last executing test programs: 1m33.763194835s ago: executing program 4 (id=3103): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000001500000000000100000d000000000f00000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x20) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x54, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004004}, 0x41) (async, rerun: 64) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x2, 0x830, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x200084c4}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) close(r2) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4048001}, 0x815) 1m33.390609711s ago: executing program 4 (id=3111): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000fedbdf250a0007000000000500000000"], 0x1c}}, 0x0) 1m33.30585135s ago: executing program 1 (id=3112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a010400000000000000000a0000010900010073797a31000000003c000480380001800b00010064796e73657400002800028008000440000000090900010073797a3200000000080003400000000208000940000000030900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, r4, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m33.234522032s ago: executing program 2 (id=3114): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000300000000000000", @ANYRES32, @ANYBLOB="0000000000312ffd8e2a0c1dda0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000200"/28], 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m33.158295859s ago: executing program 4 (id=3116): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@void, @void, @eth={@multicast, @local, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x15, 0x30, 0x64, 0x0, 0xc2, 0x6, 0x0, @local, @private=0xa010102}, {{0x4e20, 0x4e60, 0x41424344, 0x41424344, 0x1, 0x0, 0x7, 0x1, 0x200, 0x0, 0x4, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x42) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) 1m33.138211257s ago: executing program 1 (id=3117): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d00400001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 1m33.055618096s ago: executing program 2 (id=3118): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x11, 0x0, 0x0, 0x4, 0xccce, {0x5, 0x4, 0x2, 0x1, 0xff, 0x67, 0x3, 0xe7, 0x33, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0xba59680070b0db3f, 0x5, 0x0, 0x5}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x51d4, 0x202, 0x4c, 0x6}, 0x10) 1m32.842491858s ago: executing program 4 (id=3119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x66}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x8, r6, 0x43}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40170189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b097a15f48ef82a32b10e24a1b56e981b91257aeddd7fee2fe035a1a164b3906ca184ad08f294cde3dfa48743847cac62a87c2d96176a9f6b4278dc95c6c637294986fa9e3e82b504341f82bf314389b0af7c8e07cb6f5ef9bcd83993c880ef2b2aa313a124bee3deb3133338c291d698f04b796be5514c81bad54c22190acda8145b1c14c4b916e2f5c2f10a8702b90d26e0332605edbc351edcd5621cf8c0f1585b1a53879f9ad931c18b15426856dc1c800e4cce36c6c1bf880c0c40a718810ff4793eba9e39d7cd9b351905a845dd3064613cd6f75802a6bc51c1524b412a2a68e6fa4886bd13b48aa9a12a7ace6fa08ccc86cda842d2f4b564a76a9e8adad2249e0dc200a2e647d34ef0dc23dd85674cce8f8e08a6c5ea76db48ac832f2a6e7514c9ab9f7e99fb3a7ec6cbc1ab45e12d151176cd6a044572928dfd2b72e3557d037b12328f7d4388a4ff8a8e890b2cdaa61fd525dfd3d0feda9c066feff70d89e8fbaaa4ac79e0b814c7b0cb9de9b5915ee30c12c55dc302fa36f96a6b4a437e2f7bac25fb284eec70388c1d4ee9fb51483c801007a74c1806141802eb107b80a047315c048db3671e35139544988b51a23136b02151a06114cc80c05b772786a505edc6d8f74a66b126a940f06000d7abbf3224b9e1f86eb693778968b3e982f197570ffa5732524be57aba33a59cf0032ef61b52f7c2fc2cd992d616452316ee21e7361cfc527acb09f0f46bb8ef013f28d7f615b09037d26e0715d927afee6b9878adad923ce6a6114bb8d3463be786232330a028c152adb31596c77a60231d53fbb8ce73509f37100f69c9004429e904b644de72b865fdccedbc99927542df25180f5880d20590900a9e8b711c8867b67b98d48caf8259797b41284f6e52aa5177ca06a4f25a568ea3a5dd13c6711436d63b814da12b72470eb3468860e5ef86bf381babc6cec73757a1c38a8cf9887bb69045b155ed0ae6c5f2c07f3b9f02c6f02a9ee474e3a9d75e67694bb2a0f28a672a5883dc9688ca2166f914bb1cfc70685907bfa4e9693d9620969fa41ca907751335193417b468de3bab8bf0b7438abe80f494c95e017f41e9a232c52153bc58adf7cc845e770ba119756bad683ff9c701cdd34bc540d8164cf3099c011b328fc0a0445e8eb8085c8cd2fdaf22e1dea9d04454b37af3c83dd3f667f73ca9eb0c3e9bc328b536a1ae9a449b24e227bb05692b16560756d9f0cb3200df43c26d3dbed542f7bd4e3d1329c8e9f631520355e9254b1687197c8374111ee1de4c1784d843aa26992280c9ec267965b8d4d6461afcd597ce636316f5c4ac8f1bec9aa16acd974798c10475e53310630a36796ab4bba263ec76008a821ee9b58861e77f1aa341b9a1bcc9e21c9eb0625297604cdf14e77040e46603597f87d00053c7aafd8130813102105463ea538990f880525cd80e12c426eda2f87a4aefe29505de1a924fad50d9b97a37418331a542333585105ca18976435917721e80f3c631f268b8517f00dc9c8da872328a27e296aa7422b290327feda241d7ea0cd81750d044969e4429197ee55e8111193aee3df3bf37961a4323ac640b0fb11b19cb4e28756defd9f2e1ef3adc3b0aeb5102399dde99e5e67ff4d18c6475440612f42274d17ebc0280f73c89e77fd9dd652edb5ea4e7ad7326dd4c69cea26b47d8314ad412f8b96f2a33a6323c1dc4050ffde22b31656c22b8a5597c3c50cbf4efa9c8d2e4200ccab35ad8badc09d8e05a7abc3dfdce491ecd682dde18f2da41bff3c2e293ddc82df8a1ca558a08b7937bd7228ed25522f41bcdfba8c01a7aa93af6e58b3912dace81ffc5f079e8a4e9d45778afa57909a8e9138abbf4ae6bdbc571d8cc0fb68755b644934fc98fdb263098afab3ffed8e80ea4e935852d9577935c0a5b03425e5e1c3327213d0068dea19165602000000076fe3ad291b73f08e5bf3cb50f60510b85f09bec5dd2118230541448370fa2d1b362ce6c2eee65909ef08bbad2e38ef2fa7d6c0bbb2fbf90e1a63b26c8e41f17b35b1e55885ac66f263d0f42a27a7823d664e3ae65909dd411f05371f21e5bbf7424d41b966e2e8891ae13c3fb700987789f79cca95807ab3068549f250caee6ab7f924afec4b6c821f82f3683d42fde5ccbfafba73c720f8481a7e4d2315e2219f4925893268649dddf696586916bb8c02a3697c38016788d4c799cbbc52043d0ebd08d74efb4619a46db86c744928a580f53ae2d5bbbc69342f722ab65b305975ab500ce7335ceb7d0f726c83a2c47eccf416fdb79f8439d2c608019ea2ef94d1fe8a7367013ae57330165228509d62fab87f04b73a76f80049f23d11a3068721414f8e45b18f4c1d56c11da71c949b35e6c5305452057f947520abbaf701c9b7cbfe623adc65a050458cb5948d1c1699b452b3d9fbba6b3bcdb537bbbf95d8267760cd943de819349966dc515babfca73d5ff3551bc56fe0f9dedb6dd5f4463a3aa652dab81a589ca4e4b0f19ee3b4b20c3986df2f72ba990b421c77b00a9b5cca5d850d607d0a46c2f1b1bbf8dc7f0cc6fea3104615a6cd698d89fca37adf4edfe4ba7c41231a9f2a89c55612e9c7031b7d56d2eb88745ba43a63a122d4d6661e83408a807f9b4519c05f01383811e9a2506c0c23618528599152f7a0481d1e576e4eba29c7725f24f649be7e5d7b9678a91e22d559ee77a1ddfe7225afa40085061c492fc4714f90e481cf494ec6d108fe0be6633d4f4785cb1c82f15190333398283ade4cb97f8104a195098a5a1c90227797fa8216d4762b6e78c60030e69f413cccf052df64a3d1bda69f6dbff49a68ef298809390f39a91e3b5b1971dac8554ed9ae24b4789ba60c145c059b1cfbf6594ed3c734bb4e1172f2e31a18659764bf324621d68b8e356ac3faee71ea97b0b78eeaa29c0f7ee1129777ef1ecd4d7f6586f8d0308709a94489951a04d7eba9793af6c929a0e91cda90457ca1c128cb6aa23f6da8f64f0d78a59f07a19515d9f607aa79c7b6c466e474e45ad85b0f2b82d470c03f7bbfb2fa68b32d4ac188d4a64f22b29c3af9f0b39bc2bb6b399e50f71968effe5b2f0d51489aca30993a67dbd80698f9a0c2ba9addffa3c3712215e63f424ebb5ebaf24f", 0x975}, {&(0x7f0000001180)="c91d588b87bd12b736780a766e3ebc4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e50d1eb6f5cad427446e7edf248403010cad92a925e857760357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde00", 0xb3}, {&(0x7f00000007c0)="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", 0x134}, {&(0x7f0000000440)="1da19d23fdff85b98167afffffffff20df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6ea7734e44835fcd6d23a0d7e00b73ac716a577005fe637cf7c7a", 0xe0}], 0x5}, 0x8bb3a321ef809a) 1m32.838598413s ago: executing program 1 (id=3120): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r3 = socket$isdn(0x22, 0x3, 0x1) sendto$isdn(r3, &(0x7f0000000280)={0x1, 0x9f2a, "c17d990d607d17f6b5e04f6003"}, 0x15, 0x4004001, &(0x7f0000000300)={0x22, 0x4, 0x2, 0x0, 0x4}, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={@rand_addr=0x64010101, 0x1, 0x0, 0x30, 0x0, [{@broadcast}, {@dev}, {@dev}]}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv4_newrule={0x40, 0x20, 0x400, 0x70bd29, 0x25dfdbff, {0x2, 0x10, 0x10, 0x88, 0x1, 0x0, 0x0, 0x2, 0x5}, [@FRA_DST={0x8, 0x1, @private=0xa010101}, @FRA_FLOW={0x8, 0xb, 0x7}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_DST={0x8, 0x1, @empty}]}, 0x40}}, 0x20000800) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x4, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x11}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x68}}, 0x0) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x3, 0x3}, 0x6) 1m32.837688828s ago: executing program 2 (id=3121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x50}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f}, 0x28) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x5c, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r9, 0x0, 0x0, 0xfffffffffffffe3d, 0x0, 0x0, 0x2, 0x0, 0x1, 0xac155da5d3db5926, &(0x7f0000000280)="89ac1e09ecb9167b7d1006eeb03c7081dc7ee245c02293bff01826133d76e2e9f1865801d970f68e6862377b6f051f71810ffa4da77ef76b804a82cd86365f1fe9345c2ee3600592b1d3b28842c5bd722ea3811753dc9aaa32b2c325c3eb5278e28acce8394702ed0291fa1e4750d83efbd475153260bd5e0af1f3967129f2b392fecaf3dcc6983ff2be8e1441a382703e75b53bbcfda47028ba751b", 0x0, 0x2}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x100, 0x84000000, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) 1m32.703954312s ago: executing program 1 (id=3123): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292e154c7beef915d564c90c2004b0f25d41ecb7588de", 0x21) socket$inet(0x2, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x16, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000005000000fd0900008400000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="610306c2061262ed7402"], 0x12) 1m32.514227807s ago: executing program 2 (id=3125): syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001a80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f74}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4090, 0xffa}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x2004c841) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r3 = accept4(r0, &(0x7f0000000340)=@l2tp={0x2, 0x0, @local}, &(0x7f00000003c0)=0x80, 0x800) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000400)="359b61d35806918e8e0bd8", 0xb) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1f8, r1, 0x128, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x956}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x51}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x98a4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x424}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1800000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x296adf9e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffbcb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x90}, 0x40) 1m32.486115448s ago: executing program 4 (id=3126): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf250100000014000180080003000300000008000400", @ANYRES32, @ANYBLOB="04000300ac00028054000180080001000300000008000100060000000800010000000000080001000700000008000100080000000800010007000000080001000200000008000100020000000800010002000000080001000800000024000180080001000300000008000100020000000800010000000000080001000000000014000180080001000200000008000100030000001c000180080001000000000008000100140000000800010001000000040003003800028034000180080001000500000008000100050000000800010006000000080001000800000008000100080000000800010002000000040003"], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x4050) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x200, 0x7fff, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1f}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x24008001) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getqdisc={0x3c, 0x26, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x9}, {0x6, 0xa}, {0x6, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r10}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x0) 1m29.553915641s ago: executing program 1 (id=3128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8050) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket(0x14, 0x2, 0x4) getsockopt$MRT6(r4, 0x29, 0xcf, 0x0, &(0x7f0000000180)) (async) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000640)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) (async) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r1) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xbc78fc13eb01180c}, 0x20000841) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r12, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r11, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x28a, 0x31}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "a4dfa2b25bf572baee087256b17b4bcc"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r7, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 1m29.553121381s ago: executing program 3 (id=3129): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x4, 0x4) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000000015000000000000000000000070636263286663727970742d67656e657269632900000000000000000000000000000014000000000000000000000000000000000000000000000000000000000000000000009d000000000000000000000000000000004000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7d35e2aaabec60300"/208], 0xe0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket(0x40000000015, 0x805, 0x0) r3 = socket$inet6(0xa, 0x1, 0xc) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x380000, @mcast1, 0x100}, 0x1c) getsockopt(r2, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) socket(0x10, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000000000050420f01630c02000000000000000000000d000000b3875719002e3d53c0d8ed"], 0x0, 0x34}, 0x28) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x80800) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m29.535275095s ago: executing program 4 (id=3130): syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00034001cc6b560f3f04459ff679c2766a0083dca7e76991d50aedbb196ff0513803bdf37f3bcca3807ba3bbb28b7c1282b1a84143af4761a4a68548", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200029078000002040000"], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00034001cc6b560f3f04459ff679c2766a0083dca7e76991d50aedbb196ff0513803bdf37f3bcca3807ba3bbb28b7c1282b1a84143af4761a4a68548", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200029078000002040000"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034888a801000000000014"], 0xfdef) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv4_newroute={0x20, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) r8 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) (async) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffd05, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffd05, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'sit0\x00', @local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 1m29.370245644s ago: executing program 2 (id=3131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x20, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0xef, &(0x7f0000000580)=""/239, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x100, r5, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}]}, 0x100}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x40}, 0x8) 1m29.166791856s ago: executing program 0 (id=3058): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x10, 0x800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000029000b0027bd70000040000002"], 0x1c}}, 0x4040080) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002c00"], 0x114}], 0x1}, 0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000200)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, &(0x7f0000000040)) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r4, 0x40106e8c, &(0x7f0000000140)=[0x4, 0xd25]) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)={0x26c, r6, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x92a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff0001}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c3d948b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x26c}}, 0xc014) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x28010804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6000000010001fff000000000100000000000000", @ANYBLOB="01e8c004a9d79e8569183b3983496329f2acc7551d1d972722f2999fe4ec0f609fde4051c0fa4983aa8c30f2d6225dbd6211d288e5ecaa8200333c0566310d0f94f62f2df87f1c19a7ceec832271fcbf386eab250f110678378a2db93590e3dc1aad025762b34e46fc61b1d299b978e43bfb8170f4eb8caa84970558f4d890a75148fec46fadb52b071a355d30abea1733757e0ba0c2286dd0a97bf0cecc8cac24c861f407b00405f5803384ee67f4dfb00e2cd5c9c0eb24a83134088c1ca0e2ab59c27b076d54e1b716a953e76bd67a34c049b0fede47b6eef2dd4abc50c41b54472950c12a", @ANYBLOB="0000000008440000380012800b00010067656e657665000600000000000000801400070000000000000000000000000000000001050003000800000005000a000100000008000a00", @ANYRESOCT, @ANYRESHEX=r3], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) 1m28.988243735s ago: executing program 3 (id=3133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x37, 0x0, &(0x7f0000001080)="f6f6e9a1d78ad62ceef1894386dd78bb3fb7dbfcc7199cc190885422e4d22c8c4c8622ed05991376a096ee089adbde87b8a86001e649d5", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r1, 0xc08ba000) 1m28.810403561s ago: executing program 2 (id=3134): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async, rerun: 64) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, r1, 0x1, 0x70bd27, 0x25dfdc03, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf80}}}]}}]}, 0x58}, 0x1, 0x400000000000000}, 0x48090) 1m28.746566822s ago: executing program 3 (id=3135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x66}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x8, r6, 0x43}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="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", 0xb09}, {&(0x7f0000001180)="c91d588b87bd12b736780a766e3ebc4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e50d1eb6f5cad427446e7edf248403010cad92a925e857760357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde00", 0xb3}, {&(0x7f00000007c0)="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", 0x134}, {&(0x7f0000000440)="1da19d23fdff85b98167afffffffff20df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6ea7734e44835fcd6d23a0d7e00b73ac716a577005fe637cf7c7a", 0xe0}], 0x5}, 0x8bb3a321ef809a) 1m28.737288007s ago: executing program 0 (id=3136): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m28.270181997s ago: executing program 1 (id=3137): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292e154c7beef915d564c90c2004b0f25d41ecb7588de", 0x21) socket$inet(0x2, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x16, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000005000000fd0900008400000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="610306c2061262ed7402"], 0x12) 1m28.256637575s ago: executing program 3 (id=3138): r0 = socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="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", 0x15b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4045851) 1m28.146943323s ago: executing program 0 (id=3139): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=r0], 0x40}}, 0x0) 1m28.062398017s ago: executing program 3 (id=3140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x200000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850) getsockopt$inet6_tcp_int(r1, 0x6, 0x25, 0x0, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x200000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x25, 0x0, &(0x7f0000000240)) (async) 1m27.981603799s ago: executing program 3 (id=3141): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/232, 0xe8}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000001380)=""/99, 0x63}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002700)=""/36, 0x24}, {&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f0000002540)=""/209, 0xd1}], 0x8}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x404c850}, 0x0) 1m27.9691481s ago: executing program 0 (id=3142): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) r4 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getpeername$qrtr(r0, &(0x7f0000000500), &(0x7f0000000540)=0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r9, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x72a5ee2d}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)={0x64, r7, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xca, 0x9}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x400d0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc810}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x207ffc, 0x96, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {0x10}, {0x1}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@gettaction={0xd4, 0x32, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d93}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffd}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf69}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) 1m27.72630146s ago: executing program 0 (id=3143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m27.702846896s ago: executing program 0 (id=3144): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2d}]}}]}, 0x3c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0xd9, 0xfb}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmmsg$sock(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x11}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001180), r10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r15, @ANYBLOB="010028bd7000fcdbdf2502000000050005000400000005000500f9000000080002000100000034000180060001000200000014000400fe80000000000000000000000000001e14000400ff0100000000000000000000000000014800018008000300ac1414aa08000300ac1e010108000700", @ANYRES32=r12, @ANYBLOB="08000600080000000800030000000000060005004e2000001400040500000000000000000000000000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x200000a1}, 0x24040000) ioctl$SIOCX25GCALLUSERDATA(r13, 0x89e4, &(0x7f00000000c0)={0x50, "3cd8627e529f0d24200ac765d78035a38b349fb0808e3550c8c91e67b0f6bbe2d2f4b4d700ca34fbe6fbab26fc4b512e1f343eb09ccf964a07a55bf50e2b3d4e5c2923d17222486051f9751363f40550fa08d2ba40392a1a1c642e6d517c967f477841be09ffb9a85a5e15fbc3c8f1a8acad2265df707fa8ef36e8def3ccdd3c"}) 0s ago: executing program 32 (id=3144): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2d}]}}]}, 0x3c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0xd9, 0xfb}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmmsg$sock(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x11}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001180), r10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r15, @ANYBLOB="010028bd7000fcdbdf2502000000050005000400000005000500f9000000080002000100000034000180060001000200000014000400fe80000000000000000000000000001e14000400ff0100000000000000000000000000014800018008000300ac1414aa08000300ac1e010108000700", @ANYRES32=r12, @ANYBLOB="08000600080000000800030000000000060005004e2000001400040500000000000000000000000000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x200000a1}, 0x24040000) ioctl$SIOCX25GCALLUSERDATA(r13, 0x89e4, &(0x7f00000000c0)={0x50, "3cd8627e529f0d24200ac765d78035a38b349fb0808e3550c8c91e67b0f6bbe2d2f4b4d700ca34fbe6fbab26fc4b512e1f343eb09ccf964a07a55bf50e2b3d4e5c2923d17222486051f9751363f40550fa08d2ba40392a1a1c642e6d517c967f477841be09ffb9a85a5e15fbc3c8f1a8acad2265df707fa8ef36e8def3ccdd3c"}) kernel console output (not intermixed with test programs): 40944][T13110] 8021q: adding VLAN 0 to HW filter on device bond16 [ 295.573317][T13110] bond16: (slave veth5): Enslaving as an active interface with a down link [ 295.897697][T13133] netlink: 'syz.2.2028': attribute type 1 has an invalid length. [ 295.935707][T13136] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.998397][T13136] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.086918][T13136] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.101874][T13136] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.187205][T13136] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.238735][T13136] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.258346][T13155] netlink: 'syz.4.2032': attribute type 1 has an invalid length. [ 296.346973][T13155] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.426719][T13160] bond5: (slave veth9): Enslaving as an active interface with a down link [ 296.480535][T13136] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.515997][T13136] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.683833][ T1342] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.736594][ T1342] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.773446][ T167] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.783223][ T167] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.852619][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.873589][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.945176][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.968208][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.990910][T13189] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2042'. [ 297.015606][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2042'. [ 297.154661][T13208] netlink: 'syz.3.2045': attribute type 1 has an invalid length. [ 297.181045][T13208] 8021q: adding VLAN 0 to HW filter on device bond17 [ 297.209584][T13208] bond17: (slave veth7): Enslaving as an active interface with a down link [ 299.927665][T13187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.145709][T13240] netlink: 'syz.2.2057': attribute type 1 has an invalid length. [ 300.181744][T13240] 8021q: adding VLAN 0 to HW filter on device bond6 [ 300.213966][T13240] bond6: (slave veth7): Enslaving as an active interface with a down link [ 300.313610][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2059'. [ 300.644766][T13265] syzkaller0: entered promiscuous mode [ 300.660924][T13265] syzkaller0: entered allmulticast mode [ 300.745844][T13236] netlink: 'syz.1.2054': attribute type 1 has an invalid length. [ 300.818701][T13236] bond1: entered promiscuous mode [ 300.878651][T13236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.328072][T13296] syzkaller0: entered promiscuous mode [ 301.346965][T13296] syzkaller0: entered allmulticast mode [ 301.455387][T13303] netlink: 'syz.1.2069': attribute type 1 has an invalid length. [ 301.585116][T13303] 8021q: adding VLAN 0 to HW filter on device bond12 [ 301.627732][T13305] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.2070'. [ 301.724611][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2071'. [ 301.749468][T13322] ieee802154 phy1 wpan1: encryption failed: -22 [ 301.759722][T13308] bond12: (slave veth7): Enslaving as an active interface with a down link [ 301.786464][T13322] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2072'. [ 301.866222][T13317] bridge2: port 1(erspan0) entered disabled state [ 302.005581][T13317] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.013421][T13317] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.167867][T13317] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 302.225152][T13328] sit0: entered promiscuous mode [ 302.236940][T13328] netlink: 'syz.3.2073': attribute type 1 has an invalid length. [ 302.260282][T13328] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2073'. [ 302.331683][ T5831] vxcan1 speed is unknown, defaulting to 1000 [ 302.376776][ T5831] syz2: Port: 1 Link DOWN [ 302.452045][ T5895] vxcan1 speed is unknown, defaulting to 1000 [ 302.484940][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 302.536677][T13357] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2077'. [ 302.741993][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2081'. [ 302.849673][T13367] x_tables: unsorted underflow at hook 1 [ 302.875696][ T29] audit: type=1107 audit(1774063989.171:6): pid=13369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 303.077263][T13378] netlink: 'syz.4.2085': attribute type 1 has an invalid length. [ 303.248720][T13378] 8021q: adding VLAN 0 to HW filter on device bond6 [ 303.485669][T13383] bond6: (slave veth11): Enslaving as an active interface with a down link [ 303.673157][T13412] batadv_slave_0: entered promiscuous mode [ 303.726467][T13411] batadv_slave_0: left promiscuous mode [ 303.758951][T13421] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 304.348071][T13454] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2099'. [ 304.546148][T13461] vlan3: entered allmulticast mode [ 304.553581][T13461] hsr0: entered allmulticast mode [ 304.558948][T13461] hsr_slave_0: entered allmulticast mode [ 304.566897][T13461] hsr_slave_1: entered allmulticast mode [ 304.573086][T13465] netlink: 'syz.1.2103': attribute type 1 has an invalid length. [ 304.666829][T13465] 8021q: adding VLAN 0 to HW filter on device bond13 [ 304.756490][T13469] bond13: (slave veth9): Enslaving as an active interface with a down link [ 304.767545][T13461] netlink: 'syz.0.2101': attribute type 21 has an invalid length. [ 304.841134][T13461] netlink: 'syz.0.2101': attribute type 6 has an invalid length. [ 304.920881][T13461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2101'. [ 305.161692][T13486] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 305.181995][T13487] netlink: 'syz.2.2109': attribute type 4 has an invalid length. [ 305.214129][T13488] sctp: [Deprecated]: syz.4.2111 (pid 13488) Use of int in max_burst socket option. [ 305.214129][T13488] Use struct sctp_assoc_value instead [ 305.308276][T13496] netlink: 'syz.3.2112': attribute type 32 has an invalid length. [ 305.328027][T13496] netlink: 'syz.3.2112': attribute type 32 has an invalid length. [ 305.371474][T13496] netlink: 'syz.3.2112': attribute type 32 has an invalid length. [ 305.616717][T13506] 8021q: adding VLAN 0 to HW filter on device bond14 [ 305.678627][T13514] bond14: (slave veth11): Enslaving as an active interface with a down link [ 305.823773][T13526] tipc: Enabled bearer , priority 0 [ 305.834773][T13526] syzkaller0: entered promiscuous mode [ 305.841531][T13526] syzkaller0: entered allmulticast mode [ 305.881186][T13526] tipc: Resetting bearer [ 305.893861][T13530] __nla_validate_parse: 2 callbacks suppressed [ 305.893880][T13530] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2121'. [ 305.913942][T13525] tipc: Resetting bearer [ 305.951718][T13525] tipc: Disabling bearer [ 306.037055][T13533] atomic_op ffff888055be9198 conn xmit_atomic 0000000000000000 [ 306.125262][T13539] syzkaller1: entered promiscuous mode [ 306.138387][T13539] syzkaller1: entered allmulticast mode [ 306.247717][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2127'. [ 306.364574][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2130'. [ 306.464913][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'. [ 306.525542][T13559] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.559399][T13559] bond7: (slave veth9): Enslaving as an active interface with a down link [ 306.577622][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'. [ 306.761059][T13578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2134'. [ 306.787019][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2134'. [ 306.798214][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 306.978363][T13586] bridge6: entered promiscuous mode [ 306.986264][T13586] bridge6: entered allmulticast mode [ 307.039306][T13586] team0: Port device bridge6 added [ 307.129121][T13600] team0: Device ipvlan1 failed to register rx_handler [ 307.433940][T13615] validate_nla: 34 callbacks suppressed [ 307.433963][T13615] netlink: 'syz.3.2144': attribute type 1 has an invalid length. [ 307.435052][T13614] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 307.616070][T13624] netlink: 'syz.4.2147': attribute type 1 has an invalid length. [ 307.635729][T13624] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2147'. [ 307.871981][T13640] netlink: 'syz.4.2153': attribute type 3 has an invalid length. [ 308.032701][T13645] netlink: 'syz.1.2155': attribute type 12 has an invalid length. [ 308.041940][T13648] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2156'. [ 308.053752][T13649] netlink: 'syz.1.2155': attribute type 12 has an invalid length. [ 308.152341][T13651] tipc: Enabled bearer , priority 0 [ 308.188162][T13651] syzkaller0: entered promiscuous mode [ 308.194661][T13651] syzkaller0: entered allmulticast mode [ 308.219994][T13655] netlink: 'syz.1.2160': attribute type 2 has an invalid length. [ 308.228819][T13650] tipc: Resetting bearer [ 308.374488][T13650] tipc: Disabling bearer [ 308.439430][T13666] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 308.445921][T13666] syzkaller1: Refused to change device type [ 308.734761][T13685] syz.0.2168: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 308.773645][T13685] CPU: 1 UID: 0 PID: 13685 Comm: syz.0.2168 Not tainted syzkaller #0 PREEMPT(full) [ 308.773674][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.773687][T13685] Call Trace: [ 308.773695][T13685] [ 308.773703][T13685] dump_stack_lvl+0xe8/0x150 [ 308.773739][T13685] warn_alloc+0x249/0x340 [ 308.773764][T13685] ? stack_trace_save+0xa9/0x100 [ 308.773790][T13685] ? __pfx_warn_alloc+0x10/0x10 [ 308.773821][T13685] ? kasan_save_track+0x4f/0x80 [ 308.773843][T13685] ? kasan_save_track+0x3e/0x80 [ 308.773863][T13685] ? __kasan_kmalloc+0x93/0xb0 [ 308.773886][T13685] ? __kmalloc_cache_noprof+0x31c/0x660 [ 308.773908][T13685] ? xskq_create+0x56/0x170 [ 308.773928][T13685] ? xsk_setsockopt+0x54c/0x990 [ 308.773957][T13685] ? do_sock_setsockopt+0x17c/0x1b0 [ 308.773978][T13685] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 308.773999][T13685] ? do_syscall_64+0x14d/0xf80 [ 308.774026][T13685] __vmalloc_node_range_noprof+0x132/0x1730 [ 308.774084][T13685] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 308.774118][T13685] ? __kasan_kmalloc+0x93/0xb0 [ 308.774148][T13685] vmalloc_user_noprof+0xad/0xe0 [ 308.774172][T13685] ? xskq_create+0xbf/0x170 [ 308.774194][T13685] xskq_create+0xbf/0x170 [ 308.774217][T13685] xsk_init_queue+0x8a/0xe0 [ 308.774252][T13685] xsk_setsockopt+0x54c/0x990 [ 308.774287][T13685] ? __pfx_xsk_setsockopt+0x10/0x10 [ 308.774318][T13685] ? __pfx_aa_sk_perm+0x10/0x10 [ 308.774359][T13685] ? aa_sock_opt_perm+0xff/0x1a0 [ 308.774395][T13685] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 308.774420][T13685] ? __pfx_xsk_setsockopt+0x10/0x10 [ 308.774453][T13685] do_sock_setsockopt+0x17c/0x1b0 [ 308.774482][T13685] __x64_sys_setsockopt+0x13d/0x1b0 [ 308.774511][T13685] do_syscall_64+0x14d/0xf80 [ 308.774534][T13685] ? trace_irq_disable+0x3b/0x150 [ 308.774564][T13685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.774586][T13685] ? clear_bhb_loop+0x40/0x90 [ 308.774613][T13685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.774634][T13685] RIP: 0033:0x7f53d4d9c799 [ 308.774654][T13685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.774672][T13685] RSP: 002b:00007f53d2fcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.774696][T13685] RAX: ffffffffffffffda RBX: 00007f53d5016090 RCX: 00007f53d4d9c799 [ 308.774711][T13685] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 308.774724][T13685] RBP: 00007f53d4e32c99 R08: 0000000000000004 R09: 0000000000000000 [ 308.774737][T13685] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.774749][T13685] R13: 00007f53d5016128 R14: 00007f53d5016090 R15: 00007ffe780a6398 [ 308.774783][T13685] [ 308.774791][T13685] Mem-Info: [ 308.905094][T13687] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 308.969842][T13685] active_anon:6386 inactive_anon:5 isolated_anon:0 [ 308.969842][T13685] active_file:3213 inactive_file:40455 isolated_file:0 [ 308.969842][T13685] unevictable:768 dirty:69 writeback:5 [ 308.969842][T13685] slab_reclaimable:11901 slab_unreclaimable:104843 [ 308.969842][T13685] mapped:29613 shmem:1397 pagetables:3576 [ 308.969842][T13685] sec_pagetables:0 bounce:0 [ 308.969842][T13685] kernel_misc_reclaimable:0 [ 308.969842][T13685] free:1314213 free_pcp:9701 free_cma:0 [ 309.126571][T13700] vcan0 (unregistering): left allmulticast mode [ 309.127148][T13685] Node 0 active_anon:25700kB inactive_anon:20kB active_file:12852kB inactive_file:161616kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118484kB dirty:292kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15060kB pagetables:14336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 309.168925][T13685] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 309.247485][T13685] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.336985][T13685] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 309.359187][T13706] tipc: Enabled bearer , priority 0 [ 309.366824][T13685] Node 0 DMA32 free:1315204kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25580kB inactive_anon:20kB active_file:12852kB inactive_file:161616kB unevictable:1536kB writepending:244kB zspages:0kB present:3129332kB managed:2552712kB mlocked:0kB bounce:0kB free_pcp:36048kB local_pcp:25316kB free_cma:0kB [ 309.413015][T13706] +: renamed from syzkaller0 [ 309.418333][T13685] lowmem_reserve[]: 0 0 0 0 0 [ 309.425434][T13706] tipc: Disabling bearer [ 309.434551][T13685] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 309.469379][T13685] lowmem_reserve[]: 0 0 0 0 0 [ 309.475447][T13685] Node 1 Normal free:3928888kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.516597][T13685] lowmem_reserve[]: 0 0 0 0 0 [ 309.522088][T13685] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 309.535926][T13685] Node 0 DMA32: 6275*4kB (UME) 3588*8kB (UM) 2039*16kB (UME) 773*32kB (UM) 799*64kB (UME) 555*128kB (UME) 496*256kB (UME) 295*512kB (UM) 117*1024kB (U) 106*2048kB (UM) 114*4096kB (UM) = 1315196kB [ 309.560395][T13685] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 309.576591][T13685] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 13*16kB (UM) 9*32kB (UM) 6*64kB (UM) 5*128kB (UM) 7*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 0*2048kB 957*4096kB (UM) = 3928888kB [ 309.596344][T13685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.606767][T13685] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.616590][T13685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.634707][T13685] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.645126][T13685] 45024 total pagecache pages [ 309.649863][T13685] 0 pages in swap cache [ 309.655422][T13685] Free swap = 124996kB [ 309.659625][T13685] Total swap = 124996kB [ 309.664931][T13685] 2097051 pages RAM [ 309.668945][T13685] 0 pages HighMem/MovableOnly [ 309.674748][T13685] 427038 pages reserved [ 309.679194][T13685] 0 pages cma reserved [ 309.689902][T13714] tipc: Enabled bearer , priority 0 [ 309.705646][T13714] syzkaller0: entered promiscuous mode [ 309.711446][T13714] syzkaller0: entered allmulticast mode [ 309.726311][T13713] tipc: Resetting bearer [ 309.758101][T13713] tipc: Disabling bearer [ 309.943940][T13725] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 309.957367][T13727] netlink: 'syz.3.2179': attribute type 1 has an invalid length. [ 310.056996][T13732] syzkaller0: entered promiscuous mode [ 310.067957][T13732] syzkaller0: entered allmulticast mode [ 310.111577][T13739] netlink: 'syz.1.2182': attribute type 4 has an invalid length. [ 310.663194][T13768] netlink: 'syz.1.2189': attribute type 11 has an invalid length. [ 310.749495][T13768] tc_dump_action: action bad kind [ 311.194980][T13797] syzkaller1: entered promiscuous mode [ 311.203752][T13797] syzkaller1: entered allmulticast mode [ 311.220739][T13797] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 311.248018][T13804] __nla_validate_parse: 46 callbacks suppressed [ 311.248039][T13804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2202'. [ 311.548578][T13813] xt_TCPMSS: Only works on TCP SYN packets [ 311.555394][T13817] openvswitch: netlink: Multiple metadata blocks provided [ 311.582668][T13817] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2205'. [ 311.682145][T13821] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 311.758150][T13828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2209'. [ 311.777240][T13821] bond7: entered promiscuous mode [ 311.783824][T13821] 8021q: adding VLAN 0 to HW filter on device bond7 [ 311.811932][T13826] wireguard0: entered promiscuous mode [ 311.840888][T13826] wireguard0: entered allmulticast mode [ 311.869313][T13828] bond7: entered allmulticast mode [ 311.907928][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2211'. [ 311.952904][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2211'. [ 311.997398][T13837] bond7: (slave bridge6): making interface the new active one [ 312.021043][T13837] bridge6: entered promiscuous mode [ 312.027247][T13837] bridge6: entered allmulticast mode [ 312.048514][T13837] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 312.098751][T13845] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2214'. [ 312.150434][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'. [ 312.165337][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'. [ 312.213524][T13855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2214'. [ 312.386799][T13859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2217'. [ 312.443500][T13867] nbd: device at index 64 is going down [ 312.492769][T13859] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 312.602806][T13875] "syz.3.2225" (13875) uses obsolete ecb(arc4) skcipher [ 312.715475][T13285] udevd[13285]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 312.748129][T13880] bond7: option fail_over_mac: invalid value (16) [ 312.788592][T13285] udevd[13285]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 312.819050][T13880] bond7 (unregistering): Released all slaves [ 312.983771][T13892] netlink: 'syz.4.2229': attribute type 1 has an invalid length. [ 313.010282][T13892] netlink: 'syz.4.2229': attribute type 2 has an invalid length. [ 313.024884][T13892] netlink: 'syz.4.2229': attribute type 1 has an invalid length. [ 313.040266][T13892] netlink: 'syz.4.2229': attribute type 2 has an invalid length. [ 313.063132][T13892] netlink: 'syz.4.2229': attribute type 1 has an invalid length. [ 313.080903][T13892] netlink: 'syz.4.2229': attribute type 2 has an invalid length. [ 313.111833][T13892] netlink: 'syz.4.2229': attribute type 1 has an invalid length. [ 313.119633][T13892] netlink: 'syz.4.2229': attribute type 2 has an invalid length. [ 313.145665][T13892] netlink: 'syz.4.2229': attribute type 1 has an invalid length. [ 313.155613][T13892] netlink: 'syz.4.2229': attribute type 2 has an invalid length. [ 313.184572][T13899] 8021q: VLANs not supported on ip_vti0 [ 313.328691][T13911] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 313.337548][T13911] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 313.523806][T13920] openvswitch: netlink: Flow key attr not present in new flow. [ 313.537325][T13921] openvswitch: netlink: Flow key attr not present in new flow. [ 313.785207][T13933] syz_tun: entered allmulticast mode [ 313.798694][T13932] syz_tun: left allmulticast mode [ 313.972411][T13948] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 314.071985][T13957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.533695][T13979] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 314.566819][T13979] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 314.593626][T13979] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 314.665614][T13991] FAULT_INJECTION: forcing a failure. [ 314.665614][T13991] name failslab, interval 1, probability 0, space 0, times 0 [ 314.748285][T13991] CPU: 1 UID: 0 PID: 13991 Comm: syz.0.2261 Not tainted syzkaller #0 PREEMPT(full) [ 314.748315][T13991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.748329][T13991] Call Trace: [ 314.748337][T13991] [ 314.748347][T13991] dump_stack_lvl+0xe8/0x150 [ 314.748383][T13991] should_fail_ex+0x412/0x560 [ 314.748420][T13991] should_failslab+0xa8/0x100 [ 314.748450][T13991] __kmalloc_noprof+0xe8/0x760 [ 314.748475][T13991] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 314.748516][T13991] tomoyo_realpath_from_path+0xe3/0x5d0 [ 314.748561][T13991] ? tomoyo_path_number_perm+0x219/0x630 [ 314.748592][T13991] tomoyo_path_number_perm+0x246/0x630 [ 314.748631][T13991] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 314.748663][T13991] ? __lock_acquire+0x6b5/0x2cf0 [ 314.748702][T13991] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 314.748750][T13991] ? __fget_files+0x2a/0x420 [ 314.748783][T13991] ? __fget_files+0x2a/0x420 [ 314.748813][T13991] ? __fget_files+0x3a0/0x420 [ 314.748843][T13991] ? __fget_files+0x2a/0x420 [ 314.748878][T13991] security_file_ioctl+0xc3/0x2a0 [ 314.748907][T13991] __se_sys_ioctl+0x47/0x170 [ 314.748936][T13991] do_syscall_64+0x14d/0xf80 [ 314.748959][T13991] ? trace_irq_disable+0x3b/0x150 [ 314.748990][T13991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.749012][T13991] ? clear_bhb_loop+0x40/0x90 [ 314.749037][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.749058][T13991] RIP: 0033:0x7f53d4d9c799 [ 314.749077][T13991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.749095][T13991] RSP: 002b:00007f53d2fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.749118][T13991] RAX: ffffffffffffffda RBX: 00007f53d5015fa0 RCX: 00007f53d4d9c799 [ 314.749134][T13991] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000004 [ 314.749148][T13991] RBP: 00007f53d2fee090 R08: 0000000000000000 R09: 0000000000000000 [ 314.749161][T13991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.749173][T13991] R13: 00007f53d5016038 R14: 00007f53d5015fa0 R15: 00007ffe780a6398 [ 314.749206][T13991] [ 314.749222][T13991] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.682073][T14026] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 315.696652][T14026] bond7 (unregistering): Released all slaves [ 315.873400][T14030] bridge0: port 1(syz_tun) entered blocking state [ 315.880007][T14030] bridge0: port 1(syz_tun) entered forwarding state [ 316.101025][T14044] syzkaller0: entered promiscuous mode [ 316.106571][T14044] syzkaller0: entered allmulticast mode [ 316.144189][T14044] xt_check_match: 23 callbacks suppressed [ 316.144211][T14044] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 316.406303][T14061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.456127][T14063] 8021q: VLANs not supported on lo [ 316.674429][T14065] __nla_validate_parse: 44 callbacks suppressed [ 316.674454][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2279'. [ 316.782649][T14074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.034485][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2283'. [ 317.142645][T14081] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2283'. [ 317.386084][T14101] netlink: 'syz.3.2291': attribute type 11 has an invalid length. [ 317.417780][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.518480][T14104] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2293'. [ 317.655402][T14115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2293'. [ 317.762585][T14120] geneve4: entered promiscuous mode [ 317.769922][ T5977] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 42850 - 0 [ 317.784772][ T5977] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 42850 - 0 [ 317.832091][ T5977] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 42850 - 0 [ 317.850763][ T5977] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 42850 - 0 [ 317.928430][T14126] syzkaller0: entered promiscuous mode [ 317.946868][T14126] syzkaller0: entered allmulticast mode [ 318.022868][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2299'. [ 318.084320][T14131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2301'. [ 318.094249][T14131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2301'. [ 318.263098][T14136] lo: entered allmulticast mode [ 318.281298][T14136] lo: left allmulticast mode [ 318.638024][T14159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2308'. [ 318.657647][T14159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.675051][T14154] can: request_module (can-proto-0) failed. [ 318.865982][T14167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2314'. [ 319.789760][T14219] validate_nla: 59 callbacks suppressed [ 319.789779][T14219] netlink: 'syz.2.2329': attribute type 33 has an invalid length. [ 320.099114][T14237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.110915][T14237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.147479][T14237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.182958][T14237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.398715][T14314] netlink: 'syz.3.2354': attribute type 1 has an invalid length. [ 321.483914][T14313] bond18: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 321.495778][T14313] bond18: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 321.518287][T14313] bond18: (slave ip6gre2): making interface the new active one [ 321.538166][T14313] bond18: (slave ip6gre2): Enslaving as an active interface with an up link [ 321.700048][T14329] netlink: 'syz.2.2359': attribute type 21 has an invalid length. [ 321.709817][T14329] __nla_validate_parse: 12 callbacks suppressed [ 321.709836][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2359'. [ 321.733938][T14329] netlink: 'syz.2.2359': attribute type 21 has an invalid length. [ 321.756455][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2359'. [ 321.805782][T14333] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 321.847007][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2361'. [ 321.874642][T14335] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2360'. [ 321.913328][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2361'. [ 321.941057][T14342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2362'. [ 322.139366][T14353] netlink: 'syz.2.2368': attribute type 1 has an invalid length. [ 322.172840][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'. [ 322.226499][T14353] 8021q: adding VLAN 0 to HW filter on device bond9 [ 322.339163][T14356] bond9: (slave geneve2): making interface the new active one [ 322.373901][T14356] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 322.513266][T14366] syzkaller0: entered promiscuous mode [ 322.518933][T14366] syzkaller0: entered allmulticast mode [ 322.593793][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 322.638925][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 322.936343][T14388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2374'. [ 323.717375][T14424] netlink: 'syz.2.2383': attribute type 3 has an invalid length. [ 323.775459][T14431] tipc: Enabling of bearer rejected, failed to enable media [ 324.038132][T14447] netlink: 'syz.3.2388': attribute type 1 has an invalid length. [ 324.435459][T14470] netlink: 'syz.3.2399': attribute type 1 has an invalid length. [ 324.487871][T14471] netlink: 'syz.2.2396': attribute type 21 has an invalid length. [ 324.735376][T14491] netlink: 'syz.1.2404': attribute type 83 has an invalid length. [ 324.861946][T14495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.879425][T14495] bond0: (slave rose0): Enslaving as an active interface with an up link [ 324.932854][T14505] netlink: 'syz.4.2410': attribute type 1 has an invalid length. [ 324.964619][T14507] pim6reg1: entered promiscuous mode [ 324.979643][T14507] pim6reg1: entered allmulticast mode [ 324.995499][T14505] netlink: 'syz.4.2410': attribute type 1 has an invalid length. [ 325.078988][T14516] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 325.272398][T14518] bond15 (unregistering): Released all slaves [ 325.664136][T14544] syzkaller0: entered promiscuous mode [ 325.681344][T14544] syzkaller0: entered allmulticast mode [ 326.385769][T14586] SET target dimension over the limit! [ 326.507853][T14595] netlink: 'syz.1.2434': attribute type 3 has an invalid length. [ 326.537198][T14598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.736733][T14610] __nla_validate_parse: 12 callbacks suppressed [ 326.736754][T14610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2438'. [ 327.276641][T14637] x_tables: duplicate underflow at hook 1 [ 328.695016][T14615] netlink: 'syz.1.2439': attribute type 12 has an invalid length. [ 328.711828][T14611] syzkaller0: entered promiscuous mode [ 328.720949][T14611] syzkaller0: entered allmulticast mode [ 328.858111][T14651] : entered promiscuous mode [ 328.917639][T14653] syzkaller0: entered promiscuous mode [ 328.924705][T14653] syzkaller0: entered allmulticast mode [ 329.102934][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 329.901016][T14702] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.943552][T14699] syzkaller1: entered promiscuous mode [ 329.965726][T14699] syzkaller1: entered allmulticast mode [ 330.315850][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2463'. [ 330.356874][T14731] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2464'. [ 330.375123][T14727] vlan2: entered allmulticast mode [ 330.390849][T14727] bridge6: entered allmulticast mode [ 330.511823][T14741] bridge6: port 1(erspan0) entered blocking state [ 330.518669][T14741] bridge6: port 1(erspan0) entered disabled state [ 330.526346][T14741] erspan0: entered allmulticast mode [ 330.536379][T14741] erspan0: entered promiscuous mode [ 330.542914][T14741] bridge6: port 1(erspan0) entered blocking state [ 330.549533][T14741] bridge6: port 1(erspan0) entered forwarding state [ 330.620712][T14745] netlink: 5140 bytes leftover after parsing attributes in process `syz.4.2468'. [ 330.631366][T14745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2468'. [ 330.772567][T14707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.021794][T14751] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 331.030980][T14751] bond7: option packets_per_slave: allowed values 0 - 65535 [ 331.042453][T14751] bond7 (unregistering): Released all slaves [ 331.092354][T14760] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2472'. [ 331.117663][T14759] syzkaller1: entered promiscuous mode [ 331.123978][T14759] syzkaller1: entered allmulticast mode [ 331.283872][T14768] netlink: 'syz.3.2476': attribute type 3 has an invalid length. [ 331.303329][T14768] netlink: 'syz.3.2476': attribute type 3 has an invalid length. [ 331.825581][T14803] netlink: 'syz.4.2484': attribute type 1 has an invalid length. [ 331.879418][T14807] SET target dimension over the limit! [ 331.973902][T14803] 8021q: adding VLAN 0 to HW filter on device bond8 [ 332.046287][T14809] bond8: (slave veth15): Enslaving as an active interface with a down link [ 332.056975][T14818] netlink: 'syz.0.2488': attribute type 10 has an invalid length. [ 332.068707][T14813] SET target dimension over the limit! [ 332.084109][T14818] wlan1: mtu less than device minimum [ 332.090663][T14818] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 332.101556][T14816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2490'. [ 332.134387][T14803] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2484'. [ 332.335545][T14832] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2492'. [ 332.487123][T14839] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 332.529797][T14845] xt_ecn: cannot match TCP bits for non-tcp packets [ 332.664624][T14848] bond9: (slave geneve2): making interface the new active one [ 332.673806][T14848] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 332.718246][ T49] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 332.742204][ T49] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 332.780896][ T49] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 332.820007][ T49] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 333.059461][T14868] syzkaller1: entered promiscuous mode [ 333.076608][T14868] syzkaller1: entered allmulticast mode [ 333.305197][T14880] netlink: 'syz.3.2510': attribute type 11 has an invalid length. [ 333.383829][T14879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.591961][T14879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.648324][T14897] tipc: Enabled bearer , priority 24 [ 333.679571][T14898] tipc: Enabling of bearer rejected, already enabled [ 333.779857][T14879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.884810][T14918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2521'. [ 333.924226][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2521'. [ 333.963326][T14923] netlink: 'syz.4.2523': attribute type 1 has an invalid length. [ 333.966376][T14921] netlink: 'syz.1.2522': attribute type 1 has an invalid length. [ 333.982433][T14879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.993539][T14921] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2522'. [ 334.003888][T14921] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2522'. [ 334.089002][T14923] 8021q: adding VLAN 0 to HW filter on device bond10 [ 334.115818][T14925] bond10: (slave veth17): Enslaving as an active interface with a down link [ 334.268561][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2527'. [ 334.297029][ T1342] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.324216][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.376351][ T167] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.385071][ T167] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.414111][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2528'. [ 334.429878][T14943] syzkaller0: entered promiscuous mode [ 334.436616][T14943] syzkaller0: entered allmulticast mode [ 334.753282][T14961] netlink: 'syz.3.2535': attribute type 1 has an invalid length. [ 334.834617][T14962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2533'. [ 334.906332][T14961] 8021q: adding VLAN 0 to HW filter on device bond19 [ 334.914336][ T8239] tipc: Node number set to 1966973410 [ 334.990734][T14987] FAULT_INJECTION: forcing a failure. [ 334.990734][T14987] name failslab, interval 1, probability 0, space 0, times 0 [ 335.004591][T14987] CPU: 0 UID: 0 PID: 14987 Comm: syz.2.2538 Not tainted syzkaller #0 PREEMPT(full) [ 335.004620][T14987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.004632][T14987] Call Trace: [ 335.004641][T14987] [ 335.004650][T14987] dump_stack_lvl+0xe8/0x150 [ 335.004685][T14987] should_fail_ex+0x412/0x560 [ 335.004721][T14987] should_failslab+0xa8/0x100 [ 335.004751][T14987] __kmalloc_noprof+0xe8/0x760 [ 335.004775][T14987] ? rcu_is_watching+0x15/0xb0 [ 335.004802][T14987] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 335.004837][T14987] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 335.004872][T14987] genl_family_rcv_msg_doit+0xd9/0x330 [ 335.004905][T14987] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 335.004935][T14987] ? __pfx_genl_get_cmd+0x10/0x10 [ 335.004958][T14987] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 335.004989][T14987] ? __lock_acquire+0x6b5/0x2cf0 [ 335.005024][T14987] genl_rcv_msg+0x61c/0x7a0 [ 335.005056][T14987] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.005080][T14987] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 335.005113][T14987] ? __lock_acquire+0x6b5/0x2cf0 [ 335.005153][T14987] netlink_rcv_skb+0x232/0x4b0 [ 335.005185][T14987] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.005212][T14987] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.005263][T14987] ? down_read+0x272/0x2e0 [ 335.005288][T14987] ? genl_rcv+0xd/0x40 [ 335.005315][T14987] genl_rcv+0x28/0x40 [ 335.005336][T14987] netlink_unicast+0x80f/0x9b0 [ 335.005383][T14987] ? __pfx_netlink_unicast+0x10/0x10 [ 335.005414][T14987] ? netlink_sendmsg+0x650/0xb40 [ 335.005444][T14987] ? skb_put+0x11b/0x210 [ 335.005470][T14987] netlink_sendmsg+0x813/0xb40 [ 335.005513][T14987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.005550][T14987] ? aa_sock_msg_perm+0xf1/0x1b0 [ 335.005581][T14987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.005611][T14987] ____sys_sendmsg+0x972/0x9f0 [ 335.005646][T14987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.005681][T14987] ? import_iovec+0x73/0xa0 [ 335.005709][T14987] ___sys_sendmsg+0x2a5/0x360 [ 335.005740][T14987] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.005801][T14987] ? __fget_files+0x2a/0x420 [ 335.005832][T14987] ? __fget_files+0x3a0/0x420 [ 335.005876][T14987] __x64_sys_sendmsg+0x1bd/0x2a0 [ 335.005904][T14987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.005939][T14987] ? __pfx_ksys_write+0x10/0x10 [ 335.005975][T14987] do_syscall_64+0x14d/0xf80 [ 335.005997][T14987] ? trace_irq_disable+0x3b/0x150 [ 335.006027][T14987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.006049][T14987] ? clear_bhb_loop+0x40/0x90 [ 335.006075][T14987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.006104][T14987] RIP: 0033:0x7fd19b59c799 [ 335.006124][T14987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.006143][T14987] RSP: 002b:00007fd19c430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.006166][T14987] RAX: ffffffffffffffda RBX: 00007fd19b815fa0 RCX: 00007fd19b59c799 [ 335.006182][T14987] RDX: 0000000020008040 RSI: 00002000000000c0 RDI: 0000000000000004 [ 335.006195][T14987] RBP: 00007fd19c430090 R08: 0000000000000000 R09: 0000000000000000 [ 335.006208][T14987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.006221][T14987] R13: 00007fd19b816038 R14: 00007fd19b815fa0 R15: 00007ffd94ae7018 [ 335.006256][T14987] [ 335.389880][T14968] bond19: (slave veth9): Enslaving as an active interface with a down link [ 335.546835][T14994] IPVS: Unknown mcast interface: dvmrp1 [ 335.569677][T14964] tipc: Enabling of bearer rejected, already enabled [ 335.611068][T14996] IPVS: Unknown mcast interface: dvmrp1 [ 335.929921][T15017] can: request_module (can-proto-0) failed. [ 336.058538][T15027] nbd: socks must be embedded in a SOCK_ITEM attr [ 336.080647][T15027] FAULT_INJECTION: forcing a failure. [ 336.080647][T15027] name failslab, interval 1, probability 0, space 0, times 0 [ 336.109563][T15031] delete_channel: no stack [ 336.116980][T15027] CPU: 0 UID: 0 PID: 15027 Comm: syz.0.2549 Not tainted syzkaller #0 PREEMPT(full) [ 336.117010][T15027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.117024][T15027] Call Trace: [ 336.117033][T15027] [ 336.117042][T15027] dump_stack_lvl+0xe8/0x150 [ 336.117079][T15027] should_fail_ex+0x412/0x560 [ 336.117115][T15027] should_failslab+0xa8/0x100 [ 336.117146][T15027] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 336.117171][T15027] ? __alloc_skb+0x1d0/0x7d0 [ 336.117191][T15027] ? __local_bh_enable_ip+0xd0/0x130 [ 336.117225][T15027] __alloc_skb+0x1d0/0x7d0 [ 336.117245][T15027] ? netlink_ack_tlv_len+0x6c/0x210 [ 336.117280][T15027] netlink_ack+0x146/0xa50 [ 336.117308][T15027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.117345][T15027] ? __lock_acquire+0x6b5/0x2cf0 [ 336.117385][T15027] netlink_rcv_skb+0x2b6/0x4b0 [ 336.117418][T15027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.117444][T15027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.117492][T15027] ? down_read+0x272/0x2e0 [ 336.117518][T15027] ? genl_rcv+0xd/0x40 [ 336.117543][T15027] genl_rcv+0x28/0x40 [ 336.117565][T15027] netlink_unicast+0x80f/0x9b0 [ 336.117604][T15027] ? __pfx_netlink_unicast+0x10/0x10 [ 336.117635][T15027] ? netlink_sendmsg+0x650/0xb40 [ 336.117665][T15027] ? skb_put+0x11b/0x210 [ 336.117691][T15027] netlink_sendmsg+0x813/0xb40 [ 336.117734][T15027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.117769][T15027] ? aa_sock_msg_perm+0xf1/0x1b0 [ 336.117803][T15027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.117831][T15027] ____sys_sendmsg+0x972/0x9f0 [ 336.117867][T15027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.117901][T15027] ? import_iovec+0x73/0xa0 [ 336.117929][T15027] ___sys_sendmsg+0x2a5/0x360 [ 336.117960][T15027] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.118029][T15027] ? __fget_files+0x2a/0x420 [ 336.118060][T15027] ? __fget_files+0x3a0/0x420 [ 336.118103][T15027] __x64_sys_sendmsg+0x1bd/0x2a0 [ 336.118130][T15027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.118166][T15027] ? __pfx_ksys_write+0x10/0x10 [ 336.118203][T15027] do_syscall_64+0x14d/0xf80 [ 336.118226][T15027] ? trace_irq_disable+0x3b/0x150 [ 336.118257][T15027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.118279][T15027] ? clear_bhb_loop+0x40/0x90 [ 336.118306][T15027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.118333][T15027] RIP: 0033:0x7f53d4d9c799 [ 336.118354][T15027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.118372][T15027] RSP: 002b:00007f53d2fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.118396][T15027] RAX: ffffffffffffffda RBX: 00007f53d5015fa0 RCX: 00007f53d4d9c799 [ 336.118412][T15027] RDX: 0000000020008040 RSI: 00002000000000c0 RDI: 0000000000000004 [ 336.118426][T15027] RBP: 00007f53d2fee090 R08: 0000000000000000 R09: 0000000000000000 [ 336.118439][T15027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.118452][T15027] R13: 00007f53d5016038 R14: 00007f53d5015fa0 R15: 00007ffe780a6398 [ 336.118486][T15027] [ 336.495835][T15040] tc_dump_action: action bad kind [ 336.712726][T15047] netlink: 'syz.3.2555': attribute type 1 has an invalid length. [ 336.798693][T15058] xt_hashlimit: size too large, truncated to 1048576 [ 336.835280][T15061] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 336.890414][T15062] bond7: Invalid ad_actor_system MAC address. [ 336.910858][T15062] bond7: option ad_actor_system: invalid value (1) [ 336.933891][T15062] bond7 (unregistering): Released all slaves [ 337.087152][T15074] nbd: socks must be embedded in a SOCK_ITEM attr [ 338.154108][T15132] __nla_validate_parse: 8 callbacks suppressed [ 338.154138][T15132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2580'. [ 338.181985][T15132] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 338.349443][T15144] set match dimension is over the limit! [ 338.601360][T15157] tipc: Enabled bearer , priority 0 [ 338.619276][T15157] syzkaller0: entered promiscuous mode [ 338.630605][T15157] syzkaller0: entered allmulticast mode [ 338.642226][T15156] tipc: Resetting bearer [ 338.685581][T15156] tipc: Disabling bearer [ 338.778095][T15166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2590'. [ 338.918042][T15173] netlink: 'syz.1.2592': attribute type 1 has an invalid length. [ 338.923825][T15172] syzkaller1: entered promiscuous mode [ 338.932180][T15172] syzkaller1: entered allmulticast mode [ 339.002487][T15177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2594'. [ 339.045825][T15175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2592'. [ 339.204148][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2596'. [ 339.378761][T15192] vxcan1 speed is unknown, defaulting to 1000 [ 339.507414][T15198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2600'. [ 339.612000][T15201] netlink: 'syz.4.2601': attribute type 1 has an invalid length. [ 339.679090][T15201] 8021q: adding VLAN 0 to HW filter on device bond11 [ 339.778999][T15205] bond11: (slave veth19): Enslaving as an active interface with a down link [ 340.169365][T15234] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 340.511780][T15248] veth0: entered promiscuous mode [ 340.603816][T15247] veth0: left promiscuous mode [ 340.845760][T15265] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2615'. [ 340.984576][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2618'. [ 341.013004][T15274] xt_l2tp: v2 doesn't support IP mode [ 341.079682][T15279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2620'. [ 341.185373][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2621'. [ 363.052064][T15301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2626'. [ 363.094175][T15301] batadv_slave_1: entered promiscuous mode [ 363.103073][T15297] batadv_slave_1: left promiscuous mode [ 363.349118][T15325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2631'. [ 363.371537][T15325] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 363.558827][T15333] netlink: 'syz.4.2635': attribute type 1 has an invalid length. [ 363.664340][T15333] bond12: entered promiscuous mode [ 363.690758][T15333] 8021q: adding VLAN 0 to HW filter on device bond12 [ 363.815301][T15341] bond12: (slave bridge9): making interface the new active one [ 363.823913][T15341] bridge9: entered promiscuous mode [ 363.832792][T15341] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 363.857466][T15351] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 363.916545][T15351] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 364.055881][T15367] netlink: 'syz.0.2641': attribute type 32 has an invalid length. [ 364.064999][T15365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2640'. [ 364.231903][T15374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2643'. [ 364.244598][T15374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2643'. [ 364.459364][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2644'. [ 364.571394][T15387] nbd: socks must be embedded in a SOCK_ITEM attr [ 364.654243][T15393] syzkaller1: entered promiscuous mode [ 364.659766][T15393] syzkaller1: entered allmulticast mode [ 364.720004][T15400] netlink: 'syz.1.2653': attribute type 1 has an invalid length. [ 364.809123][T15400] 8021q: adding VLAN 0 to HW filter on device bond16 [ 364.944074][T15408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2656'. [ 364.970911][T15408] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2656'. [ 364.981417][T15408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2656'. [ 365.001310][T15408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2656'. [ 365.082544][T15403] bond16: (slave veth15): Enslaving as an active interface with a down link [ 365.176563][T15427] netlink: 'syz.2.2660': attribute type 1 has an invalid length. [ 365.222924][T15419] netlink: 'syz.0.2658': attribute type 3 has an invalid length. [ 365.309283][T15427] 8021q: adding VLAN 0 to HW filter on device bond10 [ 365.388418][T15419] tipc: Enabled bearer , priority 0 [ 365.494076][T15425] syzkaller0: entered promiscuous mode [ 365.499687][T15425] syzkaller0: entered allmulticast mode [ 365.511548][T15425] tipc: Resetting bearer [ 365.675537][T15418] tipc: Resetting bearer [ 365.685282][T15458] netlink: 'syz.2.2665': attribute type 11 has an invalid length. [ 365.694138][T15458] netlink: 'syz.2.2665': attribute type 4 has an invalid length. [ 365.720417][T15458] netlink: 'syz.2.2665': attribute type 5 has an invalid length. [ 365.728226][T15458] netlink: 'syz.2.2665': attribute type 6 has an invalid length. [ 365.751791][T15464] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 365.763443][T15460] netlink: 'syz.4.2666': attribute type 1 has an invalid length. [ 367.194325][T15418] tipc: Disabling bearer [ 367.216397][T15460] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 367.232393][T15471] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 367.252196][ T5895] tipc: Node number set to 2486970903 [ 367.838942][T15520] delete_channel: no stack [ 367.845187][T15519] netlink: 'syz.2.2681': attribute type 11 has an invalid length. [ 368.494378][T15555] __nla_validate_parse: 7 callbacks suppressed [ 368.494399][T15555] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2690'. [ 368.637734][T15561] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2692'. [ 368.647114][T15561] netem: invalid attributes len -24 [ 368.653491][T15561] nbd: socks must be embedded in a SOCK_ITEM attr [ 369.068167][T15586] netlink: 'syz.2.2698': attribute type 1 has an invalid length. [ 369.122674][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 369.150748][T15586] 8021q: adding VLAN 0 to HW filter on device bond11 [ 369.158748][T15593] bond11: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 369.171043][T15593] bond11: entered allmulticast mode [ 369.313821][T15602] erspan0: left allmulticast mode [ 369.319016][T15602] erspan0: left promiscuous mode [ 369.325280][T15602] bridge6: port 1(erspan0) entered disabled state [ 369.359056][T15602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 369.525592][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2708'. [ 369.732136][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2711'. [ 369.898469][T15631] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2714'. [ 369.909844][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2714'. [ 370.086084][T15642] x_tables: duplicate underflow at hook 3 [ 370.453481][T15671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.488407][T15674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2727'. [ 370.523089][T15675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.589432][T15681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.664757][T15685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.164843][T15718] veth0_to_bridge: entered promiscuous mode [ 371.181328][T15717] veth0_to_bridge: left promiscuous mode [ 371.566182][T15738] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2742'. [ 371.692964][T15743] vlan1: entered allmulticast mode [ 371.713286][T15743] veth0_vlan: entered allmulticast mode [ 371.731460][T15743] netlink: 'syz.3.2743': attribute type 1 has an invalid length. [ 371.774896][T15743] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2743'. [ 371.940774][T15746] syzkaller1: entered promiscuous mode [ 371.946456][T15746] syzkaller1: entered allmulticast mode [ 372.023520][T15761] syzkaller1: entered promiscuous mode [ 372.029063][T15761] syzkaller1: entered allmulticast mode [ 372.045611][T15759] tipc: Enabled bearer , priority 0 [ 372.057017][T15759] syzkaller0: entered promiscuous mode [ 372.063312][T15759] syzkaller0: entered allmulticast mode [ 372.080312][T15757] tipc: Resetting bearer [ 372.144395][T15757] tipc: Disabling bearer [ 372.332836][T15773] netlink: 'syz.4.2750': attribute type 1 has an invalid length. [ 372.478108][T15781] netlink: 'syz.1.2752': attribute type 1 has an invalid length. [ 372.548085][T15781] bond17: (slave ip6gretap2): making interface the new active one [ 372.571880][T15781] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 372.592103][T15781] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 372.602205][T15781] bond17: (slave ip6gretap2): Enslaving as an active interface with an up link [ 372.645185][T15791] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 373.009751][T15808] bond14: entered allmulticast mode [ 373.019668][T15807] tipc: Enabled bearer , priority 0 [ 373.034225][T15807] syzkaller0: entered promiscuous mode [ 373.040026][T15807] syzkaller0: entered allmulticast mode [ 373.071391][T15808] bridge12: entered promiscuous mode [ 373.076758][T15808] bridge12: entered allmulticast mode [ 373.108765][T15808] bond14: (slave bridge12): Enslaving as an active interface with an up link [ 373.131969][T15805] tipc: Resetting bearer [ 373.218343][T15805] tipc: Disabling bearer [ 373.249563][T15813] tipc: Invalid UDP bearer configuration [ 373.249618][T15813] tipc: Enabling of bearer rejected, failed to enable media [ 373.507222][T15831] Bluetooth: MGMT ver 1.23 [ 373.522732][T15831] Bluetooth: hci1: too big key_count value 32778 [ 373.589817][T15834] netlink: 'syz.1.2768': attribute type 1 has an invalid length. [ 373.765062][T15843] __nla_validate_parse: 8 callbacks suppressed [ 373.765082][T15843] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2768'. [ 374.343355][T15834] 8021q: adding VLAN 0 to HW filter on device bond18 [ 374.402886][T15841] bond18: (slave veth17): Enslaving as an active interface with a down link [ 374.686747][T15873] netlink: 'syz.0.2779': attribute type 1 has an invalid length. [ 374.710011][T15873] netlink: 'syz.0.2779': attribute type 11 has an invalid length. [ 374.738369][T15878] netlink: 'syz.1.2781': attribute type 29 has an invalid length. [ 374.747264][T15873] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2779'. [ 374.767781][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2780'. [ 374.791461][T15877] netlink: 'syz.1.2781': attribute type 29 has an invalid length. [ 374.905221][T15887] netlink: 'syz.4.2783': attribute type 2 has an invalid length. [ 374.964103][T15889] syzkaller0: entered promiscuous mode [ 374.975516][T15889] syzkaller0: entered allmulticast mode [ 374.993816][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2784'. [ 375.024489][T15894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2785'. [ 375.139264][T15899] can: request_module (can-proto-0) failed. [ 375.332496][T15899] netlink: 'syz.1.2786': attribute type 1 has an invalid length. [ 375.341071][T15899] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2786'. [ 375.563376][T15920] bond0: left allmulticast mode [ 375.595399][T15920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.632065][T15927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2793'. [ 375.643243][T15928] tipc: Trying to set illegal importance in message [ 375.686415][T15927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2793'. [ 375.741216][T15927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2793'. [ 375.766463][T15927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2793'. [ 375.971321][T15937] netlink: 'syz.1.2796': attribute type 2 has an invalid length. [ 376.009641][T15939] netlink: 'syz.2.2797': attribute type 4 has an invalid length. [ 376.115906][T15952] tipc: Enabling of bearer rejected, failed to enable media [ 376.292826][T15913] delete_channel: no stack [ 376.579939][T15978] vlan3: entered allmulticast mode [ 376.618437][T15986] netlink: 'syz.2.2809': attribute type 17 has an invalid length. [ 376.945240][T16007] Cannot find del_set index 4 as target [ 377.474127][T16020] vxcan1 speed is unknown, defaulting to 1000 [ 378.077913][T16053] tipc: Enabled bearer , priority 0 [ 378.105389][T16053] syzkaller0: entered promiscuous mode [ 378.112029][T16053] syzkaller0: entered allmulticast mode [ 378.155450][T16052] tipc: Resetting bearer [ 378.279249][T16052] tipc: Disabling bearer [ 378.297305][T16063] netlink: 'syz.0.2829': attribute type 1 has an invalid length. [ 378.544118][T16074] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 378.860819][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.921906][T16096] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 379.543010][T16132] __nla_validate_parse: 137 callbacks suppressed [ 379.543032][T16132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2850'. [ 379.719443][T16142] IPv6: NLM_F_CREATE should be specified when creating new route [ 379.738951][T16142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2852'. [ 380.005164][T16160] tipc: Enabling of bearer rejected, already enabled [ 380.026190][T16163] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2861'. [ 380.179974][T16171] netlink: 'syz.2.2865': attribute type 2 has an invalid length. [ 380.215756][T16171] : entered promiscuous mode [ 380.471169][T16189] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2868'. [ 380.629764][T16194] set match dimension is over the limit! [ 380.765792][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 380.812283][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2876'. [ 380.963502][T16203] tipc: Enabled bearer , priority 0 [ 380.984573][T16203] syzkaller0: entered promiscuous mode [ 380.990205][T16203] syzkaller0: entered allmulticast mode [ 381.047430][T16201] tipc: Resetting bearer [ 381.142908][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.154208][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.164187][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.173314][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.182168][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.182177][T16201] tipc: Disabling bearer [ 381.241118][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.249059][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.257758][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.270036][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.280897][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.462857][T16233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2881'. [ 381.574885][T16218] vxcan1 speed is unknown, defaulting to 1000 [ 381.665057][ T5822] bridge0: port 1(syz_tun) entered disabled state [ 381.722956][ T5822] syz_tun (unregistering): left promiscuous mode [ 381.729450][ T5822] bridge0: port 1(syz_tun) entered disabled state [ 381.894883][T16238] tipc: Enabled bearer , priority 0 [ 381.916162][T16235] syzkaller0: entered promiscuous mode [ 381.941323][T16235] syzkaller0: entered allmulticast mode [ 382.013220][T16235] tipc: Resetting bearer [ 382.030994][T16234] tipc: Resetting bearer [ 382.062493][T16234] tipc: Disabling bearer [ 382.094160][T16254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2888'. [ 382.168153][T16261] openvswitch: netlink: Flow key attr not present in new flow. [ 382.190929][T16261] netlink: 'syz.4.2890': attribute type 13 has an invalid length. [ 382.516995][T16218] chnl_net:caif_netlink_parms(): no params data found [ 382.831399][T16218] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.838785][T16218] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.850568][T16218] bridge_slave_0: entered allmulticast mode [ 382.858871][T16218] bridge_slave_0: entered promiscuous mode [ 382.868440][T16218] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.876519][T16218] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.883942][T16218] bridge_slave_1: entered allmulticast mode [ 382.892613][T16218] bridge_slave_1: entered promiscuous mode [ 382.995312][T16218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.034629][T16306] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2899'. [ 383.048982][T16218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.075336][T16306] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2899'. [ 383.111105][T16218] team0: Port device team_slave_0 added [ 383.131437][T16218] team0: Port device team_slave_1 added [ 383.226549][T16218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.249384][T16218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.338733][T16218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.374044][T16218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.397639][T16218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.412976][ T5145] Bluetooth: hci5: command tx timeout [ 383.503237][T16218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.648148][T16218] hsr_slave_0: entered promiscuous mode [ 383.678475][T16218] hsr_slave_1: entered promiscuous mode [ 383.693953][T16218] debugfs: 'hsr0' already exists in 'hsr' [ 383.699760][T16218] Cannot create hsr debugfs directory [ 383.941253][T16354] netlink: 'syz.3.2914': attribute type 15 has an invalid length. [ 384.127475][T16218] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.149928][T16218] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.322264][T16218] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.365221][T16218] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.467053][T16374] netlink: 'syz.0.2920': attribute type 1 has an invalid length. [ 384.475592][T16374] netlink: 'syz.0.2920': attribute type 1 has an invalid length. [ 384.484845][T16218] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.501485][T16218] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.602451][T16380] __nla_validate_parse: 5 callbacks suppressed [ 384.602471][T16380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'. [ 384.625609][T16218] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.639047][T16218] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.652290][T16380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'. [ 384.797864][T16384] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2923'. [ 384.799895][T16385] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2923'. [ 384.840201][T16385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2923'. [ 384.879128][T16385] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2923'. [ 384.892823][T16385] netlink: 'syz.2.2923': attribute type 3 has an invalid length. [ 384.901176][T16385] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2923'. [ 384.912405][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2923'. [ 384.923171][T16387] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2924'. [ 384.933506][T16384] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2923'. [ 384.933545][T16384] netlink: 'syz.2.2923': attribute type 3 has an invalid length. [ 384.981302][T16389] syzkaller0: entered promiscuous mode [ 384.988092][T16389] syzkaller0: entered allmulticast mode [ 385.076685][T16218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.099140][T16218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.124582][T16218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.152741][T16218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.257698][T16411] netlink: 'syz.4.2929': attribute type 30 has an invalid length. [ 385.257698][T16409] netlink: 'syz.4.2929': attribute type 30 has an invalid length. [ 385.308840][T16415] netlink: 'syz.4.2929': attribute type 30 has an invalid length. [ 385.468372][T16421] netlink: 'syz.3.2933': attribute type 21 has an invalid length. [ 385.491993][ T5145] Bluetooth: hci5: command tx timeout [ 385.516284][T16421] netlink: 'syz.3.2933': attribute type 1 has an invalid length. [ 385.633877][T16218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.756273][T16218] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.814928][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.822175][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.839646][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.846989][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.345982][T16218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.469577][T16218] veth0_vlan: entered promiscuous mode [ 386.481621][T16461] syzkaller0: entered promiscuous mode [ 386.487908][T16461] syzkaller0: entered allmulticast mode [ 386.504880][T16218] veth1_vlan: entered promiscuous mode [ 386.637652][T16436] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 386.645772][T16436] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 386.706134][T16218] veth0_macvtap: entered promiscuous mode [ 386.744485][T16218] veth1_macvtap: entered promiscuous mode [ 386.796776][T16477] ip6tnl3: entered allmulticast mode [ 386.833660][T16218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.869544][T16218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.893119][ T167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.907761][ T167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.928006][ T167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.954820][ T167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.184930][T16492] netlink: 'syz.3.2955': attribute type 5 has an invalid length. [ 387.414632][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.429299][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.557502][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.587894][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.349221][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.373704][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.383404][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.395644][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.411290][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.733192][T16541] vxcan1 speed is unknown, defaulting to 1000 [ 388.825419][T16559] netlink: 'syz.4.2973': attribute type 4 has an invalid length. [ 388.858806][ T167] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.902036][ T167] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.052209][ T167] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.090368][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.108093][ T167] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.475193][T16594] netlink: 'syz.0.2984': attribute type 1 has an invalid length. [ 389.490865][T16594] netlink: 'syz.0.2984': attribute type 1 has an invalid length. [ 389.952445][T16541] chnl_net:caif_netlink_parms(): no params data found [ 390.412081][T16541] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.419604][T16541] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.428561][T16541] bridge_slave_0: entered allmulticast mode [ 390.438212][T16541] bridge_slave_0: entered promiscuous mode [ 390.448315][T16541] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.452728][ T5829] Bluetooth: hci1: command tx timeout [ 390.457569][T16541] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.468501][T16541] bridge_slave_1: entered allmulticast mode [ 390.477079][T16541] bridge_slave_1: entered promiscuous mode [ 390.526787][T16656] netlink: 'syz.2.3000': attribute type 21 has an invalid length. [ 390.552398][T16656] __nla_validate_parse: 25 callbacks suppressed [ 390.552420][T16656] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3000'. [ 390.570922][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3000'. [ 390.629969][T16541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.644167][T16541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.834545][T16541] team0: Port device team_slave_0 added [ 390.865880][T16541] team0: Port device team_slave_1 added [ 390.985448][T16541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.998411][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.027458][T16541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.057804][T16541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.076723][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.108108][T16541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.136411][T16679] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3006'. [ 391.237173][T16541] hsr_slave_0: entered promiscuous mode [ 391.247522][T16541] hsr_slave_1: entered promiscuous mode [ 391.257707][T16541] debugfs: 'hsr0' already exists in 'hsr' [ 391.264294][T16541] Cannot create hsr debugfs directory [ 391.271624][T16674] netlink: 'syz.1.3005': attribute type 4 has an invalid length. [ 391.675891][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3013'. [ 391.812370][T16541] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.952582][T16541] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.124170][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'. [ 392.151611][T16541] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.304838][T16541] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.425098][T16740] netlink: 'syz.0.3021': attribute type 10 has an invalid length. [ 392.433296][T16736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3020'. [ 392.489832][T16740] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 392.532516][ T5829] Bluetooth: hci1: command tx timeout [ 392.749289][T16541] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 392.834774][T16541] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 392.854536][T16541] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 392.889253][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3028'. [ 392.906696][T16541] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 392.973060][T16771] netlink: 'syz.1.3029': attribute type 1 has an invalid length. [ 393.295041][T16541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.320921][T16541] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.336605][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.343836][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.398186][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.405420][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.622781][T16805] syzkaller0: entered promiscuous mode [ 393.626347][T16802] netlink: 'syz.4.3037': attribute type 9 has an invalid length. [ 393.636998][T16802] netlink: 'syz.4.3037': attribute type 11 has an invalid length. [ 393.639592][T16805] 0: reclassify loop, rule prio 0, protocol 800 [ 393.647835][T16802] netlink: 'syz.4.3037': attribute type 12 has an invalid length. [ 393.685453][T16802] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3037'. [ 393.946773][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 393.967630][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 394.068472][T16541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.109032][T16826] netlink: 'syz.4.3043': attribute type 15 has an invalid length. [ 394.147321][T16826] netlink: 'syz.4.3043': attribute type 15 has an invalid length. [ 394.156646][ T167] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 394.166347][ T167] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 394.175766][ T167] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 394.194676][ T167] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 394.303835][T16541] veth0_vlan: entered promiscuous mode [ 394.321079][T16541] veth1_vlan: entered promiscuous mode [ 394.425890][T16541] veth0_macvtap: entered promiscuous mode [ 394.460009][T16541] veth1_macvtap: entered promiscuous mode [ 394.511338][T16541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.541978][T16541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.601682][ T1036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.611361][ T5829] Bluetooth: hci1: command tx timeout [ 394.641535][ T1036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.704685][ T1036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.720409][ T1036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.931030][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.946930][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.992927][T16849] syzkaller0: entered promiscuous mode [ 395.014238][T16849] 0: reclassify loop, rule prio 0, protocol 800 [ 395.138825][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.151884][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.818481][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.831050][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.839571][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.849072][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.857657][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 395.918222][T16884] vxcan1 speed is unknown, defaulting to 1000 [ 396.184512][T16895] syzkaller0: entered promiscuous mode [ 396.193482][T16895] 0: reclassify loop, rule prio 0, protocol 800 [ 396.200301][T16786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.691312][ T5145] Bluetooth: hci1: command tx timeout [ 396.789169][T16884] chnl_net:caif_netlink_parms(): no params data found [ 396.968026][T16884] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.977120][T16884] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.986159][T16884] bridge_slave_0: entered allmulticast mode [ 397.012500][T16884] bridge_slave_0: entered promiscuous mode [ 397.022699][T16884] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.036482][T16884] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.063242][T16884] bridge_slave_1: entered allmulticast mode [ 397.083484][T16884] bridge_slave_1: entered promiscuous mode [ 397.145423][T16941] syzkaller0: entered promiscuous mode [ 397.184252][T16884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.199300][T16884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.308176][T16884] team0: Port device team_slave_0 added [ 397.328162][T16884] team0: Port device team_slave_1 added [ 397.395734][T16884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.418694][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.459937][T16884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.489692][T16884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.498125][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.561321][T16884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.670005][T16884] hsr_slave_0: entered promiscuous mode [ 397.679340][T16884] hsr_slave_1: entered promiscuous mode [ 397.687999][T16884] debugfs: 'hsr0' already exists in 'hsr' [ 397.694976][T16884] Cannot create hsr debugfs directory [ 397.891524][ T5145] Bluetooth: hci3: command tx timeout [ 398.067736][T16884] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.101316][T16884] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.118660][T16884] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 398.139000][T16884] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 42850 - 0 [ 398.160270][T16982] netlink: 'syz.3.3089': attribute type 1 has an invalid length. [ 398.234504][T16983] netlink: 'syz.4.3088': attribute type 1 has an invalid length. [ 398.268999][T16884] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.282766][T16884] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.295842][T16884] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 398.307094][T16884] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 42850 - 0 [ 398.399440][T16982] syzkaller0: entered promiscuous mode [ 398.405975][T16982] syzkaller0: entered allmulticast mode [ 398.434124][T16884] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.445480][T16884] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.458003][T16884] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 398.469907][T16884] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 42850 - 0 [ 398.518382][T16991] syzkaller0: entered promiscuous mode [ 399.973965][ T5145] Bluetooth: hci3: command tx timeout [ 400.536301][T16884] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.546923][T16884] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.557694][T16884] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 400.568721][T16884] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 42850 - 0 [ 402.054420][ T5145] Bluetooth: hci3: command tx timeout [ 402.339456][T16884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.404125][T16884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.471798][T17028] syzkaller0: entered promiscuous mode [ 402.477348][T17028] syzkaller0: entered allmulticast mode [ 402.486439][T16884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.529823][T16884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 402.597382][T17038] netlink: 'syz.1.3101': attribute type 1 has an invalid length. [ 402.606599][T17038] __nla_validate_parse: 8 callbacks suppressed [ 402.606618][T17038] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3101'. [ 402.849707][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3103'. [ 402.926547][T17057] syzkaller0: entered promiscuous mode [ 402.946766][T17057] 0: reclassify loop, rule prio 0, protocol 800 [ 403.152760][T17066] macvtap1: entered allmulticast mode [ 403.158666][T17066] veth0_macvtap: entered allmulticast mode [ 403.185704][T16884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.229197][T16884] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.268613][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.275947][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.330758][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.338008][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.493990][T17083] netlink: 'syz.1.3117': attribute type 64 has an invalid length. [ 403.523012][T17083] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3117'. [ 403.748381][T17096] netlink: 'syz.1.3120': attribute type 11 has an invalid length. [ 403.763094][T17094] syzkaller0: entered promiscuous mode [ 403.773607][T17096] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3120'. [ 403.787297][T17094] 0: reclassify loop, rule prio 0, protocol 800 [ 403.852274][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3121'. [ 403.991778][T16884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.117967][T16884] veth0_vlan: entered promiscuous mode [ 404.131062][ T5145] Bluetooth: hci3: command tx timeout [ 404.139508][T16884] veth1_vlan: entered promiscuous mode [ 404.175565][T16884] veth0_macvtap: entered promiscuous mode [ 404.186372][T16884] veth1_macvtap: entered promiscuous mode [ 404.208013][T16884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.226729][T16884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.242344][ T1342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.252325][ T1342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.268981][ T1342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.279136][ T1342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.883886][T17107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.053136][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.073857][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.102552][T17138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3129'. [ 407.207309][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.231060][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.308763][T17146] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3131'. [ 407.349836][T17146] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3131'. [ 407.422004][T17146] netlink: 'syz.2.3131': attribute type 5 has an invalid length. [ 407.449754][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 407.482269][T17146] netlink: 'syz.2.3131': attribute type 6 has an invalid length. [ 407.496261][T17149] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 407.508622][T17146] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3131'. [ 407.597746][T17149] netlink: 'syz.0.3058': attribute type 1 has an invalid length. [ 407.621275][T17149] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3058'. [ 407.658374][T17149] netlink: 'syz.0.3058': attribute type 1 has an invalid length. [ 407.690207][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3058'. [ 407.915328][T17164] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3136'. [ 407.931964][T17163] syzkaller0: entered promiscuous mode [ 407.969368][T17163] 0: reclassify loop, rule prio 0, protocol 800 [ 408.040030][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 408.054804][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 408.065017][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 408.078919][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 408.088915][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.163102][T17164] macvtap1: entered promiscuous mode [ 408.168837][T17164] macvtap1: entered allmulticast mode [ 408.175018][T17164] veth1_vlan: entered allmulticast mode [ 408.244054][T17166] macvtap2: entered promiscuous mode [ 408.259690][T17166] macvtap2: entered allmulticast mode [ 408.439948][T17167] vxcan1 speed is unknown, defaulting to 1000 [ 408.462771][T17182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3139'. [ 408.608459][T17189] bridge0: port 3(veth0_to_bridge) entered blocking state [ 408.617826][T17189] bridge0: port 3(veth0_to_bridge) entered disabled state [ 408.625919][T17189] veth0_to_bridge: entered allmulticast mode [ 408.639578][T17189] veth0_to_bridge: entered promiscuous mode [ 408.649931][T17189] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.669469][T17189] bridge0: port 3(veth0_to_bridge) entered blocking state [ 408.676878][T17189] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 408.689188][T17189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3142'. [ 408.722706][T17189] netlink: 'syz.0.3142': attribute type 1 has an invalid length. [ 408.876741][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'. [ 408.894568][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'. [ 408.936291][T17199] netlink: 'syz.0.3144': attribute type 3 has an invalid length. [ 408.952250][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'. [ 409.006201][T17167] chnl_net:caif_netlink_parms(): no params data found [ 409.014943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.027397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.039887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.052488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.064960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.077519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.090003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.093608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.103119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.164369][ T5145] Bluetooth: hci2: command tx timeout [ 411.313419][T17172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.306852][ T5145] Bluetooth: hci2: command tx timeout [ 412.970116][ C1] net_ratelimit: 18415 callbacks suppressed [ 412.970141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.970461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.977535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.990432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.002010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.013952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.025939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.038059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.049759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.061602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.498216][ T5145] Bluetooth: hci2: command tx timeout [ 415.546475][ C1] sched: DL replenish lagged too much [ 417.114664][ T5145] Bluetooth: hci2: command tx timeout [ 417.980431][ C1] net_ratelimit: 21341 callbacks suppressed [ 417.980455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.980554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.987552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.999566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.014284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.024486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.035387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.047670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.059571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.071396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 422.990142][ C0] net_ratelimit: 19651 callbacks suppressed [ 422.990166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.990537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.997401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.009132][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.022184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.036562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.045227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.056940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.068838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 423.081187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.000120][ C0] net_ratelimit: 19494 callbacks suppressed [ 428.000143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.000710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.008311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.019522][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.031923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.043761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.055329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 428.067475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.080364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.091451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.010377][ C1] net_ratelimit: 19140 callbacks suppressed [ 433.010400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.010401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.011391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 433.017371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.030612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.041356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.053472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.065278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.079521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 433.089279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.020415][ C1] net_ratelimit: 18846 callbacks suppressed [ 438.020439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.022041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 438.027422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.042557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.051653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.063878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.075497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.087418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.099494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.111538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.578686][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.030441][ C1] net_ratelimit: 19060 callbacks suppressed [ 443.030464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.030747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.037583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.049709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.061677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.073421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.085727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.097738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.109557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.121332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 448.040112][ C1] net_ratelimit: 19584 callbacks suppressed [ 448.040136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.040616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.047326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.059534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.071181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.087255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 448.095144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.107889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.119090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.131204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.050153][ C1] net_ratelimit: 18925 callbacks suppressed [ 453.050173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.054295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 453.057415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.070032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.081441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.093409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.105332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.116919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.129254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.141242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.060594][ C1] net_ratelimit: 19049 callbacks suppressed [ 458.060618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.060960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.067645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.079854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.091618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.105679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 458.115559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.128600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.139622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.151535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.070104][ C1] net_ratelimit: 19226 callbacks suppressed [ 463.070127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.070595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 463.077212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.094897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 463.101297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.114275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.125536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.137461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.149433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.161343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.080170][ C0] net_ratelimit: 18729 callbacks suppressed [ 468.080194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 468.080391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.088233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.099438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.111364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.123257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.135149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 468.147312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.163350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 468.171220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.090195][ C1] net_ratelimit: 19148 callbacks suppressed [ 473.090218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.091376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 473.097237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.109899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.121575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.133170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.145328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.157263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.169154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.181151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.100110][ C1] net_ratelimit: 19673 callbacks suppressed [ 478.100114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 478.100134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.108682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.119308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.131514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.143184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.155345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 478.167338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.186374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 478.191380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.110769][ C1] net_ratelimit: 19101 callbacks suppressed [ 483.110771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.110791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.120229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.130101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.141784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 483.154048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.170001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 483.177991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.190885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.202233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.120127][ C1] net_ratelimit: 18771 callbacks suppressed [ 488.120127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.120150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.127447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.139240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.151201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 488.163308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.179515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 488.187217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.200269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.211400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.130145][ C0] net_ratelimit: 18798 callbacks suppressed [ 493.130170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.130961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.137264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.149355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.161247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.173497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.185613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.197664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.209417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 493.221645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.140365][ C0] net_ratelimit: 18937 callbacks suppressed [ 498.140389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.142966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.147587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.159557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.171901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.183705][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.195502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.207550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.219263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.231756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 501.737606][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 502.324009][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.150353][ C1] net_ratelimit: 18996 callbacks suppressed [ 503.150377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.150390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.151663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.157568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.169202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.181629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.193646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.205451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.217368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 503.229276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.160242][ C1] net_ratelimit: 19350 callbacks suppressed [ 508.160266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.160359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 508.167359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.180218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.194347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.203353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.215140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.227285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.238981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.250982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.170429][ C1] net_ratelimit: 19063 callbacks suppressed [ 513.170452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 513.172030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 513.177617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 513.190255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.201740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 513.213588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.225649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 513.237657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.249551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 513.261490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.608027][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 518.180106][ C1] net_ratelimit: 19214 callbacks suppressed [ 518.180130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.180653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.187234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.199196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.211209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.223132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.235176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.247048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.259107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.270809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.056690][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 523.190096][ C0] net_ratelimit: 19132 callbacks suppressed [ 523.190122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.190665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.197180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.209959][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.222283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.233987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.246246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 523.258334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.271521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.282385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 528.200234][ C0] net_ratelimit: 19488 callbacks suppressed [ 528.200258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.202149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 528.207269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 528.219440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 528.233706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 528.243482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 528.257443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 528.267731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 528.280394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.291621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.600042][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 530.607052][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17172/1:b..l [ 530.615571][ C0] rcu: (detected by 0, t=10503 jiffies, g=67425, q=2603 ncpus=2) [ 530.623446][ C0] task:syz.1.3137 state:R running task stack:25720 pid:17172 tgid:17171 ppid:16218 task_flags:0x400140 flags:0x00080003 [ 530.638249][ C0] Call Trace: [ 530.641580][ C0] [ 530.644564][ C0] __schedule+0x15dd/0x52d0 [ 530.649126][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 530.654156][ C0] ? __pfx___schedule+0x10/0x10 [ 530.659068][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 530.664161][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 530.669581][ C0] preempt_schedule_common+0x82/0xd0 [ 530.674912][ C0] ? nl80211_netlink_notify+0x46b/0x840 [ 530.680541][ C0] preempt_schedule_thunk+0x16/0x30 [ 530.686227][ C0] __local_bh_enable_ip+0xe1/0x130 [ 530.691396][ C0] nl80211_netlink_notify+0x46b/0x840 [ 530.696837][ C0] ? nl80211_netlink_notify+0x74/0x840 [ 530.702358][ C0] notifier_call_chain+0x1be/0x400 [ 530.707541][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 530.713311][ C0] netlink_release+0x123b/0x1ad0 [ 530.718317][ C0] ? netlink_release+0x101/0x1ad0 [ 530.723486][ C0] ? __pfx_netlink_release+0x10/0x10 [ 530.728823][ C0] ? down_write+0x16d/0x200 [ 530.733462][ C0] ? __pfx_down_write+0x10/0x10 [ 530.738379][ C0] sock_close+0xc3/0x240 [ 530.742676][ C0] ? __pfx_sock_close+0x10/0x10 [ 530.747588][ C0] __fput+0x44f/0xa70 [ 530.751638][ C0] task_work_run+0x1d9/0x270 [ 530.756272][ C0] ? __pfx_task_work_run+0x10/0x10 [ 530.761427][ C0] ? kick_process+0xeb/0x160 [ 530.766069][ C0] ? task_work_add+0x395/0x440 [ 530.770882][ C0] get_signal+0x11eb/0x1330 [ 530.775451][ C0] ? __fput_deferred+0x216/0x380 [ 530.780449][ C0] ? __pfx___fput_deferred+0x10/0x10 [ 530.785809][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 530.791399][ C0] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 530.796554][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 530.802782][ C0] exit_to_user_mode_loop+0x86/0x480 [ 530.808123][ C0] ? rcu_is_watching+0x15/0xb0 [ 530.812950][ C0] do_syscall_64+0x32d/0xf80 [ 530.817595][ C0] ? trace_irq_disable+0x3b/0x150 [ 530.822758][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.828962][ C0] ? clear_bhb_loop+0x40/0x90 [ 530.833695][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.839658][ C0] RIP: 0033:0x7f185559c799 [ 530.844113][ C0] RSP: 002b:00007f1856403028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.852658][ C0] RAX: 000000000000001c RBX: 00007f1855815fa0 RCX: 00007f185559c799 [ 530.860681][ C0] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 000000000000000a [ 530.868697][ C0] RBP: 00007f1855632c99 R08: 0000000000000000 R09: 0000000000000000 [ 530.876804][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.884906][ C0] R13: 00007f1855816038 R14: 00007f1855815fa0 R15: 00007fffafa07888 [ 530.892952][ C0] [ 530.896023][ C0] rcu: rcu_preempt kthread starved for 667 jiffies! g67425 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 530.907263][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 530.917365][ C0] rcu: RCU grace-period kthread stack dump: [ 530.923308][ C0] task:rcu_preempt state:R running task stack:27744 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 530.936866][ C0] Call Trace: [ 530.940191][ C0] [ 530.943175][ C0] __schedule+0x15dd/0x52d0 [ 530.947821][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 530.952833][ C0] ? __pfx___schedule+0x10/0x10 [ 530.957925][ C0] ? schedule+0x90/0x360 [ 530.962228][ C0] schedule+0x164/0x360 [ 530.966461][ C0] schedule_timeout+0x158/0x2c0 [ 530.971379][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 530.976996][ C0] ? __pfx_process_timeout+0x10/0x10 [ 530.982348][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 530.988208][ C0] ? prepare_to_swait_event+0x340/0x370 [ 530.993812][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 530.998727][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 531.004936][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 531.010267][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 531.015508][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 531.021367][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 531.026005][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 531.031251][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 531.037107][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 531.042134][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 531.047224][ C0] kthread+0x388/0x470 [ 531.051329][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 531.056577][ C0] ? __pfx_kthread+0x10/0x10 [ 531.061235][ C0] ret_from_fork+0x51e/0xb90 [ 531.065898][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 531.071069][ C0] ? __switch_to+0xc7d/0x1450 [ 531.075816][ C0] ? __pfx_kthread+0x10/0x10 [ 531.080469][ C0] ret_from_fork_asm+0x1a/0x30 [ 531.085331][ C0] [ 531.088393][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 531.094872][ C0] Sending NMI from CPU 0 to CPUs 1: [ 531.100146][ C1] NMI backtrace for cpu 1 [ 531.100176][ C1] CPU: 1 UID: 0 PID: 5981 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 531.100200][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.100216][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 531.100253][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 531.100277][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 06 10 77 03 66 0f 1f 44 00 [ 531.100295][ C1] RSP: 0018:ffffc90000a07330 EFLAGS: 00000046 [ 531.100313][ C1] RAX: 0000000000096996 RBX: ffff8880b8723e40 RCX: 0000000000000838 [ 531.100328][ C1] RDX: 0000000000000000 RSI: 0000000000096996 RDI: 0000000000000838 [ 531.100340][ C1] RBP: 0000000000000000 R08: ffffffff81b2cd45 R09: ffffffff9a2bd508 [ 531.100355][ C1] R10: 0000000000000003 R11: ffffffff8173caf0 R12: 0000000010004d2c [ 531.100369][ C1] R13: dffffc0000000000 R14: 0000000000096996 R15: 0000000000000020 [ 531.100383][ C1] FS: 0000000000000000(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 531.100400][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.100415][ C1] CR2: 00007fa6b81ffdf8 CR3: 0000000079e30000 CR4: 00000000003526f0 [ 531.100434][ C1] Call Trace: [ 531.100441][ C1] [ 531.100448][ C1] lapic_next_event+0x11/0x20 [ 531.100478][ C1] clockevents_program_event+0x1c9/0x350 [ 531.100511][ C1] hrtimer_interrupt+0xb08/0x1010 [ 531.100559][ C1] __sysvec_apic_timer_interrupt+0x102/0x460 [ 531.100591][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 531.100615][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 531.100637][ C1] RIP: 0010:lock_acquire+0x57/0x2e0 [ 531.100664][ C1] Code: 89 44 24 30 0f 1f 44 00 00 65 8b 05 c7 a5 7a 11 83 f8 08 0f 83 77 01 00 00 89 c0 48 0f a3 05 30 19 70 0e 73 0d e8 d9 29 09 00 <84> c0 0f 84 bc 01 00 00 83 3d 2a 4c 70 0e 00 0f 84 c3 00 00 00 48 [ 531.100682][ C1] RSP: 0018:ffffc90000a075a0 EFLAGS: 00000202 [ 531.100698][ C1] RAX: 0000000000000001 RBX: ffffffff8a83691e RCX: 0000000080000102 [ 531.100712][ C1] RDX: 0000000000000000 RSI: ffffffff8c27c1e0 RDI: ffffffff8c27c1a0 [ 531.100727][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.100739][ C1] R10: ffffc90000a07738 R11: ffffffff81b0c260 R12: 0000000000000002 [ 531.100753][ C1] R13: ffffffff8e75e520 R14: 0000000000000000 R15: 0000000000000000 [ 531.100769][ C1] ? NF_HOOK+0x64e/0x6e0 [ 531.100795][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 531.100827][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 531.100857][ C1] ? NF_HOOK+0x64e/0x6e0 [ 531.100882][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 531.100911][ C1] unwind_next_frame+0xc2/0x23c0 [ 531.100941][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 531.100983][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 531.101014][ C1] ? br_nf_dev_queue_xmit+0x4ef/0x2560 [ 531.101042][ C1] ? NF_HOOK+0x64e/0x6e0 [ 531.101068][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 531.101090][ C1] arch_stack_walk+0x11b/0x150 [ 531.101125][ C1] ? NF_HOOK+0x64e/0x6e0 [ 531.101152][ C1] stack_trace_save+0xa9/0x100 [ 531.101173][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 531.101193][ C1] ? ip6t_do_table+0x1df/0x1560 [ 531.101223][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 531.101251][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 531.101276][ C1] kasan_save_track+0x3e/0x80 [ 531.101297][ C1] ? kasan_save_track+0x3e/0x80 [ 531.101317][ C1] ? kasan_save_free_info+0x46/0x50 [ 531.101346][ C1] ? __kasan_slab_free+0x5c/0x80 [ 531.101367][ C1] ? kmem_cache_free+0x187/0x630 [ 531.101389][ C1] ? br_nf_dev_queue_xmit+0x4ef/0x2560 [ 531.101417][ C1] ? NF_HOOK+0x64e/0x6e0 [ 531.101473][ C1] kasan_save_free_info+0x46/0x50 [ 531.101503][ C1] __kasan_slab_free+0x5c/0x80 [ 531.101526][ C1] kmem_cache_free+0x187/0x630 [ 531.101549][ C1] ? __skb_ext_put+0x221/0x2f0 [ 531.101570][ C1] ? br_nf_dev_queue_xmit+0x4ef/0x2560 [ 531.101602][ C1] br_nf_dev_queue_xmit+0x4ef/0x2560 [ 531.101635][ C1] ? NF_HOOK+0xa2/0x6e0 [ 531.101661][ C1] ? NF_HOOK+0xa2/0x6e0 [ 531.101685][ C1] NF_HOOK+0x64e/0x6e0 [ 531.101714][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 531.101741][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 531.101770][ C1] ? net_generic+0x1e/0x240 [ 531.101794][ C1] ? net_generic+0x1e/0x240 [ 531.101818][ C1] ? net_generic+0x1e/0x240 [ 531.101841][ C1] ? skb_pull+0xc1/0x1d0 [ 531.101868][ C1] br_nf_post_routing+0xb66/0xfe0 [ 531.101904][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 531.101932][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 531.101963][ C1] nf_hook_slow+0xc5/0x220 [ 531.101982][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 531.102006][ C1] NF_HOOK+0x23e/0x3f0 [ 531.102030][ C1] ? NF_HOOK+0xa2/0x3f0 [ 531.102050][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 531.102072][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 531.102098][ C1] ? net_generic+0x1e/0x240 [ 531.102122][ C1] br_forward_finish+0xd3/0x130 [ 531.102143][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 531.102167][ C1] br_nf_forward_finish+0xa5e/0xe90 [ 531.102197][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 531.102225][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 531.102250][ C1] ? NF_HOOK+0xa2/0x6e0 [ 531.102272][ C1] ? NF_HOOK+0xa2/0x6e0 [ 531.102294][ C1] NF_HOOK+0x64e/0x6e0 [ 531.102320][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 531.102344][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 531.102369][ C1] ? net_generic+0x1e/0x240 [ 531.102395][ C1] br_nf_forward_ip+0x7ef/0xa30 [ 531.102419][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 531.102446][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 531.102471][ C1] nf_hook_slow+0xc5/0x220 [ 531.102489][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 531.102512][ C1] NF_HOOK+0x23e/0x3f0 [ 531.102535][ C1] ? NF_HOOK+0xa2/0x3f0 [ 531.102555][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 531.102578][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 531.102601][ C1] ? br_flood+0x8e0/0xb80 [ 531.102622][ C1] ? br_handle_vlan+0x61/0x530 [ 531.102643][ C1] __br_forward+0x397/0x540 [ 531.102664][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 531.102689][ C1] br_handle_frame_finish+0x14c2/0x1bb0 [ 531.102713][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 531.102744][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 531.102775][ C1] ? ip6t_do_table+0x1c3/0x1560 [ 531.102793][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 531.102809][ C1] ? nf_hook_slow+0x176/0x220 [ 531.102828][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 531.102853][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 531.102881][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 531.102906][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 531.102931][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 531.102969][ C1] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 531.102996][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 531.103028][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 531.103054][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 531.103080][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 531.103108][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 531.103134][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 531.103162][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 531.103185][ C1] br_handle_frame+0x1277/0x1510 [ 531.103216][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 531.103242][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 531.103273][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 531.103297][ C1] __netif_receive_skb_core+0x98f/0x31a0 [ 531.103327][ C1] ? ip6_mc_input+0x8de/0xbd0 [ 531.103351][ C1] ? ip6_mc_input+0x8de/0xbd0 [ 531.103375][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 531.103400][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 531.103427][ C1] ? ip6_rcv_finish+0x265/0x280 [ 531.103448][ C1] ? NF_HOOK+0x336/0x3c0 [ 531.103474][ C1] ? lock_acquire+0xf0/0x2e0 [ 531.103500][ C1] ? process_backlog+0x3eb/0x1950 [ 531.103527][ C1] ? process_backlog+0x3eb/0x1950 [ 531.103556][ C1] ? process_backlog+0x3eb/0x1950 [ 531.103583][ C1] process_backlog+0x76d/0x1950 [ 531.103623][ C1] __napi_poll+0xae/0x340 [ 531.103647][ C1] ? skb_defer_free_flush+0x233/0x260 [ 531.103676][ C1] net_rx_action+0x627/0xf70 [ 531.103692][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 531.103717][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 531.103745][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 531.103770][ C1] handle_softirqs+0x22a/0x870 [ 531.103796][ C1] ? do_softirq+0x76/0xd0 [ 531.103822][ C1] ? wg_index_hashtable_insert+0xff/0x880 [ 531.103851][ C1] do_softirq+0x76/0xd0 [ 531.103873][ C1] [ 531.103879][ C1] [ 531.103886][ C1] __local_bh_enable_ip+0xf8/0x130 [ 531.103910][ C1] wg_index_hashtable_insert+0xff/0x880 [ 531.103937][ C1] ? __asan_memset+0x22/0x50 [ 531.103963][ C1] wg_noise_handshake_create_initiation+0x64e/0x830 [ 531.103985][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 531.104011][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 531.104057][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 531.104080][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 531.104099][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 531.104119][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 531.104141][ C1] wg_packet_handshake_send_worker+0x18d/0x350 [ 531.104168][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 531.104194][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 531.104227][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 531.104250][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 531.104274][ C1] process_scheduled_works+0xb6e/0x18c0 [ 531.104315][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 531.104342][ C1] ? assign_work+0x3d5/0x5e0 [ 531.104368][ C1] worker_thread+0xa53/0xfc0 [ 531.104408][ C1] kthread+0x388/0x470 [ 531.104425][ C1] ? __pfx_worker_thread+0x10/0x10 [ 531.104448][ C1] ? __pfx_kthread+0x10/0x10 [ 531.104466][ C1] ret_from_fork+0x51e/0xb90 [ 531.104491][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 531.104513][ C1] ? __switch_to+0xc7d/0x1450 [ 531.104536][ C1] ? __pfx_kthread+0x10/0x10 [ 531.104553][ C1] ret_from_fork_asm+0x1a/0x30 [ 531.104590][ C1] [ 533.210223][ C1] net_ratelimit: 14106 callbacks suppressed [ 533.210247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.210620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 533.217390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.230314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.241349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.255466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.265567][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.277741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 533.289963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.303809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 538.220094][ C1] net_ratelimit: 18566 callbacks suppressed [ 538.220118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.220210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.227218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.239180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.251139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.265237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.275082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.287079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0) [ 538.298969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.312906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:4c:e9:d6:c8:7d, vlan:0)