last executing test programs: 2.82656676s ago: executing program 2 (id=3135): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000f3ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7}, 0x10) close(r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0xe}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000140)=""/118, 0x28, 0x76, 0x0, 0xf2ce, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r2, 0x3, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000f3ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7}, 0x10) (async) close(r1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0xe}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000140)=""/118, 0x28, 0x76, 0x0, 0xf2ce, 0x10000}, 0x28) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r2, 0x3, 0x1, 0x2}, 0x50) (async) 2.752346895s ago: executing program 2 (id=3137): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.227810671s ago: executing program 4 (id=3143): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000480)) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001075010000000000000000000000000a5c000000060a01080e000000000000000200fffe0900020073797a32000000000900010073797a1000000000300004802c0001800a0001006d617463690000001c00028005000300000000006ed001007365740008000240000000021400000011000100000000fa900000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x7}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r3, 0x7}, &(0x7f0000000300)=0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5522000011140100000000000000000008004a0000000000080001000000000008004b0013000000"], 0x28}}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.226859546s ago: executing program 2 (id=3144): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000000c0)) sendmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x1, 0x0, 0x0, 0x1}, 0x22, 0x3, 0x0, 0x0, "191156a5b247b794886ed99da621db3313072511232afacfa2eea515cb3a8904eaa1de48925c829b7fa54868f610cec94b3c3e3b2a7250208513b3b3b711828b"}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x40000) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={0x0, @ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @l2tp={0x2, 0x0, @multicast1, 0x2}, @l2={0x1f, 0x3, @any, 0xf, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x8ed, &(0x7f0000000200)='veth0_to_bond\x00', 0x2, 0x5, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x14c, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x108, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x20ab617c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd5ae}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc60}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xbc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff80000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb1500000}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2209881b}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb21}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x10}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) read(r2, &(0x7f0000000540)=""/171, 0xab) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000018) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r2) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x927d94342c485548}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x7ac880fa7d8b63c3) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000880)=@name, &(0x7f00000008c0)=0x10, 0x80800) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x2) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000900)) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000940)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f00000009c0)) socket$kcm(0x29, 0x7, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r2) epoll_create(0x8cc) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x715f, 0xff, 0x36f7}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x1) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000e00)={&(0x7f0000000b40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1e0, r9, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4840}, 0x20008080) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xb8, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x28}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0xa8, r3, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x46}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x4}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x1b}]}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7f}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x7}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7c}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x61}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x24004044}, 0x0) 2.038611661s ago: executing program 1 (id=3146): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffd, 0x8, 0x0, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6], [0xe6, 0xc, 0xfffe, 0x0, 0x2, 0xa3a9, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff6b16}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r5, 0x8, 0x100}) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) 1.159282377s ago: executing program 1 (id=3148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4051800000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0xa8}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301bb000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x50, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x94}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xe}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000200)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f0000002ffc0300", @ANYRES32=r6, @ANYBLOB="05002a00000000000500290001000000"], 0x2c}}, 0x0) 1.158412153s ago: executing program 3 (id=3149): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x4) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x10) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000140)="482b11195f5b3ae9", 0x0, 0x0, 0x0, 0xe}, 0x38) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410001, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @local}, 0x0, 0x8}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)="e4fde7eb583e6423edc3b3c4993ec97a226cc3539c1f6a09b7431bb1cb19edbc819978d85e516d03a61621f8fef383c043bdcafb6ac8ec84906357df09a05961179f5bc023daf9e1e869fecc6fc74d30671b5369ef92949e5e885067e83dfb105d7944f30a0834305d71a5c6d150521b073dcb32c130865e1919f7", 0x7b}, {&(0x7f00000004c0)="9ab376f73dcf38d73c3133e15ab184c2b772e2cc4536827da0f6a7c5139d454ad404869a3993c7d77347756d62c8a5797f7c9c820e736a3c08afa89a89032dd37ddb15a8295937f7c0d7b1d1109dbb381992069ea4d439e3130ebaa8c0ea0ec70edf1d7a6f04d25bc750275c5324553fc559035c2455dc3d", 0x78}], 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="98000000000000001b010000090000007fab0eb5ae270e5fed78da5e5c63a1368e7d75705834a7d9a6ee437278c9b5dd096b1f0b189a479b97b80238012cbeb5f95650f65ff9a9fcb137b993832e04e8d5e2dc92c844b10c917b1a128e89a6c6e67c5d01630add21d8928833f485c41e14629a5c72d40776d5b6b51130a711612290f33cb98c7a5bd009ff178277c5c128bd5b1cc3f1d3904000000000000000000000007f000000b47d144d329a134795cd9f7c50f75fcff816432604db1b8b3942f802ee6cc168a234494763296c6a46b0000000000000101000000000000019010000090000008cf732acffd9e93d9f03adf6a10c7fc3867ded0d405b3c77a54faa45f3d12ced063c1a56940ca784c4f41a30d9598e908348909363ebb4a7a8be7e523d7bb2c39c647d4f86614fd314f83e323d2ad5a2f305a3d38afa71ef899ec065b96a3eef91b4c9b8695e00fbdb6b7e848993636b82a64562b9b0573a8b0768bbd29d3285def3a15c8f06e58664bae0c37d2182162f7e3fcd4108e82055ff29482b8fd6a4e4c09eb2db96fb1234d126747a7cccd7092f9a9522654dbe37245466df616c56f78b171f23405cb6dce7cbcd729869e82d2639327626fbe394a410a8ec902264af7d0b9b8dae71a4c2021f7757614cc1520a934b1ef6a98c9b6365cfa67c436325d028b2d1fd7ade6f50aa22ebc0d98c5e849ba0af82d0f32d248a1fba2e4201aa85a6117c2beae4d8bba9a0357caa7c1f39852601617728a44495963f2ce2199691be3182be67a7ab7473739a4d368dec429969661b97e307770ee9b0adad63be99c17fcfa719306a8bc50640b8101ddcbf9ec554dfc8a2da65d0f036ffb543defa71b66daefccb375abe54a361a4e68fd28f6532726f8eeb8b81708e0add9b31775d56edb6784154fcd9cf366f024f6d9a9ea81dfaa114ad7b6cbe2d7cb5ce03c7e493eb725cacb7e120069e98f4f084fc73ed01ffd225fa8ef35c488caaf772d3ec1fafd3275fed72c6e83b74c417ea749c1ffe270ae378ca78f42e0c727d68636cb6db1233631815be35d8a594c5dbeb91516f2c193ecf43e05a21d52091fe43ca59803fac84704171bcbace76d7ce4a02f608dbfbe3fa1ce1ad7c5107e3bf173b7492c3ca195ded8bf8c0ac9729c9aeaf45b4235e7e7b912eff6bccfa3566d67f396d131239f0863a94669ebaeebffb1167cf79ec0d019779cc425a0fa52a844462ba6e10a1fb68f55439c692182e92a11a75ec013947e91d5ab920b12b48dea5a35d71a4adb8c02e747531dd6896a267e7f5ad1b31ab93eb6b8400276bae6d967a139c7e2ba711e7ef6472df6e7e5a01709b542d2f4aea66fef93ff584f66a83d7a7e1c350467da422db875a801f3a422e2797f47c5f17baf1781119a9d8892677b6fa3a3eb59f3ef271fae37cac02f88e1b28d06b876d7c9d9744fb8c50f20ab591cce2f6259a1153f38bbd4db73776417f7c23412881e95d4cdd322555d9e58fa47a7fbde51993380fc8125aee52635a6b3c4f657cc3bc31750310bdf9f16080432f01cecf26b41ac0455958ba02772ebb3d073f5d7aa6f5c2a89f6574650c8d93b95dc5c8ab37af48ecd72edeb0aa45c33197b4e691ff35811cdf28a9edc423d8dc94acaebb5db8a8efae9d6de2480bbff455ac24c6a9df2223959c015821368f0edd86bd71992b23951e042b4c33ea5adc3e589078021dee19b5be68ef106f1f97206489093f09609d26845685cfb54a1770aedcc8ed322cb8238bf87d9130e4a0d9497838e7f1607a61874377314471570ee8ba215d6c6f26c9e7449196e40078d5884ca7731a368b348088c4e00cb564f1dd8418f759df9e832f21a4572614a6db11b3ee6924d211f51d99f1f9e4b7ae5df8885e0ec14582467abd5a083e6c9e9f687b3bf894d70ac9eba88b42d0ac5d6dd012b080d6efe0d6579c845bf76e67c17881ce3760c338806daf775b15698e9c57e1a959b40050d096461a243d088d4bf4a1718ac0e21945a8d659337846365a0f3eddbbc885a2251574ec1bb51fd12e45325f5b0f7ddd11549812c0f0b07b1bdf1d373ddc86333a48886faeee596a7e3ac186cc3be38032e450090a855c20d1674ea764f92a12c86f63fc292d27eec4296f0a3d62640a20ba2e606586dd00d284dc64a36cf188e50ff4d9f145e0f082b6faa110c2de4e954741460131382ea72073b2a66c5a2c102beb0b9c87ee78b4385a293bd2e1391fa26a64d27fbd09233a286de0e136ebbacda7c068afdef2ec1297c6517fbc29fef27db6e824673c0926d5f8d890d9d2961adeb340d49d8f53926b23037461ac2e8e8f13c5db7491a9eaf96b2c843ef65ed5469506ff8fe94c827075e2697d12aabee9a9748f7958f3c8b75ea300c3f2d63f9937d976a748042a36f2f77b0edefbdf17eb1bd6f227108bc0d9541db81c4286baa4a053aa0d41e48b55e686c95e6119f833b4721ff11f64cbc1bb4e57c2a9dbd2152de261f0cc7f23ac5f0ce9d8af3651ac08e8227c9be9ef18ea5f85f9a721125097f495bb8690f67590c701108c115c28c44b211e49132efcbeffdb940cfe3752b521c95993312ab3bc070a81b067b0bac1e69f5e279001475c688a04c51720fb94b72096529c73105e415b9872fd44d804da07ecdaa634f432c1a685104284139be99d3dc555ce48130f1b0d531fdebebff5388e6cd8ab637ce212e4dc4f33e739da8150a35cd96290fe953313f8c64079bdaeede1d4e17e3628ebc38d6718f1e8e12d18c06e03b0f27a0a8dde7fcadc0886d3141916dab7c8e65ce436976472e3893eb49f925af73a1756398af2fd15ba09e14765228de409e7d699f4a8341c70bdff6be6c1d656819e679d6a8034058d7418bc000a5cde75e4af0eed24226c6127b950c2ce484a28673d974d3f34d2404770b19ba3c7345116fa3c5815800b161eb69f590a99fb38a1800e795d0841d811419ac0e2d88eace619d3f01463d9e8e9d56387969a3ea9c073abbff378858171b7f21b2e00167c50c941a867d7361ee4ca89a2d54845b6110f3bcd52888645d317445e380875b46d3b2c393e2b7a46ad6decc7c602e6355e1c318746b40566f6e3a58bcbcaba44c7ea4f01bbb82fef57b09b00799b33fef351e9b50a1e0015501e373f9667dc40cb4da1a7bc320bb1a51527a7843add2b2a928b72c6aa2a4d571be79f99fd867b780eb40ed188041549f22dcad698704d86f98057dd52a8ace915f3339e1f7a5645903edc04b70e7c34bd1de636fd545983c3abee050f3d43544fcadb82a79c68e184801d08e4d426eb55b19526f8aeba1a745b565148347d360fd50424cb5549906429e94b7235243a020e1ae38e389b95bfc90941c06bc10a66704c77af849e2fb91accd2430f79172d3d8212a490de7e615652048f9b823f02149dd1d2064492a61c3a04a53ea70f2cab7688ecc47cbeeeec93e9f9ed60e50b957cc80e5e4fc063e249a74148bd868d3541fedb28fba05f5c4d4593bc09f6448b42356dcef4a578622c391db9eab28ee38c0dde7aeb5cd9a1c1867bf200e933820052e8b6c03d0e6fdba5ade405cfa7be4478fc8d8510ab22acd51101c1c337d301ab55ce98394986e86fcf3a8ada02d561364f12f561d26ebda7e1bf945049d634c1edc63ab668fa425378f2c78208ef5c357ae1b4be1a0f721b1d9ede0732bad4220b019590b469038a6eb8f17da1f697da7b4df3b12dcfaa1e5100aa3cf6021977c2041c4ba4aded2cae22937b5a293e95c2d8ecdcc6075a01a58456eac8c8e14a46f6a7d8bbb96bd20fa6ba38df5b1e36cc0aa8c4a01f7a42467d50e8aaed8d4e1698ab9691df01f6c3e1d73549932b1707b71ec26b22d6c12cc2ba7478a96442155879c5e107c4247cb1a0d480e7608a7a24df04e145b5b4c0638d01f7ec1c948293e8268812dfed00c19f6ed6fb4802391d15dd6f95b58fab13dae875338a0e3240546f60acdd64040059725f384d9dde53c2e922ff910670e58ba811416bc81290dd42027a2bf0b29264aa77f05a6e9f18f0cd41dbc0ed7dc64ae36aa78859bcf65ac37329e0fb1f33e8d035fd906c9359888e110b4755331aa20770d594b654d19283ef0ad3612dcd35675add3816cb1b87e0f692b2fd69f276e34536ace6312aba715ce40f3ed5cb70ac9c5defd9f800111c34110ab3078dddca0ee380ea8b169a0dee8a6bed786ab752f6c4d11c87b12e6a5f9b20c26285ec3da6960adb9ba6e6d7dd38f41ad0a6d9e7b2fbbb08d2f3d6da1b340c54c0fef1a3e81db93291beb786201b4a5af36772baad6e750859ff52d6131cfcd9da61a7ab0352c3576088de78bfb83df6d76999681eb63166372ee0b3cbaef271210df79efda16dba6bd2f93a4c4f39afc05b97198c9e4f4a43feecb7e4c400a7e2b37c982c784342256056ff3c1c816dd18296f2a2ae2085e6410706e51ffef1fde1f71fa436a8e63b2b92d115f97b1690bdf5a5dcd20be3c8493264f2adb1b421c11d7e3d8e9e25dc06d1f0da39e62af031747fd2a16c26c7e6e9d480cfff2dddb3d2a3667080fbdb8d91c585389b786cf90a7fc0a5befc377fc7c8dc98a9bcee22a7ae540f3c9320a3fcd2174dc7cfe4f6004767e42bccb38882addf3839999e2790a2b0934501fe7acb919486071cfa7b37d0ff0754863d3a8357a69b5d91d8434f1ca83abd8ba10496e4b61412bfbbb297f03e2f69ca0e7f4b4a9a957969b991dd121183f846beb1f3c2bb8fd36f22c1e277865d2be7df4ad7da800103f9124d5d8f06a833d2de2b2575c9c3b1016882215293757a7c603a3dc595f1ab2d80ac6b0b252cbd53c53bb067b3c28402f256535657f1d3873afd15b5d0a600ecfb1c6606e6489b1e73a68c35de1e9d6447866c956f98fc3e3ecdd312cb9a2763f13a14df265afb291c21a95cfd60ca1e61c68407a0f7dd1354631ca2d0cd8ece930e007b54545c12cdc903b7d2affad68a238a028c8d2608afa884f365c94a31c15ad9467e13ca5df76ef9de91ee770f640fd32c009f6c3d020f96ffa29f3a0ea9d84545b480f1e09cd84772e21189d5fc909546e17957443dcf6ef57fd6d67544a7f03d86490a0571f55729828fb04a0f93798f0ecd8bcb3a948b0ff6c8e3936d1464ca953f90bca696d1f7f5cb5cf76084070afd7bb18dd230023891c69d8c62102e25a557ccdb053fb2fd7dd2e882961a158ac25793f481a6ef7c15a533a510e9f550f7c5ac3e5a333861040955c0479336f2a53693de1d605d70f9dec58017c31f990db2db229e94cd102f4c07f9e6872db78e47dfe26a23288f7cfc51c7ff58e6283e49dd183fe734319b4ce41f8c88b3dd4e6037255c002ef66484641c98a7a1c8902ab3030e81985e2c4bf43b6236daabe7ea399243e04279ad901c54c237b23a9d809b48ca93d41c383e17a608b45805eb727c295f64a0230b8bce77f8a43fea561e0d77e73aa1864347a6ba6c44ef5722b116be8df3a33661bc284f71a035292253ce8a4605252096fde4de0fa5e463d1eac5cdf62aee7793525c353ab0a1af44ba0752916815b84da485583efa006d540f22db5a51894d93f63ba213742d270dba9d51a57569ab0ce8155667f2617bad23ac8c89310db8630802680da4233c9bd808710a42d52734abdf2e023816b20e872f3c5cdb596202da7988a6529253e34b9aa51d1b8bdb5100fe441e53af3e1912d01716549d05d89b38df3bf28f9a25e97eabcbe8360d1402e8aca2043c11608d68f1d0e29463f853afe57577150006e31356b4ed3c40d977af7d1a473e52327a94f0abe736a5e9c60dabb5082fad5948854af3621b72d20561589a82a6cb787c26bd206b2d06508e786715468a6d6aed0e0d2d86d13425d8cb8d5e45cd35c98f91d199dc05c8bfd00c8db754eb99e3c3ca61a63d9cd1891c2859c5d0f783299cfe4421005d948f231ac9002e3787b65f1493d1b17a0cdc43404b358c033bf49986d7e531846073f07c826acbbcf7ba3edf52235b290283bfff63ed15ae21b84c65daa20c7b67edd137423e305ebb0adb63347b0ed9d734ea5c10a2bbdd54aa76401c4c0d97a18185a60f2e13a3a603c6512b4b4eb5a2"], 0x10e8}, 0x400a004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="21000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x4802, 0x4) (async) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="0100000000000000000039000000080001007063690011000200303030303a30303a31302e300000000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x60}}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@can={{0x0, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "96ccd9f4c7b21421"}, 0x10}}, 0x44101) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x24, 0x0, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1.157865881s ago: executing program 2 (id=3150): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, 0x0, 0x46, 0x0, 0x1}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000001880)={&(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x3}}, 0x10, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.157157573s ago: executing program 4 (id=3151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r3 = socket(0x1d, 0x4, 0xfffffffe) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) shutdown(r3, 0x2) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40081}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.155804804s ago: executing program 2 (id=3152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="2e9b5b0007e03dd65193dfb6c575963f88a86067", 0x14}, {&(0x7f00000006c0)="cb4c", 0x2}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r2, 0x8b24, &(0x7f0000000040)) 1.155405025s ago: executing program 4 (id=3153): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, r0, 0x0) sendfile(r0, r0, 0x0, 0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.154470881s ago: executing program 2 (id=3154): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000006c0000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000e0000002000000000000000000000000000000003300000002000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000002000000ff020000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000000000000003000000000000000000000007000000000000000000000001"], 0x23c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r2, 0x4000, r3}, 0x18) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f00000000c0)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002100)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8) ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f0000002240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r5}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="f40400001f00000226bd7000fedbdf25ff020000000000000000000000000001000004d60a00ff00ffffffff000000000000000000000000ff000000ff340000ac004193908d0000000000000000000000000001fe8000000000000000000000000000bb4e2357bb4e21000f0a0040806c000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="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"], 0x4f4}, 0x1, 0x0, 0x0, 0x4}, 0x20048000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.151609333s ago: executing program 0 (id=3155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x30, 0x44, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b", 0x0, 0x3}, 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000480)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000010c0)={"1ac2e980de3d92f6be454c052b5a2acd", r2, r3, {0x1ff, 0xffffff01}, {0x2, 0x2}, 0xe, [0x2, 0x8000, 0x8, 0x3, 0x4, 0x4, 0xffffffff, 0xf1eb, 0x8, 0x9, 0x1000000000000000, 0x2, 0x8b63, 0xfa43, 0x0, 0xfff]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400090000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a891588d818a0afc0b3116a130974cac0615232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f84e4272d2cc72d4e771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de457f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5bfc182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456cd7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x30, 0x44, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b", 0x0, 0x3}, 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000480)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000010c0)={"1ac2e980de3d92f6be454c052b5a2acd", r5, r6, {0x1ff, 0xffffff01}, {0x2, 0x2}, 0xe, [0x2, 0x8000, 0x8, 0x3, 0x4, 0x4, 0xffffffff, 0xf1eb, 0x8, 0x9, 0x1000000000000000, 0x2, 0x8b63, 0xfa43, 0x0, 0xfff]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000380)={"a46bf903206a0cbf4c79b15b4f0a21b4", r3, r6, {0x5, 0x1}, {0x5, 0xffff}, 0xfffffffffffffffe, [0x9, 0x7f, 0x0, 0x7, 0x5, 0x2, 0x51cb, 0x3ff, 0x12c, 0x8, 0x1, 0x97, 0x5, 0x1e, 0x6cad, 0x8]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) 1.12208855s ago: executing program 4 (id=3157): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000540)="81c7e24fa5dde3a573b05fbf8fcae40302742cd6a4a1be390c5f8f8a66a48d629b62377417e5f7eeaa413affc0e2f552373804a4e52a18e998a88061ce183f8d5fce26c8ecdb2e76e573e084a9e8a479", 0x0, 0x0, 0xa}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0xffe0}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) unshare(0x22020600) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}, 0x7}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000008c0)="189287fce2", 0x5}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x4000005}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) unshare(0x2a020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r7, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r8, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) r12 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r12, &(0x7f0000000000), 0x10) 1.060022823s ago: executing program 0 (id=3158): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1000003}, 0x10) (async) write(r1, &(0x7f00000000c0)="2400000012005fe914f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000001f000100000000000000000006"], 0x18}], 0x1}, 0x0) 1.034285762s ago: executing program 3 (id=3159): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x25dfdbfd, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.027296793s ago: executing program 1 (id=3160): write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x0, 0x886c}, @void, @llc={@snap={0xab, 0x1, "97", "751404", 0x48ec, "a5d3b7218d033e3f024cbdfbe01d3ce7b6dc247a244956c3f5ed3b86362dfddad79a291fd1d4491e2bb63753925edfd72f71e02c7e20ec0fb41be4b277a4a3f825dddeef462938b82f43d0c5ca0e3598a49b459312018f78d6a8ae88f058a8a6782ff12d0c734ed5d0a5982391a1fd7773dad67f99a135147db0c0506e52be099d1c99751b39999dc99160ed19a419fdce33732648638724ef"}}}, 0xa5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x38}]}}}]}]}], {0x14}}, 0x74}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x0, 0x886c}, @void, @llc={@snap={0xab, 0x1, "97", "751404", 0x48ec, "a5d3b7218d033e3f024cbdfbe01d3ce7b6dc247a244956c3f5ed3b86362dfddad79a291fd1d4491e2bb63753925edfd72f71e02c7e20ec0fb41be4b277a4a3f825dddeef462938b82f43d0c5ca0e3598a49b459312018f78d6a8ae88f058a8a6782ff12d0c734ed5d0a5982391a1fd7773dad67f99a135147db0c0506e52be099d1c99751b39999dc99160ed19a419fdce33732648638724ef"}}}, 0xa5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x80003, 0xff) (async) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000000), 0x4) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x38}]}}}]}]}], {0x14}}, 0x74}}, 0x0) (async) 791.992593ms ago: executing program 3 (id=3161): r0 = socket$kcm(0x29, 0x3, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 788.049233ms ago: executing program 0 (id=3162): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'veth0\x00', &(0x7f0000000700)=@ethtool_channels={0x3d, 0x7fff, 0x0, 0x1, 0x408, 0x1, 0x9, 0x2, 0x33}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x44, r3, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x44}}, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000180)={'syzkaller0\x00', 0x5, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000005fc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}], 0x1, 0x800) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xd78a}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/15, 0xf}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32, @ANYBLOB="1400"], 0x48}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xa, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xf1, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, 0xf}, 0x94) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000080)={0x4d}) 729.027181ms ago: executing program 1 (id=3163): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x5, 0x3, 0x80000000, 0x9, 0x80000001}, 0x14) r1 = socket(0x10, 0x3, 0x0) unshare(0x20000400) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) write(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x8000, 0x2, 0x100, 0x0, 0x42010008}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x4, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0xa, 0x0, 0x2, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000140)='GPL\x00', 0x0, 0x76, &(0x7f0000000180)=""/118, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x9, 0xfff, 0x8}, 0x10, 0xffffffffffffffff, r6, 0x5, 0x0, &(0x7f00000002c0)=[{0x3, 0x1, 0x9, 0x2}, {0x4, 0x5, 0x7, 0xb}, {0x0, 0x5, 0x0, 0xa}, {0x1, 0x1, 0x10, 0x8}, {0x0, 0x2, 0x6}], 0x10, 0x2}, 0x94) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) writev(r7, &(0x7f0000000940)=[{&(0x7f0000000240)='g*', 0x2}], 0x1) r8 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) setsockopt(0xffffffffffffffff, 0x7, 0x57, &(0x7f0000000400)="ba5964679fec2c6b4db3809b2a04af51d99ffa380d2c5c02413cb371b0054b938e054a82928e8d5928f9be50c94a3c4454983cdf32c569016f025287d15f0c6ead6936cfbc00e27d1a5a55a801929a076121ec80594c1d94c32562c18c80e17b7f7442b11173d592d6a7d41b81829a9911529ec32973e15be505c520ab7862bdfb50967441ad3f2fe869b431bff125548b64478664b985174d6493d5b43c4e4674aedab070186022cf4f0d8ec9019561a7912107cf6e32a0c3c957401966c357368de9a31904da3f8daf0ef45c38f16c125ccf18773932", 0xd7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x8, &(0x7f00000001c0), &(0x7f0000006680)=0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x470bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000016}, 0x2000400c) 571.841392ms ago: executing program 3 (id=3164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681, 0x2000a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x20044002) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff"], 0x34}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0) socket$netlink(0x10, 0x3, 0x15) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) socket$packet(0x11, 0xa, 0x300) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 536.7131ms ago: executing program 1 (id=3165): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}]}, 0x50}}, 0x0) 519.017378ms ago: executing program 4 (id=3166): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/54, 0x36) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 451.853179ms ago: executing program 0 (id=3167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x1, 0xa, 0x40, 0x20, 0x0, 0x0, 0xee01}, {}, {0x4, 0x200, 0x0, 0x1}}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000000000000010000850200000000000000020000000000000000000000da0024107b35d0e9a17c2a3472acbd497d22d9eecb9c71c75b5c74441d6cfd33332c6ba1cb230ea061765707d2768c12e0dad9de2957832f41a65d71fc8969922f6f174be7148ae200ff554c800dd134195ce692a5db2763e4686c035a1a96daee68647212bb50b12c90ff18a9edfd233095ddeac1627d7a50d5bceab9101d004db88566275b233540"], &(0x7f0000000340)=""/142, 0x52, 0x2df8cb643540299b, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 439.606953ms ago: executing program 3 (id=3168): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{}, "9fcfb34bab6ccc4f", "bc0481f486479ef99f569c9ce26da9d7", "2f68dc6c", "415559ca07c12afe"}, 0x28) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000740)='highspeed\x00', 0xa) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000740)='highspeed\x00', 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40000041, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2ab2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600007842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x4, 0x29, 0xffffffffffffffa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x18, 0x0, 0x0) (async) r5 = socket(0x18, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in6=@local}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) 303.883029ms ago: executing program 0 (id=3169): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0xa, 0x1, 0x0) close(r1) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmmsg$inet_sctp(r1, &(0x7f00000019c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000008020000005b1f242e86de00b93f4b3685a06558d300000000"], 0x30}], 0x1, 0x0) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000031000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f90000714138977f0933f45d88ed634c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9957c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be2027fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc9062ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e788320949b76f7d32aca1bfea2aa62621b78dded30fc07171866bf1565f03aed8457f0c5387cac1b7de8bb28dc5c3508b1df61fcc1dfcba19240c4f23206eb91374bd1bbd022a764b043808d13f5fd7ca488cba788a4726e4627da4d42a6b6ccb1b0295a7488ef94c32dd2ec7c9194b7d0df29c6777fe5405f94348d60021ec6beb370c5f77e5f9a478a9329cff80de0305dbe3ab2bd601eb49b9e35050e4179f54211d5a3870d83ec6ce20de458b6558d4dd7d1f23391cfc7a3948cef78b229562140046a26e88bbbbe1ccdbb6bda419fadae724de84776ce7dac2581a6ebd0a050f1dc066d99adbcea7000ef2306f496561ec2ccf8b6426d6327194d46153624023bf2a16a62c733"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0884747e0ffff00124000631177fbac14fe16e000030a07070403fe80000000000000845013f2325f1a3901240b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x15, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ldst={0x0, 0x3, 0x6, 0xa, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x58}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x71, &(0x7f0000000200)=""/113, 0x1e00, 0x22, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xe, 0x8, 0x10001}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x2, 0x2, 0xf}, {0x2, 0x4, 0x5, 0xc}, {0x4, 0x4, 0x0, 0x61f87734c44dc610}], 0x10, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000700)='cachefiles_ondemand_copen\x00', r5}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0xe, &(0x7f0000000440)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd3}}, @alu={0x4, 0x0, 0x9, 0x6, 0x4, 0x2, 0xfffffffffffffffd}], &(0x7f00000004c0)='GPL\x00', 0x100, 0x0, &(0x7f0000000500), 0x100, 0x4a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x10, 0x310}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1, 0x1], &(0x7f0000000600)=[{0x2, 0x4, 0x4, 0xa}, {0x2, 0x5, 0x10, 0x2}], 0x10, 0x8000}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x19, &(0x7f0000000700)=@raw=[@alu={0x4, 0x1, 0x1, 0x7, 0x5, 0x18, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7a115ff9}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000800)='syzkaller\x00', 0x4, 0x29, &(0x7f0000000840)=""/41, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0xd, 0x5, 0x9c}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000900)=[{0x5, 0x4, 0x6}, {0x0, 0x1, 0x8, 0x7}, {0x1, 0x3, 0x8, 0x5}, {0x3, 0x1, 0x9, 0x7}], 0x10, 0xd}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newlink={0x78, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa452}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}]}]}, 0x78}}, 0x0) 227.89229ms ago: executing program 4 (id=3170): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) recvfrom$packet(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x0, &(0x7f0000001100)={0x11, 0xf6, r2, 0x1, 0x2a, 0x6, @multicast}, 0x14) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x180000000) pipe(&(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x74, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x40}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x11c7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x400}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x88000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x68, r5, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8b3f, 0x4a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x45}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x202}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31b}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r7 = syz_genetlink_get_family_id$team(&(0x7f00000014c0), r3) getsockname$packet(r0, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001540)=0x14) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000001580)={@private, @dev, 0x0}, &(0x7f00000015c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001900)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f0000001600)={0x288, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x3, 0x3c, 0x3, 0x7fff}, {0x1, 0x0, 0x9, 0x8}, {0x5, 0x10, 0x1c}, {0x8eea, 0x0, 0x2, 0x3}, {0x6, 0x4, 0x10, 0xa}, {0x5, 0x3, 0x5, 0x2}, {0x2, 0xe, 0x3, 0x4}, {0x1e1, 0x1, 0x1}, {0x9, 0x1, 0xa}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r9}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000019c0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001980)={0x0}, 0x1, 0x0, 0x0, 0x814}, 0x1) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000001a00)=0x400, 0x4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000001b80)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000001d00)={&(0x7f0000001a40), 0xc, &(0x7f0000001cc0)={&(0x7f0000001bc0)=@newsa={0xf8, 0x10, 0x100, 0x70bd27, 0x25dfdbfe, {{@in=@private=0xa010100, @in6=@local, 0x4e24, 0x10, 0x4e23, 0x401, 0x2, 0xa0, 0xa0, 0x3c, r2, r10}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x3c}, @in=@private=0xa010102, {0x800, 0x2, 0x8, 0x9, 0x4, 0x4, 0x3, 0x3b}, {0x96, 0xdec, 0x7fff, 0xfffffffffffffffe}, {0xfff, 0x3, 0x3}, 0x70bd29, 0x0, 0x2, 0x4, 0x5, 0x40}, [@tfcpad={0x8, 0x16, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d80), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x90, r11, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x38}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40411}, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001f00)={0xffffffffffffffff}) syz_80211_join_ibss(&(0x7f0000001f40)='wlan0\x00', &(0x7f0000001f80), 0x0, 0x2) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r13, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048040) bind(r12, &(0x7f00000020c0)=@nl=@unspec, 0x80) syz_80211_join_ibss(&(0x7f0000002140)='wlan0\x00', &(0x7f0000002180)=@default_ap_ssid, 0x6, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000021c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000023c0)={{r12}, r14, 0xa, @unused=[0x6, 0x6, 0x3, 0x16c], @subvolid=0x9e4}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003540)={r3, &(0x7f00000033c0)="8bf5f5b95230720a44bb3e1221f7921c1c59a39d4970bdd5d8fa622ae04a9a9ff976f3bf1cc15cca47a7d03b3170be45d2d40348c84df15cddfc64807e6944feaa1fd2978d8f1dca8fbb75aa0b6d7bfe38ad39901e6b463324911c76add245a9f413ba52708a884f1e945ba37104b120c5af2df3388d79f1416b4ab654d5226b3e432fdd3446505188447f4d40ac7e39447e35d2be31ceee784482954ca66fe040c0047a188d8743d59679921a1a404c4f100fa17d87a976327be76c6706fb901883cd02837b8e7ec1b222fa3b467d", &(0x7f00000034c0)=""/98}, 0x20) syz_80211_join_ibss(&(0x7f0000003580)='wlan1\x00', &(0x7f00000035c0)=@default_ap_ssid, 0x6, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r12, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x24, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000850}, 0x1) 175.509493ms ago: executing program 3 (id=3171): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="42060000000000"], 0x20}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="42060000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@newqdisc={0xfffffffffffffdc0, 0x24, 0x5820a61ca228651, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x7}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r9, {0x9}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) accept4(r3, 0x0, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.swap.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r11}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r11}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES64=r3, @ANYRES16=r2, @ANYBLOB="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"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x24004401}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socket$inet6(0xa, 0x5, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) 171.477221ms ago: executing program 1 (id=3172): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000760063310000000000000000a4fe72bc49a2b43c0400484d2f396d4cdeca5fea0000ef59af8aeccdd64ac1705a34dbe023437d09af5da6e71031a398489e49a9b894f1b0fd86260ab778fdd01ae8eea3cee9722caac8214c459dd77462f849211b058037470776d6293a7f2db1cb46"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x0, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x10000001, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x7, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x7d, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x401, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffb}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x5, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x7, 0x2, 0x5, 0x14d1, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000010401e20000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c0005800800250000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6}, 0x48) (async) setsockopt$sock_int(r4, 0x28, 0x2, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x4, 0x2, 0x2}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="378bfacb90af8c4536a0c80bb17c27614f5cf6dd32ed5a79b410bbcd0d7d014ab0abd33905b7ccd18b00690f282d8b36a9c0b0d5096e4994545b8fab86a7bc4a44690c21283f2ba4bd7f5feae543d3b713aec443f82b8a7058c469081460f5b7487c607610a8eb86fb277f42f0ef2ed085feeea5ea68f1fa23fdc8d74f849dfe38d8802cd5f355e1e8", 0x89}], 0x1, &(0x7f0000000340)=[{0x100, 0x107, 0x8, "07e8bb0f083b02d1a36e59a4a3f33d9e84f8a69d21b3987df9d86148bc2a9030e90a109a62be26f896975d54c8a360e02d4b5bf1a323ab127134f11123dc0ba8bcef87e61e465c1ac32bdb8c6c26979d98a21c7dcd0087b8f19cc8382b77cec8514aa6ae730f4b6d06d195f5dc3165eb4b798467857918e19e96dfbb26bcd1cacedeed33f0cfa16dc69f156f4070af0fccce4911650ab606412e6d351b9e58aba3c858b5662d3d626bd116fee8b4120744907190cf90afbecfeadb5eaad0a06c94a5a3c1eec74774d71e7f009956148635ee093eab6b73bf238a9c1f02a408df06bf5e5d40cfe8060e3131a9"}, {0x30, 0x29, 0x0, "9752f0051ccd757d9424d517776802f9914da81543e9128538"}], 0x130}, 0x40) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=3173): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r0, 0xc08ba000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0x4, 0x4) kernel console output (not intermixed with test programs): im netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.282366][ T71] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.316114][ T71] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.368450][ T9859] netlink: 'syz.1.1104': attribute type 1 has an invalid length. [ 167.410653][ T9868] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1106'. [ 167.417097][ T9859] netlink: 'syz.1.1104': attribute type 3 has an invalid length. [ 167.458170][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1108'. [ 167.479486][ T9859] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1104'. [ 167.558932][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1110'. [ 167.596574][ T9880] bond0: entered promiscuous mode [ 167.614198][ T9880] bond_slave_0: entered promiscuous mode [ 167.652126][ T9880] bond_slave_1: entered promiscuous mode [ 167.736667][ T9880] bond0: left promiscuous mode [ 167.743710][ T9880] bond_slave_0: left promiscuous mode [ 167.764570][ T9880] bond_slave_1: left promiscuous mode [ 167.892247][ T9895] tipc: Enabling of bearer rejected, failed to enable media [ 168.002607][ T9900] tipc: Enabling of bearer rejected, failed to enable media [ 168.049671][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 168.078749][ T9902] openvswitch: netlink: IPv4 tunnel dst address is zero [ 168.375001][ T9928] netlink: 'syz.4.1129': attribute type 10 has an invalid length. [ 168.443615][ T9928] team0: Port device dummy0 added [ 168.465275][ T9928] netlink: 'syz.4.1129': attribute type 10 has an invalid length. [ 168.483974][ T9930] wg1 speed is unknown, defaulting to 1000 [ 168.543252][ T9928] team0: Port device dummy0 removed [ 168.567485][ T9928] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 168.618762][ T9944] netlink: 'syz.0.1134': attribute type 1 has an invalid length. [ 168.695005][ T9945] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1134'. [ 168.729501][ T9952] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1134'. [ 168.878674][ T9960] syzkaller0: entered promiscuous mode [ 168.884997][ T9960] syzkaller0: entered allmulticast mode [ 169.027732][ T9968] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 169.065990][ T9968] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 169.296750][ T9982] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 169.320558][ T9983] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.402468][ T9982] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.425994][ T9986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.435577][ T9986] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 169.448319][ T9986] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 169.473611][ T9989] netlink: 'syz.3.1150': attribute type 2 has an invalid length. [ 169.492200][ T9982] gretap4: entered allmulticast mode [ 169.501297][ T9982] bond3: (slave gretap4): making interface the new active one [ 169.509729][ T9982] bond3: (slave gretap4): Enslaving as an active interface with an up link [ 170.429979][T10011] pimreg: entered allmulticast mode [ 170.445813][T10007] tipc: Enabling of bearer rejected, failed to enable media [ 170.461547][T10007] syzkaller1: entered promiscuous mode [ 170.467635][T10007] syzkaller1: entered allmulticast mode [ 170.889614][T10038] geneve2: entered promiscuous mode [ 170.895703][T10038] geneve2: entered allmulticast mode [ 170.919800][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 170.942322][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 170.999426][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 171.025095][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 171.047815][T10035] wg1 speed is unknown, defaulting to 1000 [ 171.058658][T10049] netlink: 'syz.1.1164': attribute type 10 has an invalid length. [ 171.082718][T10049] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.097460][T10049] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.105154][T10049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.118159][T10049] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.502391][T10062] netlink: 'syz.2.1167': attribute type 5 has an invalid length. [ 171.867541][T10076] __nla_validate_parse: 4 callbacks suppressed [ 171.867557][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 172.107062][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1176'. [ 172.207760][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 172.218007][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 172.234307][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 172.245794][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 172.487483][T10116] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1181'. [ 172.676033][T10125] lo: entered promiscuous mode [ 172.692169][T10125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.862031][T10137] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 172.892022][T10137] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1188'. [ 172.903918][T10137] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 172.931612][T10137] netlink: 'syz.3.1188': attribute type 2 has an invalid length. [ 172.966702][T10137] sctp: [Deprecated]: syz.3.1188 (pid 10137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.966702][T10137] Use struct sctp_sack_info instead [ 172.985424][T10137] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 172.993664][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 173.003630][T10137] netlink: 'syz.3.1188': attribute type 2 has an invalid length. [ 173.019726][T10141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1189'. [ 173.197607][T10149] syzkaller1: entered promiscuous mode [ 173.212432][T10149] syzkaller1: entered allmulticast mode [ 173.347575][T10163] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 173.478077][T10164] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 173.616332][T10174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.722981][T10181] netlink: 'syz.1.1202': attribute type 2 has an invalid length. [ 173.743192][T10181] nbd: must specify a device to reconfigure [ 174.133790][T10199] netlink: 'syz.0.1207': attribute type 1 has an invalid length. [ 174.281552][T10210] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.290504][T10210] bond3: (slave bond4): making interface the new active one [ 174.301497][T10210] bond3: (slave bond4): Enslaving as an active interface with an up link [ 174.497782][T10224] wg1 speed is unknown, defaulting to 1000 [ 174.695653][T10233] vlan2: entered allmulticast mode [ 174.701511][T10233] bridge0: entered allmulticast mode [ 174.995240][T10252] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 175.411356][T10276] bridge0: port 3(veth0_to_bridge) entered blocking state [ 175.424981][T10276] bridge0: port 3(veth0_to_bridge) entered disabled state [ 175.437961][T10276] veth0_to_bridge: entered allmulticast mode [ 175.446854][T10276] veth0_to_bridge: entered promiscuous mode [ 175.454112][T10276] bridge0: port 3(veth0_to_bridge) entered blocking state [ 175.461752][T10276] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 175.734013][T10288] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 175.753521][T10288] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 175.893127][T10295] netlink: 'syz.1.1235': attribute type 12 has an invalid length. [ 176.111196][T10307] bond0: (slave bridge0): Releasing backup interface [ 176.130045][T10307] bridge0: port 3(veth0_to_bridge) entered disabled state [ 176.138018][T10307] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.168246][T10307] bond0: (slave team0): Releasing backup interface [ 176.184729][T10307] veth0_to_bridge: left allmulticast mode [ 176.192354][T10307] veth0_to_bridge: left promiscuous mode [ 176.198627][T10307] bridge0: port 3(veth0_to_bridge) entered disabled state [ 176.209494][T10307] bridge_slave_0: left allmulticast mode [ 176.216325][T10307] bridge_slave_0: left promiscuous mode [ 176.223456][T10307] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.235132][T10307] bridge_slave_1: left allmulticast mode [ 176.241284][T10307] bridge_slave_1: left promiscuous mode [ 176.247248][T10307] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.259595][T10307] bond0: (slave bond_slave_0): Releasing backup interface [ 176.272467][T10307] bond0: (slave bond_slave_1): Releasing backup interface [ 176.287146][T10307] team0: Port device team_slave_0 removed [ 176.297180][T10307] team0: Port device team_slave_1 removed [ 176.675589][T10342] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 176.897044][T10356] __nla_validate_parse: 18 callbacks suppressed [ 176.897062][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 176.932261][T10356] openvswitch: netlink: Unknown nsh attribute 0 [ 176.939101][T10356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.076393][T10364] wg1 speed is unknown, defaulting to 1000 [ 177.256060][T10371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.318811][T10371] bond1: (slave veth7): Enslaving as an active interface with a down link [ 177.341234][T10371] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 177.382210][T10371] bond1: (slave veth9): Enslaving as an active interface with a down link [ 177.671350][T10384] veth0: entered promiscuous mode [ 177.983266][T10410] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 178.062318][T10414] validate_nla: 1 callbacks suppressed [ 178.062335][T10414] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 178.087546][T10412] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 178.165729][T10383] veth0: left promiscuous mode [ 178.175552][T10414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1266'. [ 178.181057][T10412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1266'. [ 178.252124][T10427] sctp: [Deprecated]: syz.0.1268 (pid 10427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.252124][T10427] Use struct sctp_sack_info instead [ 178.581832][T10452] delete_channel: no stack [ 178.599838][T10457] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1275'. [ 178.638954][T10450] delete_channel: no stack [ 178.771954][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'. [ 178.927835][T10467] bond5 (unregistering): Released all slaves [ 179.182404][T10492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1287'. [ 179.205571][T10492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1287'. [ 179.263636][T10496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1287'. [ 179.275055][T10495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1287'. [ 179.374991][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 179.590064][T10513] hsr0: entered promiscuous mode [ 179.795897][T10523] macvlan0: entered promiscuous mode [ 179.804503][T10523] macvlan0: entered allmulticast mode [ 179.811638][T10523] bond2: entered promiscuous mode [ 179.817450][T10523] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 179.827394][T10523] bond2: left promiscuous mode [ 180.102603][T10539] netlink: 'syz.1.1301': attribute type 1 has an invalid length. [ 180.114272][T10537] tipc: Started in network mode [ 180.119312][T10537] tipc: Node identity fe27236d13e1, cluster identity 4711 [ 180.127148][T10537] tipc: Enabled bearer , priority 0 [ 180.185399][T10537] syzkaller0: entered promiscuous mode [ 180.197107][T10537] syzkaller0: entered allmulticast mode [ 180.229312][T10537] tipc: Resetting bearer [ 180.279053][T10535] tipc: Resetting bearer [ 180.348101][T10535] tipc: Disabling bearer [ 180.386161][T10557] netlink: 'syz.1.1306': attribute type 2 has an invalid length. [ 180.811200][T10580] vlan1: entered allmulticast mode [ 180.816705][T10580] bridge0: entered allmulticast mode [ 180.834415][T10580] bridge6: port 1(vlan1) entered blocking state [ 180.845537][T10580] bridge6: port 1(vlan1) entered disabled state [ 180.871350][T10580] vlan1: entered promiscuous mode [ 180.893016][T10580] bridge0: entered promiscuous mode [ 180.929108][T10594] netlink: 'syz.0.1320': attribute type 1 has an invalid length. [ 181.045040][T10594] bond5 (unregistering): Released all slaves [ 181.314547][T10622] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 181.490662][T10639] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 181.534565][T10646] netlink: 'syz.1.1333': attribute type 1 has an invalid length. [ 181.635880][T10653] gretap0: entered promiscuous mode [ 181.661058][T10656] tipc: New replicast peer: 255.255.255.255 [ 181.669475][T10656] tipc: Enabled bearer , priority 10 [ 181.677251][T10657] syz.2.1339 uses old SIOCAX25GETINFO [ 181.677847][T10658] 0{X: renamed from gretap0 [ 181.709783][T10658] 0{X: left promiscuous mode [ 181.729758][T10658] 0{X: entered allmulticast mode [ 181.744844][T10658] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 182.104532][T10692] __nla_validate_parse: 28 callbacks suppressed [ 182.104551][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 182.370043][T10707] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1350'. [ 182.538282][ T51] block nbd1: Receive control failed (result -32) [ 182.780823][ T982] tipc: Node number set to 3989185389 [ 182.827913][T10739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.866974][T10741] bridge4: entered promiscuous mode [ 182.872998][T10741] bridge4: entered allmulticast mode [ 182.932219][T10745] netlink: 'syz.4.1363': attribute type 3 has an invalid length. [ 182.941759][T10745] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.1363'. [ 182.954409][T10748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1365'. [ 182.972512][T10746] xt_time: unknown flags 0xf4 [ 183.188766][T10762] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 183.375080][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1373'. [ 183.392016][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1373'. [ 183.401604][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1373'. [ 183.410769][T10784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1376'. [ 183.410795][T10784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1376'. [ 183.431823][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1373'. [ 184.383754][T10852] wg1 speed is unknown, defaulting to 1000 [ 184.918266][T10882] bridge0: port 1(bridge_slave_0) entered learning state [ 185.035491][T10893] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 185.286602][T10907] netlink: 'syz.3.1411': attribute type 12 has an invalid length. [ 185.446016][T10924] lo: left promiscuous mode [ 185.451771][T10924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.063455][T10958] wg1 speed is unknown, defaulting to 1000 [ 186.119916][T10961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.320245][T10971] tipc: Enabled bearer , priority 0 [ 186.354625][T10969] syzkaller0: entered promiscuous mode [ 186.360623][T10969] syzkaller0: entered allmulticast mode [ 186.391330][T10975] tipc: Trying to set illegal importance in message [ 186.397874][T10969] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 186.489987][T10984] pim6reg: entered allmulticast mode [ 186.526761][T10986] pim6reg: left allmulticast mode [ 186.543500][T10988] netlink: 'syz.3.1436': attribute type 1 has an invalid length. [ 186.585361][T10971] tipc: Resetting bearer [ 186.664585][T10984] pim6reg: entered allmulticast mode [ 186.715659][T10988] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.745564][T10992] vlan2: entered promiscuous mode [ 186.795125][T10996] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.815054][T10996] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 186.827479][T10996] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 186.852898][T10986] pim6reg: left allmulticast mode [ 186.892205][T10984] pim6reg: entered allmulticast mode [ 186.926136][T10968] tipc: Resetting bearer [ 186.960291][T11011] sctp: [Deprecated]: syz.0.1440 (pid 11011) Use of int in maxseg socket option. [ 186.960291][T11011] Use struct sctp_assoc_value instead [ 186.989879][T10968] tipc: Disabling bearer [ 187.085586][T10986] pim6reg: left allmulticast mode [ 187.113000][ T5874] Bluetooth: hci0: command 0x0401 tx timeout [ 187.347343][T11030] __nla_validate_parse: 25 callbacks suppressed [ 187.347362][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1445'. [ 187.440570][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 187.565160][T11042] netlink: 14504 bytes leftover after parsing attributes in process `syz.2.1449'. [ 187.641628][T11039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1448'. [ 187.654667][T11039] netlink: 4704 bytes leftover after parsing attributes in process `syz.4.1448'. [ 187.749074][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1451'. [ 187.799417][T11051] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 187.812625][T11052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1451'. [ 187.835830][T11051] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 187.840493][T11049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1451'. [ 187.855132][T11051] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 187.968009][T11059] batadv_slave_0: entered allmulticast mode [ 188.012052][T11058] macvlan2: entered promiscuous mode [ 188.026593][T11058] macvlan2: entered allmulticast mode [ 188.039475][T11058] veth1_to_bond: entered promiscuous mode [ 188.058707][T11058] veth1_to_bond: entered allmulticast mode [ 188.073898][T11058] team0: Port device macvlan2 added [ 188.117596][T11067] netlink: 'syz.2.1457': attribute type 1 has an invalid length. [ 188.131820][T11062] bridge5: entered promiscuous mode [ 188.150065][T11062] bridge5: entered allmulticast mode [ 188.174687][T11057] batadv_slave_0: left allmulticast mode [ 188.569404][T11083] unsupported nla_type 52263 [ 188.576336][T11083] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1464'. [ 189.165883][T11124] netlink: 'syz.3.1475': attribute type 23 has an invalid length. [ 189.349432][T11133] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 189.369320][T11133] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 189.400933][T11139] netlink: 'syz.4.1480': attribute type 3 has an invalid length. [ 189.409377][T11139] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1480'. [ 189.472168][T11143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1483'. [ 189.745275][T11164] tipc: Enabling of bearer rejected, failed to enable media [ 189.885537][T11171] syzkaller0: entered promiscuous mode [ 189.902932][T11171] syzkaller0: entered allmulticast mode [ 190.227265][T11184] macvtap1: entered promiscuous mode [ 190.249640][T11184] macvtap1: entered allmulticast mode [ 190.467986][T11206] netlink: 'syz.0.1505': attribute type 83 has an invalid length. [ 190.478263][ T5874] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 190.484824][ T5185] Bluetooth: hci0: command 0x0401 tx timeout [ 190.686976][T11218] netlink: 'syz.2.1511': attribute type 12 has an invalid length. [ 190.709199][T11221] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDR3p(@O>ZRaGͽӓp' [ 190.767544][T11221] CPU: 1 UID: 0 PID: 11221 Comm: syz.3.1515 Not tainted syzkaller #0 PREEMPT(full) [ 190.767567][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.767576][T11221] Call Trace: [ 190.767583][T11221] [ 190.767590][T11221] dump_stack_lvl+0x189/0x250 [ 190.767618][T11221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.767637][T11221] ? __pfx__printk+0x10/0x10 [ 190.767665][T11221] ? kernfs_path_from_node+0x2f/0x290 [ 190.767683][T11221] ? kernfs_path_from_node+0x250/0x290 [ 190.767706][T11221] ? kernfs_path_from_node+0x2f/0x290 [ 190.767723][T11221] sysfs_warn_dup+0x8e/0xa0 [ 190.767736][T11221] sysfs_do_create_link_sd+0xc0/0x110 [ 190.767757][T11221] device_add_class_symlinks+0x1cf/0x240 [ 190.767780][T11221] device_add+0x475/0xb50 [ 190.767802][T11221] wiphy_register+0x1ba6/0x28d0 [ 190.767840][T11221] ? __pfx_wiphy_register+0x10/0x10 [ 190.767859][T11221] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 190.767885][T11221] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 190.767906][T11221] ieee80211_register_hw+0x3484/0x4100 [ 190.767940][T11221] ? ieee80211_register_hw+0x14d1/0x4100 [ 190.767972][T11221] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 190.767992][T11221] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 190.768020][T11221] ? __hrtimer_setup+0x187/0x210 [ 190.768033][T11221] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 190.768057][T11221] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 190.768106][T11221] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 190.768123][T11221] ? trace_kmalloc+0x1f/0xd0 [ 190.768140][T11221] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 190.768159][T11221] ? kstrndup+0xbf/0x160 [ 190.768187][T11221] hwsim_new_radio_nl+0xea4/0x1b10 [ 190.768210][T11221] ? __pfx___nla_validate_parse+0x10/0x10 [ 190.768247][T11221] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.768280][T11221] ? __nla_parse+0x40/0x60 [ 190.768304][T11221] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 190.768331][T11221] genl_family_rcv_msg_doit+0x212/0x300 [ 190.768356][T11221] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.768389][T11221] ? bpf_lsm_capable+0x9/0x20 [ 190.768407][T11221] ? security_capable+0x7e/0x2e0 [ 190.768434][T11221] genl_rcv_msg+0x60e/0x790 [ 190.768459][T11221] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.768475][T11221] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.768509][T11221] netlink_rcv_skb+0x208/0x470 [ 190.768530][T11221] ? __lock_acquire+0xab9/0xd20 [ 190.768551][T11221] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.768571][T11221] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.768613][T11221] ? down_read+0x1ad/0x2e0 [ 190.768633][T11221] genl_rcv+0x28/0x40 [ 190.768649][T11221] netlink_unicast+0x82f/0x9e0 [ 190.768682][T11221] ? __pfx_netlink_unicast+0x10/0x10 [ 190.768715][T11221] ? netlink_sendmsg+0x642/0xb30 [ 190.768729][T11221] ? skb_put+0x11b/0x210 [ 190.768751][T11221] netlink_sendmsg+0x805/0xb30 [ 190.768775][T11221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.768795][T11221] ? aa_sock_msg_perm+0xf1/0x1d0 [ 190.768813][T11221] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.768828][T11221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.768844][T11221] __sock_sendmsg+0x219/0x270 [ 190.768869][T11221] ____sys_sendmsg+0x505/0x830 [ 190.768895][T11221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.768925][T11221] ? import_iovec+0x74/0xa0 [ 190.768949][T11221] ___sys_sendmsg+0x21f/0x2a0 [ 190.768970][T11221] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.769031][T11221] ? __fget_files+0x2a/0x420 [ 190.769052][T11221] ? __fget_files+0x3a0/0x420 [ 190.769087][T11221] __x64_sys_sendmsg+0x19b/0x260 [ 190.769109][T11221] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.769139][T11221] ? do_user_addr_fault+0xc8a/0x1390 [ 190.769169][T11221] ? do_syscall_64+0xbe/0x3b0 [ 190.769188][T11221] do_syscall_64+0xfa/0x3b0 [ 190.769202][T11221] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.769224][T11221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.769241][T11221] ? clear_bhb_loop+0x60/0xb0 [ 190.769262][T11221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.769278][T11221] RIP: 0033:0x7fef8ad8ebe9 [ 190.769295][T11221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.769308][T11221] RSP: 002b:00007fef8bbc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.769337][T11221] RAX: ffffffffffffffda RBX: 00007fef8afc6090 RCX: 00007fef8ad8ebe9 [ 190.769350][T11221] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 190.769360][T11221] RBP: 00007fef8ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 190.769370][T11221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.769380][T11221] R13: 00007fef8afc6128 R14: 00007fef8afc6090 R15: 00007ffe52393cb8 [ 190.769412][T11221] [ 190.776515][ T982] IPVS: starting estimator thread 0... [ 191.266545][T11237] tipc: Enabled bearer , priority 10 [ 191.360461][T11235] IPVS: using max 29 ests per chain, 69600 per kthread [ 191.387274][T11249] netlink: ct family unspecified [ 191.402544][T11249] openvswitch: netlink: Actions may not be safe on all matching packets [ 191.710008][T11268] netlink: 'syz.4.1526': attribute type 1 has an invalid length. [ 191.714719][T11266] sctp: [Deprecated]: syz.1.1524 (pid 11266) Use of int in maxseg socket option. [ 191.714719][T11266] Use struct sctp_assoc_value instead [ 192.077863][T11288] tipc: Started in network mode [ 192.085966][T11288] tipc: Node identity , cluster identity 4711 [ 192.092537][T11288] tipc: Failed to obtain node identity [ 192.098418][T11288] tipc: Enabling of bearer rejected, failed to enable media [ 192.149908][T11286] syzkaller0: entered promiscuous mode [ 192.156018][T11286] syzkaller0: entered allmulticast mode [ 192.264155][ T7786] tipc: Node number set to 1586694587 [ 192.474955][ T5185] Bluetooth: hci4: command 0x0405 tx timeout [ 192.527679][T11306] __nla_validate_parse: 9 callbacks suppressed [ 192.527696][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1537'. [ 193.748336][T11324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1542'. [ 193.824111][T11326] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1543'. [ 194.139766][T11315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1539'. [ 194.154120][T11327] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1543'. [ 194.269935][T11333] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 194.321196][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.499428][T11348] netlink: 'syz.2.1549': attribute type 10 has an invalid length. [ 194.523320][T11351] netlink: 'syz.1.1547': attribute type 2 has an invalid length. [ 194.535653][T11351] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1547'. [ 194.561473][T11348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1549'. [ 194.622789][T11348] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 194.669107][T11357] netlink: 'syz.3.1551': attribute type 4 has an invalid length. [ 194.719511][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 194.815399][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'. [ 194.849981][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'. [ 194.866774][T11372] netlink: 'syz.1.1555': attribute type 11 has an invalid length. [ 194.875578][T11372] netlink: 'syz.1.1555': attribute type 4 has an invalid length. [ 195.184977][T11392] netlink: 'syz.2.1559': attribute type 3 has an invalid length. [ 195.201549][T11392] netlink: 'syz.2.1559': attribute type 3 has an invalid length. [ 195.348612][ T7787] hid (null): unknown global tag 0xe [ 195.358231][ T7787] hid (null): nested delimiters [ 195.370207][ T7787] hid (null): invalid report_size 25464 [ 195.447108][ T7787] hid (null): invalid report_size 29289 [ 195.497500][ T7787] hid (null): invalid report_size 24948 [ 195.601197][T11424] pim6reg1: entered promiscuous mode [ 195.606725][T11424] pim6reg1: entered allmulticast mode [ 195.709881][T11430] raw_sendmsg: syz.3.1569 forgot to set AF_INET. Fix it! [ 195.718338][T11437] netlink: 'syz.0.1570': attribute type 10 has an invalid length. [ 195.817709][T11437] team0: Device veth1_macvtap failed to register rx_handler [ 196.315623][T11474] netlink: 'syz.2.1582': attribute type 4 has an invalid length. [ 196.362108][T11475] netlink: 'syz.2.1582': attribute type 4 has an invalid length. [ 196.688652][T11494] netlink: 'syz.3.1588': attribute type 13 has an invalid length. [ 196.710078][T11494] netlink: 'syz.3.1588': attribute type 13 has an invalid length. [ 197.155322][ T7787] hid-generic 0005:0D45:1012.0002: unknown global tag 0xe [ 197.178858][ T7787] hid-generic 0005:0D45:1012.0002: item 0 2 1 14 parsing failed [ 197.198990][ T7787] hid-generic 0005:0D45:1012.0002: probe with driver hid-generic failed with error -22 [ 197.473439][T11544] netlink: 'syz.2.1603': attribute type 23 has an invalid length. [ 197.482443][T11548] sctp: [Deprecated]: syz.3.1604 (pid 11548) Use of int in max_burst socket option deprecated. [ 197.482443][T11548] Use struct sctp_assoc_value instead [ 198.601992][T11557] __nla_validate_parse: 12 callbacks suppressed [ 198.602010][T11557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1607'. [ 198.618817][T11557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1607'. [ 198.696749][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1610'. [ 198.716553][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1610'. [ 198.835951][T11574] syzkaller0: entered promiscuous mode [ 198.850530][T11574] syzkaller0: entered allmulticast mode [ 199.932166][T11598] bond1: (slave veth0_to_bond): Releasing active interface [ 200.038353][T11598] bond1: (slave veth7): Releasing active interface [ 200.058408][T11598] bond1: (slave veth7): the permanent HWaddr of slave - 2a:97:fb:ff:c1:98 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 200.089144][T11598] bond1: (slave veth9): Releasing active interface [ 200.107416][T11599] team0: Mode changed to "roundrobin" [ 200.116936][T11615] netlink: 'syz.4.1626': attribute type 12 has an invalid length. [ 200.127823][T11615] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1626'. [ 200.181096][T11611] wg1: entered promiscuous mode [ 200.186087][T11611] wg1: entered allmulticast mode [ 200.244991][T11622] tipc: Enabling of bearer rejected, already enabled [ 200.254146][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1627'. [ 200.383381][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 200.413875][T11639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.421255][T11639] IPv6: NLM_F_CREATE should be set when creating new route [ 200.428670][T11639] IPv6: NLM_F_CREATE should be set when creating new route [ 200.436793][T11639] IPv6: NLM_F_CREATE should be set when creating new route [ 200.451330][T11639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.572934][T11645] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.732242][T11654] netlink: 'syz.4.1636': attribute type 10 has an invalid length. [ 200.742293][ T71] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.743777][T11654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1636'. [ 200.753123][ T71] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.770106][T11661] netlink: 'syz.3.1639': attribute type 5 has an invalid length. [ 200.778750][T11654] batadv0: entered promiscuous mode [ 200.784796][T11654] batadv0: entered allmulticast mode [ 200.792257][T11654] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 200.809566][ T71] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.832750][ T3547] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.947474][T11669] netlink: 'syz.3.1642': attribute type 29 has an invalid length. [ 200.986106][T11670] netlink: 'syz.3.1642': attribute type 29 has an invalid length. [ 201.015635][T11674] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.032223][T11669] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1642'. [ 201.195197][T11684] dvmrp0: entered allmulticast mode [ 201.361570][T11694] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1647'. [ 201.437727][T11706] netlink: 'syz.2.1651': attribute type 2 has an invalid length. [ 201.512277][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 201.513830][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 201.518473][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 201.525962][ T5868] Bluetooth: hci0: command 0x0401 tx timeout [ 201.716416][T11719] team0: Device gtp0 is of different type [ 201.775402][T11724] lo speed is unknown, defaulting to 1000 [ 201.829612][T11725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.887143][T11724] lo speed is unknown, defaulting to 1000 [ 201.895997][T11724] lo speed is unknown, defaulting to 1000 [ 201.904888][T11732] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 202.245075][ T7781] lo speed is unknown, defaulting to 1000 [ 202.248917][T11724] infiniband syz0: set active [ 202.255980][T11724] infiniband syz0: added lo [ 202.290015][T11724] RDS/IB: syz0: added [ 202.296130][T11724] smc: adding ib device syz0 with port count 1 [ 202.302950][T11724] smc: ib device syz0 port 1 has pnetid [ 202.311496][ T7787] lo speed is unknown, defaulting to 1000 [ 202.319594][T11724] lo speed is unknown, defaulting to 1000 [ 202.595632][T11724] lo speed is unknown, defaulting to 1000 [ 202.859407][T11760] 8021q: adding VLAN 0 to HW filter on device bond6 [ 202.928341][T11724] lo speed is unknown, defaulting to 1000 [ 203.293196][T11724] lo speed is unknown, defaulting to 1000 [ 203.308317][T11784] netlink: 'syz.3.1675': attribute type 1 has an invalid length. [ 203.318331][T11784] netlink: 'syz.3.1675': attribute type 2 has an invalid length. [ 203.448015][T11788] tipc: Enabled bearer , priority 0 [ 203.482790][T11788] syzkaller0: entered promiscuous mode [ 203.488615][T11788] syzkaller0: entered allmulticast mode [ 203.688741][T11787] tipc: Resetting bearer [ 203.717140][T11787] tipc: Disabling bearer [ 203.961011][T11724] lo speed is unknown, defaulting to 1000 [ 204.017589][T11817] __nla_validate_parse: 6 callbacks suppressed [ 204.017606][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 204.657975][T11855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1696'. [ 204.711338][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 204.740933][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 204.836387][T11871] openvswitch: netlink: Key type 85 is out of range max 32 [ 204.865357][T11863] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1699'. [ 204.873388][T11855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1696'. [ 204.920148][T11872] pim6reg1: entered promiscuous mode [ 204.943891][T11872] pim6reg1: entered allmulticast mode [ 205.054899][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'. [ 205.073280][T11882] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 205.085775][T11855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1696'. [ 205.125116][T11872] net veth1_virt_wifi .: renamed from virt_wifi0 [ 205.288636][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1706'. [ 205.306343][T11855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1696'. [ 205.844076][T11931] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 205.968047][T11936] veth5: entered allmulticast mode [ 207.207620][T11977] netlink: 'syz.1.1725': attribute type 15 has an invalid length. [ 255.753428][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.097295][T11994] __nla_validate_parse: 6 callbacks suppressed [ 262.097312][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1732'. [ 262.119632][T11992] netlink: 'syz.0.1730': attribute type 1 has an invalid length. [ 262.141863][T11992] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1730'. [ 262.162186][T11992] netlink: 'syz.0.1730': attribute type 1 has an invalid length. [ 262.174052][T11998] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.1735'. [ 262.277927][T12005] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1736'. [ 262.425127][T12015] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 262.489191][T12019] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1740'. [ 262.643839][T12033] nbd: must specify a device to reconfigure [ 262.904506][T12042] syzkaller0: entered promiscuous mode [ 262.910139][T12042] syzkaller0: entered allmulticast mode [ 263.058403][T12057] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1751'. [ 263.122663][T12057] tipc: Enabling of bearer rejected, failed to enable media [ 263.296294][T12074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1755'. [ 263.311400][T12078] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1755'. [ 263.328569][T12080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1756'. [ 263.547762][T12094] netlink: del zone limit has 4 unknown bytes [ 263.886427][T12117] netlink: 'syz.1.1769': attribute type 1 has an invalid length. [ 263.903356][T12118] netlink: 'syz.1.1769': attribute type 1 has an invalid length. [ 263.955438][T12117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.063838][T12141] ip6gre0: Master is either lo or non-ether device [ 264.203701][T12150] IPVS: Scheduler module ip_vs_sip not found [ 264.486979][T12169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1784'. [ 264.657179][T12185] wg2: entered promiscuous mode [ 264.663404][T12185] wg2: entered allmulticast mode [ 264.857029][T12197] syzkaller0: entered promiscuous mode [ 264.870481][T12197] syzkaller0: entered allmulticast mode [ 265.202930][T12221] chnl_net:caif_netlink_parms(): no params data found [ 265.207934][T12207] syz.2.1796: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 265.238708][T12207] CPU: 1 UID: 0 PID: 12207 Comm: syz.2.1796 Not tainted syzkaller #0 PREEMPT(full) [ 265.238730][T12207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.238753][T12207] Call Trace: [ 265.238760][T12207] [ 265.238768][T12207] dump_stack_lvl+0x189/0x250 [ 265.238794][T12207] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 265.238818][T12207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.238836][T12207] ? __pfx__printk+0x10/0x10 [ 265.238857][T12207] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 265.238876][T12207] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 265.238903][T12207] warn_alloc+0x214/0x310 [ 265.238932][T12207] ? __pfx_warn_alloc+0x10/0x10 [ 265.238963][T12207] ? __get_vm_area_node+0x28f/0x300 [ 265.238985][T12207] ? hash_ipmac_create+0x358/0xfe0 [ 265.239008][T12207] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 265.239028][T12207] ? do_syscall_64+0xfa/0x3b0 [ 265.239074][T12207] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 265.239102][T12207] ? rcu_is_watching+0x15/0xb0 [ 265.239120][T12207] ? hash_ipmac_create+0x358/0xfe0 [ 265.239136][T12207] ? hash_ipmac_create+0x358/0xfe0 [ 265.239152][T12207] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 265.239175][T12207] ? hash_ipmac_create+0x358/0xfe0 [ 265.239194][T12207] ? hash_ipmac_create+0x2fe/0xfe0 [ 265.239222][T12207] hash_ipmac_create+0x358/0xfe0 [ 265.239250][T12207] ? __nla_parse+0x40/0x60 [ 265.239273][T12207] ? __pfx_hash_ipmac_create+0x10/0x10 [ 265.239293][T12207] ip_set_create+0xa97/0x1940 [ 265.239315][T12207] ? ip_set_create+0x4a2/0x1940 [ 265.239344][T12207] ? __pfx_ip_set_create+0x10/0x10 [ 265.239396][T12207] nfnetlink_rcv_msg+0xb4d/0x1130 [ 265.239418][T12207] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 265.239457][T12207] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 265.239474][T12207] ? kasan_save_free_info+0x46/0x50 [ 265.239542][T12207] netlink_rcv_skb+0x208/0x470 [ 265.239566][T12207] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 265.239589][T12207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.239624][T12207] ? bpf_lsm_capable+0x9/0x20 [ 265.239643][T12207] ? security_capable+0x7e/0x2e0 [ 265.239673][T12207] nfnetlink_rcv+0x26a/0x2520 [ 265.239698][T12207] ? __dev_queue_xmit+0x1d79/0x3b50 [ 265.239726][T12207] ? __dev_queue_xmit+0x27b/0x3b50 [ 265.239756][T12207] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 265.239775][T12207] ? __pfx___dev_queue_xmit+0x10/0x10 [ 265.239807][T12207] ? ref_tracker_free+0x63a/0x7d0 [ 265.239829][T12207] ? __asan_memcpy+0x40/0x70 [ 265.239846][T12207] ? __pfx_ref_tracker_free+0x10/0x10 [ 265.239884][T12207] ? skb_clone+0x246/0x3a0 [ 265.239904][T12207] ? __netlink_deliver_tap+0x807/0x850 [ 265.239926][T12207] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.239955][T12207] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.239984][T12207] netlink_unicast+0x82f/0x9e0 [ 265.240014][T12207] ? __pfx_netlink_unicast+0x10/0x10 [ 265.240037][T12207] ? netlink_sendmsg+0x642/0xb30 [ 265.240050][T12207] ? skb_put+0x11b/0x210 [ 265.240070][T12207] netlink_sendmsg+0x805/0xb30 [ 265.240097][T12207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.240116][T12207] ? aa_sock_msg_perm+0xf1/0x1d0 [ 265.240135][T12207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.240152][T12207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.240169][T12207] __sock_sendmsg+0x219/0x270 [ 265.240193][T12207] ____sys_sendmsg+0x505/0x830 [ 265.240225][T12207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.240252][T12207] ? import_iovec+0x74/0xa0 [ 265.240274][T12207] ___sys_sendmsg+0x21f/0x2a0 [ 265.240293][T12207] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.240347][T12207] ? __fget_files+0x2a/0x420 [ 265.240367][T12207] ? __fget_files+0x3a0/0x420 [ 265.240398][T12207] __x64_sys_sendmsg+0x19b/0x260 [ 265.240418][T12207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.240448][T12207] ? rcu_is_watching+0x15/0xb0 [ 265.240470][T12207] ? do_syscall_64+0xbe/0x3b0 [ 265.240490][T12207] do_syscall_64+0xfa/0x3b0 [ 265.240504][T12207] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.240525][T12207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.240541][T12207] ? clear_bhb_loop+0x60/0xb0 [ 265.240562][T12207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.240579][T12207] RIP: 0033:0x7f848ef8ebe9 [ 265.240593][T12207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.240607][T12207] RSP: 002b:00007f848fdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.240626][T12207] RAX: ffffffffffffffda RBX: 00007f848f1c5fa0 RCX: 00007f848ef8ebe9 [ 265.240638][T12207] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 265.240649][T12207] RBP: 00007f848f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 265.240658][T12207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.240669][T12207] R13: 00007f848f1c6038 R14: 00007f848f1c5fa0 R15: 00007ffdf1d47258 [ 265.240699][T12207] [ 265.724598][T12207] Mem-Info: [ 265.727760][T12207] active_anon:5253 inactive_anon:0 isolated_anon:0 [ 265.727760][T12207] active_file:2884 inactive_file:39910 isolated_file:0 [ 265.727760][T12207] unevictable:768 dirty:53 writeback:0 [ 265.727760][T12207] slab_reclaimable:11446 slab_unreclaimable:108410 [ 265.727760][T12207] mapped:28855 shmem:1363 pagetables:979 [ 265.727760][T12207] sec_pagetables:0 bounce:0 [ 265.727760][T12207] kernel_misc_reclaimable:0 [ 265.727760][T12207] free:1313936 free_pcp:15510 free_cma:0 [ 265.783154][T12207] Node 0 active_anon:21012kB inactive_anon:0kB active_file:11536kB inactive_file:159436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115420kB dirty:212kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12544kB pagetables:3776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.816133][T12207] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.848109][T12207] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.881069][T12207] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 265.887545][T12207] Node 0 DMA32 free:1357272kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21064kB inactive_anon:0kB active_file:11536kB inactive_file:157848kB unevictable:1536kB writepending:212kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:42648kB local_pcp:22792kB free_cma:0kB [ 265.921646][T12207] lowmem_reserve[]: 0 0 1 1 1 [ 265.926431][T12207] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 265.977155][T12207] lowmem_reserve[]: 0 0 0 0 0 [ 266.014056][T12207] Node 1 Normal free:3883112kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19264kB local_pcp:7488kB free_cma:0kB [ 266.056866][T12207] lowmem_reserve[]: 0 0 0 0 0 [ 266.066676][T12207] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 266.085787][T12207] Node 0 DMA32: 1026*4kB (UME) 1214*8kB (UM) 529*16kB (UME) 854*32kB (UME) 140*64kB (UME) 46*128kB (UM) 25*256kB (UME) 10*512kB (UM) 1*1024kB (U) 6*2048kB (UM) 310*4096kB (UM) = 1359048kB [ 266.104520][T12207] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 266.117130][T12207] Node 1 Normal: 208*4kB (UE) 53*8kB (UME) 46*16kB (UME) 99*32kB (UME) 25*64kB (UME) 12*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 944*4096kB (M) = 3883112kB [ 266.135473][T12207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.146116][T12207] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.155781][T12207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.165402][T12207] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.175740][T12207] 44154 total pagecache pages [ 266.185136][T12207] 0 pages in swap cache [ 266.189322][T12207] Free swap = 124996kB [ 266.193534][T12207] Total swap = 124996kB [ 266.203645][T12207] 2097051 pages RAM [ 266.207476][T12207] 0 pages HighMem/MovableOnly [ 266.212254][T12207] 425662 pages reserved [ 266.216431][T12207] 0 pages cma reserved [ 266.454429][T12250] syzkaller1: entered promiscuous mode [ 266.459937][T12250] syzkaller1: entered allmulticast mode [ 266.847133][T12274] bond0: Error: Cannot enslave bond to itself. [ 267.209723][T12292] tipc: Enabled bearer , priority 0 [ 267.227322][T12292] syzkaller0: entered promiscuous mode [ 267.245173][T12292] syzkaller0: entered allmulticast mode [ 267.257331][T12300] __nla_validate_parse: 20 callbacks suppressed [ 267.257348][T12300] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1826'. [ 267.277604][T12292] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 267.323346][T12292] tipc: Resetting bearer [ 267.341529][T12289] tipc: Resetting bearer [ 267.376092][T12289] tipc: Disabling bearer [ 267.397686][T12304] netlink: 'syz.3.1828': attribute type 1 has an invalid length. [ 267.548677][T12320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1833'. [ 267.656802][ T3547] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 267.746324][T12334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1837'. [ 268.139549][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1842'. [ 268.170183][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1842'. [ 268.250017][T12365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.147188][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.180413][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.189428][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.230633][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.240080][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.288551][T12392] openvswitch: netlink: IP tunnel dst address not specified [ 269.288948][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.309901][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.325421][T12393] netlink: 'syz.4.1850': attribute type 1 has an invalid length. [ 269.327122][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.334146][T12392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.903260][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 270.140747][T12447] sctp: [Deprecated]: syz.0.1863 (pid 12447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.140747][T12447] Use struct sctp_sack_info instead [ 270.378459][T12468] netlink: 'syz.2.1870': attribute type 6 has an invalid length. [ 270.714366][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1879'. [ 270.754284][T12497] syzkaller1: entered promiscuous mode [ 270.759998][T12497] syzkaller1: entered allmulticast mode [ 270.887731][T12506] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1883'. [ 270.943924][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 270.954415][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'. [ 270.963887][T12512] netlink: 'syz.2.1884': attribute type 11 has an invalid length. [ 271.016648][T12516] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 271.024869][T12516] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 271.033135][T12516] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 271.041487][T12516] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 271.049826][T12516] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 271.058003][T12516] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 271.066099][T12516] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 271.074270][T12516] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 271.251800][T12522] erspan0: entered allmulticast mode [ 271.425668][T12533] syzkaller1: entered promiscuous mode [ 271.432958][T12533] syzkaller1: entered allmulticast mode [ 271.751109][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 271.927006][T12571] gre0: entered promiscuous mode [ 272.317337][T12597] netlink: 'syz.1.1911': attribute type 9 has an invalid length. [ 272.337733][T12595] __nla_validate_parse: 5 callbacks suppressed [ 272.337750][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'. [ 272.845619][T12640] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 272.855945][T12642] veth0: entered promiscuous mode [ 272.874045][T12641] veth0: left promiscuous mode [ 273.506725][T12667] netlink: 'syz.1.1931': attribute type 1 has an invalid length. [ 273.516521][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'. [ 273.528161][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'. [ 273.541786][T12667] bridge: RTM_NEWNEIGH with invalid ether address [ 273.607176][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1933'. [ 273.621046][T12670] syz_tun: entered allmulticast mode [ 273.753375][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 273.804805][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 273.816483][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 273.880420][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 274.084738][T12693] netlink: 'syz.1.1940': attribute type 10 has an invalid length. [ 274.158560][T12699] netlink: 'syz.4.1941': attribute type 2 has an invalid length. [ 274.451407][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1948'. [ 274.469104][T12717] net_ratelimit: 48 callbacks suppressed [ 274.469121][T12717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.866214][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1956'. [ 275.503275][T12767] netlink: 'syz.4.1961': attribute type 58 has an invalid length. [ 275.826081][T12789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.978519][T12799] 0{X: renamed from gretap0 (while UP) [ 275.995732][T12799] 0{X: entered allmulticast mode [ 276.021028][T12799] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 276.698760][T12847] netlink: 'syz.3.1990': attribute type 18 has an invalid length. [ 277.750920][T12923] __nla_validate_parse: 9 callbacks suppressed [ 277.750940][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2009'. [ 277.755226][T12922] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2008'. [ 277.757227][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2009'. [ 277.848835][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 277.896893][T12936] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20002 [ 278.047386][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2018'. [ 278.112079][T12953] netlink: 'syz.0.2019': attribute type 7 has an invalid length. [ 278.124706][T12953] netlink: 'syz.0.2019': attribute type 8 has an invalid length. [ 278.431069][T12964] netlink: 'syz.0.2022': attribute type 10 has an invalid length. [ 278.547977][T12969] netlink: 'syz.1.2024': attribute type 39 has an invalid length. [ 278.567664][T12969] syz_tun (unregistering): left allmulticast mode [ 278.854289][T12988] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2030'. [ 279.177581][T13002] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 279.237676][T13002] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.277987][T13002] 8021q: adding VLAN 0 to HW filter on device bond5 [ 279.288175][T13002] bond4: (slave bond5): making interface the new active one [ 279.296172][T13002] bond4: (slave bond5): Enslaving as an active interface with an up link [ 279.386364][T13002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2036'. [ 279.401714][T13015] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 279.445277][T13023] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2039'. [ 279.457584][T13002] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.487363][T13023] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2039'. [ 279.521327][T13026] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2041'. [ 279.957424][T13043] nbd: must specify at least one socket [ 280.066730][T13047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.076113][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 280.393526][T13072] tipc: Enabled bearer , priority 0 [ 280.409838][T13072] syzkaller0: entered promiscuous mode [ 280.418792][T13072] syzkaller0: entered allmulticast mode [ 280.458091][T13072] tipc: Resetting bearer [ 280.483624][T13071] tipc: Resetting bearer [ 280.505322][T13071] tipc: Disabling bearer [ 280.742721][T13099] netlink: 'syz.2.2065': attribute type 6 has an invalid length. [ 280.908119][T13104] tipc: Enabled bearer , priority 0 [ 280.976899][T13104] tipc: Disabling bearer [ 281.128787][ T1147] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 282.094991][T13145] dvmrp0: left allmulticast mode [ 282.100167][T13145] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 282.371916][T13174] netlink: 'syz.0.2086': attribute type 16 has an invalid length. [ 282.411327][T13174] netlink: 'syz.0.2086': attribute type 3 has an invalid length. [ 282.438392][T13177] netlink: 'syz.3.2087': attribute type 21 has an invalid length. [ 282.449187][T13177] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.464244][T13177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.471565][T13177] IPv6: NLM_F_CREATE should be set when creating new route [ 282.478831][T13177] IPv6: NLM_F_CREATE should be set when creating new route [ 282.486128][T13177] IPv6: NLM_F_CREATE should be set when creating new route [ 282.525686][T13159] wg1 speed is unknown, defaulting to 1000 [ 282.553798][T13161] wg1 speed is unknown, defaulting to 1000 [ 282.570836][T13161] lo speed is unknown, defaulting to 1000 [ 282.798346][T13196] tipc: Enabled bearer , priority 0 [ 282.823199][T13196] syzkaller0: MTU too low for tipc bearer [ 282.835019][T13196] tipc: Disabling bearer [ 282.892388][T13199] netlink: 'syz.0.2093': attribute type 10 has an invalid length. [ 283.049052][T13159] lo speed is unknown, defaulting to 1000 [ 283.727215][T13241] __nla_validate_parse: 14 callbacks suppressed [ 283.727234][T13241] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2104'. [ 283.764674][T13251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2105'. [ 283.772353][T13241] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2104'. [ 283.783301][T13241] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2104'. [ 284.035773][T13263] sctp: [Deprecated]: syz.0.2107 (pid 13263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.035773][T13263] Use struct sctp_sack_info instead [ 284.055535][T13263] sctp: [Deprecated]: syz.0.2107 (pid 13263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.055535][T13263] Use struct sctp_sack_info instead [ 284.207089][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2108'. [ 284.479236][T13273] macvtap1: entered promiscuous mode [ 284.486325][T13273] vlan0: entered promiscuous mode [ 284.495109][T13273] bridge0: entered promiscuous mode [ 284.501419][T13273] macvtap1: entered allmulticast mode [ 284.522614][T13273] vlan0: entered allmulticast mode [ 284.783770][T13288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2116'. [ 284.981299][T13309] netlink: 'syz.0.2118': attribute type 9 has an invalid length. [ 285.244415][T13323] netlink: 'syz.0.2121': attribute type 10 has an invalid length. [ 285.295773][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2122'. [ 285.534830][T13347] netlink: 'syz.1.2127': attribute type 1 has an invalid length. [ 285.595138][T13347] gretap2: entered promiscuous mode [ 285.632704][T13347] bond6: (slave gretap2): making interface the new active one [ 285.655226][T13347] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 285.692747][T13347] macvlan0: entered promiscuous mode [ 285.708355][T13347] macvlan0: entered allmulticast mode [ 285.728822][T13347] bond6: entered promiscuous mode [ 285.736922][T13347] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 285.749316][T13347] bond6: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 285.752883][T13362] netlink: 'syz.1.2127': attribute type 1 has an invalid length. [ 285.767469][T13347] bond6: left promiscuous mode [ 285.798547][T13365] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2130'. [ 285.830102][T13360] sctp: [Deprecated]: syz.3.2130 (pid 13360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.830102][T13360] Use struct sctp_sack_info instead [ 285.912120][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 286.003902][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2132'. [ 286.238770][T13394] netlink: 'syz.3.2137': attribute type 4 has an invalid length. [ 286.286322][T13394] netlink: 'syz.3.2137': attribute type 4 has an invalid length. [ 286.512992][T13413] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 286.670253][T13422] netlink: 'syz.2.2148': attribute type 83 has an invalid length. [ 286.686339][T13422] mac80211_hwsim hwsim9 : renamed from wlan1 [ 286.714307][T13426] netlink: 'syz.2.2148': attribute type 83 has an invalid length. [ 287.729420][T13499] vlan3: entered allmulticast mode [ 287.744406][T13499] hsr0: entered allmulticast mode [ 287.749726][T13499] hsr_slave_0: entered allmulticast mode [ 288.428075][T13545] netlink: 'syz.0.2187': attribute type 15 has an invalid length. [ 288.888671][T13581] netlink: 'syz.3.2196': attribute type 1 has an invalid length. [ 289.049387][T13588] bond7: (slave bridge4): making interface the new active one [ 289.058313][T13588] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 289.325493][T13612] __nla_validate_parse: 20 callbacks suppressed [ 289.325512][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2203'. [ 289.438938][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2207'. [ 289.465991][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2207'. [ 289.503978][T13627] openvswitch: netlink: IP tunnel dst address not specified [ 289.608137][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2209'. [ 289.628082][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2209'. [ 289.782873][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2214'. [ 289.924826][T13657] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 290.016098][T13661] dvmrp0: entered allmulticast mode [ 290.025663][T13663] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2218'. [ 290.046332][T13663] validate_nla: 2 callbacks suppressed [ 290.046349][T13663] netlink: 'syz.4.2218': attribute type 7 has an invalid length. [ 290.057239][T13661] team0: Device vti1 is up. Set it down before adding it as a team port [ 290.437486][T13692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.494420][T13696] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2231'. [ 290.633723][T13701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2232'. [ 290.686722][T13706] netlink: 'syz.2.2234': attribute type 23 has an invalid length. [ 290.806589][T13709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2235'. [ 291.063325][T13720] tipc: Started in network mode [ 291.084725][T13720] tipc: Node identity 2e26da9a538a, cluster identity 4711 [ 291.098172][T13720] tipc: Enabled bearer , priority 0 [ 291.109294][T13726] syzkaller0: entered promiscuous mode [ 291.116016][T13726] syzkaller0: entered allmulticast mode [ 291.126985][T13721] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 291.172632][T13720] tipc: Resetting bearer [ 291.189045][T13719] tipc: Resetting bearer [ 291.233661][T13719] tipc: Disabling bearer [ 291.911316][T11732] IPVS: ip_vs_send_async error -101 [ 292.333933][T13766] netem: invalid attributes len -24 [ 292.351362][T13766] netem: change failed [ 292.358383][T13769] sctp: [Deprecated]: syz.1.2257 (pid 13769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.358383][T13769] Use struct sctp_sack_info instead [ 292.885827][T13812] netlink: 'syz.3.2267': attribute type 1 has an invalid length. [ 292.998426][T13812] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.123816][T13814] bond8: (slave veth9): Enslaving as an active interface with a down link [ 293.385924][T13848] netlink: 'syz.4.2277': attribute type 29 has an invalid length. [ 293.931180][T13889] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 294.089501][T13895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.745117][T13937] openvswitch: netlink: Flow key attr not present in new flow. [ 294.773302][T13942] __nla_validate_parse: 17 callbacks suppressed [ 294.773322][T13942] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2297'. [ 295.030127][T13959] netlink: 'syz.4.2305': attribute type 1 has an invalid length. [ 295.144814][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2306'. [ 295.266082][T13977] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20004 [ 295.293544][T13976] tipc: Enabling of bearer rejected, failed to enable media [ 295.323118][T13988] netlink: 'syz.4.2312': attribute type 24 has an invalid length. [ 295.457029][T13994] netlink: 'syz.4.2314': attribute type 11 has an invalid length. [ 295.526003][T14003] netlink: 'syz.4.2314': attribute type 1 has an invalid length. [ 295.576526][T13998] netlink: 'syz.3.2316': attribute type 10 has an invalid length. [ 295.626135][T13998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2316'. [ 295.651069][T13998] ipvlan1: entered promiscuous mode [ 295.653975][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2316'. [ 295.672248][T14005] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 295.673775][T13998] ipvlan1: entered allmulticast mode [ 295.681334][T14005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.698804][T13998] veth0_vlan: entered allmulticast mode [ 295.708877][T13998] bridge0: port 4(ipvlan1) entered blocking state [ 295.719058][T13998] bridge0: port 4(ipvlan1) entered disabled state [ 295.729480][T13998] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 295.906050][T14025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2323'. [ 296.071620][T11732] IPVS: ip_vs_send_async error -101 [ 296.296679][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2333'. [ 296.318445][T14053] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2333'. [ 296.329693][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2333'. [ 296.361738][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2333'. [ 296.414746][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2333'. [ 296.710873][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 296.740106][T14082] dummy0: entered promiscuous mode [ 296.748178][T14082] batadv_slave_1: entered promiscuous mode [ 296.758766][T14082] batadv_slave_1: left promiscuous mode [ 296.769077][T14082] dummy0: left promiscuous mode [ 296.915159][T14099] syzkaller1: entered promiscuous mode [ 296.927376][T14099] syzkaller1: entered allmulticast mode [ 297.038852][T14109] openvswitch: netlink: Flow key attr not present in new flow. [ 297.153789][T14114] netlink: 'syz.4.2352': attribute type 1 has an invalid length. [ 297.202670][T14114] 8021q: adding VLAN 0 to HW filter on device bond7 [ 297.297609][T14125] netlink: 'syz.1.2355': attribute type 11 has an invalid length. [ 297.353214][T14129] tipc: Enabling of bearer rejected, failed to enable media [ 297.373698][T14132] netlink: 'syz.1.2357': attribute type 21 has an invalid length. [ 297.395617][T14135] openvswitch: netlink: Flow key attr not present in new flow. [ 297.648768][T14151] netlink: 'syz.3.2363': attribute type 3 has an invalid length. [ 297.748944][T14157] tipc: Can't bind to reserved service type 0 [ 297.789359][T14157] netlink: 'syz.0.2364': attribute type 10 has an invalid length. [ 297.917646][T14161] netlink: 'syz.3.2365': attribute type 10 has an invalid length. [ 297.940204][T14161] bridge_slave_1: left allmulticast mode [ 297.950441][T14161] bridge_slave_1: left promiscuous mode [ 297.956495][T14161] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.017882][T14161] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 298.301269][T14191] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 298.357632][T14194] netlink: 'syz.4.2379': attribute type 4 has an invalid length. [ 298.472628][T14200] bridge7: entered promiscuous mode [ 298.494171][T14200] bridge7: entered allmulticast mode [ 298.723935][T14224] netlink: 'syz.3.2385': attribute type 1 has an invalid length. [ 298.939376][T14224] veth11: entered promiscuous mode [ 298.975329][T14224] bond9: (slave veth11): Enslaving as a backup interface with a down link [ 299.286891][T14254] 8021q: adding VLAN 0 to HW filter on device bond8 [ 299.336439][T14261] bond8: (slave gretap0): making interface the new active one [ 299.395475][T14261] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 299.780500][T14288] __nla_validate_parse: 16 callbacks suppressed [ 299.780519][T14288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2405'. [ 299.862223][T14288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2405'. [ 300.036233][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2411'. [ 300.218608][T14319] team0: Port device dummy0 added [ 300.244512][T14316] bond9: (slave bridge9): making interface the new active one [ 300.291660][T14316] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 300.363331][T14335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.446040][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2422'. [ 300.457835][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2422'. [ 300.477705][T14341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2422'. [ 300.491549][T14346] validate_nla: 3 callbacks suppressed [ 300.491565][T14346] netlink: 'syz.1.2421': attribute type 1 has an invalid length. [ 300.508509][T14341] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2422'. [ 300.511191][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 300.518521][T14346] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2421'. [ 300.590585][T14335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.625613][T14346] netlink: 'syz.1.2421': attribute type 29 has an invalid length. [ 300.835083][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2429'. [ 300.950945][T14366] openvswitch: netlink: IPv6 tunnel dst address is zero [ 300.967356][T14366] netlink: 'syz.3.2431': attribute type 7 has an invalid length. [ 301.365780][T14387] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 301.378172][T14387] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 301.648733][T14414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.052909][T14441] dummy0: entered promiscuous mode [ 302.059854][T14441] dummy0: left promiscuous mode [ 302.240728][T14459] netlink: 'syz.0.2453': attribute type 11 has an invalid length. [ 302.543189][T14473] bond6: entered promiscuous mode [ 302.562223][T14473] bond6: entered allmulticast mode [ 302.578305][T14473] 8021q: adding VLAN 0 to HW filter on device bond6 [ 302.634482][T14489] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 302.809218][ T1147] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.874211][ T1147] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.893408][ T1147] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.907552][ T1147] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.953630][T14504] syzkaller0: entered allmulticast mode [ 303.040424][T14516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.085021][T14563] netlink: 'syz.4.2485': attribute type 1 has an invalid length. [ 304.114022][T14566] syzkaller1: left promiscuous mode [ 304.131085][T14566] syzkaller1: left allmulticast mode [ 304.148329][T14563] bond10: (slave gretap5): making interface the new active one [ 304.157353][T14563] bond10: (slave gretap5): Enslaving as an active interface with an up link [ 304.892831][T14611] netlink: 'syz.4.2495': attribute type 4 has an invalid length. [ 304.907632][T14613] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 304.970927][T14611] __nla_validate_parse: 10 callbacks suppressed [ 304.970947][T14611] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2495'. [ 305.092212][T14624] netlink: 'syz.4.2497': attribute type 9 has an invalid length. [ 305.123324][T14627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2496'. [ 305.155338][T14627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2496'. [ 305.434798][T14647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2505'. [ 305.454010][T14649] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2501'. [ 305.792762][T14677] netlink: 'syz.4.2513': attribute type 1 has an invalid length. [ 305.903799][T14684] bond11: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 305.976930][T14688] netlink: 'syz.1.2516': attribute type 11 has an invalid length. [ 305.987407][T14688] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2516'. [ 305.997388][T14684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2513'. [ 306.008465][T14677] veth11: entered promiscuous mode [ 306.020201][T14677] bond11: (slave veth11): Enslaving as a backup interface with a down link [ 306.035175][ T49] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 306.048920][T14684] 8021q: adding VLAN 0 to HW filter on device bond11 [ 306.117072][T14694] tc_dump_action: action bad kind [ 306.127374][T14695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2519'. [ 306.147526][T14696] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2517'. [ 306.162049][ T12] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 306.198575][T14640] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 306.328813][T14701] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2521'. [ 306.489768][T14715] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 306.637935][T14726] netlink: 'syz.2.2530': attribute type 9 has an invalid length. [ 306.801804][T14689] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 306.808263][T14689] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 306.859469][T14689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 306.875037][T14689] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 306.880799][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 306.948398][T14689] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 306.969553][T14689] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 307.757715][T14777] netlink: 'syz.2.2550': attribute type 1 has an invalid length. [ 307.767357][T14777] netlink: 'syz.2.2550': attribute type 2 has an invalid length. [ 308.962654][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 308.979349][T14689] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.986871][T14689] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 309.860268][T14807] wg1 speed is unknown, defaulting to 1000 [ 309.867957][T14807] lo speed is unknown, defaulting to 1000 [ 310.189161][T14827] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003 [ 310.575456][T14810] netlink: 'syz.2.2563': attribute type 13 has an invalid length. [ 310.617185][T14810] netlink: 'syz.2.2563': attribute type 17 has an invalid length. [ 310.727493][T14862] __nla_validate_parse: 5 callbacks suppressed [ 310.727511][T14862] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2579'. [ 310.760859][T14810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.821060][T12378] lo speed is unknown, defaulting to 1000 [ 310.971260][T14872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2583'. [ 311.011183][T14878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2586'. [ 311.022568][T14878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2586'. [ 311.024251][T14880] netlink: 'syz.3.2585': attribute type 4 has an invalid length. [ 311.046058][T14878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2586'. [ 311.053275][T14881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2584'. [ 311.083067][T14884] netlink: 'syz.3.2585': attribute type 4 has an invalid length. [ 311.090511][T14878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2586'. [ 311.106655][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2583'. [ 311.123605][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2583'. [ 311.171628][T14878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2586'. [ 311.269777][T14893] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 311.354406][T14895] tipc: Enabling of bearer rejected, failed to enable media [ 311.805063][T14921] netlink: 'syz.0.2592': attribute type 3 has an invalid length. [ 312.018177][T14924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.174114][T14939] netlink: 'syz.0.2601': attribute type 33 has an invalid length. [ 312.813424][T14992] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 313.748072][T14998] openvswitch: netlink: Missing key (keys=40, expected=100) [ 314.166015][T15026] macvlan0: entered promiscuous mode [ 314.186005][T15026] macvlan0: entered allmulticast mode [ 314.193807][T15026] bond3: entered promiscuous mode [ 314.201093][T15026] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 314.209987][T15026] bond3: left promiscuous mode [ 314.309159][T15037] netlink: 'syz.3.2628': attribute type 4 has an invalid length. [ 314.364347][T15037] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 314.379401][T15044] netlink: 'syz.1.2630': attribute type 1 has an invalid length. [ 314.420071][T15044] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.428736][T15040] tipc: Enabled bearer , priority 0 [ 314.439628][T15040] syzkaller0: entered promiscuous mode [ 314.446128][T15045] netlink: 'syz.4.2629': attribute type 18 has an invalid length. [ 314.458256][T15040] syzkaller0: entered allmulticast mode [ 314.469459][T15049] netlink: 'syz.2.2631': attribute type 1 has an invalid length. [ 314.496792][T15044] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 314.553189][T15044] tipc: Enabled bearer , priority 0 [ 314.561235][T15044] syzkaller0: entered promiscuous mode [ 314.566754][T15044] syzkaller0: entered allmulticast mode [ 314.582194][T15044] tipc: Resetting bearer [ 314.596045][T15042] tipc: Resetting bearer [ 314.620806][T15042] tipc: Disabling bearer [ 314.649725][T15058] tipc: Resetting bearer [ 314.878428][T15079] netlink: 'syz.4.2640': attribute type 1 has an invalid length. [ 314.898701][T15077] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.917718][T15077] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.044390][T15087] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address [ 315.059079][T15087] bond12: (slave vxcan5): Error -95 calling set_mac_address [ 315.112209][T15077] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.130252][T15077] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.181987][T15038] tipc: Resetting bearer [ 315.208809][T15038] tipc: Disabling bearer [ 315.256410][T15077] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.283345][T15077] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.426720][T15077] bond0: (slave netdevsim0): Releasing backup interface [ 315.452208][T15077] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.472023][T15077] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.623544][ T1147] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.632638][ T1147] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 315.648411][ T1099] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.656993][ T1099] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 315.677925][ T71] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.686456][ T71] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 315.704372][ T71] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.713819][ T71] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 316.349701][T15124] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 316.380067][T15130] __nla_validate_parse: 48 callbacks suppressed [ 316.380086][T15130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2651'. [ 316.532421][T15142] netlink: 'syz.3.2655': attribute type 1 has an invalid length. [ 316.605507][T15142] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2655'. [ 316.842114][T15171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2665'. [ 316.954345][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2666'. [ 317.036548][T15171] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 317.046452][T15181] netlink: 'syz.1.2668': attribute type 1 has an invalid length. [ 317.095068][T15182] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2668'. [ 317.106212][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 317.132501][T15189] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2670'. [ 317.194107][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.311155][T15204] netlink: 'syz.1.2674': attribute type 12 has an invalid length. [ 317.326534][T15204] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 317.609023][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2680'. [ 317.786361][T15239] hsr0: left promiscuous mode [ 317.849060][T15239] vlan3: entered allmulticast mode [ 317.863193][T15245] netlink: 'syz.2.2687': attribute type 4 has an invalid length. [ 317.874092][T15239] hsr0: entered allmulticast mode [ 317.884295][T15245] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2687'. [ 317.885665][T15239] hsr_slave_0: entered allmulticast mode [ 317.905139][T15248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2688'. [ 317.924072][T15243] syzkaller0: entered promiscuous mode [ 317.929709][T15243] syzkaller0: entered allmulticast mode [ 317.948667][T15245] `: renamed from bond0 (while UP) [ 318.484027][T15296] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 318.733495][T15317] netlink: 'syz.2.2708': attribute type 5 has an invalid length. [ 319.081877][T15341] netlink: 'syz.1.2717': attribute type 11 has an invalid length. [ 319.427401][T15358] veth13: entered promiscuous mode [ 319.456327][T15358] veth13: entered allmulticast mode [ 319.633990][T15374] netlink: 'syz.3.2726': attribute type 1 has an invalid length. [ 319.979232][T15392] pim6reg1: entered promiscuous mode [ 319.993878][T15392] pim6reg1: entered allmulticast mode [ 320.055362][T15395] netlink: 'syz.0.2730': attribute type 5 has an invalid length. [ 320.056967][T15400] IPVS: set_ctl: invalid protocol: 137 172.30.1.2:20001 [ 320.113746][T15400] dvmrp0: left allmulticast mode [ 320.189479][T15412] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 320.283840][T15416] netlink: 'syz.4.2737': attribute type 5 has an invalid length. [ 320.597206][T15431] : renamed from hsr0 [ 321.596302][T15458] __nla_validate_parse: 15 callbacks suppressed [ 321.596322][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2751'. [ 321.904988][T15469] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2753'. [ 323.090268][T15446] geneve3: entered promiscuous mode [ 323.357461][T15485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2759'. [ 323.666342][T15510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2768'. [ 323.721544][T15513] netlink: 'syz.3.2767': attribute type 1 has an invalid length. [ 323.825508][T15523] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2772'. [ 324.140126][T15546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.194404][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'. [ 324.195935][T15550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.364526][T15560] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2783'. [ 324.541561][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2787'. [ 324.595794][T15569] wg1: left promiscuous mode [ 324.605969][T15569] wg2: left promiscuous mode [ 324.664841][T15569] geneve2: left promiscuous mode [ 324.671204][T15569] veth3: left promiscuous mode [ 324.676395][T15569] team0: left promiscuous mode [ 324.698068][T15569] macvtap1: left promiscuous mode [ 324.705067][T15569] vlan0: left promiscuous mode [ 324.709970][T15569] bridge0: left promiscuous mode [ 324.782400][T15587] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.884578][T15599] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 325.094437][T15618] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 325.225996][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2803'. [ 325.322958][T15635] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.2804'. [ 326.134050][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.143657][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.153104][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.163360][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.173935][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.192211][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.199664][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.207194][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.215504][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.224257][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.280896][T15669] wg1 speed is unknown, defaulting to 1000 [ 326.289070][T15669] lo speed is unknown, defaulting to 1000 [ 326.768745][T15696] syzkaller1: entered promiscuous mode [ 326.774755][T15696] syzkaller1: entered allmulticast mode [ 326.872391][T15701] netlink: 'syz.2.2822': attribute type 23 has an invalid length. [ 326.917153][T15702] __nla_validate_parse: 4 callbacks suppressed [ 326.917171][T15702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2821'. [ 327.037939][T15712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2825'. [ 327.176782][T15712] team0 (unregistering): Port device dummy0 removed [ 327.201901][T15669] chnl_net:caif_netlink_parms(): no params data found [ 327.254082][T15718] bpq0: entered promiscuous mode [ 327.259167][T15718] bpq0: entered allmulticast mode [ 327.381206][T15728] netlink: 'syz.0.2831': attribute type 1 has an invalid length. [ 327.390265][T15732] netlink: 'syz.1.2830': attribute type 10 has an invalid length. [ 327.519481][T15728] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 327.556071][T15669] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.574035][T15669] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.586569][T15669] bridge_slave_0: entered allmulticast mode [ 327.602076][T15669] bridge_slave_0: entered promiscuous mode [ 327.643864][T15737] veth13: entered promiscuous mode [ 327.659417][T15737] bond7: (slave veth13): Enslaving as a backup interface with a down link [ 327.669651][T15669] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.699803][T15669] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.716241][T15669] bridge_slave_1: entered allmulticast mode [ 327.737369][T15669] bridge_slave_1: entered promiscuous mode [ 327.844529][T15669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.885176][T15752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2836'. [ 327.956068][T15669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.131966][T15669] team0: Port device team_slave_0 added [ 328.179610][T15764] vlan0: entered promiscuous mode [ 328.187394][T15764] vlan0: entered allmulticast mode [ 328.194983][T15764] hsr_slave_1: entered allmulticast mode [ 328.218596][T15669] team0: Port device team_slave_1 added [ 328.287120][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2839'. [ 328.311181][ T51] Bluetooth: hci3: command tx timeout [ 328.327131][T15669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.345565][T15669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.376943][T15669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.448531][T15783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'. [ 328.508261][T15779] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 328.519414][T15669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.538698][T15669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.595674][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 328.628207][T15669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.883935][T15669] hsr_slave_0: entered promiscuous mode [ 328.896013][T15669] hsr_slave_1: entered promiscuous mode [ 329.153504][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2852'. [ 329.320030][T15669] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.344205][T15669] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 329.463833][T15669] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.478784][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2859'. [ 329.490497][T15669] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 329.651787][T15855] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2860'. [ 329.677256][T15669] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.712881][T15669] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 329.791555][T15669] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.802841][T15669] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 329.818702][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'. [ 329.991346][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.007825][T15669] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.020879][T15669] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 330.033668][T15669] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.047875][T15669] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.153320][T15828] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 330.229248][T15669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.327058][T15669] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.391521][ T51] Bluetooth: hci3: command tx timeout [ 330.412443][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.420911][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.434309][T15887] netlink: 'syz.2.2869': attribute type 9 has an invalid length. [ 330.457200][T15894] ieee802154 phy0 wpan0: encryption failed: -90 [ 330.466821][T15894] ieee802154 phy0 wpan0: encryption failed: -90 [ 330.478764][T15894] ieee802154 phy0 wpan0: encryption failed: -90 [ 330.488514][T15894] ieee802154 phy0 wpan0: encryption failed: -90 [ 330.506932][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.509392][T15894] ieee802154 phy0 wpan0: encryption failed: -90 [ 330.514304][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.601127][T15898] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 330.635804][T15898] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 331.304809][T15669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.367723][T15943] macsec0: entered promiscuous mode [ 331.390631][T15943] macsec0: entered allmulticast mode [ 331.426019][T15950] veth1_macvtap: entered allmulticast mode [ 331.453971][T15950] macsec0: left promiscuous mode [ 331.460226][T15955] netlink: 'syz.1.2889': attribute type 10 has an invalid length. [ 331.476125][T15950] macsec0: left allmulticast mode [ 331.482030][T15950] veth1_macvtap: left allmulticast mode [ 331.507267][T15943] tipc: Enabled bearer , priority 0 [ 331.534722][T15955] netlink: 'syz.1.2889': attribute type 14 has an invalid length. [ 331.555774][T15955] netlink: 'syz.1.2889': attribute type 14 has an invalid length. [ 331.565439][T15943] tipc: Resetting bearer [ 331.636773][T15942] tipc: Disabling bearer [ 331.683033][T15669] veth0_vlan: entered promiscuous mode [ 331.707521][T15669] veth1_vlan: entered promiscuous mode [ 331.786645][T15669] veth0_macvtap: entered promiscuous mode [ 331.854090][T15973] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.862628][T15973] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.015602][T15973] veth1_to_bond: left allmulticast mode [ 332.048328][T15669] veth1_macvtap: entered promiscuous mode [ 332.069932][T15981] geneve2: entered promiscuous mode [ 332.075998][T15981] geneve2: entered allmulticast mode [ 332.133734][T15982] syzkaller0: entered promiscuous mode [ 332.139522][T15982] syzkaller0: entered allmulticast mode [ 332.155646][ T1099] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.169457][ T1099] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 332.392157][T16004] netlink: 'syz.0.2901': attribute type 1 has an invalid length. [ 332.461027][T16010] __nla_validate_parse: 7 callbacks suppressed [ 332.461055][T16010] netlink: 964 bytes leftover after parsing attributes in process `syz.0.2901'. [ 332.480467][ T51] Bluetooth: hci3: command tx timeout [ 332.583009][T16013] netlink: 'syz.0.2901': attribute type 4 has an invalid length. [ 332.664839][T16018] netlink: 'syz.0.2901': attribute type 4 has an invalid length. [ 334.266133][ T1099] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.275684][ T1099] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 334.287052][ T1099] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.297787][ T1099] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 334.351482][T16004] 8021q: adding VLAN 0 to HW filter on device bond8 [ 334.359209][T16005] tipc: Enabling of bearer rejected, failed to enable media [ 334.382951][ T1099] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.421199][ T1099] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 334.510852][T15669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.549100][T15669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.551542][ T51] Bluetooth: hci3: command tx timeout [ 334.575449][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.602527][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.626454][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.641589][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.963384][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.971791][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'. [ 334.997322][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.028515][T16061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2912'. [ 335.053707][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.068752][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2914'. [ 335.079492][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.111272][T16064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2914'. [ 335.210524][T16071] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2918'. [ 335.258189][T16082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2806'. [ 335.303059][T16082] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2806'. [ 335.335745][T16087] sctp: [Deprecated]: syz.4.2921 (pid 16087) Use of int in max_burst socket option. [ 335.335745][T16087] Use struct sctp_assoc_value instead [ 335.508392][T16093] netlink: 'syz.3.2924': attribute type 7 has an invalid length. [ 335.592234][T16093] : entered promiscuous mode [ 335.771283][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 335.928867][T16106] veth1_macvtap: left promiscuous mode [ 335.950781][T16106] macsec0: entered promiscuous mode [ 335.956209][T16106] macsec0: entered allmulticast mode [ 335.998237][T16106] veth1_macvtap: entered promiscuous mode [ 336.020341][T16106] veth1_macvtap: entered allmulticast mode [ 336.030167][T16106] macsec0: left promiscuous mode [ 336.039499][T16106] macsec0: left allmulticast mode [ 336.045401][T16106] veth1_macvtap: left allmulticast mode [ 336.057812][T16111] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2928'. [ 336.158852][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.173937][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.183466][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.193490][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.207208][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.369163][T16131] netlink: 'syz.0.2936': attribute type 21 has an invalid length. [ 336.473724][ T1147] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 336.487531][ T1147] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 336.561623][ T1147] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 336.589543][ T1147] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 336.632682][T16142] nbd: couldn't find a device at index -373156329 [ 336.669497][T16115] wg1 speed is unknown, defaulting to 1000 [ 336.676340][T16146] netlink: 'syz.4.2940': attribute type 1 has an invalid length. [ 336.686139][T16115] lo speed is unknown, defaulting to 1000 [ 336.709202][T16146] netlink: 'syz.4.2940': attribute type 3 has an invalid length. [ 336.732674][T16146] NCSI netlink: No device for ifindex 0 [ 336.836188][T16154] syzkaller0: entered promiscuous mode [ 336.844393][T16154] syzkaller0: entered allmulticast mode [ 336.854401][T16153] tipc: Started in network mode [ 336.862572][T16153] tipc: Node identity ce92afdfae1f, cluster identity 4711 [ 336.877897][T16153] tipc: Enabled bearer , priority 0 [ 336.905609][T16157] netlink: 'syz.4.2944': attribute type 13 has an invalid length. [ 336.910065][T16159] openvswitch: netlink: Actions may not be safe on all matching packets [ 336.914351][T16157] netlink: 'syz.4.2944': attribute type 58 has an invalid length. [ 336.959587][T16154] tipc: Resetting bearer [ 337.053537][T16154] tipc: Resetting bearer [ 337.134166][T16154] tipc: Disabling bearer [ 337.593417][T16115] chnl_net:caif_netlink_parms(): no params data found [ 337.615524][T16197] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 337.889017][T16115] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.897238][T16115] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.906833][T16115] bridge_slave_0: entered allmulticast mode [ 337.921411][T16115] bridge_slave_0: entered promiscuous mode [ 337.938981][T16115] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.970585][T16115] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.978222][T16115] bridge_slave_1: entered allmulticast mode [ 337.989482][T16115] bridge_slave_1: entered promiscuous mode [ 338.035866][T16215] __nla_validate_parse: 8 callbacks suppressed [ 338.035884][T16215] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2959'. [ 338.136484][T16115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.165628][T16115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.201732][T16227] netlink: 'syz.3.2963': attribute type 1 has an invalid length. [ 338.225183][T16227] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2963'. [ 338.243324][T16225] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2964'. [ 338.275382][T16115] team0: Port device team_slave_0 added [ 338.299381][T16115] team0: Port device team_slave_1 added [ 338.315800][ T5875] Bluetooth: hci0: command tx timeout [ 338.415012][T16115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.439069][T16115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.481798][T16115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.499348][T16115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.507712][T16115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.539008][T16115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.745684][T16115] hsr_slave_0: entered promiscuous mode [ 338.764054][T16115] hsr_slave_1: entered promiscuous mode [ 338.777205][T16115] debugfs: 'hsr0' already exists in 'hsr' [ 338.792192][T16115] Cannot create hsr debugfs directory [ 338.835296][T16247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2970'. [ 338.970107][T16249] can: request_module (can-proto-3) failed. [ 339.412635][T16277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2978'. [ 339.759521][T16295] bond9: entered promiscuous mode [ 339.765275][T16295] bond9: entered allmulticast mode [ 339.776695][T16295] 8021q: adding VLAN 0 to HW filter on device bond9 [ 340.089847][T16306] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2989'. [ 340.158657][T16115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 340.188776][T16115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 340.361534][T16115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 340.396218][ T5875] Bluetooth: hci0: command tx timeout [ 340.411718][T16115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 340.536827][T16338] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2995'. [ 340.553817][T16339] netlink: 'syz.4.2994': attribute type 13 has an invalid length. [ 340.567770][T16339] lo: entered promiscuous mode [ 340.574192][T16339] lo: entered allmulticast mode [ 340.579718][T16339] tunl0: entered promiscuous mode [ 340.592403][T16339] tunl0: entered allmulticast mode [ 340.598068][T16339] gre0: entered promiscuous mode [ 340.605404][T16339] gre0: entered allmulticast mode [ 340.611146][T16339] 0{X: entered promiscuous mode [ 340.620818][T16339] 0{X: refused to change device tx_queue_len [ 340.629985][T16339] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 340.827865][T16115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.892917][T16115] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.028993][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.036559][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.115174][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.122379][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.152065][T16369] netlink: 'syz.2.3006': attribute type 12 has an invalid length. [ 341.705827][T16391] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3014'. [ 341.891922][T16115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.008653][T16399] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3017'. [ 342.030378][T16115] veth0_vlan: entered promiscuous mode [ 342.109055][T16403] netlink: 'syz.4.3019': attribute type 1 has an invalid length. [ 342.123995][T16115] veth1_vlan: entered promiscuous mode [ 342.243897][T16409] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3019'. [ 342.360851][T16403] 8021q: adding VLAN 0 to HW filter on device bond13 [ 342.470735][ T5875] Bluetooth: hci0: command tx timeout [ 342.516146][T16422] netlink: 'syz.0.3023': attribute type 24 has an invalid length. [ 342.607732][T16115] veth0_macvtap: entered promiscuous mode [ 342.652556][T16115] veth1_macvtap: entered promiscuous mode [ 342.695152][T16115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.746471][T16115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.769295][ T1099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.814406][ T1099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.838176][ T1099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.886099][ T1099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.949368][T16432] netlink: 'syz.0.3027': attribute type 9 has an invalid length. [ 343.112091][T16441] netlink: 'syz.2.3031': attribute type 11 has an invalid length. [ 343.120021][T16441] __nla_validate_parse: 1 callbacks suppressed [ 343.120039][T16441] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3031'. [ 343.123476][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.157892][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.259738][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.273251][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.288107][T16445] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 343.294902][T16447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.319909][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'. [ 343.344110][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3033'. [ 343.354084][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3033'. [ 343.531646][T16452] pim6reg1: entered promiscuous mode [ 343.537359][T16452] pim6reg1: entered allmulticast mode [ 343.730282][T16457] lo: left promiscuous mode [ 343.736174][T16457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.193901][T16474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3044'. [ 344.264017][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 344.398883][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.434561][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.445608][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 344.457047][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.468056][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.477045][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.552168][ T5875] Bluetooth: hci0: command tx timeout [ 344.635146][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 344.693185][T16480] wg1 speed is unknown, defaulting to 1000 [ 344.766047][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 344.809347][T16480] lo speed is unknown, defaulting to 1000 [ 345.019678][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 345.071719][T16505] netlink: 'syz.4.3053': attribute type 1 has an invalid length. [ 345.098599][T16506] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3052'. [ 345.150149][T16498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.273067][ T49] bridge_slave_1: left allmulticast mode [ 345.279104][ T49] bridge_slave_1: left promiscuous mode [ 345.292433][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.320192][ T49] bridge_slave_0: left allmulticast mode [ 345.326721][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.636246][ T49] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 345.645247][ T49] bond7 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 6e:8c:d5:31:f5:e2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 346.477683][ T49] bond1 (unregistering): Released all slaves [ 346.557637][ T5875] Bluetooth: hci4: command tx timeout [ 346.698727][ T49] bond2 (unregistering): Released all slaves [ 346.732496][ T49] bond0 (unregistering): Released all slaves [ 346.762860][ T49] bond3 (unregistering): (slave bond4): Releasing backup interface [ 346.777657][ T49] bond3 (unregistering): Released all slaves [ 346.971474][ T49] bond4 (unregistering): Released all slaves [ 346.989075][ T49] bond5 (unregistering): Released all slaves [ 347.196510][ T49] bond6 (unregistering): Released all slaves [ 347.218704][ T49] bond7 (unregistering): (slave veth13): Releasing backup interface [ 347.230262][ T49] bond7 (unregistering): Released all slaves [ 347.401359][ T49] bond8 (unregistering): Released all slaves [ 347.583845][ T49] bond9 (unregistering): Released all slaves [ 347.664767][T16524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3058'. [ 347.884946][T16527] netlink: 'syz.1.3060': attribute type 23 has an invalid length. [ 347.947182][ T49] tipc: Left network mode [ 348.565287][T16565] netlink: 'syz.1.3069': attribute type 13 has an invalid length. [ 348.587720][T16572] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3070'. [ 348.631776][ T5875] Bluetooth: hci4: command tx timeout [ 348.823801][T16565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.862458][T16480] chnl_net:caif_netlink_parms(): no params data found [ 349.192815][T16601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.432792][T16602] bridge0: port 3(batadv1) entered blocking state [ 349.475867][T16602] bridge0: port 3(batadv1) entered disabled state [ 349.509448][T16602] batadv1: entered allmulticast mode [ 349.547387][T16602] batadv1: entered promiscuous mode [ 349.625739][T16618] netlink: 'syz.4.3080': attribute type 21 has an invalid length. [ 349.655338][T16618] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3080'. [ 349.686634][T16610] tipc: Enabled bearer , priority 0 [ 349.868096][ T49] hsr_slave_0: left promiscuous mode [ 349.885793][ T1147] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 349.896088][ T1147] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 349.907367][T16629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.008750][T16634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3083'. [ 350.067257][ T49] team0 (unregistering): Port device macvlan2 removed [ 350.680813][ T7777] tipc: Node number set to 1619898335 [ 350.692779][ T49] team0 (unregistering): Port device team_slave_1 removed [ 350.722681][ T5875] Bluetooth: hci4: command tx timeout [ 350.768511][ T49] team0 (unregistering): Port device team_slave_0 removed [ 351.363003][T16480] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.373253][T16480] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.381215][T16480] bridge_slave_0: entered allmulticast mode [ 351.389045][T16480] bridge_slave_0: entered promiscuous mode [ 351.429430][T16614] syzkaller0: entered promiscuous mode [ 351.440453][T16614] syzkaller0: entered allmulticast mode [ 351.493802][T16610] tipc: Resetting bearer [ 351.561202][T16605] tipc: Resetting bearer [ 351.654815][T16605] tipc: Disabling bearer [ 351.686977][T16480] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.700586][T16480] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.738908][T16480] bridge_slave_1: entered allmulticast mode [ 351.767150][T16480] bridge_slave_1: entered promiscuous mode [ 351.862163][T16650] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 351.960696][T16659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3089'. [ 351.978721][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3090'. [ 352.005634][T16480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.062740][T16662] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 352.095194][T16662] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 352.119606][T16662] gretap1: entered promiscuous mode [ 352.129762][T16662] gretap1: entered allmulticast mode [ 352.144242][T16659] IPVS: Error connecting to the multicast addr [ 352.163098][T16480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.328250][T16673] netlink: 'syz.1.3092': attribute type 6 has an invalid length. [ 352.414602][T16480] team0: Port device team_slave_0 added [ 352.437774][T16675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3093'. [ 352.463127][T16480] team0: Port device team_slave_1 added [ 352.589704][ T6006] IPVS: starting estimator thread 0... [ 352.590543][T16480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.617094][T16480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.648576][T16480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.677404][T16480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.687194][T16480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.713586][T16688] IPVS: using max 28 ests per chain, 67200 per kthread [ 352.735138][T16480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.784945][ T49] IPVS: stop unused estimator thread 0... [ 352.801126][ T5875] Bluetooth: hci4: command tx timeout [ 352.858514][T16480] hsr_slave_0: entered promiscuous mode [ 352.867453][T16480] hsr_slave_1: entered promiscuous mode [ 352.883083][T16480] debugfs: 'hsr0' already exists in 'hsr' [ 352.900871][T16480] Cannot create hsr debugfs directory [ 352.947309][T16702] netlink: 89 bytes leftover after parsing attributes in process `syz.4.3101'. [ 352.979003][ T30] audit: type=1107 audit(1756585047.119:2): pid=16703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊 [ 352.979003][ T30] ' [ 353.055468][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3103'. [ 353.103226][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3103'. [ 353.225996][T16721] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3106'. [ 353.748160][T16745] __nla_validate_parse: 2 callbacks suppressed [ 353.748179][T16745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3113'. [ 353.813717][T16750] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 354.093063][T16480] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.138881][T16480] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.165987][T16480] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.201909][T16480] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.383362][T16781] netlink: 'syz.2.3124': attribute type 1 has an invalid length. [ 354.504779][T16480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.531017][T16480] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.602025][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.610073][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.654117][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.661873][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.787652][T16807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3131'. [ 354.843375][T16807] netlink: 'syz.3.3131': attribute type 1 has an invalid length. [ 354.882289][T16807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3131'. [ 354.938871][T16813] tipc: Started in network mode [ 354.966383][T16813] tipc: Node identity , cluster identity 4711 [ 354.980737][T16813] tipc: Failed to set node id, please configure manually [ 354.988392][T16813] tipc: Enabling of bearer rejected, failed to enable media [ 355.155161][T16826] netlink: 'syz.2.3137': attribute type 1 has an invalid length. [ 355.296566][T16826] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.387396][T16833] bond4: (slave veth7): Enslaving as an active interface with a down link [ 355.518349][T16838] bond4: (slave veth9): Enslaving as an active interface with a down link [ 355.739644][T16480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.918727][T16480] veth0_vlan: entered promiscuous mode [ 355.962360][T16879] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3149'. [ 355.984507][T16480] veth1_vlan: entered promiscuous mode [ 356.027358][T16883] netlink: 'syz.4.3151': attribute type 10 has an invalid length. [ 356.038891][T16884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3148'. [ 356.046734][T16480] veth0_macvtap: entered promiscuous mode [ 356.066260][T16480] veth1_macvtap: entered promiscuous mode [ 356.074167][T16883] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 356.086913][T16883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.128586][T16480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.148070][T16886] syzkaller1: left promiscuous mode [ 356.154109][T16886] syzkaller1: left allmulticast mode [ 356.166650][T16480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.191962][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.219249][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.241209][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.278266][ T1147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.371044][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.381667][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.425917][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.436287][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.895977][T16905] netlink: 'syz.3.3159': attribute type 1 has an invalid length. [ 356.914529][T16905] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3159'. [ 356.986592][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'. [ 357.467631][T16933] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3167'. [ 357.765431][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.786222][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.802233][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.813506][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.822216][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.837255][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.838290][ T1159] ================================================================== [ 357.852385][ T1159] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 357.860311][ T1159] Read of size 1 at addr ffff8880559231f0 by task kworker/u8:7/1159 [ 357.868319][ T1159] [ 357.870741][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 357.870763][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.870774][ T1159] Workqueue: ipv6_addrconf addrconf_dad_work [ 357.870796][ T1159] Call Trace: [ 357.870803][ T1159] [ 357.870809][ T1159] dump_stack_lvl+0x189/0x250 [ 357.870827][ T1159] ? __kasan_check_byte+0x12/0x40 [ 357.870847][ T1159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.870864][ T1159] ? lock_release+0x4b/0x3e0 [ 357.870886][ T1159] ? __virt_addr_valid+0x4a5/0x5c0 [ 357.870906][ T1159] print_report+0xca/0x240 [ 357.870920][ T1159] ? xfrm_state_find+0x2cf2/0x5400 [ 357.870933][ T1159] kasan_report+0x118/0x150 [ 357.870951][ T1159] ? xfrm_state_find+0x2cf2/0x5400 [ 357.870970][ T1159] xfrm_state_find+0x2cf2/0x5400 [ 357.870988][ T1159] ? __lock_acquire+0xab9/0xd20 [ 357.871011][ T1159] ? xfrm_state_find+0x1da/0x5400 [ 357.871027][ T1159] ? __pfx_xfrm_state_find+0x10/0x10 [ 357.871048][ T1159] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 357.871075][ T1159] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 357.871093][ T1159] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 357.871109][ T1159] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 357.871126][ T1159] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 357.871141][ T1159] ? process_scheduled_works+0xae1/0x17b0 [ 357.871164][ T1159] ? __lock_acquire+0xab9/0xd20 [ 357.871180][ T1159] ? xfrm_expand_policies+0x41f/0x6a0 [ 357.871197][ T1159] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 357.871211][ T1159] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.871231][ T1159] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 357.871246][ T1159] ? do_raw_spin_unlock+0x122/0x240 [ 357.871260][ T1159] ? icmp6_dst_alloc+0x3a5/0x420 [ 357.871276][ T1159] ? icmp6_dst_alloc+0x3a5/0x420 [ 357.871292][ T1159] ndisc_send_skb+0x41f/0x1440 [ 357.871305][ T1159] ? ndisc_send_skb+0x20c/0x1440 [ 357.871319][ T1159] ? __pfx_ndisc_send_skb+0x10/0x10 [ 357.871341][ T1159] addrconf_dad_completed+0x7ae/0xd60 [ 357.871357][ T1159] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 357.871375][ T1159] addrconf_dad_work+0xc36/0x14b0 [ 357.871388][ T1159] ? __lock_acquire+0xab9/0xd20 [ 357.871407][ T1159] ? __pfx_addrconf_dad_work+0x10/0x10 [ 357.871421][ T1159] ? process_scheduled_works+0x9ef/0x17b0 [ 357.871435][ T1159] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.871451][ T1159] ? process_scheduled_works+0x9ef/0x17b0 [ 357.871462][ T1159] ? process_scheduled_works+0x9ef/0x17b0 [ 357.871475][ T1159] process_scheduled_works+0xae1/0x17b0 [ 357.871498][ T1159] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.871516][ T1159] worker_thread+0x8a0/0xda0 [ 357.871538][ T1159] kthread+0x70e/0x8a0 [ 357.871553][ T1159] ? __pfx_worker_thread+0x10/0x10 [ 357.871565][ T1159] ? __pfx_kthread+0x10/0x10 [ 357.871580][ T1159] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.871595][ T1159] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.871610][ T1159] ? __pfx_kthread+0x10/0x10 [ 357.871625][ T1159] ret_from_fork+0x3f9/0x770 [ 357.871639][ T1159] ? __pfx_ret_from_fork+0x10/0x10 [ 357.871653][ T1159] ? __switch_to_asm+0x39/0x70 [ 357.871668][ T1159] ? __switch_to_asm+0x33/0x70 [ 357.871682][ T1159] ? __pfx_kthread+0x10/0x10 [ 357.871697][ T1159] ret_from_fork_asm+0x1a/0x30 [ 357.871724][ T1159] [ 357.871729][ T1159] [ 358.190905][ T1159] Allocated by task 16212: [ 358.195308][ T1159] kasan_save_track+0x3e/0x80 [ 358.199980][ T1159] __kasan_slab_alloc+0x6c/0x80 [ 358.204818][ T1159] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 358.210265][ T1159] xfrm_state_alloc+0x24/0x2f0 [ 358.215017][ T1159] __find_acq_core+0x8a7/0x1c00 [ 358.219850][ T1159] xfrm_find_acq+0x78/0xa0 [ 358.224248][ T1159] xfrm_alloc_userspi+0x6b3/0xc90 [ 358.229262][ T1159] xfrm_user_rcv_msg+0x7a3/0xab0 [ 358.234195][ T1159] netlink_rcv_skb+0x208/0x470 [ 358.238950][ T1159] xfrm_netlink_rcv+0x79/0x90 [ 358.243700][ T1159] netlink_unicast+0x82f/0x9e0 [ 358.248630][ T1159] netlink_sendmsg+0x805/0xb30 [ 358.253420][ T1159] __sock_sendmsg+0x219/0x270 [ 358.258086][ T1159] ____sys_sendmsg+0x505/0x830 [ 358.262832][ T1159] ___sys_sendmsg+0x21f/0x2a0 [ 358.267599][ T1159] __x64_sys_sendmsg+0x19b/0x260 [ 358.272520][ T1159] do_syscall_64+0xfa/0x3b0 [ 358.277009][ T1159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.282888][ T1159] [ 358.285203][ T1159] Freed by task 7786: [ 358.289174][ T1159] kasan_save_track+0x3e/0x80 [ 358.293859][ T1159] kasan_save_free_info+0x46/0x50 [ 358.298872][ T1159] __kasan_slab_free+0x5b/0x80 [ 358.303728][ T1159] kmem_cache_free+0x18f/0x400 [ 358.308677][ T1159] xfrm_state_gc_task+0x52d/0x6b0 [ 358.313803][ T1159] process_scheduled_works+0xae1/0x17b0 [ 358.319508][ T1159] worker_thread+0x8a0/0xda0 [ 358.324189][ T1159] kthread+0x70e/0x8a0 [ 358.328247][ T1159] ret_from_fork+0x3f9/0x770 [ 358.332841][ T1159] ret_from_fork_asm+0x1a/0x30 [ 358.337620][ T1159] [ 358.339924][ T1159] The buggy address belongs to the object at ffff888055922ec0 [ 358.339924][ T1159] which belongs to the cache xfrm_state of size 928 [ 358.353882][ T1159] The buggy address is located 816 bytes inside of [ 358.353882][ T1159] freed 928-byte region [ffff888055922ec0, ffff888055923260) [ 358.367669][ T1159] [ 358.370070][ T1159] The buggy address belongs to the physical page: [ 358.376491][ T1159] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055922640 pfn:0x55920 [ 358.386561][ T1159] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 358.395060][ T1159] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 358.402598][ T1159] page_type: f5(slab) [ 358.406609][ T1159] raw: 00fff00000000040 ffff88801a58b780 dead000000000122 0000000000000000 [ 358.415176][ T1159] raw: ffff888055922640 00000000800f0009 00000000f5000000 0000000000000000 [ 358.423754][ T1159] head: 00fff00000000040 ffff88801a58b780 dead000000000122 0000000000000000 [ 358.432530][ T1159] head: ffff888055922640 00000000800f0009 00000000f5000000 0000000000000000 [ 358.441822][ T1159] head: 00fff00000000002 ffffea0001564801 00000000ffffffff 00000000ffffffff [ 358.450698][ T1159] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 358.459369][ T1159] page dumped because: kasan: bad access detected [ 358.465779][ T1159] page_owner tracks the page as allocated [ 358.471477][ T1159] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6905, tgid 6904 (syz.4.262), ts 104971416928, free_ts 104742445457 [ 358.490661][ T1159] post_alloc_hook+0x240/0x2a0 [ 358.495424][ T1159] get_page_from_freelist+0x21e4/0x22c0 [ 358.501038][ T1159] __alloc_frozen_pages_noprof+0x181/0x370 [ 358.506849][ T1159] alloc_pages_mpol+0x232/0x4a0 [ 358.511804][ T1159] allocate_slab+0x8a/0x370 [ 358.516305][ T1159] ___slab_alloc+0xbeb/0x1410 [ 358.520982][ T1159] kmem_cache_alloc_noprof+0x283/0x3c0 [ 358.526447][ T1159] xfrm_state_alloc+0x24/0x2f0 [ 358.531228][ T1159] __find_acq_core+0x8a7/0x1c00 [ 358.536257][ T1159] xfrm_find_acq+0x78/0xa0 [ 358.540780][ T1159] xfrm_alloc_userspi+0x6b3/0xc90 [ 358.545896][ T1159] xfrm_user_rcv_msg+0x7a3/0xab0 [ 358.550825][ T1159] netlink_rcv_skb+0x208/0x470 [ 358.555932][ T1159] xfrm_netlink_rcv+0x79/0x90 [ 358.560703][ T1159] netlink_unicast+0x82f/0x9e0 [ 358.565452][ T1159] netlink_sendmsg+0x805/0xb30 [ 358.570195][ T1159] page last free pid 5923 tgid 5923 stack trace: [ 358.576498][ T1159] __free_frozen_pages+0xbc4/0xd30 [ 358.581611][ T1159] __slab_free+0x303/0x3c0 [ 358.586023][ T1159] qlist_free_all+0x97/0x140 [ 358.590609][ T1159] kasan_quarantine_reduce+0x148/0x160 [ 358.596165][ T1159] __kasan_slab_alloc+0x22/0x80 [ 358.601038][ T1159] __kmalloc_noprof+0x224/0x4f0 [ 358.605963][ T1159] tomoyo_realpath_from_path+0xe3/0x5d0 [ 358.611504][ T1159] tomoyo_path_number_perm+0x1e8/0x5a0 [ 358.617020][ T1159] security_file_ioctl+0xcb/0x2d0 [ 358.622514][ T1159] __se_sys_ioctl+0x47/0x170 [ 358.627109][ T1159] do_syscall_64+0xfa/0x3b0 [ 358.631709][ T1159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.637679][ T1159] [ 358.639985][ T1159] Memory state around the buggy address: [ 358.645592][ T1159] ffff888055923080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 358.653634][ T1159] ffff888055923100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 358.661676][ T1159] >ffff888055923180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 358.669747][ T1159] ^ [ 358.677441][ T1159] ffff888055923200: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 358.685579][ T1159] ffff888055923280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 358.693731][ T1159] ================================================================== [ 358.706646][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 358.714965][ T1159] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 358.722173][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 358.731820][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.741870][ T1159] Workqueue: ipv6_addrconf addrconf_dad_work [ 358.748021][ T1159] Call Trace: [ 358.751295][ T1159] [ 358.754318][ T1159] dump_stack_lvl+0x99/0x250 [ 358.758963][ T1159] ? __asan_memcpy+0x40/0x70 [ 358.763561][ T1159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.768853][ T1159] ? __pfx__printk+0x10/0x10 [ 358.773520][ T1159] vpanic+0x281/0x750 [ 358.777492][ T1159] ? preempt_schedule+0xae/0xc0 [ 358.782425][ T1159] ? __pfx_vpanic+0x10/0x10 [ 358.786914][ T1159] ? preempt_schedule_common+0x83/0xd0 [ 358.792450][ T1159] ? preempt_schedule+0xae/0xc0 [ 358.797293][ T1159] ? __pfx_preempt_schedule+0x10/0x10 [ 358.802657][ T1159] panic+0xb9/0xc0 [ 358.806363][ T1159] ? __pfx_panic+0x10/0x10 [ 358.810778][ T1159] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 358.816774][ T1159] ? xfrm_state_find+0x2cf2/0x5400 [ 358.822208][ T1159] check_panic_on_warn+0x89/0xb0 [ 358.827163][ T1159] ? xfrm_state_find+0x2cf2/0x5400 [ 358.832273][ T1159] end_report+0x78/0x160 [ 358.836511][ T1159] kasan_report+0x129/0x150 [ 358.841095][ T1159] ? xfrm_state_find+0x2cf2/0x5400 [ 358.846323][ T1159] xfrm_state_find+0x2cf2/0x5400 [ 358.851472][ T1159] ? __lock_acquire+0xab9/0xd20 [ 358.856335][ T1159] ? xfrm_state_find+0x1da/0x5400 [ 358.861450][ T1159] ? __pfx_xfrm_state_find+0x10/0x10 [ 358.866736][ T1159] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 358.872891][ T1159] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 358.878861][ T1159] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 358.885435][ T1159] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 358.891335][ T1159] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 358.897373][ T1159] ? process_scheduled_works+0xae1/0x17b0 [ 358.903088][ T1159] ? __lock_acquire+0xab9/0xd20 [ 358.908162][ T1159] ? xfrm_expand_policies+0x41f/0x6a0 [ 358.913699][ T1159] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 358.919498][ T1159] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.924771][ T1159] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 358.930656][ T1159] ? do_raw_spin_unlock+0x122/0x240 [ 358.935946][ T1159] ? icmp6_dst_alloc+0x3a5/0x420 [ 358.940888][ T1159] ? icmp6_dst_alloc+0x3a5/0x420 [ 358.946274][ T1159] ndisc_send_skb+0x41f/0x1440 [ 358.951227][ T1159] ? ndisc_send_skb+0x20c/0x1440 [ 358.956377][ T1159] ? __pfx_ndisc_send_skb+0x10/0x10 [ 358.961756][ T1159] addrconf_dad_completed+0x7ae/0xd60 [ 358.967343][ T1159] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 358.973399][ T1159] addrconf_dad_work+0xc36/0x14b0 [ 358.978681][ T1159] ? __lock_acquire+0xab9/0xd20 [ 358.983793][ T1159] ? __pfx_addrconf_dad_work+0x10/0x10 [ 358.989579][ T1159] ? process_scheduled_works+0x9ef/0x17b0 [ 358.995571][ T1159] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.000860][ T1159] ? process_scheduled_works+0x9ef/0x17b0 [ 359.007173][ T1159] ? process_scheduled_works+0x9ef/0x17b0 [ 359.013064][ T1159] process_scheduled_works+0xae1/0x17b0 [ 359.018827][ T1159] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.024799][ T1159] worker_thread+0x8a0/0xda0 [ 359.029432][ T1159] kthread+0x70e/0x8a0 [ 359.033605][ T1159] ? __pfx_worker_thread+0x10/0x10 [ 359.038715][ T1159] ? __pfx_kthread+0x10/0x10 [ 359.044035][ T1159] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.049275][ T1159] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.054565][ T1159] ? __pfx_kthread+0x10/0x10 [ 359.059168][ T1159] ret_from_fork+0x3f9/0x770 [ 359.063768][ T1159] ? __pfx_ret_from_fork+0x10/0x10 [ 359.068869][ T1159] ? __switch_to_asm+0x39/0x70 [ 359.073638][ T1159] ? __switch_to_asm+0x33/0x70 [ 359.078597][ T1159] ? __pfx_kthread+0x10/0x10 [ 359.083177][ T1159] ret_from_fork_asm+0x1a/0x30 [ 359.087933][ T1159] [ 359.091269][ T1159] Kernel Offset: disabled [ 359.095683][ T1159] Rebooting in 86400 seconds..