.398690][ C1] ? schedule+0x90/0x360 [ 920.402962][ C1] ? run_ksoftirqd+0x36/0x60 [ 920.407589][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 920.412638][ C1] run_ksoftirqd+0x36/0x60 [ 920.417090][ C1] smpboot_thread_fn+0x541/0xa50 [ 920.422063][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 920.427134][ C1] kthread+0x389/0x470 [ 920.431239][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 920.436725][ C1] ? __pfx_kthread+0x10/0x10 [ 920.441354][ C1] ret_from_fork+0x514/0xb70 [ 920.445975][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 920.451121][ C1] ? __switch_to+0xc79/0x1410 [ 920.455837][ C1] ? __pfx_kthread+0x10/0x10 [ 920.460469][ C1] ret_from_fork_asm+0x1a/0x30 [ 920.465280][ C1] [ 920.468909][ C1] Kernel Offset: disabled [ 920.473235][ C1] Rebooting in 86400 seconds..