last executing test programs: 10.23880218s ago: executing program 4 (id=2498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="250000000a0a010200000000000000000a000006"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYRES32=r1], 0x78}}, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000101401002abd7000fcdbdf25080001000200030008004a0000000000080003000100000008004cf64850bf5ff02900ffff000008"], 0x38}, 0x1, 0x0, 0x0, 0x20001051}, 0x40040c0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x27, &(0x7f0000000140)=ANY=[@ANYBLOB="3e693200edf8aaab63f876a76c0cee145e4c67651dcaac"], 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x15, 0x3, 'sh\x00', 0xc, 0x5, 0x272}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.422635828s ago: executing program 4 (id=2525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001", @ANYRES64=r4, @ANYRES64=r3, @ANYRESDEC=r2, @ANYRES8=r0, @ANYRES8=r4], 0x24}}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027e3bd7000fbdbdf254d0000000f00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f00e3ff6e657464657673696d3000000800030002000000080001007063691011000200303030303a30303a3108f5f828000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004081}, 0x8000) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x80000001) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000494000/0x2000)=nil, 0x2000, 0x2000006, 0x22052, r10, 0xdb553000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea80cba3c", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf256200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990001000000280000000600b400e40c00000600b400770700000600b300000000000600b30000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="2000000011008188040f80ec00000000374609cec3edc9fabcaa340c6efe52ccbc7a755fbee6d7aac39483379c2069f22ca7ce1df3f79fa8f6fac7d9fe503c361938b02ba924bf7d0f81e97f1d52550edc7c12cc974c48794f8d63edd2d12a6e1d50c1b1b9d66e37a8eab2268eeba083ed050000000000000032dc1af0d224bf67cab82a5a057fef6b38198edf70af1ad35183f6274d4e6cb3c3bbb818d82ac95fc5e67106855df94a926f02a24f29168a3f5ec615188c90dcc18957b13c", 0xbe}], 0x1}, 0x0) 5.691242224s ago: executing program 3 (id=2530): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x11, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)={0x870, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x7c0, 0x8, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "906de574a62d335228eae111a70f3d9ce535232296d4e84ab64c0063eca61b20"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd2}]}, {0x4}, {0x3b4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @remote, 0x1}}, @WGPEER_A_ALLOWEDIPS={0x364, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ec88fb100be1d253a6924e74b8d619990f4e57abcf6276ad93a23924103f374f"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2d47c0fbca435494e8ece7c1f81822ae329d7f2d6948220d2721ae48656189b7"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "64619d05ddcc9c723cd7e6a923c3db4befeae0113f25c2bc948a7ce235b932ce"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x73}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}]}, {0x1e4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1d8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x26}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @remote, 0xd791}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5ed13433ebba94b136e52535165f6612fc31e90109ae71ef34550c7ea8439716"}]}]}, @WGDEVICE_A_PEERS={0x64, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x870}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 4.688922187s ago: executing program 4 (id=2533): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="080029bd7000fcdbdf250f0000000800010070636900118fb1ce95e5db1b0830303a31302e3000e0850008000b00700000000600110007000000080001007063690011000200303030303a30303a31302e300000000008000b00400000000600110009000000080001007063690011000200303030303a30303a31302e300000000008000b0005000000060011008c000000"], 0x98}, 0x1, 0x0, 0x0, 0x404c486}, 0x80) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) (async) r4 = socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e8040000000", 0x24) (async) r5 = socket$kcm(0xa, 0x2, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000480)="f9478f09724e57bdb47f6f725abefb3abc1e0dc879b4ca016bdc22a893b459c44d606ce63295e7e4f5f1679643afb082d48ee6066a23ec95ffbeb0882c43829f19ee7192b0493c3416e01bc4cda47e972f4c41c37d85961f82787c4172cec5aa1148681db806c8ce3a798c01d3d2cd2ad0ecc9caa5ebd841ba7307f3db610a56ba2e300db9374da8a98a18a68270f5a1f975b48ff3572f31", 0x98}, {&(0x7f0000000540)="0a18734ee9b4101c16a30745fe2736dbe0d81192d5725b6f1471a0b5545826047ec985423c0fad8c0b3ec4cb08ef0e1475433a0a", 0x34}, {&(0x7f0000000600)="acd8b9dd1c1438e30f7db2d20984e544933512111827898f70e55c99d11328826be2c7d8884c26c1bd77b8b600ab86c050e9406b99189f340b5a37e7540c572da778039111af3061abb5e2666110682d38aebf821440d8895a043411155dd05093fd20758abc68727197170c4926f1140d2a", 0x72}, {&(0x7f0000000680)}], 0x4, 0x100, 0x7) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) r7 = socket(0x2, 0x80805, 0x0) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (async, rerun: 64) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) getsockopt$sock_timeval(r9, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x200, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3, 0x7}}}, 0x24}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r12, 0x2f, 0x1, 0x2, 0x1, 0x26, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x1, 0x1000}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xe, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRESOCT=r10, @ANYRES32=r9, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 4.464220807s ago: executing program 3 (id=2535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="911091000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x88, 0x30, 0x1, 0x2, 0x0, {}, [{0x74, 0x1, [@m_mpls={0x70, 0x1, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x4, 0x8001, 0x63e57086}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) connect$pppl2tp(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x23, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000700)="eb8b91b637fef65a49ba2f78d21ed1a175c71a8bfcfe9fa48e296cf44556b3c96e77416a49b8404e1e9f5366e2fe1689e511cf334544f700079f6f119239fc499d6a95bcd31ffb148a512d412a8358f59d993559cec6690782f59bd7e0952d9cb9eb6a52a1b7dec07dec1a5440d8ba78440b308afd3275e6fbded3b5aa295de4e38680d47e9281edada5f3", 0x8b, 0x24000097, &(0x7f0000000540)={0x2, 0x4e20, @private=0xa010102}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x8, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000004c0)=0x14, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) sendmmsg$alg(r4, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) accept$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xb762, 0x20}, &(0x7f0000000200)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="04000000000000000000000000000000812892fe7e27f212a000000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000380012800b00010069703667726023142c89d091e7000f008000000014000700ff010000001000050000000000000001060010004e210000"], 0x58}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 3.965952821s ago: executing program 4 (id=2537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_LABELS_MASK={0xc, 0x17, [0x5, 0x5]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x2, 0x3, 0xc3, 0x3]}]}, 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) (async) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async) unshare(0x2a020400) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) (async) listen(r5, 0x7) (async) r7 = socket$inet(0xa, 0x801, 0x84) (async) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000040)=0x7, 0x4) listen(r7, 0xfffffffd) (async) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r9, 0x3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) (async) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) socket(0x2, 0x3, 0xff) socket$inet_sctp(0x2, 0x5, 0x84) (async) close(0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r11, 0x0, 0xf3a, 0x0) (async) close(r10) 3.777702075s ago: executing program 1 (id=2538): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1f}, [@generic={0x91, 0x1, 0x1, 0x87}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) r2 = openat$cgroup_pressure(r1, &(0x7f0000000380)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x4556b000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000200)=r0}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xc}, 0x94) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000400)=0x1, 0x4) mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x4, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf6}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}], &(0x7f0000000340)='GPL\x00', 0x8001, 0x61, &(0x7f00000004c0)=""/97, 0x41000, 0x3, '\x00', r6, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0xb, 0x1, 0x10}, 0x10, 0x0, r5, 0x6, 0x0, &(0x7f00000005c0)=[{0x5, 0x1, 0x0, 0xb}, {0x1, 0x2, 0xb, 0x4}, {0x0, 0x5, 0xc, 0x6}, {0x1, 0x2, 0x1, 0xb}, {0x5, 0x2, 0x1, 0xb}, {0x2, 0x4, 0x0, 0x9}], 0x10, 0xfffffffe}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 3.751534551s ago: executing program 0 (id=2539): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x5, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x2d0}}, {{&(0x7f0000000940)={0xa, 0x4e1f, 0x20000000, @empty, 0x6}, 0x1c, &(0x7f00000027c0)=[{0x0}, {&(0x7f0000000a80)="7078239309de2825a1225f52af1cbe0512672cbcb5d0c4b702c56630358317f44e3fa9df8c1bc21dc0b1d091eb62bb128947d1b33557d1fbdce7a0becdd6e504bf0f0de97b723021a9dacc124040bad81d3a9125e75caf85e61518382a8dc1eac2dc401239d191", 0x67}, {0x0}, {&(0x7f00000017c0)="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", 0xd97}], 0x4}}], 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250400000005000a000100000008000100", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e25, 0x0, 'sed\x00', 0x3e, 0x3, 0x1}, 0x2c) 3.465267948s ago: executing program 4 (id=2541): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={&(0x7f0000000680), 0x0, 0x0, 0x0, 0xc, r1}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x50) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000880)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x57}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @private=0xa010101}, 0x284, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x8, 0x5}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) 3.408608994s ago: executing program 3 (id=2542): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) write$tun(r2, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14, 0x1be}, @ipv4=@tcp={{0xf, 0x4, 0x0, 0x9, 0x13d, 0x65, 0x0, 0xff, 0x6, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x28, 0x8, 0x0, 0x3, [0x80, 0x1, 0x2, 0x7, 0x0, 0xd, 0x8, 0x4, 0x7f800]}]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x8, 0x0, 0x8, {[@eol, @mptcp=@mp_fclose={0x1e, 0xc, 0x5, 0x0, 0x800}, @exp_fastopen={0xfe, 0x6, 0xf989, "c7cc"}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0xd, "6727e240df36d695213c85"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x6, [0x4]}, @exp_smc={0xfe, 0x6}, @generic={0x0, 0xd, "c27238cfde187945c3df18"}]}}, {"d7a00ec22a5ba3a85e02201b40610c462546bc1d017b8c933b15630709988b82d243d50b67ad3370371ae4ec3e279b50a8472905de5c0022ab3c65d601e3ba8aa347398fb8c749a33c65fa6fdac49daa51a6b794683baeb87ef8056bf770de6efa0fa52792fb8ca2e9025346a55b125993b4c2b9f447a9be8354c09584138fdb15d6214c57824d4e80150d520485b6005345b26e305cd7a1467a1c344bf6a3c5810dc7d95d2cde6159"}}}}, 0x14b) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.324702154s ago: executing program 1 (id=2543): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x20008800) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@local, @in=@empty}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:mnt_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x4, 0x5, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000006c0)={"94193f61777441ab6e348a2d399cfb2c", r4, 0x0, {0x7, 0x10000}, {0x5, 0x1}, 0x4, [0xe, 0x4, 0x100000000, 0x9, 0x100, 0x3, 0x0, 0xff, 0x0, 0xe, 0x2, 0x4a, 0xb, 0x6, 0x8000, 0x1]}) (async) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xe0, 0xa, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xcd}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8001}]}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0xd}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_ETHER={0xa}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x840}, 0x4000800) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r5, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040011) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@struct={0x5, 0x6, 0x0, 0x4, 0x0, 0x1, [{0x10, 0x4, 0xc226}, {0xf, 0x1, 0xb7f8}, {0xa, 0x0, 0x1000}, {0xd, 0x2, 0x3}, {0x5, 0x1, 0x9}, {0x2, 0x4, 0x80}]}]}, {0x0, [0x2e]}}, &(0x7f0000000b40)=""/193, 0x6f, 0xc1, 0x0, 0x7, 0x10000, @value=r1}, 0x28) (async) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000c80)) (async) r6 = socket$rxrpc(0x21, 0x2, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x12, r6, 0xc9120000) (async) recvmsg$unix(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000000d40)}, 0x100) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r5, 0x8, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc080}, 0x40080) write$tun(r1, &(0x7f0000000ec0)={@void, @val={0x1, 0x4, 0x5, 0x9, 0x1, 0x8}, @eth={@broadcast, @broadcast, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x3, 0x1}}, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "e53d137e8f9ef7cb"}}}}}, 0x30) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r7) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555e}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r9, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x4c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200088d4}, 0x44004) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001240), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r11, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 3.210051337s ago: executing program 0 (id=2544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009000200", @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) (async, rerun: 64) r1 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) sendfile(r0, r2, &(0x7f00000000c0)=0x80, 0x68) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x40, 0x4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x50, r3, 0x0) (async, rerun: 32) unshare(0x28000600) (rerun: 32) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c000000006c27fe03852b1a050000000000000000000000ff020000020000000000000000000001ff0004516600df00"], 0x0) 3.139564485s ago: executing program 4 (id=2545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000036c0)={0x2, 0xce}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000003700), &(0x7f0000003740)=0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x14}}, 0x1c}, 0x1, 0x0, 0x0, 0x60080c1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES8=r3, @ANYRES64=r3, @ANYRES16=r0, @ANYRESOCT=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) 2.770756936s ago: executing program 1 (id=2547): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f0000000b00)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$kcm(0x11, 0x2, 0x300) (async) r2 = socket$kcm(0x11, 0x2, 0x300) socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, 0x0, 0x40000) sendmsg$rds(r3, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$rds(r3, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x29, 0x2, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[], 0xfdef) (async) write$tun(r5, &(0x7f0000000300)=ANY=[], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ppoll(&(0x7f00000001c0)=[{r7, 0x460}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r8, 0x5421, &(0x7f0000000100)=0x9) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r8, &(0x7f0000000280)={0x2, 0x4e24, @private=0xa010101}, 0x4e) close(r8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000004000000ff0000000700000000020000", @ANYRES32, @ANYBLOB="00008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000020060c447921eedca7c87e33a450000000800"/40], 0x50) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) (async) bind$alg(r9, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d73cd3292ea54c7be05", 0x11) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d73cd3292ea54c7be05", 0x11) 2.628918662s ago: executing program 2 (id=2548): socket$netlink(0x10, 0x3, 0x12) socket$nl_route(0x10, 0x3, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000280)={@l2={0x1f, 0x9, @none, 0x1, 0x1}, {0x0, 0xffffffffffffffee}, 0x0, 0x1}, 0xffffffffffffff0c) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x4000007f) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x80000001, 0x9, 0x3fd, 0x6, "fc1c0f", 0x4, [0x4, 0x9, 0x1ff, 0x5]}}) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18f2ffff200000008800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.146018575s ago: executing program 3 (id=2549): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnetconf={0x14, 0x52, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x804) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnetconf={0x14, 0x52, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x804) (async) 1.919928811s ago: executing program 0 (id=2550): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040009", @ANYRES32=r0], 0x58}}, 0x4000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f0000000000)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c810e19e00399da26f0000000000", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4808}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x48, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xe}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) (async) r7 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) (async) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="900000000114f30325bd7000ffdbdf25"], 0x10}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0ea, 0xc574450d1af3b5bd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044054}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001640)=@nat={'nat\x00', 0x1b, 0x5, 0x6b0, 0x498, 0x0, 0xffffffff, 0x0, 0x360, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, &(0x7f00000006c0), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', [0xff, 0xff, 0xff000000, 0xff], [0xff, 0xff000000, 0x0, 0xff000000], 'gre0\x00', 'batadv_slave_0\x00', {0xff}, {0xe86da42492e82004}, 0x5e, 0x40, 0x5}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@private=0xa010101, @ipv4=@loopback, @port=0x4e21, @gre_key=0x6}}}, {{@ipv6={@local, @private0, [0xffffff00, 0xff, 0x93620e2ae69efba9, 0xffffffff], [0xff000000, 0x0, 0xffffffff, 0xff000000], 'geneve0\x00', 'gretap0\x00', {}, {0xff}, 0x3a, 0x3, 0xa, 0x1}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@dst={{0x48}, {0x44f, 0x2, 0x1, [0x5, 0x7, 0x6, 0x8, 0x1, 0x1, 0x2, 0x8, 0xfff, 0x81, 0x3, 0x9, 0x5a, 0x0, 0x1000], 0xe}}, @common=@rt={{0x138}, {0x0, [0x100, 0x5331], 0x1, 0x2, 0x1, [@local, @loopback, @private0, @local, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @private1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x41}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @local]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv4=@broadcast, @ipv4=@remote, @icmp_id=0x65, @port=0x4e22}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4636, 0x2, 0x0, [0x80c5, 0x0, 0x7, 0x698, 0x3, 0x6, 0x401, 0x9, 0x80, 0x8, 0x8, 0x2, 0x30, 0x7ff, 0x2, 0x7], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x6, @ipv6=@local, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0x8b, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x84, 0x2c, 0x1}}, @common=@srh={{0x30}, {0x67, 0x81, 0x9, 0x6, 0x2, 0x401, 0x1110}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x710) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000004000180100002800c000180080001"], 0x28}}, 0x0) (async) r10 = socket$nl_crypto(0x10, 0x3, 0x15) (async) recvmsg(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000000), &(0x7f0000000080)='syzkaller\x00', 0x2, 0x91, &(0x7f0000000400)=""/145, 0x83d00, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x7, 0xf, 0x9}, {0x0, 0x5, 0x0, 0xe}, {0x3, 0x3, 0xb, 0xa}, {0x3, 0x1, 0x6, 0x1}], 0x10, 0xdadf}, 0x94) (async) r11 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r0) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000380)={0x0, 0x2, 0x4, 0x2000000000009}) (async) ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0) 1.803126924s ago: executing program 3 (id=2551): unshare(0x20400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000100)=""/129, 0x81}], 0x3) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x13, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x20000080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000800)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x2, @f={0xf, 0x4, 0x2, 0x1, {0x81}, 0x1}}, 0xa) close(r0) 1.749384233s ago: executing program 2 (id=2552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@delsa={0x28, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {@in=@broadcast, 0x4d6, 0x8, 0x6c}}, 0x28}}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a90303000000000000003200000008004001"], 0x1c}}, 0x4004050) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.392075541s ago: executing program 2 (id=2553): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0x2}, [@typed={0x4}]}, 0x18}}, 0x8000) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 1.24918303s ago: executing program 0 (id=2554): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x5, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x2d0}}, {{&(0x7f0000000940)={0xa, 0x4e1f, 0x20000000, @empty, 0x6}, 0x1c, &(0x7f00000027c0)=[{0x0}, {&(0x7f0000000a80)="7078239309de2825a1225f52af1cbe0512672cbcb5d0c4b702c56630358317f44e3fa9df8c1bc21dc0b1d091eb62bb128947d1b33557d1fbdce7a0becdd6e504bf0f0de97b723021a9dacc124040bad81d3a9125e75caf85e61518382a8dc1eac2dc401239d191", 0x67}, {0x0}, {&(0x7f00000017c0)="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", 0xd97}], 0x4}}], 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e25, 0x0, 'sed\x00', 0x3e, 0x3, 0x1}, 0x2c) 1.075251083s ago: executing program 1 (id=2555): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x9, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x66, 0x0, 0x20, 0x2}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x9, 0x2}, {0x5, 0x1}, {0xe, 0x2}, {0x9, 0x2}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @var={0x10, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x2e, 0x30, 0x30, 0x0, 0x61, 0x0]}}, &(0x7f0000000600)=""/157, 0x91, 0x9d, 0x0, 0x3ff}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8020, 0x11000}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40000000}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1e}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 855.96784ms ago: executing program 2 (id=2556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000000000000000000a804040000000060000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) socket(0x21, 0xa, 0x92) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"], 0x5c}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) 793.378825ms ago: executing program 0 (id=2557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500"], 0x48) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xfff3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000004c0)={0xff, {{0xa, 0x4e23, 0x7, @remote, 0x8000}}, {{0xa, 0x4e22, 0x4, @mcast1, 0x7}}}, 0x108) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 787.302884ms ago: executing program 1 (id=2558): accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x80000) (async) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x80000) getpeername(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x80) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x33}, 0x8) socket$rds(0x15, 0x5, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) (async) bind$rds(r1, &(0x7f0000000180)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f00000034c0)={&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/35, 0x23}, {&(0x7f0000001340)=""/208, 0xd0}, {&(0x7f0000001440)=""/146, 0x92}, {&(0x7f0000001500)=""/231, 0xe7}, {&(0x7f0000001600)=""/205, 0xcd}], 0x7, &(0x7f00000032c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x1, 0x9}, {&(0x7f0000001780)=""/250, 0xfa}, &(0x7f0000002c40)=[{&(0x7f0000001880)=""/29, 0x1d}, {&(0x7f00000018c0)=""/159, 0x9f}, {&(0x7f0000001980)=""/146, 0x92}, {&(0x7f0000001a40)=""/177, 0xb1}, {&(0x7f0000001b00)=""/182, 0xb6}, {&(0x7f0000001bc0)=""/77, 0x4d}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x7, 0x20, 0x401}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0xd91}}, @rdma_args={0x48, 0x114, 0x1, {{0x9}, {&(0x7f0000002cc0)=""/130, 0x82}, &(0x7f00000030c0)=[{&(0x7f0000002d80)=""/230, 0xe6}, {&(0x7f0000002e80)=""/176, 0xb0}, {&(0x7f0000002f40)=""/50, 0x32}, {&(0x7f0000002f80)=""/73, 0x49}, {&(0x7f0000003000)=""/176, 0xb0}], 0x5, 0x16, 0x30b6f78e}}, @mask_cswp={0x58, 0x114, 0x9, {{0x606, 0x5}, &(0x7f0000003140)=0x9, &(0x7f0000003180)=0x80000000, 0x28f, 0x1, 0x9619, 0x7, 0xc, 0x10}}, @fadd={0x58, 0x114, 0x6, {{0x31, 0x1}, &(0x7f00000031c0)=0x6, &(0x7f0000003200)=0x7, 0x3, 0x5d4, 0x0, 0x8, 0x66}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x6}, &(0x7f0000003240), &(0x7f0000003280)=0x8, 0x1, 0x0, 0x6, 0x3, 0x5, 0x7}}], 0x1c8, 0x20004840}, 0x8001) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f00000034c0)={&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/35, 0x23}, {&(0x7f0000001340)=""/208, 0xd0}, {&(0x7f0000001440)=""/146, 0x92}, {&(0x7f0000001500)=""/231, 0xe7}, {&(0x7f0000001600)=""/205, 0xcd}], 0x7, &(0x7f00000032c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x1, 0x9}, {&(0x7f0000001780)=""/250, 0xfa}, &(0x7f0000002c40)=[{&(0x7f0000001880)=""/29, 0x1d}, {&(0x7f00000018c0)=""/159, 0x9f}, {&(0x7f0000001980)=""/146, 0x92}, {&(0x7f0000001a40)=""/177, 0xb1}, {&(0x7f0000001b00)=""/182, 0xb6}, {&(0x7f0000001bc0)=""/77, 0x4d}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x7, 0x20, 0x401}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0xd91}}, @rdma_args={0x48, 0x114, 0x1, {{0x9}, {&(0x7f0000002cc0)=""/130, 0x82}, &(0x7f00000030c0)=[{&(0x7f0000002d80)=""/230, 0xe6}, {&(0x7f0000002e80)=""/176, 0xb0}, {&(0x7f0000002f40)=""/50, 0x32}, {&(0x7f0000002f80)=""/73, 0x49}, {&(0x7f0000003000)=""/176, 0xb0}], 0x5, 0x16, 0x30b6f78e}}, @mask_cswp={0x58, 0x114, 0x9, {{0x606, 0x5}, &(0x7f0000003140)=0x9, &(0x7f0000003180)=0x80000000, 0x28f, 0x1, 0x9619, 0x7, 0xc, 0x10}}, @fadd={0x58, 0x114, 0x6, {{0x31, 0x1}, &(0x7f00000031c0)=0x6, &(0x7f0000003200)=0x7, 0x3, 0x5d4, 0x0, 0x8, 0x66}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x6}, &(0x7f0000003240), &(0x7f0000003280)=0x8, 0x1, 0x0, 0x6, 0x3, 0x5, 0x7}}], 0x1c8, 0x20004840}, 0x8001) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000003500)={0x0, 0x7f}, &(0x7f0000003540)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000003580)={r2, 0x54, "db3ca46a7c3438040d159edf65001bc121d96f775532138ea32ced7f266625e795cdff37b480a7d81b6ca50666808a8ebf7ec6954b8a7b6d03d2ca8449bc0f2ca4114ba02d9da39d7bf70cad5bb0e61b1ebbcfe0"}, &(0x7f0000003600)=0x5c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000003640)={'wg1\x00'}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000003680)={'caif0\x00', {0x2, 0x4e20, @loopback}}) bind$inet(0xffffffffffffffff, &(0x7f00000036c0)={0x2, 0x4e21, @broadcast}, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000003700), &(0x7f0000003740)=0x30) socket$igmp6(0xa, 0x3, 0x2) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000003780)={{0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x102}, {0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0xffffffffffffffff, {[0x8, 0x4, 0x10000, 0x3, 0x1, 0x401, 0x5, 0x800]}}, 0x5c) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000003800)={@any, 0x1eb1eeb2}) ioctl$NILFS_IOCTL_GET_CPINFO(r6, 0x80186e82, &(0x7f0000003900)={&(0x7f0000003840)=[{0x1, 0x0, 0x2, 0x6, 0x4, 0x6d, 0x0, 0x2}, {0x0, 0x0, 0xfff, 0x1, 0x17, 0x3, 0xbbf, 0x9}, {0x2, 0x0, 0xa, 0x8, 0x19, 0x30, 0xd, 0x1}], 0x3, 0x38, 0x1}) socket$inet6(0xa, 0xa, 0x1598) (async) r7 = socket$inet6(0xa, 0xa, 0x1598) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000003940)={{0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, {0xa, 0x4e24, 0xe791, @private1}, 0xffffffffffffffff, {[0xff, 0x1, 0xff, 0xa, 0x0, 0xd1, 0x3, 0xc]}}, 0x5c) connect$inet(r0, &(0x7f00000039c0)={0x2, 0x4e22, @loopback}, 0x10) pipe(&(0x7f0000003a00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000003a40)=0x1000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), r8) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), r8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003b00)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000003c00)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b40)={0x68, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3028065e79"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "83b1423102a5f3405920e8159e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000003c00)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b40)={0x68, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3028065e79"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "83b1423102a5f3405920e8159e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x80010, r3, 0x6f19c000) socket$inet6_tcp(0xa, 0x1, 0x0) 611.686904ms ago: executing program 2 (id=2559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x82b, &(0x7f0000000ec0)={@local, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@x25={0x805, {0x0, 0x0, 0xf1, "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"}}}}, 0x0) (async) syz_emit_ethernet(0x82b, &(0x7f0000000ec0)={@local, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@x25={0x805, {0x0, 0x0, 0xf1, "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"}}}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3e}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3e}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="540000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000512800b000100672365746170000024000280fa00040000120000060011004e20000006000f00e80000000800050004000000"], 0x54}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="540000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000512800b000100672365746170000024000280fa00040000120000060011004e20000006000f00e80000000800050004000000"], 0x54}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x5e}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0x0, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r6, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) accept4(r4, 0x0, 0x0, 0x80800) (async) r8 = accept4(r4, 0x0, 0x0, 0x80800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf500f0ff}, 0x0) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf500f0ff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000e8ffffffffff0b0000004800058008000100"], 0x5c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002400010026bd7040fcdbdf250401"], 0x14}, 0x1, 0x300, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00010001"], 0x20}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/109, 0x6d}], 0x1}, 0x5}], 0x1, 0x2102, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/109, 0x6d}], 0x1}, 0x5}], 0x1, 0x2102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 470.314545ms ago: executing program 3 (id=2560): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x19, 0x0, &(0x7f0000001400)) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$alg(r3, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb13456f46", 0x5}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) close(r3) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="040026bd7000fcdbdf2554913171ca0008000493decd832e785c66181d5de64887a8e40ef678df165dfe2f354729c6", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) sendmsg$key(r4, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r10, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x2, 0x0) 245.204564ms ago: executing program 1 (id=2561): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x44}, @rand_addr=' \x01\x00', 0x2, 0x6, 0x1, 0x0, 0x3, 0x2000000, r2}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000540)={0x0, 0x1, 0x6, @broadcast}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r7, 0x0, 0x18, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0xfe5c}]}, 0x2c}}, 0x24040084) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x4, 0x0, 0x0, 0x6, 0x58010a, r2}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r13, 0x10c, 0x9, &(0x7f0000000000)=0x2cbab48e, 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r12, 0x400448c8, &(0x7f00000000c0)={r11, r11, 0x206, 0x0, 0x0, 0x3, 0x72, 0x1, 0x3, 0x7, 0x0, 0x40, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r12, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x3d, 0x24, 0x400, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0x7}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 243.524176ms ago: executing program 0 (id=2562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@del={0xe0, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x200}}, 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000015c0)={'tunl0\x00', &(0x7f00000014c0)={'erspan0\x00', 0x0, 0x700, 0x40, 0x800, 0x6, {{0x2b, 0x4, 0x0, 0x4, 0xac, 0x67, 0x0, 0x6, 0x4, 0x0, @local, @private=0xa010100, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x21, 0x3, 0x0, [{@broadcast, 0x4}, {@multicast2, 0x76}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9706}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@empty, 0x6}]}, @generic={0x44, 0x4, "bad6"}, @timestamp_prespec={0x44, 0x4c, 0x14, 0x3, 0x8, [{@remote, 0xfd6c}, {@multicast2, 0x1bf90000}, {@remote}, {@remote}, {@empty}, {@empty, 0x280}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0xd}, {@loopback, 0x1}]}, @generic={0x4dd357a79471f585, 0xb, "56ef871e37ce5d545a"}, @timestamp_prespec={0x44, 0xc, 0x12, 0x3, 0x2, [{@rand_addr=0x64010102, 0xe}]}, @end]}}}}}) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r1, &(0x7f0000001700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)=@dellinkprop={0xbc, 0x6d, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x200, 0x10}, [@IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_0\x00'}, {0x14}]}, @IFLA_VF_PORTS={0x68, 0x18, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '(.#\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5ce18dc60904a5307a0b91b0b209af16"}, @IFLA_PORT_PROFILE={0xd, 0x2, 'mptcp_pm\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6d}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "121ae0f7ccd27f0f8f848a27a582e804"}, @IFLA_PORT_VF={0x8}]}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0xc084) recvmmsg(r0, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4095, 0xfff}, {&(0x7f0000000340)=""/245, 0xf5}], 0x2}}], 0x1, 0x2000, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x200028c1}, 0x4000094) 0s ago: executing program 2 (id=2563): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001b80)=@newchain={0x2d4c, 0x64, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xfff1, 0xe}, {0x1, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0xaec, 0x2, [@TCA_CGROUP_POLICE={0x1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_CGROUP_POLICE={0x7c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x7, 0x4, 0xffffffff, {0x8, 0x1, 0x8, 0x9, 0x8001}, {0x7, 0x0, 0x9, 0xd20b, 0x0, 0xfffffff8}, 0x2, 0x1, 0x400}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x3, 0xff, 0x4, {0x1, 0x0, 0x3, 0xb, 0x8, 0xe}, {0x7, 0x1, 0x9c6d, 0xfffc, 0x9, 0xa}, 0xfff, 0x8, 0x7}}]}, @TCA_CGROUP_EMATCHES={0x8bc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x8b0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x236}, {0x94, 0x1, 0x0, "9b"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x7}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x5591}, {0x1, 0x6, 0x3}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xc, 0x7, 0x4}, {{0x1, 0x1, 0x1}, {0x4, 0x1}}}}, @TCF_EM_CONTAINER={0x808, 0x1, 0x0, 0x0, {{0x18, 0x0, 0x8}, "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"}}, @TCF_EM_CONTAINER={0x30, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x40}, "f4e53ee452500a70d8faa112a69ca010afdd4073d0d29507477e192bb964327833"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x4}, {0x4, 0x4, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4609, 0x1, 0xfc01}, {0x1, 0x2, 0x5, 0x2, 0x0, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_EMATCHES={0x190, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0x696}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_NBYTE={0x14, 0x5, 0x0, 0x0, {{0xff, 0x2, 0x4}, {0x3, 0x1, 0x1, 'D'}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x65c0, 0x3, 0x4}, {0x80000001, 0x8, 0xf35, 0x1}}}, @TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0x1ff, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8001}, {0x5, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xa, 0x1}, {0xf178, 0x9}}}]}}, @TCF_EM_CONTAINER={0x30, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x7}, "439a35bd7921d7b7b12771984114e86b9ae253c7525f5c331dea2e9f464d42fe77"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x9e3}, {0x3, 0x4, 0x2}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xb, 0x9, 0x7ff}}}, @TCF_EM_META={0x6c, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x1ff}, [@TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="dee3ac5fa4", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x3, 0x1}, {0x5, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="fe092f94", @TCF_META_TYPE_VAR="1252", @TCF_META_TYPE_VAR="483c33e880b0c7", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="b9d3ee2c3b"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='j']}]}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xb, 0x2, 0x40}, {0xe, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x401, 0x2, 0x40}, {0x8}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xc6, 0x7, 0x5}, {{0x2, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xff}, @filter_kind_options=@f_bpf={{0x8}, {0x21f8, 0x2, [@TCA_BPF_ACT={0x21ec, 0x1, [@m_gact={0xe0, 0xf, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1262, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1723, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1633, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x100e, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0x20000000, 0xe, 0x1}}]}, {0x69, 0x6, "698a9ffdf5c6e471e32ec6cde16aa1a4d89b4f408eb873ff81925282b0b3b1d8faa324b7bc6e91c52f792326a6fe6faac186ae4532b7fbe7e2dafdaa7117849daff623a35d52bbbd19cec287010a816e47b5b192b27ac3f45bbe484d406b23efc3a2886c79"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x1d90, 0x0, 0x0, 0x0, {{0xb}, {0x1d0c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1c}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0x4, 0x4, 0x800, 0xafee, 0x4, 0x10, 0x4, 0x10000, 0x7, 0x7, 0x0, 0x5, 0xffffff81, 0xe, 0x2, 0x4, 0x1, 0x101, 0xb, 0x80, 0x4, 0x8, 0xc2fa, 0xf4, 0x3, 0x65c, 0x7ff, 0x2f, 0xe89, 0x7, 0x0, 0x56c, 0x88, 0xdfe, 0x31, 0x3, 0x1000, 0x8, 0xfd04, 0xfff, 0xb14, 0x5, 0x3, 0xfff, 0xf32, 0xffffff25, 0xf, 0x6, 0xf, 0x30, 0x3, 0x4, 0x100, 0x5, 0x81, 0xac97, 0x1, 0x7fffffff, 0x5, 0x5, 0x3, 0x101, 0x0, 0x6, 0x9, 0xffff, 0x1, 0x4, 0x2, 0xfffffffa, 0x69e8, 0x0, 0x80000001, 0x6, 0xead, 0x2, 0x8, 0x1, 0xff, 0x5, 0x4, 0x5, 0x2, 0x400, 0x40, 0xa71, 0x9, 0x80000000, 0x6, 0x7, 0x3, 0xc00000, 0x8000, 0x660, 0x0, 0x8, 0x8, 0x8, 0x5, 0x2, 0x0, 0xf, 0x55, 0x0, 0x8, 0x5, 0x2, 0x0, 0x2, 0x5a, 0x5, 0x1, 0x4fc2, 0x1000000, 0x2, 0x80000000, 0x6, 0x9, 0x1, 0x1, 0x9, 0xf, 0xa723, 0xe, 0x5, 0x3, 0x6, 0x6, 0x9, 0x1, 0x6, 0x3a1, 0x81, 0x4, 0x4, 0xffff, 0xa, 0x4, 0x7fff, 0x8, 0x1ff, 0xe8, 0x8, 0x10000, 0x4, 0x7, 0x9, 0xfffffffa, 0xf, 0x7, 0x4c7ced32, 0x7, 0x5, 0x1, 0x8, 0xffffffff, 0x9981, 0x6, 0x3, 0x1200000, 0x7, 0x400040, 0x6, 0xff, 0x0, 0x7fffffff, 0x8, 0x3bd, 0x5, 0x81, 0x5, 0x8, 0xfffffffe, 0x14, 0x4, 0x4, 0x5, 0xc27, 0x9, 0x80000000, 0x1c50, 0x6, 0x7, 0x4, 0x8, 0xc1a, 0xffff, 0x2, 0x6, 0x9, 0xb0, 0x8, 0x1, 0xfffffff3, 0xb6c, 0x8, 0x5, 0x7fffffff, 0x8, 0x6, 0x4, 0x10, 0x0, 0x2, 0x55, 0x3ff, 0x6, 0x100, 0x10001, 0x1, 0x5701, 0x48f, 0xff, 0x5, 0x7, 0x3, 0x7818182, 0x6b, 0x0, 0xa3f8, 0x62, 0x72, 0x9, 0x3, 0x8e55, 0xff, 0x8, 0x5, 0x9, 0x7fff, 0x6, 0x1, 0x40, 0x10001, 0x80000000, 0x7, 0x7ff, 0x4258, 0xffff, 0x2, 0x5c, 0x1, 0x3b, 0x7ebb93d0, 0x6, 0xc, 0x6, 0xfffffff7, 0x9, 0x2, 0x4, 0xffff, 0x0, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x1ff, 0xc1, 0x1ff, 0x8, 0x5, 0x2, 0x5, 0x7, 0x4, 0x1ff, 0x80, 0x6, 0x1ff, 0x7fff, 0x80000000, 0x7, 0x9, 0x80000000, 0x7, 0x1ff, 0x0, 0x0, 0x6, 0x7, 0x0, 0x1, 0x3, 0x2, 0xb, 0x3, 0x6, 0x5, 0x0, 0x1, 0x4, 0x10, 0x2000000, 0x4, 0x5c2, 0xa3, 0x746a, 0x0, 0x30da, 0x9, 0xdff5, 0x80000000, 0x7, 0xfffff78d, 0x6, 0x7, 0xfff, 0x67, 0x81, 0x1, 0x4, 0xc, 0x0, 0x8000, 0x1, 0xe7f1, 0x5, 0x2, 0xfffffffb, 0x4, 0x2074, 0x3, 0x1, 0x7, 0x0, 0x80000000, 0x1, 0x4, 0x5, 0x8, 0x4, 0x7, 0x6, 0x7, 0x2, 0x1, 0x9, 0xfff, 0x68, 0x2, 0x3, 0x91a, 0x8001, 0x2, 0x0, 0x4ed0, 0x0, 0x86, 0x0, 0xfffffffe, 0xffff5080, 0x2, 0x0, 0x10, 0x3, 0x30, 0x10, 0x918, 0x0, 0x8, 0x7, 0x0, 0x7, 0x3ff, 0x3, 0x2, 0xfffffffb, 0x7fffffff, 0x4, 0x1ff, 0x3, 0x401, 0x101, 0x1, 0x80, 0x61031ba2, 0x82ac, 0x4, 0xabb, 0x6, 0x5, 0x7, 0x10000, 0x9a, 0x1400, 0x36ce, 0x9, 0x5, 0x101, 0x7, 0x6, 0x6, 0x9, 0xfff, 0x9f, 0x40, 0x81, 0xfffffffc, 0x9, 0x9, 0x7, 0x7fff, 0x5, 0x4, 0x5, 0x3, 0x6, 0x401, 0xffff8000, 0x1, 0x5, 0x3, 0xfffff800, 0xceae, 0xb, 0x1ff, 0x7, 0x1, 0xf72e, 0x3, 0x5, 0x1b, 0xfffffff9, 0x5, 0x100, 0xfffffffa, 0x4, 0x0, 0x6, 0x80000000, 0x5, 0x10, 0x88d, 0xffffffff, 0x7, 0x2, 0x7ff, 0xff, 0x8000, 0x800, 0xfffffffd, 0x3, 0x5154, 0x8, 0x1, 0x1, 0x8, 0x8, 0x0, 0x400, 0x2, 0xd, 0x7, 0x101, 0x5e3, 0x8000, 0xc, 0x72b0, 0x6fd6, 0x0, 0x5, 0x4, 0x0, 0x5a1c00, 0x3, 0x1, 0x1, 0x8, 0x2, 0xfffffffa, 0x3, 0x4, 0x8, 0x6, 0xd, 0x96, 0x9, 0x4, 0x0, 0xd, 0x5, 0x0, 0x716, 0x6, 0x7, 0xfffffff9, 0x0, 0x6, 0xfffffff5, 0x3, 0x5, 0xade3, 0xe, 0x0, 0x0, 0x51, 0x0, 0x8, 0xbc5, 0xcc7a, 0x1, 0x80, 0x8, 0x9, 0x9, 0xa538, 0x7, 0x0, 0xa, 0x3ff, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfec, 0x7ff, 0x8, 0xfffffffc, 0x7, 0xffffffff, 0x1, 0x0, 0x7, 0x9, 0x4, 0x4, 0x1, 0x3, 0xff, 0x4800, 0x3, 0x6, 0xffffffff, 0x9, 0xa, 0x3, 0xffffffff, 0xfffffff7, 0xd, 0x100, 0x101, 0x1, 0x9, 0x57e, 0x2, 0x1, 0x8, 0xfffffff1, 0xe, 0x8, 0x9, 0x8, 0x0, 0xe164, 0x10, 0x2, 0x47ea, 0x80000001, 0x8001, 0x2, 0x2, 0x1, 0x100, 0x2, 0x5, 0x1, 0x3, 0xb2, 0x6, 0x7, 0x4, 0x6, 0x80000001, 0x5, 0x4, 0x916c, 0x2, 0x1, 0x1000, 0x1, 0x10001, 0x401, 0x5, 0x1, 0xaa39, 0x48777337, 0xffffff25, 0x9, 0x8, 0x9, 0x0, 0x8001, 0xfffffff8, 0x9, 0x7fffffff, 0x7c, 0x0, 0x5, 0x3, 0x20000000, 0x101, 0x8, 0x2, 0x1, 0x6000000, 0x1ff, 0x4, 0x3, 0x9, 0xe3, 0x5, 0xff, 0x4, 0x800, 0x1000, 0x7, 0x3, 0xbdd, 0x1, 0xd5, 0xc0, 0x3, 0x0, 0x2, 0x1, 0x7, 0xfffffff8, 0x7, 0x54b, 0x5, 0x2, 0x9, 0x6, 0xa, 0x5, 0xfffffffd, 0x8000000, 0x0, 0x9f73, 0x7, 0x6, 0x7, 0x9, 0x21ad, 0x6, 0xfffffff9, 0xfffff000, 0x22, 0x1, 0x400, 0x0, 0xffffff1b, 0x6, 0x2, 0x4, 0x8, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x6d5, 0x5, 0x80, 0x1000, 0x6, 0x4, 0x5d, 0x42e1, 0x6b0, 0x22db, 0xde, 0xafd, 0x7ff, 0x1, 0x101, 0xfffffffa, 0x6f, 0x4, 0x101, 0x9, 0x100, 0x8, 0x3, 0xd356, 0x0, 0x4, 0x2, 0x0, 0x11924b78, 0xfffffffa, 0x100, 0x400, 0xffffffff, 0x2, 0xe, 0x19a, 0xc0, 0xd77c, 0x2, 0xfff, 0x4, 0x40, 0x5, 0x1, 0xfff, 0x8, 0x72, 0x5, 0x7, 0x0, 0x1, 0x45e2a027, 0x8, 0xd6, 0x6, 0x3, 0x1, 0x4, 0x7, 0x18b, 0xb, 0x5, 0x7ff, 0x6, 0x4, 0x4, 0x3, 0x46, 0x80, 0x1, 0x1c0000, 0x3, 0xab53, 0xe, 0x1, 0x0, 0x3, 0x2, 0xe88d, 0x81, 0x6, 0xe5a, 0xa2b, 0x2, 0x5, 0x5, 0x0, 0x8ad8, 0x8, 0x51, 0x1, 0x5, 0x7fb2, 0x8, 0x1ff, 0x4fd, 0x7, 0x3ff, 0x7, 0x8, 0x4, 0x5, 0x87f1, 0x6, 0x58c, 0xfffffff8, 0x7, 0x5, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0xdfa, 0x7, 0x738, 0x0, 0x3ff, 0x3ff, 0xda6, 0xd, 0x49f, 0x6, 0x6, 0x100, 0x0, 0x40, 0x3, 0x200, 0xbf2a, 0x8, 0x4, 0x8, 0x1, 0x4, 0x6, 0x9, 0x55d, 0x5, 0x8, 0xb, 0x0, 0x5, 0x3ff, 0x80000, 0x0, 0x800, 0xfdf6, 0x4, 0x5, 0x2, 0x9, 0x7, 0x0, 0x3, 0x8, 0x61b, 0x0, 0x4, 0x7, 0x7, 0x10, 0x8, 0x8001, 0x1ff, 0x8, 0x7, 0x3, 0x8, 0x2a308b8b, 0xf, 0x6, 0x7f, 0x7, 0x5, 0x5, 0xb, 0xe, 0x2, 0x6, 0x2, 0x3, 0xf03, 0x3, 0x800, 0x9, 0x422, 0x1000, 0x3, 0x8, 0x3, 0xb6, 0x8, 0x43a8, 0x5, 0x5, 0xffffff01, 0xeb20000, 0x4, 0x7ff, 0x2, 0x3, 0x81, 0x7, 0xe5, 0x180, 0x71b8, 0x6f5, 0x6, 0x7, 0x6, 0x9000000, 0x4, 0x10001, 0xe, 0x1, 0x6, 0x6, 0xfff, 0x5, 0x21, 0xb6, 0x2, 0xc304, 0x71, 0x8, 0x0, 0x9, 0x9, 0x8, 0x5, 0x0, 0x3, 0x33ba, 0x5, 0x7, 0x3, 0x2868, 0x4, 0x1, 0xf9, 0x9, 0x614, 0x6, 0x9, 0x9, 0x7, 0x9, 0x3, 0x80000001, 0xa, 0x441, 0x9, 0x0, 0xbe, 0x6, 0x4, 0x50a, 0x0, 0xffff857d, 0x5, 0x6, 0x8, 0x42, 0xfffffffb, 0x7, 0xfffffff9, 0x7fff, 0x8, 0x0, 0xffff, 0x7, 0x7fff, 0x7, 0x559b, 0x7, 0x9, 0xb7, 0xfffffff7, 0x71d, 0xde, 0x86, 0xda, 0x4, 0x3889, 0x54ab4b96, 0x2, 0x7f, 0x80, 0x38000000, 0x943, 0x6, 0x4, 0x0, 0xac01, 0x4, 0xfffffc00, 0xfffffffd, 0x7, 0x3, 0x8, 0x0, 0x90f, 0x3ff, 0x8, 0xcc000000, 0x7, 0x3b, 0x1, 0x3, 0x763482c4, 0xe9, 0x4, 0x5, 0xfa, 0x6, 0x9, 0x7, 0xf, 0x80000001, 0x0, 0x5fbe, 0x8, 0x3, 0x2, 0x1, 0x10, 0x6, 0x8, 0x0, 0x80, 0x8, 0x3ff, 0x3, 0x3, 0x401, 0x4, 0x90, 0x1, 0x2, 0x8, 0x59b8000, 0x0, 0x4, 0x3, 0x61080000, 0xe, 0x6, 0x401, 0x2, 0x3, 0x6, 0x80, 0x5, 0x8, 0x3, 0x2, 0x41a0, 0x4, 0x7ff, 0x10001, 0x9e, 0xaaf, 0xec99, 0x800, 0x8, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf447, 0x1dc0000, 0x1, 0xffffffff, 0xf336, 0x5, 0xe60, 0x200, 0xa, 0xffff8001, 0xcc, 0x0, 0x9, 0x7, 0xfffffff8, 0xd46, 0x3, 0x6, 0x6, 0x8, 0x3, 0x5, 0x2, 0x7, 0x3, 0x1000, 0x1, 0xe7d, 0x2, 0x100, 0x9, 0x2, 0x961, 0x80000001, 0x9, 0xaa, 0x3, 0x7, 0xfff, 0xb6e, 0x5, 0xffe8, 0x5, 0x10001, 0xfffffff8, 0x2, 0x72aa, 0x8, 0x26, 0x8, 0x0, 0x2, 0x6, 0x1ff, 0x80000000, 0xffffcfb3, 0x7, 0xdd, 0x3, 0x2, 0x2d, 0x6, 0x9, 0x4, 0xb3, 0xbcc, 0x200, 0x8, 0xfffffe00, 0xffffffff, 0xf, 0xffffffb8, 0x4d1c9930, 0x8, 0x9, 0x5c, 0x400, 0xaaed, 0x4, 0x4d978287, 0x8, 0x1, 0x4, 0x6, 0xad800000, 0xb, 0x3, 0x7, 0xc564, 0x8, 0x6, 0x200, 0x80000001, 0x1000, 0x2, 0xdc, 0xe79c, 0x4, 0x800, 0x5, 0xc4, 0xb, 0x9d, 0xf1b9, 0x4, 0xffffff7a, 0x7fffffff, 0x51, 0x5, 0x8, 0x8, 0x9, 0xffffffda, 0x800, 0x4, 0x56b31977, 0x82d, 0x10, 0xffff, 0x9, 0x7fff, 0x3, 0x1ff, 0x7, 0x6, 0x7, 0x101, 0x5, 0x7fff, 0x4, 0x9, 0x9, 0xa, 0x1, 0x5, 0x80000001, 0x8, 0x1, 0x0, 0x100, 0x800, 0x7ff, 0x9, 0xb3f, 0x1, 0x4, 0x23, 0xd, 0x2, 0x5, 0x4, 0x9, 0x9, 0x3, 0x2, 0x7f, 0x2, 0xfffffff9, 0x1, 0x3, 0xa, 0xffffffff, 0xfffffff7, 0xc0000000, 0x7, 0x9e, 0x6a8e, 0x5023, 0xb1d, 0xd43, 0x63d, 0x7, 0xa, 0x5, 0x5, 0x7, 0x7, 0x9, 0x1, 0xadf8, 0x2, 0x17, 0x7, 0x8001, 0x6, 0x8, 0x2, 0x3, 0xd, 0x7, 0x6, 0xc, 0x2, 0x1, 0x6, 0x8, 0x6, 0x1, 0x2, 0xa, 0x4, 0x0, 0xa, 0x1, 0x5, 0x8000, 0x80000000, 0x14, 0x2, 0x569d, 0x7, 0x3, 0x3, 0x9, 0x7, 0x5, 0x3ff, 0x1, 0x7, 0x0, 0x6, 0x5, 0x8000, 0x3, 0x0, 0xf, 0x7, 0x10000000, 0x96, 0xa, 0x33, 0x1, 0x1, 0x3, 0x10000, 0x5, 0x55e, 0x5, 0xe59, 0x4, 0x8, 0x9, 0x5, 0x65ff4390, 0xd, 0xa14, 0x3aaf, 0x401, 0x1, 0x4, 0x2, 0x9, 0x1, 0x40, 0x3, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x4, 0xffffffff, 0x5ac, 0x3, 0x9, 0x7, 0x0, 0x6, 0x9, 0x3, 0x77c, 0x3, 0xa0a9, 0x89e, 0x400, 0x6, 0x3, 0xffffffff, 0xfffffffd, 0x81, 0xf, 0x4, 0x7, 0x0, 0x100, 0x8, 0x1, 0x6f, 0xfffffffc, 0x1ff, 0x561, 0x5, 0x82, 0xfffffff9, 0x6ead, 0x3, 0x5, 0x2, 0x9, 0xfffffff3, 0x4, 0xa6a9, 0xc2b, 0x70, 0x0, 0x8, 0x4f1b5886, 0x8, 0x3, 0x1ff, 0x1, 0x7, 0x6, 0x401, 0x4, 0x6, 0x1, 0x401, 0x8, 0x9, 0x34000, 0x5, 0x101, 0x5, 0x2, 0x2, 0xffffffe0, 0x0, 0x100, 0x1, 0x3, 0x4, 0x40, 0x7, 0x80000000, 0xb8d5, 0xe, 0x10001, 0x0, 0x4, 0x4, 0x1, 0x9, 0xfffffff9, 0x5, 0x7, 0x7, 0xcc6, 0x2d, 0x6, 0x7fffffff, 0x5, 0x3, 0x6, 0x2, 0xfffffff7, 0x2, 0x5, 0x100, 0x8, 0x6, 0x8696, 0x401, 0x7, 0x9, 0x8001, 0x5, 0x0, 0xc439, 0x6, 0x3, 0x81, 0x94, 0x3, 0x400, 0x3, 0x7, 0xfffff064, 0x40672658, 0x670d, 0xfffffffe, 0x8, 0x101, 0xf, 0x5, 0x2, 0x1, 0x5, 0x1000, 0x7, 0x101, 0x7, 0x379, 0x100, 0x6b2, 0x23, 0x7fff, 0x1, 0xabd, 0xe, 0x4, 0x4, 0x24a, 0x2, 0x7ff, 0x1, 0x8, 0x8, 0x0, 0xfffffffb, 0x2, 0xfffffffe, 0xe, 0x8, 0xffffffff, 0x8, 0x4, 0x4, 0x3, 0x3, 0x9, 0x7, 0x2, 0x7, 0x7a, 0x0, 0x2, 0xffffffff, 0x3, 0x40, 0x0, 0x0, 0x3, 0x200, 0x2cd, 0x4, 0x1, 0x0, 0x2, 0x2, 0x3, 0xd2e, 0x8, 0x4, 0x8, 0x6, 0x8, 0x800, 0x1, 0x8, 0x3, 0x7e13, 0x8, 0xfff, 0x8, 0x8, 0x8001, 0x8, 0x1, 0x5, 0xffffffff, 0x8, 0x6, 0x7, 0x8, 0x0, 0x5, 0x1000, 0xb, 0x5, 0x6, 0x6, 0x9, 0x4, 0x9, 0x9, 0x7, 0x7, 0x6, 0x542f3cc7, 0x9, 0x44bb, 0xf, 0x1200000, 0x80, 0x3, 0x1d, 0x8001, 0x1, 0x7, 0x6b39, 0x80000000, 0x8, 0x2, 0x6e8add1, 0x2, 0x2, 0x800, 0x9, 0x0, 0x2, 0xfffff156, 0xfff, 0x5, 0x10000, 0x3, 0xfff, 0x4, 0x400, 0x6, 0x8, 0x9, 0x12, 0x800, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa345}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x8, 0x4, 0x7, {0x7, 0x2, 0x3ff, 0xb, 0x4575, 0x9}, {0x4, 0x3, 0x10, 0x1, 0x8}, 0x8001, 0x5, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2292}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x4, 0xf15, 0x6, 0x7, 0x1, 0x8, 0x7, 0x9, 0x5, 0xd, 0x2, 0x2, 0x7, 0xff, 0x9, 0x8, 0x7fff, 0x80, 0x91, 0x400, 0x0, 0xc, 0x53, 0x9, 0x6, 0x6, 0x8, 0x6, 0x800, 0x80000001, 0x3, 0x6, 0x1, 0x8, 0x5, 0x6, 0x0, 0x4, 0x6, 0x7dec, 0x3, 0x6, 0x1, 0x597f, 0x5, 0x9, 0x81, 0x6d, 0x9, 0x6, 0x6, 0x5, 0x5, 0x5, 0x7, 0x5, 0x3, 0x1, 0x4, 0x0, 0xffffffff, 0xfc0, 0xfffffffb, 0x1, 0x6, 0x2, 0x80, 0x1, 0x7, 0xffffffff, 0x2, 0x3ab, 0x0, 0x9, 0x32, 0xfffffff1, 0x0, 0x2, 0x2, 0x4, 0x4, 0x8, 0x10001, 0x6, 0x1, 0x2, 0x9, 0x0, 0x10000, 0x0, 0x10000, 0x7, 0x7fff, 0x4, 0xc1, 0xffff, 0x9, 0x2, 0x0, 0xeb71, 0x7fff, 0x101, 0x100, 0x9, 0x2174, 0x3, 0x9, 0xfffffff7, 0x8, 0x8, 0x3, 0x3, 0x0, 0xd, 0x68fb, 0x1, 0x2, 0x3, 0x1e8, 0x7, 0xd30, 0x3, 0x2, 0x1ff, 0x8, 0xffffffff, 0x7, 0x4, 0xdf, 0x1, 0x2, 0x3, 0x80000000, 0xff, 0xffffffff, 0x1, 0xd3b, 0x1, 0x3ff, 0x6, 0x6, 0x7ff, 0xa36, 0x3, 0x3, 0x3, 0x2, 0x3800000, 0x476, 0xb, 0x131, 0x8, 0xffffffff, 0xe79, 0x100, 0x3, 0x4, 0x1, 0x6, 0x5, 0x80000001, 0x2, 0x6d3, 0x7, 0x5, 0x6, 0x9, 0xfffff49f, 0x1, 0x3, 0x8001, 0x2, 0x400, 0x3, 0x4, 0x1200000, 0x2, 0x3, 0x9, 0x8, 0x0, 0x5, 0xfff, 0x3, 0x4, 0x5, 0x7ff, 0xc, 0x8, 0x100, 0xba, 0x10001, 0x8001, 0x3, 0xfffffffc, 0x6, 0x4, 0x7, 0x0, 0x574b, 0x9, 0x3, 0x5, 0xc, 0x9, 0x5, 0x6, 0xfffffff7, 0x4, 0xac90, 0x0, 0x1, 0x3c8, 0x4, 0x2, 0x4, 0x4a, 0x0, 0x5, 0x7, 0x7, 0x2, 0x7fff, 0xfe, 0x10001, 0x8, 0x6, 0x5, 0x80, 0xcea, 0xdd0f, 0xa73, 0x7, 0xfff, 0x8, 0xedbd, 0x6, 0x0, 0xbdf, 0x3ff, 0x3, 0x0, 0x2, 0x1, 0x1, 0x10001, 0x1, 0xd, 0x7fffffff, 0x7fffffff, 0xfed, 0x7e, 0x80000000, 0x434, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x961b, 0x4, 0x9, {0x3, 0x1, 0x800, 0x7, 0x1, 0x3ff}, {0x21, 0x0, 0xf, 0x8, 0x40, 0xfd}, 0x108c0, 0x3, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe547}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6fb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]]}, {0x59, 0x6, "2ee48ac548aa3d01217479349e25d006b37b43fa3d884c3afa5da13f9b9a6aed4c04eeff0f110999ef34388014753fdb24c655943679173a0816b5d3612db402385258f543f035487fc071aef751685d142d01370b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x88, 0x9, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}]}, {0x51, 0x6, "10c958ff64b91b086008929eeb6433ca505c9fc30b178880b21f0864c20f7b324f7fed48e410a468bdd1ea895940c19ff251a4214eb4bc9dd73556c375f824a43a5a59407f7853f84a4e81a7d3"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x88, 0x10, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x40, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x70}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0xc0, 0x9, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x1, 0x4, 0x5, 0x429}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x0, 0x3, 0x3, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x27, 0x2, 0x8, 0x6}, 0xebeea55880f7f122}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x200, 0x1, 0x7fffffff, 0x80000000}, 0x1}}]}, {0x12, 0x6, "5afea4f264eaa036f085c622fdd1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x88, 0xe, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xe}}]}, {0x42, 0x6, "705a9f5f46939222de6b09c65da78da7a1fd4eb64da1f336c0e8a0ee2635e39672ae12a1cf75d6255c5fa5a84f5df7e083368c9a4da700cc5a743a22a6ce"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xa8, 0x6, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x1000, 0x7, 0xe85b, 0x80}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0xd5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x80000000, 0x4, 0x8000, 0xfffffffa}, 0x6}}]}, {0x21, 0x6, "de019c23f45cdb4622101dde61d6051f9f552c1f160dbe1ffb949f2730"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x78, 0x1d, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x23e7, 0x2, 0x10000000, 0x1, 0xe}, 0x2}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x25, 0x6, "06abbc41654ef41649f746b827e414591ab0c9ccfc0981b2c93ea575ebb74142d8"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2d4c}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r3, 0x1, 0x0, 0x80000, {0x3}}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0xfffffffffffffd18, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/226, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="1408000000000000b89e08dc88a8a5a186dd", 0x0, 0xffffff00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$OCFS2_IOC_UNRESVSP(r5, 0x40305829, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x4f, 0x0, 0x8001}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) kernel console output (not intermixed with test programs): rocess `syz.4.1146'. [ 243.595039][T10234] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.1150'. [ 243.904133][T10248] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 244.838893][T10296] openvswitch: netlink: Message has 592 unknown bytes. [ 244.865148][T10296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.143702][T10300] wireguard: wg0: Could not create IPv4 socket [ 245.157521][T10300] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 245.454492][T10314] syzkaller1: entered promiscuous mode [ 245.469697][T10314] syzkaller1: entered allmulticast mode [ 245.489571][T10332] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 245.651054][ T30] audit: type=1800 audit(1779006284.363:8): pid=10337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1175" name="memory.events" dev="tmpfs" ino=1245 res=0 errno=0 [ 246.199698][T10379] netlink: 'syz.3.1183': attribute type 21 has an invalid length. [ 246.211916][T10379] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 246.314871][T10384] xt_l2tp: missing protocol rule (udp|l2tpip) [ 246.471560][T10389] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 246.667190][T10395] syzkaller0: entered promiscuous mode [ 246.684230][T10395] syzkaller0: entered allmulticast mode [ 247.637304][T10432] bridge0: port 4(syz_tun) entered blocking state [ 247.644060][T10432] bridge0: port 4(syz_tun) entered forwarding state [ 247.770756][T10445] __nla_validate_parse: 12 callbacks suppressed [ 247.770776][T10445] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1204'. [ 247.779614][T10447] set_target_v3_checkentry: 1 callbacks suppressed [ 247.779631][T10447] SET target dimension over the limit! [ 247.865866][T10445] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.903015][T10442] bridge6: entered promiscuous mode [ 247.908730][T10442] bridge6: entered allmulticast mode [ 247.921266][T10442] team0: Port device bridge6 added [ 247.967923][T10438] bridge0: port 1(team0) entered blocking state [ 248.010816][T10438] bridge0: port 1(team0) entered disabled state [ 248.038724][T10438] team0: entered allmulticast mode [ 248.087626][T10438] team0: entered promiscuous mode [ 248.094638][T10454] netlink: 'syz.3.1206': attribute type 21 has an invalid length. [ 248.187343][T10454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1206'. [ 248.279058][T10458] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1207'. [ 248.330556][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 248.526358][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'. [ 248.552946][T10478] tipc: Enabling of bearer rejected, failed to enable media [ 248.764802][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'. [ 248.790160][T10492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1215'. [ 248.826604][T10478] syzkaller0: entered promiscuous mode [ 248.845588][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 248.872400][T10478] syzkaller0: entered allmulticast mode [ 248.884739][T10496] openvswitch: netlink: Flow actions attr not present in new flow. [ 248.917147][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 248.945755][T10501] openvswitch: netlink: Flow actions attr not present in new flow. [ 248.947366][T10505] netlink: 'syz.1.1218': attribute type 1 has an invalid length. [ 248.980723][T10505] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 249.131051][T10519] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 249.159103][T10519] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 249.248583][T10515] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 249.270144][T10515] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 249.293528][T10527] xt_recent: Unsupported userspace flags (000000b1) [ 249.379222][T10529] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 249.489002][T10539] openvswitch: netlink: IP tunnel dst address not specified [ 249.789891][T10555] bridge0: port 1(erspan0) entered blocking state [ 249.815907][T10555] bridge0: port 1(erspan0) entered disabled state [ 249.834545][T10555] erspan0: entered allmulticast mode [ 249.890940][T10555] erspan0: left allmulticast mode [ 249.955458][T10555] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1231'. [ 250.241231][T10587] Bluetooth: MGMT ver 1.23 [ 250.593644][T10605] FAULT_INJECTION: forcing a failure. [ 250.593644][T10605] name failslab, interval 1, probability 0, space 0, times 0 [ 250.606645][T10605] CPU: 1 UID: 0 PID: 10605 Comm: syz.4.1248 Not tainted syzkaller #0 PREEMPT(full) [ 250.606671][T10605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.606682][T10605] Call Trace: [ 250.606690][T10605] [ 250.606699][T10605] dump_stack_lvl+0xe8/0x150 [ 250.606727][T10605] should_fail_ex+0x412/0x560 [ 250.606758][T10605] should_failslab+0xa8/0x100 [ 250.606788][T10605] ? skb_clone+0x212/0x3a0 [ 250.606808][T10605] kmem_cache_alloc_noprof+0x87/0x650 [ 250.606835][T10605] ? __bpf_redirect+0x9b4/0x12a0 [ 250.606865][T10605] skb_clone+0x212/0x3a0 [ 250.606889][T10605] bpf_clone_redirect+0x16a/0x4b0 [ 250.606925][T10605] ? bpf_test_run+0x1d1/0x830 [ 250.606946][T10605] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 250.606969][T10605] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 250.607010][T10605] ? __pfx___schedule+0x10/0x10 [ 250.607035][T10605] ? ktime_get+0x45/0x220 [ 250.607077][T10605] ? preempt_schedule_thunk+0x16/0x30 [ 250.607106][T10605] ? preempt_schedule_common+0x82/0xd0 [ 250.607131][T10605] ? bpf_test_run+0x1d1/0x830 [ 250.607153][T10605] ? bpf_test_timer_continue+0x10c/0x320 [ 250.607177][T10605] bpf_test_run+0x354/0x830 [ 250.607220][T10605] ? __pfx_bpf_test_run+0x10/0x10 [ 250.607259][T10605] ? eth_type_trans+0x348/0x7e0 [ 250.607287][T10605] ? skb_dst_set+0x72/0x140 [ 250.607307][T10605] bpf_prog_test_run_skb+0xe2c/0x2260 [ 250.607349][T10605] ? __fget_files+0x3a0/0x420 [ 250.607372][T10605] ? __fget_files+0x2a/0x420 [ 250.607400][T10605] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 250.607420][T10605] bpf_prog_test_run+0x2c7/0x340 [ 250.607444][T10605] __sys_bpf+0x643/0x950 [ 250.607484][T10605] ? __pfx___sys_bpf+0x10/0x10 [ 250.607530][T10605] ? ksys_write+0x242/0x270 [ 250.607560][T10605] ? __pfx_ksys_write+0x10/0x10 [ 250.607592][T10605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.607613][T10605] __x64_sys_bpf+0x7c/0x90 [ 250.607640][T10605] do_syscall_64+0x15f/0xf80 [ 250.607667][T10605] ? trace_irq_disable+0x3b/0x140 [ 250.607695][T10605] ? clear_bhb_loop+0x40/0x90 [ 250.607718][T10605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.607737][T10605] RIP: 0033:0x7fa792f9ce59 [ 250.607755][T10605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.607771][T10605] RSP: 002b:00007fa793dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.607793][T10605] RAX: ffffffffffffffda RBX: 00007fa793215fa0 RCX: 00007fa792f9ce59 [ 250.607806][T10605] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 250.607817][T10605] RBP: 00007fa793dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 250.607828][T10605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.607839][T10605] R13: 00007fa793216038 R14: 00007fa793215fa0 R15: 00007ffd03e96ec8 [ 250.607870][T10605] [ 250.642697][T10607] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 251.116431][T10626] netlink: 'syz.4.1253': attribute type 7 has an invalid length. [ 251.211660][T10629] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 251.580148][T10636] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 251.607959][T10638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.944791][T10680] netlink: 'syz.0.1269': attribute type 5 has an invalid length. [ 253.268571][T10675] tipc: Resetting bearer [ 253.371586][T10695] __nla_validate_parse: 10 callbacks suppressed [ 253.371607][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1272'. [ 253.411201][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 254.374153][T10739] IPv6: syztnl0: Disabled Multicast RS [ 254.635979][T10745] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1281'. [ 255.056541][T10732] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 255.859486][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.523800][T10837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1295'. [ 258.976679][T10852] netlink: 1308 bytes leftover after parsing attributes in process `syz.0.1298'. [ 259.310522][T10859] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1301'. [ 259.514330][T10870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.749027][T10881] GUP no longer grows the stack in syz.2.1307 (10881): 200000003000-20000000a000 (200000001000) [ 259.766157][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1306'. [ 259.844626][T10881] CPU: 0 UID: 0 PID: 10881 Comm: syz.2.1307 Not tainted syzkaller #0 PREEMPT(full) [ 259.844655][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.844667][T10881] Call Trace: [ 259.844675][T10881] [ 259.844683][T10881] dump_stack_lvl+0xe8/0x150 [ 259.844712][T10881] __get_user_pages+0x2378/0x2720 [ 259.844741][T10881] ? __gup_longterm_locked+0xc4e/0x1630 [ 259.844781][T10881] ? __gup_longterm_locked+0xc4e/0x1630 [ 259.844810][T10881] ? down_read_killable+0x1bb/0x340 [ 259.844839][T10881] __gup_longterm_locked+0xdcf/0x1630 [ 259.844868][T10881] ? lock_acquire+0x106/0x350 [ 259.844910][T10881] gup_fast_fallback+0x1d84/0x20d0 [ 259.844971][T10881] ? __pfx_gup_fast_fallback+0x10/0x10 [ 259.844998][T10881] ? is_valid_gup_args+0x11f/0x200 [ 259.845024][T10881] ? get_user_pages_fast+0x4d/0xb0 [ 259.845050][T10881] __iov_iter_get_pages_alloc+0x370/0xa10 [ 259.845088][T10881] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 259.845120][T10881] iov_iter_get_pages2+0x5e/0xa0 [ 259.845152][T10881] __se_sys_vmsplice+0x7c7/0x1620 [ 259.845202][T10881] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 259.845233][T10881] ? __pfx_futex_wake+0x10/0x10 [ 259.845269][T10881] ? fdget+0x148/0x1e0 [ 259.845312][T10881] ? put_files_struct+0x256/0x350 [ 259.845334][T10881] ? 0xffffffffff600000 [ 259.845390][T10881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.845413][T10881] do_syscall_64+0x15f/0xf80 [ 259.845441][T10881] ? trace_irq_disable+0x3b/0x140 [ 259.845479][T10881] ? clear_bhb_loop+0x40/0x90 [ 259.845505][T10881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.845524][T10881] RIP: 0033:0x7faac399ce59 [ 259.845543][T10881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.845561][T10881] RSP: 002b:00007faac48b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 259.845583][T10881] RAX: ffffffffffffffda RBX: 00007faac3c15fa0 RCX: 00007faac399ce59 [ 259.845597][T10881] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 259.845608][T10881] RBP: 00007faac3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 259.845620][T10881] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 259.845631][T10881] R13: 00007faac3c16038 R14: 00007faac3c15fa0 R15: 00007fff8533d3e8 [ 259.845665][T10881] [ 260.203813][T10850] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 260.626700][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1313'. [ 260.965047][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 261.127653][T10948] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 261.361740][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1320'. [ 261.657218][T10974] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 261.801261][T10979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1325'. [ 262.018536][T10985] netlink: 'syz.3.1326': attribute type 4 has an invalid length. [ 262.475939][ T5649] Bluetooth: hci4: command 0x0405 tx timeout [ 263.503097][T11032] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1341'. [ 263.704667][T11035] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 263.837028][T11040] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1344'. [ 263.955537][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 264.214236][T11056] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1348'. [ 264.229745][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.240643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.347576][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.356024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.402492][ T6332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.411036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.473036][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.481715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.563228][T11064] erspan1: entered promiscuous mode [ 264.587950][T11064] erspan1: entered allmulticast mode [ 264.822955][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1352'. [ 264.941787][T11078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1353'. [ 265.401061][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1355'. [ 265.417211][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1355'. [ 265.757232][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 265.790908][T11109] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1360'. [ 265.820562][T11103] bridge0: port 2(vlan2) entered blocking state [ 265.836254][T11103] bridge0: port 2(vlan2) entered disabled state [ 265.857641][T11103] vlan2: entered allmulticast mode [ 265.874078][T11103] bridge0: entered allmulticast mode [ 265.912513][T11103] vlan2: left allmulticast mode [ 265.930220][T11103] bridge0: left allmulticast mode [ 266.133215][T11124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1363'. [ 266.257226][T11130] ÿ: renamed from bond_slave_0 [ 266.524891][T11138] IPVS: Error connecting to the multicast addr [ 266.869079][T11151] netlink: 'syz.0.1370': attribute type 12 has an invalid length. [ 267.910906][T11201] netlink: 'syz.0.1383': attribute type 21 has an invalid length. [ 267.994888][T11201] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 268.355471][T11221] netlink: 'syz.2.1388': attribute type 10 has an invalid length. [ 268.462535][T11221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.491261][T11221] team0: Port device netdevsim1 added [ 268.572799][T11235] xfrm1: entered allmulticast mode [ 268.606473][T11237] tipc: Started in network mode [ 268.616675][T11237] tipc: Node identity c2edfa03fbea, cluster identity 4711 [ 268.638452][T11237] tipc: Enabled bearer , priority 0 [ 268.832607][T11254] erspan1: entered promiscuous mode [ 268.849661][T11255] __nla_validate_parse: 4 callbacks suppressed [ 268.849681][T11255] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1396'. [ 268.855661][T11254] erspan1: entered allmulticast mode [ 268.900398][T11258] batadv_slave_1: entered promiscuous mode [ 268.948646][T11258] batadv_slave_1: left promiscuous mode [ 269.333477][T11282] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 269.356351][T11282] bond8 (unregistering): Released all slaves [ 269.464632][T11285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1404'. [ 269.636335][ T7292] tipc: Node number set to 956824067 [ 269.785400][T11299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1407'. [ 269.814472][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 269.838847][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 269.865499][T11312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'. [ 270.039265][T11313] xt_CT: No such helper "snmp" [ 270.437456][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 270.438340][T11341] netlink: 'syz.1.1419': attribute type 1 has an invalid length. [ 270.453034][T11343] xt_l2tp: invalid flags combination: 8 [ 270.548259][T11341] bond4: entered promiscuous mode [ 270.554045][T11341] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.556459][T11354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1419'. [ 270.573728][T11344] netlink: 'syz.2.1420': attribute type 1 has an invalid length. [ 270.589995][T11343] netlink: 'syz.2.1420': attribute type 1 has an invalid length. [ 270.649872][T11354] bond4: left promiscuous mode [ 270.688067][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1424'. [ 270.703395][T11354] bond4: entered allmulticast mode [ 270.743650][T11341] bond4: (slave bridge4): making interface the new active one [ 270.759649][T11341] bridge4: entered allmulticast mode [ 270.766537][T11341] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 270.968035][T11375] tipc: New replicast peer: 255.255.255.255 [ 270.979231][T11375] tipc: Enabled bearer , priority 10 [ 271.230222][T11376] net_ratelimit: 6 callbacks suppressed [ 271.230241][T11376] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 271.488961][T11400] smc: net device wlan0 applied user defined pnetid SYZ0 [ 272.665807][T11438] infiniband syz0: set active [ 272.675822][T11438] infiniband syz0: added bridge_slave_1 [ 272.751294][T11438] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 272.786842][T11438] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 272.828064][T11438] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 272.917694][T11438] RDS/IB: syz0: added [ 272.924431][T11438] smc: adding ib device syz0 with port count 1 [ 272.932501][T11438] smc: ib device syz0 port 1 has no pnetid [ 274.503421][T11402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.746183][T11473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1451'. [ 274.776435][T11475] SET target dimension over the limit! [ 275.191119][T11490] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.661571][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1463'. [ 275.943945][T11526] tipc: Enabled bearer , priority 0 [ 275.963561][T11526] syzkaller0: entered promiscuous mode [ 275.978020][T11526] syzkaller0: entered allmulticast mode [ 276.161813][T11535] bond8: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 276.181847][T11535] bond8: entered promiscuous mode [ 276.192896][T11535] 8021q: adding VLAN 0 to HW filter on device bond8 [ 276.205806][T11538] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 276.221943][T11538] syzkaller1: Linktype set failed because interface is up [ 276.247789][T11541] tipc: Resetting bearer [ 276.308181][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'. [ 276.325855][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'. [ 276.457914][T11543] syzkaller1: entered promiscuous mode [ 276.474121][T11543] syzkaller1: entered allmulticast mode [ 276.496084][T11525] tipc: Resetting bearer [ 276.529150][T11525] tipc: Disabling bearer [ 276.581215][T11557] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1473'. [ 277.024986][T11572] netlink: 'syz.4.1479': attribute type 1 has an invalid length. [ 277.109242][T11572] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.134058][T11579] vlan2: entered promiscuous mode [ 277.141578][T11579] bond7: entered promiscuous mode [ 277.147337][T11579] vlan2: entered allmulticast mode [ 277.152623][T11579] bond7: entered allmulticast mode [ 277.202058][T11572] bond7: (slave bridge9): making interface the new active one [ 277.214041][T11572] bridge9: entered promiscuous mode [ 277.221129][T11572] bridge9: entered allmulticast mode [ 277.229221][T11572] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 277.369494][ T6328] netdevsim netdevsim4 €Â: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.371376][T11588] netlink: 'syz.4.1484': attribute type 1 has an invalid length. [ 277.389863][ T6328] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.420455][ T6328] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.422868][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 277.449819][ T6328] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.514151][T11597] netlink: 'syz.2.1487': attribute type 15 has an invalid length. [ 277.546589][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'. [ 277.606721][ T59] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 277.606796][T11597] netlink: 'syz.2.1487': attribute type 15 has an invalid length. [ 277.623702][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'. [ 277.632554][ T59] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 277.632599][ T59] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 277.632635][ T59] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 277.744080][T11611] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1492'. [ 277.953586][T11625] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1496'. [ 278.125523][T11624] : entered promiscuous mode [ 278.647344][T11658] --map-set only usable from mangle table [ 278.878393][T11657] tipc: Failed to remove unknown binding: 66,0,0/0:976016479/976016481 [ 278.924630][T11657] tipc: Failed to remove unknown binding: 66,0,0/0:976016479/976016480 [ 278.949336][T11657] tipc: Failed to remove unknown binding: 66,0,0/0:976016479/976016481 [ 278.987456][T11657] tipc: Failed to remove unknown binding: 66,0,0/0:976016479/976016480 [ 279.138061][T11667] nbd2: detected capacity change from 0 to 63 [ 279.192803][ T5649] block nbd2: Receive control failed (result -104) [ 279.193334][ T5640] block nbd2: Receive control failed (result -32) [ 279.388330][T11684] syzkaller1: entered promiscuous mode [ 279.394013][T11684] syzkaller1: entered allmulticast mode [ 279.887253][T11707] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 280.096839][T11709] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 280.139449][T11709] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 280.219395][T11707] bond6: (slave gretap1): making interface the new active one [ 280.241550][T11707] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 280.289150][T11716] macvlan2: entered promiscuous mode [ 280.304794][T11716] macvlan2: entered allmulticast mode [ 280.313547][T11716] bond6: entered promiscuous mode [ 280.319980][T11716] gretap1: entered promiscuous mode [ 280.330161][T11716] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 280.349311][T11716] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 280.363523][T11716] bond6: left promiscuous mode [ 280.369125][T11716] gretap1: left promiscuous mode [ 280.394117][T11715] __nla_validate_parse: 3 callbacks suppressed [ 280.394132][T11715] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1521'. [ 280.419942][T11715] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1521'. [ 280.674862][T11738] netlink: 'syz.1.1525': attribute type 1 has an invalid length. [ 280.764022][T11743] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1524'. [ 280.801091][T11738] 8021q: adding VLAN 0 to HW filter on device bond5 [ 280.934935][T11746] bond5: (slave geneve2): making interface the new active one [ 280.973643][T11746] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 281.019765][ T6328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.068339][ T6328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.088386][ T6328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.223497][ T6328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.817170][T11757] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1528'. [ 281.934548][T11781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1533'. [ 281.937912][T11783] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1534'. [ 283.057581][T11812] tipc: Resetting bearer [ 283.100956][T11819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.353904][ T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 284.420485][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1558'. [ 284.429777][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 284.444494][T11881] xt_TCPMSS: Only works on TCP SYN packets [ 284.505364][T11882] team0: left allmulticast mode [ 284.514538][T11882] team0: left promiscuous mode [ 284.537410][T11882] bridge0: port 1(team0) entered disabled state [ 284.960587][T11893] : entered promiscuous mode [ 285.397776][T11901] netlink: 496 bytes leftover after parsing attributes in process `syz.2.1563'. [ 285.573665][T11911] netlink: 'syz.4.1564': attribute type 1 has an invalid length. [ 285.681308][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'. [ 285.704810][T11915] bond7: Invalid ad_actor_system MAC address. [ 285.711292][T11915] bond7: option ad_actor_system: invalid value (7) [ 285.719615][T11915] bond7 (unregistering): Released all slaves [ 285.857898][T11918] veth7: entered promiscuous mode [ 285.866435][T11918] netlink: 'syz.0.1568': attribute type 4 has an invalid length. [ 285.939132][T11920] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 285.965893][T11920] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.215511][T11863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.551186][T11935] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 287.693051][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 288.362518][T11926] vlan3: entered allmulticast mode [ 288.367907][T11926] bond0: entered allmulticast mode [ 288.373034][T11926] bond_slave_0: entered allmulticast mode [ 288.379047][T11926] bond_slave_1: entered allmulticast mode [ 288.562175][T11953] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1576'. [ 288.573282][T11954] xt_TCPMSS: Only works on TCP SYN packets [ 288.747889][T11968] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1580'. [ 288.846736][ T30] audit: type=1800 audit(1779006327.563:9): pid=11967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1582" name="memory.events" dev="tmpfs" ino=1528 res=0 errno=0 [ 289.103907][T11984] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 289.137015][T11984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.269767][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1585'. [ 290.140739][T12011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1595'. [ 290.212044][T12013] netlink: 'syz.4.1596': attribute type 10 has an invalid length. [ 290.230442][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1595'. [ 290.233054][T12013] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1596'. [ 290.271689][T12016] IPVS: length: 35 != 24 [ 290.284453][T12017] x_tables: unsorted entry at hook 2 [ 290.322154][T12017] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 290.361281][T12013] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 290.497206][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'. [ 290.642996][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'. [ 290.647752][T12036] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1600'. [ 290.652429][T12042] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1600'. [ 290.958065][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'. [ 291.121019][T12068] netlink: 820 bytes leftover after parsing attributes in process `syz.2.1607'. [ 291.208092][T12068] netlink: 820 bytes leftover after parsing attributes in process `syz.2.1607'. [ 291.382123][T12068] netlink: 820 bytes leftover after parsing attributes in process `syz.2.1607'. [ 291.507857][T12068] netlink: 820 bytes leftover after parsing attributes in process `syz.2.1607'. [ 291.611045][T12068] netlink: 820 bytes leftover after parsing attributes in process `syz.2.1607'. [ 291.634469][T12086] netlink: 'syz.4.1610': attribute type 1 has an invalid length. [ 292.076228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.292984][T12108] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 292.344626][T12105] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 293.115806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.196289][T12149] IPVS: set_ctl: invalid protocol: 24 32.0.0.0:0 [ 293.663583][T12178] netlink: 'syz.0.1626': attribute type 1 has an invalid length. [ 294.156340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.196558][T12188] batman_adv: batadv0: Interface deactivated: dummy0 [ 294.394191][T12188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.417661][T12188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.605225][T12188] erspan0: left promiscuous mode [ 294.649412][T12188] batman_adv: batadv0: Interface deactivated: macsec1 [ 294.798531][ T5765] syz0: Port: 1 Link DOWN [ 294.798546][ T48] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.798576][ T48] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 294.881609][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.907758][ T48] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.946262][ T48] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 294.969931][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.993613][ T48] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.006108][ T48] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 295.016980][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.092518][ T48] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.105193][ T48] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 295.136581][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.195754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.894838][T12249] __nla_validate_parse: 62 callbacks suppressed [ 295.894863][T12249] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1642'. [ 295.922819][T12249] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1642'. [ 296.235790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.364102][T12261] netlink: 'syz.2.1645': attribute type 1 has an invalid length. [ 296.564837][T12261] bond3: entered promiscuous mode [ 296.580734][T12261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.285761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.325714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.327102][T12244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.357639][T12270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.367799][T12270] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 298.378058][T12270] bond3: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 298.390683][T12270] bond3: (slave vcan0): making interface the new active one [ 298.399023][T12270] vcan0: entered promiscuous mode [ 298.409153][T12270] bond3: (slave vcan0): Enslaving as an active interface with an up link [ 298.476054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.486255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.704249][T12283] ipt_REJECT: TCP_RESET invalid for non-tcp [ 298.767508][T12287] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1648'. [ 298.857146][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'. [ 299.103864][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1654'. [ 299.106784][T12300] tipc: Enabling of bearer rejected, failed to enable media [ 299.148082][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1654'. [ 299.315163][T12309] sch_tbf: burst 1 is lower than device tunl0 mtu (1480) ! [ 299.355865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.529379][T12313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1659'. [ 299.754953][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'. [ 299.945174][T12323] ip6erspan0: entered promiscuous mode [ 299.995281][T12323] ip6erspan0: entered allmulticast mode [ 300.079588][T12318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1661'. [ 300.241922][T12336] Cannot find add_set index 0 as target [ 300.397525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.499669][T12346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1670'. [ 300.515052][T12346] bridge0: entered promiscuous mode [ 300.651864][T12353] hsr0: entered promiscuous mode [ 300.713640][T12350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.735391][T12353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 300.753489][T12359] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 300.761758][T12359] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 300.864257][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.915222][T12365] sctp: [Deprecated]: syz.3.1676 (pid 12365) Use of int in maxseg socket option. [ 300.915222][T12365] Use struct sctp_assoc_value instead [ 301.106623][T12377] netlink: 'syz.0.1679': attribute type 1 has an invalid length. [ 301.114610][T12377] __nla_validate_parse: 1 callbacks suppressed [ 301.114627][T12377] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1679'. [ 301.130390][T12377] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1679'. [ 301.139952][T12377] netlink: 'syz.0.1679': attribute type 1 has an invalid length. [ 301.148253][T12377] netlink: 634 bytes leftover after parsing attributes in process `syz.0.1679'. [ 301.160840][ T30] audit: type=1800 audit(1779006339.873:10): pid=12377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1679" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1655 res=0 errno=0 [ 301.238016][T12352] hsr0: left promiscuous mode [ 301.372883][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 301.393258][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 301.403196][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 301.412703][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 301.422696][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 301.434865][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 301.444671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.465559][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 301.496566][T12383] tipc: Resetting bearer [ 301.646598][T12388] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 301.722515][T12403] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 301.948549][T12412] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 302.088214][T12412] bond9: entered promiscuous mode [ 302.095717][T12412] 8021q: adding VLAN 0 to HW filter on device bond9 [ 302.264741][T12412] bond9: (slave bridge3): making interface the new active one [ 302.279314][T12412] bridge3: entered promiscuous mode [ 302.292874][T12412] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 302.475950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.593468][T12443] ip6gre4: entered promiscuous mode [ 302.619776][T12443] ip6gre4: entered allmulticast mode [ 302.739104][T12456] siw: device registration error -23 [ 302.814769][T12460] Bluetooth: MGMT ver 1.23 [ 303.104186][T12470] bond8: option fail_over_mac: invalid value (127) [ 303.137737][T12470] bond8 (unregistering): Released all slaves [ 303.178904][T12482] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 303.303996][ T30] audit: type=1800 audit(1779006341.993:11): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1699" name="memory.events" dev="tmpfs" ino=1786 res=0 errno=0 [ 303.515843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.555834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.595864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.500451][T12489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.635852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.897371][T12567] netlink: 'syz.3.1723': attribute type 2 has an invalid length. [ 307.030194][ T7292] bridge0: entered promiscuous mode [ 307.085943][T12578] __nla_validate_parse: 102 callbacks suppressed [ 307.085965][T12578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1725'. [ 307.185285][T12575] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1724'. [ 307.199897][T12575] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1724'. [ 307.211533][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1724'. [ 307.483404][T12600] netlink: 'syz.2.1731': attribute type 2 has an invalid length. [ 307.572032][T12607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.676556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.758567][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 307.779337][T12616] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1735'. [ 307.853794][T12625] IPVS: set_ctl: invalid protocol: 29 172.20.20.10:20002 [ 307.938646][T12616] bond10: entered promiscuous mode [ 307.952451][T12616] 8021q: adding VLAN 0 to HW filter on device bond10 [ 307.993688][T12633] gretap0: left promiscuous mode [ 308.008324][T12633] gretap0: refused to change device tx_queue_len [ 308.024811][T12633] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 308.066997][T12632] syzkaller1: entered promiscuous mode [ 308.073431][T12632] syzkaller1: entered allmulticast mode [ 308.092298][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 308.101880][T12639] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1741'. [ 308.167583][T12639] ip6tnl1: entered allmulticast mode [ 308.397424][T12656] syzkaller0: left promiscuous mode [ 308.402702][T12656] syzkaller0: left allmulticast mode [ 308.408517][T12656] tipc: Resetting bearer [ 308.467166][T12656] team0 (unregistering): Port device team_slave_0 removed [ 308.496327][T12656] team0 (unregistering): Port device team_slave_1 removed [ 308.522638][T12656] team0 (unregistering): Port device dummy0 removed [ 308.536265][T12657] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 308.715890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.094874][T12688] IPVS: length: 83 != 24 [ 309.103759][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 309.111882][T12688] syzkaller1: entered promiscuous mode [ 309.122315][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 309.122593][T12688] syzkaller1: entered allmulticast mode [ 309.219100][T12688] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 309.449981][T12702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.577726][T12706] netlink: 'syz.3.1761': attribute type 14 has an invalid length. [ 309.598337][T12706] netlink: 'syz.3.1761': attribute type 13 has an invalid length. [ 309.601636][ T4960] block nbd2: Connection timed out, retrying (0/2 alive) [ 309.613415][ T4960] block nbd2: Connection timed out, retrying (0/2 alive) [ 309.620682][ T4960] block nbd2: Connection timed out, retrying (0/2 alive) [ 309.628052][ T9617] block nbd2: Dead connection, failed to find a fallback [ 309.638338][ T9617] block nbd2: shutting down sockets [ 309.643582][ T9617] blk_print_req_error: 138 callbacks suppressed [ 309.643599][ T9617] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.663122][ T4960] block nbd2: Connection timed out, retrying (0/2 alive) [ 309.671008][ T9617] buffer_io_error: 138 callbacks suppressed [ 309.671024][ T9617] Buffer I/O error on dev nbd2, logical block 1, async page read [ 309.685195][ T9617] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.694822][ T9617] Buffer I/O error on dev nbd2, logical block 0, async page read [ 309.703003][ T9617] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.712204][ T9617] Buffer I/O error on dev nbd2, logical block 3, async page read [ 309.720321][ T9617] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.729574][ T9617] Buffer I/O error on dev nbd2, logical block 2, async page read [ 309.739187][ T5643] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.755099][ T5643] Buffer I/O error on dev nbd2, logical block 0, async page read [ 309.768244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.776579][ T5643] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.807008][ T5643] Buffer I/O error on dev nbd2, logical block 1, async page read [ 309.824921][ T5643] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.841919][ T5643] Buffer I/O error on dev nbd2, logical block 2, async page read [ 309.861323][ T5643] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.874973][ T5643] Buffer I/O error on dev nbd2, logical block 3, async page read [ 309.942046][ T5643] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.972917][T12714] vlan0: entered promiscuous mode [ 309.982851][ T5643] Buffer I/O error on dev nbd2, logical block 0, async page read [ 310.006972][ T5643] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 310.020155][ T5643] Buffer I/O error on dev nbd2, logical block 1, async page read [ 310.082621][ T5643] ldm_validate_partition_table(): Disk read failed. [ 310.128017][ T5643] Dev nbd2: unable to read RDB block 0 [ 310.170839][ T5643] nbd2: unable to read partition table [ 310.230824][ T5643] ldm_validate_partition_table(): Disk read failed. [ 310.264104][ T5643] Dev nbd2: unable to read RDB block 0 [ 310.308276][ T5643] nbd2: unable to read partition table [ 310.372893][ T30] audit: type=1800 audit(1779006349.083:12): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1765" name=CB dev="tmpfs" ino=1738 res=0 errno=0 [ 310.779702][T12768] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.795889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.721414][T12807] sctp: [Deprecated]: syz.1.1782 (pid 12807) Use of int in max_burst socket option. [ 311.721414][T12807] Use struct sctp_assoc_value instead [ 311.845743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.936320][T12810] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 311.958209][T12810] CPU: 1 UID: 0 PID: 12810 Comm: syz.1.1783 Not tainted syzkaller #0 PREEMPT(full) [ 311.958238][T12810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.958250][T12810] Call Trace: [ 311.958257][T12810] [ 311.958266][T12810] dump_stack_lvl+0xe8/0x150 [ 311.958296][T12810] sysfs_warn_dup+0x8e/0xa0 [ 311.958321][T12810] sysfs_do_create_link_sd+0xc0/0x110 [ 311.958350][T12810] device_add_class_symlinks+0x1cf/0x240 [ 311.958378][T12810] device_add+0x475/0xbb0 [ 311.958413][T12810] wiphy_register+0x1fb1/0x2fe0 [ 311.958462][T12810] ? __pfx_wiphy_register+0x10/0x10 [ 311.958489][T12810] ? __pfx_netdev_run_todo+0x10/0x10 [ 311.958511][T12810] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 311.958543][T12810] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 311.958577][T12810] ieee80211_register_hw+0x3c53/0x4910 [ 311.958632][T12810] ? ieee80211_register_hw+0x18f1/0x4910 [ 311.958691][T12810] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 311.958725][T12810] ? __asan_memset+0x22/0x50 [ 311.958749][T12810] ? __hrtimer_setup+0x1b7/0x260 [ 311.958773][T12810] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 311.958805][T12810] mac80211_hwsim_new_radio+0x3327/0x57f0 [ 311.958867][T12810] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 311.958892][T12810] ? kstrndup+0xbf/0x160 [ 311.958922][T12810] hwsim_new_radio_nl+0xe20/0x26e0 [ 311.958945][T12810] ? unwind_next_frame+0xa6/0x2550 [ 311.958989][T12810] ? is_bpf_text_address+0x26/0x2b0 [ 311.959024][T12810] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 311.959049][T12810] ? __kernel_text_address+0xd/0x30 [ 311.959076][T12810] ? unwind_get_return_address+0x4d/0x90 [ 311.959098][T12810] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 311.959127][T12810] ? arch_stack_walk+0xfb/0x150 [ 311.959180][T12810] ? stack_trace_save+0xa9/0x100 [ 311.959209][T12810] ? __pfx_stack_trace_save+0x10/0x10 [ 311.959241][T12810] ? stack_depot_save_flags+0x33/0x810 [ 311.959286][T12810] ? __nla_validate_parse+0x2480/0x2dc0 [ 311.959312][T12810] ? ____sys_sendmsg+0x972/0x9f0 [ 311.959329][T12810] ? ___sys_sendmsg+0x2a5/0x360 [ 311.959367][T12810] ? __pfx___nla_validate_parse+0x10/0x10 [ 311.959419][T12810] ? rcu_is_watching+0x15/0xb0 [ 311.959442][T12810] ? trace_kmalloc+0x2a/0xf0 [ 311.959475][T12810] ? __nla_parse+0x40/0x60 [ 311.959506][T12810] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 311.959531][T12810] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 311.959566][T12810] genl_family_rcv_msg_doit+0x22a/0x330 [ 311.959609][T12810] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 311.959647][T12810] ? bpf_lsm_capable+0x9/0x20 [ 311.959667][T12810] ? security_capable+0x7e/0x2c0 [ 311.959699][T12810] genl_rcv_msg+0x61c/0x7a0 [ 311.959731][T12810] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.959754][T12810] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 311.959796][T12810] netlink_rcv_skb+0x232/0x4b0 [ 311.959816][T12810] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.959842][T12810] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.959882][T12810] ? down_read+0x270/0x2e0 [ 311.959899][T12810] ? genl_rcv+0xd/0x40 [ 311.959925][T12810] genl_rcv+0x28/0x40 [ 311.959947][T12810] netlink_unicast+0x75c/0x8e0 [ 311.959990][T12810] netlink_sendmsg+0x813/0xb40 [ 311.960021][T12810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.960046][T12810] ? aa_sock_msg_perm+0xf1/0x1b0 [ 311.960073][T12810] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.960103][T12810] ____sys_sendmsg+0x972/0x9f0 [ 311.960122][T12810] ? __might_fault+0xaf/0x130 [ 311.960154][T12810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.960184][T12810] ? import_iovec+0x73/0xa0 [ 311.960215][T12810] ___sys_sendmsg+0x2a5/0x360 [ 311.960232][T12810] ? __lock_acquire+0x6b5/0x2cf0 [ 311.960255][T12810] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.960282][T12810] ? futex_wake+0x4ac/0x580 [ 311.960340][T12810] ? __fget_files+0x2a/0x420 [ 311.960360][T12810] ? __fget_files+0x3a0/0x420 [ 311.960396][T12810] __x64_sys_sendmsg+0x1bd/0x2a0 [ 311.960419][T12810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.960449][T12810] ? rcu_is_watching+0x15/0xb0 [ 311.960484][T12810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.960505][T12810] do_syscall_64+0x15f/0xf80 [ 311.960533][T12810] ? trace_irq_disable+0x3b/0x140 [ 311.960561][T12810] ? clear_bhb_loop+0x40/0x90 [ 311.960586][T12810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.960625][T12810] RIP: 0033:0x7f6c6cb9ce59 [ 311.960645][T12810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.960661][T12810] RSP: 002b:00007f6c6da70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.960682][T12810] RAX: ffffffffffffffda RBX: 00007f6c6ce15fa0 RCX: 00007f6c6cb9ce59 [ 311.960696][T12810] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 311.960708][T12810] RBP: 00007f6c6cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 311.960720][T12810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.960731][T12810] R13: 00007f6c6ce16038 R14: 00007f6c6ce15fa0 R15: 00007fff8c9d2608 [ 311.960768][T12810] [ 311.961152][T12817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.325282][T12824] __nla_validate_parse: 6 callbacks suppressed [ 312.325300][T12824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1786'. [ 312.635886][ T30] audit: type=1800 audit(1779006351.343:13): pid=12828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1787" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2041 res=0 errno=0 [ 312.681448][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 312.875741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.904644][T12840] netlink: 'syz.4.1790': attribute type 142 has an invalid length. [ 312.994558][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'. [ 313.149893][T12853] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1795'. [ 313.375006][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 313.398476][T12855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.433335][T12860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.797578][T12870] macsec2: entered promiscuous mode [ 313.899353][T12870] macsec3: entered promiscuous mode [ 313.915896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.983260][T12870] macsec4: entered promiscuous mode [ 314.071533][T12870] macsec5: entered promiscuous mode [ 314.107759][T12870] macsec6: entered promiscuous mode [ 314.133982][T12870] macsec7: entered promiscuous mode [ 314.179108][T12870] macsec8: entered promiscuous mode [ 314.216138][T12870] macsec9: entered promiscuous mode [ 314.230570][T12870] macsec10: entered promiscuous mode [ 314.251314][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 314.265107][T12870] macsec11: entered promiscuous mode [ 314.337486][T12870] macsec12: entered promiscuous mode [ 314.348250][T12870] macsec13: entered promiscuous mode [ 314.364310][T12870] macsec14: entered promiscuous mode [ 314.387272][T12895] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 314.394887][T12895] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 314.414341][T12870] macsec15: entered promiscuous mode [ 314.421383][T12892] netlink: 5000 bytes leftover after parsing attributes in process `syz.0.1806'. [ 314.429517][T12870] macsec16: entered promiscuous mode [ 314.445296][T12870] macsec17: entered promiscuous mode [ 314.450765][T12892] openvswitch: netlink: Flow key attr not present in new flow. [ 314.468423][T12870] macsec18: entered promiscuous mode [ 314.492284][T12870] macsec19: entered promiscuous mode [ 314.508392][T12870] macsec20: entered promiscuous mode [ 314.524644][T12870] macsec21: entered promiscuous mode [ 314.955883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.969261][T12925] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1813'. [ 314.996504][T12925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1813'. [ 315.202397][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1813'. [ 315.234208][T12909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.357973][T12948] netlink: 'syz.4.1817': attribute type 15 has an invalid length. [ 315.645297][T12954] batman_adv: batadv0: Adding interface: dummy0 [ 315.665704][T12954] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.691795][T12954] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 315.995866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.074945][T12966] netlink: 'syz.3.1821': attribute type 5 has an invalid length. [ 316.107266][T12970] netlink: 'syz.0.1820': attribute type 4 has an invalid length. [ 316.152405][T12970] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 316.224243][T12978] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 316.275418][T12978] ip6gre3: entered promiscuous mode [ 316.290549][T12978] ip6gre3: entered allmulticast mode [ 316.306259][T12971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.316896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.325670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.334184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.342820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.373396][T12981] wg2: entered allmulticast mode [ 316.389985][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 316.412572][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 316.430291][ T7364] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 316.646697][T12985] ip6gre4: entered promiscuous mode [ 316.659375][T12985] ip6gre4: entered allmulticast mode [ 316.674539][T12989] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 316.687991][ T13] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 316.708937][ T13] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 316.717899][T12205] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 316.866036][T12205] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 316.956560][T12205] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 316.983070][T12994] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 317.045752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.436489][T12205] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 317.485090][T13019] netlink: 'syz.3.1835': attribute type 1 has an invalid length. [ 317.576064][T13019] bond11: entered promiscuous mode [ 317.595358][T13019] 8021q: adding VLAN 0 to HW filter on device bond11 [ 318.363228][T13037] netlink: 'syz.4.1838': attribute type 1 has an invalid length. [ 318.523756][T13037] 8021q: adding VLAN 0 to HW filter on device bond8 [ 318.546857][T13049] __nla_validate_parse: 4 callbacks suppressed [ 318.546877][T13049] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.1839'. [ 318.554558][T13041] bond8: (slave gretap1): making interface the new active one [ 318.575344][T13041] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 318.602392][T13049] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.1839'. [ 319.018991][T13072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1845'. [ 319.385267][T13086] netlink: 'syz.2.1850': attribute type 1 has an invalid length. [ 319.478385][T13086] bond4: entered promiscuous mode [ 319.484037][T13086] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.527040][T13087] vlan2: entered allmulticast mode [ 319.532351][T13087] bond4: entered allmulticast mode [ 319.569503][T13086] bond4: (slave bridge5): making interface the new active one [ 319.588829][T13086] bridge5: entered promiscuous mode [ 319.599198][T13086] bridge5: entered allmulticast mode [ 319.607939][T13086] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 319.950398][ T6328] tipc: Subscription rejected, illegal request [ 320.118098][T13115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1860'. [ 320.155736][ C0] net_ratelimit: 8 callbacks suppressed [ 320.155757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.172514][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1855'. [ 320.241670][T13087] team0: Port device netdevsim1 removed [ 320.430008][T13126] netlink: 'syz.3.1863': attribute type 1 has an invalid length. [ 320.450482][T13126] pim6reg: entered allmulticast mode [ 320.458611][T13130] IPVS: set_ctl: invalid protocol: 44 172.30.0.1:21 [ 320.461154][T13126] pim6reg: left allmulticast mode [ 320.635318][T13139] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 321.195863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.623058][T13152] netlink: 'syz.0.1870': attribute type 1 has an invalid length. [ 321.634424][T13152] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 321.768929][T13165] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1873'. [ 321.788962][T13165] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1873'. [ 321.954440][T13169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1875'. [ 321.996017][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.235741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.035947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.044499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.053020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.163262][T13119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.284446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.375022][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1879'. [ 323.404310][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 324.018698][T13222] bond9: option tlb_dynamic_lb: invalid value (5) [ 324.032832][T13222] bond9 (unregistering): Released all slaves [ 324.195483][T13232] __nla_validate_parse: 2 callbacks suppressed [ 324.195502][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1896'. [ 324.237448][T13239] netlink: 'syz.2.1897': attribute type 32 has an invalid length. [ 324.297624][T13198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 324.315790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.372187][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'. [ 324.517701][T13247] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.658186][T13262] macsec0: entered promiscuous mode [ 324.694043][T13265] macsec0: left promiscuous mode [ 324.777398][T13273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1905'. [ 324.806281][T13273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1905'. [ 324.817165][T13273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1905'. [ 324.829572][T13273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1905'. [ 324.844374][T13273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1905'. [ 324.857448][T13273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1905'. [ 324.881274][T13273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1905'. [ 324.896307][T13279] netlink: 'syz.4.1907': attribute type 1 has an invalid length. [ 324.971687][T13279] bond9: entered promiscuous mode [ 324.981851][T13279] 8021q: adding VLAN 0 to HW filter on device bond9 [ 325.028779][T13279] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 325.355907][ C0] net_ratelimit: 4 callbacks suppressed [ 325.355928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.383883][T13310] ip6tnl3: entered promiscuous mode [ 325.482455][T13313] netlink: 'syz.0.1915': attribute type 1 has an invalid length. [ 325.563937][T13316] netlink: 'syz.0.1916': attribute type 13 has an invalid length. [ 325.725518][T13316] tipc: Resetting bearer [ 325.814573][T13320] syzkaller0: entered promiscuous mode [ 325.826436][T13320] syzkaller0: entered allmulticast mode [ 326.272171][T13344] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20003 [ 326.395817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.404039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.412773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.421255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.447457][T13352] netlink: 'syz.2.1928': attribute type 4 has an invalid length. [ 326.997839][T13381] dvmrp0: entered allmulticast mode [ 327.436226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.485258][T13408] netlink: 'syz.3.1942': attribute type 10 has an invalid length. [ 327.570646][T13408] bridge0: port 4(syz_tun) entered disabled state [ 327.594911][T13408] syz_tun: left allmulticast mode [ 327.608255][T13408] bridge0: port 4(syz_tun) entered disabled state [ 327.810691][T13424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.300539][T13447] netlink: 'syz.1.1950': attribute type 13 has an invalid length. [ 328.322153][T13447] netlink: 'syz.1.1950': attribute type 17 has an invalid length. [ 328.339654][ T30] audit: type=1800 audit(1779006367.053:14): pid=13450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1951" name=CB dev="tmpfs" ino=2172 res=0 errno=0 [ 328.389584][ T30] audit: type=1800 audit(1779006367.073:15): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1951" name=CB dev="tmpfs" ino=2172 res=0 errno=0 [ 328.475954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.563470][T13447] wireguard: wg0: Could not create IPv4 socket [ 328.577600][T13447] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 328.727764][T13457] netlink: 'syz.3.1952': attribute type 12 has an invalid length. [ 328.795874][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 328.795895][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 328.868121][ T6332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.012526][T13474] IPVS: set_ctl: invalid protocol: 47 172.20.20.42:20002 [ 329.160893][T13479] netlink: 'syz.1.1959': attribute type 2 has an invalid length. [ 329.204490][T13479] __nla_validate_parse: 38 callbacks suppressed [ 329.204509][T13479] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.1959'. [ 329.435850][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 329.519761][T13494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1963'. [ 329.551944][T13487] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 329.577339][T13487] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 329.821717][T13499] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 330.052373][T13508] netlink: 'syz.2.1966': attribute type 3 has an invalid length. [ 330.318978][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1967'. [ 330.341961][T13511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1967'. [ 330.555746][ C0] net_ratelimit: 4 callbacks suppressed [ 330.555765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.637827][T13528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.673135][T13530] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1970'. [ 330.801103][T13530] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1970'. [ 331.117673][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.203531][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 331.224505][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 331.414956][T13564] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1984'. [ 331.427988][T13565] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 331.595979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.723104][T13577] syzkaller1: entered promiscuous mode [ 331.736895][T13577] syzkaller1: entered allmulticast mode [ 331.804134][T13589] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1986'. [ 332.069448][T13605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.253817][T13615] netlink: 'syz.2.1993': attribute type 1 has an invalid length. [ 332.268295][ T6332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.644038][T13636] netlink: 'syz.1.1997': attribute type 13 has an invalid length. [ 332.663235][T13636] netlink: 'syz.1.1997': attribute type 17 has an invalid length. [ 333.504337][T13636] bridge0: left promiscuous mode [ 333.514214][T13636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.528231][T13636] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.543362][T13636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.561700][T13636] wireguard: wg0: Could not create IPv4 socket [ 333.568525][T13636] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 333.589730][ T6332] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.609173][ T6332] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.667281][ T6332] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.685843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.695678][ T6332] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.706022][ T6332] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.736085][ T6332] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.780270][ T6332] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.794952][ T6332] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.902090][T13663] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 333.933274][T13663] openvswitch: netlink: IPv4 tun info is not correct [ 333.947047][T13664] openvswitch: netlink: IPv4 tun info is not correct [ 334.210028][T13674] __nla_validate_parse: 4 callbacks suppressed [ 334.210046][T13674] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2005'. [ 334.278873][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2005'. [ 335.755756][ C0] net_ratelimit: 1 callbacks suppressed [ 335.755772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.795789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.094493][T13667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.104460][T13681] netlink: 'syz.0.2005': attribute type 1 has an invalid length. [ 337.492647][T13717] netlink: 'syz.3.2017': attribute type 1 has an invalid length. [ 337.501615][T13717] netlink: 1008 bytes leftover after parsing attributes in process `syz.3.2017'. [ 337.506610][T13714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.512501][T13707] bond7: entered allmulticast mode [ 337.531236][T13714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.591114][T13713] macvlan0: entered promiscuous mode [ 337.603344][T13713] macvlan0: entered allmulticast mode [ 337.610256][T13713] bond7: entered promiscuous mode [ 337.617131][T13713] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 337.628840][T13713] bond7: left promiscuous mode [ 337.845759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.961117][T13742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2022'. [ 338.087629][T13742] 8021q: adding VLAN 0 to HW filter on device bond12 [ 338.101632][T13745] netlink: 'syz.0.2023': attribute type 1 has an invalid length. [ 338.171117][T13749] 8021q: adding VLAN 0 to HW filter on device bond12 [ 338.208089][T13749] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 338.232291][T13749] bond12: (slave wireguard0): Error -95 calling set_mac_address [ 338.333966][T13745] bond10: entered promiscuous mode [ 338.346121][T13745] 8021q: adding VLAN 0 to HW filter on device bond10 [ 338.375541][T13748] bond10: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 338.388821][T13748] bond10: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 338.401637][T13748] bond10: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 338.679789][T13769] syzkaller0: entered promiscuous mode [ 338.686037][T13776] Cannot find del_set index 1 as target [ 338.691885][T13769] syzkaller0: entered allmulticast mode [ 338.885900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.143667][T13800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2034'. [ 339.917477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.956823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.343256][T13786] netlink: 'syz.4.2029': attribute type 4 has an invalid length. [ 341.362513][T13797] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 341.389233][T13797] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 341.524327][T13803] macsec1: entered promiscuous mode [ 341.741253][T13814] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.834098][T13822] rds_sendmsg: 23 callbacks suppressed [ 341.834119][T13822] rdma_op ffff88802cea71f0 conn xmit_rdma 0000000000000000 [ 341.868495][T13822] SET target dimension over the limit! [ 341.874530][T13823] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2041'. [ 341.900410][T13823] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 341.995912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.160235][T13844] dummy0: entered allmulticast mode [ 342.169063][T13844] xt_hashlimit: size too large, truncated to 1048576 [ 342.249216][T13846] bridge_slave_0 (unregistering): left allmulticast mode [ 342.278931][T13846] bridge_slave_0 (unregistering): left promiscuous mode [ 342.300358][T13851] netlink: 'syz.1.2046': attribute type 1 has an invalid length. [ 342.324760][T13846] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.344244][T13851] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2046'. [ 342.613969][T13846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.720724][T13869] Cannot find add_set index 1 as target [ 342.857786][T13877] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2050'. [ 342.867348][T13879] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2050'. [ 342.938391][T13885] geneve2: entered promiscuous mode [ 343.035892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.094438][T13843] dummy0: left allmulticast mode [ 343.119559][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 343.140888][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 343.581048][T13911] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 343.594070][T13911] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 343.663634][T13915] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2057'. [ 343.985497][T13930] netlink: 65019 bytes leftover after parsing attributes in process `syz.3.2061'. [ 344.017273][T13930] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 344.050946][T13934] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2063'. [ 344.075763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.090582][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 344.165867][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 344.198582][T13953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.381511][T13958] batman_adv: batadv0: Interface activated: dummy0 [ 344.581701][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.588997][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.115813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.241690][T13993] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 345.288270][T13993] syzkaller0: entered promiscuous mode [ 345.308931][T13993] syzkaller0: entered allmulticast mode [ 345.339540][T13999] netlink: 'syz.3.2077': attribute type 4 has an invalid length. [ 345.407080][T13999] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 345.642382][T14015] netlink: 'syz.4.2081': attribute type 10 has an invalid length. [ 345.718549][T14020] netlink: 'syz.3.2082': attribute type 39 has an invalid length. [ 346.155778][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.463621][T14042] bond6 (unregistering): Released all slaves [ 346.619718][T14053] netlink: 'syz.4.2090': attribute type 20 has an invalid length. [ 346.716026][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 346.885357][T14063] __nla_validate_parse: 15 callbacks suppressed [ 346.885377][T14063] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2090'. [ 347.095401][T14074] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2092'. [ 347.195852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.276140][T14080] lo speed is unknown, defaulting to 1000 [ 347.298867][T14080] lo speed is unknown, defaulting to 1000 [ 347.442272][T14080] lo speed is unknown, defaulting to 1000 [ 347.474372][T14080] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 347.489648][T14080] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 347.543865][T14080] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 347.609938][T14080] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 347.653494][T14080] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 347.724048][T14080] lo speed is unknown, defaulting to 1000 [ 347.737808][T14080] lo speed is unknown, defaulting to 1000 [ 347.752338][T14091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2098'. [ 347.787349][T14091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2098'. [ 347.808637][T14091] tipc: Invalid UDP bearer configuration [ 347.808700][T14091] tipc: Enabling of bearer rejected, failed to enable media [ 347.836226][T14080] lo speed is unknown, defaulting to 1000 [ 347.848409][T14080] lo speed is unknown, defaulting to 1000 [ 347.859451][T14091] netlink: 'syz.3.2098': attribute type 1 has an invalid length. [ 347.874388][T14080] lo speed is unknown, defaulting to 1000 [ 347.901834][T14094] geneve2: entered promiscuous mode [ 347.950597][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2098'. [ 348.022327][T14091] bond13: entered promiscuous mode [ 348.029296][T14091] bond13: entered allmulticast mode [ 348.037343][T14091] 8021q: adding VLAN 0 to HW filter on device bond13 [ 348.044728][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.054342][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.074793][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.090199][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.236119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.272830][ T3319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.282544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.306548][T14121] netlink: 'syz.0.2105': attribute type 1 has an invalid length. [ 348.318857][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.327924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.350434][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.358942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.391193][T14123] vlan3: entered promiscuous mode [ 348.403242][ T3319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.939477][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 349.161822][T14163] netlink: 'syz.4.2117': attribute type 1 has an invalid length. [ 349.219517][T14164] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 349.420221][T14163] bond10: (slave veth9): Enslaving as an active interface with a down link [ 349.421475][T14183] netlink: 'syz.4.2117': attribute type 10 has an invalid length. [ 349.553009][T14183] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2117'. [ 349.625732][T14164] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 349.653042][T14188] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2119'. [ 349.753090][T14191] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 349.774913][T14191] bond8: (slave lo): Enslaving as an active interface with an up link [ 349.831068][T14200] netlink: 'syz.1.2121': attribute type 16 has an invalid length. [ 349.882949][T14200] netlink: 'syz.1.2121': attribute type 17 has an invalid length. [ 349.921039][T12205] lo speed is unknown, defaulting to 1000 [ 350.000781][T14200] wireguard: wg0: Could not create IPv4 socket [ 350.152682][T14217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2127'. [ 350.197627][T14218] bridge0: port 3(veth1_to_bridge) entered blocking state [ 350.218042][T14218] bridge0: port 3(veth1_to_bridge) entered disabled state [ 350.227057][T14218] veth1_to_bridge: entered allmulticast mode [ 350.250241][T14218] veth1_to_bridge: entered promiscuous mode [ 350.294611][T14218] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.343882][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2132'. [ 350.345687][T14218] bridge0: port 3(veth1_to_bridge) entered blocking state [ 350.360491][T14218] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 350.398688][T14228] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 350.486992][T14225] team0 (unregistering): Port device team_slave_0 removed [ 350.535993][T14225] team0 (unregistering): Port device team_slave_1 removed [ 351.038547][T14273] veth1_to_hsr: entered allmulticast mode [ 351.071986][T14276] netlink: 'syz.2.2143': attribute type 21 has an invalid length. [ 351.092266][T14276] netlink: 'syz.2.2143': attribute type 22 has an invalid length. [ 351.107274][T14276] netlink: 'syz.2.2143': attribute type 23 has an invalid length. [ 351.123179][T14276] netlink: 'syz.2.2143': attribute type 25 has an invalid length. [ 351.355895][ C0] net_ratelimit: 11 callbacks suppressed [ 351.355918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.664342][T14300] sctp: [Deprecated]: syz.2.2148 (pid 14300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.664342][T14300] Use struct sctp_sack_info instead [ 351.731514][T14307] xfrm1: entered allmulticast mode [ 351.832897][T14314] sctp: [Deprecated]: syz.2.2148 (pid 14314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.832897][T14314] Use struct sctp_sack_info instead [ 351.995051][T14323] __nla_validate_parse: 7 callbacks suppressed [ 351.995070][T14323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2153'. [ 352.396043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.398078][T14323] bridge_slave_1: left allmulticast mode [ 352.447658][T14323] bridge_slave_1: left promiscuous mode [ 352.465949][T14323] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.525021][T14323] bond0: (slave bond_slave_0): Releasing backup interface [ 352.551716][T14323] bond0: (slave bond_slave_1): Releasing backup interface [ 352.567468][T14323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.579399][T14323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.588232][T14323] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 352.630944][T14302] lo speed is unknown, defaulting to 1000 [ 353.126705][T14369] ÿ: renamed from bond_slave_0 [ 353.435873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.449558][T14384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.470233][T14386] bond14: option packets_per_slave: invalid value (1376261) [ 353.478018][T14386] bond14: option packets_per_slave: allowed values 0 - 65535 [ 353.487130][T14386] bond14 (unregistering): Released all slaves [ 353.579465][T14391] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2170'. [ 353.611001][T14396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2171'. [ 353.672042][T14396] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 354.121495][T14413] IPVS: Scheduler module ip_vs_ªª not found [ 354.144482][T14417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.175360][T14417] v: renamed from ip6tnl0 (while UP) [ 354.202863][T14397] lo speed is unknown, defaulting to 1000 [ 354.474559][T14424] validate_nla: 1 callbacks suppressed [ 354.474580][T14424] netlink: 'syz.3.2179': attribute type 1 has an invalid length. [ 354.475750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.488531][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2178'. [ 354.594128][T14424] 8021q: adding VLAN 0 to HW filter on device bond14 [ 354.650980][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2178'. [ 354.827677][T14434] sctp: [Deprecated]: syz.3.2181 (pid 14434) Use of int in max_burst socket option. [ 354.827677][T14434] Use struct sctp_assoc_value instead [ 355.047303][T14443] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2183'. [ 355.104815][T14447] xt_TCPMSS: Only works on TCP SYN packets [ 355.287912][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'. [ 355.309165][T14447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2185'. [ 355.329589][T14457] netlink: 'syz.1.2188': attribute type 1 has an invalid length. [ 355.340429][T14457] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2188'. [ 355.411938][T14459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2188'. [ 355.515791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.575938][T14092] block nbd64: NBD_DISCONNECT [ 355.946092][T14092] udevd[14092]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 356.317009][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:4f:2b:d8:98:2d, vlan:0) [ 357.062244][T14530] netlink: 'syz.1.2206': attribute type 9 has an invalid length. [ 357.339050][T14551] __nla_validate_parse: 5 callbacks suppressed [ 357.339072][T14551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2210'. [ 357.357206][T14551] nbd: couldn't find a device at index 0 [ 357.472435][T14556] netlink: 'syz.3.2212': attribute type 2 has an invalid length. [ 357.657365][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2218'. [ 358.006616][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2223'. [ 358.180272][T14590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2226'. [ 358.270620][T14604] netlink: 'syz.1.2230': attribute type 9 has an invalid length. [ 358.292390][T14604] netlink: 'syz.1.2230': attribute type 6 has an invalid length. [ 358.313055][T14599] bond11: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 358.353618][T14599] bond11 (unregistering): Released all slaves [ 358.444728][T14615] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2233'. [ 358.466315][T14615] openvswitch: netlink: Message has 3 unknown bytes. [ 358.519696][T14615] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 358.610084][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2234'. [ 358.630535][T14622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2235'. [ 358.647082][T14625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2235'. [ 358.816443][T14629] netlink: 'syz.0.2239': attribute type 1 has an invalid length. [ 358.981296][T14645] netlink: 'syz.2.2241': attribute type 19 has an invalid length. [ 358.992734][T14645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2241'. [ 359.004198][T14645] netlink: 'syz.2.2241': attribute type 2 has an invalid length. [ 359.019612][T14645] netlink: 'syz.2.2241': attribute type 1 has an invalid length. [ 359.041775][T14645] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2241'. [ 359.114061][T14650] tunl0: Caught tx_queue_len zero misconfig [ 359.182229][T14653] IPv6: NLM_F_CREATE should be specified when creating new route [ 359.203271][T14653] IPv6: Can't replace route, no match found [ 359.239993][T14657] nbd: couldn't find a device at index 0 [ 359.853626][T14678] Bluetooth: MGMT ver 1.23 [ 359.990362][T14692] validate_nla: 2 callbacks suppressed [ 359.990384][T14692] netlink: 'syz.2.2257': attribute type 13 has an invalid length. [ 360.015501][T14692] netlink: 'syz.2.2257': attribute type 17 has an invalid length. [ 360.044044][ T59] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.232620][T14692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.262577][T14692] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.286161][T14692] batman_adv: batadv0: Interface activated: dummy0 [ 360.322718][T14692] batadv0: mtu less than device minimum [ 360.359413][T14692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 360.371180][T14692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 360.383276][T14692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 360.395290][T14692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 360.407112][T14692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 360.418797][T14692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 360.430407][T14692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 360.442169][T14692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 360.490432][T14692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.524092][T14692] bridge_slave_1: left allmulticast mode [ 360.547811][T14692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.593985][T14692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.624858][T14692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.638055][T14692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.655016][T14692] veth1_vlan: left promiscuous mode [ 360.664014][T14692] veth0_vlan: left promiscuous mode [ 360.670687][T14692] veth0_vlan: entered promiscuous mode [ 360.689300][T14692] veth1_vlan: entered promiscuous mode [ 360.702953][T14692] ipvlan0: left allmulticast mode [ 360.708623][T14692] veth0_vlan: left allmulticast mode [ 360.717727][T14692] veth1_macvtap: left promiscuous mode [ 360.725160][T14692] veth0_macvtap: left promiscuous mode [ 360.734115][T14692] veth0_macvtap: entered promiscuous mode [ 360.763156][T14692] veth1_macvtap: entered promiscuous mode [ 360.793529][T14692] erspan0: entered promiscuous mode [ 360.809076][T14692] macvlan2: left allmulticast mode [ 360.814980][T14692] erspan0: entered allmulticast mode [ 360.871230][T14692] batman_adv: batadv0: Interface activated: macsec1 [ 360.930773][T14692] bridge3: left allmulticast mode [ 360.948687][T14692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.967719][T14692] ip6gre1: left allmulticast mode [ 361.947600][T14692] ip6gre2: left allmulticast mode [ 361.953658][T14692] ip6gre3: left allmulticast mode [ 361.963081][T14692] erspan1: left allmulticast mode [ 362.010757][T14692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.018448][T14692] bond3: left promiscuous mode [ 362.023251][T14692] vcan0: left promiscuous mode [ 362.028926][T14692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.037695][T14692] ip6gre4: left promiscuous mode [ 362.042667][T14692] ip6gre4: left allmulticast mode [ 362.050568][T14692] bond4: left promiscuous mode [ 362.055465][T14692] bridge5: left promiscuous mode [ 362.061922][T14692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.070478][T14692] vlan2: left allmulticast mode [ 362.075381][T14692] bond4: left allmulticast mode [ 362.082029][T14692] bridge5: left allmulticast mode [ 362.090443][T14692] 8021q: adding VLAN 0 to HW filter on device eth0 [ 362.103753][T14692] 8021q: adding VLAN 0 to HW filter on device eth1 [ 362.117186][T14692] 8021q: adding VLAN 0 to HW filter on device eth2 [ 362.130021][T14692] 8021q: adding VLAN 0 to HW filter on device eth3 [ 362.148124][T14692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 362.163237][T14692] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.171417][T14692] bond7: left allmulticast mode [ 362.176955][T14692] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.186961][T14692] geneve2: left promiscuous mode [ 362.194733][T14692] 8021q: adding VLAN 0 to HW filter on device bond8 [ 362.205693][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.213966][ T59] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 362.287969][ T5765] syz0: Port: 1 Link ACTIVE [ 362.300657][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.309195][ T59] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 362.319489][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.328877][ T59] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 362.377634][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.406401][ T59] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 362.427143][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.474799][T14728] hsr0: entered promiscuous mode [ 362.738739][T14726] hsr0: left promiscuous mode [ 362.934169][T14749] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 362.963225][ T59] wlan1: Trigger new scan to find an IBSS to join [ 363.053214][T14757] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 363.146312][T14759] netlink: 'syz.3.2279': attribute type 1 has an invalid length. [ 363.216678][T14763] netlink: 'syz.1.2280': attribute type 9 has an invalid length. [ 363.257702][T14762] __nla_validate_parse: 5 callbacks suppressed [ 363.257726][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2278'. [ 363.363703][T14764] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 363.375284][T14764] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 363.497980][T14759] bond15: (slave gretap1): making interface the new active one [ 363.532487][T14759] bond15: (slave gretap1): Enslaving as an active interface with an up link [ 363.551733][T14771] netlink: 'syz.4.2281': attribute type 49 has an invalid length. [ 363.869767][T14783] netlink: 'syz.1.2285': attribute type 3 has an invalid length. [ 363.893354][T14789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2283'. [ 363.908744][ T59] net_ratelimit: 78 callbacks suppressed [ 363.908766][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 364.033352][T14779] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 364.148648][T14776] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 364.506924][ T3319] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 364.977201][T14825] netlink: 'syz.1.2294': attribute type 1 has an invalid length. [ 365.080637][ T3319] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 365.387408][T14843] netlink: 'syz.2.2296': attribute type 5 has an invalid length. [ 365.436957][T14820] syz_tun: left promiscuous mode [ 365.615721][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 365.740095][T14820] 8021q: adding VLAN 0 to HW filter on device  [ 365.750563][T14820] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.769466][T14820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.849925][T14820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.862096][T14820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.879579][T14820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 365.890620][T14820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.903189][T14820] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 365.933497][T14820] veth1_vlan: left promiscuous mode [ 365.941121][T14820] veth0_vlan: left promiscuous mode [ 365.949273][T14820] veth0_vlan: entered promiscuous mode [ 365.959986][T14820] veth1_vlan: entered promiscuous mode [ 365.972238][T14820] veth1_macvtap: left promiscuous mode [ 365.980232][T14820] veth0_macvtap: left promiscuous mode [ 365.996397][ T59] wlan1: Trigger new scan to find an IBSS to join [ 365.997591][T14820] veth0_macvtap: entered promiscuous mode [ 366.021142][T14820] veth1_macvtap: entered promiscuous mode [ 366.041348][T14820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.058520][T14820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.072829][T14820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.092131][T14820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.147638][ T9892] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 366.173674][T14820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.197333][T14820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.216774][T14820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.225135][T14820] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 366.241426][T14820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.257384][T14820] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.269570][T14820] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 366.279064][T14820] vlan3: left promiscuous mode [ 366.283870][T14820] bridge0: left promiscuous mode [ 366.300137][T14820] bond5: left promiscuous mode [ 366.308928][T14820] gre1: left promiscuous mode [ 366.325745][T14820] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.346536][T14820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.363538][T14820] bond8: left promiscuous mode [ 366.391975][T14820] bond9: left promiscuous mode [ 366.397224][T14820] bridge3: left promiscuous mode [ 366.404174][T14820] bond10: left promiscuous mode [ 366.411442][T14820] bond11: left promiscuous mode [ 366.421012][T14820] 8021q: adding VLAN 0 to HW filter on device bond12 [ 366.431819][T14820] bond13: left promiscuous mode [ 366.444349][T14820] 8021q: adding VLAN 0 to HW filter on device bond15 [ 366.478337][T14825] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 366.505066][T14831] veth3: entered allmulticast mode [ 366.551471][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.558741][ T6332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.587976][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.595295][ T6332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.634184][ T6332] bridge0: port 3(vlan2) entered blocking state [ 366.640893][ T6332] bridge0: port 3(vlan2) entered forwarding state [ 366.685915][ T6334] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 366.780980][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.799681][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.829796][ T59] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 366.839414][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.849346][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.859029][ T59] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 366.937199][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.969769][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.000437][ T59] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 367.033635][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.065331][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.094196][ T59] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 367.227028][ T6334] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 367.253715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.278701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.673975][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2306'. [ 367.807093][ T6330] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 368.155395][T14905] netlink: 'syz.0.2310': attribute type 15 has an invalid length. [ 368.199606][T14906] netlink: 'syz.0.2310': attribute type 15 has an invalid length. [ 368.226768][T14905] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2310'. [ 368.229423][T14906] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2310'. [ 368.449606][T14871] lo speed is unknown, defaulting to 1000 [ 368.731367][T14912] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2311'. [ 369.036255][ T6330] wlan1: Trigger new scan to find an IBSS to join [ 369.356771][ C1] net_ratelimit: 5 callbacks suppressed [ 369.356792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.417367][ T6328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 369.796845][T14945] syzkaller1: entered promiscuous mode [ 369.806114][T14945] syzkaller1: entered allmulticast mode [ 369.966849][T14919] lo speed is unknown, defaulting to 1000 [ 369.974059][ T6332] wlan1: Creating new IBSS network, BSSID 66:40:85:77:f0:c1 [ 369.986699][ T6328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 370.198581][T14965] ip6tnl1: entered allmulticast mode [ 370.204360][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2320'. [ 370.526255][ T6334] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 371.069628][ T6334] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 371.177404][T15012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2331'. [ 371.192350][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2331'. [ 371.616988][ T6328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 371.642486][T15035] netlink: 'syz.3.2338': attribute type 1 has an invalid length. [ 371.666384][T15035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2338'. [ 372.124237][T15058] netlink: 'syz.2.2343': attribute type 1 has an invalid length. [ 372.176222][ T6328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 372.283176][T15052] lo: Caught tx_queue_len zero misconfig [ 372.303562][ T6330] netdevsim netdevsim4 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.312428][ T6330] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 256 - 0 [ 372.321371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:4f:2b:d8:98:2d, vlan:0) [ 372.349176][ T6330] netdevsim netdevsim4 €Â: unset [1, 1] type 2 family 0 port 6081 - 0 [ 372.367107][ T6330] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.376942][ T6330] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 372.386707][ T6330] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 372.470770][ T6330] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.496862][ T6330] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 372.521864][ T6330] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 372.579569][ T6330] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.610811][ T6330] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 372.633884][ T6330] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 372.646891][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.698620][ T6330] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 373.020695][T15085] syzkaller1: entered promiscuous mode [ 373.029975][T15085] syzkaller1: entered allmulticast mode [ 373.159483][T15090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2351'. [ 373.488530][T15074] lo speed is unknown, defaulting to 1000 [ 373.494618][T15098] TCP: TCP_TX_DELAY enabled [ 374.339172][T15121] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2359'. [ 374.428179][T15120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2359'. [ 374.788720][ T9892] net_ratelimit: 3 callbacks suppressed [ 374.790284][ T9892] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 374.920685][T15142] netlink: 74 bytes leftover after parsing attributes in process `syz.1.2365'. [ 374.970687][T15135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2362'. [ 375.337532][T15172] lo: entered allmulticast mode [ 375.351859][T15172] netlink: zone id is out of range [ 375.363988][ T9892] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 375.394789][T15172] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2373'. [ 375.772982][T15171] lo: left allmulticast mode [ 375.921636][ T9892] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 376.022519][T15204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2383'. [ 376.027923][T15206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2386'. [ 376.094769][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2384'. [ 376.209112][T15214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2388'. [ 376.294961][T15218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2388'. [ 376.506989][ T9892] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 377.038214][T15255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.055706][ T6328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 377.108556][T15255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.612891][ T6330] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 377.701719][T15290] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 378.009636][T15307] netlink: 'syz.3.2415': attribute type 21 has an invalid length. [ 378.038960][T15307] netlink: 'syz.3.2415': attribute type 4 has an invalid length. [ 378.055832][T15307] netlink: 'syz.3.2415': attribute type 5 has an invalid length. [ 378.146274][ T6334] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 378.313138][T15277] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 378.686663][ T6334] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 378.718485][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.731912][T15312] veth1_to_hsr: left allmulticast mode [ 378.769303][T15312] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 378.798617][T15312] erspan1: left promiscuous mode [ 378.812459][T15312] erspan1: left allmulticast mode [ 378.826151][T15312] bond4: left allmulticast mode [ 378.832678][T15312] bridge4: left allmulticast mode [ 378.848998][T15312] macsec2: left promiscuous mode [ 378.857558][T15312] macsec3: left promiscuous mode [ 378.863628][T15312] macsec4: left promiscuous mode [ 378.872434][T15312] macsec5: left promiscuous mode [ 378.881956][T15312] macsec6: left promiscuous mode [ 378.889397][T15312] macsec7: left promiscuous mode [ 378.894859][T15312] macsec8: left promiscuous mode [ 378.900595][T15312] macsec9: left promiscuous mode [ 378.907424][T15312] macsec10: left promiscuous mode [ 378.913012][T15312] macsec11: left promiscuous mode [ 378.919031][T15312] macsec12: left promiscuous mode [ 378.924360][T15312] macsec13: left promiscuous mode [ 378.938943][T15312] macsec14: left promiscuous mode [ 378.947703][T15312] macsec15: left promiscuous mode [ 378.961355][T15312] macsec16: left promiscuous mode [ 378.975796][T15312] macsec17: left promiscuous mode [ 378.987072][T15312] macsec18: left promiscuous mode [ 378.993072][T15312] macsec19: left promiscuous mode [ 378.998816][T15312] macsec20: left promiscuous mode [ 379.004544][T15312] macsec21: left promiscuous mode [ 379.010905][T15312] xfrm1: left allmulticast mode [ 379.042833][ T7364] lo speed is unknown, defaulting to 1000 [ 379.068085][ T7364] syz2: Port: 1 Link DOWN [ 379.071219][T15314] geneve3: entered promiscuous mode [ 379.090838][T15314] geneve3: entered allmulticast mode [ 379.313782][T15354] netlink: 'syz.0.2426': attribute type 6 has an invalid length. [ 379.341747][T15354] netlink: 'syz.0.2426': attribute type 7 has an invalid length. [ 379.350785][T15354] netlink: 'syz.0.2426': attribute type 8 has an invalid length. [ 379.363606][T15354] netlink: 'syz.0.2426': attribute type 15 has an invalid length. [ 379.457823][T15361] __nla_validate_parse: 8 callbacks suppressed [ 379.457842][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2428'. [ 379.479806][T15361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2428'. [ 379.804537][T15375] xt_addrtype: ipv6 does not support BROADCAST matching [ 379.825095][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2432'. [ 379.826046][T15376] sctp: [Deprecated]: syz.2.2430 (pid 15376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.826046][T15376] Use struct sctp_sack_info instead [ 380.246379][ T6334] net_ratelimit: 2 callbacks suppressed [ 380.246398][ T6334] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 380.267382][T15391] bridge4: entered promiscuous mode [ 380.284528][T15391] bridge4: entered allmulticast mode [ 380.485449][T15404] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2441'. [ 380.529156][T15404] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 380.682530][T15422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2444'. [ 380.745549][T15422] veth1_to_team: entered promiscuous mode [ 380.783256][T15422] hsr1: entered promiscuous mode [ 380.798297][ T6334] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 380.860742][T15430] nbd: device at index 3 is going down [ 381.025146][T15437] syzkaller0: entered promiscuous mode [ 381.068056][T15437] syzkaller0: entered allmulticast mode [ 381.214952][T14490] udevd[14490]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 381.287216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.348847][ T6330] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 381.421113][T15455] netlink: 'syz.0.2453': attribute type 1 has an invalid length. [ 381.471373][T15460] netlink: 'syz.2.2452': attribute type 1 has an invalid length. [ 381.526019][T15464] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2455'. [ 381.712693][T15470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2457'. [ 381.716043][T15460] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.743859][T15470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2457'. [ 381.772237][T15465] bond9: (slave ip6erspan1): making interface the new active one [ 381.823610][T15465] bond9: (slave ip6erspan1): Enslaving as an active interface with an up link [ 381.896630][ T6330] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 382.436146][ T6330] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 382.505023][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2467'. [ 382.528160][T15520] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2468'. [ 382.688931][T15530] netlink: 'syz.1.2470': attribute type 1 has an invalid length. [ 382.717774][T15530] 8021q: adding VLAN 0 to HW filter on device bond6 [ 382.985850][ T6332] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 383.516007][ T9892] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 384.045908][ T9892] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 385.064677][T15488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.303349][T15545] openvswitch: : Dropping previously announced user features [ 385.586389][ T6332] net_ratelimit: 2 callbacks suppressed [ 385.586411][ T6332] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 385.646157][T15571] netlink: 'syz.0.2481': attribute type 1 has an invalid length. [ 385.770640][T15579] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2483'. [ 385.836598][ T30] audit: type=1107 audit(1779006424.543:16): pid=15578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 386.011473][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2486'. [ 386.028829][T15588] bond11: option arp_all_targets: invalid value (129) [ 386.038495][T15588] bond11 (unregistering): Released all slaves [ 386.094397][T15590] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2486'. [ 386.119086][ T6328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 386.287258][T15595] block nbd4: server does not support multiple connections per device. [ 386.302283][T15595] block nbd4: shutting down sockets [ 386.362732][T15601] netlink: 'syz.0.2489': attribute type 1 has an invalid length. [ 386.420104][T15601] bond11: entered promiscuous mode [ 386.426774][T15601] 8021q: adding VLAN 0 to HW filter on device bond11 [ 386.486895][T15601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2489'. [ 386.523136][T15601] bond11: entered allmulticast mode [ 386.541374][T15611] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 386.573309][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 386.582342][T15601] bond11: (slave bridge5): making interface the new active one [ 386.582369][T15601] bridge5: entered promiscuous mode [ 386.582565][T15601] bridge5: entered allmulticast mode [ 386.590579][T15601] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 386.599587][T15615] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2492'. [ 386.635939][ T6334] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 386.638192][T15615] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2492'. [ 386.818812][T15626] hsr0: entered promiscuous mode [ 387.170126][ T6334] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 387.302097][T15610] lo speed is unknown, defaulting to 1000 [ 387.705964][ T3319] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 387.929243][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'. [ 387.955842][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'. [ 388.245744][ T6328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 388.327861][T15655] lo speed is unknown, defaulting to 1000 [ 388.613359][T15688] tipc: Can't bind to reserved service type 2 [ 388.796101][ T6334] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 388.914028][T15703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2511'. [ 388.957739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.970239][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.982969][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.306195][T15706] ip6t_srh: unknown srh match flags 4000 [ 389.449326][T15714] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 390.595631][ C0] net_ratelimit: 3532 callbacks suppressed [ 390.595655][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.623397][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.635923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.645272][ T6330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.648466][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.649712][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.657765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.669776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.670146][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.670507][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.814545][T15753] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.175012][T15759] __nla_validate_parse: 5 callbacks suppressed [ 391.175033][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2525'. [ 391.337615][T15763] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 392.241391][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2531'. [ 392.778656][T15787] block nbd4: server does not support multiple connections per device. [ 393.049936][T15787] block nbd4: shutting down sockets [ 393.222513][T15786] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2532'. [ 393.296717][T15810] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2535'. [ 393.403176][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2536'. [ 393.862801][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 394.359554][T15844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2544'. [ 394.503152][T15844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2544'. [ 394.728583][T15844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2544'. [ 394.818551][T15854] netlink: 'syz.0.2544': attribute type 2 has an invalid length. [ 394.900843][T15854] netlink: 'syz.0.2544': attribute type 2 has an invalid length. [ 395.605915][ C0] net_ratelimit: 10684 callbacks suppressed [ 395.605939][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.624446][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.637368][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.650091][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.662640][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.675305][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.687837][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.700564][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.713411][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.725986][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.511796][T15880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.775395][T15896] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 396.834192][T15900] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 396.940598][T15901] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2559'. [ 396.990005][T15904] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2559'. [ 397.257267][T15912] hsr0: entered promiscuous mode [ 397.302974][T15913] [ 397.305360][T15913] ====================================================== [ 397.312402][T15913] WARNING: possible circular locking dependency detected [ 397.319453][T15913] syzkaller #0 Not tainted [ 397.324074][T15913] ------------------------------------------------------ [ 397.331133][T15913] syz.0.2562/15913 is trying to acquire lock: [ 397.337314][T15913] ffffffff8ea85560 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 397.346705][T15913] [ 397.346705][T15913] but task is already holding lock: [ 397.354082][T15913] ffff8880533545e0 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 397.364827][T15913] [ 397.364827][T15913] which lock already depends on the new lock. [ 397.364827][T15913] [ 397.375248][T15913] [ 397.375248][T15913] the existing dependency chain (in reverse order) is: [ 397.384365][T15913] [ 397.384365][T15913] -> #7 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}: [ 397.392501][T15913] lock_sock_nested+0x41/0x100 [ 397.397818][T15913] mptcp_subflow_create_socket+0x142/0x800 [ 397.404190][T15913] __mptcp_nmpc_sk+0x155/0x790 [ 397.409526][T15913] mptcp_setsockopt+0x10ff/0x3520 [ 397.415111][T15913] do_sock_setsockopt+0x17c/0x1b0 [ 397.420691][T15913] __x64_sys_setsockopt+0x13d/0x1b0 [ 397.426450][T15913] do_syscall_64+0x15f/0xf80 [ 397.431595][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.438037][T15913] [ 397.438037][T15913] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 397.445804][T15913] lock_sock_nested+0x41/0x100 [ 397.451130][T15913] inet_shutdown+0x6a/0x390 [ 397.456202][T15913] nbd_mark_nsock_dead+0x2e9/0x560 [ 397.461982][T15913] sock_shutdown+0x15e/0x260 [ 397.467122][T15913] nbd_clear_sock+0x24/0x170 [ 397.472263][T15913] nbd_config_put+0x2dd/0x580 [ 397.477482][T15913] nbd_genl_connect+0x19d5/0x1cf0 [ 397.483051][T15913] genl_family_rcv_msg_doit+0x22a/0x330 [ 397.489144][T15913] genl_rcv_msg+0x61c/0x7a0 [ 397.494198][T15913] netlink_rcv_skb+0x232/0x4b0 [ 397.499511][T15913] genl_rcv+0x28/0x40 [ 397.504059][T15913] netlink_unicast+0x75c/0x8e0 [ 397.509369][T15913] netlink_sendmsg+0x813/0xb40 [ 397.514685][T15913] ____sys_sendmsg+0x972/0x9f0 [ 397.519993][T15913] ___sys_sendmsg+0x2a5/0x360 [ 397.525298][T15913] __x64_sys_sendmsg+0x1bd/0x2a0 [ 397.530777][T15913] do_syscall_64+0x15f/0xf80 [ 397.535922][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.542358][T15913] [ 397.542358][T15913] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 397.550050][T15913] __mutex_lock+0x1a3/0x1550 [ 397.555188][T15913] nbd_queue_rq+0x37b/0x1100 [ 397.560320][T15913] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 397.566417][T15913] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 397.573304][T15913] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 397.579834][T15913] blk_mq_run_hw_queue+0x348/0x4f0 [ 397.585493][T15913] blk_mq_dispatch_list+0xd16/0xe10 [ 397.591250][T15913] blk_mq_flush_plug_list+0x48d/0x570 [ 397.597170][T15913] __blk_flush_plug+0x3ed/0x4d0 [ 397.602568][T15913] __submit_bio+0x28d/0x580 [ 397.607606][T15913] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 397.613787][T15913] block_read_full_folio+0x599/0x830 [ 397.619625][T15913] filemap_read_folio+0x137/0x3b0 [ 397.625198][T15913] do_read_cache_folio+0x358/0x590 [ 397.630863][T15913] read_part_sector+0xb6/0x2b0 [ 397.636178][T15913] adfspart_check_ICS+0xb1/0x960 [ 397.641760][T15913] bdev_disk_changed+0x817/0x1770 [ 397.647345][T15913] blkdev_get_whole+0x380/0x510 [ 397.652748][T15913] bdev_open+0x31e/0xd30 [ 397.657543][T15913] blkdev_open+0x470/0x610 [ 397.662585][T15913] do_dentry_open+0x785/0x14e0 [ 397.667899][T15913] vfs_open+0x3b/0x340 [ 397.672527][T15913] path_openat+0x2e08/0x3860 [ 397.677664][T15913] do_file_open+0x23e/0x4a0 [ 397.682711][T15913] do_sys_openat2+0x113/0x200 [ 397.687930][T15913] __x64_sys_openat+0x138/0x170 [ 397.693324][T15913] do_syscall_64+0x15f/0xf80 [ 397.698472][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.704911][T15913] [ 397.704911][T15913] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 397.712177][T15913] __mutex_lock+0x1a3/0x1550 [ 397.717307][T15913] nbd_queue_rq+0xc6/0x1100 [ 397.722364][T15913] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 397.728461][T15913] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 397.735346][T15913] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 397.741877][T15913] blk_mq_run_hw_queue+0x348/0x4f0 [ 397.747544][T15913] blk_mq_dispatch_list+0xd16/0xe10 [ 397.753303][T15913] blk_mq_flush_plug_list+0x48d/0x570 [ 397.759231][T15913] __blk_flush_plug+0x3ed/0x4d0 [ 397.764644][T15913] __submit_bio+0x28d/0x580 [ 397.769784][T15913] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 397.775983][T15913] block_read_full_folio+0x599/0x830 [ 397.781811][T15913] filemap_read_folio+0x137/0x3b0 [ 397.787392][T15913] do_read_cache_folio+0x358/0x590 [ 397.793068][T15913] read_part_sector+0xb6/0x2b0 [ 397.798384][T15913] adfspart_check_ICS+0xb1/0x960 [ 397.803972][T15913] bdev_disk_changed+0x817/0x1770 [ 397.809573][T15913] blkdev_get_whole+0x380/0x510 [ 397.814990][T15913] bdev_open+0x31e/0xd30 [ 397.819867][T15913] blkdev_open+0x470/0x610 [ 397.825267][T15913] do_dentry_open+0x785/0x14e0 [ 397.830757][T15913] vfs_open+0x3b/0x340 [ 397.835371][T15913] path_openat+0x2e08/0x3860 [ 397.840513][T15913] do_file_open+0x23e/0x4a0 [ 397.845565][T15913] do_sys_openat2+0x113/0x200 [ 397.850794][T15913] __x64_sys_openat+0x138/0x170 [ 397.856376][T15913] do_syscall_64+0x15f/0xf80 [ 397.861525][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.867963][T15913] [ 397.867963][T15913] -> #3 (set->srcu){.+.+}-{0:0}: [ 397.875116][T15913] __synchronize_srcu+0xca/0x300 [ 397.880682][T15913] elevator_switch+0x1e8/0x7a0 [ 397.885996][T15913] elevator_change+0x2cc/0x450 [ 397.891314][T15913] elevator_set_default+0x36c/0x430 [ 397.897119][T15913] blk_register_queue+0x3e9/0x4e0 [ 397.902681][T15913] __add_disk+0x677/0xd50 [ 397.907557][T15913] add_disk_fwnode+0xfb/0x480 [ 397.912860][T15913] nbd_dev_add+0x72c/0xb50 [ 397.917814][T15913] nbd_init+0x168/0x1f0 [ 397.922772][T15913] do_one_initcall+0x250/0x870 [ 397.928121][T15913] do_initcall_level+0x104/0x190 [ 397.933610][T15913] do_initcalls+0x59/0xa0 [ 397.938486][T15913] kernel_init_freeable+0x2a6/0x3e0 [ 397.944317][T15913] kernel_init+0x1d/0x1d0 [ 397.949287][T15913] ret_from_fork+0x514/0xb70 [ 397.954436][T15913] ret_from_fork_asm+0x1a/0x30 [ 397.959746][T15913] [ 397.959746][T15913] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 397.967600][T15913] __mutex_lock+0x1a3/0x1550 [ 397.972819][T15913] elevator_change+0x1b3/0x450 [ 397.978131][T15913] elevator_set_none+0xb5/0x140 [ 397.983534][T15913] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 397.989890][T15913] nbd_start_device+0x17f/0xb10 [ 397.995380][T15913] nbd_genl_connect+0x165b/0x1cf0 [ 398.000954][T15913] genl_family_rcv_msg_doit+0x22a/0x330 [ 398.007139][T15913] genl_rcv_msg+0x61c/0x7a0 [ 398.012184][T15913] netlink_rcv_skb+0x232/0x4b0 [ 398.017487][T15913] genl_rcv+0x28/0x40 [ 398.022015][T15913] netlink_unicast+0x75c/0x8e0 [ 398.027335][T15913] netlink_sendmsg+0x813/0xb40 [ 398.032639][T15913] ____sys_sendmsg+0x972/0x9f0 [ 398.037950][T15913] ___sys_sendmsg+0x2a5/0x360 [ 398.043255][T15913] __x64_sys_sendmsg+0x1bd/0x2a0 [ 398.048738][T15913] do_syscall_64+0x15f/0xf80 [ 398.053972][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.060419][T15913] [ 398.060419][T15913] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 398.069082][T15913] blk_alloc_queue+0x546/0x680 [ 398.074531][T15913] __blk_mq_alloc_disk+0x197/0x390 [ 398.080192][T15913] nbd_dev_add+0x499/0xb50 [ 398.085159][T15913] nbd_init+0x168/0x1f0 [ 398.089857][T15913] do_one_initcall+0x250/0x870 [ 398.095165][T15913] do_initcall_level+0x104/0x190 [ 398.100648][T15913] do_initcalls+0x59/0xa0 [ 398.105615][T15913] kernel_init_freeable+0x2a6/0x3e0 [ 398.111370][T15913] kernel_init+0x1d/0x1d0 [ 398.116378][T15913] ret_from_fork+0x514/0xb70 [ 398.121510][T15913] ret_from_fork_asm+0x1a/0x30 [ 398.126818][T15913] [ 398.126818][T15913] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 398.134059][T15913] __lock_acquire+0x15a5/0x2cf0 [ 398.139454][T15913] lock_acquire+0x106/0x350 [ 398.144505][T15913] fs_reclaim_acquire+0x71/0x100 [ 398.150031][T15913] __kmalloc_cache_noprof+0x40/0x660 [ 398.155874][T15913] ref_tracker_alloc+0x15a/0x4c0 [ 398.161373][T15913] get_net_track+0x16e/0x230 [ 398.166527][T15913] sk_net_refcnt_upgrade+0xb2/0x130 [ 398.172272][T15913] mptcp_subflow_create_socket+0x32b/0x800 [ 398.178705][T15913] __mptcp_nmpc_sk+0x155/0x790 [ 398.184024][T15913] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 398.190520][T15913] genl_family_rcv_msg_doit+0x22a/0x330 [ 398.196629][T15913] genl_rcv_msg+0x61c/0x7a0 [ 398.201691][T15913] netlink_rcv_skb+0x232/0x4b0 [ 398.207001][T15913] genl_rcv+0x28/0x40 [ 398.211549][T15913] netlink_unicast+0x75c/0x8e0 [ 398.216946][T15913] netlink_sendmsg+0x813/0xb40 [ 398.222435][T15913] ____sys_sendmsg+0x972/0x9f0 [ 398.227750][T15913] ___sys_sendmsg+0x2a5/0x360 [ 398.232982][T15913] __x64_sys_sendmsg+0x1bd/0x2a0 [ 398.238549][T15913] do_syscall_64+0x15f/0xf80 [ 398.243699][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.250148][T15913] [ 398.250148][T15913] other info that might help us debug this: [ 398.250148][T15913] [ 398.260480][T15913] Chain exists of: [ 398.260480][T15913] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6/1 [ 398.260480][T15913] [ 398.274020][T15913] Possible unsafe locking scenario: [ 398.274020][T15913] [ 398.281490][T15913] CPU0 CPU1 [ 398.286963][T15913] ---- ---- [ 398.292345][T15913] lock(k-sk_lock-AF_INET6/1); [ 398.297240][T15913] lock(sk_lock-AF_INET6); [ 398.304286][T15913] lock(k-sk_lock-AF_INET6/1); [ 398.311682][T15913] lock(fs_reclaim); [ 398.315694][T15913] [ 398.315694][T15913] *** DEADLOCK *** [ 398.315694][T15913] [ 398.323851][T15913] 4 locks held by syz.0.2562/15913: [ 398.329062][T15913] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 398.337294][T15913] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 398.346304][T15913] #2: ffff88802a52f520 (msk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 398.357230][T15913] #3: ffff8880533545e0 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 398.368424][T15913] [ 398.368424][T15913] stack backtrace: [ 398.374335][T15913] CPU: 1 UID: 0 PID: 15913 Comm: syz.0.2562 Not tainted syzkaller #0 PREEMPT(full) [ 398.374360][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 398.374371][T15913] Call Trace: [ 398.374378][T15913] [ 398.374387][T15913] dump_stack_lvl+0xe8/0x150 [ 398.374412][T15913] print_circular_bug+0x2e1/0x300 [ 398.374439][T15913] check_noncircular+0x12e/0x150 [ 398.374468][T15913] __lock_acquire+0x15a5/0x2cf0 [ 398.374494][T15913] ? lapic_next_event+0x11/0x20 [ 398.374678][T15913] ? clockevents_program_event+0x491/0x630 [ 398.374707][T15913] ? __pfx_clockevents_program_event+0x10/0x10 [ 398.374729][T15913] ? __kmalloc_cache_noprof+0x40/0x660 [ 398.374751][T15913] lock_acquire+0x106/0x350 [ 398.374771][T15913] ? __kmalloc_cache_noprof+0x40/0x660 [ 398.374794][T15913] ? lockdep_hardirqs_on+0x7a/0x110 [ 398.374820][T15913] ? irqentry_exit+0x218/0x760 [ 398.374844][T15913] fs_reclaim_acquire+0x71/0x100 [ 398.374872][T15913] ? __kmalloc_cache_noprof+0x40/0x660 [ 398.374893][T15913] __kmalloc_cache_noprof+0x40/0x660 [ 398.374916][T15913] ? ref_tracker_alloc+0x15a/0x4c0 [ 398.374940][T15913] ? rcu_is_watching+0x15/0xb0 [ 398.374963][T15913] ref_tracker_alloc+0x15a/0x4c0 [ 398.374990][T15913] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 398.375013][T15913] ? ref_tracker_free+0x522/0x840 [ 398.375037][T15913] ? __pfx_ref_tracker_free+0x10/0x10 [ 398.375060][T15913] ? sk_net_refcnt_upgrade+0x8c/0x130 [ 398.375078][T15913] ? mptcp_subflow_create_socket+0x32b/0x800 [ 398.375097][T15913] ? __mptcp_nmpc_sk+0x155/0x790 [ 398.375115][T15913] ? mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 398.375203][T15913] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 398.375255][T15913] ? net_passive_dec+0x177/0x250 [ 398.375278][T15913] ? __pfx_net_passive_dec+0x10/0x10 [ 398.375303][T15913] get_net_track+0x16e/0x230 [ 398.375330][T15913] sk_net_refcnt_upgrade+0xb2/0x130 [ 398.375349][T15913] mptcp_subflow_create_socket+0x32b/0x800 [ 398.375372][T15913] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 398.375394][T15913] ? do_raw_spin_lock+0x12b/0x2f0 [ 398.375420][T15913] ? lock_sock_nested+0x6a/0x100 [ 398.375442][T15913] __mptcp_nmpc_sk+0x155/0x790 [ 398.375461][T15913] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 398.375476][T15913] ? mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 398.375497][T15913] ? __local_bh_enable_ip+0xd0/0x130 [ 398.375515][T15913] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 398.375543][T15913] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 398.375577][T15913] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 398.375601][T15913] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 398.375628][T15913] genl_family_rcv_msg_doit+0x22a/0x330 [ 398.375652][T15913] ? __asan_memcpy+0x40/0x70 [ 398.375676][T15913] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 398.375706][T15913] ? bpf_lsm_capable+0x9/0x20 [ 398.375724][T15913] ? security_capable+0x7e/0x2c0 [ 398.375749][T15913] genl_rcv_msg+0x61c/0x7a0 [ 398.375776][T15913] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.375799][T15913] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 398.375826][T15913] ? __pfx_ref_tracker_free+0x10/0x10 [ 398.375857][T15913] netlink_rcv_skb+0x232/0x4b0 [ 398.375876][T15913] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.375899][T15913] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.375924][T15913] ? down_read+0x270/0x2e0 [ 398.375941][T15913] ? genl_rcv+0xd/0x40 [ 398.375963][T15913] genl_rcv+0x28/0x40 [ 398.375984][T15913] netlink_unicast+0x75c/0x8e0 [ 398.376016][T15913] netlink_sendmsg+0x813/0xb40 [ 398.376039][T15913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.376059][T15913] ? aa_sock_msg_perm+0xf1/0x1b0 [ 398.376084][T15913] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.376110][T15913] ____sys_sendmsg+0x972/0x9f0 [ 398.376128][T15913] ? __might_fault+0xaf/0x130 [ 398.376154][T15913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.376175][T15913] ? import_iovec+0x73/0xa0 [ 398.376203][T15913] ___sys_sendmsg+0x2a5/0x360 [ 398.376219][T15913] ? __lock_acquire+0x6b5/0x2cf0 [ 398.376241][T15913] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.376271][T15913] ? futex_wake+0x4ac/0x580 [ 398.376308][T15913] ? __fget_files+0x2a/0x420 [ 398.376329][T15913] ? __fget_files+0x3a0/0x420 [ 398.376355][T15913] __x64_sys_sendmsg+0x1bd/0x2a0 [ 398.376374][T15913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.376397][T15913] ? rcu_is_watching+0x15/0xb0 [ 398.376424][T15913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.376444][T15913] do_syscall_64+0x15f/0xf80 [ 398.376470][T15913] ? trace_irq_disable+0x3b/0x140 [ 398.376496][T15913] ? clear_bhb_loop+0x40/0x90 [ 398.376517][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.376535][T15913] RIP: 0033:0x7fd58519ce59 [ 398.376554][T15913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.376571][T15913] RSP: 002b:00007fd5860cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.376594][T15913] RAX: ffffffffffffffda RBX: 00007fd585415fa0 RCX: 00007fd58519ce59 [ 398.376609][T15913] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 398.376621][T15913] RBP: 00007fd585232d6f R08: 0000000000000000 R09: 0000000000000000 [ 398.376633][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.376644][T15913] R13: 00007fd585416038 R14: 00007fd585415fa0 R15: 00007fff4287fb18 [ 398.376665][T15913] [ 398.921967][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'. [ 398.935245][T15914] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 399.541608][T15918] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2564'. [ 399.584908][T15913] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2562'. [ 400.019724][T15910] hsr0: left promiscuous mode [ 400.615868][ C0] net_ratelimit: 18935 callbacks suppressed [ 400.615890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.634322][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.647060][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.659409][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.672417][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.672731][ T3277] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 400.684625][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.710682][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.722937][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.735168][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.396121][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 405.625623][ C0] net_ratelimit: 39780 callbacks suppressed [ 405.625645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.643851][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.656004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.668206][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.680382][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.692582][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.704799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.717020][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.729278][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.741972][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)