last executing test programs: 29.75401079s ago: executing program 2 (id=3383): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'bond_slave_0\x00', 0xc201}) recvfrom(r2, 0x0, 0x63, 0x2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) socket$nl_route(0x10, 0x3, 0x0) 28.72772462s ago: executing program 2 (id=3397): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="f9172f7af8e31df36fa4528d0000000000f6d19d0901d54892125f432da5aef230797821e5ddd5e92a37f077f80a09ae3b48aafadc65d4204acd9f70e0953b4f4cbe5eab2f4cbf6e6319827ffde685d5826a815753b7e96a50bc413cc231d46fc2c4083a5ec381e3c6a3934f6afa45f9d68b061d2254754bf7785d06000000000000002f87b87cb0"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000001600)="2700000014000707030e0000120f0a000000008a151f7508003900000000000000000000000200", 0x27) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r4}, 0x20) (async) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) (async) recvmsg(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 28.525973395s ago: executing program 2 (id=3399): r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xc, 0x20, 0x4}, 0x10) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x46, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async, rerun: 32) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) (async, rerun: 64) r2 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 64) write(r1, &(0x7f0000000140)="1694a57bb95588b6806337262b9fcd7eb35f6e45743bdcdfb28512af8309be846c61dd125b4f8c8e193b3604d35d92d9e0f88d3358fb9bff669d892370b198da07", 0x41) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES16=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @lsm=0x1b, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}}, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) 28.519537317s ago: executing program 0 (id=3400): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x210, r0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f9b54ae9668bfb12ce88d7b0a99b8a5b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100000}]}, @NL80211_ATTR_REKEY_DATA={0xc8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ccdf11c6992b20277a82aa6668743d06b7afbbd8b1e9f6342d2ac39dfee059ed"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="922a0ceb230e92bbb82a82e9b99696977b710c48b2c2d8d4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="de959836a9aeeac3ffa051e5e28bc401"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e95dfe0b45055bcca6524110879588baa3f2a20ba57087383f31ba5cd866a51c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dee11aaa97c00795"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "09c44e14f2168406"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "114aa60992443c98"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b66651b156e136c16f9a5e3142452fc163c8bd76c408d737"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bf51c15e97542414"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6d9a3ffe84906781f3fdaa0ab5759dca"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="476d685127afa9ce2bc951ec63dd27b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a9f5b99802ff2c1a42fb4ff470180678"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "22e0ab347bef6336"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "47647dace953079e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b387981005b734eb455e699516b73ba7"}]}, @NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6e72bdb86bb7ea1a6f349c79d2176011"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cc807211bc1c16fa"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cd9115b8c1696417"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d32e84083bb698635e7e0a42d5517a32d906bb3e267dab17c999979902806293"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f2e1f17f2aeb0ad66bc7b345699e6febd3a5638159dd91d2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5d4f0cadabf72f18d792f2b4601dc4d3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d960d234c65d26a9"}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x15, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000045}, 0x4008800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 28.281631074s ago: executing program 2 (id=3403): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"fceaa24ad2c1284dd364ca21f95d41e0", r2, r3, {0xffff, 0x8}, {0x8c, 0xc}, 0x7, [0x3, 0xa, 0x7, 0x2, 0xc535, 0x3, 0x5, 0x6, 0x1c9, 0x7, 0x4, 0x31, 0x1, 0x4, 0x2, 0x2]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"fceaa24ad2c1284dd364ca21f95d41e0", r2, r3, {0xffff, 0x8}, {0x8c, 0xc}, 0x7, [0x3, 0xa, 0x7, 0x2, 0xc535, 0x3, 0x5, 0x6, 0x1c9, 0x7, 0x4, 0x31, 0x1, 0x4, 0x2, 0x2]}) unshare(0x4000000) r4 = socket$inet(0x2, 0x800, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x50, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) unshare(0x46000000) (async) unshare(0x46000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40020000) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000400)=0x2002, 0x4) (async) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000400)=0x2002, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x5, 0x1}, &(0x7f0000000480)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x5, 0x1}, &(0x7f0000000480)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000004c0)={r7, 0xe}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@getnetconf={0x14, 0x52, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000180) accept4$inet(r4, &(0x7f0000000600)={0x2, 0x0, @multicast1}, &(0x7f0000000640)=0x10, 0x80000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000780)={r4, &(0x7f0000000680)='#]\xa0$}-.:*\x00', 0x22200, &(0x7f00000006c0)={@align=0x1, {0xff6a, 0x4, 0x14000, 0x6}}, 0x8, &(0x7f0000000700), &(0x7f0000000740)=0xfffffffe}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000780)={r4, &(0x7f0000000680)='#]\xa0$}-.:*\x00', 0x22200, &(0x7f00000006c0)={@align=0x1, {0xff6a, 0x4, 0x14000, 0x6}}, 0x8, &(0x7f0000000700), &(0x7f0000000740)=0xfffffffe}) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x124, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb0}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x79}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000001) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r10, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x1004c040) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r9, 0x8002f515, &(0x7f0000000b00)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000c00)={'ip_vti0\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x5, 0x8bbf, {{0x12, 0x4, 0x1, 0x17, 0x48, 0x65, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@cipso={0x86, 0x21, 0xffffffffffffffff, [{0x0, 0x5, "573812"}, {0x6, 0xe, "8ab4cc1218dbf8fc6e4f82eb"}, {0x7, 0x8, "a5419ddb28bd"}]}, @timestamp={0x44, 0x8, 0x13, 0x0, 0x7, [0x3]}, @timestamp={0x44, 0x8, 0xab, 0x0, 0x6, [0xfffffff9]}]}}}}}) sendmsg$nl_route(r9, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@ipv4_getaddr={0x30, 0x16, 0x400, 0x70bd29, 0x25dfdbfc, {0x2, 0x78, 0x20, 0xff, r11}, [@IFA_BROADCAST={0x8, 0x4, @local}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x43}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) (async) sendmsg$nl_route(r9, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@ipv4_getaddr={0x30, 0x16, 0x400, 0x70bd29, 0x25dfdbfc, {0x2, 0x78, 0x20, 0xff, r11}, [@IFA_BROADCAST={0x8, 0x4, @local}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x43}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r9) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r9) openat$cgroup_freezer_state(r9, &(0x7f0000000d40), 0x2, 0x0) (async) r12 = openat$cgroup_freezer_state(r9, &(0x7f0000000d40), 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x20010, r12, 0x443d3000) sendto$inet6(r9, &(0x7f0000000d80), 0x0, 0x4004004, &(0x7f0000000dc0)={0xa, 0x4e22, 0x1, @private2, 0x3}, 0x1c) 27.934944544s ago: executing program 4 (id=3407): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x2}, {0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5dfe}, [@lastused={0xc, 0xf, 0xfffffffffffffffd}]}, 0x104}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000000c0)=0xfffffffe, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x5, 0x5, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x13, 0x0, 0x2, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @mcast1}}]}, 0x70}}, 0x40) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc, 0x0, 0x0, 0x2}, 0x1c) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) 27.782587802s ago: executing program 3 (id=3408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002700000000dbdf251400000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) 27.737193474s ago: executing program 4 (id=3409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r8, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r8, &(0x7f0000000400)="cde0095f3d90dc2f30", 0x9, 0x800, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x55) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r10, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000080) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r10, 0x8, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1c, 0x5, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r11, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r11, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0xfffffff7, 0x1, 0x3ff}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000ff89107d0000000000750500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 27.593969905s ago: executing program 3 (id=3411): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x40000002, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000016c0)=ANY=[@ANYBLOB="18080200d4ff000000000000ff000015182e1b43", @ANYRES32=r1, @ANYBLOB="0000000010180000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000380)={@broadcast, @random="74eca04e0fb0", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x9, 0xb4, 0x68, 0x0, 0x0, 0x3a, 0x0, @empty, @multicast1, {[@end, @rr={0x7, 0x3, 0xec}]}}, {0x4e24, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "68a44e9390e1b96305ef26836b3c9c1f8bc4d9ac60291b70ea627f6d1ab003fc", "74e698bda2c0e37d6aa18509fb05244cfe09bb7850b8e68d829d874bcaa5ca80473dcdcedf1ed699c1829499c671ffab", "96eb7b93133209d1007ac68d9b619a8cf87b4fa609d02c370f25e196", {"d2ff302bdb9f67a0f9db7e7bac1aee6f", "225cabb19adca44b3620cdf9f3b2af33"}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020600000200"], 0x10}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000140)={0x2, 0x0, 0x3}, 0x8) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x40000002, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000016c0)=ANY=[@ANYBLOB="18080200d4ff000000000000ff000015182e1b43", @ANYRES32=r1, @ANYBLOB="0000000010180000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0xc2, &(0x7f0000000380)={@broadcast, @random="74eca04e0fb0", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x9, 0xb4, 0x68, 0x0, 0x0, 0x3a, 0x0, @empty, @multicast1, {[@end, @rr={0x7, 0x3, 0xec}]}}, {0x4e24, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "68a44e9390e1b96305ef26836b3c9c1f8bc4d9ac60291b70ea627f6d1ab003fc", "74e698bda2c0e37d6aa18509fb05244cfe09bb7850b8e68d829d874bcaa5ca80473dcdcedf1ed699c1829499c671ffab", "96eb7b93133209d1007ac68d9b619a8cf87b4fa609d02c370f25e196", {"d2ff302bdb9f67a0f9db7e7bac1aee6f", "225cabb19adca44b3620cdf9f3b2af33"}}}}}}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020600000200"], 0x10}}, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r4, &(0x7f0000000140)={0x2, 0x0, 0x3}, 0x8) (async) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), 0x4) (async) 27.501934305s ago: executing program 0 (id=3412): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0xcc, 0x9, 0x14, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x700, 0x700, 0x400, 0xb4e}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1a, '\x00', r0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0xffffffffffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1a, '\x00', r0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0xffffffffffffffff}, 0x94) 27.375512553s ago: executing program 4 (id=3413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0xdf}}, 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "617e5edb37ef999f", "8b3de2aabceef22f419e59f3000000000400", '\x00!\x00S'}, 0x38) 27.370714039s ago: executing program 3 (id=3414): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @private0, 0x10}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x80000000, @empty, 0xfffffbff}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @multicast2}], 0xb8) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9010}, 0x20000c40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, @l2={0x1f, 0x2, @none, 0x3}, @nfc={0x27, r3, 0xffffffffffffffff, 0x3}, @tipc=@name={0x1e, 0x2, 0x2, {{0x41}}}, 0x3, 0x0, 0x0, 0x0, 0xd, &(0x7f0000000240)='vlan0\x00', 0x9, 0x8, 0x4}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x6, 0x8, {{0x15, 0x4, 0x0, 0x3, 0x54, 0x65, 0x0, 0x40, 0x2f, 0x0, @multicast2, @private=0xa010102, {[@cipso={0x86, 0x3f, 0x3, [{0x0, 0xb, "53ada0f399b7bb7ccf"}, {0x7, 0x6, "fe77a7a1"}, {0x2, 0x7, "a88b6d9809"}, {0x1, 0x10, "aaf4fc9f1ca289cab8cdaa95f63e"}, {0x1, 0x11, "2794c8ae57c34c4585f7f4044e4451"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdd}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffffffffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x632}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4048040}, 0x28040081) (async) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r7, 0x111, 0x3, 0x1, 0x4) r9 = openat$cgroup_ro(r8, &(0x7f0000000780)='cgroup.controllers\x00', 0x0, 0x0) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000900)={&(0x7f00000007c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r10, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa3b1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3e}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000980)=@req={0x28, &(0x7f0000000940)={'wlan0\x00', @ifru_mtu=0x401}}) r11 = socket$inet(0x2, 0x80000, 0x8) sendto$inet(r11, &(0x7f00000009c0)="cd29a1be7dddf33c4e4104a65a0811701ff468a42f709c9ed40709a20ab1509f059780738024c33fa48224635de87476b8697b1d9410013010ab802c24b2aa59b0b29512d3be24bdd3709518f06b7603ba10b40749fffa9fb1cca49a2e9aa61ce612b854c806fc210843d9a8d854f65c873cc1d14ffd18e1dc099daac70f4dcbdc0228022128519a4503b31e4dcb97e4f1b1354a6eb57babd75a386759f4e2b4ba9792ebdd48e7f902d6bfdb61829b8d0fcc15e822a06e55df6b1285c295fb5fdb170f2c40422a8340aeeceb062a0223472d0b4b953c8689e6b1268eabbcc1b0fbb72e0d8912bdc6cebfaf503b8b6be6ab1354", 0xf3, 0xc0, &(0x7f0000000ac0)={0x2, 0x4e22, @broadcast}, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x74, r12, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x400}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x44804}, 0x800) (async) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000c80)='wg2\x00', 0x4) (async) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r13, 0x84, 0xd, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0xc) (async) writev(r11, &(0x7f00000020c0)=[{&(0x7f0000000d40)="71a1bbb66d1b5559e6963e778ade800c", 0x10}, {&(0x7f0000000d80)="f3824d4e6e9270f1bea12e75016cd4bbe31c4a1da98f37c7b040a5d21cb947a2eaf79acc2872fa804538a59c4e693a2d0ad75474c1676507b8909e28d742fb4b9fe878a4464f3654b3f89e0070bcfb1560d72ef1bf2bfd346fd7e42d2b0aba99e8f3c5974b824eb468a41c20e945687e7cf9d6473df8", 0x76}, {&(0x7f0000000e00)="95787812ccbccb6f71ead2af63731f38b2881bdc3b555ce994497ac3a34597098ea79bbcaab8", 0x26}, {&(0x7f0000000e40)="80d0803df94b9afbaf49c7417aee790012f3ba396827e5af2c886176fa6e168b168bb4eeed166a7b00a2a4aad3f277c332f3a58ab4da170c4c24e8f295c40fcaff7027342651a5f1defe1ee85e6a82f7558a8ac70151d2782e6a4923f76451b2ccf66c6912d781a20e1f2ff86796a1f5a5947b7ade062e442b152627fb7f77a4cc46d5d89dc0da6e077492cb09832e56dd45e07ce48e752ef838ec7a95e9955c52fa7f235350e51dc1f3646816cb56aaf4659772d9c36761f8f1ea4c877afc8508055a18048d03be80501ca66effecbfa28705c4a61efa105a444bc277d9b5a28c47692962e0398200e7116d0d3350468e984a85387881eae1407096941b1abc5e0dd3c8a280de62b2a9b34be25bbbb8a982abb481db281562d04ee8d5004e08d48f29624ffc704d1677190932c1ff3888e4eb00687be1b2e7a6df1029f13737762131f49447e101fd52434e7ee328f9398415aac824dfe67547d0340d6720ed75cd2162af989c7ed007b9f02a35af006492e261aa3c3cdf4305d3d4a492e4a3eafafee7dc6fa67cd3e4439141e3ca2e346e804935a6a5d5b62ff79bcb664aa914905f0faeee67000d08aa8e354c57b1b1ace01662cadbc49ecd6ff4de094ea3f962f70864976596d6f95ebf076a9647a2b29491e0b4cda9919c0a644959f7868ccbf9ff44ec579faca8ae85f081b009164eaece311b70d8aad8290cb9ac1cc9ebd4e880daeb7120eb52fc6babf5f348ad1e39d0fc1157c28fddb36ee4cb4e804ff505fa69ea7f45354c15b76752fa255012877ca07592e8c62843d6d4a133ea0a37475f1fa12d6acdc3e1346c128681b13ac5778c9dd5899dbafdfbe4a4d8a9cabac20ff6621f8e303c894a22876733e12f068a8a9547c806327db35f40c1c58c1981d07814b83d82e7b0a7c61c5617978f85b3c1f37cf3a1bbd6d95650adc99e5ca2a79adb9884d3d41855054d5ea0339f5761608067966a572ba1f287fe23a81e15f3ede46de9e3cdc6d78a80fff33874dcd60e92dc90abfd20593f7f0f638d778b3152ba23d41d236813e778afd4cb6c48de8db91b4fd89922446f85dd03049671021f173931cc0f4040d81057102f8246c143414c6911d69e84e5a87afc4d08363d5d00d0d713ac84226dd08bf10754b9ac1863fada8a800e8c901cf4866dba3bea5cd9f792d0d796510a25e7c18355bd80d7a08c0faa3d59765086cfe58e840367f76a0087325105df579f5c812c756e44ea1e78825e7e255e4b71903bc20a925587fae35d3f1f3baf755f7949aa7819ea4c59c79fe361f8d998fe53cc39c88419faa3f47945e40a54bd7e49e64eb3076acb79c10dcba30826bc263ad36d550207f9fcfe389d244855d6a18862b68a7fc0302ac3b0efb6a16a6a6f23e9ee375cb846b50faf74ef8f623c09ad44d10ec0c1d8f790d90414be337a3221c4642b7bf6cdf5ba285782275890c6368eafe5acd4cdfadbd7ff3b031f4926b45072268baa59a8d823636f95a6ef7cef1dafe19a17f12aa961741d11cd7b645617bd0154fd996f03a7823806ff0d41250bd41c886d06ccb2a26bfae450fe26efd3966bd5976c48c07761a7a8056b43cf7d03c755ff784f2c8f65e6bfe9aaa51fac77316fd72e6a64aecf74368cb14596e04d4a8732ca19e3aa8683f61051a84a8481f2d7388b79c39462c59664ec1e7f0507fe3f10b7cf2c923342e0eef9952714a011c3fdcdeb08f14a54ee2bad24591b0373df8c9d41c5056a1bd8a7969767147c375af7d5e96745989f5d6786c087ba7973ea1dacc2a8b06b4bc8e5b2ead34ca174b55b9c717c63ad1c69c480d8d25464bc8cdc77358b247f83231adf8eeadeacc4d89ab83ae4bea4c5138e9f491aedc54ffd9a3d3639842184c9d425fedf7c953a13ecd114fec685dd31f8452b39228305e0e1b7b4bfdb40a47d7584eb442aa1461ea8843ffe7eb1ab3abc6055361e55dd2d19d9b9b2d24eff2b8eade5401c853904b2ff4827403ce9082cba3597270030de883b2944ee2fde00c6a8a6cc039a8935e30cc2acb3811dd400353969cdd93e72aed918896dd2bc3be7ebbb030e890a65377ab7575fe33822378d5517538a0f55ad1c456d67706fb33a9d3d601c2696c86786819f0425a5ca4d070fe1118c9522a6519c884aa79079f666da8dc183fd8ce5c1a03bee9576a08563fcd12200a8df81d55e7f4707b64226eabbac3fa966c485d9766d2849c7d8fabb67f1a0692c8409c47bead47545307dfdc33308242108434f4de5ad73b0e606ded343b18b56fcece361ee03db4411ab2b67f09e4dfffcaed671dd165d68fd0d3bbb7af30f4e1aeba35f16fdbab4ca84e214a5a845e18887c2b2dc1542e3a51a0a9c03effe1f50f6dda9aa9b5e4db68491114d5429552d77f83ed0c62735dd0e08ceb1a11f23f63cb0bf6417ad656dd226250c0039afd6def79a90ea147bc1a62aba3806d6de0ade86a747bc45a322cdddad018e85fae7841780f33ddba7fc647f331ead67adc99380692b25881bb51bf55194620363cead201430eb103df56515e5df94bfc30d44b5ed336f317565991b8b117233c3a5ad6cdd50c99cf6e2f04b44d7afb389f262c69e7bd743216f6f92237c6dd8c42459f22cc18374d3adb63e857ead7c0f3fb405f8fe51f93c9699f1b11fe42640b1995d5fc59c1f45089184febb545ad9dc74e362965d998182dd9b259a26b7e8e8d225881dbbc3cd436acdfc016bf8427bc6bdfb36fe990bb8cb19ea199829120b220bdc702f798f46fcafca33d0590937e52cb71a106ba4aa62fa4cf953e73dcc7b7baf3d16c3e821cd285c4362dd67c9b097a96cdeea40096f8c6ad7bd40da910a27ade783a54dd0dc0374d502be638223ad5b6e221cdc6ea40a4c37b9379d91d5552d1dad435c1beb555f1f6da17612a7c6a98203a84b24e12118f4689f25fb88fb0c4d17a753adf2ef32de9b828870c1f3da44c1394f307f2eab61fd457cf079e365a3a07d0e6f777e73340802fa6a75f57b776914edc91390cb4602ab09f4005541e693c79ac1fa96c2d31f8c06c186f7dca7cd53626cf34d303d65ba1f5fb5ea508be025727c3d448cc603533cf2ad4e105c9301f34a402e0104268d0186ca13a3a9a9af8012969e5c9ca5ee26feef84f9df4b748a3b71639f6881d056b70e570ace787868b1e61d744008a102296fda92adf7cb8e6c04e2ce05894365ee8c6274bfafc28f5a140c8f5ad5dd91d16eb3d24945d15cd261ee50c8fe57ecdb7b617e229658f9eb7673bced57dd2ed94194ba45cb13b02f4111615f581d785509425694967e6af14f9c591fca47a904812f42c992baca208aa0f0c16495690d8841e717206835b4b0b34c59c8ab0e0f71e20e8b2bbb332a65c812d6386bd1a88b8a266787a70a53def9706005c5b94daaee88b017092c33dc85a73407e231b32e6447a643c43553b73824dff1efac8126546527cf0295e10e60c1fa9fc77895e4da1093d066aeaa89c5adae8136ccb58bc311f4a3e6451a0348be41c3e5a0bf5c4f4a96ff907c1cbf6f1ff3c35bacca9b70ee6767f9fb454d0cb79bf8f18ad54ef7f84e70c40ef93a00e439feccbe2bab88997359ba7a5b74ff262783e7e9b4dc4b2302c2d51859812c222022088ed207327c8f8e3a035be5c36c0fd595a9a955f1d2d008b3357e579e55c33cbfe728edb3ae347ed788d97dba731760a5d8b32b2f16c66fe08aa723ff75f280c7178cbbe3b00933fdd6dabffdeb0690663ce4659e00bcce88d71f7fc4e88077ae7e786e350c2a0fd2cbeb74f7edd9002bc04148b73b9f586ab71f220f6442b68f53f3a708a909df93f5b581629922256ddf26648cf705a5dd710c608295c9fc9932ed8b5f5179a8be30c23a540caf598a2bcd0bcda9a4bc3da740b0c51cddcec9a727b639f717e962fc7069efad85aee2bb62b4ebfbce8dda76398adad3bbee34e338235e538b4f630f4e273b050bc6ff52893e4f324322dacc11fad19bcb16aae6d938d62a6e764d1089bd2194a3f178c09d291200f408f6ece979590375b1d7be1984e89ec99c961f396125a4de06a2ae738b61735df70e319de50d1448f5f2764767fe795c97ccb2eb9573c8744a6ca292ee390647622de84c4e7bea42e3bf3f7e7920e3cbcf7fb81930e124409ef00387bbc5c9a3a879c41b87ce16b720a92f42708b80ce5a228b41c013d0c8d7209ddb358e20ca711447a669cebb62cd347d5108731823c1d808d6d57258cd35cd42bd78b2c6d920b2120ebbabb5127513d7d5bc947dc0aee87184c658fa23c0007dd58bfee03adb1eb5b3a88ecf9e745b64e1b61913cad022bb85994bd4728267cac81234f224f2fd0d9814d4ea864193b5de4c5043d52968f4d05ab8125eb0b6694229826c29fff269d0f9dd1458ff9e435b0d187a68ee033c3af630f4fb673cac0d107d360e8eaa8f5a39455fa2aac5cd59fb24d5cc187269a69c0b349830dea653928a003c31af263318b794ea7cd93faac56ac894826589cd10ba8bc0d78d68956f4bf1ec7f04fd10b785a461008518f03b6afa477a305242d6fbe5775df95d5b728751f0aee4c9ae4135065090efad58bee59854c747ef06a354d44cc80a18e3f00930e7ab98f8889bbdf3d07cb346b1f384dcd6acec9d8606a884b53d3654208cf834d52b650894942a9bb1b313f324de3507bfced1d4371641b1f50c5481c96eae1fb8a8422e1b072f15d10cb554552764ae9ae322bf48ed208444106c61c0abf6f4ff13d0a8a5957795e02858dd207c209a558cfb63d3c0a762c33bba00f74609e70743643cc714c9ebe3304a74d06b640885729df9b7953f5125a1fd4f0ca92d67f7a6e583637738d64b4216b8df2abdf976894239e354ad5a85633c7669bcc65ed08b6e4f022714303c9796a6ed7d0d158d829f3d5f365b64ab04aef8a452aec7f155acce384feb44db69d440c559ebe3e9bc60d05e2209a950bd33829c92c52dfa81af943d828e96b80b08889203d4d5ff6663b12869c0fd91c0803b0276bc27854f700825551d60a45f6d78c5ab0dc68ef7b6a7c8a764f372d150ee28b2feff78d415773d05d2a47e2989a58a3d86d1e191b019038e60fd4a9f4e73cc08ee3dce4df5317bf3a232f957e8421d5428b6a3e884556efd909a56e0a52e691e5c5b767441af0b619046d71ea09cb7115ad3b829fee9d613e93c6e4afa1286045e89fb8380360d8c7fc592b956db9c5cec02905f9bb5de1c8a978701ac59e16197e7f869f31233c069055a24a6988481372f4dd3c8a945321b0f987844a3b76ab31ca33712f977a495fe0f70d108f3c8277be063bf526a44848474ba0f28d34f59271499e294e816b6f4262afcdd48065b59af5f0b7ca4f80d4e6e46749df7def5c05403647369ae0d22fe16d971766c7003a1b6a2b3df213b94bd9ebcc9ea4cfdfe7573c164e8feadb584627fa9ad0e4a53c6c0c31c1a91da1f6c89426c95936d6d7d7a8a39b5c0823079fde6ff6651e5c4e9bbeb7c372378587030ab08cf1688fee108f118e99998414e69d4c90c9e261c29474979c54d1285522c9f690a6631127cfa581af10529ba48249f503aeab3f96c1d43c9242e10c4d6ff1a17879251ec166108404b55b26abfdfdfccd502fbed73f4ccc6d3db232d4114249ede8d683e72b1108fbe0f1eff40e2ec150f1c72398f4130c98fb6f6bba00cc0deb121301f21c6e722caa31acfc78a72ee529049cfb057d3c6e995703c5762a1669a0e652be41eae0da4b8294ae604ec611b05f38243f341c3a9c512b826ac", 0x1000}, {&(0x7f0000001e40)="253362594e84db02ca6516fd92df8122d52fe6bbd6432087f2a8fe73b7e51b3c723b44d57555019fa828932a7511d47069686dd3e12cb2a275be13f0fa39e87622786a145ac311d154841cb7dda870b4dddd17f697afb9bf4e8d0b139f57fc7c0b9d9ff03fbe867e98f191aedcd229a6913812a42c135ca95102735997976c5829288146624ebebdc7610a1bbe42376cb049f4d49ab7773ddbf0084b650d48eb325d7162b4a3d7286322fb4be1b1dcaf39602068719be6a3a74b8d493af5731a6da56e", 0xc3}, {&(0x7f0000001f40)="3e550e7c8874f7e85c3b9e23c17fbc7cc53e543aa2d073e45450ea774238a36a0687539bcb60fefb25e7d13eb2ffadc7f440bfc8c1c32aa7a4cbce2296ba55ecb8683fc42129f7b50246eba014c518a0ef1f874edad00dbab2d17cfd44809e6a2c363de6ce296f952d2297cceaa4e0f2f9f9acf796d99f", 0x77}, {&(0x7f0000001fc0)="652abc7038559561b097bc2aca6baf54e6261a20b60ea3320ce842bb74a693bdb1db528ab7fc98b86d03116e9248040ac75e635fb45cd91759b75e1af14968bd14feb58c2e66c91c2b817c714096fdbd3eed123d32de85e2351fd23ac7c7114ef5ae2bfdc5b2a010d61d3e711f2f1ae6114e87b9ab2e68253ae87428eb4abb42e04cdc1bc18c8cebcc6294b1e88b305ecd67128b00d89b6d66d352888e0e70ef8c8a392287fdc71bf1bffa82b040ba564cd7", 0xb2}, {&(0x7f0000002080)="6a3de2ab80", 0x5}], 0x8) (async) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000002140)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000021c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002240)="1b4cae9b536454c2a77a3e31cad62f3c88c3b10852ed96b222f7dd9ac6002d0fa6e86db0b2fbff5b7368bd6939482ed488497f68a491106d9823e6d49af6c969ed9896", 0x43}, {&(0x7f00000022c0)="838b606b76c853ae8477460b33d8b5b5fb823fede2d32cc5b9d22581d297b8e1083edb3f7276aa280c2036a8016d0143afda6652d7afe3387bee2b0ca5c2ad7f72ee9de230ddc91cab2584b13fc67731ac0017cc9751fa14f14c7bf3f0092f1d35deee40bb2b4955e459864eae74dabe9663cf71ee11cac57a2038815fd4d9fe3ba20bf90a6090f82becb3be399fd9dd92a004a7ccbe91614b131471792200f6e02c4fec084399235a2366acc5c04f29758aebe76e5b174611044738897f57727abecddc278949974df7bb5d8551055aeca75d72db3c2cf0", 0xd8}], 0x2, &(0x7f0000002400)=[{0x80, 0x114, 0x43, "643e1f9591b51e3b8e1a759c0e980993b197bc72f3f38e4dc8466631183493fb0ec1712e94e65d80d01b4330b013cbaeafa879d6c781e636781ffce2f20aec4e43b8d598693de25a7cf34751c8b87ba475bcc2a80d4b5676f52dc97e975dbf4638dff2af50c326ce2772"}, {0xb0, 0x114, 0x221, "62d1064b317f1f6ff83a61606bb1fcc246122247998ce05260a0cb82a1abb5d9dc1470cf637f25877a0f11bf496a2a8faadf3d3b3a77e4cd4202cd8979cfb7094da42c5ff18c3aaf8de2ac8ee39ef1ceca82278b7838c699eb97db5d3d6ffc6987359d8f815a117c1e8e6b7ec85fd7c903ed99cea5938abc433c97283a5260d906a30e122b9fd39b554a8d1584876a48f72b0a05e2148de219d9"}, {0x38, 0x10a, 0x6, "3777bcd37426ebeed2d736f09b90e39214cd6b98e7bdb53bb0605fbc8dbc58dff4390301"}, {0xa8, 0x119, 0xeb08, "a406ebaab6219302a285102f043cc6ba6d4a8b110ddfa97da84120e0e2c560a7653543d1984b6977a371ab456d7eb7c0c6a91dd389f49a49144e5434f7871ec83801783615a0d3e25c24cf6748ca49068d23023a071e59508fed55ca3f7c74262ca5f969adf4f02734463bd064ee7a01ef167a431a9a21cac9ccfa9a1f1f50fbbc57e46bd1ec4a0fe746b223097639ed12842f"}, {0x80, 0x1, 0x7, "1fee55340fb7c199648828efd0f5efa15808456d674ee4413ef4f9e4c2241ab77f8b4e9fc97b819a791dc7218ea31b92b7caa364b757a4c4a9a7dedbc19c8aa73eaeb6ce2f4d33f3c8155c20cd3d924b411766d3c5848f1b2817ed8c4f7a8f3793a252094a2fb8ddb65a5fb1f84e"}], 0x290}, 0x4000090) 27.314045449s ago: executing program 0 (id=3415): syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000e40)) (async) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'pim6reg0\x00', 0xf}) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x60, 0x2, 0x1, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3404}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xa, 0x7}}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x60}}, 0x800) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) 27.207758769s ago: executing program 4 (id=3417): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9", 0x10}, {&(0x7f0000000780)="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", 0xff}], 0x2, 0x0, 0x0, 0x20043}], 0x1, 0x485c) recvmmsg(r2, &(0x7f0000001140), 0x0, 0x22, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000289c62833e5e259c44c9913ad9"], 0x134}}, 0x0) 27.078587556s ago: executing program 3 (id=3418): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x400d050}, 0x240c881c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0xd, 0x1, 0x8}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27.051009118s ago: executing program 4 (id=3419): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000009, 0x30, r0, 0x44fc000) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000009, 0x30, r0, 0x44fc000) bind$alg(r0, &(0x7f0000003840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000003840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002ec0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="fa871ea2f75485e77fb6f000d8c581d8d10bd932c5e30da88a2100a11c89713fdf595653cccc1ca9891b06d3e589d3f7c18b211c36019c846ec563d28ad4a1eecd8968db53a36e12b0f15306a557dbb9cd53d117413cbfbf2fa0c1b7e75244d7364b2d55c2123f86108c4b033505bcb95ec592e16365ad93711c5c931a6d773eb6d078370e4e033fba15f772ffd65b08b76261a67e7bc2ba30c6fa6bb5b5fd06169795ae1ffad6c9b0bcd2d1f6c16932a7ab3a606f98d084ab6bd4066a705bbdbc2ee00d1967ed893e9c92c3b0a12d06f5f40c330d01befa7411a5dc2239c5b28fedd9fe6a15b178afce3a4127ee282d8dd6a11f", 0xf4}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000200)="1329529b129d15790bd695f8197f6d7178f55578c456f1889346893ea1604537b073f9195210107b5f15f1c550390e1d13be05c6b5425a", 0x37}, {&(0x7f0000000240)="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", 0xfc}, {&(0x7f0000000340)="f31966a5b77d60b31053f72b92888d2ee767e2254d02604d6cccda2efb6d5f4254ae6f5d354e3917ea2751afc2f2fd61319c74c97420f6f64e9b15ad81e8e23b212fb421d18110cd905f8ebc993e8c91a853b5817b2552339d8eb1b852a60aeab0323421f29fe44e1646aa43a472475a79a8d506c88605dd5267abc3c99a2d4f0411bcd1ff8516ea15539032778da2fdb84af133419dbda468569b1f7de803eae3efd0626a06a7b7319421c7ce0711841845012293f78e8cc26a8c94ed7f9c0ddcca8fb64f6705979b7232d815835874d637fa8f771aaa1a586a0644cfdc00f7db4047eb144b1c7a9790dabfadbc2960", 0xf0}, {&(0x7f0000000440)="eff05385b50daa37c6807436", 0xc}], 0x6, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xd0, 0x117, 0x2, 0xba, "ad3ac3ad0214b19ed4ac85158a9f08df7844747935d74cc7eecba6c62f6c62eca7a14b8544eb6f3dd40facd069f067ed25befd48f82de780ed30ee95cfd25615d016a6d788a95816fad855b4587914112e813eb00e9dfc3c5668dd9a923d58bce8dd6b3a24b3fb35d3bbc60ef9100ee452f584dbca2961ebfd63361b0fca6ccdb6bf7851c9199ebf605b4c07408b61220a6df1f29148f8a07b5fc9af06389be6ad7ca02e867c92e1ec72a94f2e24d4581d5e7cdbcd76127b6dd9"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @op={0x18}, @iv={0x108, 0x117, 0x2, 0xef, "e92306f32a54b78201d663dd2d040d71d9e25395db582288f058073319e9035395ad13d53bfce0ab061cbc799b7b1bfe6783f1ef6ed01e97ba0563c4253ff0a1290187178b4cfda0f0142d65f5606de3ba87aeeec4d724511d5f3eec624a04fc3b939bd69df26103ba972e7f21cfdf689f9c21296b197fee3c11948c376b90a2a623ca82a859a4d4bef08c7e64fd38a2212454430c9ce18104bc0d5a72a4a2f584ba8e087edadbcd6cc027c5a9f3b1bd5d9525bc663ad7bffcfade83bd7e7403ac6f592967f54b09fa1dcf203b85ae80a5cf3c1a74b077dba3c47c1a931a4317c54de2df8b1fc4fba82e5298a97377"}, @assoc={0x18, 0x117, 0x4, 0x200}, @iv={0xf8, 0x117, 0x2, 0xe0, "de32e47af3f0fe8ec5382fdadff7cf68c5e8c8d2020d3c5840be26711257a265f1a7c54833acc4a26e031a63e26aa6a0365929c610789016ff39a8c2bb99ed88d0ab72c90381b399dab5ca05f229926ef100f23b40ea0af99407cce6674cf47b315b187a407ce77b4a616d9c80008543b96b2ddcb5d0ba0ae5cb6157122907a28b1b3429cc68024a23b161a7866a2599b9400d57283f135754dd78bc6b07a7e9708f602aea12c3422904cd87811516585083fb25186bd161e7a636a9ca601fb8dcfdfcd456c41badc4824b7a6383cfede47accb3ab1343d603852a3f0dccd3b2"}], 0x348, 0x4091}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="71b4d5541e09cabcf65ae8aea363255470827197b17a228da59356f642ca2f47b10fffc9fa92efee5230c1e8078548231f0a4dc8b962c9936205e9ea5e91222411e2b3fc3e55b1970311f0233317469c705fa7b5eb5857073f9766639a4b194cdc7cf35b973c071ed7a2a48904826441d32fd42d008831209dea4ecbde0e881c87b2", 0x82}, {&(0x7f0000000a00)="df3dc6bf08f1de4aec8417df0966671dbb065e38bd2f245f05b7b045cacf853c132032c51d252afd7e664d48c96914df6b69c4b90bf7bb16d584c098cecd4af118c8a4acd33376963ce5462915a664fdbe43290ace1bb7e65b1fcbb4bf63b8ceeeee64fa51bfe18170b238444eb966a1852d83e4e18bc43fd099c631345b2b4efced077c34654286fa73762466398fe32687a597c3c7a8d6680d18062ddf06bd6de15d65659051d4c587aebbb5bb6f2223f9e43a5b2adeb727c0ced2a0af1d05d3d77a0b3da8ad6678253c6829a800", 0xcf}, {&(0x7f0000000b00)="d15bffb91f75cbc1b913f7023d8584790f930b7744967ec60c3dda0ab893c616e615a60b6971cc55664f108714ec26f944773f503f73a457bcc94b55c4cdea43203165a9273773b3958f702065a1c67ec2f7254600d0d2cebb31f964a93b0619125b588c172aefb9a63852c3fe1bab51d111ae8728172e50c53d7f4a17ac5fb549a43216ece2c4199b16e4208c2f5f1655521270a7d21a85eb33b609866a309574cf1feb78228ec8da7858a50e441a41998a8bcafb539ffb83d9f477842f1b846f1d938db5c5821f8ce2f5c8203619d05106b67ba3a6d33d63dd22daa48908e7", 0xe0}], 0x3, &(0x7f0000000c00)=[@assoc={0x18, 0x117, 0x4, 0x80}, @iv={0xd8, 0x117, 0x2, 0xbe, "f44d6306b10e0e7d12811f5209d89a69fe706f8ada91b648af39fb96f13e7ec709a8dad72b44ad5c829b20313b858fb3b8a8111fa2ea02ba0fc6c6771b3ca4054b82b56917d68f12efbaf074719cd84077b5ba5b49612aaed195c9689e7c4794197e8247312189dc3f7e1024f536250cbef8cdbd595d89e04ce91eaa372554fbe64224f0b4ffe190998f318dd50c7fc4864dcbefbb607966379f4bd777934919f7e9267451961060d967dbf9a57c4b3d4736bd4e138136cfac89cacbb603"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffff}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x1b0, 0x4844}, {0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="7c652d4422d048e83dd24d4eac4851866403e866ec78ecbf3fd33c4222b020fc2bce61ed914e719bf3ec84c590b4275f1b8b4c2199067784333bd77f9674822cd7acc6294467efc542b54739b089c21420badd144f2fc598f10f9027f7d23291477c26b1fa4fde46eb41fea80038241cf774ab90370761c9d1a21f5f12f65b8542", 0x81}, {&(0x7f0000000e80)="fd293a97c069535deff6809d5d216cea7f92432f0ca0ed0a8e5c1423cd5816043a0957dafbbd48d48cfc6b69c5e2ec04c5f8b474598206a17a45fcc41aad774cb29cbeb31f0c75d8b02f146268df8830cb7ef0aa2caa5e0f229d9d139bbdebc851406463593dece80c46df2dc2148924f5ce95ed90c8407d84b2d2a82cc645d928ec3c0181193a62ad595116268aa94786bb5bd3b23926ec492f2145fde93304ea5c96804cf599be62af9215c44c047bbee254281796935702f4914a39bf155509", 0xc1}, {&(0x7f0000000f80)="d7a70778f9c93781b896a0148d4b18fdd3bfc8c85902929bae8ab84e84da0a574f39bec9238dc4700f0e85cf8cd17b22f448c399c93174a9abab2c54a256aa4bcb8bb1e6268912982947296b7766401127d2590d4e63671d769e9922a5dadca559bb7282d4f7fa916b61719587813b7963d8fcc7e4b1f1a28ed1a0e5d1835112fd3acef0c0257c21191593ba71a351be95afa5040a3e0520e22c66d6fcba3a512392e1fe5bf915315cb5b4d4ee", 0xad}, {&(0x7f0000001040)="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", 0xfa}, {&(0x7f0000001140)="40ea46f1119d705a701de28973baefde46a08eb8bc8ea351306eb13e660421b996b73b992a01ef0f441482825cbf136cfa379e3dc042c1f2522165130cdcced5172b8d8779a32c9beaf01c86702fd86b2980f8247758f48c66d91430faae1f4d5387923dd7f61a0bc8", 0x69}], 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x2f0, 0x4}, {0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)="3964f657c388860fffdb8f2494f4b6078fa2a347cb6a1b500ead0d6e8c6a4bf4128ace82a282ba272a7ed4d02b2ea7a67b001b011d5bdd36c89741e7b19b63e539a2d045fbf708a4f0c42dd539058c1a2777895131bf35ac2be6bdf996d7bdbff0928f63e0cb77502d1923e812085496b61997fc104aea861fe9f71b0de1ebc403f089e8a37cf7a3502ff3aff76031e0f62e9cbf2c", 0x95}, {&(0x7f00000027c0)="cf880bdcc3d5cfb3fb9496518f9ebda01d9953b461adb77022802e5b91c3661f92feb859bef42e41266fcdd8a0cbce9a3d2343f39235b3335f1f67ade104ef537ed0cfe16df1b6b63de9ae8e38f4a6c164ab03e450bef074ac111dd46442d29aced45d8c0fb41bed42627313bc2a3bdf66ae6b4aa3becb180efcb70ae37d19ea3f6b8681d63632217a2d23593f056319483ee66d224fb544d1eaddebc48ad69c0648424e6a2089dccb777509691abbd4d70c129710bb6deec7616ca9acbea35ca1d7822a7135cb9279d7d837f208cef6c3f7731b0aac45791c36a4e4bd89b44b3e6f4e44381650", 0xe7}, {&(0x7f00000028c0)="6456ff45b491e1c7d747a0620f35450da794364efb954d20c6282bc9a96c9ffa150e2034ae09f2448fc795713438d4de8e5cc926e072c4c41c24a3ec3a24e10c00d50e54868d54a598e53f8bdea632bd7fe92f06b975d27e9ca8da44b82f558b099e93993df845ac2ea2f1b6f39576874fdffee0ee83b3348cba40c97fc84f07c76f7ec38feb0e262ebe48e9868931d60835a0e64e9f1ef38b1d8b82db188137fd712392f14004aa705c7677e7b5a1714e02d04bac574fdeabe0109604535d14d53ce5d44842aa73ee806c31b1d0020cf95a26a982464c", 0xd7}, {&(0x7f0000001240)="452e50a652", 0x5}], 0x4, 0x0, 0x0, 0x4004050}, {0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000016c0)="008556a15704eab9466678b1dfca12407a72dfbccc6447d981b1dc7c7d2923af88e2034748d71653a38c3ef3eb597af6002db8e3d1e4294b46cd56e1daf0b03d269e533025ca64416f2740760d8ce8ad2f2cf883f13d7909101ff9daa6774cc1a5c72a50e297", 0x66}, {&(0x7f00000029c0)="6526aa0aa4c62d94090b25af5df24b35647e810c815189f177c06aef290cd9de7ebc80", 0x23}, {&(0x7f0000002a00)="e8ee67f739a1", 0x6}, {&(0x7f0000002a40)="5833e4e321e9c67fedb2772bacf9ffaea8006e818cc261e61e523eb53b38e8e5df7513e56f11d48bdd4e2c2d249f500086f6770c110353c3fc9f010bb0657be93a7fb86e161708fffd35871ef3327520b5856188e9f4b8bb19c310465ea20ac99cad", 0x62}, {&(0x7f0000002e40)="0ebeb2d14d514ab78858765ea9", 0xd}, {&(0x7f0000002b00)="1b8a3e884f3b9a7342e1d67dd03d15b7270c61ab9afcbc8844d950429b6db154893cbac04350f10faa43c0ff612f9b94c3dca56835f94a5da9bc613e4e9c4ca4d264cb48d2e4cc4c5b6e48fff9dc8cb47cdb2ce5457d5daec8a1cf0856d48bbc6e4e936107d65f96ef3e50dc7161bcf72a6aee595db378c5a973006b6a1287735011181e63acf83ecdb869a2045e2f45d0392b8cdba11b1bae485371acba7237", 0xa0}, {&(0x7f0000002bc0)="be78911e5d6a78e8deafbae4530a5f0ac1620b6e0bc641877879b30c2b1c3f767c9342c1a4acef2ffe67e5fac0468f0e03c51ec95ab72cea67fd0ea37c3c45c648e7bb114fc93aaac09cd301a7dd80d5469c9f29c896a07bed2f9e8b21b77e1b28493407ec28d75a46a9565d777fc76a4f1f538ef887171dbb51187fbf2b168ccddc4bcdbe953d3477ec1eb3fec4ff42ffee94f644cd6373f2322fd2d3c5bef3c39072547f7ac860034ca779", 0xac}], 0x7, 0x0, 0x0, 0x4000040}, {0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002d00)="4f1f37ac43e1dc1b654d1571216b1b1241855ceef5b9cdc14bed78248e37b77294d2c3a30f2790e37b6cbb2e7e6957855e935894b858726a8761ea83882673e9c973b519109b4e0459c4881938f314cc88bbccfe1277ebf6fabf8d7ca531ee3dfd31ebb1", 0x64}, {&(0x7f0000002d80)="bbe8f216c72f7e75faffbf11d81a841e4ce1308c42bc3279bf12670b4f77e3ab2f1d5fc408c39e288552da62b07c80f100140e9df6435b69557659a63c295e51beb66861ca42c409502a04f37371519d73bf2f97c72a13c154fa3fff33b5f2bad97508a8b67f19061035f3994f9700203d4f3ce09277904115da29ddd7f0270a0a7348947ab4c1b38b38e77eb20d9285ec8d62e3632868f19c828b8e9c46e4bfee9727dbf29add1ac6565fc97b", 0xad}, {&(0x7f00000038c0)="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", 0x1000}, {&(0x7f0000003040)="01b15437ffed416c5063c0ea584cd6d59df1bee5ef2029cf01ce1ab01378deec588c70", 0x23}], 0x4, 0x0, 0x0, 0x400c1}], 0x6, 0x8080) recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/41, 0x29}], 0x3}}], 0x1, 0x2001, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f00000008c0)="7f", 0xffffffffffffffb6, 0x40, 0x0, 0x0) 27.015931891s ago: executing program 1 (id=3420): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81cfe0ca1b360883fff0380bc5"}}}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00022abd7a00fcdbdf2515000000050814007b200000"], 0x1c}, 0x1, 0x0, 0x0, 0x44000040}, 0x81) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@getrule={0x14, 0x22, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1054}, 0x24004040) 26.914656179s ago: executing program 0 (id=3421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002700000000dbdf251400000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) 26.885910561s ago: executing program 1 (id=3422): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000240)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0xb405}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 26.807139642s ago: executing program 0 (id=3423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f0000000040)=[{0x5, 0x3, 0x4, 0x8}, {0x1000, 0x0, 0x9, 0x5}, {0x21b5, 0x0, 0x7}, {0x8, 0x92, 0xc, 0xb57}, {0x529, 0x3, 0x3, 0x9}, {0x81, 0x40, 0xc1, 0x5}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.800590631s ago: executing program 3 (id=3424): sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0x31}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x3000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r4, 0x80000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 26.662034284s ago: executing program 1 (id=3425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@const={0x3, 0x0, 0x0, 0xa, 0x2}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x3f, 0x6}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000280)=""/48, 0x38, 0x30, 0x0, 0x0, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x277963f4935cfbf9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x8, '\x00', 0x0, r2, 0x3, 0x1, 0x3}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 26.549871199s ago: executing program 1 (id=3426): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000538eea1e000000e90600f020bea200000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x1d145aa8ea516c49}, 0x38) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8}}}]}, 0x40}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x45, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x20, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r4, 0x80105873, &(0x7f00000009c0)) splice(r9, &(0x7f0000000040)=0xfffffffffffffffc, r8, 0x0, 0x800000000ff, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000840)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x12, &(0x7f0000000040)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000000100)='syzkaller\x00', 0x400, 0x45, &(0x7f0000000300)=""/69, 0x40f00, 0x58, '\x00', r6, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x4, 0x81}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[r8, r10, r11], 0x0, 0x10, 0xff}, 0x94) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000004c0)=0x1000, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0xd0, 0x30, 0x9, 0x8000, 0x25dfdbfb, {}, [{0xbc, 0x1, [@m_mpls={0xb8, 0x15, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x32779}]}, {0x7a, 0x6, "0f22a26921dea34f1e1d64b97befee6bc616515621e3c5a342e930a8fbe3d743c8497ba3a644b0f8e0b61ab135ebe9c80468d34cba6b10718e7415f406b4cfec2f837567542b6e7a043d8f430b2b4fd05d37b04ab39dbd86a88525db6ef4283fd3c02b898cce283f46e4b027a7070b6f3c1d77a24adf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xd0}}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) 26.36601972s ago: executing program 0 (id=3427): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="06000000914fc94c0c79aaf5598e4fbcafb2126be3608491297e00c7b4023418", 0x20) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007eac", @ANYRES16=r1, @ANYBLOB="65572abd7000f9dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000200)=""/228, 0xe4}, {0x0}], 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff000000000000000000000000000c0005000000000000000000000000000000014f194e2000109078c20500010000000050fac33fbb9429aee01423990059d33f9117d45d15b3c3c3ca23118a35f0a4ccc0d5a3ef73aa7411aa9a83ebfa5c9bbb37a61f026ea37e77cba2fb446715611009298e44f06fe11dae94d1212c65d1df7e3a32a88c43bf54299413ec81429bda07d28b7c"], 0x4a) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$phonet(0x23, 0x2, 0x1) splice(r6, &(0x7f0000000000)=0x100, r7, &(0x7f0000000080)=0x6, 0xe9, 0x5) 26.273392085s ago: executing program 3 (id=3428): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6tnl0\x00', 0x10}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b80aafe080009d09dc708de2aa0b168906e1695838bb3829531af5ab811fdbd3337cff6ae27598b3dfb9a6045bfdea67d0086c29892b5bb03d5b40052e1ffc05e674cbbfcfb17937751", @ANYRES32, @ANYRES16=r1, @ANYRES32=r0], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91420c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178227f4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f74e38597b0e520000000000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0xfb, 0x7, 0x78, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x7800, 0x48d, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3c, 0x9, 0x1, 0x40, 0x5, 0xffff8000, 0x9b, 0x5, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x7c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}}, 0x20004084) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xe5, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x198, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4fdc295d5e6a8423}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x10000}, 0x20008041) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0xfffffdea, r5, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x0, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc00f}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 26.258129033s ago: executing program 1 (id=3429): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x5, 0x4}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2f) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0x0, 0x0, 0xf0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x70, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x6e21, 0xfffc, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@local, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0xbcfbddc4f0d79c8f}}, 0xe8) 26.085341635s ago: executing program 4 (id=3430): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32, @ANYBLOB="553a92101462229cbe911c32294692ee3d5eebbb77765090f5dcb61794dbfe8640ae4a03c087d9943f5b69670c148768b79c9fb7e6e6312d28127a1d1e704c78a1feb863a46145771ccf39c935fee7001ddbc398ad35bf46a582f1ab10fb5762404d52f6dd50af8a8e18b8605841446cdbd6f3271553f65c1de2df6727bcebd1d13e035b0fdf19b9f95b8e8bd21b20dcee84895d92aed2c0973e315a24a5e4f438e802e9b86bf3bcd95b0c1e27cf4a74264aed388e"], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000002880)) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x4, 0x90, [0x200000000780, 0x0, 0x0, 0x2000000007b0, 0x200000000ae4], 0x0, 0x0, &(0x7f0000000780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x108) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x0, 0x100000000}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) 26.01344219s ago: executing program 2 (id=3431): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000002955b0000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) 25.871405198s ago: executing program 1 (id=3432): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x3, @local, 0x6}}, 0x400, 0xe0b, 0x6, 0x5, 0x3ff}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f00000003c0)={0x3, 0x9, 0xef, &(0x7f00000002c0)=""/239}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000400)={r1, 0x401, 0x20, 0xa}, &(0x7f0000000440)=0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'syz1\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x44091) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r10, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x48000) listen(r3, 0x9352) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000840)={r5, 0xb3}, &(0x7f0000000880)=0x8) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000008c0)) getsockname$packet(r15, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000980)={r13, 0xfc, "fcd598383df394cac9680db48f65506a77e22ae407fa95a13941c31203848c2a5c484e6210f7b4813a79e4baee9bb8d5085c9e04159288e3037a5ce06a0188527fd0fab2f9d0f7d4e19c3a3f9d3ead25c51998c4a06a3e24cb57501562d5ba56bbacb153872aa52b0afe9a4a6aee00375ef9c637371b9b95ea90848e11c12f12f4c83ed9ac08c8f36f7eda95b503db5507cea9298eef783f2066cbcf6efb179f49812a33b2a88ac2908cafcffab476d8240e977f1e47bdd16a0aefcd9dac88293a48856dbaf8f3f2a8470016ee97fe33fe98c48df8e647bd8ea15114e4059efea811998de33a43a8c7f1397ee8602a8bae60783a1c652048f8124757"}, &(0x7f0000000ac0)=0x104) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000c00)={r15, &(0x7f0000000b00)='\x00', 0x800, &(0x7f0000000b40)={@_ha_fsid={[0x0, 0xfffffffd]}, {0x4, 0x8, 0x3, 0x3d9308b0}}, 0x3, &(0x7f0000000b80), &(0x7f0000000bc0)=0x800}) getsockopt$CAN_RAW_LOOPBACK(r16, 0x65, 0x3, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r14, 0x8947, &(0x7f0000000cc0)={'gre0\x00', @ifru_flags=0x8000}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001d00)={0x0, 0x2}) 25.705067471s ago: executing program 2 (id=3433): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = socket(0x10, 0x6, 0x277ab03b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001680)=""/196, 0xc4}], 0x1}, 0x40000061) socket(0x14, 0x2, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280)="6e2e80cf70f09b40739bafdab1d4b1e0b0f143efd7ebd10cc3071b4e5588b020b2acc5f9aaf14921f8280ae12e4cf6cddbed04fc25dfd1ac291ce3e246e1dd042c220fa8c7fe56d50a9b0622b7f55aaeac3b0db60650667ec5f6faeda2a142d3fd1637425d3025b150cc253d3b21912a91e728cb2ab800a20cc5d3187a5f52bcf565d2bb935ca0e4dcd050dd12cdb3d21801ba1ac509afe77bfb984f3dfc929da4e1d3f6d7197856036d6aa22c7c7642", &(0x7f00000000c0)=""/167}, 0x6a) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000300)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 0s ago: executing program 32 (id=3427): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="06000000914fc94c0c79aaf5598e4fbcafb2126be3608491297e00c7b4023418", 0x20) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007eac", @ANYRES16=r1, @ANYBLOB="65572abd7000f9dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000200)=""/228, 0xe4}, {0x0}], 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff000000000000000000000000000c0005000000000000000000000000000000014f194e2000109078c20500010000000050fac33fbb9429aee01423990059d33f9117d45d15b3c3c3ca23118a35f0a4ccc0d5a3ef73aa7411aa9a83ebfa5c9bbb37a61f026ea37e77cba2fb446715611009298e44f06fe11dae94d1212c65d1df7e3a32a88c43bf54299413ec81429bda07d28b7c"], 0x4a) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$phonet(0x23, 0x2, 0x1) splice(r6, &(0x7f0000000000)=0x100, r7, &(0x7f0000000080)=0x6, 0xe9, 0x5) kernel console output (not intermixed with test programs): process `syz.2.1775'. [ 282.434514][T12408] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1776'. [ 282.451165][ T156] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 282.458050][T12406] netlink: 'syz.2.1775': attribute type 15 has an invalid length. [ 282.476094][ T156] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 282.646855][T12415] syzkaller0: entered promiscuous mode [ 282.652789][T12415] syzkaller0: entered allmulticast mode [ 282.818820][T12425] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.916387][ T5839] Bluetooth: hci4: link tx timeout [ 282.921655][ T5839] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 283.239146][T12455] xt_hashlimit: size too large, truncated to 1048576 [ 283.263677][T12462] netlink: 'syz.3.1790': attribute type 12 has an invalid length. [ 283.388197][T12470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.317783][T12529] netlink: 'syz.4.1812': attribute type 1 has an invalid length. [ 284.376594][T12529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.586118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.594756][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.603111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.611447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.623796][T12529] bond4: (slave geneve2): making interface the new active one [ 284.654789][T12551] netlink: 'syz.2.1817': attribute type 4 has an invalid length. [ 284.672058][T12529] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 284.707391][T12554] netlink: 'syz.1.1816': attribute type 1 has an invalid length. [ 284.986555][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 286.144846][T12651] xt_hashlimit: size too large, truncated to 1048576 [ 286.536386][T12672] nbd: must specify at least one socket [ 286.639019][T12674] __nla_validate_parse: 68 callbacks suppressed [ 286.639039][T12674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1839'. [ 286.658216][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1839'. [ 286.694419][T12679] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 286.710851][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'. [ 286.788728][T12684] net_ratelimit: 56 callbacks suppressed [ 286.788745][T12684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.822333][T12684] netlink: 'syz.1.1847': attribute type 1 has an invalid length. [ 287.706773][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.715160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.724060][ T6421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.812711][T12684] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 287.815563][T12687] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 287.855913][ T6414] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.908293][ T6414] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.935990][ T6414] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.945007][ T6414] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.994365][ T6414] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.041422][ T6414] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.063957][ T6414] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.085763][ T6414] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.128793][T12718] netlink: 'syz.4.1850': attribute type 3 has an invalid length. [ 288.404065][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 288.476009][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 288.500563][T12742] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1855'. [ 288.760373][T12752] sctp: [Deprecated]: syz.1.1859 (pid 12752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.760373][T12752] Use struct sctp_sack_info instead [ 288.838497][T12758] xt_hashlimit: size too large, truncated to 1048576 [ 288.860339][T12752] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1859'. [ 289.399770][T12785] tap0: tun_chr_ioctl cmd 1074025672 [ 289.417861][T12785] tap0: ignored: set checksum disabled [ 289.540843][T12798] veth15: entered allmulticast mode [ 289.708972][T12817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.766936][T12817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.796225][T12815] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1876'. [ 290.201668][T12839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.319238][T12842] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 290.364843][T12842] bond1: (slave lo): Enslaving as an active interface with an up link [ 290.398398][T12850] netlink: 'syz.0.1887': attribute type 64 has an invalid length. [ 290.426236][T12842] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 290.463596][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1887'. [ 290.560501][T12853] netlink: 'syz.3.1885': attribute type 1 has an invalid length. [ 290.692438][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1885'. [ 290.720146][T12867] netlink: 'syz.0.1890': attribute type 83 has an invalid length. [ 290.801812][T12862] 8021q: adding VLAN 0 to HW filter on device bond10 [ 290.812083][T12862] bond9: (slave bond10): making interface the new active one [ 290.820806][T12862] bond9: (slave bond10): Enslaving as an active interface with an up link [ 290.877948][T12853] 8021q: adding VLAN 0 to HW filter on device bond9 [ 290.937837][T12882] openvswitch: netlink: Message has -2 unknown bytes. [ 291.170090][T12887] bond8: option miimon: invalid value (18446744073709551585) [ 291.201069][T12899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.209629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.218294][T12887] bond8: option miimon: allowed values 0 - 2147483647 [ 291.241725][T12887] bond8 (unregistering): Released all slaves [ 291.582348][T12924] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.847209][T12932] __nla_validate_parse: 8 callbacks suppressed [ 291.847230][T12932] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1904'. [ 291.893126][T12936] bond8: Unable to set up delay as MII monitoring is disabled [ 291.929462][T12936] bond8 (unregistering): Released all slaves [ 291.943320][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'. [ 292.018524][T12952] macvlan0: entered allmulticast mode [ 292.161988][T12962] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.746585][ T6405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.826954][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.835393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.834960][T12942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.019818][T13039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1920'. [ 295.048130][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 295.060576][T13045] netlink: 'syz.1.1921': attribute type 7 has an invalid length. [ 295.071433][T13045] netlink: 'syz.1.1921': attribute type 8 has an invalid length. [ 295.378173][T13057] netlink: 'syz.0.1927': attribute type 17 has an invalid length. [ 295.378828][T13063] netlink: 'syz.0.1927': attribute type 17 has an invalid length. [ 295.418210][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 295.430377][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1927'. [ 295.432437][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 295.516083][T13063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1927'. [ 295.591388][T13057] erspan0: entered promiscuous mode [ 295.627850][T13057] erspan0: left promiscuous mode [ 295.663091][T13063] erspan0: entered promiscuous mode [ 295.694389][T13063] erspan0: left promiscuous mode [ 295.768880][T13081] bond5 (unregistering): Released all slaves [ 295.790236][T13087] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.1936'. [ 295.932567][T13094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.284161][T13104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.214220][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1944'. [ 297.226437][T13107] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1943'. [ 297.393367][T13118] netlink: 'syz.0.1948': attribute type 1 has an invalid length. [ 297.546847][T13118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1948'. [ 297.568087][T13125] bond8: (slave bridge2): Enslaving as a backup interface with an up link [ 297.584248][T13135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1953'. [ 297.607367][T13135] pim6reg527: entered allmulticast mode [ 297.614272][T13118] 8021q: adding VLAN 0 to HW filter on device bond8 [ 297.622087][ T6408] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 297.756678][ T6408] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 297.782509][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 297.947886][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.999807][T13159] openvswitch: netlink: IP tunnel dst address not specified [ 298.053142][T13162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'. [ 298.253536][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 298.321505][T13170] netlink: 'syz.2.1962': attribute type 1 has an invalid length. [ 298.586192][ T6414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.594655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.888192][T13209] openvswitch: netlink: Multiple metadata blocks provided [ 298.998526][T13211] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1973'. [ 299.065916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.074494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.082863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.091270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.362737][T13233] netlink: 'syz.4.1978': attribute type 7 has an invalid length. [ 299.624970][T13248] sctp: [Deprecated]: syz.4.1981 (pid 13248) Use of int in max_burst socket option. [ 299.624970][T13248] Use struct sctp_assoc_value instead [ 299.743219][T13257] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1985'. [ 299.901215][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'. [ 300.616187][T13300] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.643283][T13306] bond0: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 300.655214][T13306] bond0: (slave ip6tnl2): Error -95 calling set_mac_address [ 300.796894][T13315] netlink: 'syz.2.2004': attribute type 10 has an invalid length. [ 300.855270][T13321] netlink: 'syz.4.2006': attribute type 1 has an invalid length. [ 300.871138][T13313] bridge9: port 1(veth7) entered blocking state [ 300.886755][T13313] bridge9: port 1(veth7) entered disabled state [ 300.903361][T13313] veth7: entered allmulticast mode [ 300.942564][T13313] veth7: entered promiscuous mode [ 300.971185][T13319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.984694][T13322] bridge9: port 2(veth0_to_bond) entered blocking state [ 301.004078][T13322] bridge9: port 2(veth0_to_bond) entered disabled state [ 301.014266][T13322] veth0_to_bond: entered allmulticast mode [ 301.033356][T13322] veth0_to_bond: entered promiscuous mode [ 301.653672][T13367] netlink: 'syz.0.2018': attribute type 10 has an invalid length. [ 302.250002][T13400] __nla_validate_parse: 16 callbacks suppressed [ 302.250018][T13400] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2028'. [ 302.463597][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2032'. [ 302.473739][T13405] syzkaller0: entered promiscuous mode [ 302.480164][T13405] syzkaller0: entered allmulticast mode [ 303.176493][T13441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2042'. [ 303.185576][T13441] netlink: 'syz.2.2042': attribute type 7 has an invalid length. [ 303.199334][T13441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2042'. [ 303.444923][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 303.706739][ T49] net_ratelimit: 2 callbacks suppressed [ 303.706766][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.720844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.731153][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.640807][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2046'. [ 304.656917][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2046'. [ 304.675002][T13484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.683414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.791315][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2048'. [ 304.824500][T13493] netlink: 'syz.2.2050': attribute type 8 has an invalid length. [ 304.845336][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2050'. [ 305.116701][T13507] netlink: 'syz.0.2054': attribute type 75 has an invalid length. [ 305.140097][T13509] netlink: 'syz.0.2054': attribute type 75 has an invalid length. [ 305.199419][T13514] netlink: 'syz.3.2056': attribute type 1 has an invalid length. [ 305.219163][T13514] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 305.357485][T13524] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 305.377063][ T796] IPVS: starting estimator thread 0... [ 305.403682][T13526] syzkaller1: entered promiscuous mode [ 305.410008][T13526] syzkaller1: entered allmulticast mode [ 305.423507][T13526] nftables ruleset with unbound set [ 305.446723][T13530] netlink: 'syz.4.2060': attribute type 8 has an invalid length. [ 305.456131][T13530] sch_fq: defrate 0 ignored. [ 305.467800][T13528] IPVS: using max 27 ests per chain, 64800 per kthread [ 305.762381][T13544] netlink: 'syz.4.2066': attribute type 3 has an invalid length. [ 305.776920][T13544] netlink: 'syz.4.2066': attribute type 3 has an invalid length. [ 305.817275][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 306.105581][T13562] syzkaller0: entered promiscuous mode [ 306.125957][T13562] syzkaller0: entered allmulticast mode [ 306.232383][T13562] netlink: 'syz.1.2072': attribute type 17 has an invalid length. [ 306.338878][T13578] sctp: [Deprecated]: syz.0.2076 (pid 13578) Use of int in max_burst socket option. [ 306.338878][T13578] Use struct sctp_assoc_value instead [ 306.383215][T13578] sctp: [Deprecated]: syz.0.2076 (pid 13578) Use of int in max_burst socket option. [ 306.383215][T13578] Use struct sctp_assoc_value instead [ 306.556955][T13594] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20003 [ 307.252024][ T13] tipc: Subscription rejected, illegal request [ 307.408372][T13650] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 307.499733][T13657] __nla_validate_parse: 10 callbacks suppressed [ 307.499751][T13657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2098'. [ 307.523066][T13659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2098'. [ 307.558127][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2097'. [ 307.570289][T13655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2097'. [ 307.600967][T13664] netlink: 'syz.2.2099': attribute type 1 has an invalid length. [ 307.609450][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'. [ 307.681843][T13666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2100'. [ 307.702582][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'. [ 307.774009][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2102'. [ 307.810263][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2102'. [ 307.863550][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2102'. [ 308.023819][T13680] netlink: 'syz.1.2105': attribute type 11 has an invalid length. [ 308.042054][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.206125][ T30] audit: type=1107 audit(1774382047.380:4): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='°±˜R}zUŸ -Û [ 308.206125][ T30] Ü€tØ?³ªâ}ÈŠüs_¯v–ÓY¥cJ¶¦„S”Iü„9' [ 308.245201][ T30] audit: type=1107 audit(1774382047.380:5): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='°±˜R}zUŸ -Û [ 308.245201][ T30] Ü€tØ?³ªâ}ÈŠüs_¯v–ÓY¥cJ¶¦„S”Iü„9' [ 308.312142][ T30] audit: type=1107 audit(1774382047.380:6): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='°±˜R}zUŸ -Û [ 308.312142][ T30] Ü€tØ?³ªâ}ÈŠüs_¯v–ÓY¥cJ¶¦„S”Iü„9' [ 308.334633][ T30] audit: type=1107 audit(1774382047.380:7): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='°±˜R}zUŸ -Û [ 308.334633][ T30] Ü€tØ?³ªâ}ÈŠüs_¯v–ÓY¥cJ¶¦„S”Iü„9' [ 308.394403][ T30] audit: type=1107 audit(1774382047.410:8): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='°±˜R}zUŸ -Û [ 308.394403][ T30] Ü€tØ?³ªâ}ÈŠüs_¯v–ÓY¥cJ¶¦„S”Iü„9' [ 308.428771][ T30] audit: type=1107 audit(1774382047.410:9): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='°±˜R}zUŸ -Û [ 308.428771][ T30] Ü€tØ?³ªâ}ÈŠüs_¯v–ÓY¥cJ¶¦„S”Iü„9' [ 308.451754][ T30] audit: type=1107 audit(1774382047.410:10): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='°±˜R}zUŸ -Û [ 308.451754][ T30] Ü€tØ?³ªâ}ÈŠüs_¯v–ÓY¥cJ¶¦„S”Iü„9' [ 308.476953][ T30] audit: type=1107 audit(1774382047.410:11): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='°±˜R}zUŸ -Û [ 308.476953][ T30] Ü€tØ?³ªâ}ÈŠüs_¯v–ÓY¥cJ¶¦„S”Iü„9' [ 308.496914][ T30] audit: type=1107 audit(1774382047.410:12): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='°±˜R}zUŸ -Û [ 308.496914][ T30] Ü€tØ?³ªâ}ÈŠüs_¯v–ÓY¥cJ¶¦„S”Iü„9' [ 308.567394][T13701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.583663][ T30] audit: type=1107 audit(1774382047.410:13): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='°±˜R}zUŸ -Û [ 308.583663][ T30] Ü€tØ?³ªâ}ÈŠüs_¯v–ÓY¥cJ¶¦„S”Iü„9' [ 308.829396][ T6421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.040317][T13724] lo: left promiscuous mode [ 309.078213][T13724] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 309.087748][T13724] vlan2: left allmulticast mode [ 309.092628][T13724] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 309.100438][T13724] vlan3: left allmulticast mode [ 309.108060][T13724] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 309.150432][T13728] syzkaller1: entered promiscuous mode [ 309.165814][T13728] syzkaller1: entered allmulticast mode [ 309.208721][T13728] netlink: 'syz.0.2118': attribute type 10 has an invalid length. [ 309.249256][T13728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.269391][T13728] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 309.469660][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.478774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.572070][T13746] veth17: entered allmulticast mode [ 310.233494][T13781] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 310.542630][T13802] netlink: 'syz.4.2144': attribute type 4 has an invalid length. [ 310.563883][T13802] netlink: 'syz.4.2144': attribute type 4 has an invalid length. [ 310.576930][T13796] syz.2.2140 (13796) used greatest stack depth: 17472 bytes left [ 310.635760][T13807] netlink: 'syz.0.2142': attribute type 4 has an invalid length. [ 311.029861][T13841] IPVS: Unknown mcast interface: veth1_vlan [ 311.059376][T13841] netlink: 'syz.3.2153': attribute type 11 has an invalid length. [ 311.342925][T13859] syzkaller1: entered promiscuous mode [ 311.348544][T13859] syzkaller1: entered allmulticast mode [ 311.483526][T13871] netlink: 'syz.2.2165': attribute type 21 has an invalid length. [ 311.745283][T13884] bond11: entered promiscuous mode [ 311.857033][T13884] 8021q: adding VLAN 0 to HW filter on device bond11 [ 312.154105][T13916] netlink: 'syz.0.2176': attribute type 13 has an invalid length. [ 312.222872][T13921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.458802][T13916] macvtap0: entered allmulticast mode [ 312.546640][T13916] macvtap0: refused to change device tx_queue_len [ 313.017924][T13967] __nla_validate_parse: 19 callbacks suppressed [ 313.017943][T13967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2185'. [ 314.500904][T13994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'. [ 314.587453][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.596144][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.605262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.711348][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 314.929454][T14017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.943866][T14017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.997848][T14017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.006037][T14017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.296683][ T5839] block nbd0: Receive control failed (result -32) [ 315.462726][T14038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2204'. [ 315.506196][T14044] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2205'. [ 315.582592][T14038] netlink: 'syz.1.2204': attribute type 1 has an invalid length. [ 315.724737][T14049] wireguard0: entered promiscuous mode [ 315.763483][T14049] wireguard0: entered allmulticast mode [ 315.801705][T14049] team0: Port device wireguard0 added [ 316.077661][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2213'. [ 316.110221][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 316.110241][ T30] audit: type=1107 audit(1774382055.280:69): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 316.322042][T14087] : renamed from hsr0 [ 316.419322][T14081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.484681][T14090] xt_hashlimit: size too large, truncated to 1048576 [ 316.561988][T14093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2221'. [ 317.149992][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.218626][T14132] vlan3: entered promiscuous mode [ 317.223735][T14132] geneve1: entered promiscuous mode [ 317.258798][T14132] vlan3: entered allmulticast mode [ 317.275725][T14132] geneve1: entered allmulticast mode [ 317.600830][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2241'. [ 317.632923][T14156] Cannot find add_set index 46338 as target [ 317.957047][T14173] vlan0: entered allmulticast mode [ 317.988229][T14173] bond0: entered allmulticast mode [ 318.161542][T14187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2249'. [ 318.187813][T14184] ipt_ECN: cannot use operation on non-tcp rule [ 318.620841][T14211] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 318.630635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.691334][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2259'. [ 318.717736][T14218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2259'. [ 318.734350][T14220] netlink: 'syz.1.2260': attribute type 33 has an invalid length. [ 318.855818][T14223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2261'. [ 318.877144][T14220] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 318.900780][T14220] bond12 (unregistering): Released all slaves [ 318.958702][T14235] tipc: Can't bind to reserved service type 3 [ 319.211367][T14241] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2268'. [ 319.246229][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 319.708973][T14278] tipc: Enabling of bearer rejected, failed to enable media [ 319.780781][T14280] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2276'. [ 319.910336][T14283] netlink: 'syz.2.2278': attribute type 21 has an invalid length. [ 319.911007][ T5839] block nbd0: Receive control failed (result -107) [ 319.925037][T14283] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2278'. [ 319.936283][T14287] block nbd0: reconnected socket [ 319.943200][T14287] netlink: 'syz.0.2279': attribute type 1 has an invalid length. [ 320.038960][T14287] bond9: entered promiscuous mode [ 320.078375][T14287] bond9: entered allmulticast mode [ 320.091279][T14287] 8021q: adding VLAN 0 to HW filter on device bond9 [ 320.356754][ T156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.362603][T14313] netlink: 'syz.3.2287': attribute type 83 has an invalid length. [ 320.443525][T14315] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 320.514818][T14322] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 320.525287][T14322] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 320.538738][T14322] bond5: (slave vxcan3): making interface the new active one [ 320.546987][T14322] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 320.561062][T14315] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 320.569073][T14315] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2285'. [ 320.578120][T14315] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2285'. [ 320.873594][T14339] netlink: 'syz.1.2293': attribute type 12 has an invalid length. [ 320.961430][T14343] netlink: 'syz.1.2295': attribute type 1 has an invalid length. [ 321.114127][T14343] 8021q: adding VLAN 0 to HW filter on device bond13 [ 321.128831][T14343] bond12: (slave bond13): making interface the new active one [ 321.137630][T14343] bond12: (slave bond13): Enslaving as an active interface with an up link [ 321.160967][T14348] bond12: (slave gretap2): Enslaving as a backup interface with an up link [ 321.184114][T14353] 8021q: adding VLAN 0 to HW filter on device bond12 [ 321.357988][T14359] tipc: Disabling bearer [ 321.453217][T14361] xfrm1: entered promiscuous mode [ 321.489584][T14361] xfrm1: entered allmulticast mode [ 322.061973][T14406] xt_TCPMSS: Only works on TCP SYN packets [ 322.332643][T14423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.402292][T14422] tipc: Started in network mode [ 322.407407][T14422] tipc: Node identity 5e86966d512f, cluster identity 5 [ 322.414883][T14422] tipc: Enabled bearer , priority 0 [ 322.504385][T14422] syzkaller0: entered promiscuous mode [ 322.510788][T14422] syzkaller0: entered allmulticast mode [ 322.520651][T14422] tipc: Resetting bearer [ 322.587049][ T156] tipc: Resetting bearer [ 322.652228][T14421] tipc: Resetting bearer [ 323.764669][T14421] tipc: Disabling bearer [ 323.784157][T12696] tipc: Node number set to 262772333 [ 323.961476][T14441] x_tables: unsorted entry at hook 1 [ 324.014911][T14447] __nla_validate_parse: 10 callbacks suppressed [ 324.014931][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2323'. [ 324.041546][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2324'. [ 324.067589][T14447] ip6tnl0: Caught tx_queue_len zero misconfig [ 324.197190][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2327'. [ 324.217160][T14457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2327'. [ 324.266462][T14457] openvswitch: netlink: Flow key attr not present in new flow. [ 324.398804][T14470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.407847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.467061][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2331'. [ 324.558560][T14481] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 324.575438][T14482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2333'. [ 324.617394][T14481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2332'. [ 324.666410][T14481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2332'. [ 324.685693][T14487] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2335'. [ 324.759712][T14495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2337'. [ 324.808822][T14495] bond6: entered promiscuous mode [ 324.816799][T14495] 8021q: adding VLAN 0 to HW filter on device bond6 [ 324.947168][T14495] 8021q: adding VLAN 0 to HW filter on device bond6 [ 324.954316][T14495] bond6: (slave sit4): The slave device specified does not support setting the MAC address [ 324.988948][T14495] bond6: (slave sit4): Error -95 calling set_mac_address [ 325.149360][T14518] netlink: 'syz.2.2344': attribute type 10 has an invalid length. [ 325.384202][T14523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.405329][T14523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.434748][T14523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 325.600279][T14523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.622182][T14523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.633014][T14523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 325.894560][T14523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.919449][T14523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.951332][T14523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 326.021359][T14568] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 326.038809][T14568] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 326.049419][T14568] gretap1: entered promiscuous mode [ 326.054738][T14568] gretap1: entered allmulticast mode [ 326.108120][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.139217][T14523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.154884][T14523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.168502][T14523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 326.265088][ T6414] nci: nci_ntf_packet: unknown ntf opcode 0x37 [ 326.280573][T14572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.306492][T14573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.554105][ T6414] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.583632][ T6414] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.614734][ T6414] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 326.669401][ T6414] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.680088][ T6414] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.689988][ T6414] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 326.726645][ T6414] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.735363][ T6414] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.745463][ T6414] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 326.762644][ T6414] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.773847][ T6414] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.782983][ T6414] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 326.808239][T14608] ±ÿ: renamed from team_slave_1 [ 326.844553][T14611] nbd: illegal input index -8454144 [ 327.021699][T14614] openvswitch: netlink: Flow key attr not present in new flow. [ 327.103396][T14624] netlink: 'syz.0.2373': attribute type 2 has an invalid length. [ 327.195750][T14627] syzkaller0: entered promiscuous mode [ 327.201299][T14627] syzkaller0: entered allmulticast mode [ 327.398058][T14644] ¾x9ÿ: renamed from bridge_slave_0 [ 327.429656][T14642] syzkaller0: entered promiscuous mode [ 327.436893][T14642] syzkaller0: entered allmulticast mode [ 327.873063][T14669] pim6reg: entered allmulticast mode [ 327.977273][T14678] netlink: 'syz.3.2391': attribute type 1 has an invalid length. [ 328.019427][T14678] bond13: entered promiscuous mode [ 328.026454][T14678] 8021q: adding VLAN 0 to HW filter on device bond13 [ 328.083985][T14678] bond14: Unable to set up delay as MII monitoring is disabled [ 328.108473][T14678] bond14 (unregistering): Released all slaves [ 328.248383][ T13] bond8: (slave bridge2): link status up again after 0 ms [ 328.262178][ T13] bond8: (slave bridge2): failed to get link speed/duplex [ 328.385741][ T13] bond8: (slave bridge2): failed to get link speed/duplex [ 328.526056][ T13] bond8: (slave bridge2): failed to get link speed/duplex [ 328.647466][ T13] bond8: (slave bridge2): failed to get link speed/duplex [ 328.669388][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.677819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.800300][ T49] bond8: (slave bridge2): failed to get link speed/duplex [ 328.904672][T14722] netlink: 'syz.2.2403': attribute type 1 has an invalid length. [ 328.919757][T14723] netlink: 'syz.3.2401': attribute type 1 has an invalid length. [ 328.972816][T14722] bond6: entered promiscuous mode [ 328.979308][T14722] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.046639][T14723] bond14: entered promiscuous mode [ 329.052209][T14723] 8021q: adding VLAN 0 to HW filter on device bond14 [ 329.068630][T14726] __nla_validate_parse: 14 callbacks suppressed [ 329.068647][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2404'. [ 329.089439][T14731] netlink: 'syz.0.2405': attribute type 13 has an invalid length. [ 329.097831][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 329.112595][T14726] 8021q: VLANs not supported on wg2 [ 329.502972][T14753] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2411'. [ 329.528226][T14756] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2412'. [ 329.538328][T14756] hsr0: entered promiscuous mode [ 329.710694][T14769] netlink: 'syz.2.2417': attribute type 14 has an invalid length. [ 329.720658][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2417'. [ 329.744105][ T6408] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 329.754322][ T6408] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 329.764357][T14769] netlink: 'syz.2.2417': attribute type 14 has an invalid length. [ 329.773195][ T6408] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 329.783412][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2417'. [ 329.793654][ T6408] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 330.091410][T14781] pimreg: entered allmulticast mode [ 330.129115][T14766] infiniband syz0: set down [ 330.133848][T14766] infiniband syz0: added veth1_virt_wifi [ 330.257500][T14766] RDS/IB: syz0: added [ 330.262493][T14791] netlink: 'syz.0.2422': attribute type 4 has an invalid length. [ 330.271796][T14766] smc: adding ib device syz0 with port count 1 [ 330.284440][T14766] smc: ib device syz0 port 1 has no pnetid [ 330.737920][T14821] netlink: 'syz.0.2428': attribute type 2 has an invalid length. [ 330.765761][T14821] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2428'. [ 330.963525][T14827] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 331.136593][ T1108] net_ratelimit: 19 callbacks suppressed [ 331.136616][ T1108] bond8: (slave bridge2): failed to get link speed/duplex [ 331.296456][ T6414] bond8: (slave bridge2): failed to get link speed/duplex [ 331.401099][T14844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.457237][ T1108] bond8: (slave bridge2): failed to get link speed/duplex [ 331.590745][ T6414] bond8: (slave bridge2): failed to get link speed/duplex [ 331.671387][T14851] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.716412][ T156] bond8: (slave bridge2): failed to get link speed/duplex [ 331.828089][ T1108] bond8: (slave bridge2): failed to get link speed/duplex [ 331.876252][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.911274][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2441'. [ 331.937713][T14861] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 331.945340][T14861] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 331.955016][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2441'. [ 331.977673][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'. [ 331.986706][T14861] netlink: 'syz.2.2440': attribute type 5 has an invalid length. [ 332.042781][T14861] geneve3: entered promiscuous mode [ 332.054314][T14861] geneve3: entered allmulticast mode [ 332.071335][ T6414] bond8: (slave bridge2): failed to get link speed/duplex [ 332.216362][ T1108] bond8: (slave bridge2): failed to get link speed/duplex [ 332.332659][T14885] netlink: 'syz.1.2447': attribute type 2 has an invalid length. [ 332.779893][T14904] lo: entered promiscuous mode [ 332.949261][T14912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.356717][T14932] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 333.568392][T14938] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 334.368809][T14945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.801549][T15009] __nla_validate_parse: 3 callbacks suppressed [ 334.801569][T15009] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2484'. [ 335.090545][T15028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2491'. [ 335.108726][T15021] nbd1: detected capacity change from 0 to 63 [ 335.115009][T15028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2491'. [ 335.134358][T15029] block nbd1: NBD_DISCONNECT [ 335.149606][T15029] block nbd1: Disconnected due to user request. [ 335.178027][T15029] block nbd1: shutting down sockets [ 335.195461][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.205223][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 335.214882][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.224422][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 335.231204][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.241722][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 335.249562][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.259096][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 335.274611][ T8733] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.295837][ T8733] Buffer I/O error on dev nbd1, logical block 0, async page read [ 335.314055][ T8733] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.342721][ T8733] Buffer I/O error on dev nbd1, logical block 1, async page read [ 335.371619][ T8733] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.404397][ T8733] Buffer I/O error on dev nbd1, logical block 2, async page read [ 335.412399][ T8733] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.437278][ T8733] Buffer I/O error on dev nbd1, logical block 3, async page read [ 335.470527][ T8733] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.509442][ T8733] Buffer I/O error on dev nbd1, logical block 0, async page read [ 335.561026][ T8733] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.584707][ T8733] Buffer I/O error on dev nbd1, logical block 1, async page read [ 335.611013][ T8733] ldm_validate_partition_table(): Disk read failed. [ 335.633256][ T8733] Dev nbd1: unable to read RDB block 0 [ 335.643949][ T8733] nbd1: unable to read partition table [ 335.655898][ T8733] ldm_validate_partition_table(): Disk read failed. [ 335.663568][ T8733] Dev nbd1: unable to read RDB block 0 [ 335.672229][ T8733] nbd1: unable to read partition table [ 335.796251][T15059] netlink: 'syz.4.2500': attribute type 9 has an invalid length. [ 336.108045][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2504'. [ 336.236324][ T49] net_ratelimit: 38 callbacks suppressed [ 336.236345][ T49] bond8: (slave bridge2): failed to get link speed/duplex [ 336.377782][ T1108] bond8: (slave bridge2): failed to get link speed/duplex [ 336.459405][T15085] tipc: Enabling of bearer rejected, media not registered [ 336.506328][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 336.618888][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 336.786179][ T1108] bond8: (slave bridge2): failed to get link speed/duplex [ 336.887327][T15108] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.2516'. [ 336.906682][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 336.964128][T15111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2517'. [ 336.987536][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.080991][T15114] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2519'. [ 337.115901][ T156] bond8: (slave bridge2): failed to get link speed/duplex [ 337.134629][T15118] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.153259][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2520'. [ 337.173059][T15114] bridge12: entered promiscuous mode [ 337.179323][T15114] bridge12: entered allmulticast mode [ 337.187661][T15122] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 337.222759][T15124] syzkaller1: entered promiscuous mode [ 337.239807][T15124] syzkaller1: entered allmulticast mode [ 337.276120][ T156] bond8: (slave bridge2): failed to get link speed/duplex [ 337.439683][T15140] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 337.561012][T15144] netlink: 'syz.4.2525': attribute type 1 has an invalid length. [ 337.602106][T15140] 8021q: adding VLAN 0 to HW filter on device bond11 [ 337.666566][T15142] bond11: (slave veth19): Enslaving as an active interface with a down link [ 337.715236][T15144] bond7: entered promiscuous mode [ 337.739567][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'. [ 337.757066][T15144] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.822590][T15144] syzkaller0: entered promiscuous mode [ 337.838886][T15144] syzkaller0: entered allmulticast mode [ 337.875137][T15149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2526'. [ 337.931549][T15144] syzkaller0: left promiscuous mode [ 337.937284][T15144] syzkaller0: left allmulticast mode [ 337.986419][T15145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 338.023104][T15145] bond7: (slave vti1): The slave device specified does not support setting the MAC address [ 338.035112][T15145] bond7: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 338.064846][T15145] bond7: (slave vti1): making interface the new active one [ 338.080815][T15145] vti1: entered promiscuous mode [ 338.098552][T15145] bond7: (slave vti1): Enslaving as an active interface with an up link [ 338.112984][T15153] syzkaller1: entered promiscuous mode [ 338.121305][T15153] syzkaller1: entered allmulticast mode [ 338.964601][T15223] block nbd3: not configured, cannot reconfigure [ 339.154714][T15228] bond8: (slave vlan0): Enslaving as a backup interface with an up link [ 339.222161][T15233] 8021q: adding VLAN 0 to HW filter on device bond15 [ 339.232402][T15238] netlink: 'syz.1.2555': attribute type 20 has an invalid length. [ 339.298708][T15238] netlink: 'syz.1.2555': attribute type 20 has an invalid length. [ 339.537466][T15252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.625023][T15252] delete_channel: no stack [ 339.732762][T15270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.769562][T15270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.864317][T15275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.137605][T15293] xt_hashlimit: max too large, truncated to 1048576 [ 340.273875][ T30] audit: type=1107 audit(1774382079.450:70): pid=15298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='†)^©ý!ÜâÂ?ï²mmZ¯FQ,*çãyQóæBIÝ’Šå†ÅJe¯–¿Îœ' [ 340.435362][T15313] __nla_validate_parse: 12 callbacks suppressed [ 340.435383][T15313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2576'. [ 340.502219][T15313] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2576'. [ 340.813473][T15327] netlink: 'syz.3.2580': attribute type 13 has an invalid length. [ 340.847207][T15327] lo: left promiscuous mode [ 340.959512][T15327] 8021q: adding VLAN 0 to HW filter on device .` [ 341.241377][T15353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2586'. [ 341.266572][T15338] syzkaller0: entered promiscuous mode [ 341.272635][T15338] syzkaller0: entered allmulticast mode [ 341.306093][ T6414] net_ratelimit: 33 callbacks suppressed [ 341.306112][ T6414] bond8: (slave bridge2): failed to get link speed/duplex [ 342.040987][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.720365][T15357] netlink: 'syz.1.2587': attribute type 12 has an invalid length. [ 342.728843][T15357] netlink: 'syz.1.2587': attribute type 29 has an invalid length. [ 342.736932][T15357] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2587'. [ 342.748142][T15357] netlink: 'syz.1.2587': attribute type 2 has an invalid length. [ 342.756124][T15357] netlink: 'syz.1.2587': attribute type 3 has an invalid length. [ 342.764046][T15357] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2587'. [ 342.807585][ T13] bond8: (slave bridge2): failed to get link speed/duplex [ 342.953458][ T13] bond8: (slave bridge2): failed to get link speed/duplex [ 342.993536][T15381] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .. hñù˱•A¤™A\m\ã¯ÅêÚ?3Á9$Ü [ 343.004810][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2593'. [ 343.147879][T15388] tipc: Failed to remove unknown binding: 66,1,1/404753734:2632149044/2632149046 [ 343.170466][T15387] tipc: Failed to remove unknown binding: 66,1,1/404753734:2632149044/2632149046 [ 343.175807][ T1108] bond8: (slave bridge2): failed to get link speed/duplex [ 343.325832][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 343.491388][T15405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.686603][ T1108] bond8: (slave bridge2): failed to get link speed/duplex [ 343.926081][ T156] bond8: (slave bridge2): failed to get link speed/duplex [ 343.953243][T15429] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2606'. [ 344.047343][ T156] bond8: (slave bridge2): failed to get link speed/duplex [ 346.284345][T15394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.376944][ T6408] net_ratelimit: 22 callbacks suppressed [ 346.376964][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 346.537833][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 346.667137][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 346.717937][T15465] x_tables: duplicate underflow at hook 2 [ 346.758508][T15471] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 346.786608][ T49] bond8: (slave bridge2): failed to get link speed/duplex [ 346.862649][T15478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.916343][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 347.046426][ T156] bond8: (slave bridge2): failed to get link speed/duplex [ 347.080865][T15481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2622'. [ 347.158929][ T156] bond8: (slave bridge2): failed to get link speed/duplex [ 347.227779][ T156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.248297][T15500] netlink: 'syz.1.2625': attribute type 10 has an invalid length. [ 347.298721][T15503] sctp: [Deprecated]: syz.4.2629 (pid 15503) Use of int in max_burst socket option deprecated. [ 347.298721][T15503] Use struct sctp_assoc_value instead [ 347.316521][T15500] bridge_slave_1: left allmulticast mode [ 347.329706][T15500] bridge_slave_1: left promiscuous mode [ 347.335923][T15500] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.376767][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 347.423968][T15510] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2629'. [ 347.448951][T15512] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2630'. [ 347.494150][T15512] netem: incorrect gi model size [ 347.515691][T15512] netem: change failed [ 347.754840][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2632'. [ 348.402159][T15556] erspan0: entered allmulticast mode [ 348.499537][T15546] "syz.0.2638" (15546) uses obsolete ecb(arc4) skcipher [ 348.643235][T15565] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2643'. [ 349.711096][T15625] IPVS: Unknown mcast interface: veth1_vlan [ 349.859663][T15623] syzkaller0: entered promiscuous mode [ 349.865200][T15623] syzkaller0: entered allmulticast mode [ 349.903487][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2660'. [ 349.947532][T15623] bond16: Unable to set down delay as MII monitoring is disabled [ 349.959688][T15623] bond16 (unregistering): Released all slaves [ 350.122984][T15628] macvtap0: entered promiscuous mode [ 350.128702][T15628] vlan0: entered promiscuous mode [ 350.134589][T15628] macvtap0: entered allmulticast mode [ 350.140695][T15628] vlan0: entered allmulticast mode [ 350.146999][T15628] veth0_vlan: entered allmulticast mode [ 350.615422][T15640] netlink: 'syz.1.2662': attribute type 3 has an invalid length. [ 350.625123][T15640] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2662'. [ 350.838828][T15654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2664'. [ 351.103128][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2663'. [ 351.222967][T15672] netlink: 'syz.4.2669': attribute type 27 has an invalid length. [ 351.274901][T15675] netlink: 'syz.2.2670': attribute type 7 has an invalid length. [ 351.287677][T15675] netlink: 'syz.2.2670': attribute type 8 has an invalid length. [ 351.410432][T15678] xt_hashlimit: size too large, truncated to 1048576 [ 351.520271][ T156] net_ratelimit: 28 callbacks suppressed [ 351.520291][ T156] bond8: (slave bridge2): failed to get link speed/duplex [ 351.546791][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 351.560798][T15692] netlink: 'syz.2.2672': attribute type 10 has an invalid length. [ 351.706265][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 351.797982][T15699] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.2676'. [ 351.808436][T15699] netlink: Unknown conntrack attr (type=2304, max=9) [ 351.836359][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 351.947963][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 352.029752][T15707] netlink: 'syz.3.2681': attribute type 1 has an invalid length. [ 352.096389][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 352.216397][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 352.267531][ T6421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.293646][T15731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.304779][T15731] __nla_validate_parse: 1 callbacks suppressed [ 352.304796][T15731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2687'. [ 352.342752][T15731] openvswitch: netlink: Flow key attr not present in new flow. [ 352.360512][T15727] 8021q: adding VLAN 0 to HW filter on device bond14 [ 352.687914][T15752] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2695'. [ 352.709126][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'. [ 352.728370][T15752] bond0 (unregistering): Released all slaves [ 353.580666][T15807] Bluetooth: MGMT ver 1.23 [ 353.710550][T15813] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 353.718830][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2713'. [ 354.048961][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'. [ 354.265361][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2722'. [ 354.280398][T15849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2722'. [ 354.303118][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2722'. [ 354.312565][T15849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2722'. [ 354.516515][T15868] netlink: 'syz.2.2728': attribute type 12 has an invalid length. [ 354.529727][T15868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2728'. [ 354.596299][T15874] netlink: 'syz.2.2729': attribute type 21 has an invalid length. [ 354.790425][T15881] macvtap1: entered promiscuous mode [ 354.796652][T15881] vlan0: entered promiscuous mode [ 354.801747][T15881] bridge0: entered promiscuous mode [ 354.807523][T15881] macvtap1: entered allmulticast mode [ 354.812964][T15881] vlan0: entered allmulticast mode [ 354.818181][T15881] bridge0: entered allmulticast mode [ 354.864880][T15880] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 354.872460][T15880] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 354.905301][T15886] pim6reg1: entered promiscuous mode [ 354.914747][T15886] pim6reg1: entered allmulticast mode [ 355.082431][T15846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.392240][T15918] bridge0: port 1(syz_tun) entered blocking state [ 355.403498][T15918] bridge0: port 1(syz_tun) entered disabled state [ 355.411346][T15918] syz_tun: entered allmulticast mode [ 355.423434][T15918] syz_tun: entered promiscuous mode [ 355.628763][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 355.637756][ T5839] Bluetooth: hci2: command 0x0401 tx timeout [ 356.236079][T15982] netlink: 'syz.1.2759': attribute type 1 has an invalid length. [ 356.295498][T15982] bond16: entered promiscuous mode [ 356.300825][T15982] bond16: entered allmulticast mode [ 356.307907][T15982] 8021q: adding VLAN 0 to HW filter on device bond16 [ 356.344553][T15982] macvlan6: entered promiscuous mode [ 356.355270][T15982] macvlan6: entered allmulticast mode [ 356.363338][T15982] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 356.451360][ T5839] block nbd1: Receive control failed (result -32) [ 356.556595][ T6408] net_ratelimit: 38 callbacks suppressed [ 356.556627][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 356.696164][ T6414] bond8: (slave bridge2): failed to get link speed/duplex [ 356.787683][T16011] netlink: 'syz.1.2769': attribute type 50 has an invalid length. [ 356.827586][ T49] bond8: (slave bridge2): failed to get link speed/duplex [ 356.839089][T16015] lo: Caught tx_queue_len zero misconfig [ 356.936162][ T49] bond8: (slave bridge2): failed to get link speed/duplex [ 357.043829][T16025] ip6gre1: entered allmulticast mode [ 357.095120][T16025] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 357.171501][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.199057][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.276033][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.284987][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.366098][ T49] bond8: (slave bridge2): failed to get link speed/duplex [ 357.497950][ T49] bond8: (slave bridge2): failed to get link speed/duplex [ 357.627874][ T13] bond8: (slave bridge2): failed to get link speed/duplex [ 357.735827][ T13] bond8: (slave bridge2): failed to get link speed/duplex [ 357.837260][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.846301][ T49] bond8: (slave bridge2): failed to get link speed/duplex [ 357.855473][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.863682][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.872213][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.880189][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.955770][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 358.006843][T16061] netlink: 'syz.1.2780': attribute type 1 has an invalid length. [ 358.119058][T16061] 8021q: adding VLAN 0 to HW filter on device bond17 [ 358.234449][T16061] macvlan6: entered promiscuous mode [ 358.240697][T16061] macvlan6: entered allmulticast mode [ 358.262034][T16061] bond17: entered promiscuous mode [ 358.269485][T16061] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 358.382961][T16061] bond17: left promiscuous mode [ 358.556970][T16081] __nla_validate_parse: 75 callbacks suppressed [ 358.556992][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2784'. [ 358.624338][T16081] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2784'. [ 358.682643][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2784'. [ 358.935167][T16055] chnl_net:caif_netlink_parms(): no params data found [ 359.010469][T16114] netlink: 'syz.4.2790': attribute type 1 has an invalid length. [ 359.018746][T16114] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2790'. [ 359.393480][T16055] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.401244][T16055] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.408682][T16055] bridge_slave_0: entered allmulticast mode [ 359.416740][T16055] bridge_slave_0: entered promiscuous mode [ 359.426992][T16055] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.434255][T16055] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.441612][T16055] bridge_slave_1: entered allmulticast mode [ 359.449844][T16055] bridge_slave_1: entered promiscuous mode [ 359.497244][T16055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.510918][T16055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.593804][T16055] team0: Port device team_slave_0 added [ 359.612852][T16055] team0: Port device team_slave_1 added [ 359.668781][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2796'. [ 359.784333][T16055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.812602][T16055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.899100][T16055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.913448][T16055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.920786][T16055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.950176][ T5835] Bluetooth: hci5: command tx timeout [ 359.957554][T16055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.025452][T16055] hsr_slave_0: entered promiscuous mode [ 360.032647][T16055] hsr_slave_1: entered promiscuous mode [ 360.253799][T16170] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2803'. [ 360.276894][T16170] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2803'. [ 360.286329][T16170] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2803'. [ 360.434396][T16177] netlink: 'syz.0.2804': attribute type 1 has an invalid length. [ 360.602855][T16177] bond12: entered promiscuous mode [ 360.632159][T16177] 8021q: adding VLAN 0 to HW filter on device bond12 [ 360.710398][T16182] bond12: (slave bridge3): making interface the new active one [ 360.720667][T16182] bridge3: entered promiscuous mode [ 360.738461][T16182] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 360.929150][T16055] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.940423][T16055] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.966939][T16198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2808'. [ 361.112893][T16055] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.132269][T16055] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.152389][ T30] audit: type=1107 audit(1774382100.330:71): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 361.180066][T16208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2811'. [ 361.369444][T16055] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.385488][T16055] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.497886][T16055] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.527516][T16055] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.596115][ T6421] net_ratelimit: 8 callbacks suppressed [ 361.596133][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 361.816424][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 361.925532][T16055] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 361.944054][T16055] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 361.977751][T16055] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 362.002475][T16055] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 362.026505][ T5835] Bluetooth: hci5: command tx timeout [ 362.056100][ T6414] bond8: (slave bridge2): failed to get link speed/duplex [ 362.139202][T16254] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 362.157211][T16254] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 362.196738][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 362.346910][ T6414] bond8: (slave bridge2): failed to get link speed/duplex [ 362.404431][T16055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.427888][T16055] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.444929][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.452160][ T6421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.492745][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.499944][ T6414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.546866][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 362.667598][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 362.797983][ T6414] bond8: (slave bridge2): failed to get link speed/duplex [ 362.842390][T16055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.910675][T16055] veth0_vlan: entered promiscuous mode [ 362.925416][T16055] veth1_vlan: entered promiscuous mode [ 362.946255][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 362.978559][T16055] veth0_macvtap: entered promiscuous mode [ 362.989891][T16055] veth1_macvtap: entered promiscuous mode [ 363.012280][T16055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.032756][T16055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.052320][ T6421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.068490][ T6421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.079958][ T6421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.089817][ T6421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.135931][ T6414] bond8: (slave bridge2): failed to get link speed/duplex [ 364.106317][ T5835] Bluetooth: hci5: command tx timeout [ 365.262522][T16266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.417383][ T6414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.436169][ T6414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.487848][T16313] netlink: 'syz.1.2846': attribute type 16 has an invalid length. [ 365.506891][T16313] netlink: 'syz.1.2846': attribute type 17 has an invalid length. [ 365.527731][T16318] netlink: 'syz.2.2847': attribute type 10 has an invalid length. [ 365.580469][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.605788][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.618642][T16318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.632519][T16318] : (slave batadv0): Enslaving as an active interface with an up link [ 365.892572][T16330] __nla_validate_parse: 6 callbacks suppressed [ 365.892593][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2849'. [ 365.986154][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2849'. [ 365.995357][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2849'. [ 366.057326][T16343] netlink: 'syz.2.2849': attribute type 4 has an invalid length. [ 366.065289][T16343] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2849'. [ 366.099773][T16330] bond1: option mode: unable to set because the bond device has slaves [ 366.147893][T16330] ip6t_srh: unknown srh invflags 4000 [ 366.188797][ T5839] Bluetooth: hci5: command tx timeout [ 366.197608][T16343] .`: renamed from  (while UP) [ 366.203100][T16346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2853'. [ 366.278950][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'. [ 366.324836][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.325200][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'. [ 366.344913][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.367243][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.392884][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.404542][T16361] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 366.464230][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2858'. [ 366.650552][T16384] netlink: 'syz.4.2862': attribute type 21 has an invalid length. [ 366.662345][ T6421] net_ratelimit: 28 callbacks suppressed [ 366.662366][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 366.695771][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2862'. [ 366.806440][ T49] bond8: (slave bridge2): failed to get link speed/duplex [ 366.852661][T16393] xt_hashlimit: size too large, truncated to 1048576 [ 366.915934][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 367.006194][T16403] netlink: 'syz.3.2866': attribute type 4 has an invalid length. [ 367.026033][ T49] bond8: (slave bridge2): failed to get link speed/duplex [ 367.032666][T16403] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2866'. [ 367.076232][ T6421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.084589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.104157][T16352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.146188][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 367.296265][ T49] bond8: (slave bridge2): failed to get link speed/duplex [ 367.354510][T16422] netlink: 'syz.0.2869': attribute type 1 has an invalid length. [ 367.416814][ T6408] bond8: (slave bridge2): failed to get link speed/duplex [ 367.527739][ T6421] bond8: (slave bridge2): failed to get link speed/duplex [ 367.703844][T16444] FAULT_INJECTION: forcing a failure. [ 367.703844][T16444] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 367.731912][T16444] CPU: 0 UID: 0 PID: 16444 Comm: syz.3.2878 Not tainted syzkaller #0 PREEMPT(full) [ 367.731941][T16444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.731962][T16444] Call Trace: [ 367.731972][T16444] [ 367.731982][T16444] dump_stack_lvl+0xe8/0x150 [ 367.732111][T16444] should_fail_ex+0x412/0x560 [ 367.732235][T16444] _copy_from_user+0x2d/0xb0 [ 367.732290][T16444] ___sys_sendmsg+0x1c6/0x360 [ 367.732396][T16444] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.732427][T16444] ? kstrtouint+0x6e/0xe0 [ 367.732515][T16444] ? __fget_files+0x2a/0x420 [ 367.732576][T16444] ? __fget_files+0x3a0/0x420 [ 367.732618][T16444] __sys_sendmmsg+0x27c/0x4e0 [ 367.732649][T16444] ? __pfx___sys_sendmmsg+0x10/0x10 [ 367.732672][T16444] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 367.732796][T16444] ? rcu_is_watching+0x15/0xb0 [ 367.732856][T16444] __x64_sys_sendmmsg+0xa0/0xc0 [ 367.732884][T16444] do_syscall_64+0x14d/0xf80 [ 367.732931][T16444] ? trace_irq_disable+0x3b/0x150 [ 367.732978][T16444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.733020][T16444] ? clear_bhb_loop+0x40/0x90 [ 367.733046][T16444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.733071][T16444] RIP: 0033:0x7fd92859c799 [ 367.733091][T16444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.733110][T16444] RSP: 002b:00007fd929401028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 367.733144][T16444] RAX: ffffffffffffffda RBX: 00007fd928815fa0 RCX: 00007fd92859c799 [ 367.733168][T16444] RDX: 0000000000000043 RSI: 0000200000000200 RDI: 0000000000000003 [ 367.733182][T16444] RBP: 00007fd929401090 R08: 0000000000000000 R09: 0000000000000000 [ 367.733195][T16444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.733212][T16444] R13: 00007fd928816038 R14: 00007fd928815fa0 R15: 00007fffd39f4cd8 [ 367.733247][T16444] [ 368.189798][ T5839] Bluetooth: hci2: command 0x0401 tx timeout [ 368.196780][ T5835] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 368.372844][T16477] ip6_vti0: entered promiscuous mode [ 369.808134][ T6414] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.817785][ T6414] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 369.826980][ T6414] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.840156][ T6414] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 371.180234][ T6414] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.189400][ T6414] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 371.199037][ T6414] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.207984][ T6414] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 371.244207][T16580] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 371.404624][T16604] __nla_validate_parse: 17 callbacks suppressed [ 371.404646][T16604] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.2920'. [ 371.698008][T16617] block nbd0: reconnected socket [ 371.834679][ T5835] block nbd0: Receive control failed (result -32) [ 371.848051][T16630] netlink: 'syz.1.2927': attribute type 3 has an invalid length. [ 371.939073][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2928'. [ 371.940807][T16637] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2930'. [ 371.973220][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2930'. [ 372.168732][T16650] netlink: 'syz.1.2933': attribute type 11 has an invalid length. [ 372.264199][T16656] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2935'. [ 372.826558][ T12] net_ratelimit: 14 callbacks suppressed [ 372.826578][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.840751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.975469][T16693] bond10: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 372.991892][T16693] bond10 (unregistering): Released all slaves [ 373.044017][T16707] sctp: [Deprecated]: syz.0.2943 (pid 16707) Use of int in maxseg socket option. [ 373.044017][T16707] Use struct sctp_assoc_value instead [ 373.065447][T16705] netlink: 'syz.2.2942': attribute type 3 has an invalid length. [ 373.076883][T16705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2942'. [ 373.145986][T16705] ip6gre2: entered allmulticast mode [ 373.435394][T16733] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2948'. [ 373.744777][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2955'. [ 373.891687][T16757] bond18: entered promiscuous mode [ 373.918712][T16757] bond18: entered allmulticast mode [ 373.942788][T16757] 8021q: adding VLAN 0 to HW filter on device bond18 [ 374.066813][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.077664][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.085484][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.096533][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.104352][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.112499][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.257644][T16776] netlink: 'syz.1.2959': attribute type 10 has an invalid length. [ 374.724278][T16796] syzkaller1: entered promiscuous mode [ 374.727858][T16800] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2969'. [ 374.730278][T16796] syzkaller1: entered allmulticast mode [ 374.791643][T16796] openvswitch: netlink: IPv4 tun info is not correct [ 374.893598][T16811] xfrm1: entered allmulticast mode [ 374.970028][T16815] xt_hashlimit: overflow, try lower: 3/0 [ 375.062906][T16825] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2973'. [ 375.279430][T16771] chnl_net:caif_netlink_parms(): no params data found [ 375.502209][T16848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.563092][T16852] sctp: [Deprecated]: syz.1.2979 (pid 16852) Use of int in max_burst socket option. [ 375.563092][T16852] Use struct sctp_assoc_value instead [ 375.675562][T16771] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.683266][T16771] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.690635][T16771] bridge_slave_0: entered allmulticast mode [ 375.707391][T16771] bridge_slave_0: entered promiscuous mode [ 375.716130][T16771] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.723370][T16771] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.731242][T16771] bridge_slave_1: entered allmulticast mode [ 375.739260][T16771] bridge_slave_1: entered promiscuous mode [ 375.824715][T16771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.866712][T16771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.989993][T16771] team0: Port device team_slave_0 added [ 376.019199][T16771] team0: Port device team_slave_1 added [ 376.193118][ T5839] Bluetooth: hci3: command tx timeout [ 376.284561][T16771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.328366][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.394348][T16771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.417129][T16896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.425772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.437624][T16897] __nla_validate_parse: 36 callbacks suppressed [ 376.437641][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 376.438031][T16771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.444273][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 376.461275][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.461308][T16771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.491935][T16888] syzkaller1: entered promiscuous mode [ 376.502044][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 376.514423][T16888] syzkaller1: entered allmulticast mode [ 376.530497][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 376.541609][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 376.551266][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 376.560654][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 376.570486][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 376.582095][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 376.588639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.598060][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 376.628216][T16896] netlink: 'syz.1.2992': attribute type 29 has an invalid length. [ 376.683148][T16896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.693351][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.748479][T16903] netlink: 'syz.4.2993': attribute type 4 has an invalid length. [ 376.910687][T16771] hsr_slave_0: entered promiscuous mode [ 376.943600][T16771] hsr_slave_1: entered promiscuous mode [ 376.984871][T16771] debugfs: 'hsr0' already exists in 'hsr' [ 377.010022][T16771] Cannot create hsr debugfs directory [ 377.193256][T16923] netlink: 'syz.1.2999': attribute type 1 has an invalid length. [ 377.645135][T16958] Cannot find map_set index 65533 as target [ 377.704991][T16963] syzkaller0: entered promiscuous mode [ 377.718370][T16963] syzkaller0: entered allmulticast mode [ 377.901421][T16771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 377.918612][T16771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 377.930537][T16771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 377.952147][T16771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 378.152862][T16771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.183691][T16771] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.202563][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.209755][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.226832][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.234047][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.281104][ T5839] Bluetooth: hci3: command tx timeout [ 378.574927][T16771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.657203][T16771] veth0_vlan: entered promiscuous mode [ 378.672518][T16771] veth1_vlan: entered promiscuous mode [ 378.712339][T16771] veth0_macvtap: entered promiscuous mode [ 378.724310][T16771] veth1_macvtap: entered promiscuous mode [ 378.753230][T16771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.771696][T16771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.789609][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.810008][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.842647][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.854644][T16982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.862239][T16982] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 378.870967][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.909980][T16982] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 378.917336][T16982] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 379.050135][T16982] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 379.083118][T16982] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 379.138721][T16982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.144697][T16982] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 379.301125][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.326693][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.371534][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.380553][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.465253][T17018] xt_l2tp: unknown flags: 10 [ 379.480122][T17018] net_ratelimit: 1 callbacks suppressed [ 379.480140][T17018] openvswitch: netlink: Multiple metadata blocks provided [ 379.493552][T17019] openvswitch: netlink: Multiple metadata blocks provided [ 442.947794][T17089] netlink: 'syz.1.3019': attribute type 10 has an invalid length. [ 442.973224][T17091] __nla_validate_parse: 31 callbacks suppressed [ 442.973242][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3024'. [ 443.010960][T17096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.031438][T17093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3024'. [ 443.053014][T17096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.101726][T17096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.238221][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.248862][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.257312][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.265292][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.273915][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.587885][ T5824] syz_tun (unregistering): left allmulticast mode [ 443.594398][ T5824] syz_tun (unregistering): left promiscuous mode [ 443.616218][ T5824] bridge0: port 1(syz_tun) entered disabled state [ 443.877065][T17132] netlink: 'syz.2.3035': attribute type 1 has an invalid length. [ 443.905751][T17132] netlink: 'syz.2.3035': attribute type 3 has an invalid length. [ 443.931423][T17132] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3035'. [ 444.148291][T17148] macvlan0: entered promiscuous mode [ 444.292415][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3042'. [ 444.425641][T17099] chnl_net:caif_netlink_parms(): no params data found [ 444.539752][T17099] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.547549][T17099] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.554772][T17099] bridge_slave_0: entered allmulticast mode [ 444.563066][T17099] bridge_slave_0: entered promiscuous mode [ 444.572605][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3044'. [ 444.583342][T17099] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.591313][T17099] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.599140][T17099] bridge_slave_1: entered allmulticast mode [ 444.607243][T17099] bridge_slave_1: entered promiscuous mode [ 444.615479][T17175] netlink: 'syz.0.3046': attribute type 21 has an invalid length. [ 444.633913][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3044'. [ 444.662821][T17175] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3046'. [ 444.663048][T17099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.686311][T17099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.716360][T17177] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3048'. [ 444.743647][T17099] team0: Port device team_slave_0 added [ 444.769176][T17099] team0: Port device team_slave_1 added [ 444.841735][T17099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.849280][T17099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.884387][T17099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.932148][T17099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.939738][T17099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.986631][T17099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.051338][T17099] hsr_slave_0: entered promiscuous mode [ 445.059306][T17099] hsr_slave_1: entered promiscuous mode [ 445.085415][T17099] debugfs: 'hsr0' already exists in 'hsr' [ 445.099468][T17099] Cannot create hsr debugfs directory [ 445.126287][T17192] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3054'. [ 445.306152][ T5839] Bluetooth: hci2: command tx timeout [ 445.507326][T17099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.638004][T17099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.702803][T17230] 8021q: adding VLAN 0 to HW filter on device bond10 [ 445.711153][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3067'. [ 445.742093][T17099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.778989][T17233] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 445.804576][T17099] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.230986][T17099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 446.253940][T17099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 446.272401][T17099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 446.361832][T17252] geneve5: entered promiscuous mode [ 446.430076][T17252] geneve5: entered allmulticast mode [ 446.459535][T17099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 446.714679][T17099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.788832][T17099] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.822052][T17285] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 446.830695][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.837896][ T6421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.862307][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.869515][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.896655][T17294] openvswitch: netlink: Multiple metadata blocks provided [ 447.386904][ T5839] Bluetooth: hci2: command tx timeout [ 447.585085][T17099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.263134][T17371] __nla_validate_parse: 9 callbacks suppressed [ 448.263154][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3108'. [ 448.304172][T17374] tipc: Enabled bearer , priority 0 [ 448.339015][T17099] veth0_vlan: entered promiscuous mode [ 448.383630][T17099] veth1_vlan: entered promiscuous mode [ 448.448754][T17099] veth0_macvtap: entered promiscuous mode [ 448.460764][T17099] veth1_macvtap: entered promiscuous mode [ 448.499483][T17099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.526247][T17099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.539619][T17378] openvswitch: netlink: IP tunnel dst address not specified [ 448.567318][T17378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3111'. [ 448.588673][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.597642][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.615857][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.624841][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.105125][T17400] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3120'. [ 449.153939][T17402] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3119'. [ 449.163440][T17398] bridge_slave_0: default FDB implementation only supports local addresses [ 449.331238][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3122'. [ 449.364604][T17409] batadv_slave_0: entered promiscuous mode [ 449.453644][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.465883][ T5839] Bluetooth: hci2: command tx timeout [ 449.499979][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.586226][ T6421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.594137][ T6421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.633513][T17405] batadv_slave_0: left promiscuous mode [ 449.787264][T17432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.840212][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3129'. [ 449.863657][T17434] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 449.932978][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3130'. [ 450.088279][T17433] syzkaller0: entered promiscuous mode [ 450.093936][T17433] syzkaller0: entered allmulticast mode [ 450.570505][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.585364][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 450.596027][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 450.606490][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 450.614985][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 451.000453][T17477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3140'. [ 451.019841][T17480] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.027636][T17480] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.201953][T17490] bridge0: port 3(gretap0) entered blocking state [ 451.221582][T17490] bridge0: port 3(gretap0) entered disabled state [ 451.249221][T17490] gretap0: entered allmulticast mode [ 451.288848][T17490] gretap0: entered promiscuous mode [ 451.321993][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3144'. [ 451.485238][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 451.497701][T17500] IPVS: length: 178 != 24 [ 451.544176][T17499] geneve2: entered promiscuous mode [ 451.550892][T17499] geneve2: entered allmulticast mode [ 451.557317][ T5835] Bluetooth: hci2: command tx timeout [ 451.676433][T17506] openvswitch: netlink: EtherType 53b is less than min 600 [ 451.711742][T17513] netlink: 'syz.1.3151': attribute type 1 has an invalid length. [ 451.744322][T17459] chnl_net:caif_netlink_parms(): no params data found [ 451.873552][T17459] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.881409][T17459] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.889170][T17459] bridge_slave_0: entered allmulticast mode [ 451.897275][T17459] bridge_slave_0: entered promiscuous mode [ 451.906718][T17459] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.913977][T17459] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.921554][T17459] bridge_slave_1: entered allmulticast mode [ 451.929569][T17459] bridge_slave_1: entered promiscuous mode [ 451.972034][T17459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.989303][T17459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.033344][T17459] team0: Port device team_slave_0 added [ 452.042837][T17459] team0: Port device team_slave_1 added [ 452.094883][T17459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.135645][T17459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.205550][T17459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.232504][T17459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.240030][T17459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.303551][T17545] xt_hashlimit: size too large, truncated to 1048576 [ 452.327460][T17459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.582055][T17558] tipc: Enabled bearer , priority 10 [ 452.614874][T17459] hsr_slave_0: entered promiscuous mode [ 452.685661][ T5835] Bluetooth: hci0: command tx timeout [ 452.695655][T17565] delete_channel: no stack [ 452.725324][T17459] hsr_slave_1: entered promiscuous mode [ 452.732119][T17459] debugfs: 'hsr0' already exists in 'hsr' [ 452.739083][T17459] Cannot create hsr debugfs directory [ 452.896738][T17568] x_tables: duplicate underflow at hook 3 [ 453.006014][T17572] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 453.019169][T17572] bond1 (unregistering): Released all slaves [ 453.347847][T17459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 453.363519][T17459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 453.384487][T17459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.416605][T17459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 453.571943][T17459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 453.597586][T17459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 453.619289][T17459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.635457][T17459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 453.657951][T17611] __nla_validate_parse: 5 callbacks suppressed [ 453.657967][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3180'. [ 453.809534][T17625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3183'. [ 453.820519][T17459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 453.831209][T17459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 453.851825][T17459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.872553][T17459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 453.999911][T17459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 454.010682][T17459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 454.022259][T17459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.039117][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3187'. [ 454.064937][T17459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 454.133855][T17639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3187'. [ 454.276042][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'. [ 454.394578][T17459] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 454.464072][T17459] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 454.483265][T17660] sctp: [Deprecated]: syz.4.3193 (pid 17660) Use of int in max_burst socket option. [ 454.483265][T17660] Use struct sctp_assoc_value instead [ 454.531230][T17459] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 454.539380][T17661] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 454.562770][T17459] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 454.599421][T17663] x_tables: duplicate underflow at hook 1 [ 454.701148][T17669] netlink: 6928 bytes leftover after parsing attributes in process `syz.3.3196'. [ 454.731966][T17670] netlink: 'syz.4.3195': attribute type 1 has an invalid length. [ 454.746554][ T5835] Bluetooth: hci0: command tx timeout [ 454.910893][T17680] geneve2: entered promiscuous mode [ 454.928348][T17680] geneve2: entered allmulticast mode [ 455.022515][T17459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.052597][T17459] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.066323][T17680] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3197'. [ 455.082534][ T6405] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.089718][ T6405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.104084][T17691] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 455.112503][T17691] netlink: 'syz.3.3204': attribute type 2 has an invalid length. [ 455.121279][T17691] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 455.167472][T17691] netlink: 'syz.3.3204': attribute type 3 has an invalid length. [ 455.182209][ T6405] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.189416][ T6405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.197712][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3204'. [ 455.350180][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 455.710461][T17726] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 455.766196][T17727] bond0: Caught tx_queue_len zero misconfig [ 455.810059][T17731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3214'. [ 455.917778][T17737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.150299][T17459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.277430][T17459] veth0_vlan: entered promiscuous mode [ 456.291025][T17459] veth1_vlan: entered promiscuous mode [ 456.323153][T17751] sctp: [Deprecated]: syz.3.3222 (pid 17751) Use of int in max_burst socket option deprecated. [ 456.323153][T17751] Use struct sctp_assoc_value instead [ 456.369675][T17459] veth0_macvtap: entered promiscuous mode [ 456.393899][T17753] TC_ACT_REPEAT abuse ? [ 456.401652][T17459] veth1_macvtap: entered promiscuous mode [ 456.692434][T17459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.710325][T17459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.759751][ T6421] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.786589][ T6421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.821375][ T6421] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.830917][ T5835] Bluetooth: hci0: command tx timeout [ 456.860456][ T6421] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.983694][T17779] syzkaller0: entered promiscuous mode [ 457.000273][T17787] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 457.009025][T17787] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 457.024371][T17787] team0: Failed to send options change via netlink (err -105) [ 457.032864][T17787] team0: Port device batadv1 added [ 457.084665][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.104402][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.320307][T17795] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 458.327571][T17793] veth0_to_team: entered allmulticast mode [ 458.489154][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.508463][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.761813][ T30] audit: type=1804 audit(1774382197.940:72): pid=17825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3243" name="/newroot/86/cgroup.controllers" dev="tmpfs" ino=460 res=1 errno=0 [ 458.798754][ T30] audit: type=1800 audit(1774382197.940:73): pid=17825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3243" name="cgroup.controllers" dev="tmpfs" ino=460 res=0 errno=0 [ 458.906911][ T5835] Bluetooth: hci0: command tx timeout [ 459.294661][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 459.306202][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 459.315686][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 459.323943][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 459.331971][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 459.447284][T17830] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.455056][T17830] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.604837][T17830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.620204][T17830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.734366][T17835] 8021q: VLANs not supported on tunl0 [ 459.807630][ T6421] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.847286][ T6421] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.978789][ T6421] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.998926][ T6421] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.037622][ T49] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.054790][ T49] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 460.066595][ T49] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 460.201959][ T49] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.215374][ T49] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 460.227727][ T49] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 460.257112][T17873] __nla_validate_parse: 6 callbacks suppressed [ 460.257127][T17873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3256'. [ 460.294212][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'. [ 460.332813][ T49] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.358750][ T49] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 460.379891][ T49] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 460.405400][T17877] netlink: 'syz.0.3254': attribute type 1 has an invalid length. [ 460.418393][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3254'. [ 460.533110][ T49] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.561080][ T49] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 460.596074][ T49] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 460.789695][ T1108] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.964419][T17902] bridge_slave_0: left allmulticast mode [ 460.983945][T17902] bridge_slave_0: left promiscuous mode [ 460.999737][T17902] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.017944][T17902] bridge_slave_1: left allmulticast mode [ 461.028982][T17902] bridge_slave_1: left promiscuous mode [ 461.038130][T17902] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.054218][T17902] bond0: (slave bond_slave_0): Releasing backup interface [ 461.082896][T17902] bond0: (slave bond_slave_1): Releasing backup interface [ 461.112750][T17902] team0: Port device team_slave_0 removed [ 461.137471][T17902] team0: Port device team_slave_1 removed [ 461.154166][T17902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.164496][T17902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.173455][T17902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.181610][T17902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.194065][T17902] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 461.225079][ T6421] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.369290][T17870] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 461.386427][ T5835] Bluetooth: hci4: command tx timeout [ 461.400180][T17922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.432208][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.476522][ T12] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.542893][ T49] bridge_slave_0: left allmulticast mode [ 461.585275][ T49] bridge_slave_0: left promiscuous mode [ 461.625726][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.120149][T17967] netlink: 'syz.0.3277': attribute type 1 has an invalid length. [ 462.146029][T17967] netlink: 'syz.0.3277': attribute type 2 has an invalid length. [ 462.154951][T17967] netlink: 'syz.0.3277': attribute type 1 has an invalid length. [ 462.172931][T17967] netlink: 'syz.0.3277': attribute type 3 has an invalid length. [ 462.192063][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3277'. [ 462.410771][ T49] bond12 (unregistering): (slave gretap2): Releasing backup interface [ 462.462247][ T49] bond8 (unregistering): (slave geneve4): Releasing active interface [ 462.650864][ T49] bond1 (unregistering): Released all slaves [ 462.667017][ T49] bond0 (unregistering): Released all slaves [ 462.684426][ T49] bond2 (unregistering): Released all slaves [ 462.706607][ T49] bond3 (unregistering): Released all slaves [ 462.726409][ T49] bond4 (unregistering): Released all slaves [ 462.751919][ T49] bond5 (unregistering): Released all slaves [ 462.768714][ T49] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 462.780078][ T49] bond6 (unregistering): (slave bond7): Releasing active interface [ 462.789962][ T49] bond6 (unregistering): Released all slaves [ 462.809168][ T49] bond7 (unregistering): Released all slaves [ 462.824424][ T49] bond8 (unregistering): Released all slaves [ 462.842040][ T49] bond9 (unregistering): Released all slaves [ 462.863516][ T49] bond10 (unregistering): Released all slaves [ 462.879114][ T49] bond11 (unregistering): Released all slaves [ 462.895174][ T49] bond12 (unregistering): (slave bond13): Releasing backup interface [ 462.904846][ T49] bond12 (unregistering): Released all slaves [ 462.927869][ T49] bond13 (unregistering): Released all slaves [ 462.942897][ T49] bond14 (unregistering): Released all slaves [ 462.959768][ T49] bond15 (unregistering): Released all slaves [ 462.982840][ T49] bond16 (unregistering): Released all slaves [ 462.999337][ T49] bond17 (unregistering): Released all slaves [ 463.014236][ T49] bond18 (unregistering): Released all slaves [ 463.031550][T17964] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3279'. [ 463.240999][ T49] tipc: Disabling bearer [ 463.296069][ T49] tipc: Left network mode [ 463.466085][ T5835] Bluetooth: hci4: command tx timeout [ 463.560653][T17995] bridge0: port 4(veth0_to_bridge) entered blocking state [ 463.577997][T17995] bridge0: port 4(veth0_to_bridge) entered disabled state [ 463.616022][T17995] veth0_to_bridge: entered allmulticast mode [ 463.649940][T17995] veth0_to_bridge: entered promiscuous mode [ 463.663142][T18000] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3287'. [ 463.710332][T18005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3289'. [ 463.758323][T17853] chnl_net:caif_netlink_parms(): no params data found [ 464.027865][T18023] netlink: 'syz.4.3295': attribute type 1 has an invalid length. [ 464.051545][T18011] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3292'. [ 464.186086][T18036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3295'. [ 464.238414][T18011] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 464.273409][T18043] sctp: [Deprecated]: syz.0.3297 (pid 18043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.273409][T18043] Use struct sctp_sack_info instead [ 464.338890][T17853] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.356900][T17853] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.381058][T17853] bridge_slave_0: entered allmulticast mode [ 464.399451][T17853] bridge_slave_0: entered promiscuous mode [ 464.470207][T18031] bond1: (slave veth3): Enslaving as an active interface with a down link [ 464.537757][T18036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.559245][T17853] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.575264][T17853] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.597036][T17853] bridge_slave_1: entered allmulticast mode [ 464.612772][T17853] bridge_slave_1: entered promiscuous mode [ 464.808388][T17853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.880864][T17853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.891081][T18071] IPVS: length: 8 != 1152 [ 464.927399][T18068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3303'. [ 465.310689][T18085] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3310'. [ 465.339408][T17853] team0: Port device team_slave_0 added [ 465.361288][T17853] team0: Port device team_slave_1 added [ 465.544556][T18096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3314'. [ 465.546802][ T5835] Bluetooth: hci4: command tx timeout [ 465.554819][T18096] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3314'. [ 465.569559][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'. [ 465.579782][T18097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3314'. [ 465.607748][T18097] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3314'. [ 465.624384][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'. [ 465.694422][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3313'. [ 465.837325][ T49] hsr_slave_0: left promiscuous mode [ 465.844234][ T49] hsr_slave_1: left promiscuous mode [ 465.869371][ T49] vlan0: left allmulticast mode [ 465.874278][ T49] veth0_vlan: left allmulticast mode [ 465.888355][ T49] vlan0: left promiscuous mode [ 465.893667][ T49] veth1_macvtap: left promiscuous mode [ 465.906618][ T49] veth1_vlan: left promiscuous mode [ 466.498122][ T49] team0 (unregistering): Port device team_slave_0 removed [ 466.645715][T17853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.658381][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.705491][T17853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.723179][T17853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.730456][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.757031][T17853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.794947][T18128] Bluetooth: MGMT ver 1.23 [ 466.855783][T18126] openvswitch: netlink: Missing key (keys=40, expected=80) [ 466.935823][T18131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3318'. [ 466.962661][T17853] hsr_slave_0: entered promiscuous mode [ 466.993324][T17853] hsr_slave_1: entered promiscuous mode [ 467.016636][T17853] debugfs: 'hsr0' already exists in 'hsr' [ 467.022421][T17853] Cannot create hsr debugfs directory [ 467.058673][T18135] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 467.076755][T18138] netlink: 'syz.0.3320': attribute type 11 has an invalid length. [ 467.096334][T18138] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3320'. [ 467.179041][T18138] netlink: 'syz.0.3320': attribute type 5 has an invalid length. [ 467.242843][T18143] netlink: 'syz.4.3321': attribute type 11 has an invalid length. [ 467.288812][ T49] IPVS: stop unused estimator thread 0... [ 467.363253][T18148] veth0: entered promiscuous mode [ 467.516320][T18160] openvswitch: netlink: IP tunnel dst address not specified [ 467.625773][ T5835] Bluetooth: hci4: command tx timeout [ 467.781282][T18142] veth0: left promiscuous mode [ 467.821453][T17853] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.202458][T17853] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.353451][T17853] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.538691][T17853] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.906378][ T156] wlan1: Trigger new scan to find an IBSS to join [ 469.088110][T17853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 469.122676][T17853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 469.140650][T18219] netlink: 'syz.4.3335': attribute type 5 has an invalid length. [ 469.167440][T17853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 469.197371][T17853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 469.332299][T18230] delete_channel: no stack [ 469.486980][T17853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.555386][ T796] IPVS: starting estimator thread 0... [ 469.566464][T18239] IPVS: rr: FWM 3 0x00000003 - no destination available [ 469.574663][T17853] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.576334][T18240] IPVS: rr: FWM 3 0x00000003 - no destination available [ 469.620190][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.627399][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.668353][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.675534][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.684111][T18242] IPVS: using max 27 ests per chain, 64800 per kthread [ 469.824937][T18251] netlink: 'syz.3.3340': attribute type 4 has an invalid length. [ 470.322262][T18278] __nla_validate_parse: 7 callbacks suppressed [ 470.322281][T18278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3347'. [ 470.340445][T18278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3347'. [ 470.370524][T17853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.509474][T17853] veth0_vlan: entered promiscuous mode [ 470.542106][T17853] veth1_vlan: entered promiscuous mode [ 470.661992][T17853] veth0_macvtap: entered promiscuous mode [ 470.695512][T17853] veth1_macvtap: entered promiscuous mode [ 470.705050][T18294] netlink: 'syz.2.3350': attribute type 10 has an invalid length. [ 470.729224][T18294] team0: Port device vxcan1 added [ 470.768340][T17853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.792623][T17853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.815980][ T6408] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.860526][ T6408] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.922588][ T6408] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.942148][ T6408] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.074004][T18306] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 471.097347][T18306] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 471.141546][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.161418][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.308437][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.325759][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.333898][T18323] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3359'. [ 471.466254][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.503518][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.529751][T18329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.547116][T18337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3363'. [ 471.560157][T18333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.624679][T18336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.868003][ T6408] wlan1: Trigger new scan to find an IBSS to join [ 471.923769][T18357] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 472.118060][T18367] netlink: 'syz.4.3367': attribute type 12 has an invalid length. [ 472.138750][T18367] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 472.220435][T18375] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3369'. [ 472.314296][T18379] netlink: 'syz.4.3370': attribute type 25 has an invalid length. [ 472.787926][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3376'. [ 472.798609][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3376'. [ 473.434603][T18485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3380'. [ 473.611184][T18494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3382'. [ 473.643641][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3383'. [ 473.947663][T18515] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 474.354735][T18529] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 474.355292][ T5978] IPVS: starting estimator thread 0... [ 474.466820][T18531] IPVS: using max 33 ests per chain, 79200 per kthread [ 474.501684][T18538] syzkaller1: entered promiscuous mode [ 474.524482][T18539] netlink: 'syz.0.3395': attribute type 21 has an invalid length. [ 474.560898][T18538] syzkaller1: entered allmulticast mode [ 474.577168][T18543] netlink: 'syz.3.3396': attribute type 10 has an invalid length. [ 474.651287][T18545] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 474.659521][T18545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.759620][T18543] team0 (unregistering): Port device team_slave_0 removed [ 474.779194][T18543] team0 (unregistering): Port device team_slave_1 removed [ 474.804105][T18548] macvtap1: entered allmulticast mode [ 474.810032][T18548] veth0_macvtap: entered allmulticast mode [ 474.908665][T18453] wlan1: Creating new IBSS network, BSSID ca:6c:e2:b9:f9:b0 [ 475.436062][T18582] __nla_validate_parse: 4 callbacks suppressed [ 475.436085][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 475.454158][T18582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3406'. [ 475.492489][T18582] geneve2: entered promiscuous mode [ 475.528320][T18582] geneve2: entered allmulticast mode [ 475.574691][T18589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3408'. [ 476.363403][T18637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3421'. [ 476.564879][T18643] netlink: 'syz.3.3424': attribute type 8 has an invalid length. [ 476.588974][T18643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3424'. [ 476.656998][T18643] bond0: entered promiscuous mode [ 476.662106][T18643] bond_slave_0: entered promiscuous mode [ 476.676657][T18643] bond_slave_1: entered promiscuous mode [ 476.699609][T18643] gretap0: entered promiscuous mode [ 476.742592][T18643] bond0: left promiscuous mode [ 476.748019][T18643] bond_slave_0: left promiscuous mode [ 476.753785][T18643] bond_slave_1: left promiscuous mode [ 476.816440][T18643] gretap0: left promiscuous mode [ 477.032342][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3428'. [ 477.074214][T18658] netlink: 'syz.1.3429': attribute type 2 has an invalid length. [ 477.083138][T18658] netlink: 'syz.1.3429': attribute type 8 has an invalid length. [ 477.100255][T18658] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3429'. [ 482.566200][ C0] sched: DL replenish lagged too much [ 665.095495][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 665.102544][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16055/1:b..l P17099/1:b..l [ 665.112298][ C1] rcu: (detected by 1, t=10503 jiffies, g=69889, q=1509 ncpus=2) [ 665.120148][ C1] task:syz-executor state:R running task stack:22432 pid:17099 tgid:17099 ppid:17086 task_flags:0x400140 flags:0x00080000 [ 665.134623][ C1] Call Trace: [ 665.137951][ C1] [ 665.140917][ C1] __schedule+0x15dd/0x52d0 [ 665.145477][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 665.150597][ C1] ? __pfx___schedule+0x10/0x10 [ 665.155505][ C1] preempt_schedule_irq+0x4d/0xa0 [ 665.160575][ C1] irqentry_exit+0x599/0x620 [ 665.165278][ C1] ? trace_irq_disable+0x3b/0x150 [ 665.170358][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 665.176463][ C1] RIP: 0010:lock_release+0x2d7/0x3d0 [ 665.181807][ C1] Code: b8 7a 11 00 00 00 00 eb b5 e8 35 d5 0c 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 72 7a 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 1a bb 0f 0a cc 48 8d 3d 62 3d 73 [ 665.201454][ C1] RSP: 0018:ffffc90004cef300 EFLAGS: 00000286 [ 665.207556][ C1] RAX: f7eea34d270d3100 RBX: 0000000000000202 RCX: 0000000000000046 [ 665.215565][ C1] RDX: 0000000000000001 RSI: ffffffff8e16828d RDI: ffffffff8c27c200 [ 665.223668][ C1] RBP: ffff888026b72a00 R08: ffffc90004cef4f0 R09: 0000000000000000 [ 665.231680][ C1] R10: ffffc90004cef4b8 R11: fffff5200099de99 R12: 0000000000000001 [ 665.239683][ C1] R13: 0000000000000001 R14: ffffffff8e75e520 R15: ffff888026b71e80 [ 665.247718][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 665.252918][ C1] unwind_next_frame+0x1aaa/0x23c0 [ 665.258084][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 665.263245][ C1] ? arch_stack_walk+0xe3/0x150 [ 665.268164][ C1] __unwind_start+0x5b8/0x760 [ 665.272912][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 665.279108][ C1] arch_stack_walk+0xe3/0x150 [ 665.283848][ C1] ? stack_trace_save+0xa9/0x100 [ 665.288836][ C1] stack_trace_save+0xa9/0x100 [ 665.293637][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 665.299067][ C1] save_stack+0x122/0x230 [ 665.303464][ C1] ? __pfx_save_stack+0x10/0x10 [ 665.308373][ C1] ? page_ext_put+0x97/0xc0 [ 665.312921][ C1] __reset_page_owner+0x71/0x1f0 [ 665.317902][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 665.323085][ C1] __slab_free+0x263/0x2b0 [ 665.327580][ C1] qlist_free_all+0x97/0x100 [ 665.332217][ C1] ? alloc_empty_file+0x55/0x1d0 [ 665.337230][ C1] kasan_quarantine_reduce+0x148/0x160 [ 665.342820][ C1] __kasan_slab_alloc+0x22/0x80 [ 665.347719][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 665.353216][ C1] ? alloc_empty_file+0x55/0x1d0 [ 665.358205][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 665.363908][ C1] alloc_empty_file+0x55/0x1d0 [ 665.368719][ C1] path_openat+0x10f/0x3860 [ 665.373277][ C1] ? arch_stack_walk+0xfb/0x150 [ 665.378191][ C1] ? do_getname+0x2e/0x250 [ 665.382655][ C1] ? stack_trace_save+0xa9/0x100 [ 665.387629][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 665.393041][ C1] ? do_getname+0x2e/0x250 [ 665.397500][ C1] ? stack_depot_save_flags+0x33/0x810 [ 665.403084][ C1] ? do_getname+0x2e/0x250 [ 665.407542][ C1] ? kasan_save_track+0x4f/0x80 [ 665.412432][ C1] ? kasan_save_track+0x3e/0x80 [ 665.417318][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 665.422385][ C1] ? __pfx_path_openat+0x10/0x10 [ 665.427361][ C1] ? __x64_sys_openat+0x138/0x170 [ 665.432444][ C1] ? do_syscall_64+0x14d/0xf80 [ 665.437246][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.443361][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 665.448354][ C1] do_file_open+0x23e/0x4a0 [ 665.452904][ C1] ? __pfx_do_file_open+0x10/0x10 [ 665.457985][ C1] ? _raw_spin_unlock+0x28/0x50 [ 665.462875][ C1] ? alloc_fd+0x64b/0x6c0 [ 665.467270][ C1] do_sys_openat2+0x113/0x200 [ 665.472014][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 665.477346][ C1] ? exc_page_fault+0x6a/0xc0 [ 665.482076][ C1] ? do_user_addr_fault+0xc6f/0x1340 [ 665.487424][ C1] __x64_sys_openat+0x138/0x170 [ 665.492336][ C1] do_syscall_64+0x14d/0xf80 [ 665.496967][ C1] ? trace_irq_disable+0x3b/0x150 [ 665.502043][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.508147][ C1] ? clear_bhb_loop+0x40/0x90 [ 665.512878][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.518898][ C1] RIP: 0033:0x7fa037f9babc [ 665.523366][ C1] RSP: 002b:00007ffe25dbf2e0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 665.531821][ C1] RAX: ffffffffffffffda RBX: 00007fa038032050 RCX: 00007fa037f9babc [ 665.539839][ C1] RDX: 0000000000090800 RSI: 00007ffe25dc0490 RDI: 00000000ffffff9c [ 665.547844][ C1] RBP: 00007ffe25dc047c R08: 0000000000000000 R09: 0000000000000000 [ 665.555845][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe25dc0490 [ 665.563847][ C1] R13: 00007fa038032050 R14: 00000000000749b0 R15: 00007ffe25dc04d0 [ 665.571905][ C1] [ 665.574970][ C1] task:syz-executor state:R running task stack:22400 pid:16055 tgid:16055 ppid:16041 task_flags:0x400140 flags:0x00080000 [ 665.588508][ C1] Call Trace: [ 665.591817][ C1] [ 665.594781][ C1] __schedule+0x15dd/0x52d0 [ 665.599352][ C1] ? do_sys_openat2+0x113/0x200 [ 665.604260][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 665.610451][ C1] ? __pfx___schedule+0x10/0x10 [ 665.615348][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 665.620338][ C1] preempt_schedule_irq+0x4d/0xa0 [ 665.625384][ C1] irqentry_exit+0x599/0x620 [ 665.629985][ C1] ? trace_irq_disable+0x3b/0x150 [ 665.635023][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 665.641004][ C1] RIP: 0010:__update_page_owner_free_handle+0x215/0x470 [ 665.647950][ C1] Code: 00 74 08 4c 89 ff e8 3a aa f5 ff 48 8b 44 24 30 49 89 07 65 4c 8b 25 12 f6 e1 10 4d 8d bc 24 38 06 00 00 4c 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 0f 85 fa 00 00 00 45 8b 2f 4c 8d 7d 38 4c 89 f8 [ 665.667557][ C1] RSP: 0018:ffffc90003c77288 EFLAGS: 00000a02 [ 665.673644][ C1] RAX: 1ffff1100a9c4867 RBX: dffffc0000000000 RCX: ffffffff823a39a3 [ 665.681619][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88801d637170 [ 665.689597][ C1] RBP: ffff88801d637178 R08: ffff88801d637177 R09: 1ffff11003ac6e2e [ 665.697586][ C1] R10: dffffc0000000000 R11: ffffed1003ac6e2f R12: ffff888054e23d00 [ 665.705579][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888054e24338 [ 665.713558][ C1] ? __update_page_owner_free_handle+0x1b3/0x470 [ 665.719917][ C1] ? __update_page_owner_free_handle+0x1b3/0x470 [ 665.726351][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 665.732616][ C1] __reset_page_owner+0x85/0x1f0 [ 665.737570][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 665.742700][ C1] __slab_free+0x263/0x2b0 [ 665.747136][ C1] qlist_free_all+0x97/0x100 [ 665.751735][ C1] kasan_quarantine_reduce+0x148/0x160 [ 665.757204][ C1] __kasan_kmalloc+0x22/0xb0 [ 665.762002][ C1] __kmalloc_noprof+0x35c/0x760 [ 665.766859][ C1] ? tomoyo_encode+0x28b/0x550 [ 665.771899][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 665.776931][ C1] tomoyo_encode+0x28b/0x550 [ 665.781542][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 665.787194][ C1] tomoyo_check_open_permission+0x229/0x470 [ 665.793100][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 665.799188][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 665.805660][ C1] security_file_open+0xa9/0x240 [ 665.810632][ C1] do_dentry_open+0x384/0x14e0 [ 665.815411][ C1] ? vfs_open+0x31/0x340 [ 665.819663][ C1] vfs_open+0x3b/0x340 [ 665.823741][ C1] ? path_openat+0x2df0/0x3860 [ 665.828509][ C1] path_openat+0x2e08/0x3860 [ 665.833120][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 665.838497][ C1] ? stack_depot_save_flags+0x33/0x810 [ 665.843973][ C1] ? __pfx_path_openat+0x10/0x10 [ 665.848960][ C1] ? __x64_sys_openat+0x138/0x170 [ 665.853992][ C1] ? do_syscall_64+0x14d/0xf80 [ 665.858757][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.864836][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 665.869785][ C1] do_file_open+0x23e/0x4a0 [ 665.874392][ C1] ? __pfx_do_file_open+0x10/0x10 [ 665.879433][ C1] ? _raw_spin_unlock+0x28/0x50 [ 665.884287][ C1] ? alloc_fd+0x64b/0x6c0 [ 665.888632][ C1] do_sys_openat2+0x113/0x200 [ 665.893323][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 665.898530][ C1] ? exc_page_fault+0x6a/0xc0 [ 665.903209][ C1] ? do_user_addr_fault+0xc6f/0x1340 [ 665.908500][ C1] __x64_sys_openat+0x138/0x170 [ 665.913367][ C1] do_syscall_64+0x14d/0xf80 [ 665.917959][ C1] ? trace_irq_disable+0x3b/0x150 [ 665.922991][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.929057][ C1] ? clear_bhb_loop+0x40/0x90 [ 665.933737][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.939629][ C1] RIP: 0033:0x7fd92859babc [ 665.944047][ C1] RSP: 002b:00007fffd39f3ee0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 665.952466][ C1] RAX: ffffffffffffffda RBX: 00007fd928632050 RCX: 00007fd92859babc [ 665.960439][ C1] RDX: 0000000000090800 RSI: 00007fffd39f5090 RDI: 00000000ffffff9c [ 665.968432][ C1] RBP: 00007fffd39f507c R08: 0000000000000000 R09: 0000000000000000 [ 665.976425][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fffd39f5090 [ 665.984396][ C1] R13: 00007fd928632050 R14: 0000000000074c53 R15: 00007fffd39f50d0 [ 665.992383][ C1] [ 665.995451][ C1] rcu: rcu_preempt kthread starved for 2681 jiffies! g69889 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 666.006586][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 666.016585][ C1] rcu: RCU grace-period kthread stack dump: [ 666.022503][ C1] task:rcu_preempt state:R running task stack:27744 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 666.036047][ C1] Call Trace: [ 666.039364][ C1] [ 666.042328][ C1] __schedule+0x15dd/0x52d0 [ 666.046876][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 666.051874][ C1] ? __pfx___schedule+0x10/0x10 [ 666.056775][ C1] ? schedule+0x90/0x360 [ 666.061058][ C1] schedule+0x164/0x360 [ 666.065253][ C1] schedule_timeout+0x158/0x2c0 [ 666.070156][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 666.075575][ C1] ? __pfx_process_timeout+0x10/0x10 [ 666.080945][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 666.086849][ C1] ? prepare_to_swait_event+0x340/0x370 [ 666.092452][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 666.097355][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 666.103556][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 666.108883][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 666.114132][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 666.119981][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 666.124618][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 666.129853][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 666.135701][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 666.140701][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 666.145786][ C1] kthread+0x388/0x470 [ 666.149890][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 666.155125][ C1] ? __pfx_kthread+0x10/0x10 [ 666.159747][ C1] ret_from_fork+0x51e/0xb90 [ 666.164392][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 666.169546][ C1] ? __switch_to+0xc7d/0x1450 [ 666.174291][ C1] ? __pfx_kthread+0x10/0x10 [ 666.178918][ C1] ret_from_fork_asm+0x1a/0x30 [ 666.183746][ C1] [ 666.186785][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 666.193148][ C1] Sending NMI from CPU 1 to CPUs 0: [ 666.198380][ C0] NMI backtrace for cpu 0 [ 666.198396][ C0] CPU: 0 UID: 0 PID: 18441 Comm: kworker/u8:47 Not tainted syzkaller #0 PREEMPT(full) [ 666.198417][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 666.198429][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 666.198580][ C0] RIP: 0010:__lock_acquire+0x491/0x2cf0 [ 666.198607][ C0] Code: 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d 4b 8d 0c bf 41 8b 8c ce 78 0b 00 00 31 c1 ff cb 49 ff cc f7 c1 00 60 00 00 74 cf 17 48 c7 c7 b0 c8 62 8e 4c 89 fe e8 5e c6 49 03 8b 45 20 eb cf [ 666.198623][ C0] RSP: 0018:ffffc90000006ce8 EFLAGS: 00000006 [ 666.198638][ C0] RAX: 00000000000c202d RBX: 0000000000000004 RCX: 00000000000827c7 [ 666.198650][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000000000000000 [ 666.198661][ C0] RBP: ffff888084988c48 R08: ffffffff82249ff4 R09: ffff88801ce97d98 [ 666.198675][ C0] R10: dffffc0000000000 R11: fffffbfff2023477 R12: 0000000000000002 [ 666.198688][ C0] R13: 0000000000000000 R14: ffff888084988000 R15: 0000000000000003 [ 666.198700][ C0] FS: 0000000000000000(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 666.198715][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 666.198727][ C0] CR2: 00007f3637d86068 CR3: 000000002a26e000 CR4: 00000000003526f0 [ 666.198744][ C0] Call Trace: [ 666.198750][ C0] [ 666.198759][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 666.198790][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 666.198818][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 666.198844][ C0] ? unwind_next_frame+0x1aaf/0x23c0 [ 666.198873][ C0] lock_acquire+0xf0/0x2e0 [ 666.198894][ C0] ? __refill_objects_node+0x84/0x5c0 [ 666.198922][ C0] ? rcu_is_watching+0x15/0xb0 [ 666.198949][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 666.198967][ C0] ? __refill_objects_node+0x84/0x5c0 [ 666.198992][ C0] __refill_objects_node+0x84/0x5c0 [ 666.199025][ C0] refill_objects+0x5e/0x3c0 [ 666.199051][ C0] ? __pcs_replace_empty_main+0x263/0x730 [ 666.199081][ C0] __pcs_replace_empty_main+0x2e6/0x730 [ 666.199108][ C0] ? __netif_receive_skb_core+0x98f/0x31a0 [ 666.199198][ C0] kmem_cache_alloc_noprof+0x37d/0x650 [ 666.199216][ C0] ? skb_ext_add+0x1b6/0x8f0 [ 666.199256][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 666.199277][ C0] skb_ext_add+0x1b6/0x8f0 [ 666.199296][ C0] ? net_generic+0x1f4/0x240 [ 666.199375][ C0] br_nf_forward_ip+0xc3/0xa30 [ 666.199439][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 666.199464][ C0] nf_hook_slow+0xc5/0x220 [ 666.199521][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 666.199598][ C0] NF_HOOK+0x23e/0x3f0 [ 666.199621][ C0] ? NF_HOOK+0xa2/0x3f0 [ 666.199642][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 666.199665][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 666.199688][ C0] ? br_flood+0x8e0/0xb80 [ 666.199710][ C0] ? br_handle_vlan+0x61/0x530 [ 666.199752][ C0] __br_forward+0x397/0x540 [ 666.199773][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 666.199798][ C0] br_handle_frame_finish+0x14c2/0x1bb0 [ 666.199823][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 666.199858][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 666.199888][ C0] ? ip6t_do_table+0x1b3/0x1560 [ 666.199929][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 666.199946][ C0] ? nf_hook_slow+0x176/0x220 [ 666.199964][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 666.199989][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 666.200018][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 666.200043][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 666.200069][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 666.200136][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 666.200163][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 666.200193][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 666.200220][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 666.200246][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 666.200273][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 666.200300][ C0] ? br_nf_pre_routing+0x75f/0x14c0 [ 666.200327][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 666.200351][ C0] br_handle_frame+0x1277/0x1510 [ 666.200380][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 666.200407][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 666.200436][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 666.200460][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 666.200489][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 666.200547][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 666.200576][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 666.200597][ C0] ? __bpf_trace_iocost_iocg_state+0x101/0x330 [ 666.200680][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 666.200707][ C0] ? ip6_rcv_finish+0x265/0x280 [ 666.200728][ C0] ? NF_HOOK+0x336/0x3c0 [ 666.200753][ C0] ? lock_acquire+0xf0/0x2e0 [ 666.200778][ C0] ? process_backlog+0x3eb/0x1950 [ 666.200794][ C0] ? process_backlog+0x3eb/0x1950 [ 666.200811][ C0] ? process_backlog+0x3eb/0x1950 [ 666.200827][ C0] process_backlog+0x76d/0x1950 [ 666.200853][ C0] __napi_poll+0xae/0x340 [ 666.200878][ C0] ? skb_defer_free_flush+0x233/0x260 [ 666.200906][ C0] net_rx_action+0x627/0xf70 [ 666.200922][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 666.200946][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 666.200972][ C0] ? try_to_wake_up+0x7fc/0x1390 [ 666.200995][ C0] handle_softirqs+0x22a/0x870 [ 666.201021][ C0] ? do_softirq+0x76/0xd0 [ 666.201046][ C0] ? kernel_fpu_end+0x62/0x80 [ 666.201064][ C0] do_softirq+0x76/0xd0 [ 666.201087][ C0] [ 666.201093][ C0] [ 666.201099][ C0] __local_bh_enable_ip+0xf8/0x130 [ 666.201123][ C0] blake2s_compress+0xf9/0x1eb0 [ 666.201148][ C0] ? __crypto_xor+0x17fa/0x1850 [ 666.201169][ C0] ? chacha_crypt+0xf24/0xf90 [ 666.201192][ C0] ? __pfx_chacha_crypt+0x10/0x10 [ 666.201213][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 666.201234][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 666.201255][ C0] ? __asan_memset+0x22/0x50 [ 666.201274][ C0] ? __asan_memset+0x22/0x50 [ 666.201290][ C0] ? __chacha20poly1305_encrypt+0x334/0x360 [ 666.201316][ C0] ? blake2s_update+0x255/0x450 [ 666.201339][ C0] blake2s_final+0x116/0x270 [ 666.201361][ C0] hmac+0x20c/0x3b0 [ 666.201382][ C0] ? __pfx_hmac+0x10/0x10 [ 666.201399][ C0] ? kernel_fpu_end+0x62/0x80 [ 666.201421][ C0] ? blake2s_compress+0x1e17/0x1eb0 [ 666.201454][ C0] kdf+0x126/0x2b0 [ 666.201472][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 666.201494][ C0] ? __pfx_kdf+0x10/0x10 [ 666.201518][ C0] ? blake2s_update+0x255/0x450 [ 666.201539][ C0] ? __asan_memset+0x22/0x50 [ 666.201557][ C0] wg_noise_handshake_create_initiation+0x473/0x830 [ 666.201589][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 666.201614][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 666.201639][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 666.201672][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 666.201695][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 666.201715][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 666.201734][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 666.201755][ C0] wg_packet_handshake_send_worker+0x18d/0x350 [ 666.201782][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 666.201819][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 666.201842][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 666.201867][ C0] process_scheduled_works+0xb6e/0x18c0 [ 666.201905][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 666.201932][ C0] ? assign_work+0x3d5/0x5e0 [ 666.201956][ C0] worker_thread+0xa53/0xfc0 [ 666.201993][ C0] kthread+0x388/0x470 [ 666.202010][ C0] ? __pfx_worker_thread+0x10/0x10 [ 666.202032][ C0] ? __pfx_kthread+0x10/0x10 [ 666.202050][ C0] ret_from_fork+0x51e/0xb90 [ 666.202075][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 666.202099][ C0] ? __switch_to+0xc7d/0x1450 [ 666.202121][ C0] ? __pfx_kthread+0x10/0x10 [ 666.202139][ C0] ret_from_fork_asm+0x1a/0x30 [ 666.202174][ C0]